⚝
One Hat Cyber Team
⚝
Your IP:
216.73.216.184
Server IP:
97.74.87.16
Server:
Linux 16.87.74.97.host.secureserver.net 5.14.0-503.38.1.el9_5.x86_64 #1 SMP PREEMPT_DYNAMIC Fri Apr 18 08:52:10 EDT 2025 x86_64
Server Software:
Apache
PHP Version:
8.2.28
Buat File
|
Buat Folder
Eksekusi
Dir :
~
/
var
/
opt
/
nydus
/
ops
/
oscrypto
/
_mac
/
__pycache__
/
View File Name :
tls.cpython-39.pyc
a ���g�� � @ sz d dl mZmZmZmZ d dlZd dlZd dlZd dlZ d dl Z d dl Z d dl Z d dl Z ddlmZmZmZmZ ddlmZmZmZ ddlmZmZmZ ddl m Z dd l m Z m Z m!Z!m"Z"m#Z#m$Z$m%Z%m&Z&m'Z'm(Z(m)Z)m*Z*m+Z+m,Z, dd l-m.Z.m/Z/m0Z0m1Z1 dd l2m3Z3 dd l4m5Z5 dd l6m7Z7m8Z8m9Z9 ddl:m;Z;m<Z<m=Z=m>Z>m?Z?m@Z@mAZAmBZBmCZCmDZDmEZEmFZFmGZGmHZHmIZImJZJmKZKmLZLmMZM ddlNmOZOmZ ddlPmQZQ ejRdk �r�eSZTejRdk �r�ejUZVnejVZVddgZWejXejYejZej[ej\d�Z]ejXdejYdejZdej[dej\diZ^e�_d�Z`e�_d �Zae �b� Zci Zdd d � Zed d � Zfd!d"� Zge#ed#ee�Zhe#ed$eg�ZiG d%d� dej�ZkG d&d� dej�ZldS )'� )�unicode_literals�division�absolute_import�print_functionN� )�Security�osx_version_info�handle_sec_error� SecurityConst)�CoreFoundation�handle_cf_error� CFHelpers� )� Certificate� int_to_bytes�timezone)�pretty_message)�array_from_pointer� array_set�buffer_from_bytes�bytes_from_buffer�callback�cast�deref�new�null� pointer_set�struct� struct_bytes�unwrap�write_to_buffer)� type_name�str_cls�byte_cls� int_types)�CIPHER_SUITE_MAP)� rand_bytes)�TLSError�TLSDisconnectError�TLSGracefulDisconnectError)�detect_client_auth_request�detect_other_protocol� extract_chain�get_dh_params_length�parse_session_info�raise_client_auth�raise_dh_params�raise_disconnection�raise_expired_not_yet_valid�raise_handshake�raise_hostname�raise_lifetime_too_long�raise_no_issuer�raise_protocol_error�raise_protocol_version� raise_revoked�raise_self_signed�raise_verification�raise_weak_signature)�load_certificater )�parse_certificate)� )r? � � TLSSession� TLSSocket)�SSLv2�SSLv3�TLSv1�TLSv1.1�TLSv1.2rC rD rE rF rG s ( | | )zGanon|PSK|SEED|RC4|MD5|NULL|CAMELLIA|ARIA|SRP|KRB5|EXPORT|(?<!3)DES|IDEAc C s` d}�z t �| �}|s"t�| �}n|j}|s6|s6W dS t|�}|�� }d}d}z�t|�|k r�|dur�|dkr�t�|gg g |�\} } } t| �dkr�t� t j d��|� |t|� �} || 7 }| dkrPt|�dkr�|du r�t jW W S t jW W S q�qPW n. tj �y } z| j }W Y d} ~ n d} ~ 0 0 |du�r\|t j k�r\|t jk�sL|t jk�rTt jW S t jW S |�r�|j�s�t|�dk�r�t|j�dk�r�|dd� tdd g�v } |dd� tg d ��v }| �r�|�s�| j|t|� 7 _t jW S | j|7 _t||� t|t|�� t|�|k�r t jW S W dS t�yZ } z |�r@| |_t jW Y d} ~ S d} ~ 0 0 dS ) a� Callback called by Secure Transport to actually read the socket :param connection_id: An integer identifying the connection :param data_buffer: A char pointer FFI type to write the data to :param data_length_pointer: A size_t pointer FFI type of the amount of data to read. Will be overwritten with the amount of data read on return. :return: An integer status code of the result - 0 for success Nr � � z timed outr? r � � )s s s s s ) �_connection_refs�get� _socket_refs�_socketr � gettimeout�len�select�socket_�error�errno�EAGAIN�recvr �errSSLClosedNoNotify�errSSLClosedAbort� ECONNRESET�EPIPE�_done_handshake� _server_hello�set�_read_remaining�errSSLProtocolr r �errSSLWouldBlock�KeyboardInterrupt� _exception)� connection_id� data_buffer�data_length_pointer�self�socketZbytes_requested�timeoutrT �data� read_ready�_�chunk�eZvalid_record_typeZvalid_protocol_version� ro �B/opt/nydus/tmp/pip-target-mke_irhy/lib/python/oscrypto/_mac/tls.py�_read_callbackf sb rq c C s^ d}| � � }z@z | �d� || �d�7 }W n tjy> Y n0 W | �|� n | �|� 0 |S )z� Reads everything available from the socket - used for debugging when there is a protocol error :param socket: The socket to read from :return: A byte string of the remaining data rH rI � )rP � settimeoutrW rS rT )rh �outputZ old_timeoutro ro rp r_ � s r_ c C s& z�t �| �}|s t�| �}n|j}|s0|s0W dS t|�}t||�}|rZ|jsZ| j|7 _d}z|�|�}W n, t j y� } z| j }W Y d} ~ n d} ~ 0 0 |dur�|t j kr�|t j ks�|t jkr�tjW S tjW S ||kr�t||� tjW S W dS t�y } z| |_tjW Y d} ~ S d} ~ 0 0 dS )a� Callback called by Secure Transport to actually write to the socket :param connection_id: An integer identifying the connection :param data_buffer: A char pointer FFI type containing the data to write :param data_length_pointer: A size_t pointer FFI type of the amount of data to write. Will be overwritten with the amount of data actually written on return. :return: An integer status code of the result - 0 for success r N)rL rM rN rO r r r\ � _client_hello�sendrS rT rU rV rZ r[ r rX rY r ra rb rc ZerrSSLPeerUserCancelled) rd re rf rg rh Z data_lengthrj rT �sentrn ro ro rp �_write_callback� s6 rx Z SSLReadFuncZ SSLWriteFuncc @ s. e Zd ZdZdZdZdZdZdZddd�Z dS )rA zj A TLS session object that multiple TLSSocket objects can share for the sake of session reuse NFc C sN t |t�s ttdt|����|| _|du r6tg d��}t |t�rLt|g�}n t |t�shttdt|����|tg d�� }|r�ttdt |����|| _ g | _ |�r@|D ]�}t |t �r�|j }nxt |t�r�t|�}ndt |t��rt|d�� }t|�� �}W d � n1 �s0 Y n t |t��s2ttdt|����| j �|� q�td �| _dS ) a] :param protocol: A unicode string or set of unicode strings representing allowable protocols to negotiate with the server: - "TLSv1.2" - "TLSv1.1" - "TLSv1" - "SSLv3" Default is: {"TLSv1", "TLSv1.1", "TLSv1.2"} :param manual_validation: If certificate and certificate path validation should be skipped and left to the developer to implement :param extra_trust_roots: A list containing one or more certificates to be treated as trust roots, in one of the following formats: - A byte string of the DER encoded certificate - A unicode string of the certificate filename - An asn1crypto.x509.Certificate object - An oscrypto.asymmetric.Certificate object :raises: ValueError - when any of the parameters contain an invalid value TypeError - when any of the parameters are of the wrong type OSError - when an error is returned by the OS crypto library zM manual_validation must be a boolean, not %s