3
\e
@ s d dl Z d dlZy d dlZW n ek
r4 dZY nX ddlmZ ddlmZ ddlmZ ddlmZ ddl m
Z
dd Z d
d Z d Z
d
ZdZdZG dd deZG dd dejejZG dd dejZdS ) N ) base_events)compat) protocols)
transports)loggerc C sj | r t dttdr*tj }|sfd|_n|j
dkrtj |_ |j tj tj
tjfkrЂ |j tj k| _W Y dd}~X nX | jjr
|j| jj |t |ks | jrdP qdW ||fS )a Feed plaintext data into the pipe.
Return an (ssldata, offset) tuple. The ssldata element is a list of
buffers containing record level data that needs to be sent to the
remote SSL instance. The offset is the number of plaintext bytes that
were processed, which may be less than the length of data.
NOTE: In case of short writes, this call MUST be retried with the SAME
buffer passed into the *data* argument (i.e. the id() must be the
same). This is an OpenSSL requirement. A further particularity is that
a short write will always have offset == 0, because the _ssl module
does not enable partial writes. And even though the offset is zero,
there will still be encrypted data in ssldata.
r NFZPROTOCOL_IS_SHUTDOWN)r/ r0 r r
memoryviewr r r9 r r= reasonr@ r8 rA rB r rC r< r: )r# rD offsetr2 ZviewrF r r r feed_appdata s4
z_SSLPipe.feed_appdatai )N)N)N)F)r )__name__
__module__ __qualname____doc__r; r% propertyr$ r& r' r) r4 r6 r7 r. rJ r r r r r 0 s
Jr c @ s e Zd Zdd Zd ddZdd Zdd Zd
d Zd d
Ze j
rHdd Z dd Z dd Z
d ddZdd Zdd Zdd Zd d ZdS ) _SSLProtocolTransportc C s || _ || _d| _d S )NF)_loop
_ssl_protocol_closed)r# loopZ ssl_protocolr r r r% ) s z _SSLProtocolTransport.__init__Nc C s | j j||S )z#Get optional transport information.)rR _get_extra_info)r# namedefaultr r r get_extra_info/ s z$_SSLProtocolTransport.get_extra_infoc C s || j _d S )N)rR
_app_protocol)r# protocolr r r set_protocol3 s z"_SSLProtocolTransport.set_protocolc C s | j jS )N)rR rY )r# r r r get_protocol6 s z"_SSLProtocolTransport.get_protocolc C s | j S )N)rS )r# r r r
is_closing9 s z _SSLProtocolTransport.is_closingc C s d| _ | jj dS )a
Close the transport.
Buffered data will be flushed asynchronously. No more data
will be received. After all buffered data is flushed, the
protocol's connection_lost() method will (eventually) called
with None as its argument.
TN)rS rR _start_shutdown)r# r r r close< s z_SSLProtocolTransport.closec C s& | j s"tjd| t| d | j d S )Nzunclosed transport %r)source)rS warningswarnResourceWarningr_ )r# r r r __del__K s z _SSLProtocolTransport.__del__c C s | j jj dS )zPause the receiving end.
No data will be passed to the protocol's data_received()
method until resume_reading() is called.
N)rR
_transport
pause_reading)r# r r r rf Q s z#_SSLProtocolTransport.pause_readingc C s | j jj dS )zResume the receiving end.
Data received will once again be passed to the protocol's
data_received() method.
N)rR re resume_reading)r# r r r rg Y s z$_SSLProtocolTransport.resume_readingc C s | j jj|| dS )a Set the high- and low-water limits for write flow control.
These two values control when to call the protocol's
pause_writing() and resume_writing() methods. If specified,
the low-water limit must be less than or equal to the
high-water limit. Neither value can be negative.
The defaults are implementation-specific. If only the
high-water limit is given, the low-water limit defaults to an
implementation-specific value less than or equal to the
high-water limit. Setting high to zero forces low to zero as
well, and causes pause_writing() to be called whenever the
buffer becomes non-empty. Setting low to zero causes
resume_writing() to be called only once the buffer is empty.
