File: //usr/lib64/python3.6/site-packages/M2Crypto/SSL/__pycache__/Connection.cpython-36.opt-1.pyc
3
���[0` � @ s� d dl mZ d dlZd dlZd dlmZmZmZmZm Z m
Z
m Z d dl m
Z
mZmZ d dl mZ d dlmZmZ d dlmZ e r�d dlmZmZmZmZmZm Z m Z m Z d d
gZ ej e!�Z"d d � Z#G d
d � d e$�Z%dS )� )�absolute_importN)�BIO�Err�X509�m2�py27plus�six�util)�Checker�Context�timeout)�SSLError)�Cipher� Cipher_Stack)�Session)�Any�AnyStr�Callable�Dict�List�Optional�Tuple�Union�
Connectionr c O s dS )N� � )�args�kwr r �"/usr/lib64/python3.6/Connection.py�_serverPostConnectionCheck s r c @ sh e Zd ZdZej� ZeZej Z
ej Z ej
Zdejfdd�Zdd� Zdd� Zd d
� Zd d � Zd
d� Zdd� Zd�dd�Zdd� Zdd� Zdd� Zdd� Z d d � Z d d � Z d d!� Z d"d#� Z d$d%� Z!d&d'� Z"d(d)� Z#d*d+� Z$d,d-� Z%d.d/� Z&d0d1� Z'd2d3� Z(d4d5� Z)d6d7� Z*d8d9� Z+d�d;d<�Z,d�d=d>�Z-d?d@� Z.e. Z/Z0dAdB� Z1d�dDdE�Z2d�dFdG�Z3e3Z4dHdI� Z5dJdK� Z6dLdM� Z7d�dNdO�Z8d�dPdQ�Z9dRdS� Z:dTdU� Z;dVdW� Z<dXdY� Z=dZd[� Z>d\d]� Z?d^d_� Z@d`da� ZAdbdc� ZBddde� ZCd�dfdg�ZDdhdi� ZEd�dldm�ZFdndo� ZGdpdq� ZHdrds� ZIdtdu� ZJdvdw� ZKdxdy� ZLdzd{� ZMeNd|d}� �ZOd~d� ZPd�d�� ZQd�d�� ZRd�d�� ZSd�d�� ZTd�d�� ZUd�d�� ZVdS )�r zAn SSL connection.Nc C s� || _ tj| j j �| _|dk r&|| _n$tj|tj�| _| jjtjtjd� | jj � | _
| jj � | _ | j dkrrd| _ tj
| _| j jdk r�| j| j j� d| _dS )zv
:param ctx: SSL.Context
:param sock: socket to be used
:param family: socket family
Nr g �?g �)�ctxr Zssl_new�ssl�socketZ SOCK_STREAM�
setsockopt�
SOL_SOCKETZ SO_REUSEADDR�filenoZ_filenoZ
gettimeout�_timeout� bio_noclose�ssl_close_flagZpost_connection_check�"set_post_connection_check_callback�host)�selfr �sockZfamilyr r r �__init__. s
zConnection.__init__c C sb t | dd �r| j| j� t | dd �r0| j| j� | j| jkrTt | dd �rT| j| j� | jj � d S )N�sslbio�sockbior! )
�getattr� m2_bio_freer. r/ r( �m2_bio_noclose� m2_ssl_freer! r" �close)r+ r r r �__del__K s zConnection.__del__c C s t j| j� d S )N)r Z ssl_shutdownr! )r+ r r r r4 Y s zConnection.closec C s t j| j�S )z�
If there were errors in this connection, call clear() rather
than close() to end it, so that bad sessions will be cleared
from cache.
)r Z ssl_clearr! )r+ r r r �clear] s zConnection.clearc C s t j| j|� dS )a� Sets the shutdown state of the Connection to mode.
The shutdown state of an ssl connection is a bitmask of (use
m2.SSL_* constants):
0 No shutdown setting, yet.
SSL_SENT_SHUTDOWN
A "close notify" shutdown alert was sent to the peer, the
connection is being considered closed and the session is
closed and correct.
SSL_RECEIVED_SHUTDOWN
A shutdown alert was received form the peer, either a normal
"close notify" or a fatal error.
SSL_SENT_SHUTDOWN and SSL_RECEIVED_SHUTDOWN can be set at the
same time.
:param mode: set the mode bitmask.
