o
    ûÞhM  ã                   @  s(  U d Z ddlmZ ddlZddlmZ zddlmZ W n e	y,   G dd„ de
ƒZY nw ddlZddlZddlZddlmZ dd	lmZ dd
lmZ ddlmZ ejrZddlmZ ddgZejjejjejjejjejejjiZ de!d< e"edƒr‡e"ejdƒr‡ejj#e ej$< e"edƒr™e"ejdƒr™ejj%e ej&< ej'ejj(ej)ejj*ej+ejj*ejj, iZ-dd„ e- .¡ D ƒZ/e0ejddƒe0ejddƒB Z1de!d< e0ejddƒZ2de!d< e0ejddƒZ3de!d< e0ejd dƒZ4de!d!< e0ejd"dƒZ5de!d#< ej6j7e1ej6j8e1ej6j9e1e2B ej6j:e1e2B e3B ej6j;e1e2B e3B e4B ej6j<e1e2B e3B e4B iZ=de!d$< ej6j7e1e2B e3B e4B e5B ej6j8e1e3B e4B e5B ej6j9e1e4B e5B ej6j:e1e5B ej6j;e1ej6j<e1iZ>de!d%< d&Z?ejj@ZAe BeC¡ZDdDd)d„ZEdDd*d„ZFdDd+d,„ZGdEd0d1„ZHdFd5d6„ZIG d7d8„ d8ƒZJejKeJ_KG d9d:„ d:ƒZLdGdBdC„ZMdS )Haï  
Module for using pyOpenSSL as a TLS backend. This module was relevant before
the standard library ``ssl`` module supported SNI, but now that we've dropped
support for Python 2.7 all relevant Python versions support SNI so
**this module is no longer recommended**.

This needs the following packages installed:

* `pyOpenSSL`_ (tested with 16.0.0)
* `cryptography`_ (minimum 1.3.4, from pyopenssl)
* `idna`_ (minimum 2.0)

However, pyOpenSSL depends on cryptography, so while we use all three directly here we
end up having relatively few packages required.

You can install them with the following command:

.. code-block:: bash

    $ python -m pip install pyopenssl cryptography idna

To activate certificate checking, call
:func:`~urllib3.contrib.pyopenssl.inject_into_urllib3` from your Python code
before you begin making HTTP requests. This can be done in a ``sitecustomize``
module, or at any other time before your application begins using ``urllib3``,
like this:

.. code-block:: python

    try:
        import urllib3.contrib.pyopenssl
        urllib3.contrib.pyopenssl.inject_into_urllib3()
    except ImportError:
        pass

