abc ! @@ s d Z d d l m Z d d l Z d d l Z d d l Z d d l Z d d l Z d d l Z d d l
Z
d d l Z d d l Z d d l
m Z d d l m Z m Z m Z d d l m Z m Z m Z m Z y d d l m Z Wn' e k
r
e Z d d
l m Z n Xy e d Wn e k
r;e d n Xd
d g Z e Z! e j! Z" e j# j$ Z% e j& Z' e j( Z) d Z* e j+ e j, e j- e j. e j/ e j0 e j1 e j2 e j3 e j4 e j5 e j6 e j7 e j8 e j9 e j: e j; e j< e j= e j> e j? e j@ e jA e jB e jC e jD e jE e jF e jG e jH e jI e jJ e jK g! ZL i e jM e jN f e
jO 6ZP eQ e
d re jR e jR f eP e
jS
Undo monkey-patching by :func:`inject_into_urllib3`.
N( t orig_util_SSLContextR R R t orig_util_HAS_SNIR t FalseR ( ( ( sO /usr/lib/python2.7/site-packages/pip/_vendor/urllib3/contrib/securetransport.pyR
s
c C@ s d } yt j | } | d k r+ t j S| j } | d } | j } d } d } t j | j | } t
| }
y x | | k r| d k s | d k r t j | g | } | s t j
t j d q n | j |
| | ! } | | 7} | s~ | s t j SPq~ q~ WWnV t j
k
rl}
|
j } | d k rm| t j k rm| t j k rct j S qmn X| | d <| | k rt j Sd SWn/ t k
r}
| d k r|
| _ n t j SXd S( ss
SecureTransport read callback. This is called by ST to request that data
be returned from the socket.
i s timed outN( t Nonet _connection_refst getR t errSSLInternalt sockett
gettimeoutt ctypest c_chart from_addresst
memoryviewR t
wait_for_readt errort errnot EAGAINt recv_intot errSSLClosedGracefult
ECONNRESETt errSSLClosedAbortt errSSLWouldBlockt Exceptiont
_exception( t
connection_idt data_buffert data_length_pointert wrapped_sockett base_sockett requested_lengtht timeoutR( t
read_countt buffert buffer_viewt readablest
chunk_sizet e( ( sO /usr/lib/python2.7/site-packages/pip/_vendor/urllib3/contrib/securetransport.pyt _read_callback sN
c
C@ s d } yet j | } | d k r+ t j S| j } | d } t j | | } | j } d } d } y x | | k r | d k s | d k r t j
| g | }
|
s t j t j
d q n | j | } | | 7} | | } qn WWnV t j k
rH} | j } | d k rI| t j
k rI| t j k r?t j S qIn X| | d <| | k rft j Sd SWn/ t k
r} | d k r| | _ n t j SXd S( sx
SecureTransport write callback. This is called by ST to request that data
actually be sent on the network.
i s timed outN( R R R R R R! R# t string_atR" R t wait_for_writeR( R) R* t sendR- R. R/ R0 R1 (
R2 R3 R4 R5 R6 t bytes_to_writet dataR8 R( t sentt writablest
chunk_sentR> ( ( sO /usr/lib/python2.7/site-packages/pip/_vendor/urllib3/contrib/securetransport.pyt _write_callback sD
t
WrappedSocketc B@ s e Z d Z d Z e j d Z d Z d Z d Z d Z
d Z d Z d d Z d
Z d Z d Z d
Z d Z d Z e d Z d Z d Z RS( s
API-compatibility wrapper for Python's OpenSSL wrapped socket object.
Note: _makefile_refs, _drop(), and _reuse() are needed for the garbage
collector of PyPy.
c C@ sn | | _ d | _ d | _ t | _ d | _ d | _ d | _ d | _ | j j
| _ | j j d d S( Ni (
R! R t contextt _makefile_refsR t _closedR1 t _keychaint
_keychain_dirt _client_cert_chainR" t _timeoutt
settimeout( t selfR! ( ( sO /usr/lib/python2.7/site-packages/pip/_vendor/urllib3/contrib/securetransport.pyt __init__. s c c@ sG d | _ d V| j d k rC | j d } | _ | j | n d S( s]
A context manager that can be used to wrap calls that do I/O from
SecureTransport. If any of the I/O callbacks hit an exception, this
context manager will correctly propagate the exception after the fact.
This avoids silently swallowing those exceptions.
It also correctly forces the socket closed.