Use of zero for either limit is generally sub-optimal as it
reduces opportunities for doing I/O and computation
concurrently.
N)rR re set_write_buffer_limits)r# ZhighZlowr r r rh a s z-_SSLProtocolTransport.set_write_buffer_limitsc C s | j jj S )z,Return the current size of the write buffer.)rR re get_write_buffer_size)r# r r r ri v s z+_SSLProtocolTransport.get_write_buffer_sizec C s< t |tttfs$tdjt|j|s,dS | jj | dS )zWrite some data bytes to the transport.
This does not block; it buffers the data and arranges for it
to be sent out asynchronously.
z/data: expecting a bytes-like instance, got {!r}N)
isinstancebytes bytearrayrG TypeErrorformattyperK rR _write_appdata)r# rD r r r r9 z s z_SSLProtocolTransport.writec C s dS )zAReturn True if this transport supports write_eof(), False if not.Fr )r# r r r
can_write_eof s z#_SSLProtocolTransport.can_write_eofc C s | j j dS )zClose the transport immediately.
Buffered data will be lost. No more data will be received.
The protocol's connection_lost() method will (eventually) be
called with None as its argument.
N)rR _abort)r# r r r abort s z_SSLProtocolTransport.abort)N)NN)rK rL rM r% rX r[ r\ r] r_ r ZPY34rd rf rg rh ri r9 rq rs r r r r rP & s
rP c @ s e Zd ZdZd(ddZd)ddZd d
Zd d Zd
d Zdd Z dd Z
dd Z d*ddZ dd Z
dd Zdd Zd d Zd d Zd+d"d#Zd$d% Zd&d' ZdS ), SSLProtocolzSSL protocol.
Implementation of SSL on top of a socket using incoming and outgoing
buffers which are ssl.MemoryBIO objects.
FNTc C s t d krtd|s t||}|| _|r6| r6|| _nd | _|| _t|d| _tj | _
d| _ || _ || _
|| _t| j
| | _d | _d| _d| _d| _d | _|| _d S )Nz stdlib ssl module not available)r r F)r r, r r r _sslcontextdict_extra collectionsdeque_write_backlog_write_buffer_size_waiterrQ rY rP _app_transport_sslpipe_session_established
_in_handshake _in_shutdownre _call_connection_made)r# rT Z app_protocolr Zwaiterr r Zcall_connection_mader r r r% s,
zSSLProtocol.__init__c C sD | j d krd S | j j s:|d k r.| j j| n | j jd d | _ d S )N)r| Z cancelledZ
set_exceptionZ
set_result)r# rF r r r _wakeup_waiter s
zSSLProtocol._wakeup_waiterc C s& || _ t| j| j| j| _| j dS )zXCalled when the low-level connection is made.
Start the SSL handshake.
N)re r ru r r r~ _start_handshake)r# transportr r r connection_made s
zSSLProtocol.connection_madec C s8 | j r d| _ | jj| jj| d| _d| _| j| dS )zCalled when the low-level connection is lost or closed.
The argument is an exception object or None (the latter
meaning a regular EOF is received or the connection was
aborted or closed).
FN)r rQ call_soonrY connection_lostre r} r )r# rF r r r r s zSSLProtocol.connection_lostc C s | j j dS )z\Called when the low-level transport's buffer goes over
the high-water mark.
N)rY
pause_writing)r# r r r r s zSSLProtocol.pause_writingc C s | j j dS )z^Called when the low-level transport's buffer drains below
the low-water mark.
N)rY resume_writing)r# r r r r s zSSLProtocol.resume_writingc C s | j dkrdS y| j j|\}}W nH tjk
rj } z*| jj rTtjd| |j|j | j
dS d}~X nX x|D ]}| j j | qrW x(|D ] }|r| j
j| q| j P qW dS )zXCalled when some SSL data is received.
The argument is a bytes object.
