3
�Pf�2 � @ s� d dl mZ d dlZd dlZd dlZd dlZd dlZd dlmZm Z
d dl Z ddl m
Z
ddlmZ ddlmZ yd dlZejZW n, eefk
r� dZG dd � d e�ZY nX yeZW n$ ek
r� G d
d � d e�ZY nX dd lm Z m Z m Z m Z dd
l m!Z!m"Z" ddl#m$Z$m%Z%m&Z&m'Z'm(Z( ddl)m*Z* ddl+m,Z, ej-e.�Z/ddd�Z0ej1ddd�Z2G dd� de3�Z4G dd� dee3�ZG dd� de�Z5G dd � d e5�Z6d d � Z7e�r�e5Z8e6Z5ne4Z5dS ) � )�absolute_importN)�error�timeout� )�six)�HTTPConnection)�
HTTPExceptionc @ s e Zd ZdS )� BaseSSLErrorN)�__name__�
__module__� __qualname__� r
r
� /usr/lib/python3.6/connection.pyr s r c @ s e Zd ZdS )�ConnectionErrorN)r
r r r
r
r
r r s r )�NewConnectionError�ConnectTimeoutError�SubjectAltNameWarning�SystemTimeWarning)�match_hostname�CertificateError)�resolve_cert_reqs�resolve_ssl_version�assert_fingerprint�create_urllib3_context�ssl_wrap_socket)�
connection)�HTTPHeaderDict�P i� )�http�httpsi� c @ s e Zd ZdZdS )�DummyConnectionz-Used to detect a failed ConnectionCls import.N)r
r r �__doc__r
r
r
r r A s r c @ sV e Zd ZdZed ZejejdfgZ dZ
dd� Z dd� Z d d
� Z
d d � Zddd�Zd
S )r a{
Based on httplib.HTTPConnection but provides an extra constructor
backwards-compatibility layer between older and newer Pythons.
Additional keyword parameters are used to configure attributes of the connection.
Accepted parameters include:
- ``strict``: See the documentation on :class:`urllib3.connectionpool.HTTPConnectionPool`
- ``source_address``: Set the source address for the current connection.
.. note:: This is ignored for Python 2.6. It is only applied for 2.7 and 3.x
- ``socket_options``: Set specific options on the underlying socket. If not specified, then
defaults are loaded from ``HTTPConnection.default_socket_options`` which includes disabling
Nagle's algorithm (sets TCP_NODELAY to 1) unless the connection is behind a proxy.
For example, if you wish to enable TCP Keep Alive in addition to the defaults,
you might pass::
HTTPConnection.default_socket_options + [
(socket.SOL_SOCKET, socket.SO_KEEPALIVE, 1),
]
Or you may want to disable the defaults by passing an empty list (e.g., ``[]``).
r r Fc O sZ t jr|jdd � |jd�| _tjdk r4|jdd � |jd| j�| _t j
| f|�|� d S )N�strict�source_address� � �socket_options)r$ r% ) r ZPY3�pop�getr# �sys� version_info�default_socket_optionsr& �_HTTPConnection�__init__)�self�args�kwr
r
r r- j s
zHTTPConnection.__init__c C s� i }| j r| j |d< | jr$| j|d< y tj| j| jf| jf|�}W nf tk
rz } z t| d| j| jf ��W Y dd}~X n0 t k
r� } zt
| d| ��W Y dd}~X nX |S )zp Establish a socket connection and set nodelay settings on it.
:return: New socket connection.