.. _pyopenssl: https://www.pyopenssl.org
.. _cryptography: https://cryptography.io
.. _idna: https://github.com/kjd/idna
é    )ÚannotationsN)Úx509)ÚUnsupportedExtensionc                   @  s   e Zd ZdS )r   N)Ú__name__Ú
__module__Ú__qualname__© r   r   úY/var/www/html/premium_crap/venv/lib/python3.10/site-packages/urllib3/contrib/pyopenssl.pyr   2   s    r   )ÚBytesIO)Úsocket)Útimeouté   )Úutil©ÚX509Úinject_into_urllib3Úextract_from_urllib3zdict[int, int]Ú_openssl_versionsÚPROTOCOL_TLSv1_1ÚTLSv1_1_METHODÚPROTOCOL_TLSv1_2ÚTLSv1_2_METHODc                 C  s   i | ]\}}||“qS r   r   )Ú.0ÚkÚvr   r   r	   Ú
<dictcomp>Y   s    r   ÚOP_NO_SSLv2ÚOP_NO_SSLv3ÚintÚ_OP_NO_SSLv2_OR_SSLv3ÚOP_NO_TLSv1Ú_OP_NO_TLSv1ÚOP_NO_TLSv1_1Ú_OP_NO_TLSv1_1ÚOP_NO_TLSv1_2Ú_OP_NO_TLSv1_2ÚOP_NO_TLSv1_3Ú_OP_NO_TLSv1_3Ú_openssl_to_ssl_minimum_versionÚ_openssl_to_ssl_maximum_versioni @  ÚreturnÚNonec                   C  s&   t ƒ  tt_ttj_dt_dtj_dS )z7Monkey-patch urllib3 with PyOpenSSL-backed SSL-support.TN)Ú_validate_dependencies_metÚPyOpenSSLContextr   Ú
SSLContextÚssl_ÚIS_PYOPENSSLr   r   r   r	   r   ‹   s
   c                   C  s    t t_t tj_dt_dtj_dS )z4Undo monkey-patching by :func:`inject_into_urllib3`.FN)Úorig_util_SSLContextr   r.   r/   r0   r   r   r   r	   r   –   s   c                  C  sR   ddl m}  t| ddƒdu rtdƒ‚ddlm} |ƒ }t|ddƒdu r'tdƒ‚dS )	z{
    Verifies that PyOpenSSL's package-level dependencies have been met.
    Throws `ImportError` if they are not met.
    r   )Ú
ExtensionsÚget_extension_for_classNzX'cryptography' module missing required functionality.  Try upgrading to v1.3.4 or newer.r   Ú_x509zS'pyOpenSSL' module missing required functionality. Try upgrading to v0.14 or newer.)Úcryptography.x509.extensionsr2   ÚgetattrÚImportErrorÚOpenSSL.cryptor   )r2   r   r   r   r   r	   r,   Ÿ   s   ÿÿÿr,   ÚnameÚstrú
str | Nonec                 C  s4   d
dd„}d| v r| S || ƒ}|du rdS |  d	¡S )a%  
    Converts a dNSName SubjectAlternativeName field to the form used by the
    standard library on the given Python version.

    Cryptography produces a dNSName as a unicode string that was idna-decoded
    from ASCII bytes. We need to idna-encode that string to get it back, and
    then on Python 3 we also need to convert to unicode via UTF-8 (the stdlib
    uses PyUnicode_FromStringAndSize on it, which decodes via UTF-8).

    If the name cannot be idna-encoded then we return None signalling that
    the name given should be skipped.
    r9   r:   r*   úbytes | Nonec                 S  sl   ddl }z%dD ]}|  |¡r#| t|ƒd… } | d¡| | ¡   W S q| | ¡W S  |jjy5   Y dS w )zÒ
        Borrowed wholesale from the Python Cryptography Project. It turns out
        that we can't just safely call `idna.encode`: it can explode for
        wildcard names. This avoids that problem.
        r   N)z*.Ú.Úascii)ÚidnaÚ
startswithÚlenÚencodeÚcoreÚ	IDNAError)r9   r?   Úprefixr   r   r	   Úidna_encodeÇ   s   
þÿz'_dnsname_to_stdlib.<locals>.idna_encodeú:Núutf-8)r9   r:   r*   r<   )Údecode)r9   rF   Úencoded_namer   r   r	   Ú_dnsname_to_stdlib¹   s   

rK   Ú	peer_certr   úlist[tuple[str, str]]c                 C  s°   |   ¡ }z
|j tj¡j}W n+ tjy   g  Y S  tjttj	t
fy9 } zt d|¡ g W  Y d}~S d}~ww dd„ tt| tj¡ƒD ƒ}| dd„ | tj¡D ƒ¡ |S )zU
    Given an PyOpenSSL certificate, provides all the subject alternative names.
    z­A problem was encountered with the certificate that prevented urllib3 from finding the SubjectAlternativeName field. This can affect certificate validation. The error was %sNc                 S  s   g | ]
}|d urd|f‘qS )NÚDNSr   ©r   r9   r   r   r	   Ú
<listcomp>  s
    þz%get_subj_alt_name.<locals>.<listcomp>c                 s  s   � | ]	}d t |ƒfV  qdS )z
IP AddressN)r:   rO   r   r   r	   Ú	<genexpr>  s   € 
ÿz$get_subj_alt_name.<locals>.<genexpr>)Úto_cryptographyÚ
extensionsr3   r   ÚSubjectAlternativeNameÚvalueÚExtensionNotFoundÚDuplicateExtensionr   ÚUnsupportedGeneralNameTypeÚUnicodeErrorÚlogÚwarningÚmaprK   Úget_values_for_typeÚDNSNameÚextendÚ	IPAddress)rL   ÚcertÚextÚeÚnamesr   r   r	   Úget_subj_alt_nameâ   s2   üü€òþ