N)r Zssl_set_shutdown1r! )r+ �moder r r � set_shutdownf s zConnection.set_shutdownc C s t j| j�S )z0Get the current shutdown mode of the Connection.)r Zssl_get_shutdownr! )r+ r r r � get_shutdown s zConnection.get_shutdownc C s | j j|� d S )N)r" �bind)r+ �addrr r r r: � s zConnection.bind� c C s | j j|� d S )N)r" �listen)r+ Zqlenr r r r= � s zConnection.listenc C s t j| j|�S )N)r �
ssl_get_errorr! )r+ �retr r r r> � s zConnection.ssl_get_errorc C s t j| j|j� |j� � dS )a; Explicitly set read and write bios
Connects the BIOs for the read and write operations of the
TLS/SSL (encrypted) side of ssl.
The SSL engine inherits the behaviour of both BIO objects,
respectively. If a BIO is non-blocking, the Connection will also
have non-blocking behaviour.
If there was already a BIO connected to Connection, BIO_free()
will be called (for both the reading and writing side, if
different).
:param readbio: BIO for reading
:param writebio: BIO for writing.
N)r � ssl_set_bior! �_ptr)r+ ZreadbioZwritebior r r �set_bio� s zConnection.set_bioc C s t j| j|� dS )a( Set the acceptable client CA list.
If the client returns a certificate, it must have been issued by
one of the CAs listed in cafile.
Makes sense only for servers.
:param cafile: Filename from which to load the CA list.
:return: 0 A failure while manipulating the STACK_OF(X509_NAME)
object occurred or the X509_NAME could not be
extracted from cacert. Check the error stack to find
out the reason.
1 The operation succeeded.
N)r Z ssl_set_client_CA_list_from_filer! )r+ Zcafiler r r � set_client_CA_list_from_file� s z'Connection.set_client_CA_list_from_filec C s t j| j| jj� dS )z�
Set the acceptable client CA list. If the client
returns a certificate, it must have been issued by
one of the CAs listed in context.
Makes sense only for servers.
N)r Z#ssl_set_client_CA_list_from_contextr! r )r+ r r r � set_client_CA_list_from_context� s z*Connection.set_client_CA_list_from_contextc C s
|| _ d S )N)r; )r+ r; r r r �
setup_addr� s zConnection.setup_addrc C s" |t jt jfkrtd��|| _dS )z�
By default, SSL struct will be freed in __del__. Call with
m2.bio_close to override this default.
:param flag: either m2.bio_close or m2.bio_noclose
z+flag must be m2.bio_close or m2.bio_nocloseN)r Z bio_closer' �
ValueErrorr( )r+ �flagr r r �set_ssl_close_flag� s z Connection.set_ssl_close_flagc C sP t j| jj� d�| _t j| j| j| j� t jt j� �| _ t j
| j | jt j � d S )Nr ) r Zbio_new_socketr" r% r/ r@ r! Zbio_newZ bio_f_sslr. Z bio_set_sslr' )r+ r r r � setup_ssl� s zConnection.setup_sslc C s | j |� | j� dS )Z
DeprecatedN)rE rI )r+ r; r r r �
_setup_ssl� s
zConnection._setup_sslc C s t j| j� dS )z+Sets Connection to work in the server mode.N)r Zssl_set_accept_stater! )r+ r r r �set_accept_state� s zConnection.set_accept_statec C s t j| j| j�S )a Waits for a TLS/SSL client to initiate the TLS/SSL handshake.
The communication channel must already have been set and
assigned to the ssl by setting an underlying BIO.
:return: 0 The TLS/SSL handshake was not successful but was shut
down controlled and by the specifications of the
TLS/SSL protocol. Call get_error() with the return
value ret to find out the reason.
1 The TLS/SSL handshake was successfully completed,
a TLS/SSL connection has been established.
<0 The TLS/SSL handshake was not successful because
a fatal error occurred either at the protocol level
or a connection failure occurred. The shutdown was
not clean. It can also occur of action is need to
continue the operation for non-blocking BIOs. Call
get_error() with the return value ret to find
out the reason.
)r Z
ssl_acceptr! r& )r+ r r r �
accept_ssl� s zConnection.accept_sslc C st | j j� \}}t| j|�}||_|j� |j� |j� t| d| j �}|dk rl||j
� |jd �slt j d��||fS )a Accept an SSL connection.
The return value is a pair (ssl, addr) where ssl is a new SSL
connection object and addr is the address bound to the other end
of the SSL connection.