Nz %r: SSL error %s (reason %s))r~ r. r r= rQ get_debugr warningr8 rH rr re r9 rY
data_receivedr^ )r# rD r2 r3 erE r r r r s"
zSSLProtocol.data_receivedc
C sT zB| j j rtjd| | jt | js@| jj }|r@tj d W d| j
j X dS )a Called when the other end of the low-level stream
is half-closed.
If this returns a false value (including None), the transport
will close itself. If it returns a true value, closing the
transport is up to the protocol.
z%r received EOFz?returning true from eof_received() has no effect when using sslN) rQ r r debugr ConnectionResetErrorr rY eof_receivedr re r_ )r# Z keep_openr r r r s
zSSLProtocol.eof_receivedc C s4 || j kr| j | S | jd k r,| jj||S |S d S )N)rw re rX )r# rV rW r r r rU ! s
zSSLProtocol._get_extra_infoc C s. | j r
d S | jr| j nd| _ | jd d S )NTr* )r r rr rp )r# r r r r^ ) s
zSSLProtocol._start_shutdownc C s. | j j|df | jt|7 _| j d S )Nr )rz r< r{ r/ _process_write_backlog)r# rD r r r rp 2 s zSSLProtocol._write_appdatac C sH | j j r$tjd| | j j | _nd | _d| _| jjd | j d S )Nz%r starts SSL handshakeTr* r )r* r )
rQ r r r time_handshake_start_timer rz r< r )r# r r r r 7 s
z SSLProtocol._start_handshakec C sT d| _ | jj}yF|d k r ||j }t| jdsR| jrR| jjtj krRtj
|| j W n~ t k
r } zb| j j
rt|tjrtjd| dd ntjd| dd | jj t|tr| j| d S W Y d d }~X nX | j j
r| j j | j }tjd| |d | jj||j |j |d | j r4| j j | j | j d| _!| j j"| j# d S )
NFr z5%r: SSL handshake failed on verifying the certificateT)exc_infoz%r: SSL handshake failedz %r: SSL handshake took %.1f msg @@)peercertcipher compressionr& )$r r~ r& Z getpeercertr
ru r r
r Z CERT_NONEZmatch_hostname
BaseExceptionrQ r rj r> r r re r_ Exceptionr r r r rw updater r r rY r r} r r r )r# Z
handshake_excZsslobjr rF Zdtr r r _on_handshake_completeC sD
z"SSLProtocol._on_handshake_completec C sJ | j d ks| jd krd S yxtt| jD ]}| jd \}}|rT| jj||\}}n*|rl| jj| j}d}n| jj| j }d}x|D ]}| j j
| qW |t|k r||f| jd< | jj st | j j
r| j j P | jd= | jt|8 _q*W W nR tk
rD } z4| jr| j| n | j|d t|ts4 W Y d d }~X nX d S )Nr r z Fatal error on SSL transport)re r~ ranger/ rz rJ r4 r r6 _finalizer9 r' r0 Z_pausedrg r{ r r _fatal_errorrj r )r# irD rI r2 rE rF r r r r w s:
z"SSLProtocol._process_write_backlogFatal error on transportc C sX t |tjr*| jj rBtjd| |dd n| jj||| j| d | jrT| jj | d S )Nz%r: %sT)r )messageZ exceptionr rZ )
rj r Z_FATAL_ERROR_IGNORErQ r r r Zcall_exception_handlerre Z _force_close)r# rF r r r r r s
zSSLProtocol._fatal_errorc C s d | _ | jd k r| jj d S )N)r~ re r_ )r# r r r r s
zSSLProtocol._finalizec
C s( z| j d k r| j j W d | j X d S )N)re rs r )r# r r r rr s
zSSLProtocol._abort)FNT)N)N)r )rK rL rM rN r% r r r r r r r rU r^ rp r r r r r rr r r r r rt s&
"
4,
rt )rx ra r ImportError r r r r logr r r r r- r( r5 objectr Z_FlowControlMixinZ TransportrP ZProtocolrt r r r r s*
wn