|
Server : Apache System : Linux server.mata-lashes.com 3.10.0-1160.90.1.el7.x86_64 #1 SMP Thu May 4 15:21:22 UTC 2023 x86_64 User : matalashes ( 1004) PHP Version : 8.1.29 Disable Function : NONE Directory : /usr/local/lib/python3.6/site-packages/urllib3/util/__pycache__/ |
Upload File : |
3
G�Kd~ � @ st d Z ddlZddlZy ddlZW n ek
r8 dZY nX dZG dd� de�Zddd�Zd d
� Z d d � Z
d
d� Z dS )zJThe match_hostname() function from Python 3.3.3, essential when using SSL.� Nz3.5.0.1c @ s e Zd ZdS )�CertificateErrorN)�__name__�
__module__� __qualname__� r r �B/tmp/pip-build-8nxjc3nm/urllib3/urllib3/util/ssl_match_hostname.pyr s r � c
C s� g }| s dS | j d�}|d }|dd� }|jd�}||krLtdt| � ��|s`| j� |j� kS |dkrt|jd� n>|jd �s�|jd �r�|jtj|�� n|jtj|�j d
d �� x |D ]}|jtj|�� q�W tj
d d
j |� d tj �} | j
|�S )zhMatching according to RFC 6125, section 6.4.3
http://tools.ietf.org/html/rfc6125#section-6.4.3
F�.r r N�*z,too many wildcards in certificate DNS name: z[^.]+zxn--z\*z[^.]*z\Az\.z\Z)�split�countr �repr�lower�append�
startswith�re�escape�replace�compile�join�
IGNORECASE�match)
�dn�hostname�
max_wildcards�pats�parts�leftmost� remainder� wildcards�frag�patr r r �_dnsname_match s*
r" c C s& t | t�r"tjdk r"t| ddd�} | S )N� �ascii�strict)�encoding�errors)r# )�
isinstance�str�sys� version_info�unicode)�objr r r � _to_unicodeO s r. c C s t jt| �j� �}||kS )z�Exact matching of IP addresses.
RFC 6125 explicitly doesn't define an algorithm for this
(section 1.7.2 - "Out of Scope").
)� ipaddress�
ip_addressr. �rstrip)�ipname�host_ip�ipr r r �_ipaddress_matchV s r5 c C s~ | s t d��ytjt|��}W n> tt fk
r: d}Y n$ tk
r\ tdkrVd}n� Y nX g }| jdf �}xb|D ]Z\}}|dkr�|dkr�t||�r�dS |j|� qt|dkrt|dk r�t ||�r�dS |j|� qtW |�s"xH| jdf �D ]8}x2|D ]*\}}|dkr�t||��rdS |j|� q�W q�W t
|�dk�rNt d |d
j t
t|��f ��n,t
|�dk�rrt d ||d f ��nt d
��dS )a) Verify that *cert* (in decoded format as returned by
SSLSocket.getpeercert()) matches the *hostname*. RFC 2818 and RFC 6125
rules are followed, but IP addresses are not accepted for *hostname*.
CertificateError is raised on failure. On success, the function
returns nothing.
ztempty or no certificate, match_hostname needs a SSL socket or SSL context with either CERT_OPTIONAL or CERT_REQUIREDN�subjectAltName�DNSz
IP Address�subject�
commonNamer z&hostname %r doesn't match either of %sz, z hostname %r doesn't match %rr z=no appropriate commonName or subjectAltName fields were found)�
ValueErrorr/ r0 r. � UnicodeError�AttributeError�getr" r r5 �lenr r �mapr
)�certr r3 �dnsnames�san�key�value�subr r r �match_hostnameb sJ rF )r ) �__doc__r r* r/ � ImportError� __version__r: r r" r. r5 rF r r r r �<module> s
6