File: //proc/2863166/root/usr/lib/python3.9/site-packages/S3/__pycache__/ConnMan.cpython-39.opt-1.pyc
a
�9pe�3 � @ s� d dl mZ d dlZejdkr,ddlmZ n ddlmZ d dlZd dlm Z d dl
m Z d dl m Z zd d l
m
Z
W n ey� d d lm
Z
Y n0 dd
lmZ dd lmZmZ dd lmZ d
gZG dd� de�ZG dd
� d
e�ZdS )� )�absolute_importN)� r � )�httplib)�debug)� Semaphore)�time)�urlparse)�Config)�ParameterError�S3SSLCertificateError)�getBucketFromHostname�ConnManc @ sj e Zd ZdZdZedd� �Zedd� �Zedd� �Zed d
� �Z d d � Z
d
d� Z eddd��Z dd� Z
dS )�http_connectionNFc C sJ t � }d }ztj| d�}W n ty, Y n0 |rF|jsFd|_td� |S )N)�cafileFz+Disabling SSL certificate hostname checking)r
�sslZcreate_default_context�AttributeError�check_ssl_hostname�check_hostnamer )r �cfg�context� r �./usr/lib/python3.9/site-packages/S3/ConnMan.py�_ssl_verified_context, s
z%http_connection._ssl_verified_contextc C s8 t d� d }ztj| tjd�}W n ty2 Y n0 |S )Nz"Disabling SSL certificate checking)r � cert_reqs)r r �_create_unverified_context� CERT_NONEr )r r r r r �_ssl_unverified_context: s �
z'http_connection._ssl_unverified_contextc C sB d }z&|rt jnt j}t j||| |d�}W n ty< Y n0 |S )N)r �keyfile�certfiler )r Z
CERT_REQUIREDr r r )r r Zcheck_server_certr r r r r r �_ssl_client_auth_contextE s �
z(http_connection._ssl_client_auth_contextc C s� t jr t jS t� } | j}|dkr$d }| jp,d }| jp6d }td|� td|� td|� |d urrt �||| j |�}n | j r�t �
|�}n
t � |�}|t _dt _|S )N� zUsing ca_certs_file %sz Using ssl_client_cert_file %sz Using ssl_client_key_file %sT) r � context_setr r
Z
ca_certs_fileZssl_client_cert_fileZssl_client_key_filer r �check_ssl_certificater r )r r r r r r r r � _ssl_contextR s&
z http_connection._ssl_contextc C s� t d� |�dd�}|�� }tdtj �j}|D ]�\}}|dkr0|�� }|�d�rf|�d�rf|�d�sz|�d�r�|�d�r� d S ||d
tj �� d � kr0|�|d tj �� d � �r0 d S q0d
S )a�
Wildcard matching for *.s3.amazonaws.com and similar per region.
Per http://docs.aws.amazon.com/AmazonS3/latest/dev/BucketRestrictions.html:
"We recommend that all bucket names comply with DNS naming conventions."
Per http://docs.aws.amazon.com/AmazonS3/latest/dev/VirtualHosting.html:
"When using virtual hosted-style buckets with SSL, the SSL
wild card certificate only matches buckets that do not contain
periods. To work around this, use HTTP or write your own
certificate verification logic."
Therefore, we need a custom validation routine that allows
mybucket.example.com.s3.amazonaws.com to be considered a valid
hostname for the *.s3.amazonaws.com wildcard cert, and for the
region-specific *.s3-[region].amazonaws.com wildcard cert.
We also forgive non-S3 wildcard certificates should the
hostname match, to allow compatibility with other S3
API-compatible storage providers.
