/usr/lib/python2.6/site-packages/setuptools
Edit: /usr/lib/python2.6/site-packages/setuptools/ssl_support.pyc (7937B)
Ñò
ÿ Wc @ s$ d d k Z d d k Z d d k Z d d k Z d d k l Z l Z l Z d d k Z d d k l Z l
Z
y d d k Z Wn e j
o
d Z n Xd d d d d g Z d i ƒ i ƒ Z y e i i Z e i Z Wn e j
o e Z Z n Xe d j o e e e f j Z y d d
k l Z l Z WnY e j
oM y$ d d k l Z d d k l Z Wqe j
o d Z d Z qXn Xe p d
e f d „ ƒ YZ n e p d d „ Z d „ Z n d e f d „ ƒ YZ d e f d „ ƒ YZ d d „ Z d a d „ Z! d „ Z" d S( iÿÿÿÿN( t urllibt http_clientt map( t ResolutionErrort ExtractionErrort VerifyingHTTPSHandlert find_ca_bundlet is_availablet
cert_pathst
opener_forsë
/etc/pki/tls/certs/ca-bundle.crt
/etc/ssl/certs/ca-certificates.crt
/usr/share/ssl/certs/ca-bundle.crt
/usr/local/share/certs/ca-root.crt
/etc/ssl/cert.pem
/System/Library/OpenSSL/certs/cert.pem
/usr/local/share/certs/ca-root-nss.crt
( t CertificateErrort match_hostname( R
( R R
c B s e Z RS( ( t __name__t
__module__( ( ( s: /tmp/pip-build-iUCeBS/setuptools/setuptools/ssl_support.pyR
4 s i c
C s] g } | p t S| i d ƒ } | d } | d } | i d ƒ } | | j o t d t | ƒ ƒ ‚ n | p | i ƒ | i ƒ j S| d j o | i d ƒ n] | i d ƒ p | i d ƒ o | i t i | ƒ ƒ n# | i t i | ƒ i
d d ƒ ƒ x$ | D] } | i t i | ƒ ƒ q
Wt i d
d i | ƒ d t i
ƒ } | i | ƒ S(
sp Matching according to RFC 6125, section 6.4.3
http://tools.ietf.org/html/rfc6125#section-6.4.3
t .i i t *s, too many wildcards in certificate DNS name: s [^.]+s xn--s \*s [^.]*s \As \.s \Z( t Falset splitt countR
t reprt lowert appendt
startswitht ret escapet replacet compilet joint
IGNORECASEt match(
t dnt hostnamet
max_wildcardst patst partst leftmostt remaindert wildcardst fragt pat( ( s: /tmp/pip-build-iUCeBS/setuptools/setuptools/ssl_support.pyt _dnsname_match8 s,
" &c C sk | p t d ƒ ‚ n g } | i d d
ƒ } xG | D]? \ } } | d j o& t | | ƒ o d S| i | ƒ q6 q6 W| pk xh | i d d ƒ D]P } xG | D]? \ } } | d j o& t | | ƒ o d S| i | ƒ q q Wq“ Wn t | ƒ d j o, t d | d i t t | ƒ ƒ f ƒ ‚ n> t | ƒ d j o t d
| | d f ƒ ‚ n
t d ƒ ‚ d S( s= Verify that *cert* (in decoded format as returned by
SSLSocket.getpeercert()) matches the *hostname*. RFC 2818 and RFC 6125
rules are followed, but IP addresses are not accepted for *hostname*.
CertificateError is raised on failure. On success, the function
returns nothing.
