]]e
@ s d d l Z d d l Z y d d l Z Wn e k
rB d Z Yn Xd d l m Z d d l m Z d d l m Z d d l m Z d d l m
Z
d d Z d
d Z d Z
d
Z d Z d Z Gd d d e Z Gd d d e j e j Z Gd d d e j Z d S) N ) base_events)compat) protocols)
transports)loggerc C s | r t d t t d r? t j } | s d | _ nL t j t j } | j t j O_ | j t j O_ | j
t j | _ | S)Nz(Server side SSL needs a valid SSLContextcreate_default_contextF)
ValueErrorhasattrsslr check_hostnameZ
SSLContextZPROTOCOL_SSLv23optionsZ OP_NO_SSLv2Z OP_NO_SSLv3Zset_default_verify_pathsZ
CERT_REQUIRED verify_mode) server_sideserver_hostname
sslcontext r -/opt/alt/python35/lib64/python3.5/sslproto.py_create_transport_context s
r c C s
t t d S)N MemoryBIO)r
r r r r r _is_sslproto_available% s r Z UNWRAPPEDZ DO_HANDSHAKEZWRAPPEDZSHUTDOWNc @ s e Z d Z d Z d d d Z e d d Z e d d Z e d
d Z e d d
Z d d d Z
d d d Z d d Z d d d Z
d d d Z d S)_SSLPipe i Nc C sj | | _ | | _ | | _ t | _ t j | _ t j | _ d | _ d | _
d | _ d | _ d S)NF)
_context _server_side_server_hostname
_UNWRAPPED_stater r _incoming _outgoing_sslobj
_need_ssldata
_handshake_cb _shutdown_cb)selfcontextr r r r r __init__D s z_SSLPipe.__init__c C s | j S)N)r )r$ r r r r% Z s z_SSLPipe.contextc C s | j S)N)r )r$ r r r
ssl_object_ s z_SSLPipe.ssl_objectc C s | j S)N)r! )r$ r r r need_ssldatag s z_SSLPipe.need_ssldatac C s
| j t k S)N)r _WRAPPED)r$ r r r wrappedm s z_SSLPipe.wrappedc C s| | j t k r t d | j j | j | j d | j d | j | _ t
| _ | | _ | j d d d \ } } | S)Nz"handshake in progress or completedr r only_handshakeT)
r r RuntimeErrorr Zwrap_bior r r r r
_DO_HANDSHAKEr" feed_ssldata)r$ callbackssldataappdatar r r do_handshakev s z_SSLPipe.do_handshakec C sa | j t k r t d | j t k r6 t d t | _ | | _ | j d \ } } | S)Nzno security layer presentzshutdown in progressr+ )r r r- _SHUTDOWNr# r/ )r$ r0 r1 r2 r r r shutdown s z_SSLPipe.shutdownc C s& | j j | j d \ } } d S)Nr+ )r Z write_eofr/ )r$ r1 r2 r r r feed_eof s
z_SSLPipe.feed_eofFc C s | j t k r1 | r! | g } n g } g | f Sd | _ | rP | j j | g } g } y | j t k r | j j t | _ | j r | j d | r | | f S| j t k r x | j j
| j } | j | | s Pq Wni | j t
k r0| j j d | _ t | _ | j rU| j n% | j t k rU| j | j j
Wn t j t j f k
r} zl t | d d t j t j t j f k r| j t k r| j r| j | | j t j k | _ WYd d } ~ Xn X| j j r| j | j j
| | f S)NFerrno)r r r! r writer. r r3 r) r" readmax_sizeappendr4 Zunwrapr# r SSLErrorCertificateErrorgetattrSSL_ERROR_WANT_READSSL_ERROR_WANT_WRITESSL_ERROR_SYSCALLr7 r pending)r$ datar, r2 r1 chunkexcr r r r/ sV
( z_SSLPipe.feed_ssldatar c C sl | j t k rM | t | k r7 | | d g } n g } | t | f Sg } t | } x d | _ y6 | t | k r | | j j | | d 7} Wn| t j k
r } zY | j d k r t j
| _ | j t j
t j t j
f k r | j t j