ÿre   c                   @  s¤   e Zd ZdZ	d6d7dd„Zd8dd„Zd9dd„Zd:dd„Zd;dd„Zd<dd„Z	d=dd „Z
d>d!d"„Zd?d$d%„Zd9d&d'„Zd9d(d)„Z	*d@dAd-d.„ZdBd0d1„ZdCd3d4„Zd5S )DÚWrappedSocketz@API-compatibility wrapper for Python OpenSSL's Connection-class.TÚ
connectionúOpenSSL.SSL.Connectionr   Ú
socket_clsÚsuppress_ragged_eofsÚboolr*   r+   c                 C  s"   || _ || _|| _d| _d| _d S ©Nr   F)rg   r   rj   Ú_io_refsÚ_closed)Úselfrg   r   rj   r   r   r	   Ú__init__  s
   
zWrappedSocket.__init__r   c                 C  ó
   | j  ¡ S ©N)r   Úfileno©ro   r   r   r	   rs   !  ó   
zWrappedSocket.filenoc                 C  s.   | j dkr|  j d8  _ | jr|  ¡  d S d S )Nr   é   )rm   rn   Úclosert   r   r   r	   Ú_decref_socketios%  s
   
ÿzWrappedSocket._decref_socketiosÚargsú
typing.AnyÚkwargsÚbytesc              
   O  s  z| j j|i |¤Ž}W |S  tjjy4 } z| jr%|jdkr%W Y d }~dS t|jd t|ƒƒ|‚d }~w tjj	yI   | j  
¡ tjjkrHY dS ‚  tjjys } zt | j| j ¡ ¡satdƒ|‚| j|i |¤ŽW  Y d }~S d }~w tjjy‰ } z	t d|›�¡|‚d }~ww )N©éÿÿÿÿzUnexpected EOFó    r   úThe read operation timed outúread error: )rg   ÚrecvÚOpenSSLÚSSLÚSysCallErrorrj   ry   ÚOSErrorr:   ÚZeroReturnErrorÚget_shutdownÚRECEIVED_SHUTDOWNÚWantReadErrorr   Úwait_for_readr   Ú
gettimeoutr   ÚErrorÚsslÚSSLError)ro   ry   r{   Údatarc   r   r   r	   r‚   +  s*   ì€
€€ÿzWrappedSocket.recvc              
   O  s  z
| j j|i |¤ŽW S  tjjy2 } z| jr#|jdkr#W Y d }~dS t|jd t|ƒƒ|‚d }~w tjj	yG   | j  
¡ tjjkrFY dS ‚  tjjyq } zt | j| j ¡ ¡s_tdƒ|‚| j|i |¤ŽW  Y d }~S d }~w tjjy‡ } z	t d|›�¡|‚d }~ww )Nr}   r   r€   r�   )rg   Ú	recv_intorƒ   r„   r…   rj   ry   r†   r:   r‡   rˆ   r‰   rŠ   r   r‹   r   rŒ   r   r�   rŽ   r�   )ro   ry   r{   rc   r   r   r	   r‘   D  s(   €
€€ÿzWrappedSocket.recv_intor   Úfloatc                 C  s   | j  |¡S rr   )r   Ú
settimeout)ro   r   r   r   r	   r“   [  s   zWrappedSocket.settimeoutr�   c              
   C  s†   	 z| j  |¡W S  tjjy* } zt | j| j ¡ ¡s t	ƒ |‚W Y d }~q d }~w tjj
yB } zt|jd t|ƒƒ|‚d }~ww ©NTr   )rg   Úsendrƒ   r„   ÚWantWriteErrorr   Úwait_for_writer   rŒ   r   r…   r†   ry   r:   )ro   r�   rc   r   r   r	   Ú_send_until_done^  s   €€ÿzWrappedSocket._send_until_donec                 C  sB   d}|t |ƒk r|  |||t … ¡}||7 }|t |ƒk sd S d S ©Nr   )rA   r˜   ÚSSL_WRITE_BLOCKSIZE)ro   r�   Ú