N)rE rF rG zu protocol must be a unicode string or set of unicode strings, not %s )rD rE rF rG z� protocol must contain only the unicode strings "SSLv3", "TLSv1", "TLSv1.1", "TLSv1.2", not %s �rbz� extra_trust_roots must be a list of byte strings, unicode strings, asn1crypto.x509.Certificate objects or oscrypto.asymmetric.Certificate objects, not %s � )� isinstance�bool� TypeErrorr r! �_manual_validationr^ r" � ValueError�repr� _protocols�_extra_trust_rootsr Zasn1r# r> �open�read�Asn1Certificate�appendr& �_peer_id)rg �protocol�manual_validationZextra_trust_rootsZunsupported_protocolsZextra_trust_root�fro ro rp �__init__ sN � �� . �zTLSSession.__init__)NFN) �__name__� __module__� __qualname__�__doc__r� Z_ciphersr~ r� r� r� ro ro ro rp rA s c @ st e Zd ZdZdZdZdZdZdZdZ dZ dZ dZ dZ dZdZdZdZdZdZdZdZdZed=dd��Zd>dd�Zd d � Zd d � Zd?d d�Z dd� Z dd� Z dd� Z dd� Z dd� Z!d@dd�Z"dd � Z#d d � Z$d d � Z%d!d"� Z&d#d$� Z'e(d%d&� �Z)e(d'd(� �Z*e(d)d*� �Z+e(d+d,� �Z,e(d-d.� �Z-e(d/d0� �Z.e(d1d2� �Z/e(d3d4� �Z0e(d5d6� �Z1e(d7d8� �Z2e(d9d:� �Z3d;d<� Z4dS )ArB z8 A wrapper around a socket.socket that adds TLS NFc C s� t |tj�s ttdt|����t |t�s:ttdt|����|dur^t |t�s^ttdt|����| dd|d�}||_||_ |� � |S )az Takes an existing socket and adds TLS :param socket: A socket.socket object to wrap with TLS :param hostname: A unicode string of the hostname or IP the socket is connected to :param session: An existing TLSSession object to allow for session reuse, specific protocol or manual certificate validation :raises: ValueError - when any of the parameters contain an invalid value TypeError - when any of the parameters are of the wrong type OSError - when an error is returned by the OS crypto library zU socket must be an instance of socket.socket, not %s zK hostname must be a unicode string, not %s N�` session must be an instance of oscrypto.tls.TLSSession, not %s )�session) r{ rS rh r} r r! r" rA rO � _hostname� _handshake)�clsrh �hostnamer� Z new_socketro ro rp �wrap� s( � ��zTLSSocket.wrap� c C s� d| _ d| _d| _d| _|du r0|du r0d| _n|t|t�sLttdt |����t|t �shttdt |����|dur�t|t j �s�ttdt |����t �||f|�| _| j�|� |du r�t� }n t|t�s�ttdt |����|| _| jr�|| _| �� dS )a� :param address: A unicode string of the domain name or IP address to connect to :param port: An integer of the port number to connect to :param timeout: An integer timeout to use for the socket :param session: An oscrypto.tls.TLSSession object to allow for session reuse and controlling the protocols and validation performed FrH NzR address must be a unicode string, not %s zI port must be an integer, not %s zJ timeout must be a number, not %s r� )r\ r] ru �_decrypted_bytesrO r{ r" r} r r! r$ �numbers�NumberrS �create_connectionrs rA �_sessionr� r� )rg �address�portri r� ro ro rp r� � sD � �� �zTLSSocket.__init__c \ C s2 d}d}d}d}d}d}d}d}� z�� z�t dk rXttd�} t�d| �} t| � t| �}nt�t� tj tj �}t� |t t �} t| � t| �d | _| t| j< | jt| j< t�|| j�} t| � | j�d�} t�|| t| ��} t| � t dk�r| jjp�| jj} | jj �o| jj} nd} | jj } t dk �r|d D ]0}t| }|| jj v }t� |||�} t| � �q.