@gC/ddlmZddlZddlZddlZddlmZddlmZddl m Z m Z m Z m Z mZddlmZmZmZmZddlmZmZdd lmZmZmZmZed Ze e eefd fZe ed fZGd d eZ edGddeZ!edGddee!Z"dS)) annotationsN) dataclass)wraps)AnyCallableMappingTupleTypeVar)BrokenResourceError EndOfStreamaclose_forcefullyget_cancelled_exc_class)TypedAttributeSettyped_attribute) AnyByteStream ByteStreamListener TaskGroupT_Retval.c@eZdZUdZeZded<eZded<eZded<eZ ded <eZ d ed <eZ d ed <eZ ded<eZ ded<eZd ed<eZded<dS) TLSAttributez5Contains Transport Layer Security related attributes. str | None alpn_protocolbyteschannel_binding_tls_uniqueztuple[str, str, int]cipherz*dict[str, str | _PCTRTTT | _PCTRTT] | Nonepeer_certificatez bytes | Nonepeer_certificate_binarybool server_sidez!list[tuple[str, str, int]] | Noneshared_ciphers ssl.SSLObject ssl_objectstandard_compatiblestr tls_versionN)__name__ __module__ __qualname____doc__rr__annotations__rrrrr!r"r$r%r'E/var/www/piapp/venv/lib/python3.11/site-packages/anyio/streams/tls.pyrrs!??!0 1 1M1111(7(9(99999#2?#4#4F4444DS?CTCTTTTT,;O,=,====='))K))))9H8I8INIIII / 1 1J1111!0 1 11111&((K((((((r.rF)eqceZdZUdZded<ded<ded<ded <ded <ed d d d d d*dZd+dZd,dZd-dZ d.d/d$Z d0d&Z d-d'Z e d1d)Zd S)2 TLSStreama A stream wrapper that encrypts all sent data and decrypts received data. This class has no public initializer; use :meth:`wrap` instead. All extra attributes from :class:`~TLSAttribute` are supported. :var AnyByteStream transport_stream: the wrapped stream rtransport_streamr r%r# _ssl_objectz ssl.MemoryBIO _read_bio _write_bioNT)r!hostname ssl_contextr%r! bool | Noner7rr8ssl.SSLContext | NonereturncK|| }|sh|rtjjntjj}tj|}t tdr|xjtjzc_tj}tj}| ||||} |||| ||} | | j d{V| S)a Wrap an existing stream with Transport Layer Security. This performs a TLS handshake with the peer. :param transport_stream: a bytes-transporting stream to wrap :param server_side: ``True`` if this is the server side of the connection, ``False`` if this is the client side (if omitted, will be set to ``False`` if ``hostname`` has been provided, ``False`` otherwise). Used only to create a default context when an explicit context has not been provided. :param hostname: host name of the peer (if host name checking is desired) :param ssl_context: the SSLContext object to use (if not provided, a secure default will be created) :param standard_compatible: if ``False``, skip the closing handshake when closing the connection, and don't raise an exception if the peer does the same :raises ~ssl.SSLError: if the TLS handshake fails NOP_IGNORE_UNEXPECTED_EOF)r!server_hostname)r3r%r4r5r6) sslPurpose CLIENT_AUTH SERVER_AUTHcreate_default_contexthasattroptionsr= MemoryBIOwrap_bio_call_sslobject_method do_handshake) clsr3r!r7r8r%purposebio_inbio_outr$wrappers r/wrapzTLSStream.wrapFs 8  &,K E+6S ''CK!>!@!@@@@@@@DN((....#///N,,.....777N,,...O--///-367 ( I I I+001E1E1G1GHHHHHHHHHHH& 3 3 3((***))+++)s2<   ((***))+++sCO4445EE/41s:)t3 1* sbAI"A"CI"#E ?I" E  :EE  I"AI"I"$:GI"0A-II"tuple[AnyByteStream, bytes]cK||jjd{V|j|j|j|jfS)z Does the TLS closing handshake. :return: a tuple of (wrapped byte stream, bytes left in the read buffer) N)rHr4unwrapr5r\r6r3rXrds r/rjzTLSStream.unwrapsx))$*:*ABBBBBBBBB   """ !!###$dn&9&9&;&;;;r.NonecK|jrE |d{Vn)#t$rt|jd{VwxYw|jd{VdSN)r%rj BaseExceptionrr3acloserks r/rpzTLSStream.acloses  #  kkmm########    '(=>>>>>>>>> #**,,,,,,,,,,,s &&A  max_bytesintrchK||jj|d{V}|st|Srn)rHr4rXr )rdrrrfs r/rZzTLSStream.receivesF001A1F RRRRRRRR   r.itemcVK||jj|d{VdSrn)rHr4r[)rdrus r/rWzTLSStream.sends:))$*:*@$GGGGGGGGGGGr.cPK|tj}tjd|}|r`t |dt |dpd}}||fdkrtd|td)NzTLSv(\d+)(?:\.