grthtrhthjhtyjytjytkergtrhtrjytjerhrfh4:24 29/09/2026a XC?h2Íã @s°ddlZddlZddlmZddlmZmZm Z ddl Z ddl m Z m Z mZddl mZmZmZddl mZmZmZmZmZmZmZddl mZmZddl mZmZmZm Z zdd l m!Z!Wne"yÎYn0dd l m#Z#m$Z$m%Z%m&Z&m'Z'm(Z(m)Z)m*Z*m+Z+m,Z,dd l m-Z-m.Z.ej/d e0d d„e d�e j/de0dd„e d�ej/de0dd„e d�ej/de0dd„e d�e j/de0dd„e d�ej/de0dd„e d�e1j2Z3e1_3dd„e1j4 5¡DƒZ6e7e1ddƒZ8Gdd„deƒZ9Gdd „d eƒZ:Gd!d"„d"eƒZ;Gd#d$„d$eƒZZ>m?Z?dd'l@m@Z@mAZAmBZBdd(l@mCZCmDZDddl@ZEddlFZFddlGZGddlHZHeIZJd)gZKeLe d*ƒZMe-ZNeZOd+d,„ZPd-d.„ZQd/d0„ZRd1d2„ZSed3d4ƒZTd5d6„ZUGd7d8„d8ed8d9ƒƒZVGd:d;„d;eVeƒZWGdœd?d@„ZZe2fe[dAeWjYddddddBœdCdD„Z\eZZ]e\Z^GdEdF„dFƒZ_dGdH„Z`GdIdJ„dJe@ƒZaeaeX_be_eX_cdddAe[e2ddKdKdf dLdM„ZddNdO„ZedPZfdQZgdRdS„ZhdTdU„Zie2dfdVdW„ZjdXdY„ZkdS)ZéN)Ú namedtuple)ÚEnumÚIntEnumÚIntFlag)ÚOPENSSL_VERSION_NUMBERÚOPENSSL_VERSION_INFOÚOPENSSL_VERSION)Ú _SSLContextÚ MemoryBIOÚ SSLSession)ÚSSLErrorÚSSLZeroReturnErrorÚSSLWantReadErrorÚSSLWantWriteErrorÚSSLSyscallErrorÚ SSLEOFErrorÚSSLCertVerificationError)Útxt2objÚnid2obj)Ú RAND_statusÚRAND_addÚ RAND_bytesÚRAND_pseudo_bytes)ÚRAND_egd) ÚHAS_SNIÚHAS_ECDHÚHAS_NPNÚHAS_ALPNÚ HAS_SSLv2Ú HAS_SSLv3Ú HAS_TLSv1Ú HAS_TLSv1_1Ú HAS_TLSv1_2Ú HAS_TLSv1_3)Ú_DEFAULT_CIPHERSÚ_OPENSSL_API_VERSIONÚ _SSLMethodcCs| d¡o|dkS)NZ PROTOCOL_ÚPROTOCOL_SSLv23©Ú startswith©Úname©r,ú(/opt/alt/python39/lib64/python3.9/ssl.pyÚ}ór.)ÚsourceÚOptionscCs | d¡S)NZOP_r(r*r,r,r-r.‚r/ZAlertDescriptioncCs | d¡S)NZALERT_DESCRIPTION_r(r*r,r,r-r.‡r/ZSSLErrorNumbercCs | d¡S)NZ SSL_ERROR_r(r*r,r,r-r.Œr/Ú VerifyFlagscCs | d¡S)NZVERIFY_r(r*r,r,r-r.‘r/Ú VerifyModecCs | d¡S)NZCERT_r(r*r,r,r-r.–r/cCsi|]\}}||“qSr,r,)Ú.0r+Úvaluer,r,r-Ú šr/r6ZPROTOCOL_SSLv2c@s6eZdZejZejZejZ ej Z ej Z ejZejZdS)Ú TLSVersionN)Ú__name__Ú __module__Ú __qualname__Ú_sslZPROTO_MINIMUM_SUPPORTEDZMINIMUM_SUPPORTEDZ PROTO_SSLv3ÚSSLv3Z PROTO_TLSv1ZTLSv1Z PROTO_TLSv1_1ZTLSv1_1Z PROTO_TLSv1_2ZTLSv1_2Z PROTO_TLSv1_3ZTLSv1_3ZPROTO_MAXIMUM_SUPPORTEDZMAXIMUM_SUPPORTEDr,r,r,r-r7Ÿsr7c@s$eZdZdZdZdZdZdZdZdS)Ú_TLSContentTypeééééééN) r8r9r:ÚCHANGE_CIPHER_SPECÚALERTZ HANDSHAKEZAPPLICATION_DATAÚHEADERZINNER_CONTENT_TYPEr,r,r,r-r=©s r=c@s”eZdZdZdZdZdZdZdZdZ dZ d Z d Z d Z d Zd ZdZdZdZdZdZdZdZdZdZdZdZdZdZdZdZdZdZ dZ!d Z"d!Z#d"Z$d#S)$Ú _TLSAlertTyperé r>r?r@éé(é)é*é+é,é-é.