k | _ WYd d } ~ Xn X| j j rB| j | j j | t | k s]| j rb Pqb W| | f S)NFZPROTOCOL_IS_SHUTDOWN)r r len
memoryviewr! r r8 r r< reasonr? r7 r@ rA r rB r; r9 )r$ rC offsetr1 viewrE r r r feed_appdata s2 $ ( z_SSLPipe.feed_appdatai )__name__
__module__ __qualname__r: r& propertyr% r' r( r* r3 r5 r6 r/ rK r r r r r 0 s
Jr c @ s e Z d Z d d Z d d d Z d d Z d d Z d
d Z d d
Z e j
rl d d Z d d Z d d Z
d d d d Z d d Z d d Z d d Z d d Z d S) _SSLProtocolTransportc C s( | | _ | | _ | | _ d | _ d S)NF)_loop
_ssl_protocol
_app_protocol_closed)r$ loopZ ssl_protocol app_protocolr r r r& ) s z _SSLProtocolTransport.__init__Nc C s | j j | | S)N)rR _get_extra_info)r$ namedefaultr r r get_extra_info0 s z$_SSLProtocolTransport.get_extra_infoc C s
| | _ d S)N)rS )r$ protocolr r r set_protocol4 s z"_SSLProtocolTransport.set_protocolc C s | j S)N)rS )r$ r r r get_protocol7 s z"_SSLProtocolTransport.get_protocolc C s | j S)N)rT )r$ r r r
is_closing: s z _SSLProtocolTransport.is_closingc C s d | _ | j j d S)NT)rT rR _start_shutdown)r$ r r r close= s z_SSLProtocolTransport.closec C s+ | j s' t j d | t | j d S)Nzunclosed transport %r)rT warningswarnResourceWarningr` )r$ r r r __del__L s z _SSLProtocolTransport.__del__c C s | j j j d S)N)rR
_transport
pause_reading)r$ r r r rf Q s z#_SSLProtocolTransport.pause_readingc C s | j j j d S)N)rR re resume_reading)r$ r r r rg Y s z$_SSLProtocolTransport.resume_readingc C s | j j j | | d S)N)rR re set_write_buffer_limits)r$ highlowr r r rh a s z-_SSLProtocolTransport.set_write_buffer_limitsc C s | j j j S)N)rR re get_write_buffer_size)r$ r r r rk v s z+_SSLProtocolTransport.get_write_buffer_sizec C sT t | t t t f s6 t d j t | j | s@ d S| j j | d S)Nz/data: expecting a bytes-like instance, got {!r})
isinstancebytes bytearrayrG TypeErrorformattyperL rR _write_appdata)r$ rC r r r r8 z s z_SSLProtocolTransport.writec C s d S)NFr )r$ r r r
can_write_eof s z#_SSLProtocolTransport.can_write_eofc C s | j j d S)N)rR _abort)r$ r r r abort s z_SSLProtocolTransport.abort)rL rM rN r& rZ r\ r] r^ r` r ZPY34rd rf rg rh rk r8 rs ru r r r r rP & s
rP c @ s e Z d Z d d d d d Z d d d Z d d Z d
d Z d d
Z d d Z d d Z d d Z
d d d Z d d Z d d Z
d d Z d d Z d d Z d d! d" Z d# d$ Z d% d& Z d S)' SSLProtocolFNTc C s t d k r t d | s- t | | } | | _ | rO | rO | | _ n d | _ | | _ t d | | _ t j | _
d | _ | | _ | | _
| | _ t | j
| | j | _ d | _ d | _ d | _ d | _ d | _ | | _ d S)Nz stdlib ssl module not availabler r F)r r- r r r _sslcontextdict_extra collectionsdeque_write_backlog_write_buffer_size_waiterrQ rS rP _app_transport_sslpipe_session_established
_in_handshake _in_shutdownre _call_connection_made)r$ rU rV r waiterr r Zcall_connection_mader r r r& s.