N( R R1 t close( RR t exception( ( sO /usr/lib/python2.7/site-packages/pip/_vendor/urllib3/contrib/securetransport.pyt _raise_on_error@ s
c C@ sE t j t t t } t j | j | t t } t | d S( s4
Sets up the allowed ciphers. By default this matches the set in
util.ssl_.DEFAULT_CIPHERS, at least as supported by macOS. This is done
custom and doesn't allow changing at this time, mostly because parsing
OpenSSL cipher strings is going to be a freaking nightmare.
N( R t SSLCipherSuitet lent
CIPHER_SUITESt SSLSetEnabledCiphersRJ R ( RR t cipherst result( ( sO /usr/lib/python2.7/site-packages/pip/_vendor/urllib3/contrib/securetransport.pyt _set_ciphersU s c C@ s | s
d St j j | rC t | d } | j } Wd QXn d } t j } z t | } t j | j
t j | } t
| | s t j d n t j | | } t
| t j | t } t
| t j } t j | t j | } t
| Wd | r't j | n | d k rCt j | n Xt j t j f } | j | k r~t j d | j n d S( s
Called when we have set custom validation. We do this in two cases:
first, when cert validation is entirely disabled; and second, when
using a custom trust DB.
Nt rbs Failed to copy trust references) certificate verify failed, error code: %d( t ost patht isfilet opent readR R t SecTrustRefR t SSLCopyPeerTrustRJ R# t byrefR t sslt SSLErrort SecTrustSetAnchorCertificatest! SecTrustSetAnchorCertificatesOnlyR t SecTrustResultTypet SecTrustEvaluateR t CFReleaseR t kSecTrustResultUnspecifiedt kSecTrustResultProceedt value( RR t verifyt trust_bundlet ft
cert_arrayt trustR\ t trust_resultt successes( ( sO /usr/lib/python2.7/site-packages/pip/_vendor/urllib3/contrib/securetransport.pyt _custom_validateb s@
c C@ s[ t j d t j t j | _ t j | j t t } t
| t @ t | d }
x |
t
k rw |
d d }
qZ W| t
|
Z ( > ic C@ s% | j d 7_ t | | | d t S( Ni RT ( RK R R ( RR t modet bufsize( ( sO /usr/lib/python2.7/site-packages/pip/_vendor/urllib3/contrib/securetransport.pyt makefile s t rc O@ s d } t | | | | | S( Ni ( R
( RR R t bufferingt argst kwargs( ( sO /usr/lib/python2.7/site-packages/pip/_vendor/urllib3/contrib/securetransport.pyR s R c B@ s e Z d Z d Z e d Z e j d Z e d Z e j d Z e d Z e j d Z d Z d Z
d
Z d d d d Z
d d d Z e e e d d
Z RS( s
I am a wrapper class for the SecureTransport library, to translate the
interface of the standard library ``SSLContext`` object to calls into
SecureTransport.
c C@ sP t | \ | _ | _ d | _ t | _ d | _ d | _ d | _ d | _
d S( Ni ( t _protocol_to_min_maxt _min_versiont _max_versiont _optionsR t _verifyR t
_trust_bundlet _client_certt _client_keyt _client_key_passphrase( RR t protocol( ( sO /usr/lib/python2.7/site-packages/pip/_vendor/urllib3/contrib/securetransport.pyRS s c C@ s t S( s
SecureTransport cannot have its hostname checking disabled. For more,
see the comment on getpeercert() in this file.
( R ( RR ( ( sO /usr/lib/python2.7/site-packages/pip/_vendor/urllib3/contrib/securetransport.pyt check_hostname s c C@ s d S( s
SecureTransport cannot have its hostname checking disabled. For more,
see the comment on getpeercert() in this file.