é/é0é1é2é3é<éFéGéPéVéZédéménéoépéqérésétéxN)%r8r9r:Z CLOSE_NOTIFYZUNEXPECTED_MESSAGEZBAD_RECORD_MACZDECRYPTION_FAILEDZRECORD_OVERFLOWZDECOMPRESSION_FAILUREZHANDSHAKE_FAILUREZNO_CERTIFICATEZBAD_CERTIFICATEZUNSUPPORTED_CERTIFICATEZCERTIFICATE_REVOKEDZCERTIFICATE_EXPIREDZCERTIFICATE_UNKNOWNZILLEGAL_PARAMETERZ UNKNOWN_CAZ ACCESS_DENIEDZ DECODE_ERRORZ DECRYPT_ERRORZEXPORT_RESTRICTIONZPROTOCOL_VERSIONZINSUFFICIENT_SECURITYZINTERNAL_ERRORZINAPPROPRIATE_FALLBACKZ USER_CANCELEDZNO_RENEGOTIATIONZMISSING_EXTENSIONZUNSUPPORTED_EXTENSIONZCERTIFICATE_UNOBTAINABLEZUNRECOGNIZED_NAMEZBAD_CERTIFICATE_STATUS_RESPONSEZBAD_CERTIFICATE_HASH_VALUEZUNKNOWN_PSK_IDENTITYZCERTIFICATE_REQUIREDZNO_APPLICATION_PROTOCOLr,r,r,r-rG·sDrGc@sdeZdZdZdZdZdZdZdZdZ dZ d Z d Z d Z d Zd ZdZdZdZdZdZdZdZdZdZdS)Ú_TLSMessageTyperéééééééé é é ééér>r?r@rAééCéþrCN)r8r9r:Z HELLO_REQUESTZ CLIENT_HELLOZ SERVER_HELLOZHELLO_VERIFY_REQUESTZNEWSESSION_TICKETZEND_OF_EARLY_DATAZHELLO_RETRY_REQUESTZENCRYPTED_EXTENSIONSZ CERTIFICATEZSERVER_KEY_EXCHANGEZCERTIFICATE_REQUESTZ SERVER_DONEZCERTIFICATE_VERIFYZCLIENT_KEY_EXCHANGEZFINISHEDZCERTIFICATE_URLZCERTIFICATE_STATUSZSUPPLEMENTAL_DATAZ KEY_UPDATEZ NEXT_PROTOZ MESSAGE_HASHrDr,r,r,r-rfàs,rfÚwin32)Úenum_certificatesÚ enum_crls)ÚsocketÚ SOCK_STREAMÚcreate_connection)Ú SOL_SOCKETÚSO_TYPEú tls-uniqueÚHOSTFLAG_NEVER_CHECK_SUBJECTcCs¶|sdS| d¡}|s&| ¡| ¡kS|dkrsole wildcard without additional labels are not support: {!r}.z.shim_cb)Z sni_callbackÚcallableÚ TypeError)r¾rÜrÝr,rÛr-Úset_servername_callbacks z"SSLContext.set_servername_callbackcCs`tƒ}|D]F}t|dƒ}t|ƒdks0t|ƒdkr8tdƒ‚| t|ƒ¡| |¡q | |¡dS)Nr¿rrÓz)ALPN protocols must be 1 to 255 in length)rÔrÕr—r r–rÖZ_set_alpn_protocols)r¾Zalpn_protocolsr×r»rØr,r,r-Úset_alpn_protocols!s  zSSLContext.set_alpn_protocolscCsttƒ}zYn0|tjkrPt}n|tjkr`t}nt}z ||ƒ}Wnty‚Yn0ˆ||||||ƒSr‘)r7r�r=rFrErGrf)ZconnÚ directionÚversionZ content_typeZmsg_typeÚdataZmsg_enum©Úcallbackr,r-rúžs(        ÿz'SSLContext._msg_callback..inner)r«rºrøròÚhasattrrßrù)r¾rrúr°rÿr-rø•s  cs ttƒjƒSr‘)r&r«r»rðr°r,r-r»»szSSLContext.protocolcs ttƒjƒSr‘)r2r«Ú verify_flagsrðr°r,r-r¿szSSLContext.verify_flagscstttƒj ||¡dSr‘)r«rºrròrór°r,r-rÃscs.tƒj}z t|ƒWSty(|YS0dSr‘)r«Ú verify_moder3r�rór°r,r-rÇs   zSSLContext.verify_modecstttƒj ||¡dSr‘)r«rºrròrór°r,r-rÏs)FTTNN)FNN) r8r9r:rírÌrÏÚ PROTOCOL_TLSr¬rÄrÎrÒrÙràrárêr¸r¹rîrr ÚpropertyrïÚsetterrôrñr;rörør»rrr·r,r,r°r-rºÛsh ý ÿ         &%rº)r§r¨râcCsŒt|tƒst|ƒ‚ttƒ}|tjkr0t|_d|_ |s<|s<|rL|  |||¡n|jt kr`|  |¡t |dƒrˆtj d¡}|rˆtjjsˆ||_|S)NTÚkeylog_filenameÚ SSLKEYLOGFILE)rÀr©rßrºrr¸r¹Ú CERT_REQUIREDrÚcheck_hostnameræÚ CERT_NONErîrr¡r¢r•rëÚflagsÚignore_environmentr)rèr§r¨rârÊÚ keylogfiler,r,r-Úcreate_default_contextÔs        rF)Ú cert_reqsr rèÚcertfileÚkeyfiler§r¨râc Cs¼t|tƒst|ƒ‚t|ƒ} |s$d| _|dur2|| _|rd?„ƒZ"‡fd@dA„Z#edBdC„ƒZ$edDdE„ƒZ%‡fdFdG„Z&edcdHdI„ƒZ'‡fdJdK„Z(dLdM„Z)dNdO„Z*‡fdPdQ„Z+edddSdT„ƒZ,edUdV„ƒZ-‡Z.S)eÚ SSLSocketcOst|jj›d�ƒ‚dS)NzX does not have a public constructor. Instances are returned by SSLContext.wrap_socket().rrr,r,r-rÑs ÿzSSLSocket.__init__FTNc sf| tt¡tkrtdƒ‚|r8|r(tdƒ‚|dur8tdƒ‚|jrJ|sJtdƒ‚t|j|j |j |  ¡d�}|j |fi|¤Ž} t t| ƒjfi|¤Ž| ¡} | ¡|| _|| _d| _d| _|| _| |¡| _|| _|| _z |  ¡Wnüt�yÚ} zâ| jtjkrþ‚d} |  ¡} |   d¡z|  !d¡}Wn@t�yb} z&| jtjtj"fv�rJ‚d}WYd} ~ n d} ~ 00|   | ¡|�rÆd }t#| j|ƒ}||_$d|_%z |  &¡Wnt�y°Yn0z |‚Wd}nd}0WYd} ~ nd} ~ 00d } |  '| ¡| | _(| �rbzH| jj)| || j| | jd �| _|�r<|  ¡}|d k�r4td ƒ‚|  *¡Wn"ttf�y`|  &¡‚Yn0| S)Nz!only stream sockets are supportedz4server_hostname can only be specified in client modez,session can only be specified in client modez'check_hostname requires server_hostname)ÚfamilyÚtypeÚprotoÚfilenoFrgr/z5Closed before TLS handshake with data in recv buffer.T©rrËçzHdo_handshake_on_connect should not be specified for non-blocking sockets)+Z getsockoptr}r~r{ÚNotImplementedErrorr�r Údictr=r>r?r@r¬r«r<rÚ gettimeoutÚdetachÚ_contextÚ_sessionZ_closedrrÆrÄrÉrÇrÈÚ getpeernamerŒÚerrnoZENOTCONNZ getblockingZ setblockingÚrecvZEINVALr ÚreasonZlibraryÚcloseÚ settimeoutÚ _connectedÚ _wrap_socketr1)r®rÅrÆrÇrÈrÉrÊrËr½r¾Z sock_timeoutÚeZ connectedZblockingZnotconn_pre_handshake_datarLZ notconn_pre_handshake_data_errorÚtimeoutr°r,r-rÍØsŒ  þ       " þ  zSSLSocket._createcCs|jSr‘)rGrðr,r,r-rÊ8szSSLSocket.contextcCs||_||j_dSr‘)rGrrÊrr,r,r-rÊ=scCs|jdur|jjSdSr‘rrðr,r,r-rËBs zSSLSocket.sessioncCs||_|jdur||j_dSr‘)rHrrËr r,r,r-rËHs cCs|jdur|jjSdSr‘r!rðr,r,r-r"Ns zSSLSocket.session_reusedcCstd|jjƒ‚dS)NzCan't dup() %s instances)rCr±r8rðr,r,r-ÚdupTsÿz SSLSocket.dupcCsdSr‘r,)r¾Úmsgr,r,r-Ú _checkClosedXszSSLSocket._checkClosedcCs|js| ¡dSr‘)rOrIrðr,r,r-Ú_check_connected\szSSLSocket._check_connectedr#c Csª| ¡|jdurtdƒ‚z*|dur4|j ||¡WS|j |¡WSWn`ty¤}zH|jdtkrŽ|jrŽ|dur~WYd}~dSWYd}~dSn‚WYd}~n d}~00dS)Nz'Read on closed or unwrapped SSL socket.rr/)rUrr�r$r r¼Z SSL_ERROR_EOFrÈ)r¾r—r%Úxr,r,r-r$ds zSSLSocket.readcCs&| ¡|jdurtdƒ‚|j |¡S)Nz(Write on closed or unwrapped SSL socket.)rUrr�r'r(r,r,r-r'ys zSSLSocket.writecCs| ¡| ¡|j |¡Sr‘)rUrVrr)r*r,r,r-r)‚szSSLSocket.getpeercertcCs*| ¡|jdustjsdS|j ¡SdSr‘)rUrr;rr+rðr,r,r-r+ˆszSSLSocket.selected_npn_protocolcCs*| ¡|jdustjsdS|j ¡SdSr‘)rUrr;rr,rðr,r,r-r,�sz SSLSocket.selected_alpn_protocolcCs$| ¡|jdurdS|j ¡SdSr‘)rUrr-rðr,r,r-r-˜s zSSLSocket.ciphercCs$| ¡|jdurdS|j ¡SdSr‘)rUrr.rðr,r,r-r. s zSSLSocket.shared_cipherscCs$| ¡|jdurdS|j ¡SdSr‘)rUrr/rðr,r,r-r/¨s zSSLSocket.compressionrcsF| ¡|jdur4|dkr(td|jƒ‚|j |¡Stƒ ||¡SdS)Nrz3non-zero flags not allowed in calls to send() on %s)rUrr�r±r'r«Úsend)r¾rþr r°r,r-rX°s ÿÿ zSSLSocket.sendcsL| ¡|jdur"td|jƒ‚n&|dur8tƒ ||¡Stƒ |||¡SdS)Nz%sendto not allowed on instances of %s)rUrr�r±r«Úsendto)r¾rþZ flags_or_addrr�r°r,r-rY»s ÿzSSLSocket.sendtocOstd|jƒ‚dS)Nz&sendmsg not allowed on instances of %s©rCr±rr,r,r-ÚsendmsgÅsÿzSSLSocket.sendmsgc s¾| ¡|jdur¬|dkr(td|jƒ‚d}t|ƒ�f}| d¡�<}t|ƒ}||krn| ||d…¡}||7}qJWdƒn1s‚0YWdƒqº1s 0Yntƒ  ||¡SdS)Nrz6non-zero flags not allowed in calls to sendall() on %sÚB) rUrr�r±Ú memoryviewÚcastr—rXr«Úsendall)r¾rþr