r# r& z0Connection to %s timed out. (connect timeout=%s)Nz(Failed to establish a new connection: %s) r# r& r Zcreate_connection�host�portr �
SocketTimeoutr � SocketErrorr )r. Zextra_kw�conn�er
r
r � _new_conn s
zHTTPConnection._new_connc C s$ || _ t| dd �r | j� d| _d S )N� _tunnel_hostr )�sock�getattr�_tunnel� auto_open)r. r5 r
r
r �
_prepare_conn� s z HTTPConnection._prepare_connc C s | j � }| j|� d S )N)r7 r= )r. r5 r
r
r �connect� s zHTTPConnection.connectNc C s t |dk r|ni �}d|k}d|k}| j||||d� x |j� D ]\}}| j||� q@W d|krl| jdd� | j� |dk �rtjtjf } t|| �r�|f}xj|D ]b}
|
s�q�t|
tj�s�|
j d�}
t
t |
��d d� } | j | j d
�� | j d � | j |
� | j d � q�W | j d � dS )
z�
Alternative to the common request method, which sends the
body with chunked encoding and not as one block
Nzaccept-encodingr1 )�skip_accept_encoding� skip_hostztransfer-encodingzTransfer-EncodingZchunked�utf8r$ zutf-8s
s 0
)
r Z
putrequest�itemsZ putheaderZ
endheadersr Z string_typesZ binary_type�
isinstance�encode�hex�len�send) r. �methodZurlZbodyZheadersr? r@ �header�valueZstringish_types�chunkZlen_strr
r
r �request_chunked� s8
z HTTPConnection.request_chunked)NN)r
r r r! �port_by_scheme� default_port�socketZ IPPROTO_TCPZ TCP_NODELAYr+ � is_verifiedr- r7 r= r> rL r
r
r
r r F s r c @ s8 e Zd Zed ZdZddddejdfdd�Zdd� Z dS )�HTTPSConnectionr Nc K s8 t j| ||f||d�|�� || _|| _|| _d| _d S )N)r" r r )r r- �key_file� cert_file� ssl_contextZ _protocol) r. r1 r2 rR rS r" r rT r0 r
r
r r- � s zHTTPSConnection.__init__c C sN | j � }| j|� | jd kr2ttd �td �d�| _t|| j| j| jd�| _ d S )N)� ssl_version� cert_reqs)r9 �keyfile�certfilerT )
r7 r= rT r r r r rR rS r9 )r. r5 r
r
r r> � s
zHTTPSConnection.connect)
r
r r rM rN rU rO Z_GLOBAL_DEFAULT_TIMEOUTr- r> r
r
r
r rQ � s
rQ c @ s6 e Zd ZdZdZdZdZdZdZddd�Z dd� Z
dS )�VerifiedHTTPSConnectionz[
Based on httplib.HTTPSConnection but wraps the socket with
SSL certification.
Nc C sn |dkr(|s|rd}n| j dk r(| j j}|| _|| _|| _|| _|| _|oTtjj |�| _
|oftjj |�| _ dS )zX
This method should only be called once, before the connection is used.
N�
CERT_REQUIRED) rT � verify_moderR rS rV �assert_hostnamer �os�path�
expanduser�ca_certs� ca_cert_dir)r. rR rS rV r` r\ r ra r
r
r �set_cert s
z VerifiedHTTPSConnection.set_certc C sL | j � }| j}t| dd �r4|| _| j� d| _| j}tjj � t
k }|rXt j dj
t
�t� | jd kr|tt| j�t| j�d�| _| j}t| j�|_t|| j| j| j| j||d�| _| jr�t| jj dd�| j� nb|jt j ko�t|dd � o�| j d k �r.| jj � }|j d
f ��s t j d j
|�t!� t"|| j �p*|� |jt j#k�pD| jd k | _$d S ) Nr8 r zWSystem time is way off (before {0}). This will probably lead to SSL verification errors)rU rV )r9 rW rX r` ra Zserver_hostnamerT T)Z binary_formZcheck_hostnameFZsubjectAltNamez�Certificate for {0} has no `subjectAltName`, falling back to check for a `commonName` for now. This feature is being removed by major browsers and deprecated by RFC 2818. (See https://github.com/shazow/urllib3/issues/497 for details.))%r7 r1 r: r9 r; r< r8 �datetime�dateZtoday� RECENT_DATE�warnings�warn�formatr rT r r rU r rV r[ r rR rS r` ra r Z getpeercert�sslZ CERT_NONEr\ r( r �_match_hostnamerZ rP )r. r5 ZhostnameZ is_time_off�context�certr
r
r r> sT
z VerifiedHTTPSConnection.connect)NNNNNNN) r
r r r! rV r` ra rU r rb r> r
r
r
r rY � s
rY c C sL yt | |� W n8 tk
rF } z tjd|| � | |_� W Y d d }~X nX d S )Nz@Certificate did not match expected hostname: %s. Certificate: %s)r r �logr Z
_peer_cert)rl Zasserted_hostnamer6 r
r
r rj b s rj )9Z
__future__r rc Zloggingr] r) rO r r4 r r3 rf Zpackagesr Z packages.six.moves.http_clientr r, r ri ZSSLErrorr � ImportError�AttributeError�
BaseExceptionr � NameError� Exception�
exceptionsr r r r Zpackages.ssl_match_hostnamer r Z util.ssl_r r r r r �utilr � _collectionsr Z getLoggerr
rm rM rd re �objectr rQ rY rj ZUnverifiedHTTPSConnectionr
r
r
r � sN
&l