N( ( RR Rp ( ( sO /usr/lib/python2.7/site-packages/pip/_vendor/urllib3/contrib/securetransport.pyR s c C@ s | j S( N( R ( RR ( ( sO /usr/lib/python2.7/site-packages/pip/_vendor/urllib3/contrib/securetransport.pyt options s c C@ s
| | _ d S( N( R ( RR Rp ( ( sO /usr/lib/python2.7/site-packages/pip/_vendor/urllib3/contrib/securetransport.pyR s c C@ s | j r t j St j S( N( R Rg t
CERT_REQUIREDt CERT_NONE( RR ( ( sO /usr/lib/python2.7/site-packages/pip/_vendor/urllib3/contrib/securetransport.pyt verify_mode s c C@ s" | t j k r t n t | _ d S( N( Rg R R R R ( RR Rp ( ( sO /usr/lib/python2.7/site-packages/pip/_vendor/urllib3/contrib/securetransport.pyR s c C@ s d S( N( ( RR ( ( sO /usr/lib/python2.7/site-packages/pip/_vendor/urllib3/contrib/securetransport.pyt set_default_verify_paths s
c C@ s
| j S( N( R ( RR ( ( sO /usr/lib/python2.7/site-packages/pip/_vendor/urllib3/contrib/securetransport.pyt load_default_certs s c C@ s% | t j j k r! t d n d S( Ns5 SecureTransport doesn't support custom cipher strings( R R t DEFAULT_CIPHERSR ( RR R[ ( ( sO /usr/lib/python2.7/site-packages/pip/_vendor/urllib3/contrib/securetransport.pyt set_ciphers s c C@ s. | d k r t d n | p$ | | _ d S( Ns1 SecureTransport does not support cert directories( R R R ( RR t cafilet capatht cadata( ( sO /usr/lib/python2.7/site-packages/pip/_vendor/urllib3/contrib/securetransport.pyt load_verify_locations s c C@ s | | _ | | _ | | _ d S( N( R R t _client_cert_passphrase( RR t certfilet keyfilet password( ( sO /usr/lib/python2.7/site-packages/pip/_vendor/urllib3/contrib/securetransport.pyt load_cert_chain s c C@ sG t | } | j | | j | j | j | j | j | j | j | S( N( RI R R R R R R R R ( RR t sockt server_sidet do_handshake_on_connectt suppress_ragged_eofsR R5 ( ( sO /usr/lib/python2.7/site-packages/pip/_vendor/urllib3/contrib/securetransport.pyt wrap_socket s N( R R R RS t propertyR t setterR R R R R R R R R R R ( ( ( sO /usr/lib/python2.7/site-packages/pip/_vendor/urllib3/contrib/securetransport.pyR s
(g R t
__future__R R R# R) t os.pathR_ R R! Rg t threadingt weakrefR R t _securetransport.bindingsR R R t _securetransport.low_levelR R R R R t ImportErrorR t packages.backports.makefileR
R& t NameErrort __all__R R R R R R t WeakValueDictionaryR t LockR R t TLS_AES_256_GCM_SHA384t TLS_CHACHA20_POLY1305_SHA256t TLS_AES_128_GCM_SHA256t' TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384t% TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384t' TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256t% TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256t# TLS_DHE_DSS_WITH_AES_256_GCM_SHA384t# TLS_DHE_RSA_WITH_AES_256_GCM_SHA384t# TLS_DHE_DSS_WITH_AES_128_GCM_SHA256t# TLS_DHE_RSA_WITH_AES_128_GCM_SHA256t' TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384t% TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384t$ TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHAt" TLS_ECDHE_RSA_WITH_AES_256_CBC_SHAt# TLS_DHE_RSA_WITH_AES_256_CBC_SHA256t# TLS_DHE_DSS_WITH_AES_256_CBC_SHA256t TLS_DHE_RSA_WITH_AES_256_CBC_SHAt TLS_DHE_DSS_WITH_AES_256_CBC_SHAt' TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256t% TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256t$ TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHAt" TLS_ECDHE_RSA_WITH_AES_128_CBC_SHAt# TLS_DHE_RSA_WITH_AES_128_CBC_SHA256t# TLS_DHE_DSS_WITH_AES_128_CBC_SHA256t TLS_DHE_RSA_WITH_AES_128_CBC_SHAt TLS_DHE_DSS_WITH_AES_128_CBC_SHAt TLS_RSA_WITH_AES_256_GCM_SHA384t TLS_RSA_WITH_AES_128_GCM_SHA256t TLS_RSA_WITH_AES_256_CBC_SHA256t TLS_RSA_WITH_AES_128_CBC_SHA256t TLS_RSA_WITH_AES_256_CBC_SHAt TLS_RSA_WITH_AES_128_CBC_SHARY t
kTLSProtocol1t kTLSProtocol12t PROTOCOL_SSLv23R t hasattrt
kSSLProtocol2R t
kSSLProtocol3R R t kTLSProtocol11R R R R R
R? RH t SSLReadFuncR} t SSLWriteFuncR~ t objectRI R R ( ( ( sO /usr/lib/python2.7/site-packages/pip/_vendor/urllib3/contrib/securetransport.pyt s "
9 5