B %Q[<@sHdZddlmZmZmZmZmZddlmZddl m Z m Z m Z m Z mZy ddlZWn.ek re e rve e dedYnXydd lmZmZWn>ek rdd lmZdd lmZe e re e d YnXydd lmZmZdZWn.ek rdZe e re e dYnXddlmZGdddeZddZdS) )LDAPSSLNotSupportedErrorLDAPSSLConfigurationErrorLDAPStartTLSErrorLDAPCertificateErrorstart_tls_exception_factory)SEQUENCE_TYPES)log log_enabledERRORBASICNETWORKNz,SSL not supported in this Python interpreter)match_hostnameCertificateError)r)rzusing tls_backport)create_default_contextPurposeTFzSSLContext unavailable)pathc @s\eZdZdZddejddddddddf ddZddZddZdd d Z d d Z ddZ dS)Tlsa tls/ssl configuration for Server object Starting from python 2.7.9 and python 3.4 uses the SSLContext object that tries to read the CAs defined at system level ca_certs_path and ca_certs_data are valid only when using SSLContext local_private_key_password is valid only when using SSLContext sni is the server name for Server Name Indication (when available) Nc Cs|tjtjtjgkr||_n |rzinvalid validate parameterzinvalid CA public key file <%s>zinvalid CA public key filez8cannot use CA public keys path, SSLContext not availablez invalid CA public keys path <%s>zinvalid CA public keys pathz,cannot use CA data, SSLContext not availablez?cannot use local private key password, SSLContext not availablezBcannot use local private key password, SSLContext is not availablezinstantiated Tls: <%r>)ssl CERT_NONE CERT_OPTIONAL CERT_REQUIREDvalidater r r rrexists ca_certs_fileuse_ssl_context ca_certs_pathr ca_certs_dataprivate_key_passwordversionprivate_key_filecertificate_file valid_namescipherssnir ) selfZlocal_private_key_fileZlocal_certificate_filerr!rr$rrZlocal_private_key_passwordr%r&r(QC:\Users\HIRONO~1\AppData\Local\Temp\pip-install-6i93dh7p\ldap3\ldap3\core\tls.py__init__Es\                z Tls.__init__c Csdt|jd|jrdndd|jr(dndd|jr8dndd|jrHdndd|jrXdndd |jrhdndd t|jd t|j d t|j d t|j g }d |S)Nz protocol: zclient private key: zpresent z not presentzclient certificate: zprivate key password: zCA certificates file: zCA certificates path: zCA certificates data: z verify mode: z valid names: z ciphers: zsni: z - ) strr!r"r#r rrrrr$r%r&join)r'sr(r(r)__str__s    z Tls.__str__cCs|jdkrdnd|}||jdkr(dnd|7}||jdkrDdnd|7}||jdkr`dnd|7}||jdkr|dnd|7}||jdkrdnd|7}||jdkrdnd|7}||jdkrdnd |7}||j dkrdnd |7}d |d dd }|S)Nz/, local_private_key_file={0.private_key_file!r}z/, local_certificate_file={0.certificate_file!r}z, validate={0.validate!r}z, version={0.version!r}z#, ca_certs_file={0.ca_certs_file!r}z#, ca_certs_path={0.ca_certs_path!r}z#, ca_certs_data={0.ca_certs_data!r}z, ciphers={0.ciphers!r}z, sni={0.sni!r}zTls(r)) r"formatr#rr!rrrr%r&)r'rr(r(r)__repr__sz Tls.__repr__Fc Cs$tr|jdkr*ttj|j|j|jd}nLt |j}|jsH|jsH|jr^| |j|j|jn|j tj krv| tj|jr|j|j|j|jdd|_|j |_|jry||jWntjk rYnX|jr|j|jd||jd}n|j|jd|d}ttrttd|n|jdkr6ttdr6tj|_|jry.tj|j|j|jd|j |j|j||jd }Wn4tjk rYntk rd|_YnX|jstj|j|j|jd|j |j|j|d }ttrttd ||r|j tj ks|j tj!krt||j"j#|j$||_dS) z3 Adds TLS to the connection socket N)purposecafilecapathcadata)keyfilepasswordF) server_sidedo_handshake_on_connectserver_hostname)r:r;z1socket wrapped with SSL using SSLContext for <%s>PROTOCOL_SSLv23)r8certfiler: cert_reqs ssl_versionca_certsr;r%)r8r>r:r?r@rAr;z socket wrapped with SSL for <%s>)%rr!rr SERVER_AUTHrrrr SSLContextload_verify_locationsrrload_default_certsr#load_cert_chainr"r check_hostname verify_moder% set_ciphersSSLErrorr& wrap_socketsocketr rr hasattrr= TypeErrorrrserverhostr$)r' connection do_handshake ssl_contextZwrapped_socketr(r(r)rKsr         "zTls.wrap_socketcCs&|jjr dS|jr|jr&|jjs&|jr>ttr:t td|dSd|_ tt rXt t d||jj sfd|_ |d}|jj s||}|dkrtt rt t d|dStt rt t d|dSnf|jd d krd t|jd |_ttrt td |j|t|jtt rt t d|||SdS) NFz;can't start tls because operations are in progress for <%s>Tzstarting tls for <%s>z1.3.6.1.4.1.1466.20037)NNztls started for <%s>ztls not started for <%s> description)successzstartTLS failed - z %s for <%s>)rOr tls_startedZ_executing_deferredZstrategyZ _outstandingZsasl_in_progressr r r starting_tlsr ZsyncZ_awaiting_for_async_start_tlsextendedZ get_responseresultr+ last_errorr _start_tls)r'rQrYresponser(r(r) start_tlss:         z Tls.start_tlsc Csd}y|j|ddWn4tk rJ}zdt||_|}Wdd}~XYnXd|_|r~ttrnttd|j|tt ||j|j r|j j d7_ d|_ dS)NT)rRzwrap socket error: Fz*error <%s> wrapping socket for TLS in <%s>r)rK Exceptionr+rZrWr r r rrusageZ_usageZwrapped_socketsrV)r'rQexcer(r(r)r[szTls._start_tls)F) __name__ __module__ __qualname____doc__rrr*r.r3rKr]r[r(r(r(r)r;s" : H%rc Cs|}ttrttd|||r>|gt|tr4|n|g}n|g}x|D]}|sVqJn|dkrtttrpttddSy"t||ttrttd|dStk r}zttrttt|Wdd}~XYqJXqJWtt rtt dt d|t|fdS)Nzcertificate found for %s: %s*zcertificate matches * wildcardz"certificate matches host name <%s>z"hostname doesn't match certificatez,certificate %s doesn't match any name in %s ) getpeercertr rr isinstancer rrr+r r)sockZ server_nameZadditional_namesZserver_certificateZ host_namesZ host_namerar(r(r)rG*s0    $ rG)re exceptionsrrrrrr/r Z utils.logr r r r rr ImportErrorrrZutils.tls_backportrrrosrobjectrrGr(r(r(r)s6       p