Re c @ sc d d l Z d d l Z d d l Z d d l Z d d l Z d d l m Z m Z d d l m Z y d d l Z Wn e
k
r d Z Yn Xd d d d d g Z d j
j Z e Z Z xp d
d d g f d
d d g f f D]J \ Z Z x; e D]3 Z y e d e e f Wq e
k
r(Yq Xq Wq We d k oLe e e f k Z y d d l m Z m Z WnW e
k
ry$ d d l m Z d d l m Z Wn e
k
rd Z d Z Yn XYn Xe sGd d d e Z n e sd d d Z d d Z n Gd d d e Z Gd d d e Z d d d Z d a d d Z! d! d Z" d S(" i N( u ResolutionErroru ExtractionError( u urllib2u VerifyingHTTPSHandleru find_ca_bundleu is_availableu
cert_pathsu
opener_foru
/etc/pki/tls/certs/ca-bundle.crt
/etc/ssl/certs/ca-certificates.crt
/usr/share/ssl/certs/ca-bundle.crt
/usr/local/share/certs/ca-root.crt
/etc/ssl/cert.pem
/System/Library/OpenSSL/certs/cert.pem
u HTTPSHandleru urllib2u urllib.requestu HTTPSConnectionu httplibu http.clientu from %s import %s( u CertificateErroru match_hostname( u CertificateError( u match_hostnamec B s | Ee Z d Z d S( u CertificateErrorN( u __name__u
__module__u __qualname__( u
__locals__( ( u/ /tmp/pip-k8wh6o-build/setuptools/ssl_support.pyu CertificateError8 s u CertificateErrori c
C sX g } | s d S| j d } | d } | d d } | j d } | | k rm t d t | n | s | j | j k S| d k r | j d nY | j d s | j d r | j t j | n" | j t j | j
d d
x$ | D] } | j t j | qWt j d d j | d
t j
} | j | S( up Matching according to RFC 6125, section 6.4.3
http://tools.ietf.org/html/rfc6125#section-6.4.3
u .i i Nu *u, too many wildcards in certificate DNS name: u [^.]+u xn--u \*u [^.]*u \Au \.u \ZF( u Falseu splitu countu CertificateErroru repru loweru appendu
startswithu reu escapeu replaceu compileu joinu
IGNORECASEu match(
u dnu hostnameu
max_wildcardsu patsu partsu leftmostu remainderu wildcardsu fragu pat( ( u/ /tmp/pip-k8wh6o-build/setuptools/ssl_support.pyu _dnsname_match< s*
"
&u _dnsname_matchc C s[ | s t d n g } | j d f } xC | D]; \ } } | d k r4 t | | r_ d S| j | q4 q4 W| s xc | j d f D]L } xC | D]; \ } } | d k r t | | r d S| j | q q Wq Wn t | d k r t d | d j t t | f n; t | d k rKt d
| | d f n t d d S(
u= Verify that *cert* (in decoded format as returned by
SSLSocket.getpeercert()) matches the *hostname*. RFC 2818 and RFC 6125
rules are followed, but IP addresses are not accepted for *hostname*.
CertificateError is raised on failure. On success, the function
returns nothing.
u empty or no certificateu subjectAltNameu DNSNu subjectu
commonNamei u& hostname %r doesn't match either of %su , u hostname %r doesn't match %ri u= no appropriate commonName or subjectAltName fields were found( u
ValueErroru getu _dnsname_matchu appendu lenu CertificateErroru joinu mapu repr( u certu hostnameu dnsnamesu sanu keyu valueu sub( ( u/ /tmp/pip-k8wh6o-build/setuptools/ssl_support.pyu match_hostnamep s. %u match_hostnamec B s2 | Ee Z d Z d Z d d Z d d Z d S( u VerifyingHTTPSHandleru= Simple verifying handler: no auth, subclasses, timeouts, etc.c C s | | _ t j | d S( N( u ca_bundleu HTTPSHandleru __init__( u selfu ca_bundle( ( u/ /tmp/pip-k8wh6o-build/setuptools/ssl_support.pyu __init__ s u VerifyingHTTPSHandler.__init__c s j f d d | S( Nc s t | j | S( N( u VerifyingHTTPSConnu ca_bundle( u hostu kw( u self( u/ /tmp/pip-k8wh6o-build/setuptools/ssl_support.pyu s u2 VerifyingHTTPSHandler.https_open..( u do_open( u selfu req( ( u selfu/ /tmp/pip-k8wh6o-build/setuptools/ssl_support.pyu
https_open s u VerifyingHTTPSHandler.https_openN( u __name__u
__module__u __qualname__u __doc__u __init__u
https_open( u
__locals__( ( u/ /tmp/pip-k8wh6o-build/setuptools/ssl_support.pyu VerifyingHTTPSHandler s c B s2 | Ee Z d Z d Z d d Z d d Z d S( u VerifyingHTTPSConnu@ Simple verifying connection: no auth, subclasses, timeouts, etc.c K s t j | | | | | _ d S( N( u HTTPSConnectionu __init__u ca_bundle( u selfu hostu ca_bundleu kw( ( u/ /tmp/pip-k8wh6o-build/setuptools/ssl_support.pyu __init__ s u VerifyingHTTPSConn.__init__c C s t j | j | j f t | d d } t | d ra t | d d ra | | _ | j n t j
| d t j d | j | _ y t
| j j | j Wn5 t k
r | j j t j | j j Yn Xd S( Nu source_addressu _tunnelu _tunnel_hostu cert_reqsu ca_certs( u socketu create_connectionu hostu portu getattru Noneu hasattru socku _tunnelu sslu wrap_socketu
CERT_REQUIREDu ca_bundleu match_hostnameu getpeercertu CertificateErroru shutdownu SHUT_RDWRu close( u selfu sock( ( u/ /tmp/pip-k8wh6o-build/setuptools/ssl_support.pyu connect s $!
u VerifyingHTTPSConn.connectN( u __name__u
__module__u __qualname__u __doc__u __init__u connect( u
__locals__( ( u/ /tmp/pip-k8wh6o-build/setuptools/ssl_support.pyu VerifyingHTTPSConn s u VerifyingHTTPSConnc C s t j t | p t j S( u@ Get a urlopen() replacement that uses ca_bundle for verification( u urllib2u build_openeru VerifyingHTTPSHandleru find_ca_bundleu open( u ca_bundle( ( u/ /tmp/pip-k8wh6o-build/setuptools/ssl_support.pyu
opener_for s c sx t d k r t j Sy d d l m Wn t k
r? d SYn XG f d d d } | d d d g a t j S( Ni ( u CertFilec s, | Ee Z d Z f f f d d Z d S( u$ get_win_certfile..MyCertFilec sL j | x | D] } | j | q W| j | t j | j d S( N( u __init__u addstoreu addcertsu atexitu registeru close( u selfu storesu certsu store( u CertFile( u/ /tmp/pip-k8wh6o-build/setuptools/ssl_support.pyu __init__ s
u- get_win_certfile..MyCertFile.__init__N( u __name__u
__module__u __qualname__u __init__( u
__locals__( u CertFile( u/ /tmp/pip-k8wh6o-build/setuptools/ssl_support.pyu
MyCertFile s u
MyCertFileu storesu CAu ROOT( u _wincertsu Noneu nameu wincertstoreu CertFileu ImportError( u
MyCertFile( ( u CertFileu/ /tmp/pip-k8wh6o-build/setuptools/ssl_support.pyu get_win_certfile s
u get_win_certfilec
C sw t j d k r t Sx$ t D] } t j j | r | Sq Wy t j d d SWn t t t
f k
rr d SYn Xd S( u* Return an existing CA bundle path, or Noneu ntu certifiu
cacert.pemN( u osu nameu get_win_certfileu
cert_pathsu pathu isfileu
pkg_resourcesu resource_filenameu ImportErroru ResolutionErroru ExtractionErroru None( u cert_path( ( u/ /tmp/pip-k8wh6o-build/setuptools/ssl_support.pyu find_ca_bundle s
(# u osu socketu atexitu reu
pkg_resourcesu ResolutionErroru ExtractionErroru setuptools.compatu urllib2u sslu ImportErroru Noneu __all__u stripu splitu
cert_pathsu objectu HTTPSHandleru HTTPSConnectionu whatu whereu moduleu execu is_availableu CertificateErroru match_hostnameu backports.ssl_match_hostnameu
ValueErroru _dnsname_matchu VerifyingHTTPSHandleru VerifyingHTTPSConnu
opener_foru _wincertsu get_win_certfileu find_ca_bundle( ( ( u/ /tmp/pip-k8wh6o-build/setuptools/ssl_support.pyu sV
4)