(\d+))?r r)rxz;send_eof() requires at least TLSv1.3; current session uses z7send_eof() has not yet been implemented for TLS streams)extrarr'rematchrsgroupNotImplementedError)rdr'r|majorminors r/send_eofzTLSStream.send_eofsjj!9:: 1;??  u{{1~~..EKKNN4Ga0H0H5Eu~&&)2$/22 " E   r.Mapping[Any, Callable[[], Any]]cijjtjjjtjjjtjjjtj fdtj fdtj fdtj fdtj fdtjfdtjjji S)Nc8jdS)NFr4 getpeercertrksr/z,TLSStream.extra_attributes..s43C3O3OPU3V3Vr.c8jdS)NTrrksr/rz,TLSStream.extra_attributes..s$:J:V:V;;r.cjjSrn)r4r!rksr/rz,TLSStream.extra_attributes..s d.>.Jr.cRjjrjndSrn)r4r!r"rksr/rz,TLSStream.extra_attributes..s-+21A1P1P1R1R1Rr.cjSrnr%rksr/rz,TLSStream.extra_attributes.. d6Nr.cjSrn)r4rksr/rz,TLSStream.extra_attributes..s T-=r.)r3extra_attributesrrr4selected_alpn_protocolrget_channel_bindingrrrr!r"r%r$r'versionrks`r/rzTLSStream.extra_attributess #4  &(8(O  3T5E5Y  !1!8  )+V+V+V+V  03333  $&J&J&J&J  '****  ,.N.N.N.N  #%=%=%=%=  $d&6&>   r.) r3rr!r9r7rr8r:r%r r;r2)rPrQrRrSr;r)r;rhr;rl)rq)rrrsr;r)rurr;rlr;r)r(r)r*r+r, classmethodrOrHrjrprZrWrpropertyrr-r.r/r2r24s7$### $(#-1$(55555[5n----^ < < < <----HHHH        X   r.r2ceZdZUdZded<ded<dZded<d Zd ed <eddZ dddZ ddZ e d dZ dS)! TLSListenera A convenience listener that wraps another listener and auto-negotiates a TLS session on every accepted connection. If the TLS handshake times out or raises an exception, :meth:`handle_handshake_error` is called to do whatever post-mortem processing is deemed necessary. Supports only the :attr:`~TLSAttribute.standard_compatible` extra attribute. :param Listener listener: the listener to wrap :param ssl_context: the SSL context object :param standard_compatible: a flag passed through to :meth:`TLSStream.wrap` :param handshake_timeout: time limit for the TLS handshake (passed to :func:`~anyio.fail_after`) z Listener[Any]listenerzssl.SSLContextr8Tr r%floathandshake_timeoutrgrostreamrr;rlc(Kt|d{Vt|ts,tjt dt|trt|trdS)a Handle an exception raised during the TLS handshake. This method does 3 things: #. Forcefully closes the original stream #. Logs the exception (unless it was a cancellation exception) using the ``anyio.streams.tls`` logger #. Reraises the exception if it was a base exception or a cancellation exception :param exc: the exception :param stream: the original stream NzError during TLS handshake)rrarlogging getLoggerr( exception Exception)rgrs r/handle_handshake_errorz"TLSListener.handle_handshake_errors  '''''''''#68899 P  h ' ' 1 12N O O O#y)) Z=T=V=V-W-W    r.NhandlerCallable[[TLSStream], Any] task_groupTaskGroup | NonecKtdfd }j||d{VdS)Nrrr;rlcNKddlm} |j5t|jjd{V}dddn #1swxYwY|d{VdS#t$r'}||d{VYd}~dSd}~wwxYw)Nr ) fail_after)r8r%) rrr2rOr8r%ror)rrwrapped_streamrgrrds r/handler_wrapperz*TLSListener.serve..handler_wrapper'sP % % % % % % .Z 677+4>>$($4,0,D,:,,&&&&&&Ngn-----------! ? ? ?11#v>>>>>>>>>>>>>>> ?s:A3.A A3AA3AA33 B$=BB$)rrr;rl)rrserve)rdrrrs`` r/rzTLSListener.serve"so w . . . . . .  .m!!/:>>>>>>>>>>>r.cHK|jd{VdSrn)rrprks r/rpzTLSListener.aclose9s2m""$$$$$$$$$$$r.rc&tjfdiS)NcjSrnrrksr/rz.TLSListener.extra_attributes..?rr.)rr%rks`r/rzTLSListener.extra_attributes<s!  ,.N.N.N.N  r.)rgrorrr;rlrn)rrrrr;rlrr) r(r)r*r+r,r%r staticmethodrrrprrr-r.r/rrs  $$$$$!!!!!\8(,?????.%%%%   X   r.r)# __future__rrr{r? dataclassesr functoolsrtypingrrrr r rr r rr_core._typedattrrrabcrrrrrr&_PCTRTT_PCTRTTTrr2rr-r.r/rs"""""" !!!!!!99999999999999 BAAAAAAA@@@@@@@@@@@@ 7:   c3h$ % # )))))$)))8 ey y y y y y y y x eN N N N N (9%N N N N N r.