9Cg1ddlmZddlZddlZddlZddlZddlmZmZddl m Z ddl m Z ddl mZmZddlmZmZmZmZdd lmZmZdd lmZmZmZmZejd kr dd l mZmZndd l mZmZed Z!edZ"e#e#e$e$fdfZ%e#e%dfZ&GddeZ'e dGddeZ(e dGddee(Z)dS)) annotationsN)CallableMapping) dataclass)wraps)AnyTypeVar)BrokenResourceError EndOfStreamaclose_forcefullyget_cancelled_exc_class)TypedAttributeSettyped_attribute) AnyByteStream ByteStreamListener TaskGroup) ) TypeVarTupleUnpackT_RetvalPosArgsT.c@eZdZUdZeZded<eZded<eZded<eZ ded <eZ d ed <eZ d ed <eZ ded<eZ ded<eZd ed<eZded<dS) TLSAttributez5Contains Transport Layer Security related attributes. str | None alpn_protocolbyteschannel_binding_tls_uniqueztuple[str, str, int]cipherz*None | dict[str, str | _PCTRTTT | _PCTRTT]peer_certificatez bytes | Nonepeer_certificate_binarybool server_sidez!list[tuple[str, str, int]] | Noneshared_ciphers ssl.SSLObject ssl_objectstandard_compatiblestr tls_versionN)__name__ __module__ __qualname____doc__rr__annotations__r r!r"r#r%r&r(r)r+C/var/www/api/venv/lib/python3.11/site-packages/anyio/streams/tls.pyrr s!??!0 1 1M1111(7(9(99999#2?#4#4F4444FU_EVEVVVVV,;O,=,====='))K))))9H8I8INIIII / 1 1J1111!0 1 11111&((K((((((r2rF)eqceZdZUdZded<ded<ded<ded <ded <ed d d d d d*dZd+dZd,dZd-dZ d.d/d$Z d0d&Z d-d'Z e d1d)Zd S)2 TLSStreama A stream wrapper that encrypts all sent data and decrypts received data. This class has no public initializer; use :meth:`wrap` instead. All extra attributes from :class:`~TLSAttribute` are supported. :var AnyByteStream transport_stream: the wrapped stream rtransport_streamr$r)r' _ssl_objectz ssl.MemoryBIO _read_bio _write_bioNT)r%hostname ssl_contextr)r% bool | Noner;rr<ssl.SSLContext | NonereturncK|| }|sh|rtjjntjj}tj|}t tdr|xjtjzc_tj}tj}| ||||} |||| ||} | | j d{V| S)a Wrap an existing stream with Transport Layer Security. This performs a TLS handshake with the peer. :param transport_stream: a bytes-transporting stream to wrap :param server_side: ``True`` if this is the server side of the connection, ``False`` if this is the client side (if omitted, will be set to ``False`` if ``hostname`` has been provided, ``False`` otherwise). Used only to create a default context when an explicit context has not been provided. :param hostname: host name of the peer (if host name checking is desired) :param ssl_context: the SSLContext object to use (if not provided, a secure default will be created) :param standard_compatible: if ``False``, skip the closing handshake when closing the connection, and don't raise an exception if the peer does the same :raises ~ssl.SSLError: if the TLS handshake fails NOP_IGNORE_UNEXPECTED_EOF)r%server_hostname)r7r)r8r9r:) sslPurpose CLIENT_AUTH SERVER_AUTHcreate_default_contexthasattroptionsrA MemoryBIOwrap_bio_call_sslobject_method do_handshake) clsr7r%r;r<r)purposebio_inbio_outr(wrappers r3wrapzTLSStream.wrapNs :  &,K E+6S ''CK!>!@!@@@@@@@DN((....#///N,,.....777N,,...O--///-367 ( I I I+001E1E1G1GHHHHHHHHHHH& 3 3 3((***))+++)s2<   ((***))+++sCO4445EE/41s:)t3 1* sbAI"A"CI"#E ?I" E  :EE  I"AI"I"$:GI"0A-II"tuple[AnyByteStream, bytes]cK||jjd{V|j|j|j|jfS)z Does the TLS closing handshake. :return: a tuple of (wrapped byte stream, bytes left in the read buffer) N)rLr8unwrapr9r`r:r7r\rhs r3rnzTLSStream.unwrapsx))$*:*ABBBBBBBBB   """ !!###$dn&9&9&;&;;;r2NonecK|jrE |d{Vn)#t$rt|jd{VwxYw|jd{VdSN)r)rn BaseExceptionr r7acloseros r3rtzTLSStream.acloses  #  kkmm########    '(=>>>>>>>>> #**,,,,,,,,,,,s &&A  max_bytesintrchK||jj|d{V}|st|Srr)rLr8r\r )rhrvrjs r3r^zTLSStream.receivesF001A1F RRRRRRRR   r2itemcVK||jj|d{VdSrr)rLr8r_)rhrys r3r[zTLSStream.sends:))$*:*@$GGGGGGGGGGGr2cPK|tj}tjd|}|r`t |dt |dpd}}||fdkrtd|td)NzTLSv(\d+)(?:\.