| �r�t� |d�} t| � nhd d � | jj D �}t |�}t |�}t�!||�} t| � t�"||�} t| � | �r�t�#|tj$d�} t| � ttd �}t�%||�} t| � t&|�}t'|d �}t(td|�}t�)|||�} t| � t&|�}t*td||�}g }|D ]<}t+|dd�}t,�-||�} t.�/| �du } | �rV|�0|� �qVt|�} ttd| �} t1| |� t(td| �} t�2|| | �} t| � | jj3| j�d� }!t�4||!t|!��} t| � t�5|�}"| j6du�r(| j6}#d| _6|#�|"tj7k�r^t�5|�}"| j6du�r(| j6}#d| _6|#��q(t dk �r�t dk�r�| �o~|"dk}$n| �o�|"tj8k}$|$�r�ttd�}%t�9||%�} t| � t|%�}t:�;| j�}&t�<d|&�}t=�>|&�} t?| � t@td�}'t|'�}(ttjA�|(_Bt'tjA�})t(td|)�|(_Cttd�}*t�DtjE|'t� |*�} t| � t|*�}ttd�}+t�F||+�} t| � t|+�}t@td�},t|,�}-tjG|-_HtjItjJB |-_KtL|,�}.t@td�}/t|/�}0t|.�|0_Bt'|.�}1t(td|1�|0_Ct�M||/�} t| � t@td�}2t|2�}3ttjN�|3_Bt'tjN�}4t(td|4�|3_Cttd�}5t�DtjE|2t� |5�} t| � t|5�}ttd�}6t�F||6�} t| � t|6�}t@td �}7t|7�}8tjO|8_Hd|8_PtL|7�}9t@td�}/t|/�}0t|9�|0_Bt'|9�}:t(td|:�|0_Ct�M||/�} t| � t:�Q|||g�}t�R||�} t| � | jj�rvg };g }<| jjD ]$}=tS|=�}>|<�0|>� |;�0|>jT� �q t�U|d�} t| � t:�Q|;�}?t�V||?�} t| � ttd �}@t�W||@�} t| � t&|@�}AtXtjYtjZg�}B|A|Bv�r�tj[}"n$t�5|�}"|"tj7k�r�t�5|�}"�q�d| _\tXtj[tj]tj^tj_tj`tjatjbg�}C|"|Cv �r�|�r*t=�>|� d}ttd�}%t�9||%�} t| � t|%�}ttd �}Dt�c||D�} t&|D�}Etd| je�}Fd}Gd}Hd}Id}Jd}Kd}=d}L|F�r@|Fd }=tS|=�}M|Mjf}G|Etjgk}H|G �o�|Etjhk}K|Etjik}I|Etjjk}J|Etjkk}L|Etjlk}Nt d k�r@|=d d! }O|Od" jmjn}P|Od# jmjn}Qtojo�ptqjr�}R|Q|Rk }I|P|Rk}J|F�rj|Fd jstXd$d%g�v �rjtt|Fd � |H�rxtu|=� |L�r�tv|=| j� nD|I�s�|J�r�tw|=� n.|K�r�tx|=� n |G�r�ty|=� n|N�r�tz|=� t{| je��r�t|� t}|=� |"tj~k� rt{| je�� rt|� t� |"tj�k� r t�� |"tj�k� r2t�� |"tXtj�tj�g�v � rf| jet�| j�7 _et�| je� |"tXtj�tj�g�v � r�| j\� s�| jet�| j�7 _et�| je�� r�t�| je� t�� t dk � r�t�| je�}S|Sdu� r�|Sd&k � r�t�� |"tj7k}T|"tj8k}U| jj� o|U}V|T� s|V� st|"t�� || _�ttd'�}Wt��||W�} t| � t&|W�}t�| | _�ttd(�}Xt��||X�} t| � t&|X�}Yt+|Ydd�}Zt,�-|Z|Z�| _�t�| je| j��}[|[d) | _�|[d* | _�|[d+ | _�W n` t�t�j�f� y |� r t dk � r�t��|�} t| � nt=�>|�} t?| � d| _�| ��� � Y n0 W |� r>t=�>|�} t?| � d}|� rZt=�>|�} t?| � d}|� rvt=�>|�} t?| � d}|� r�t=�>|�} t?| � d}|� r.t=�>|� d}n�|� r�t=�>|�} t?| � d}|� r�t=�>|�} t?| � d}|� r�t=�>|�} t?| � d}|� rt=�>|�} t?| � d}|� r,t=�>|� d}0 dS ),z2 Perform an initial TLS handshake N�r� rz zSSLContextRef *Fi���zutf-8)r� r� T)rC rD rE c S s g | ] }t | �qS ro )�_PROTOCOL_STRING_CONST_MAP)�.0r� ro ro rp � <listcomp>_ rH z(TLSSocket._handshake.<locals>.<listcomp>�size_t *� z uint32_t *Zuint32_tr )�widthz uint32_t[])r� r@ r � SecTrustRef *ZCSSM_OIDzchar *zSecPolicySearchRef *zSecPolicyRef *ZCSSM_APPLE_TP_OCSP_OPTIONSZ CSSM_DATAZCSSM_APPLE_TP_CRL_OPTIONSzSecTrustResultType *z OSStatus *)r� � Ztbs_certificate�validity� not_before� not_after�md5Zmd2i z SSLProtocol *zSSLCipherSuite *� compression� session_id�session_ticket)�r r r Z SSLNewContextr r ZSSLCreateContextr r ZkSSLClientSideZkSSLStreamTypeZ SSLSetIOFuncs�_read_callback_pointer�_write_callback_pointer�id�_connection_idrL rO rN ZSSLSetConnectionr� �encodeZSSLSetPeerDomainNamerQ r� r~ r� r� r� Z SSLSetProtocolVersionEnabledZSSLSetEnableCertVerify�min�maxZSSLSetProtocolVersionMinZSSLSetProtocolVersionMaxZSSLSetSessionOptionZ"kSSLSessionOptionBreakOnServerAuthZ SSLGetNumberSupportedCiphersr r r ZSSLGetSupportedCiphersr r r% rM �_cipher_blacklist_regex�searchr� r ZSSLSetEnabledCiphersr� Z SSLSetPeerIDZ SSLHandshakerc ra ZerrSSLServerAuthCompleted�SSLCopyPeerTrustr Zcf_string_from_unicodeZSecPolicyCreateSSLr � CFReleaser r ZAPPLE_TP_REVOCATION_OCSPZLengthZDataZSecPolicySearchCreateZCSSM_CERT_X_509v3ZSecPolicySearchCopyNextZ CSSM_APPLE_TP_OCSP_OPTS_VERSION�VersionZ CSSM_TP_ACTION_OCSP_DISABLE_NETZ&CSSM_TP_ACTION_OCSP_CACHE_READ_DISABLE�Flagsr ZSecPolicySetValueZAPPLE_TP_REVOCATION_CRLZ CSSM_APPLE_TP_CRL_OPTS_VERSIONZCrlFlagsZcf_array_from_listZSecTrustSetPoliciesr= �sec_certificate_refZ!SecTrustSetAnchorCertificatesOnlyZ SecTrustSetAnchorCertificatesZSecTrustEvaluater^ ZkSecTrustResultProceedZkSecTrustResultUnspecifiedZerrSSLXCertChainInvalidr\ ZerrSSLCertExpiredZerrSSLCertNotYetValidZerrSSLUnknownRootCertZerrSSLNoRootCertZerrSSLHostNameMismatchZerrSSLInternalZSecTrustGetCssmResultCoder, r] � self_signedZCSSMERR_TP_CERT_REVOKEDZCSSMERR_TP_NOT_TRUSTEDZCSSMERR_TP_CERT_EXPIREDZ CSSMERR_TP_CERT_NOT_VALID_YETZ!CSSMERR_APPLETP_HOSTNAME_MISMATCHZCSSMERR_TP_CERT_SUSPENDEDZchosenZnative�datetime�nowr �utcZ hash_algor< r9 r4 r2 r6 r: r5 r* r/ r; ZerrSSLPeerHandshakeFailr3 Z errSSLWeakPeerEphemeralDHKeyr0 ZerrSSLPeerProtocolVersionr8 ZerrSSLRecordOverflowr` r_ r7 rX rY r+ r1 r- r' �_session_contextZ SSLGetNegotiatedProtocolVersion�_PROTOCOL_CONST_STRING_MAP� _protocolZSSLGetNegotiatedCipher� _cipher_suiter. ru � _compression� _session_id�_session_ticket�OSErrorrS rT �SSLDisposeContext�close)\rg Zsession_contextZssl_policy_refZcrl_search_refZcrl_policy_refZocsp_search_refZocsp_policy_refZpolicy_array_ref� trust_refZsession_context_pointer�resultZ utf8_domainZdisable_auto_validationZexplicit_validationr� Zprotocol_const�enabledZprotocol_constsZ min_protocolZ max_protocolZsupported_ciphers_pointerZsupported_ciphersZ cipher_bufferZ supported_cipher_suites_pointerZsupported_cipher_suitesZ good_ciphersZsupported_cipher_suite� cipher_suiteZcipher_suite_nameZ good_cipherZnum_good_ciphersZgood_ciphers_arrayZgood_ciphers_pointerZpeer_idZhandshake_result� exceptionZ do_validation�trust_ref_pointerZcf_string_hostnameZocsp_oid_pointerZocsp_oidZocsp_oid_bufferZocsp_search_ref_pointerZocsp_policy_ref_pointerZocsp_struct_pointerZ ocsp_structZocsp_struct_bytesZcssm_data_pointerZ cssm_dataZocsp_struct_bufferZcrl_oid_pointerZcrl_oidZcrl_oid_bufferZcrl_search_ref_pointerZcrl_policy_ref_pointerZcrl_struct_pointerZ crl_structZcrl_struct_bytesZcrl_struct_bufferZ ca_cert_refs�ca_certs�certZca_certZ array_refZresult_pointerZtrust_result_codeZinvalid_chain_error_codesZhandshake_error_codesZresult_code_pointerZ result_code�chainr� ZrevokedZexpiredZ not_yet_validZ no_issuerZ bad_hostnameZ oscrypto_certZvalidity_too_longr� r� r� �utcnowZdh_params_lengthZ would_blockZserver_auth_completer� Zprotocol_const_pointerZcipher_int_pointerZ cipher_intZ cipher_bytesZ session_inforo ro rp r� s �� � � ��� �� � � � �� � � � � � � � � � zTLSSocket._handshakec C sl t |t�s ttdt|����| jdu rH| jdkr@| j}d| _|S | �� t| j�}||kr|| jd|� }| j|d� | _|S |dkr�| � d�s�| j}d| _|S |t| j� }t |�}t t d�}t � | j|||�}| jdur�| j}d| _|�|�r|ttjtjg�v�rt|t� |�r:|tjk�r:d| _| �d� | �� t|�} | jt|| � }||d� | _|d|� S )a Reads data from the TLS-wrapped socket :param max_length: The number of bytes to read - output may be less than this :raises: socket.socket - when a non-TLS socket error occurs oscrypto.errors.TLSError - when a TLS-related error occurs oscrypto.errors.TLSDisconnectError - when the connection disconnects oscrypto.errors.TLSGracefulDisconnectError - when the remote end gracefully closed the connection ValueError - when any of the parameters contain an invalid value TypeError - when any of the parameters are of the wrong type OSError - when an error is returned by the OS crypto library :return: A byte string of the data read zG max_length must be an integer, not %s NrH r r� TF)r{ r$ r} r r! r� r� � _raise_closedrQ � select_readr r r ZSSLReadrc r^ r ra ZerrSSLClosedGracefulr r' �_gracefully_closed� _shutdownr r ) rg � max_lengthrt Zbuffered_length�to_readZ read_buffer�processed_pointerr� r� � bytes_readro ro rp r� � sV � � zTLSSocket.readc C s8 t | j�dkrdS t�| jgg g |�\}}}t |�dkS )aZ Blocks until the socket is ready to be read from, or the timeout is hit :param timeout: A float - the period of time to wait for data to be read. None for no time limit. :return: A boolean - if data is ready to be read. Will only be False if timeout is not None. r T)rQ r� rR rO )rg ri rk rl ro ro rp r� Q s zTLSSocket.select_readc C s� t |t�s&t |t�s&ttdt|����d}t |t�}t| j�dkrP| j}d| _n| �� pZd}| � |�}t|�}||7 }|r�|� |�}|dur�|� � }q�q4t d|t|� d �} |� || �}|dkr4|t|� }q�q4||d� | j | _|d|� S )a� Reads data from the socket until a marker is found. Data read includes the marker. :param marker: A byte string or regex object from re.compile(). Used to determine when to stop reading. Regex objects are more inefficient since they must scan the entire byte string of read data each time data is read off the socket. :return: A byte string of the data read, including the marker z_ marker must be a byte string or compiled regex object, not %s rH r rr Nr ���)r{ r# �Patternr} r r! rQ r� �_os_buffered_sizer� r� �endr� �find) rg �markerrt �is_regexrm r� �offset�matchr� �startro ro rp � read_untile s4 � zTLSSocket.read_untilc C s( t td�}t�| j|�}t|� t|�S )a Returns the number of bytes of decrypted data stored in the Secure Transport read buffer. This amount of data can be