← Back
Editing: _common.cpython-38.pyc
U ֞\. � @ s� d Z ddlmZmZmZ ddlZddlZddlZddlm Z m Z ddl m Z m Z mZmZmZmZ z ddlZW n ek r� dZY nX ejdd�G d d � d e��Zd d � Zd d� Zdd� Zdd� Zejddd�G dd� de��Zejdd�G dd� de��Z ejddd�G dd� de��Z ejddd�G dd � d e��Z ejddd�G d d � d e��Z ejdd�G d d � d e��Z ejddd�G d!d"� d"e��Z!ejddd�G d#d$� d$e��Z"d%d&� Z#d'd(� Z$e d)d*�Z%dS )+z Common verification code. � )�absolute_import�division�print_functionN� )� maketrans� text_type)�CertificateError� DNSMismatch�IPAddressMismatch� SRVMismatch� URIMismatch�VerificationErrorT)�slotsc @ s e Zd ZdZe�� Ze�� ZdS )� ServiceMatchz< A match of a service id and a certificate pattern. N)�__name__� __module__� __qualname__�__doc__�attr�ib� service_id� cert_pattern� r r �:/usr/lib/python3/dist-packages/service_identity/_common.pyr s r c C s� g }t | |�t | |� }dd� |D �}|D ] }||kr*|�|j|d�� q*|D ]*}||krNt| |j�rN|�|j|d�� qN|r�t|d��|S )z� Verify whether *cert_patterns* are valid for *obligatory_ids* and *optional_ids*. *obligatory_ids* must be both present and match. *optional_ids* must match if a pattern of the respective type is present. c S s g | ] }|j �qS r )r )�.0�matchr r r � <listcomp>4 s z+verify_service_identity.<locals>.<listcomp>)Z mismatched_id)�errors)� _find_matches�append�error_on_mismatch�_contains_instance_of� pattern_classr )� cert_patternsZobligatory_idsZ optional_idsr �matchesZ matched_ids�ir r r �verify_service_identity' s$ � � r& c C s8 g }|D ]*}| D ] }|� |�r|�t||d�� qq|S )a Search for matching certificate patterns and service_ids. :param cert_ids: List certificate IDs like DNSPattern. :type cert_ids: `list` :param service_ids: List of service IDs like DNS_ID. :type service_ids: `list` :rtype: `list` of `ServiceMatch` )r r )�verifyr r )r# Z service_idsr$ ZsidZcidr r r r I s r c C s | D ]}t ||�r dS qdS )zB :type seq: iterable :type cl: type :rtype: bool TF)� isinstance)�seqZcl�er r r r! ] s r! c C s� t | t�r0z| �d�} W n tk r. Y dS X zt| � W dS tk rR Y nX zt�| �dd�� W n tk r� Y dS X dS )z� Check whether *pattern* could be/match an IP address. :param pattern: A pattern for a host name. :type pattern: `bytes` or `unicode` :return: `True` if *pattern* could be an IP address, else `False`. :rtype: bool �asciiFT�*�1) r( �bytes�decode� UnicodeError�int� ValueError� ipaddress� ip_address�replace��patternr r r �_is_ip_addressj s r8 F)Zinitr c @ s* e Zd ZdZe�� Ze�d�Z dd� Z dS )� DNSPatternz7 A DNS pattern as extracted from certificates. � ^[a-z0-9\-_.]+$c C sd t |t�std��|�� }|dks2t|�s2d|kr@td�|���|�t�| _ d| j kr`t | j � dS )�( :type pattern: `bytes` z'The DNS pattern must be a bytes string.� � zInvalid DNS pattern {0!r}.� *N) r( r. � TypeError�stripr8 r �format� translate�_TRANS_TO_LOWERr7 �_validate_pattern��selfr7 r r r �__init__� s � zDNSPattern.__init__N) r r r r r r r7 �re�compile�_RE_LEGAL_CHARSrG r r r r r9 � s r9 c @ s$ e Zd ZdZe�� Zedd� �ZdS )�IPAddressPatternz? An IP address pattern as extracted from certificates. c C s: z| t �|�d�W S tk r4 td�|���Y nX d S )Nr6 z Invalid IP address pattern {!r}.)r3 r4 r2 r rA )�clsZbsr r r � from_bytes� s �zIPAddressPattern.from_bytesN) r r r r r r r7 � classmethodrM r r r r rK � s rK c @ s( e Zd ZdZe�� Ze�� Zdd� ZdS )� URIPatternz8 An URI pattern as extracted from certificates. c C sd t |t�std��|�� �t�}d|ks8d|ks8t|�rFtd�|���|� d�\| _ }t |�| _ dS )r; z'The URI pattern must be a bytes string.� :r> zInvalid URI pattern {0!r}.N) r( r. r? r@ rB rC r8 r rA �split�protocol_patternr9 � dns_pattern)rF r7 �hostnamer r r rG � s �zURIPattern.