File: //lib64/python3.6/site-packages/M2Crypto/SSL/__pycache__/TwistedProtocolWrapper.cpython-36.pyc
3
YݧZRF � @ sN d Z dddddgZddlZddlmZ ddlZddljj Z dd l
m Z m Z m
Z
mZ dd
lmZmZ dd lmZ dd lmZ ejr�dd
lmZmZmZmZ ddlm Z ej e �Z dd� Z ddej!j"e� fdd�Z#ddej!j"e� fdd�Z$ddej!j"e fdd�Z%ddej!j"dfdd�Z&G dd� de'�Z(G dd� de'�Z)e e�G d d� de��Z*dS ) a8
Make Twisted use M2Crypto for SSL
Copyright (c) 2004-2007 Open Source Applications Foundation.
All rights reserved.
FIXME THIS HAS NOT BEEN FINISHED. NEITHER PEP484 NOR PORT PYTHON3 HAS
BEEN FINISHED. THE FURTHER WORK WILL BE DONE WHEN THE STATUS OF TWISTED
IN THE PYTHON 3 (AND ASYNCIO) WORLD WILL BE CLEAR.
�
connectSSL�
connectTCP� listenSSL� listenTCP�TLSProtocolWrapper� N)�partial)�BIO�X509�m2�util)�Checker�SSLVerificationError)�
ITLSTransport)�ProtocolWrapper)�AnyStr�Callable�Iterable�Optional)� implementerc C s dS )N� � )ZpeerX509Z expectedHostr r �./usr/lib64/python3.6/TwistedProtocolWrapper.py�"_alwaysSucceedsPostConnectionCheck" s r � c s, t j|�}� �fdd�|_|j| ||||�S )zy
A convenience function to start an SSL/TLS connection using Twisted.
See IReactorSSL interface in Twisted.
c s t | |dd� �d�S )Nr r )�startPassThrough�client�contextFactory�postConnectionCheck)r )�factory�wrappedProtocol)r r r r �<lambda>1 s z connectSSL.<locals>.<lambda>)�policies�WrappingFactory�protocolr ) �host�portr r �timeout� bindAddress�reactorr �wrappingFactoryr )r r r r & s
c s* t j|�}� fdd�|_|j| ||||�S )z�
A convenience function to start a TCP connection using Twisted.
NOTE: You must call startTLS(ctx) to go into SSL/TLS mode.
See IReactorTCP interface in Twisted.
c s t | |ddd � d�S )Nr )r r r r )r )r r )r r r r G s z connectTCP.<locals>.<lambda>)r! r" r# r )r$ r% r r& r' r( r r) r )r r r ; s
� � c s* t j|�}� �fdd�|_|j| |||�S )z|
A convenience function to listen for SSL/TLS connections using Twisted.
See IReactorSSL interface in Twisted.
c s t | |dd� �d�S )Nr )r r r r )r )r r )r r r r r Z s zlistenSSL.<locals>.<lambda>)r! r" r# r )r% r r �backlog� interfacer( r r) r )r r r r Q s
c s( t j|�}� fdd�|_|j| |||�S )z�
A convenience function to listen for TCP connections using Twisted.
NOTE: You must call startTLS(ctx) to go into SSL/TLS mode.
See IReactorTCP interface in Twisted.
c s t | |ddd � d�S )Nr r )r r r r )r )r r )r r r r o s zlistenTCP.<locals>.<lambda>)r! r" r# r )r% r r, r- r( r r) r )r r r d s
c @ s. e Zd ZdZejZdd� Zdd� Zdd� Z dS ) � _BioProxyz�
The purpose of this class is to eliminate the __del__ method from
TLSProtocolWrapper, and thus letting it be garbage collected.
c C s
|| _ d S )N)�bio)�selfr/ r r r �__init__� s z_BioProxy.__init__c C s | j S )N)r/ )r0 r r r �_ptr� s z_BioProxy._ptrc C s | j d k r| j| j � d S )N)r/ �m2_bio_free_all)r0 r r r �__del__� s
z_BioProxy.__del__N)
�__name__�
__module__� __qualname__�__doc__r
Z bio_free_allr3 r1 r2 r4 r r r r r. y s
r. c @ s. e Zd ZdZejZdd� Zdd� Zdd� Z dS ) � _SSLProxyz�
The purpose of this class is to eliminate the __del__ method from
TLSProtocolWrapper, and thus letting it be garbage collected.
