← Back
Editing: ssl_match_hostname.cpython-312.pyc
� �n j~ � �p � d Z ddlZddlZ ddlZdZ G d� de� Zd d�Zd� Z d� Z d � Z y# e$ r dZY �$w xY w) zJThe match_hostname() function from Python 3.3.3, essential when using SSL.� Nz3.5.0.1c � � e Zd Zy)�CertificateErrorN)�__name__� __module__� __qualname__� � �D/usr/lib/python3.12/site-packages/urllib3/util/ssl_match_hostname.pyr r s � �r r c �� � g }| sy| j d� }|d }|dd }|j d� }||kD rt dt | � z � �|s!| j � |j � k( S |dk( r|j d� n{|j d � s|j d � r%|j t j |� � n4|j t j |� j d d � � |D ]& }|j t j |� � �( t j d d j |� z dz t j � } | j |� S )zhMatching according to RFC 6125, section 6.4.3 http://tools.ietf.org/html/rfc6125#section-6.4.3 F�.r � N�*z,too many wildcards in certificate DNS name: z[^.]+zxn--z\*z[^.]*z\Az\.z\Z)�split�countr �repr�lower�append� startswith�re�escape�replace�compile�join� IGNORECASE�match) �dn�hostname� max_wildcards�pats�parts�leftmost� remainder� wildcards�frag�pats r �_dnsname_matchr& sE � � �D� �� �H�H�T�N�E��Q�x�H��a�b� �I����s�#�I��=� � � :�T�"�X� E� � � ��x�x�z�X�^�^� -�-�-� �3�� � � �G� � � � �V� $��(;�(;�F�(C� � � �B�I�I�h�'�(� � � �B�I�I�h�'�/�/��w�?�@� �� � � �B�I�I�d�O�$� � �*�*�U�U�Z�Z�� -�-��5�r�}�}� E�C� �9�9�X� � r c �h � t | t � r!t j dk rt | dd�� } | S )N)� �ascii�strict)�encoding�errors)� isinstance�str�sys� version_info�unicode)�objs r � _to_unicoder3 O s, � ��#�s��� 0� 0�4� 7��c�G�H�=�� �Jr c �d � t j t | � j � � }||k( S )z�Exact matching of IP addresses. RFC 6125 explicitly doesn't define an algorithm for this (section 1.7.2 - "Out of Scope"). )� ipaddress� ip_addressr3 �rstrip)�ipname�host_ip�ips r �_ipaddress_matchr; V s, � � � � �k�&� 1� 8� 8� :� ;�B� ��=�r c �� � | s t d� � t j t |� � }g }| j dd� }|D ]S \ }}|dk( r"|�t ||� r y|j |� �-|dk( s�3|�t ||� r y|j |� �U |sG| j dd� D ]2 }|D ]+ \ }}|dk( s� t ||� r y|j |� �- �4 t |� d kD r.t d |�d d j t t |� � ��� �t |� d k( rt d |�d |d ��� �t d� �# t t f$ r d}Y ��2t $ r t �d}n� Y ��Gw xY w)a) Verify that *cert* (in decoded format as returned by SSLSocket.getpeercert()) matches the *hostname*. RFC 2818 and RFC 6125 rules are followed, but IP addresses are not accepted for *hostname*. CertificateError is raised on failure. On success, the function returns nothing. ztempty or no certificate, match_hostname needs a SSL socket or SSL context with either CERT_OPTIONAL or CERT_REQUIREDN�subjectAltNamer �DNSz IP Address�subject� commonNamer z hostname z doesn't match either of z, z doesn't match r z=no appropriate commonName or subjectAltName fields were found)� ValueErrorr5 r6 r3 � UnicodeError�AttributeError�getr& r r; �lenr r �mapr )�certr r9 �dnsnames�san�key�value�subs r �match_hostnamerM b s� � � �� -� � � ��&�&�{�8�'<�=�� �H� �(�(�#�R� (�C�� ��U� �%�<���>�%��#B�� �O�O�E� "� �L� ��"�'7��w�'G�� �O�O�E� "� � � �8�8�I�r�*�C� !� ��U� �,�&�%�e�X�6� � �O�O�E�*� "� +� �8�}�q�� �,4�d�i�i��D�(�@S�6T� V� � � �X� �!� � ��8�TU�;� W�X�X� � K� � ��U �*� %� � �� � � � ��G� � ��s � E � E5� E5�4E5)r ) �__doc__r r/ r5 � ImportError� __version__rA r r& r3 r; rM r r r �<module>rQ sW �� P� � � �� � � �z� �3 �l� �= ��g � ��I��s �+ �5�5
Save File
Cancel