rƒZviewZ byte_viewZamountr&r°r,r-r_Ës ÿÿHzSSLSocket.sendallcs,|jdur| |||¡Stƒ |||¡SdSr‘)rZ_sendfile_use_sendr«Úsendfile)r¾ÚfileÚoffsetrƒr°r,r-r`Ûs zSSLSocket.sendfilecsD| ¡|jdur2|dkr(td|jƒ‚| |¡Stƒ ||¡SdS)Nrz3non-zero flags not allowed in calls to recv() on %s)rUrr�r±r$r«rK©r¾Zbuflenr r°r,r-rKås ÿÿ zSSLSocket.recvcsj| ¡|r|durt|ƒ}n |dur*d}|jdurV|dkrJtd|jƒ‚| ||¡Stƒ |||¡SdS)Nr#rz8non-zero flags not allowed in calls to recv_into() on %s)rUr—rr�r±r$r«Ú recv_into©r¾r%Únbytesr r°r,r-rdðs   ÿÿ zSSLSocket.recv_intocs4| ¡|jdur"td|jƒ‚ntƒ ||¡SdS)Nz'recvfrom not allowed on instances of %s)rUrr�r±r«Úrecvfromrcr°r,r-rgÿs  ÿzSSLSocket.recvfromcs6| ¡|jdur"td|jƒ‚ntƒ |||¡SdS)Nz,recvfrom_into not allowed on instances of %s)rUrr�r±r«Ú recvfrom_intorer°r,r-rhs  ÿzSSLSocket.recvfrom_intocOstd|jƒ‚dS)Nz&recvmsg not allowed on instances of %srZrr,r,r-ÚrecvmsgsÿzSSLSocket.recvmsgcOstd|jƒ‚dS)Nz+recvmsg_into not allowed on instances of %srZrr,r,r-Ú recvmsg_intosÿzSSLSocket.recvmsg_intocCs$| ¡|jdur|j ¡SdSdS)Nr)rUrr0rðr,r,r-r0s  zSSLSocket.pendingcs| ¡d|_tƒ |¡dSr‘)rUrr«r2)r¾Zhowr°r,r-r2szSSLSocket.shutdowncCs.|jr|j ¡}d|_|Stdt|ƒƒ‚dS©NzNo SSL wrapper around )rr2r�rÁ)r¾Úsr,r,r-r3$s  zSSLSocket.unwrapcCs$|jr|j ¡Stdt|ƒƒ‚dSrk)rr7r�rÁrðr,r,r-r7-s z&SSLSocket.verify_client_post_handshakecsd|_tƒ ¡dSr‘)rr«Ú _real_closerðr°r,r-rm4szSSLSocket._real_closec CsP| ¡| ¡}z.|dkr(|r(| d¡|j ¡W| |¡n | |¡0dS)NrB)rVrErNrr1)r¾ÚblockrRr,r,r-r18s   zSSLSocket.do_handshakec s¦|jrtdƒ‚|js|jdur&tdƒ‚|jj|d|j||jd�|_z@|rVtƒ  |¡}nd}tƒ  |¡|s~d|_|j r~|  ¡|WSt tfy d|_‚Yn0dS)Nz!can't connect in server-side modez/attempt to connect already-connected SSLSocket!FrAT)rÆr�rOrrÊrPrÉrHr«Ú connect_exÚconnectrÇr1rŒ)r¾r�roZrcr°r,r-Ú _real_connectCs*þ zSSLSocket._real_connectcCs| |d¡dS)NF©rq©r¾r�r,r,r-rp]szSSLSocket.connectcCs | |d¡Sr÷rrrsr,r,r-robszSSLSocket.connect_excs.tƒ ¡\}}|jj||j|jdd�}||fS)NT)rÇrÈrÆ)r«ÚacceptrÊrÎrÇrÈ)r¾Znewsockr�r°r,r-rtgsýzSSLSocket.acceptrcCs4|jdur|j |¡S|tvr,td |¡ƒ‚dSdS)Nz({0} channel binding type not implemented)rr4ÚCHANNEL_BINDING_TYPESr�r†r5r,r,r-r4ss  