3
\�e �
@ s� d dl Z d dlZy d dlZW n ek
r4 dZY nX ddlmZ ddlmZ ddlmZ ddlmZ ddl m
Z
dd � Z d
d � Z d Z
d
ZdZdZG dd� de�ZG dd� dejej�ZG dd� dej�ZdS )� N� )� base_events)�compat)� protocols)�
transports)�loggerc C sj | r t d��ttd�r*tj� }|sfd|_n|j dkr�tj
|_ |j tj
tj tj
fkr�� |j tj
k| _W Y dd}~X nX | jjr�|j| jj� � |t|�ks�| jrDP qDW ||fS )a Feed plaintext data into the pipe.
Return an (ssldata, offset) tuple. The ssldata element is a list of
buffers containing record level data that needs to be sent to the
remote SSL instance. The offset is the number of plaintext bytes that
were processed, which may be less than the length of data.
NOTE: In case of short writes, this call MUST be retried with the SAME
buffer passed into the *data* argument (i.e. the id() must be the
same). This is an OpenSSL requirement. A further particularity is that
a short write will always have offset == 0, because the _ssl module
does not enable partial writes. And even though the offset is zero,
there will still be encrypted data in ssldata.
NFZPROTOCOL_IS_SHUTDOWN)r r �len�
memoryviewr r r7 r r; �reasonr> r6 r? r@ r rA r: r8 )r# rB �offsetr0 ZviewrD r r r � feed_appdata� s2
z_SSLPipe.feed_appdatai )N)N)N)F)r )�__name__�
__module__� __qualname__�__doc__r9 r% �propertyr$ r& r' r) r2 r4 r5 r. rI r r r r r 0 s
Jr c @ s� e Zd Zdd� Zd dd�Zdd� Zdd � Zd
d � Zd d
� Ze j
rHdd� Z dd� Z dd� Z
d dd�Zdd� Zdd� Zdd� Zd d � ZdS ) �_SSLProtocolTransportc C s || _ || _d| _d S )NF)�_loop�
_ssl_protocol�_closed)r# �loopZ ssl_protocolr r r r% ) s z _SSLProtocolTransport.__init__Nc C s | j j||�S )z#Get optional transport information.)rQ �_get_extra_info)r# �name�defaultr r r �get_extra_info/ s z$_SSLProtocolTransport.get_extra_infoc C s || j _d S )N)rQ �
_app_protocol)r# �protocolr r r � set_protocol3 s z"_SSLProtocolTransport.set_protocolc C s | j jS )N)rQ rX )r# r r r � get_protocol6 s z"_SSLProtocolTransport.get_protocolc C s | j S )N)rR )r# r r r �
is_closing9 s z _SSLProtocolTransport.is_closingc C s d| _ | jj� dS )a
Close the transport.
Buffered data will be flushed asynchronously. No more data
will be received. After all buffered data is flushed, the
protocol's connection_lost() method will (eventually) called
with None as its argument.
TN)rR rQ �_start_shutdown)r# r r r �close< s z_SSLProtocolTransport.closec C s& | j s"tjd| t| d� | j� d S )Nzunclosed transport %r)�source)rR �warnings�warn�ResourceWarningr^ )r# r r r �__del__K s z _SSLProtocolTransport.__del__c C s | j jj� dS )z�Pause the receiving end.
No data will be passed to the protocol's data_received()
method until resume_reading() is called.
N)rQ �
_transport�
pause_reading)r# r r r re Q s z#_SSLProtocolTransport.pause_readingc C s | j jj� dS )z�Resume the receiving end.
Data received will once again be passed to the protocol's
data_received() method.
N)rQ rd �resume_reading)r# r r r rf Y s z$_SSLProtocolTransport.resume_readingc C s | j jj||� dS )a� Set the high- and low-water limits for write flow control.
These two values control when to call the protocol's
pause_writing() and resume_writing() methods. If specified,
the low-water limit must be less than or equal to the
high-water limit. Neither value can be negative.
The defaults are implementation-specific. If only the
high-water limit is given, the low-water limit defaults to an
implementation-specific value less than or equal to the
high-water limit. Setting high to zero forces low to zero as
well, and causes pause_writing() to be called whenever the
buffer becomes non-empty. Setting low to zero causes
resume_writing() to be called only once the buffer is empty.
Use of zero for either limit is generally sub-optimal as it
reduces opportunities for doing I/O and computation
concurrently.
N)rQ rd �set_write_buffer_limits)r# ZhighZlowr r r rg a s z-_SSLProtocolTransport.set_write_buffer_limitsc C s | j jj� S )z,Return the current size of the write buffer.)rQ rd �get_write_buffer_size)r# r r r rh v s z+_SSLProtocolTransport.get_write_buffer_sizec C s< t |tttf�s$tdjt|�j���|s,dS | jj |� dS )z�Write some data bytes to the transport.
This does not block; it buffers the data and arranges for it
to be sent out asynchronously.
z/data: expecting a bytes-like instance, got {!r}N)
�
isinstance�bytes� bytearrayrF � TypeError�format�typerJ rQ �_write_appdata)r# rB r r r r7 z s z_SSLProtocolTransport.writec C s dS )zAReturn True if this transport supports write_eof(), False if not.Fr )r# r r r �
can_write_eof� s z#_SSLProtocolTransport.can_write_eofc C s | j j� dS )z�Close the transport immediately.
Buffered data will be lost. No more data will be received.
The protocol's connection_lost() method will (eventually) be
called with None as its argument.
N)rQ �_abort)r# r r r �abort� s z_SSLProtocolTransport.abort)N)NN)rJ rK rL r% rW rZ r[ r\ r^ r ZPY34rc re rf rg rh r7 rp rr r r r r rO & s
rO c @ s� e Zd ZdZd(dd�Zd)dd�Zd d
� Zd d � Zd
d� Zdd� Z dd� Z
dd� Z d*dd�Z dd� Z
dd� Zdd � Zd d � Zd d � Zd+d"d#�Zd$d%� Zd&d'� ZdS ),� SSLProtocolz�SSL protocol.
Implementation of SSL on top of a socket using incoming and outgoing
buffers which are ssl.MemoryBIO objects.
FNTc C s� t d krtd��|s t||�}|| _|r6| r6|| _nd | _|| _t|d�| _tj � | _
d| _ || _ || _
|| _t| j
| �| _d | _d| _d| _d| _d | _|| _d S )Nz stdlib ssl module not available)r r F)r r, r r r � _sslcontext�dict�_extra� collections�deque�_write_backlog�_write_buffer_size�_waiterrP rX rO �_app_transport�_sslpipe�_session_established�
_in_handshake� _in_shutdownrd �_call_connection_made)r# rS Z app_protocolr Zwaiterr r Zcall_connection_mader r r r% � s,
zSSLProtocol.__init__c C sD | j d krd S | j j� s:|d k r.| j j|� n | j jd � d | _ d S )N)r{ Z cancelledZ
set_exceptionZ
set_result)r# rD r r r �_wakeup_waiter� s
zSSLProtocol._wakeup_waiterc C s& || _ t| j| j| j�| _| j� dS )zXCalled when the low-level connection is made.
Start the SSL handshake.
N)rd r rt r r r} �_start_handshake)r# � transportr r r �connection_made� s
zSSLProtocol.connection_madec C s8 | j r d| _ | jj| jj|� d| _d| _| j|� dS )z�Called when the low-level connection is lost or closed.
The argument is an exception object or None (the latter
meaning a regular EOF is received or the connection was
aborted or closed).
FN)r~ rP � call_soonrX �connection_lostrd r| r� )r# rD r r r r� � s zSSLProtocol.connection_lostc C s | j j� dS )z\Called when the low-level transport's buffer goes over
the high-water mark.
N)rX �
pause_writing)r# r r r r� � s zSSLProtocol.pause_writingc C s | j j� dS )z^Called when the low-level transport's buffer drains below
the low-water mark.
N)rX �resume_writing)r# r r r r� � s zSSLProtocol.resume_writingc C s� | j dkrdS y| j j|�\}}W nH tjk
rj } z*| jj� rTtjd| |j|j � | j
� dS d}~X nX x|D ]}| j j |� qrW x(|D ] }|r�| j
j|� q�| j� P q�W dS )zXCalled when some SSL data is received.
The argument is a bytes object.