__init__N) r r r r r r rR rS rG r r r r rO � s rO c @ s( e Zd ZdZe�� Ze�� Zdd� ZdS )� SRVPatternz8 An SRV pattern as extracted from certificates. c C s~ t |t�std��|�� �t�}|d dksDd|ksDd|ksDt|�rRtd�|���|� dd�\}}|dd� | _ t |�| _ dS ) r; z'The SRV pattern must be a bytes string.r �_ � .r> zInvalid SRV pattern {0!r}.r N) r( r. r? r@ rB rC r8 r rA rQ � name_patternr9 rS )rF r7 �namerT r r r rG � s" �����zSRVPattern.__init__N) r r r r r r rX rS rG r r r r rU � s rU c @ s: e Zd ZdZe�� Ze�d�Z e Z e Z dd� Zdd� ZdS )�DNS_IDz) A DNS service ID, aka hostname. r: c C s� t |t�std��|�� }|dks*t|�r2td��tdd� |D ��r^trTt�|�}qht d��n |�d�}|� t �| _ | j �| j �dkr�td��dS ) z+ :type hostname: `unicode` z DNS-ID must be a unicode string.� zInvalid DNS-ID.c s s | ]}t |�d kV qdS )� N)�ord)r �cr r r � <genexpr> s z"DNS_ID.__init__.<locals>.<genexpr>z+idna library is required for non-ASCII IDs.r+ N)r( r r? r@ r8 r2 �any�idna�encode� ImportErrorrB rC rT rJ r )rF rT Zascii_idr r r rG � s � zDNS_ID.__init__c C s" t || j�rt|j| j�S dS dS )zC https://tools.ietf.org/search/rfc6125#section-6.4 FN)r( r" �_hostname_matchesr7 rT rE r r r r' s z DNS_ID.verifyN)r r r r r r rT rH rI rJ r9 r" r r rG r' r r r r rZ � s rZ c @ s. e Zd ZdZejejd�Ze Z e Z dd� Z dS )� IPAddress_IDz# An IP address service ID. )Z converterc C s | j |jkS )zC https://tools.ietf.org/search/rfc2818#section-3.1 )�ipr7 rE r r r r' , s zIPAddress_ID.verifyN)r r r r r r r3 r4 rf rK r" r r r' r r r r re ! s re c @ s8 e Zd ZdZe�� Ze�� ZeZ e Z dd� Z dd� Z dS )�URI_IDz An URI service ID. c C sf t |t�std��|�� }d|ks*t|�r2td��|�d�\}}|�d��t �| _ t |�d��| _ dS )z& :type uri: `unicode` z URI-ID must be a unicode string.�:zInvalid URI-ID.r+ �/N) r( r r? r@ r8 r2 rQ rb rB rC �protocolrZ �dns_id)rF ZuriZprotrT r r r rG ? s zURI_ID.__init__c C s. t || j�r&|j| jko$| j�|j�S dS dS )zE https://tools.ietf.org/search/rfc6125#section-6.5.2 FN)r( r" rR rj rk r' rS rE r r r r' O s �z URI_ID.verifyN)r r r r r r rj rk rO r" r r rG r' r r r r rg 3 s rg c @ s8 e Zd ZdZe�� Ze�� ZeZ e Z dd� Z dd� Z dS )�SRV_IDz An SRV service ID. c C sv t |t�std��|�� }d|ks6t|�s6|d dkr>td��|�dd�\}}|dd� �d��t �| _ t |�| _ dS ) z& :type srv: `unicode` z SRV-ID must be a unicode string.�.r �_zInvalid SRV-ID.r Nr+ ) r( r r? r@ r8 r2 rQ rb rB rC rY rZ rk )rF ZsrvrY rT r r r rG h s zSRV_ID.__init__c C s. t || j�r&| j|jko$| j�|j�S dS dS )zE https://tools.ietf.org/search/rfc6125#section-6.5.1 FN)r( r" rY rX rk r' rS rE r r r r' x s �z SRV_ID.verifyN)r r r r r r rY rk rU r" r r rG r' r r r r rl \ s rl c C s^ d| krR| � dd�\}}|� dd�\}}||kr4dS |�d�rBdS |dkpP||kS | |kS dS )z� :type cert_pattern: `bytes` :type actual_hostname: `bytes` :return: `True` if *cert_pattern* matches *actual_hostname*, else `False`. :rtype: `bool` r> rW r Fs xn--N)rQ � startswith)r Zactual_hostnameZ cert_headZ cert_tailZ actual_headZ actual_tailr r r rd � s rd c C s� | � d�}|dkr td�| ���| �d�}t|�dk rDtd�| ���d|d kr^td�| ���td d � |D ��r~td �| ���d S ) z� Check whether the usage of wildcards within *cert_pattern* conforms with our expectations. :type hostname: `bytes` :return: None r> r z7Certificate's DNS-ID {0!r} contains too many wildcards.rW � zJCertificate's DNS-ID {0!r} has too few host components for wildcard usage.r zECertificate's DNS-ID {0!r} has a wildcard outside the left-most part.c s s | ]}t |� V qd S )N)�len)r �pr r r r_ � s z$_validate_pattern.<locals>.<genexpr>z0Certificate's DNS-ID {0!r} contains empty parts.N)�countr rA rQ rq r` )r Zcnt�partsr r r rD � s4 �� �� ����rD s ABCDEFGHIJKLMNOPQRSTUVWXYZs abcdefghijklmnopqrstuvwxyz)&r Z __future__r r r r3 rH r Z_compatr r � exceptionsr r r r r r ra rc �s�objectr r& r r! r8 r9 rK rO rU rZ re rg rl rd rD rC r r r r �<module> sL " / ( '% �
Save File
Cancel