/usr/lib/python2.6/site-packages/urllib3/util
Edit: /usr/lib/python2.6/site-packages/urllib3/util/ssl_.pyc (8914B)
Ñò
;vVc @ sÑ d d k l Z l Z d d k l Z l Z l Z d d k l Z l Z d Z e Z
d Z h e d 6e d 6e d 6Z d d k Z d d k Z y< d d k Z d d k l Z l Z l Z d d
k l
Z
Wn e j
o n Xy d d k l Z l Z l Z Wn% e j
o d \ Z Z d Z n Xd Z y d d k l Z Wn5 e j
o) d d k Z d e f d „ ƒ YZ n Xd „ Z d „ Z d „ Z d d d d d „ Z d d d d d d d d d d „ Z! d S( iÿÿÿÿ( t hexlifyt unhexlify( t md5t sha1t sha256i ( t SSLErrort InsecurePlatformWarningi i( i@ N( t wrap_sockett CERT_NONEt PROTOCOL_SSLv23( t HAS_SNI( t OP_NO_SSLv2t OP_NO_SSLv3t OP_NO_COMPRESSIONi i i sš ECDH+AESGCM:DH+AESGCM:ECDH+AES256:DH+AES256:ECDH+AES128:DH+AES:ECDH+HIGH:DH+HIGH:ECDH+3DES:DH+3DES:RSA+AESGCM:RSA+AES:RSA+HIGH:RSA+3DES:!aNULL:!eNULL:!MD5( t
SSLContextR c B sn e Z d e i j o
d j n p
d
e i j Z d „ Z d „ Z d d d „ Z d „ Z d d „ Z
RS( i i i c C sO | | _ t | _ t i | _ d | _ d | _ d | _ d | _
d | _ d S( Ni ( t protocolt Falset check_hostnamet sslR t verify_modet Nonet ca_certst optionst certfilet keyfilet ciphers( t selft protocol_version( ( s2 /tmp/pip-build-cD3xZi/urllib3/urllib3/util/ssl_.pyt __init__? s c C s | | _ | | _ d S( N( R R ( R R R ( ( s2 /tmp/pip-build-cD3xZi/urllib3/urllib3/util/ssl_.pyt load_cert_chainJ s c C s* | | _ | d j o t d ƒ ‚ n d S( Ns- CA directories not supported in older Pythons( R R R ( R t cafilet capath( ( s2 /tmp/pip-build-cD3xZi/urllib3/urllib3/util/ssl_.pyt load_verify_locationsN s
c C s' | i p t d ƒ ‚ n | | _ d S( Ns’ Your version of Python does not support setting a custom cipher suite. Please upgrade to Python 2.7, 3.2, or later if you need this functionality.( t supports_set_cipherst TypeErrorR ( R t cipher_suite( ( s2 /tmp/pip-build-cD3xZi/urllib3/urllib3/util/ssl_.pyt set_ciphersT s
c C sz t i d t ƒ h | i d 6| i d 6| i d 6| i d 6| i d 6} | i o t | d | i
| St | | Sd S( Nsý A true SSLContext object is not available. This prevents urllib3 from configuring SSL appropriately and may cause certain SSL connections to fail. For more information, see https://urllib3.readthedocs.org/en/latest/security.html#insecureplatformwarning.R R R t cert_reqst ssl_versionR ( t warningst warnR R R R R R R! R R ( R t sockett server_hostnamet kwargs( ( s2 /tmp/pip-build-cD3xZi/urllib3/urllib3/util/ssl_.pyR ] s
( i i ( i ( i i N( t __name__t
__module__t syst version_infoR! R R R R R$ R ( ( ( s2 /tmp/pip-build-cD3xZi/urllib3/urllib3/util/ssl_.pyR ; s ! c C sª | i d d ƒ i ƒ } t | ƒ } t i | ƒ } | p t d i | ƒ ƒ ‚ n t | i ƒ ƒ } | | ƒ i ƒ } | | j o" t d i | t
| ƒ ƒ ƒ ‚ n d S( sá
Checks if given fingerprint matches the supplied certificate.
:param cert:
Certificate as bytes object.
:param fingerprint:
Fingerprint as string of hexdigits, can be interspersed by colons.
t :t s" Fingerprint of invalid length: {0}s6 Fingerprints did not match. Expected "{0}", got "{1}".N( t replacet lowert lent HASHFUNC_MAPt getR t formatR t encodet digestR ( t certt fingerprintt
digest_lengtht hashfunct fingerprint_bytest cert_digest( ( s2 /tmp/pip-build-cD3xZi/urllib3/urllib3/util/ssl_.pyt assert_fingerprints s
c C sa | d j o t St | t ƒ o; t t | d ƒ } | d j o t t d | ƒ } n | S| S( sæ
Resolves the argument to a numeric constant, which can be passed to
the wrap_socket function/method from the ssl module.
