i)iBdZddlmZddlZddlZddlZddl Z ddl m Z ddlmZddlmZmZmZmZmZmZddlmZddlZddlmZddlmZdd l m!Z"dd l m#Z#dd l$m%Z%dd l&m'Z'm(Z(dd l)m*Z+ddl)m,Z,ddl-m.Z.erddlm/Z/edZ0 ddl1Z1dZ2n #e3$rdZ2YnwxYwej4Z5ej6Z6ej7Z7ej8Z8e9eddZ:dZ;dZej?ej@ejAejBejCejBejDziZEdeEFDZGd$dZHejIejJejKfZLejIZMejJZNejKZOd%dZPGddejQZRGd d!ZSGd"d#ZTdS)&zA CPython compatible SSLContext implementation wrapping PyOpenSSL's context. Due to limitations of the CPython asyncio.Protocol implementation for SSL, the async API does not support PyOpenSSL. ) annotationsN)EINTR) ip_address) TYPE_CHECKINGAnyCallableOptionalTypeVarUnion)SSL)crypto)ConfigurationError)_CertificateError) _OCSPCache)_load_trusted_ca_certs_ocsp_callback) SocketChecker)_errno_from_exception)validate_boolean) VerifyMode_TTFOP_NO_RENEGOTIATIONci|]\}}|| Sr).0keyvalues k/Users/user/workspace/sujinbaek/cqa-test-app/venv/lib/python3.11/site-packages/pymongo/pyopenssl_context.py rNsHHHjc5ucHHHaddressrreturnboolcV t|dS#ttf$rYdSwxYw)NTF) _ip_address ValueError UnicodeError)r!s r_is_ip_addressr(SsAGt  %uus ((exc BaseExceptionc|jdkS)zr-r@rHstartr) want_read want_writes r_callz_sslConn._callvsn//##  &O%%E  tT,V,,,%   a<<I;;==B&&E5?#4#4u#r?r-rr@rr"r)r-rr@rr"rS)r-rr@rr"rV)r-rr@rr"r\)r)r`rVrar\r"rS) __name__ __module__ __qualname__r;rRrUrXr_rl __classcell__)r=s@rr0r0ks$$$$$$<AAAAAAr r0ceZdZdZddZdS) _CallbackDataz0Data class which is passed to the OCSP callback.r"rScHd|_d|_t|_dSr7)trusted_ca_certscheck_ocsp_endpointrocsp_response_cacher<s rr;z_CallbackData.__init__s$BF37 #-<<   r Nr"rS)rmrnro__doc__r;rr rrrrrs.::000000r rrc$eZdZdZdZd3dZed4dZd5d Zd6d Z eee Z d7dZ d8dZ ee e Z d9dZd:dZeeeZd4dZd;dZeeeZ dd Zd?d!Zd@d$Zd?d%Zd?d&Z dAdBd2ZdS)C SSLContextzUA CPython compatible SSLContext implementation wrapping PyOpenSSL's context. ) _protocol_ctx_callback_data_check_hostnameprotocolr\c||_tj|j|_t |_d|_d|j_|jt|jdS)NT)callbackdata) r|rKContextr}rrr~rruset_ocsp_client_callbackr)r<rs rr;zSSLContext.__init__sa!L00 +oo# 37/ **NI\*]]]]]r r"c|jS)zhThe protocol version chosen when constructing the context. This attribute is read-only. )r|rws rrzSSLContext.protocols ~r rcJt|jS)zWhether to try to verify other peers' certificates and how to behave if verification fails. This attribute must be one of ssl.CERT_NONE, ssl.CERT_OPTIONAL or ssl.CERT_REQUIRED. )_REVERSE_VERIFY_MAPr}get_verify_moderws r__get_verify_modezSSLContext.__get_verify_modes #49#<#<#>#>??r rrScZd d }|jt||d S)zSetter for verify_mode._connobj_SSL.Connection_x509obj _crypto.X509_errnumr\ _errdepthretcoder"r#c t|Sr7)r#)rrrrrs r_cbz)SSLContext.__set_verify_mode.._cbs== r N) rrrrrr\rr\rr\r"r#)r} set_verify _VERIFY_MAP)r<rrs r__set_verify_modezSSLContext.__set_verify_modes; ! ! ! ! [/55555r r#c|jSr7)rrws r__get_check_hostnamezSSLContext.__get_check_hostnames ##r rc4td|||_dS)Ncheck_hostname)rrr<rs r__set_check_hostnamezSSLContext.__set_check_hostnames!)5111$r Optional[bool]c|jjSr7)r~rurws r__get_check_ocsp_endpointz$SSLContext.__get_check_ocsp_endpoints"66r c>td|||j_dS)N check_ocsp)rr~rurs r__set_check_ocsp_endpointz$SSLContext.__set_check_ocsp_endpoint s#u---27///r c6|jdSr^)r} set_optionsrws r __get_optionszSSLContext.__get_optionssy$$Q'''r cT|jt|dSr7)r}rr\rs r __set_optionszSSLContext.