c C s
|| _ d S )N)�ssl)r0 r: r r r r1 � s z_SSLProxy.__init__c C s | j S )N)r: )r0 r r r r2 � s z_SSLProxy._ptrc C s | j d k r| j| j � d S )N)r: � m2_ssl_free)r0 r r r r4 � s
z_SSLProxy.__del__N)
r5 r6 r7 r8 r
Zssl_freer; r1 r2 r4 r r r r r9 � s
r9 c @ s� e Zd ZdZdd� Zdd� Zdd� Zdd � Zd
d � Zd d
� Z dd� Z
dd� Z dd� Z dd� Z
dd� Zedd� �Zedd� �Zed d � �Zed d � �Zed d!� �Zed"d#� �Zed$d%� �Zed&d'� �Zed(d)� �Zed*d+� �Zd3d.d/�Zd4d0d1�Zd2S )5r z�
A SSL/TLS protocol wrapper to be used with Twisted. Typically
you would not use this class directly. Use connectTCP,
connectSSL, listenTCP, listenSSL functions defined above,
which will hook in this class.
c C s\ || _ || _d| _d| _d| _d| _|| _d| _|dkr@t| _ n|| _ |sX| j
|j � � dS )a�
:param factory:
:param wrappedProtocol:
:param startPassThrough: If true we won't encrypt at all. Need to
call startTLS() later to switch to SSL/TLS.
:param client: True if this should be a client protocol.
:param contextFactory: Factory that creates SSL.Context objects.
The called function is getContext().
:param postConnectionCheck: The post connection check callback that
will be called just after connection has
been established but before any real data
has been exchanged. The first argument to
this function is an X509 object, the second
is the expected host name string.
� r N) r r �data� encrypted�
tlsStarted�checked�isClient� helloDoner r �startTLSZ
getContext)r0 r r r r r r r r r r1 � s zTLSProtocolWrapper.__init__c C sL t | dd�r$d| _d| _d| _d| _d| _d| _d| _d| _d| _ d| _
dS )zI
Clear this instance, after which it is ready for reuse.
r? r Nr< r ) �getattr�sslBior: � internalBio�
networkBior= r> r? r@ rA rB )r0 r r r �clear� s zTLSProtocolWrapper.clearc C s( | j rtd��|| _tjtj� �| _tj| jd� ttjtj� ��| _ tj| j j
� d� tj | j| j j
� � ttjtj � ��| _
ttj| jj��| _| jr�tj| jj
� � ntj| jj
� � tj| jj
� | j| j� tj| j
j
� | jj
� tj� tj| jj
� �}tj| jj
� |tjB tjB � d| _ dS )zq
Start SSL/TLS. If this is not called, this instance just passes data
through untouched.
zTLS already startedr r N)r? � Exception�ctxr
Zbio_newZ bio_s_biorF Zbio_set_write_buf_sizer. rG r2 Zbio_make_bio_pairZ bio_f_sslrE r9 Zssl_newr: rA Zssl_set_connect_stateZssl_set_accept_stateZ ssl_set_bioZ bio_set_sslZ bio_nocloseZ ssl_get_modeZ ssl_set_modeZ SSL_MODE_ENABLE_PARTIAL_WRITEZ#SSL_MODE_ACCEPT_MOVING_WRITE_BUFFER)r0 rJ �moder r r rC � s(
zTLSProtocolWrapper.startTLSc C s� | j stj| |� d S y | j|�}tj| |� d| _W nD tjk
rz } z&tj| j j
� �|j d f|_ |�W Y d d }~X nX d S )Nr r ) r? r �write�_encryptrB r �BIOErrorr
�ssl_get_verify_resultr: r2 �args)r0 r= �
encryptedData�er r r rL s
zTLSProtocolWrapper.writec C s0 | j s tj| dj|�� d S | jdj|�� d S )Nr< )r? r �
writeSequence�joinrL )r0 r= r r r rS s z TLSProtocolWrapper.writeSequencec C s t j| � d S )N)r �loseConnection)r0 r r r rU ' s z!TLSProtocolWrapper.loseConnectionc C s* t j| � | jr&| jr&| j r&| j� d S )N)r �connectionMader? rA rB � _clientHello)r0 r r r rV + s
z!TLSProtocolWrapper.connectionMadec C s� | j stj| |� d S | j|7 _yLxF| j� }| j� | j� }tj| |� tj| |� |dkr(|dkr(P q(W W nD tj k
r� } z&t
j | j j
� �|jd f|_|�W Y d d }~X nX d S )Nr< r )r? r � dataReceivedr> �_decrypt�_checkrM rL r rN r
rO r: r2 rP )r0 r= �
decryptedDatarQ rR r r r rX 0 s
z TLSProtocolWrapper.dataReceivedc C s | j � tj| |� d S )N)rH r �connectionLost)r0 �reasonr r r r\ K s z!TLSProtocolWrapper.connectionLostc C sz | j rvtj| jj� �rvtj| jj� �}|d k r<tj|d�}| jrP| jj d }n | jj
� j }| j ||�spt
d��d| _ d S )Nr r zpost connection check)r@ r
Zssl_is_init_finishedr: r2 Zssl_get_peer_certr rA Z transportZaddrZgetPeerr$ r r
)r0 Zx509r$ r r r rZ P s zTLSProtocolWrapper._checkc C sl y"| j dd�}tj| |� d| _W nD tjk
rf } z&tj| jj � �|j
d f|_
|�W Y d d }~X nX d S )Nr )� clientHellor ) rM r rL rB r rN r
rO r: r2 rP )r0 rQ rR r r r rW ] s
z TLSProtocolWrapper._clientHelloc C s t tj| jj� �S )z�Return max. length of data can be written to the BIO.
