U nj1@sPddlmZddlZddlZddlZddlZddlmZmZddl m Z ddl m Z ddl mZmZmZddlmZmZmZmZdd lmZmZdd lmZmZmZmZejd krdd l mZm Z ndd l!mZm Z ed Z"edZ#eee$e$fdfZ%ee%dfZ&GdddeZ'e ddGdddeZ(e ddGdddee(Z)dS)) annotationsN)CallableMapping) dataclass)wraps)AnyTupleTypeVar)BrokenResourceError EndOfStreamaclose_forcefullyget_cancelled_exc_class)TypedAttributeSettyped_attribute) AnyByteStream ByteStreamListener TaskGroup) ) TypeVarTupleUnpackT_RetvalPosArgsT.c@seZdZUdZeZded<eZded<eZded<eZ ded <eZ d ed <eZ d ed <eZ ded<eZ ded<eZd ed<eZded<dS) TLSAttributez5Contains Transport Layer Security related attributes. str | None alpn_protocolbyteschannel_binding_tls_uniqueztuple[str, str, int]cipherz*None | dict[str, str | _PCTRTTT | _PCTRTT]peer_certificatez bytes | Nonepeer_certificate_binarybool server_sidez!list[tuple[str, str, int]] | Noneshared_ciphers ssl.SSLObject ssl_objectstandard_compatiblestr tls_versionN)__name__ __module__ __qualname____doc__rr__annotations__rr r!r"r$r%r'r(r*r0r05/tmp/pip-unpacked-wheel-k8mofgf9/anyio/streams/tls.pyr s rF)eqc @seZdZUdZded<ded<ded<ded <ded <ed d d d d dddddddddZddddddZddddZdddd Z d/d"d#d$d%d&Z d#dd'd(d)Z ddd*d+Z e d,dd-d.Zd S)0 TLSStreama A stream wrapper that encrypts all sent data and decrypts received data. This class has no public initializer; use :meth:`wrap` instead. All extra attributes from :class:`~TLSAttribute` are supported. :var AnyByteStream transport_stream: the wrapped stream rtransport_streamr#r(r& _ssl_objectz ssl.MemoryBIO _read_bio _write_bioNT)r$hostname ssl_contextr(z bool | Nonerzssl.SSLContext | None)r4r$r8r9r(returnc s|dkr| }|sL|rtjjntjj}t|}ttdrL|jtjM_t}t}|j ||||d} |||| ||d} | | j IdH| S)a Wrap an existing stream with Transport Layer Security. This performs a TLS handshake with the peer. :param transport_stream: a bytes-transporting stream to wrap :param server_side: ``True`` if this is the server side of the connection, ``False`` if this is the client side (if omitted, will be set to ``False`` if ``hostname`` has been provided, ``False`` otherwise). Used only to create a default context when an explicit context has not been provided. :param hostname: host name of the peer (if host name checking is desired) :param ssl_context: the SSLContext object to use (if not provided, a secure default will be created) :param standard_compatible: if ``False``, skip the closing handshake when closing the connection, and don't raise an exception if the peer does the same :raises ~ssl.SSLError: if the TLS handshake fails NOP_IGNORE_UNEXPECTED_EOF)r$server_hostname)r4r(r5r6r7) sslPurpose CLIENT_AUTH SERVER_AUTHcreate_default_contexthasattroptionsr; MemoryBIOwrap_bio_call_sslobject_method do_handshake) clsr4r$r8r9r(purposeZbio_inZbio_outr'wrapperr0r0r1wrapNs2  zTLSStream.wrapz&Callable[[Unpack[PosArgsT]], T_Retval]zUnpack[PosArgsT]r)funcargsr:c sz||}Wntjk rz4|jjrB|j|jIdH|jIdH}WnXtk rr|j YnHt k r}z|j |j t |W5d}~XYnX|j |Yqtjk r|j|jIdHYqtjk r(}z|j |j t |W5d}~XYqtjk r}zR|j |j t|tjsr|jrd|jkr|jrt |ntdW5d}~XYqX|jjr|j|jIdH|SqdS)NZUNEXPECTED_EOF_WHILE_READING)r=SSLWantReadErrorr7pendingr4sendreadreceiver r6 write_eofOSErrorr writeSSLWantWriteErrorSSLSyscallErrorSSLError isinstance SSLEOFErrorstrerrorr()selfrLrMresultdataexcr0r0r1rFsF       z