(\d+))?r r)r|rz;send_eof() requires at least TLSv1.3; current session uses z7send_eof() has not yet been implemented for TLS streams)extrarr+rematchrwgroupNotImplementedError)rhr+rmajorminors r3send_eofzTLSStream.send_eofsjj!9:: 1;??  u{{1~~..EKKNN4Ga0H0H5Eu~&&)2$/22 " E   r2Mapping[Any, Callable[[], Any]]cijjtjjjtjjjtjjjtj fdtj fdtj fdtj fdtj fdtjfdtjjji S)Nc8jdS)NFr8 getpeercertrosr3z,TLSStream.extra_attributes..s43C3O3OPU3V3Vr2c8jdS)NTrrosr3rz,TLSStream.extra_attributes..s$:J:V:V;;r2cjjSrr)r8r%rosr3rz,TLSStream.extra_attributes..s d.>.Jr2cRjjrjndSrr)r8r%r&rosr3rz,TLSStream.extra_attributes..s-+21A1P1P1R1R1Rr2cjSrrr)rosr3rz,TLSStream.extra_attributes.. d6Nr2cjSrr)r8rosr3rz,TLSStream.extra_attributes..s T-=r2)r7extra_attributesrrr8selected_alpn_protocolr get_channel_bindingr!r"r#r%r&r)r(r+versionros`r3rzTLSStream.extra_attributess #4  &(8(O  3 4  !1!8  )+V+V+V+V  03333  $&J&J&J&J  '****  ,.N.N.N.N  #%=%=%=%=  $d&6&>#   r2) r7rr%r=r;rr<r>r)r$r?r6)rTrUrVrWr?r)r?rlr?rp)ru)rvrwr?r)ryrr?rpr?r)r,r-r.r/r0 classmethodrSrLrnrtr^r[rpropertyrr1r2r3r6r6<s7$### $(#-1$(66666[6p----^ < < < <----HHHH        X   r2r6ceZdZUdZded<ded<dZded<d Zd ed <eddZ dddZ ddZ e d dZ dS)! TLSListenera A convenience listener that wraps another listener and auto-negotiates a TLS session on every accepted connection. If the TLS handshake times out or raises an exception, :meth:`handle_handshake_error` is called to do whatever post-mortem processing is deemed necessary. Supports only the :attr:`~TLSAttribute.standard_compatible` extra attribute. :param Listener listener: the listener to wrap :param ssl_context: the SSL context object :param standard_compatible: a flag passed through to :meth:`TLSStream.wrap` :param handshake_timeout: time limit for the TLS handshake (passed to :func:`~anyio.fail_after`) z Listener[Any]listenerzssl.SSLContextr<Tr$r)floathandshake_timeoutrkrsstreamrr?rpc,Kt|d{Vt|ts.tjt d|t|trt|trdS)a Handle an exception raised during the TLS handshake. This method does 3 things: #. Forcefully closes the original stream #. Logs the exception (unless it was a cancellation exception) using the ``anyio.streams.tls`` logger #. Reraises the exception if it was a base exception or a cancellation exception :param exc: the exception :param stream: the original stream NzError during TLS handshake)exc_info)r rerlogging getLoggerr, exception Exception)rkrs r3handle_handshake_errorz"TLSListener.handle_handshake_errors  '''''''''#68899   h ' ' 1 1,s 2    #y)) Z=T=V=V-W-W    r2NhandlerCallable[[TLSStream], Any] task_groupTaskGroup | NonecKtdfd }j||d{VdS)Nrrr?rpcNKddlm} |j5t|jjd{V}dddn #1swxYwY|d{VdS#t$r'}||d{VYd}~dSd}~wwxYw)Nr ) fail_after)r<r)) rrr6rSr<r)rsr)rrwrapped_streamrkrrhs r3handler_wrapperz*TLSListener.serve..handler_wrapper9sP % % % % % % .Z 677+4>>$($4,0,D,:,,&&&&&&Ngn-----------! ? ? ?11#v>>>>>>>>>>>>>>> ?s:A3.A A3AA3AA33 B$=BB$)rrr?rp)rrserve)rhrrrs`` r3rzTLSListener.serve4so w . . . . . .  .m!!/:>>>>>>>>>>>r2cHK|jd{VdSrr)rrtros r3rtzTLSListener.acloseKs2m""$$$$$$$$$$$r2rc&tjfdiS)NcjSrrrrosr3rz.TLSListener.extra_attributes..Qrr2)rr)ros`r3rzTLSListener.extra_attributesNs!  ,.N.N.N.N  r2)rkrsrrr?rprr)rrrrr?rprr) r,r-r.r/r0r)r staticmethodrrrtrrr1r2r3rrs" $$$$$!!!!!\D(,?????.%%%%   X   r2r)* __future__rrr~rCsyscollections.abcrr dataclassesr functoolsrtypingrr rr r r r_core._typedattrrrabcrrrr version_inforrtyping_extensionsrrtupler*_PCTRTT_PCTRTTTrr6rr1r2r3rsc"""""" --------!!!!!! BAAAAAAA@@@@@@@@@@@@w+++++++++66666666 7:   < # # c3h$ % # )))))$)))8 e| | | | | | | | ~ eU U U U U (9%U U U U U r2