:return: tuple of Connection and addr. Address can take very
various forms (see socket documentation), for IPv4 it
is tuple(str, int), for IPv6 a tuple of four (host,
port, flowinfo, scopeid), where the last two are
optional ints.
�postConnectionCheckNr z post connection check failed)
r" �acceptr r r; rI rK rL r0 �serverPostConnectionCheck�
get_peer_certr
�SSLVerificationError)r+ r, r; r! �checkr r r rN s zConnection.acceptc C s t j| j� dS )z+Sets Connection to work in the client mode.N)r Zssl_set_connect_stater! )r+ r r r �set_connect_state s z Connection.set_connect_statec C s t j| j| j�S )N)r Z ssl_connectr! r& )r+ r r r � connect_ssl# s zConnection.connect_sslc C sn | j j|� || _| j� | j� | j� }t| d| j�}|dk rj|| j� | j rT| j n| jd �sjt
j d��|S )z�Overloading socket.connect()
:param addr: addresses have various depending on their type
:return:status of ssl_connect()
rM Nr z post connection check failed) r" �connectr; rI rS rT r0 �clientPostConnectionCheckrP r* r
rQ )r+ r; r? rR r r r rU ' s zConnection.connectc C s t j| j|� d S )N)r Zssl_set_shutdownr! )r+ Zhowr r r �shutdown= s zConnection.shutdownc C s t j| j�S )z-Renegotiate this connection's SSL parameters.)r Zssl_renegotiater! )r+ r r r � renegotiateA s zConnection.renegotiatec C s t j| j�S )zBReturn the numbers of octets that can be read from the connection.)r Z ssl_pendingr! )r+ r r r �pendingF s zConnection.pendingc C s t j| j|| j�S )N)r Z ssl_writer! r& )r+ �datar r r �
_write_bioK s zConnection._write_bioc C s t j| j|�S )N)r Zssl_write_nbior! )r+ rZ r r r � _write_nbioO s zConnection._write_nbio� c C s" |dkrt d��tj| j|| j�S )Nr z size <= 0)rF r �ssl_readr! r& )r+ �sizer r r � _read_bioS s zConnection._read_bioc C s |dkrt d��tj| j|�S )Nr z size <= 0)rF r Z
ssl_read_nbior! )r+ r_ r r r �
_read_nbioY s zConnection._read_nbioc C s | j dkr| j|�S | j|�S )Ng )r& r[ r\ )r+ rZ r r r �write_ s
zConnection.writec C s d S )Nr )r+ r r r �_decref_socketiosf s z Connection._decref_socketiosr c C s� |dkrt |�n|}|dkr$td��tj| j|| j�}t |�}trrt|t�rr||d|�< dt |�| ||d�< n ||dd�< |S )a�
A version of recv() that stores its data into a buffer rather
than creating a new string. Receive up to buffersize bytes from
the socket. If buffersize is not specified (or 0), receive up
to the size available in the given buffer.
If buff is bytearray, it will have after return length of the
actually returned number of bytes. If buff is memoryview, then
the size of buff won't change (it cannot), but all bytes after
the number of returned bytes will be NULL.
:param buffer: a buffer for the received bytes
:param nbytes: maximum number of bytes to read
:return: number of bytes read
See recv() for documentation about the flags.
r z size <= 0N� ) �lenrF r r^ r! r& r �
isinstance�
memoryview)r+ Zbuff�nbytes�nZ
buff_bytes�buflenr r r � recv_intoi s zConnection.recv_intoc C s | j dkr| j|�S | j|�S )Ng )r& r` ra )r+ r_ r r r �read� s
zConnection.readc C s" | j j|� |rd| _nd| _dS )a� Set this connection's underlying socket to _mode_.
Set blocking or non-blocking mode of the socket: if flag is 0,
the socket is set to non-blocking, else to blocking mode.
Initially all sockets are in blocking mode. In non-blocking mode,
if a recv() call doesn't find any data, or if a send() call can't
immediately dispose of the data, a error exception is raised;
in blocking mode, the calls block until they can proceed.
s.setblocking(0) is equivalent to s.settimeout(0.0);
s.setblocking(1) is equivalent to s.settimeout(None).
:param mode: new mode to be set
g �?g Ng �)r" � setblockingr& )r+ r7 r r r rm � s zConnection.setblockingc C s& | j j|� || _| jdkr"d| _dS )z?Set this connection's underlying socket's timeout to _timeout_.Ng �?g �)r" �
settimeoutr& )r+ r r r r rn � s
zConnection.settimeoutc C s
| j j� S )N)r" r% )r+ r r r r% � s zConnection.filenoc C s | j j|||�S )a� Get the value of the given socket option.