zSSLProtocol.__init__c C s^ | j d k r d S| j j sQ | d k rA | j j | n | j j d d | _ d S)N)r~ cancelled
set_exception
set_result)r$ rE r r r _wakeup_waiter s zSSLProtocol._wakeup_waiterc C s5 | | _ t | j | j | j | _ | j d S)N)re r rw r r r _start_handshake)r$ transportr r r connection_made s
zSSLProtocol.connection_madec C sN | j r+ d | _ | j j | j j | d | _ d | _ | j | d S)NF)r rQ call_soonrS connection_lostre r r )r$ rE r r r r s zSSLProtocol.connection_lostc C s | j j d S)N)rS
pause_writing)r$ r r r r s zSSLProtocol.pause_writingc C s | j j d S)N)rS resume_writing)r$ r r r r s zSSLProtocol.resume_writingc C s y | j j | \ } } Wna t j k
r } z> | j j r_ t j d | | j | j | j
d SWYd d } ~ Xn Xx | D] } | j j | q Wx2 | D]* } | r | j
j | q | j Pq Wd S)Nz %r: SSL error %s (reason %s))r r/ r r< rQ get_debugr warningr7 rH rt re r8 rS
data_receivedr_ )r$ rC r1 r2 erD r r r r s
zSSLProtocol.data_receivedc
C sp z[ | j j r" t j d | | j t | j sZ | j j } | rZ t j d Wd | j
j Xd S)Nz%r received EOFz?returning true from eof_received() has no effect when using ssl) rQ r r debugr ConnectionResetErrorr rS eof_receivedr re r` )r$ Z keep_openr r r r s
zSSLProtocol.eof_receivedc C sD | | j k r | j | S| j d k r< | j j | | S| Sd S)N)ry re rZ )r$ rX rY r r r rW s
zSSLProtocol._get_extra_infoc C s= | j r
d S| j r# | j n d | _ | j d d S)NTr+ )r r rt rr )r$ r r r r_ & s
zSSLProtocol._start_shutdownc C s9 | j j | d f | j t | 7_ | j d S)Nr )r| r; r} rF _process_write_backlog)r$ rC r r r rr / s zSSLProtocol._write_appdatac C sm | j j r4 t j d | | j j | _ n d | _ d | _ | j j d | j j | j
d S)Nz%r starts SSL handshakeTr+ r )r+ r ) rQ r r r time_handshake_start_timer r| r; r r )r$ r r r r 4 s z SSLProtocol._start_handshakec C s d | _ | j j } ye | d k r* | | j } t | j d sy | j ry | j j t j k ry t j
| | j Wn t k
r!} z | j j
r t | t j r t j d | d d n t j d | d d | j j t | t r | j | d S WYd d } ~ Xn X| j j
r^| j j | j } t j d | | d | j j d | d
| j d | j d | | j r| j j | j | j d | _! | j j" | j# d S)
NFr z5%r: SSL handshake failed on verifying the certificateexc_infoTz%r: SSL handshake failedz %r: SSL handshake took %.1f msg @@peercertcipher compressionr' )$r r r' Z getpeercertr
rw r r r Z CERT_NONEZmatch_hostname
BaseExceptionrQ r rl r= r r re r` Exceptionr r r r ry updater r r rS r r r r r )r$ Z
handshake_excZsslobjr rE Zdtr r r _on_handshake_complete@ sD
z"SSLProtocol._on_handshake_completec C s | j d k r d Syxt t | j D] } | j d \ } } | ri | j j | | \ } } n? | r | j j | j } d } n | j j | j } d } x | D] } | j j
| q W| t | k r| | f | j d <| j j r| j j P| j d =| j
t | 8_
q, WWn` t k
r} z@ | j rZ| j | n | j | d t | t s| WYd d } ~ Xn Xd S)Nr r z Fatal error on SSL transport)re rangerF r| r rK r3 r r5 _finalizer8 Z_pausedrg r} r r _fatal_errorrl r )r$ irC rI r1 rD rE r r r r t s8
z"SSLProtocol._process_write_backlogzFatal error on transportc C s t | t j r= | j j rh t j d | | d d n+ | j j d | d | d | j d | i | j r | j j | d S)Nz%r: %sr Tmessage exceptionr r[ )
rl r Z_FATAL_ERROR_IGNORErQ r r r Zcall_exception_handlerre Z _force_close)r$ rE r r r r r s
zSSLProtocol._fatal_errorc C s) d | _ | j d k r% | j j d S)N)r re r` )r$ r r r r s zSSLProtocol._finalizec
C s2 z | j d k r | j j Wd | j Xd S)N)re ru r )r$ r r r rt s zSSLProtocol._abort)rL rM rN r& r r r r r r r rW r_ rr r r r r r rt r r r r rv s$ #
4 , rv )rz ra r ImportError r r r r logr r r r r. r) r4 objectr Z_FlowControlMixinZ TransportrP ZProtocolrv r r r r s(
n