z6checking SSL subjectAltName as forgiving wildcard certZsubjectAltNamer �https://ZDNSz*.s3z.amazonaws.comz.amazonaws.com.cnT�*)Zbucket�locationr! F)
r �get�lowerr r
Z host_bucket�hostname�
startswith�endswithZbucket_location)�self�certr* ZsanZcleaned_host_bucket_config�key�valuer r r �forgive_wildcard_certm s4
�������z%http_connection.forgive_wildcard_certc
C s~ | j j�� }zt�|| j� W nZ ty2 Y d S tyD Y d S tyx } z | � || j�sd|�W Y d }~n
d }~0 0 d S �N)
�cZsockZ getpeercertr �match_hostnamer* r �
ValueErrorZS3CertificateErrorr1 )r- r. �er r r r4 � s z http_connection.match_hostnamec C s� zft �� }t| �\}}|r:d|v r:td� d}|rJd|_n|rF|j}nd}tj| |||d�}td� W nV ty� z tj| ||d�}td� W n& ty� t�| |�}td � Y n0 Y n0 |S )
N�.zHBucket name contains "." character, disabling initial SSL hostname checkFT)r r z=httplib.HTTPSConnection() has both context and check_hostname)r z*httplib.HTTPSConnection() has only contextz@httplib.HTTPSConnection() has neither context nor check_hostname)r r$ r
r r r ZHTTPSConnection� TypeError)r* �portr Z bucket_name�successr �connr r r �_https_connection� s* z!http_connection._https_connectionc C s8 || _ || _d| _td| �}|j| _|j| _|jrZ|jdkrZ|j�d�| _td| j� nd | _|j s�|r�t
� | j| j�| _ td| j| j� n"t
�| j| j�| _ td| j| j� nz|�r
t
� |j |j�| _ td|j |j� | jr�| jp�d}| j �| j|� td | j|� n"t
�|j |j�| _ td
|j |j� t� | _d S ) Nr r% �/zendpoint path set to %sz#non-proxied HTTPSConnection(%s, %s)z"non-proxied HTTPConnection(%s, %s)z proxied HTTPSConnection(%s, %s)i� ztunnel to %s, %sz proxied HTTPConnection(%s, %s))r �id�counterr r* r9 �path�rstripr �
proxy_hostr r< r3 r ZHTTPConnection�
proxy_portZ
set_tunnelr �last_used_time)r- r> r* r r Zparsed_hostnamer9 r r r �__init__� s2 zhttp_connection.__init__)N)�__name__�
__module__� __qualname__r r" � staticmethodr r r r$ r1 r4 r< rE r r r r r ( s
( $r c @ sL e Zd ZejZejZe� Zi ZdZ e
d dd��Z e
dd� �Z e
dd� �Z
dS )
r i Nc C sH t � }|d u r|j}d }|jdkrJ|r8tjdk r8td��d|j|jf }nd|rTdpVd| f }tj� � |tj
vr|g tj
|< tj
| r�tj
| � � }t � }||j
|j k r�||j
kr�td|j|jf � q�td� t�|� d }q|tj�� |�s6td | � t|| ||�}|j�� |j�r6|j�r6|j�r6|�� | jd
7 _|S ) Nr! i z6use_https=True can't be used with proxy on Python <2.7z
proxy://%s:%sz http%s://%s�sz)ConnMan.get(): re-using connection: %s#%dz)ConnMan.get(): closing expired connectionz*ConnMan.get(): creating new connection: %sr )r
Z use_httpsrB �sys�
hexversionr rC r �
conn_pool_sem�acquire� conn_pool�popr rD Zconnection_max_ager r> r? �close�releaser r3 Zconnectr r# r r4 )r* r r r; Zconn_idZcur_timer r r r( sD
�
�
z ConnMan.getc C s� | j �d�r"t�| � td� d S | jtjkrDt�| � td� d S t� }|jsft�| � td� d S t � | _
tj � � tj
| j �| � tj �� td| j | jf � d S )Nzproxy://zFConnMan.put(): closing proxy connection (keep-alive not yet supported)z+ConnMan.put(): closing over-used connectionz?ConnMan.put(): closing connection (connection pooling disabled)z2ConnMan.put(): connection put back to pool (%s#%d))r> r+ r rQ r r? �conn_max_counterr
Zconnection_poolingr rD rM rN rO �appendrR )r; r r r r �put& s(
�z ConnMan.putc C s | r| j �� d S r2 )r3 rQ )r; r r r rQ B s z
ConnMan.close)N)rF rG rH r Z _CS_REQ_SENTZCONTINUEr rM rO rS rI r( rU rQ r r r r r � s %
)Z
__future__r rK � version_infoZCustom_httplib3xr ZCustom_httplib27r Zloggingr � threadingr r r � ImportError� urllib.parser
Z
Exceptionsr r ZUtilsr
�__all__�objectr r r r r r �<module>
s&
R