Current File : //opt/alt/python27/lib/python2.7/site-packages/setuptools/ssl_support.pyo
�
0��`c @ s d d l Z d d l Z d d l Z d d l Z d d l m Z m Z m Z d d l Z d d l m Z m
Z
y d d l Z Wn e k
r� d Z n Xd d d d d g Z d j � j � Z y e j j Z e j Z Wn e k
r� e Z Z n Xe d k oe e e f k Z y d d
l m Z m Z WnU e k
r�y$ d d l m Z d d l m Z Wq�e k
r�d Z d Z q�Xn Xe s�d
e f d � � YZ n e s�d d � Z d � Z n d e f d � � YZ d e f d � � YZ d d � Z d a d � Z! d � Z" d S( i����N( t urllibt http_clientt map( t ResolutionErrort ExtractionErrort VerifyingHTTPSHandlert find_ca_bundlet is_availablet
cert_pathst
opener_fors�
/etc/pki/tls/certs/ca-bundle.crt
/etc/ssl/certs/ca-certificates.crt
/usr/share/ssl/certs/ca-bundle.crt
/usr/local/share/certs/ca-root.crt
/etc/ssl/cert.pem
/System/Library/OpenSSL/certs/cert.pem
/usr/local/share/certs/ca-root-nss.crt
( t CertificateErrort match_hostname( R
( R R
c B s e Z RS( ( t __name__t
__module__( ( ( sG /opt/alt/python27/lib/python2.7/site-packages/setuptools/ssl_support.pyR
4 s i c
C sR g } | s t S| j d � } | d } | d } | j d � } | | k rg t d t | � � � n | s� | j � | j � k S| d k r� | j d � nY | j d � s� | j d � r� | j t j | � � n" | j t j | � j
d d � � x$ | D] } | j t j | � � q� Wt j d
d j | � d t j
� } | j | � S(
sp Matching according to RFC 6125, section 6.4.3
http://tools.ietf.org/html/rfc6125#section-6.4.3
t .i i t *s, too many wildcards in certificate DNS name: s [^.]+s xn--s \*s [^.]*s \As \.s \Z( t Falset splitt countR
t reprt lowert appendt
startswitht ret escapet replacet compilet joint
IGNORECASEt match(
t dnt hostnamet
max_wildcardst patst partst leftmostt remaindert wildcardst fragt pat( ( sG /opt/alt/python27/lib/python2.7/site-packages/setuptools/ssl_support.pyt _dnsname_match8 s*
"
&c C s[ | s t d � � n g } | j d d
� } xC | D]; \ } } | d k r4 t | | � r_ d S| j | � q4 q4 W| s� xc | j d d � D]L } xC | D]; \ } } | d k r� t | | � r� d S| j | � q� q� Wq� Wn t | � d k r t d | d j t t | � � f � � n; t | � d k rKt d
| | d f � � n t d � � d S( s= Verify that *cert* (in decoded format as returned by
SSLSocket.getpeercert()) matches the *hostname*. RFC 2818 and RFC 6125
rules are followed, but IP addresses are not accepted for *hostname*.
CertificateError is raised on failure. On success, the function
returns nothing.