__set_optionss& c%jj)))))r NcertfileUnion[str, bytes]keyfileUnion[str, bytes, None]password Optional[str]cr d fd }|j||j||j|p||jd S) aLoad a private key and the corresponding certificate. The certfile string must be the path to a single file in PEM format containing the certificate as well as any number of CA certificates needed to establish the certificate's authenticity. The keyfile string, if present, must point to a file containing the private key. Otherwise the private key will be taken from certfile as well. _max_lengthr\ _prompt_twicer# _user_dataOptional[bytes]r"rVc6JdS)Nzutf-8)encode)rrrrs r_pwcbz)SSLContext.load_cert_chain.._pwcb1s# +++w///r N)rr\rr#rrr"rV)r} set_passwd_cbuse_certificate_chain_fileuse_privatekey_filecheck_privatekey)r<rrrrs ` rload_cert_chainzSSLContext.load_cert_chains  + 0 0 0 0 0 0 I # #E * * * ,,X666 %%g&9::: ""$$$$$r cafilecapathc|j||ttjds|Jt ||j_dSdS)zLoad a set of "certification authority"(CA) certificates used to validate other peers' certificates when `~verify_mode` is other than ssl.CERT_NONE. get_verified_chainN)r}load_verify_locationshasattrrK Connectionrr~rt)r<rrs rrz SSLContext.load_verify_locations=sc ''777t(<== R%%%3I&3Q3QD  0 0 0 R Rr c~tr(|tjdSt d)z&Attempt to load CA certs from certifi.ztlsAllowInvalidCertificates is False but no system CA certificates could be loaded. Please install the certifi package, or provide a path to a CA file using the tlsCAFile optionN) _HAVE_CERTIFIrcertifiwhere_ConfigurationErrorrws r _load_certifizSSLContext._load_certifiJsA    & &w} 7 7 7 7 7%' r storestrcF|j}|Jtjjj}tj|D]X\}}}|dkrL|dus||vrD|tj tj |YdS)z2Attempt to load CA certs from Windows trust store.Nx509_asnT) r}get_cert_store _stdlibsslPurpose SERVER_AUTHoidenum_certificatesadd_cert_cryptoX509from_cryptographyx509load_der_x509_certificate)r<r cert_storercertencodingtrusts r_load_wincertszSSLContext._load_wincertsVsY--// %%% ,0%/%A%%H%H   !D(E:%%D==C5LL'' 66t7UVZ7[7[\\  r c tjdkr@ dD]}||nH#t$r|Yn(wxYwtjdkr||jdS)z7A PyOpenSSL version of load_default_certs from CPython.win32)CAROOTdarwinN)_sysplatformrPermissionErrorrr}set_default_verify_paths)r< storenames rload_default_certszSSLContext.load_default_certscs =G # # %!/33I'' 22223" % % %""$$$$$ %]h & &     **,,,,,s-A Ac8|jdS)zmSpecify that the platform provided CA certificates are to be used for verification purposes. N)r}rrws rrz#SSLContext.set_default_verify_pathsss **,,,,,r FTr3_socket.socket server_sidedo_handshake_on_connectr5server_hostnamesessionOptional[_SSL.Session]r0ct|j||}|r|||dur|nv|r7t |s(||d|jtj kr| | |r| |j r|ddlm} t |r|||n|||n@#tjtjf$r"} t)t+| dd} ~ wwxYw|S)zZWrap an existing Python socket connection and return a TLS socket object. TidnaNr) pyopenssl)r0r} set_sessionset_accept_stater(set_tlsext_host_namer verify_moder CERT_NONE request_ocspset_connect_staterUrservice_identityrverify_ip_addressverify_hostnameCertificateErrorVerificationErrorrr) r<r3rrr5rrssl_connrr)s r wrap_socketzSSLContext.wrap_socket{sDIt-ABB  *   ) ) ) $    % % ' ' ' ' N~o'F'F N--o.D.DV.L.LMMM:#777%%'''  & & ( ( ( # @  ! ! # # #" @'B666666 @%o66M!33HoNNNN!11(OLLL$5$6@@@,CHH554? @ s#WXX(((( **** h}m44G ,0"& %%%%%>EI R R R R R        ---- ----"(,%))-*.1111111r r{)r!rr"r#)r)r*r"r#)Ury __future__rsocketrGsslrsysrtimerCerrnorrg ipaddressrr%typingrrrr r r cryptography.x509rrOpenSSLr rKr rpymongo.errorsrrrpymongo.ocsp_cacherpymongo.ocsp_supportrrpymongo.socket_checkerrr8rpymongo.write_concernrrrrr ImportError SSLv23_METHODPROTOCOL_SSLv23 OP_NO_SSLv2 OP_NO_SSLv3OP_NO_COMPRESSIONgetattrrHAS_SNI IS_PYOPENSSLErrorrIr VERIFY_NONE CERT_OPTIONAL VERIFY_PEER CERT_REQUIREDVERIFY_FAIL_IF_NO_PEER_CERTritemsrr(rLrMWantX509LookupErrorrEBLOCKING_IO_READ_ERRORBLOCKING_IO_WRITE_ERRORBLOCKING_IO_LOOKUP_ERRORr.rr0rrr{rr rr/se #"""""!!!!!!//////IIIIIIIIIIIIIIII %%%%%%DDDDDD,,,,,,))))))GGGGGGGGBBBBBB888888222222 WT]]NNNMMMMM$  *gd$91==   :$*d.d.1QQ IHK4E4E4G4GHHH ($*=t?WX+-3....PPPPPtPPPf00000000eeeeeeeeees BBB