total_sentÚsentr   r   r	   Úsendalli  s   ÿüzWrappedSocket.sendallÚhowc              
   C  s@   z| j  ¡  W d S  tjjy } z	t d|›�¡|‚d }~ww )Nzshutdown error: )rg   Úshutdownrƒ   r„   r�   rŽ   r�   )ro   rž   rc   r   r   r	   rŸ   q  s   €ÿzWrappedSocket.shutdownc                 C  s    d| _ | jdkr|  ¡  d S d S r”   )rn   rm   Ú_real_closert   r   r   r	   rw   w  s   
ÿzWrappedSocket.closec                 C  s&   z| j  ¡ W S  tjjy   Y d S w rr   )rg   rw   rƒ   r„   r�   rt   r   r   r	   r    |  s
   ÿzWrappedSocket._real_closeFÚbinary_formú"dict[str, list[typing.Any]] | Nonec                 C  sD   | j  ¡ }|s	|S |rtj tjj|¡S d| ¡ jffft|ƒdœS )NÚ
commonName)ÚsubjectÚsubjectAltName)	rg   Úget_peer_certificaterƒ   ÚcryptoÚdump_certificateÚFILETYPE_ASN1Úget_subjectÚCNre   )ro   r¡   r   r   r   r	   Úgetpeercert‚  s   
þzWrappedSocket.getpeercertr:   c                 C  rq   rr   )rg   Úget_protocol_version_namert   r   r   r	   Úversion’  ru   zWrappedSocket.versionr;   c                 C  s   | j  ¡ }|r| ¡ S d S rr   )rg   Úget_alpn_proto_negotiatedrI   )ro   Ú
alpn_protor   r   r	   Úselected_alpn_protocol•  s   
z$WrappedSocket.selected_alpn_protocolN)T)rg   rh   r   ri   rj   rk   r*   r+   ©r*   r   ©r*   r+   )ry   rz   r{   rz   r*   r|   )ry   rz   r{   rz   r*   r   )r   r’   r*   r+   )r�   r|   r*   r   )r�   r|   r*   r+   )rž   r   r*   r+   )F)r¡   rk   r*   r¢   )r*   r:   )r*   r;   )r   r   r   Ú__doc__rp   rs   rx   r‚   r‘   r“   r˜   r�   rŸ   rw   r    r¬   r®   r±   r   r   r   r	   rf     s$    ü









ÿ
rf   c                   @  s  e Zd ZdZdBdd„ZedCdd	„ƒZejdDdd	„ƒZedCdd„ƒZejdDdd„ƒZedCdd„ƒZ	e	jdEdd„ƒZ	dFdd„Z
dGdd„Z			dHdIdd „Z		dJdKd%d&„ZdLd)d*„Z	+	,	,	dMdNd6d7„ZdFd8d9„ZedCd:d;„ƒZejdOd=d;„ƒZedCd>d?„ƒZejdPdAd?„ƒZdS )Qr-   zÂ
    I am a wrapper class for the PyOpenSSL ``Context`` object. I am responsible
    for translating the interface of the standard library ``SSLContext`` object
    to calls into PyOpenSSL.
    Úprotocolr   r*   r+   c                 C  sF   t | | _tj | j¡| _d| _d| _tj	j
| _tj	j| _tj| _d S rl   )r   rµ   rƒ   r„   ÚContextÚ_ctxÚ_optionsÚcheck_hostnamerŽ   Ú
TLSVersionÚMINIMUM_SUPPORTEDÚ_minimum_versionÚMAXIMUM_SUPPORTEDÚ_maximum_versionÚVERIFY_X509_TRUSTED_FIRSTÚ_verify_flags)ro   rµ   r   r   r	   rp   ¤  s   