ÿzSSLSocket.get_channel_bindingcCs|jdur|j ¡SdSdSr‘r6rðr,r,r-rý~s  zSSLSocket.version)FTTNNN)N)r#N)F)r)N)r)rN)r#r)Nr)r#r)Nr)F)r)/r8r9r:rr¶rÍrr;rÊrrËr"rSrUrVr$r'r)r+r,r-r.r/rXrYr[r_r`rKrdrgrhrirjr0r2r3r7rmr1rqrprortr4rýr·r,r,r°r-r<Ìs‚þ_                          r<Tc Csl|r|stdƒ‚|r |s tdƒ‚t|ƒ} || _|r<|  |¡|rL|  ||¡| rZ|  | ¡| j||||d�S)Nz5certfile must be specified for server-side operationsr)rÅrÆrÇrÈ)r�rºrrærZ set_ciphersrÎ) rÅrrrÆrÚ ssl_versionÚca_certsrÇrÈZciphersrÊr,r,r-r΋s"   ýrÎcCs”ddlm}ddlm}d}d}z| |dd… ¡¡d}Wn"ty`td||fƒ‚Yn00||dd…|ƒ}||d|f|d d …ƒSdS) Nr)Ústrptime)Útimegm) ZJanZFebZMarZAprZMayZJunZJulZAugZSepZOctZNovZDecz %d %H:%M:%S %Y GMTrirgz*time data %r does not match format "%%b%s"rhrl)ÚtimerxZcalendarryÚindexÚtitler�)Z cert_timerxryZmonthsZ time_formatZ month_numberZttr,r,r-Úcert_time_to_seconds§s   ÿ r}z-----BEGIN CERTIFICATE-----z-----END CERTIFICATE-----csRtt |¡ddƒ‰tg}|‡fdd„tdtˆƒdƒDƒ7}| td¡d |¡S)NÚASCIIÚstrictcsg|]}ˆ||d…‘qS)é@r,)r4Úi©Úfr,r-Ú Îr/z(DER_cert_to_PEM_cert..rr€Ú ) rÁÚbase64Zstandard_b64encodeÚ PEM_HEADERÚranger—r–Ú PEM_FOOTERr˜)Zder_cert_bytesZssr,r‚r-ÚDER_cert_to_PEM_certÈs "rŠcCs\| t¡stdtƒ‚| ¡ t¡s0tdtƒ‚| ¡ttƒttƒ …}t |  dd¡¡S)Nz(Invalid PEM encoding; must start with %sz&Invalid PEM encoding; must end with %sr~r) r)r‡r�ÚstripÚendswithr‰r—r†Z decodebytesrÂ)Zpem_cert_stringÚdr,r,r-ÚPEM_cert_to_DER_certÒs ÿÿrŽc CsŒ|\}}|durt}nt}t|||d�}t|ƒ�D}| |¡�}| d¡} Wdƒn1s\0YWdƒn1sz0Yt| ƒS)N)rr§T)r r Ú_create_stdlib_contextr|rÎr)rŠ) r�rvrwZhostZportrrÊrÅZsslsockZdercertr,r,r-Úget_server_certificateßsþ  Fr�cCs t |d¡S)Nz )Ú_PROTOCOL_NAMESr•)Z protocol_coder,r,r-Úget_protocol_nameòsr’)lrër¡Ú collectionsrÚenumrZ_EnumrZ_IntEnumrZ_IntFlagr;rrrr r r r r rrrrrrr­rr²rrrrrÚ ImportErrorrrrrrrr r!r"r#r$r%Ú _convert_r8r&rr'Ú __members__Úitemsr‘r8Z_SSLv2_IF_EXISTSr7r=rGrfrìrxryrzr{r|r}r~r‹r†rJrärŒZ socket_errorrurZHAS_NEVER_CHECK_COMMON_NAMEZ_RESTRICTED_SERVER_CIPHERSr…rŠr�r”ržrŸr r©r¸rºr¹rr rZ_create_default_https_contextr�rr;r<rÌrÏrÎr}r‡r‰rŠrŽr�r’r,r,r,r-Ú^sÜ $ 0ýýýýýý   )  1# 9ÿzÿ #ý />û