s empty or no certificatet subjectAltNamet DNSNt subjectt
commonNamei s& hostname %r doesn't match either of %ss , s hostname %r doesn't match %ri s= no appropriate commonName or subjectAltName fields were found( ( ( t
ValueErrort getR( R t lenR
R R R ( t certR t dnsnamest sant keyt valuet sub( ( s: /tmp/pip-build-iUCeBS/setuptools/setuptools/ssl_support.pyR l s4
&c B s e Z d Z d „ Z d „ Z RS( s= Simple verifying handler: no auth, subclasses, timeouts, etc.c C s | | _ t i | ƒ d S( N( t ca_bundlet HTTPSHandlert __init__( t selfR6 ( ( s: /tmp/pip-build-iUCeBS/setuptools/setuptools/ssl_support.pyR8 ˜ s c s ˆ i ‡ f d † | ƒ S( Nc s t | ˆ i | S( ( t VerifyingHTTPSConnR6 ( t hostt kw( R9 ( s: /tmp/pip-build-iUCeBS/setuptools/setuptools/ssl_support.pyt
ž s ( t do_open( R9 t req( ( R9 s: /tmp/pip-build-iUCeBS/setuptools/setuptools/ssl_support.pyt
https_openœ s ( R R
t __doc__R8 R@ ( ( ( s: /tmp/pip-build-iUCeBS/setuptools/setuptools/ssl_support.pyR • s R: c B s e Z d Z d „ Z d „ Z RS( s@ Simple verifying connection: no auth, subclasses, timeouts, etc.c K s t i | | | | | _ d S( N( t HTTPSConnectionR8 R6 ( R9 R; R6 R< ( ( s: /tmp/pip-build-iUCeBS/setuptools/setuptools/ssl_support.pyR8 ¤ s c C sñ t i | i | i f t | d d ƒ ƒ } t | d ƒ o3 t | d d ƒ o | | _ | i ƒ | i } n
| i } t
i | d t
i d | i
ƒ| _ y t | i i ƒ | ƒ Wn6 t j
o* | i i t i ƒ | i i ƒ ‚ n Xd S( Nt source_addresst _tunnelt _tunnel_hostt cert_reqst ca_certs( t sockett create_connectionR; t portt getattrt Nonet hasattrt sockRD RE t sslt wrap_sockett
CERT_REQUIREDR6 R t getpeercertR
t shutdownt SHUT_RDWRt close( R9 RN t actual_host( ( s: /tmp/pip-build-iUCeBS/setuptools/setuptools/ssl_support.pyt connect¨ s $#
( R R
RA R8 RW ( ( ( s: /tmp/pip-build-iUCeBS/setuptools/setuptools/ssl_support.pyR: ¢ s c C s# t i i t | p t ƒ ƒ ƒ i S( s@ Get a urlopen() replacement that uses ca_bundle for verification( R t requestt build_openerR R t open( R6 ( ( s: /tmp/pip-build-iUCeBS/setuptools/setuptools/ssl_support.pyR Ã s c s{ t d j o t i Sy d d k l ‰ Wn t j
o d SXd ˆ f ‡ ‡ f d † ƒ Y‰ ˆ d d d g ƒ a t i S( Niÿÿÿÿ( t CertFilet
MyCertFilec s, e Z d d ‡ f d † Z ‡ f d † Z RS( c sL ˆ i | ƒ x | D] } | i | ƒ q W| i | ƒ t i | i ƒ d S( N( R8 t addstoret addcertst atexitt registerRU ( R9 t storest certst store( R[ ( s: /tmp/pip-build-iUCeBS/setuptools/setuptools/ssl_support.pyR8 × s
c s1 y t ˆ | ƒ i ƒ Wn t j
o n Xd S( N( t superRU t OSError( R9 ( R\ ( s: /tmp/pip-build-iUCeBS/setuptools/setuptools/ssl_support.pyRU Þ s ( ( ( R R
R8 RU ( ( R\ R[ ( s: /tmp/pip-build-iUCeBS/setuptools/setuptools/ssl_support.pyR\ Ö s Ra t CAt ROOT( t _wincertsRL t namet wincertstoreR[ t ImportError( ( ( R\ R[ s: /tmp/pip-build-iUCeBS/setuptools/setuptools/ssl_support.pyt get_win_certfileÌ s
c C sy t i d j o t ƒ Sx& t D] } t i i | ƒ o | Sq Wy t i d d ƒ SWn t t t
f j
o d SXd S( s* Return an existing CA bundle path, or Nonet ntt certifis
cacert.pemN( t osRi Rl R t patht isfilet
pkg_resourcest resource_filenameRk R R RL ( t cert_path( ( s: /tmp/pip-build-iUCeBS/setuptools/setuptools/ssl_support.pyR è s (# Ro RH R_ R t setuptools.extern.six.movesR R R Rr R R RO Rk RL t __all__t stripR R RX R7 RB t AttributeErrort objectR R
R t backports.ssl_match_hostnameR- R( R R: R Rh Rl R ( ( ( s: /tmp/pip-build-iUCeBS/setuptools/setuptools/ssl_support.pyt sN
4
)
!