zPyOpenSSLContext.__init__c                 C  ó   | j S rr   )r¸   rt   r   r   r	   Úoptions­  ó   zPyOpenSSLContext.optionsrU   c                 C  ó   || _ |  ¡  d S rr   )r¸   Ú_set_ctx_options©ro   rU   r   r   r	   rÂ   ±  ó   c                 C  rÁ   rr   )rÀ   rt   r   r   r	   Úverify_flags¶  rÃ   zPyOpenSSLContext.verify_flagsc                 C  s   || _ | j ¡  | j ¡ d S rr   )rÀ   r·   Úget_cert_storeÚ	set_flagsrÆ   r   r   r	   rÈ   º  s   c                 C  s   t | j ¡  S rr   )Ú_openssl_to_stdlib_verifyr·   Úget_verify_modert   r   r   r	   Úverify_mode¿  s   zPyOpenSSLContext.verify_modeússl.VerifyModec                 C  s   | j  t| t¡ d S rr   )r·   Ú
set_verifyÚ_stdlib_to_openssl_verifyÚ_verify_callbackrÆ   r   r   r	   rÍ   Ã  s   c                 C  s   | j  ¡  d S rr   )r·   Úset_default_verify_pathsrt   r   r   r	   rÒ   Ç  s   z)PyOpenSSLContext.set_default_verify_pathsÚciphersúbytes | strc                 C  s$   t |tƒr
| d¡}| j |¡ d S )NrH   )Ú
isinstancer:   rB   r·   Úset_cipher_list)ro   rÓ   r   r   r	   Úset_ciphersÊ  s   

zPyOpenSSLContext.set_ciphersNÚcafiler;   ÚcapathÚcadatar<   c              
   C  s†   |d ur	|  d¡}|d ur|  d¡}z| j ||¡ |d ur)| j t|ƒ¡ W d S W d S  tjjyB } z	t d|›�¡|‚d }~ww )NrH   z%unable to load trusted certificates: )	rB   r·   Úload_verify_locationsr
   rƒ   r„   r�   rŽ   r�   )ro   rØ   rÙ   rÚ   rc   r   r   r	   rÛ   Ï  s   

ÿ€ÿz&PyOpenSSLContext.load_verify_locationsÚcertfiler:   ÚkeyfileÚpasswordc              
     s‚   z)| j  |¡ ˆ d urtˆ tƒsˆ  d¡‰ | j  ‡ fdd„¡ | j  |p%|¡ W d S  tjj	y@ } z	t
 d|›�¡|‚d }~ww )NrH   c                    s   ˆ S rr   r   )Ú_©rÞ   r   r	   Ú<lambda>ë  s    z2PyOpenSSLContext.load_cert_chain.<locals>.<lambda>z"Unable to load certificate chain: )r·   Úuse_certificate_chain_filerÕ   r|   rB   Úset_passwd_cbÚuse_privatekey_filerƒ   r„   r�   rŽ   r�   )ro   rÜ   rÝ   rÞ   rc   r   rà   r	   Úload_cert_chainà  s   

€ÿz PyOpenSSLContext.load_cert_chainÚ	protocolsúlist[bytes | str]c                 C  s   dd„ |D ƒ}| j  |¡S )Nc                 S  s   g | ]	}t j  |d ¡‘qS )r>   )r   Úto_bytes)r   Úpr   r   r	   rP   ñ  s    z7PyOpenSSLContext.set_alpn_protocols.<locals>.<listcomp>)r·   Úset_alpn_protos)ro   ræ   r   r   r	   Úset_alpn_protocolsð  s   z#PyOpenSSLContext.set_alpn_protocolsFTÚsockri   Úserver_siderk   Údo_handshake_on_connectrj   Úserver_hostnameúbytes | str | Nonerf   c              
   C  sÐ   t j | j|¡}|rtj |¡st|tƒr| 	d¡}| 
|¡ | ¡  	 z| ¡  W n7 t jjyK } zt || ¡ ¡sAtdƒ|‚W Y d }~q#d }~w t jjya } z	t d|›�¡|‚d }~ww 	 t||ƒS )NrH   Tzselect timed outzbad handshake: )rƒ   r„   Ú
Connectionr·   r   r/   Úis_ipaddressrÕ   r:   rB   Úset_tlsext_host_nameÚset_connect_stateÚdo_handshakerŠ   r‹   rŒ   r   r�   rŽ   r�   rf   )ro   rì   rí   rî   rj   rï   Úcnxrc   r   r   r	   Úwrap_socketô  s(   