TLSStream._call_sslobject_methodztuple[AnyByteStream, bytes]r:cs8||jjIdH|j|j|j|jfS)z Does the TLS closing handshake. :return: a tuple of (wrapped byte stream, bytes left in the read buffer) N)rFr5unwrapr6rSr7r4rQr\r0r0r1ras  zTLSStream.unwrapNonecsT|jr@z|IdHWn&tk r>t|jIdHYnX|jIdHdSN)r(ra BaseExceptionr r4acloserbr0r0r1rfszTLSStream.acloseintr) max_bytesr:cs"||jj|IdH}|st|Srd)rFr5rQr )r\rir^r0r0r1rRszTLSStream.receive)itemr:cs||jj|IdHdSrd)rFr5rU)r\rjr0r0r1rPszTLSStream.sendcsd|tj}td|}|rXt|dt|dp6d}}||fdkrXtd|tddS)NzTLSv(\d+)(?:\.(\d+))?r r)rkrz;send_eof() requires at least TLSv1.3; current session uses z7send_eof() has not yet been implemented for TLS streams)extrarr*rematchrhgroupNotImplementedError)r\r*rnmajorminorr0r0r1send_eofs  " zTLSStream.send_eofMapping[Any, Callable[[], Any]]csjjtjjjtjjjtjjjtj fddtj fddtj fddtj fddtj fddtjfddtjjji S)Ncs jdS)NFr5 getpeercertr0rbr0r1z,TLSStream.extra_attributes..cs jdS)NTrur0rbr0r1rwscsjjSrd)r5r$r0rbr0r1rwrxcsjjrjSdSrd)r5r$r%r0rbr0r1rws csjSrdr(r0rbr0r1rwrxcsjSrd)r5r0rbr0r1rwrx)r4extra_attributesrrr5selected_alpn_protocolrget_channel_bindingr r!r"r$r%r(r'r*versionrbr0rbr1rzs,      zTLSStream.extra_attributes)rg)r+r,r-r.r/ classmethodrKrFrarfrRrPrspropertyrzr0r0r0r1r3<s(  8.  r3c@seZdZUdZded<ded<dZded<d Zd ed <ed d ddddZdddddddZ ddddZ e ddddZ dS) TLSListenera A convenience listener that wraps another listener and auto-negotiates a TLS session on every accepted connection. If the TLS handshake times out or raises an exception, :meth:`handle_handshake_error` is called to do whatever post-mortem processing is deemed necessary. Supports only the :attr:`~TLSAttribute.standard_compatible` extra attribute. :param Listener listener: the listener to wrap :param ssl_context: the SSL context object :param standard_compatible: a flag passed through to :meth:`TLSStream.wrap` :param handshake_timeout: time limit for the TLS handshake (passed to :func:`~anyio.fail_after`) z Listener[Any]listenerzssl.SSLContextr9Tr#r(floathandshake_timeoutrerrc)r_streamr:csJt|IdHt|ts.ttjd|dt|trDt|trFdS)a Handle an exception raised during the TLS handshake. This method does 3 things: #. Forcefully closes the original stream #. Logs the exception (unless it was a cancellation exception) using the ``anyio.streams.tls`` logger #. Reraises the exception if it was a base exception or a cancellation exception :param exc: the exception :param stream: the original stream NzError during TLS handshake)exc_info)r rYrlogging getLoggerr+ exception Exception)r_rr0r0r1handle_handshake_errors  z"TLSListener.handle_handshake_errorNzCallable[[TLSStream], Any]zTaskGroup | None)handler task_groupr:cs6tdddfdd }j||IdHdS)Nrrc)rr:c sddlm}z4|j tj|jjdIdH}W5QRXWn4tk rt}z||IdHW5d}~XYnX|IdHdS)Nr ) fail_after)r9r() rrr3rKr9r(rer)rrZwrapped_streamr_rr\r0r1handler_wrapper8s  $z*TLSListener.serve..handler_wrapper)rrserve)r\rrrr0rr1r3szTLSListener.server`cs|jIdHdSrd)rrfrbr0r0r1rfJszTLSListener.aclosertcstjfddiS)NcsjSrdryr0rbr0r1rwPrxz.TLSListener.extra_attributes..)rr(rbr0rbr1rzMs zTLSListener.extra_attributes)N) r+r,r-r.r/r(r staticmethodrrrfrrzr0r0r0r1rs   "r)* __future__rrrmr=syscollections.abcrrZ dataclassesr functoolsrtypingrrr rr r r rZ_core._typedattrrrabcrrrr version_inforrZtyping_extensionsrrr)Z_PCTRTTZ_PCTRTTTrr3rr0r0r0r1s0     ?