:param level: level at which the option resides.
To manipulate options at the sockets API level, level is
specified as socket.SOL_SOCKET. To manipulate options at
any other level the protocol number of the appropriate
protocol controlling the option is supplied. For example,
to indicate that an option is to be interpreted by the
TCP protocol, level should be set to the protocol number
of socket.SOL_TCP; see getprotoent(3).
:param optname: The value of the given socket option is
described in the Unix man page getsockopt(2)). The needed
symbolic constants (SO_* etc.) are defined in the socket
module.
:param buflen: If it is absent, an integer option is assumed
and its integer value is returned by the function. If
buflen is present, it specifies the maximum length of the
buffer used to receive the option in, and this buffer is
returned as a bytes object.
:return: Either integer or bytes value of the option. It is up
to the caller to decode the contents of the buffer (see
the optional built-in module struct for a way to decode
C structures encoded as byte strings).
)r" �
getsockopt)r+ �level�optnamerj r r r ro � s zConnection.getsockoptc C s | j j|||�S )a8 Set the value of the given socket option.
:param level: same as with getsockopt() above
:param optname: same as with getsockopt() above
:param value: an integer or a string representing a buffer. In
the latter case it is up to the caller to ensure
that the string contains the proper bits (see the
optional built-in module struct for a way to
encode C structures as strings).
:return: None for success or the error handler for failure.
)r" r# )r+ rp rq �valuer r r r# � s zConnection.setsockoptc C s t j| j�S )z:Return the Context object associated with this connection.)r Zssl_get_ssl_ctxr! )r+ r r r � get_context� s zConnection.get_contextc C s t j| j�S )a� Return the SSL state of this connection.
During its use, an SSL objects passes several states. The state
is internally maintained. Querying the state information is not
very informative before or when a connection has been
established. It however can be of significant interest during
the handshake.
:return: 6 letter string indicating the current state of the SSL
object ssl.
)r Z
ssl_get_stater! )r+ r r r � get_state� s
zConnection.get_statec C s t j| j�t jkS )N)r �ssl_get_verify_resultr! Z X509_V_OK)r+ r r r � verify_ok� s zConnection.verify_okc C s t j| j�S )z.Return the peer certificate verification mode.)r Zssl_get_verify_moder! )r+ r r r �get_verify_mode� s zConnection.get_verify_modec C s t j| j�S )z/Return the peer certificate verification depth.)r Zssl_get_verify_depthr! )r+ r r r �get_verify_depth s zConnection.get_verify_depthc C s t j| j�S )z0Return the peer certificate verification result.)r ru r! )r+ r r r �get_verify_result s z Connection.get_verify_resultc C s$ t j| j�}|dkrdS tj|d�S )zfReturn the peer certificate.
If the peer did not provide a certificate, return None.
Nr )r Zssl_get_peer_certr! r )r+ �cr r r rP s zConnection.get_peer_certc C s" t j| j�}|dkrdS tj|�S )aE Return the peer certificate chain; if the peer did not provide
a certificate chain, return None.
:warning: The returned chain will be valid only for as long as the
connection object is alive. Once the connection object
gets freed, the chain will be freed as well.
N)r Zssl_get_peer_cert_chainr! r Z
X509_Stack)r+ rz r r r �get_peer_cert_chain s z Connection.get_peer_cert_chainc C s t j| j�}|dkrdS t|�S )z�Return an M2Crypto.SSL.Cipher object for this connection; if the
connection has not been initialised with a cipher suite, return None.
N)r Zssl_get_current_cipherr! r )r+ rz r r r �
get_cipher) s zConnection.get_cipherc C s t j| j�}|dkrdS t|�S )z�Return an M2Crypto.SSL.Cipher_Stack object for this
connection; if the connection has not been initialised with
cipher suites, return None.
N)r Zssl_get_ciphersr! r )r+ rz r r r � get_ciphers3 s zConnection.get_ciphersc C s t jtj| j|��S )z@Return the cipher suites for this connection as a string object.)r � ensure_textr Zssl_get_cipher_listr! )r+ �idxr r r �get_cipher_list> s zConnection.get_cipher_listc C s t j| j|�S )z*Set the cipher suites for this connection.)r Zssl_set_cipher_listr! )r+ Z cipher_listr r r �set_cipher_listC s zConnection.set_cipher_list�rbr c C s$ t jrtj| |�S tj| ||�S d S )N)r ZPY3r" ZSocketIOZ _fileobject)r+ r7 �bufsizer r r �makefileH s zConnection.makefilec C s
| j j� S )a Return the socket's own address.