€€ÿ
zPyOpenSSLContext.wrap_socketc                 C  s&   | j  | jt| j B t| j B ¡ d S rr   )r·   Úset_optionsr¸   r(   r¼   r)   r¾   rt   r   r   r	   rÅ     s   ÿþÿz!PyOpenSSLContext._set_ctx_optionsc                 C  rÁ   rr   )r¼   rt   r   r   r	   Úminimum_version  rÃ   z PyOpenSSLContext.minimum_versionrù   c                 C  rÄ   rr   )r¼   rÅ   )ro   rù   r   r   r	   rù     rÇ   c                 C  rÁ   rr   )r¾   rt   r   r   r	   Úmaximum_version#  rÃ   z PyOpenSSLContext.maximum_versionrú   c                 C  rÄ   rr   )r¾   rÅ   )ro   rú   r   r   r	   rú   '  rÇ   )rµ   r   r*   r+   r²   )rU   r   r*   r+   )rU   rÎ   r*   r+   r³   )rÓ   rÔ   r*   r+   )NNN)rØ   r;   rÙ   r;   rÚ   r<   r*   r+   )NN)rÜ   r:   rÝ   r;   rÞ   r;   r*   r+   )ræ   rç   r*   r+   )FTTN)rì   ri   rí   rk   rî   rk   rj   rk   rï   rð   r*   rf   )rù   r   r*   r+   )rú   r   r*   r+   )r   r   r   r´   rp   ÚpropertyrÂ   ÚsetterrÈ   rÍ   rÒ   r×   rÛ   rå   rë   r÷   rÅ   rù   rú   r   r   r   r	   r-   �  sN    
	

üü
ú
r-   rö   rh   r   Úerr_noÚ	err_depthÚreturn_coderk   c                 C  s   |dkS r™   r   )rö   r   rý   rþ   rÿ   r   r   r	   rÑ   -  s   rÑ   r³   )r9   r:   r*   r;   )rL   r   r*   rM   )rö   rh   r   r   rý   r   rþ   r   rÿ   r   r*   rk   )Nr´   Ú
__future__r   ÚOpenSSL.SSLrƒ   Úcryptographyr   Úcryptography.x509r   r7   Ú	ExceptionÚloggingrŽ   ÚtypingÚior
   r   ri   r   Ú r   ÚTYPE_CHECKINGr8   r   Ú__all__r/   ÚPROTOCOL_TLSr„   ÚSSLv23_METHODÚPROTOCOL_TLS_CLIENTÚPROTOCOL_TLSv1ÚTLSv1_METHODr   Ú__annotations__Úhasattrr   r   r   r   Ú	CERT_NONEÚVERIFY_NONEÚCERT_OPTIONALÚVERIFY_PEERÚCERT_REQUIREDÚVERIFY_FAIL_IF_NO_PEER_CERTrÐ   ÚitemsrË   r6   r   r!   r#   r%   r'   rº   r»   ÚTLSv1ÚTLSv1_1ÚTLSv1_2ÚTLSv1_3r½   r(   r)   rš   r.   r1   Ú	getLoggerr   rZ   r   r   r,   rK   re   rf   Úmakefiler-   rÑ   r   r   r   r	   Ú<module>   s¢    (þ
ý


ÿýÿ÷ÿþýüò



	

)0 	 