OwlCyberSecurity - MANAGER
Edit File: ssl_match_hostname.cpython-39.pyc
a )��e~ � @ sr d Z ddlZddlZz ddlZW n ey6 dZY n0 dZG dd� de�Zddd�Zd d � Z d d � Z d d� Z dS )zJThe match_hostname() function from Python 3.3.3, essential when using SSL.� Nz3.5.0.1c @ s e Zd ZdS )�CertificateErrorN)�__name__� __module__� __qualname__� r r �l/home/gouroczh/virtualenv/pat/3.9/lib/python3.9/site-packages/pip/_vendor/urllib3/util/ssl_match_hostname.pyr s r � c C s� g }| s dS | � d�}|d }|dd� }|�d�}||krLtdt| � ��|s`| �� |�� kS |dkrt|�d� n>|�d �s�|�d �r�|�t�|�� n|�t�|�� d d �� |D ]}|�t�|�� q�t� d d � |� d tj �} | � |�S )zhMatching according to RFC 6125, section 6.4.3 http://tools.ietf.org/html/rfc6125#section-6.4.3 F�.r r N�*z,too many wildcards in certificate DNS name: z[^.]+zxn--z\*z[^.]*z\Az\.z\Z)�split�countr �repr�lower�append� startswith�re�escape�replace�compile�join� IGNORECASE�match) �dn�hostnameZ max_wildcardsZpats�partsZleftmost� remainder� wildcards�frag�patr r r �_dnsname_match s, � r c C s& t | t�r"tjdk r"t| ddd�} | S )N)� �ascii�strict)�encoding�errors)� isinstance�str�sys� version_info�unicode)�objr r r � _to_unicodeO s r+ c C s t �t| ��� �}||kS )z�Exact matching of IP addresses. RFC 6125 explicitly doesn't define an algorithm for this (section 1.7.2 - "Out of Scope"). )� ipaddress� ip_addressr+ �rstrip)�ipname�host_ip�ipr r r �_ipaddress_matchV s r2 c C sv | s t d��zt�t|��}W n: tt fy8 d}Y n" tyX tdu rRd}n� Y n0 g }| �dd�}|D ]^\}}|dkr�|du r�t||�r� dS |�|� qn|dkrn|dur�t ||�r� dS |�|� qn|�s| �dd�D ]8}|D ].\}}|dkr�t||��r dS |�|� q�q�t |�d k�rFt d |d � t t|��f ��n,t |�d k�rjt d ||d f ��nt d��dS )a) Verify that *cert* (in decoded format as returned by SSLSocket.getpeercert()) matches the *hostname*. RFC 2818 and RFC 6125 rules are followed, but IP addresses are not accepted for *hostname*. CertificateError is raised on failure. On success, the function returns nothing. ztempty or no certificate, match_hostname needs a SSL socket or SSL context with either CERT_OPTIONAL or CERT_REQUIREDN�subjectAltNamer �DNSz IP Address�subject� commonNamer z&hostname %r doesn't match either of %sz, z hostname %r doesn't match %rr z=no appropriate commonName or subjectAltName fields were found)� ValueErrorr, r- r+ � UnicodeError�AttributeError�getr r r2 �lenr r �mapr )�certr r0 �dnsnames�san�key�value�subr r r �match_hostnameb sR � ���rC )r ) �__doc__r r' r, � ImportError� __version__r7 r r r+ r2 rC r r r r �<module> s 6