read from SSLRead() without calling self._socket.recv(). :return: An integer - the number of available bytes r� )r r ZSSLGetBufferedReadSizer� r r )rg Znum_bytes_pointerr� ro ro rp r� � s �zTLSSocket._os_buffered_sizec C s | � t�S )z� Reads a line from the socket, including the line ending of "\r\n", "\r", or "\n" :return: A byte string of the next line from the socket )r� � _line_regex�rg ro ro rp � read_line� s zTLSSocket.read_linec C s0 d}|}|dkr,|| � |�7 }|t|� }q|S )z� Reads exactly the specified number of bytes from the socket :param num_bytes: An integer - the exact number of bytes to read :return: A byte string of the data that was read rH r )r� rQ )rg � num_bytesrt � remainingro ro rp � read_exactly� s zTLSSocket.read_exactlyc C s� | j du r| �� ttd�}t|�}|r�t|�}t�| j |||�}| jdur\| j}d| _|�t|t � t |�}||d� }t|�}|dkr$| � � q$dS )a� Writes data to the TLS-wrapped socket :param data: A byte string to write to the socket :raises: socket.socket - when a non-TLS socket error occurs oscrypto.errors.TLSError - when a TLS-related error occurs oscrypto.errors.TLSDisconnectError - when the connection disconnects oscrypto.errors.TLSGracefulDisconnectError - when the remote end gracefully closed the connection ValueError - when any of the parameters contain an invalid value TypeError - when any of the parameters are of the wrong type OSError - when an error is returned by the OS crypto library Nr� r ) r� r� r r rQ r ZSSLWriterc r r' r � select_write)rg rj r� �data_lenZ write_bufferr� r� Z bytes_writtenro ro rp �write� s, � zTLSSocket.writec C s& t � g | jgg |�\}}}t|�dkS )aw Blocks until the socket is ready to be written to, or the timeout is hit :param timeout: A float - the period of time to wait for the socket to be ready to written to. None for no time limit. :return: A boolean - if the socket is ready for writing. Will only be False if timeout is not None. r )rR rO rQ )rg ri rl Z write_readyro ro rp r� � s zTLSSocket.select_writec C s� | j du rdS t�| j �}tdk r8t�| j �}t|� nt�| j �}t|� d| _ |r\d| _ z| j � t j � W n t jy� Y n0 dS )z� Shuts down the TLS session and then shuts down the underlying socket :param manual: A boolean if the connection was manually shutdown Nr� T)r� r ZSSLCloser r� r r r� r � _local_closedrO �shutdownrS � SHUT_RDWRrT )rg Zmanualr� ro ro rp r� s zTLSSocket._shutdownc C s | � d� dS )zV Shuts down the TLS session and then shuts down the underlying socket TN)r� r� ro ro rp r� ( s zTLSSocket.shutdownc C s� zN| � � W | jr<z| j�� W n tjy4 Y n0 d| _| jtv r�t| j= nD| jr�z| j�� W n tjyx Y n0 d| _| jtv r�t| j= 0 dS )zN Shuts down the TLS session and socket and forcibly closes it N)r� rO r� rS rT r� rN r� ro ro rp r� / s$ � zTLSSocket.closec C s d}d}d}z�t td�}t�| j|�}t|� t|�}t�|�}g | _td|�D ]`}t� ||�}t� |�}t � |�}t �|�}t|� d}t�|�} |dkr�| | _qP| j�| � qPW |r�t �|�}t|� |r�t �|�}t|� n0|r�t �|�}t|� |�rt �|�}t|� 0 dS )zh Reads end-entity and