Nz %r: SSL error %s (reason %s))r} r. r r; rP � get_debugr �warningr6 rG rq rd r7 rX �
data_receivedr] )r# rB r0 r1 �erC r r r r� � s"
zSSLProtocol.data_receivedc
C sT zB| j j� rtjd| � | jt� | js@| jj� }|r@tj d� W d| j
j � X dS )a Called when the other end of the low-level stream
is half-closed.
If this returns a false value (including None), the transport
will close itself. If it returns a true value, closing the
transport is up to the protocol.
z%r received EOFz?returning true from eof_received() has no effect when using sslN) rP r� r �debugr� �ConnectionResetErrorr rX � eof_receivedr� rd r^ )r# Z keep_openr r r r� s
zSSLProtocol.eof_receivedc C s4 || j kr| j | S | jd k r,| jj||�S |S d S )N)rv rd rW )r# rU rV r r r rT ! s
zSSLProtocol._get_extra_infoc C s. | j r
d S | jr| j� nd| _ | jd� d S )NTr* )r� r rq ro )r# r r r r] ) s
zSSLProtocol._start_shutdownc C s. | j j|df� | jt|�7 _| j� d S )Nr )ry r: rz rE �_process_write_backlog)r# rB r r r ro 2 s zSSLProtocol._write_appdatac C sH | j j� r$tjd| � | j j� | _nd | _d| _| jjd� | j � d S )Nz%r starts SSL handshakeTr* r )r* r )
rP r� r r� �time�_handshake_start_timer ry r: r� )r# r r r r� 7 s
z SSLProtocol._start_handshakec C sT d| _ | jj}yF|d k r |�|j� }t| jd�sR| jrR| jjtj krRtj
|| j� W n~ t k
r� } zb| j j
� r�t|tj�r�tjd| dd� ntjd| dd� | jj� t|t�r�| j|� d S � W Y d d }~X nX | j j
� �r| j j� | j }tjd| |d � | jj||j� |j � |d � | j �r4| j j | j � | j� d| _!| j j"| j#� d S )
NFr z5%r: SSL handshake failed on verifying the certificateT)�exc_infoz%r: SSL handshake failedz %r: SSL handshake took %.1f msg @�@)�peercert�cipher� compressionr& )$r r} r& Z getpeercertr
rt r r
r Z CERT_NONEZmatch_hostname�
BaseExceptionrP r� ri r< r r� rd r^ � Exceptionr� r� r� r� rv �updater� r� r� rX r� r| r~ r� r� )r# Z
handshake_excZsslobjr� rD Zdtr r r �_on_handshake_completeC sD
z"SSLProtocol._on_handshake_completec C s> | j d ks| jd krd S y�x�tt| j��D ]�}| jd \}}|rT| jj||�\}}n*|rl| jj| j�}d}n| jj| j �}d}x|D ]}| j j
|� q�W |t|�k r�||f| jd< | j j r�| j j � P | jd= | j
t|�8 _
q*W W nR tk
�r8 } z4| j�r| j|� n | j|d� t|t��s(� W Y d d }~X nX d S )Nr r z Fatal error on SSL transport)rd r} �rangerE ry rI r2 r� r4 � _finalizer7 Z_pausedrf rz r� r � _fatal_errorri r� )r# �irB rH r0 rC rD r r r r� w s8
z"SSLProtocol._process_write_backlog�Fatal error on transportc C sX t |tj�r*| jj� rBtjd| |dd� n| jj||| j| d�� | jrT| jj |� d S )Nz%r: %sT)r� )�messageZ exceptionr� rY )
ri r Z_FATAL_ERROR_IGNORErP r� r r� Zcall_exception_handlerrd Z _force_close)r# rD r� r r r r� � s
zSSLProtocol._fatal_errorc C s d | _ | jd k r| jj� d S )N)r} rd r^ )r# r r r r� � s
zSSLProtocol._finalizec
C s( z| j d k r| j j� W d | j� X d S )N)rd rr r� )r# r r r rq � s
zSSLProtocol._abort)FNT)N)N)r� )rJ rK rL rM r% r� r� r� r� r� r� r� rT r] ro r� r� r� r� r� rq r r r r rs � s&
"
4,
rs )rw r` r � ImportError� r r r r �logr r r r r- r( r3 �objectr Z_FlowControlMixinZ TransportrO ZProtocolrs r r r r � s*
wn