Writes larger than this value will return a value from
BIO_write() less than the amount requested or if the buffer is
full request a retry.
)r r
� bio_ctrl_get_write_guaranteerE r2 )r0 r r r �_get_wr_guar_ssll s z#TLSProtocolWrapper._get_wr_guar_sslc C s t tj| jj� �S )N)r r
r_ rG r2 )r0 r r r �_get_wr_guar_netx s z#TLSProtocolWrapper._get_wr_guar_netc C s t tj| jj� �S )N)r r
�bio_should_retryrE r2 )r0 r r r �_shoud_retry_ssl~ s z#TLSProtocolWrapper._shoud_retry_sslc C s t tj| jj� �S )N)r r
rb rG r2 )r0 r r r �_shoud_retry_net� s z#TLSProtocolWrapper._shoud_retry_netc C s t tj| jj� �S )N)r r
�bio_ctrl_pendingrE r2 )r0 r r r �_ctrl_pend_ssl� s z!TLSProtocolWrapper._ctrl_pend_sslc C s t tj| jj� �S )N)r r
re rG r2 )r0 r r r �_ctrl_pend_net� s z!TLSProtocolWrapper._ctrl_pend_netc C s t tj| jj� �S )N)r r
� bio_writerE r2 )r0 r r r �
_write_ssl� s z TLSProtocolWrapper._write_sslc C s t tj| jj� �S )N)r r
rh rG r2 )r0 r r r �
_write_net� s z TLSProtocolWrapper._write_netc C s t tj| jj� �S )N)r r
�bio_readrE r2 )r0 r r r � _read_ssl� s z TLSProtocolWrapper._read_sslc C s t tj| jj� �S )N)r r
rk rG r2 )r0 r r r � _read_net� s z TLSProtocolWrapper._read_netr< r c C s� d}| j |7 _ x�| j� dkr*| j dks.|rv| j| j �}|dkr\| j� svtdj| j���n| jsft�| j |d� | _ | j � }|r�| j
|�}|dk r�||7 }q�| j � s�t�qP qW |S )zK
:param data:
:param clientHello:
:return:
r< r z Data left to be written to {}, z but cannot retry SSL connection!Nz?Data left to be written to {}, but cannot retry SSL connection!) r= r` ri rc �IOError�formatrE r@ �AssertionErrorrg rm rd )r0 r= r^ rQ �r�pending�dr r r rM � s(
zTLSProtocolWrapper._encryptc C s� | j |7 _ d}x�| j� dkrh| j dkrh| j| j �}|dkrX| j� shtdj| j���n| j |d � | _ | j� }|r�| j|�}|d k r�||7 }q�| j � s�t
�qP qW |S )Nr< r z Data left to be written to {}, z but cannot retry SSL connection!z?Data left to be written to {}, but cannot retry SSL connection!) r> r` rj rd rn ro rG rf rl rc rp )r0 r= r[ rq rr rs r r r rY � s&
zTLSProtocolWrapper._decryptN)r< r )r< ) r5 r6 r7 r8 r1 rH rC rL rS rU rV rX r\ rZ rW �propertyr` ra rc rd rf rg ri rj rl rm rM rY r r r r r � s0 -(
!)+r8 �__all__Zlogging� functoolsr Ztwisted.internet.reactorZtwistedZtwisted.protocols.policiesZ protocolsr! ZM2Cryptor r r
r ZM2Crypto.SSL.Checkerr r
Ztwisted.internet.interfacesr r Zpy27plusZtypingr r r r Zzope.interfacer Z getLoggerr5 �logr Zinternetr( r r r r �objectr. r9 r r r r r �<module>
s@