U
Ê—Re~ ã @ st d Z ddlZddlZz ddlZW n ek
r8 dZY nX dZG dd„ deƒZddd„Zd d
„ Z d d „ Z
d
d„ Z dS )zJThe match_hostname() function from Python 3.3.3, essential when using SSL.é Nz3.5.0.1c @ s e Zd ZdS )ÚCertificateErrorN)Ú__name__Ú
__module__Ú __qualname__© r r úš/builddir/build/BUILDROOT/alt-python38-pip-22.2.1-2.el8.x86_64/opt/alt/python38/lib/python3.8/site-packages/pip/_vendor/urllib3/util/ssl_match_hostname.pyr s r é c
C sò g }| s dS | d¡}|d }|dd… }| d¡}||krLtdt| ƒ ƒ‚|s`| ¡ | ¡ kS |dkrt| d¡ n>| d ¡sˆ| d ¡rš| t |¡¡ n| t |¡ d
d ¡¡ |D ]}| t |¡¡ q¶t
d d
|¡ d tj ¡} |
|¡S )zhMatching according to RFC 6125, section 6.4.3
http://tools.ietf.org/html/rfc6125#section-6.4.3
FÚ.r r NÚ*z,too many wildcards in certificate DNS name: z[^.]+zxn--z\*z[^.]*z\Az\.z\Z)ÚsplitÚcountr ÚreprÚlowerÚappendÚ
startswithÚreÚescapeÚreplaceÚcompileÚjoinÚ
IGNORECASEÚmatch)
ÚdnÚhostnameÚ
max_wildcardsÚpatsÚpartsÚleftmostÚ remainderÚ wildcardsÚfragÚpatr r r Ú_dnsname_match s,
ÿ r" c C s& t | tƒr"tjdk r"t| ddd} | S )N)é ÚasciiÚstrict)ÚencodingÚerrors)Ú
isinstanceÚstrÚsysÚ version_infoÚunicode)Úobjr r r Ú _to_unicodeO s r. c C s t t| ƒ ¡ ¡}||kS )zˆExact matching of IP addresses.
RFC 6125 explicitly doesn't define an algorithm for this
(section 1.7.2 - "Out of Scope").
)Ú ipaddressÚ
ip_addressr. Úrstrip)ÚipnameÚhost_ipÚipr r r Ú_ipaddress_matchV s r5 c C sz | s t dƒ‚zt t|ƒ¡}W n> tt fk
r: d}Y n$ tk
r\ tdkrVd}n‚ Y nX g }| dd¡}|D ]^\}}|dkr¦|dkršt||ƒrš dS | |¡ qr|dkrr|dk rÆt ||ƒrÆ dS | |¡ qr|s | dd¡D ]8}|D ].\}}|dkrìt||ƒr dS | |¡ qìqät
|ƒd krJt d
|d t
t|ƒ¡f ƒ‚n,t
|ƒd krnt d ||d
f ƒ‚nt dƒ‚dS )a) Verify that *cert* (in decoded format as returned by
SSLSocket.getpeercert()) matches the *hostname*. RFC 2818 and RFC 6125
rules are followed, but IP addresses are not accepted for *hostname*.
CertificateError is raised on failure. On success, the function
returns nothing.
ztempty or no certificate, match_hostname needs a SSL socket or SSL context with either CERT_OPTIONAL or CERT_REQUIREDNÚsubjectAltNamer ÚDNSz
IP AddressÚsubjectÚ
commonNamer z&hostname %r doesn't match either of %sz, z hostname %r doesn't match %rr z=no appropriate commonName or subjectAltName fields were found)Ú
ValueErrorr/ r0 r. Ú UnicodeErrorÚAttributeErrorÚgetr" r r5 Úlenr r Úmapr
)Úcertr r3 ÚdnsnamesÚsanÚkeyÚvalueÚsubr r r Úmatch_hostnameb sR ÿ ÿÿÿrF )r ) Ú__doc__r r* r/ Ú ImportErrorÚ __version__r: r r" r. r5 rF r r r r Ú s
6