This is useful to find out the port number of an IPv4/v6 socket,
for instance. (The format of the address returned depends
on the address family -- see above.)
:return:socket's address as addr type
)r" � getsockname)r+ r r r r� O s
zConnection.getsocknamec C s
| j j� S )z�Return the remote address to which the socket is connected.
This is useful to find out the port number of a remote IPv4/v6 socket,
for instance.
On some systems this function is not supported.
:return:
)r" � getpeername)r+ r r r r� [ s
zConnection.getpeernamec C s" t j| j|�}|s ttj� ��d S )N)r Zssl_set_session_id_contextr! r
r Zget_error_message)r+ �idr? r r r �set_session_id_ctxg s z Connection.set_session_id_ctxc C s t j| j�}t|�S )N)r Zssl_get_sessionr! r )r+ Zsessr r r � get_sessionm s zConnection.get_sessionc C s t j| j|j� � d S )N)r Zssl_set_sessionr! rA )r+ Zsessionr r r � set_sessionr s zConnection.set_sessionc C s t j| j�S )N)r Z ssl_get_default_session_timeoutr! )r+ r r r �get_default_session_timeoutv s z&Connection.get_default_session_timeoutc C s t j| jjtjtjt j� ��S )N)r �struct_to_timeoutr" ro r$ � SO_RCVTIMEO� struct_size)r+ r r r �get_socket_read_timeoutz s z"Connection.get_socket_read_timeoutc C s dj dd� | D ��S )N�:c s s& | ] }d j tjrt|�n|�V qdS )z{0:02x}N)�formatr ZPY2�ord)�.0rz r r r � <genexpr>� s z&Connection._hexdump.<locals>.<genexpr>)�join)�sr r r �_hexdump� s zConnection._hexdumpc C s& | j jt jt jtj� �}tj|�}|S )N)r" ro r$ � SO_SNDTIMEOr r� r� )r+ �binstr�timeor r r �get_socket_write_timeout� s
z#Connection.get_socket_write_timeoutc C s | j jt jt j|j� � d S )N)r" r# r$ r� �pack)r+ r� r r r �set_socket_read_timeout� s z"Connection.set_socket_read_timeoutc C s |j � }| jjtjtj|� d S )N)r� r" r# r$ r� )r+ r� r� r r r �set_socket_write_timeout� s z#Connection.set_socket_write_timeoutc C s t jtj| j��S )z8Return the TLS/SSL protocol version for this connection.)r r~ r Zssl_get_versionr! )r+ r r r � get_version� s zConnection.get_versionc C s
|| _ d S )N)rM )r+ rM r r r r) � s z-Connection.set_post_connection_check_callbackc C s t j| j|� dS )z[Set the requested hostname for the SNI (Server Name Indication)
extension.
N)r Zssl_set_tlsext_host_namer! )r+ �namer r r �set_tlsext_host_name� s z Connection.set_tlsext_host_namec C s
|| _ dS )z>Set the requested hostname to check in the server certificate.N)r* )r+ r� r r r � set1_host� s zConnection.set1_host)r< )r] )r] )r )r] )N)N)r ���)r� r� )W�__name__�
__module__� __qualname__�__doc__r
rV r rO r Zbio_freer1 Zssl_freer3 r' r2 r" ZAF_INETr- r5 r4 r6 r8 r9 r: r= r> rB rC rD rE rH rI rJ rK rL rN rS rT rU rW rX rY r[ r\ r` ra rb Zsendall�sendrc rk rl Zrecvrm rn r% ro r# rs rt rv rw rx ry rP r{ r| r} r� r� r� r� r� r� r� r� r� r� � staticmethodr� r� r� r� r� r) r� r� r r r r r $ s�
%
)&Z
__future__r Zloggingr" ZM2Cryptor r r r r r r Z M2Crypto.SSLr
r r r
ZM2Crypto.SSL.Cipherr r ZM2Crypto.SSL.Sessionr Ztypingr r r r r r r r �__all__Z getLoggerr� �logr �objectr r r r r �<module> s $ (