Defaults to :data:`ssl.CERT_NONE`.
If given a string it is assumed to be the name of the constant in the
:mod:`ssl` module or its abbrevation.
(So you can specify `REQUIRED` instead of `CERT_REQUIRED`.
If it's neither `None` nor a string we assume it is already the numeric
constant which can directly be passed to wrap_socket.
t CERT_N( R R t
isinstancet strt getattrR ( t candidatet res( ( s2 /tmp/pip-build-cD3xZi/urllib3/urllib3/util/ssl_.pyt resolve_cert_reqsŽ s
c C sa | d j o t St | t ƒ o; t t | d ƒ } | d j o t t d | ƒ } n | S| S( s
like resolve_cert_reqs
t PROTOCOL_N( R R RB RC RD R ( RE RF ( ( s2 /tmp/pip-build-cD3xZi/urllib3/urllib3/util/ssl_.pyt resolve_ssl_version¥ s
c C sÕ t | p t i ƒ } | d j o
t i n | } | d j o( d } | t O} | t O} | t O} n | i | O_ t | d t
ƒ o | i | p t ƒ n | | _
t | d d ƒ d j o
t | _ n | S( së All arguments have the same meaning as ``ssl_wrap_socket``.
By default, this function does a lot of the same work that
``ssl.create_default_context`` does on Python 3.4+. It:
- Disables SSLv2, SSLv3, and compression
- Sets a restricted set of server ciphers
If you wish to enable SSLv3, you can do::
from urllib3.util import ssl_
context = ssl_.create_urllib3_context()
context.options &= ~ssl_.OP_NO_SSLv3
You can do the same to enable compression (substituting ``COMPRESSION``
for ``SSLv3`` in the last line above).
:param ssl_version:
The desired protocol version to use. This will default to
PROTOCOL_SSLv23 which will negotiate the highest protocol that both
the server and your installation of OpenSSL support.
:param cert_reqs:
Whether to require the certificate verification. This defaults to
``ssl.CERT_REQUIRED``.
:param options:
Specific OpenSSL options. These default to ``ssl.OP_NO_SSLv2``,
``ssl.OP_NO_SSLv3``, ``ssl.OP_NO_COMPRESSION``.
:param ciphers:
Which cipher suites to allow the server to select.
:returns:
Constructed SSLContext object with specified options
:rtype: SSLContext
i R! R N( R R R R t
CERT_REQUIREDR R R
R RD t TrueR$ t DEFAULT_CIPHERSR R R ( R& R% R R t context( ( s2 /tmp/pip-build-cD3xZi/urllib3/urllib3/util/ssl_.pyt create_urllib3_contextµ s #
c
C só | }
|
d j o t | | d | ƒ}
n | p | ov y |
i | | ƒ Wq° t j
o } t | ƒ ‚ q° t j
o/ } | i t i j o t | ƒ ‚ n ‚ q° Xn | o |
i | | ƒ n t o |
i
| d | ƒS|
i
| ƒ S( s
All arguments except for server_hostname, ssl_context, and ca_cert_dir have
the same meaning as they do when using :func:`ssl.wrap_socket`.
:param server_hostname:
When SNI is supported, the expected hostname of the certificate
:param ssl_context:
A pre-made :class:`SSLContext` object. If none is provided, one will
be created using :func:`create_urllib3_context`.
:param ciphers:
A string of ciphers we wish the client to support. This is not
supported on Python 2.6 as the ssl module does not support it.
:param ca_cert_dir:
A directory containing CA certificates in multiple separate files, as
supported by OpenSSL's -CApath flag or the capath argument to
SSLContext.load_verify_locations().
R R* N( R RN R t IOErrorR t OSErrort errnot ENOENTR R
R ( t sockR R R% R R* R& R t ssl_contextt ca_cert_dirRM t e( ( s2 /tmp/pip-build-cD3xZi/urllib3/urllib3/util/ssl_.pyt ssl_wrap_socketô s$
( i i (" t binasciiR R t hashlibR R R t
exceptionsR R R R R R
t create_default_contextR5 RQ R' R R R R t ImportErrorR R R
RL R. t objectR@ RG RI RN RW ( ( ( s2 /tmp/pip-build-cD3xZi/urllib3/urllib3/util/ssl_.pyt
sJ
8 >