s empty or no certificatet subjectAltNamet DNSNt subjectt
commonNamei s& hostname %r doesn't match either of %ss , s hostname %r doesn't match %ri s= no appropriate commonName or subjectAltName fields were found( ( ( t
ValueErrort getR( R t lenR
R R R ( t certR t dnsnamest sant keyt valuet sub( ( sG /opt/alt/python27/lib/python2.7/site-packages/setuptools/ssl_support.pyR l s. %c B s e Z d Z d � Z d � Z RS( s= Simple verifying handler: no auth, subclasses, timeouts, etc.c C s | | _ t j | � d S( N( t ca_bundlet HTTPSHandlert __init__( t selfR6 ( ( sG /opt/alt/python27/lib/python2.7/site-packages/setuptools/ssl_support.pyR8 � s c s � j � f d � | � S( Nc s t | � j | � S( N( t VerifyingHTTPSConnR6 ( t hostt kw( R9 ( sG /opt/alt/python27/lib/python2.7/site-packages/setuptools/ssl_support.pyt <lambda>� t ( t do_open( R9 t req( ( R9 sG /opt/alt/python27/lib/python2.7/site-packages/setuptools/ssl_support.pyt
https_open� s ( R R
t __doc__R8 RA ( ( ( sG /opt/alt/python27/lib/python2.7/site-packages/setuptools/ssl_support.pyR � s R: c B s e Z d Z d � Z d � Z RS( s@ Simple verifying connection: no auth, subclasses, timeouts, etc.c K s t j | | | � | | _ d S( N( t HTTPSConnectionR8 R6 ( R9 R; R6 R< ( ( sG /opt/alt/python27/lib/python2.7/site-packages/setuptools/ssl_support.pyR8 � s c C s� t j | j | j f t | d d � � } t | d � rj t | d d � rj | | _ | j � | j } n | j } t
j | d t
j d | j
�| _ y t | j j � | � Wn4 t k
r� | j j t j � | j j � � n Xd S( Nt source_addresst _tunnelt _tunnel_hostt cert_reqst ca_certs( t sockett create_connectionR; t portt getattrt Nonet hasattrt sockRE RF t sslt wrap_sockett
CERT_REQUIREDR6 R t getpeercertR
t shutdownt SHUT_RDWRt close( R9 RO t actual_host( ( sG /opt/alt/python27/lib/python2.7/site-packages/setuptools/ssl_support.pyt connect� s $!
( R R
RB R8 RX ( ( ( sG /opt/alt/python27/lib/python2.7/site-packages/setuptools/ssl_support.pyR: � s c C s" t j j t | p t � � � j S( s@ Get a urlopen() replacement that uses ca_bundle for verification( R t requestt build_openerR R t open( R6 ( ( sG /opt/alt/python27/lib/python2.7/site-packages/setuptools/ssl_support.pyR � s c sw t d k r t j Sy d d l m � Wn t k
r; d SXd � f � � f d � � Y� � d d d g � a t j S( Ni����( t CertFilet
MyCertFilec s, e Z d d � f d � Z � f d � Z RS( c sL � j | � x | D] } | j | � q W| j | � t j | j � d S( N( R8 t addstoret addcertst atexitt registerRV ( R9 t storest certst store( R\ ( sG /opt/alt/python27/lib/python2.7/site-packages/setuptools/ssl_support.pyR8 � s
c s/ y t � | � j � Wn t k
r* n Xd S( N( t superRV t OSError( R9 ( R] ( sG /opt/alt/python27/lib/python2.7/site-packages/setuptools/ssl_support.pyRV � s
( ( ( R R
R8 RV ( ( R\ R] ( sG /opt/alt/python27/lib/python2.7/site-packages/setuptools/ssl_support.pyR] � s Rb t CAt ROOT( t _wincertsRM t namet wincertstoreR\ t ImportError( ( ( R\ R] sG /opt/alt/python27/lib/python2.7/site-packages/setuptools/ssl_support.pyt get_win_certfile� s
c C ss t j d k r t � Sx$ t D] } t j j | � r | Sq Wy t j d d � SWn t t t
f k
rn d SXd S( s* Return an existing CA bundle path, or Nonet ntt certifis
cacert.pemN( t osRj Rm R t patht isfilet
pkg_resourcest resource_filenameRl R R RM ( t cert_path( ( sG /opt/alt/python27/lib/python2.7/site-packages/setuptools/ssl_support.pyR � s
(# Rp RI R` R t setuptools.extern.six.movesR R R Rs R R RP Rl RM t __all__t stripR R RY R7 RC t AttributeErrort objectR R
R t backports.ssl_match_hostnameR- R( R R: R Ri Rm R ( ( ( sG /opt/alt/python27/lib/python2.7/site-packages/setuptools/ssl_support.pyt <module> sN
4 )
!
Mini Shell