intermediate certificate information from the TLS session Nr� r )r r r� r� r r ZSecTrustGetCertificateCount�_intermediates�rangeZ SecTrustGetCertificateAtIndexZSecCertificateCopyDatar Zcf_data_to_bytesr r� r r� �load� _certificater� ) rg r� Z cf_data_refr� r� Z number_certs�indexr� Z cert_datar� ro ro rp �_read_certificatesB sN � � � z TLSSocket._read_certificatesc C s, | j rtd��n| jr td��ntd��dS )zi Raises an exception describing if the local or remote end closed the connection z!The connection was already closedz$The remote end closed the connectionzThe connection was closedN)r� r( r� r) r� ro ro rp r� v s zTLSSocket._raise_closedc C s* | j du r| �� | jdu r$| �� | jS )zu An asn1crypto.x509.Certificate object of the end-entity certificate presented by the server N)r� r� r� r� r� ro ro rp � certificate� s zTLSSocket.certificatec C s* | j du r| �� | jdu r$| �� | jS )zz A list of asn1crypto.x509.Certificate objects that were presented as intermediates by the server N)r� r� r� r� r� r� ro ro rp � intermediates� s zTLSSocket.intermediatesc C s | j S )zg A unicode string of the IANA cipher suite name of the negotiated cipher suite )r� r� ro ro rp r� � s zTLSSocket.cipher_suitec C s | j S )zM A unicode string of: "TLSv1.2", "TLSv1.1", "TLSv1", "SSLv3" )r� r� ro ro rp r� � s zTLSSocket.protocolc C s | j S )z5 A boolean if compression is enabled )r� r� ro ro rp r� � s zTLSSocket.compressionc C s | j S �zM A unicode string of "new" or "reused" or None for no ticket )r� r� ro ro rp r� � s zTLSSocket.session_idc C s | j S r� )r� r� ro ro rp r� � s zTLSSocket.session_ticketc C s | j S )zM The oscrypto.tls.TLSSession object used for this connection )r� r� ro ro rp r� � s zTLSSocket.sessionc C s | j S )zN A unicode string of the TLS server domain name or IP address )r� r� ro ro rp r� � s zTLSSocket.hostnamec C s | j �� d S )zJ An integer of the port number the socket is connected to r )rh � getpeernamer� ro ro rp r� � s zTLSSocket.portc C s | j du r| �� | jS )z9 The underlying socket.socket connection N)r� r� rO r� ro ro rp rh � s zTLSSocket.socketc C s | � � d S )N)r� r� ro ro rp �__del__� s zTLSSocket.__del__)N)r� N)N)N)5r� r� r� r� rO r� rc r� r� r� r� r� r� r� r� r� r� r\ r] ru r� r� r� � classmethodr� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� �propertyr� r� r� r� r� r� r� r� r� r� rh r� ro ro ro rp rB { s~ 3 F kS 8 + 4 )m� __future__r r r r r� �sys�rerh rS rR r� rU �weakrefZ _securityr r r r Z_core_foundationr r r Z_asn1r r� r r �_errorsr Z_ffir r r r r r r r r r r r r r �_typesr! r" r# r$ Z_cipher_suitesr% �utilr& �errorsr' r( r) �_tlsr* r+ r, r- r. r/ r0 r1 r2 r3 r4 r5 r6 r7 r8 r9 r: r; r< Z asymmetricr= �keysr> � version_info�xranger� Z _pattern_typer� �__all__Z kSSLProtocol2Z kSSLProtocol3Z kTLSProtocol1ZkTLSProtocol11ZkTLSProtocol12r� r� �compiler� r� �WeakValueDictionaryrL rN rq r_ rx r� r� �objectrA rB ro ro ro rp �<module> sf @ T �� � [7 g