o Th1@sLddlmZddlZddlZddlZddlZddlmZmZddl m Z ddl m Z ddl mZmZddlmZmZmZmZdd lmZmZdd lmZmZmZmZejd kr`dd l mZmZndd l mZmZed Z!edZ"e#e#e$e$fdfZ%e#e%dfZ&GdddeZ'e ddGdddeZ(e ddGdddee(Z)dS)) annotationsN)CallableMapping) dataclass)wraps)AnyTypeVar)BrokenResourceError EndOfStreamaclose_forcefullyget_cancelled_exc_class)TypedAttributeSettyped_attribute) AnyByteStream ByteStreamListener TaskGroup) ) TypeVarTupleUnpackT_RetvalPosArgsT.c@seZdZUdZeZded<eZded<eZded<eZ ded <eZ d ed <eZ d ed <eZ ded<eZ ded<eZd ed<eZded<dS) TLSAttributez5Contains Transport Layer Security related attributes. str | None alpn_protocolbyteschannel_binding_tls_uniqueztuple[str, str, int]cipherz*None | dict[str, str | _PCTRTTT | _PCTRTT]peer_certificatez bytes | Nonepeer_certificate_binarybool server_sidez!list[tuple[str, str, int]] | Noneshared_ciphers ssl.SSLObject ssl_objectstandard_compatiblestr tls_versionN)__name__ __module__ __qualname____doc__rr__annotations__rrr r!r#r$r&r'r)r/r/Q/home/air/segue/gpt/backup/venv/lib/python3.10/site-packages/anyio/streams/tls.pyr s rF)eqc@seZdZUdZded<ded<ded<ded <ded <ed d d d d d2ddZd3ddZd4dd Zd5d"d#Z d6d7d(d)Z d8d+d,Z d5d-d.Z e d9d0d1Zd S): TLSStreama A stream wrapper that encrypts all sent data and decrypts received data. This class has no public initializer; use :meth:`wrap` instead. All extra attributes from :class:`~TLSAttribute` are supported. :var AnyByteStream transport_stream: the wrapped stream rtransport_streamr"r'r% _ssl_objectz ssl.MemoryBIO _read_bio _write_bioNT)r#hostname ssl_contextr'r# bool | Noner7rr8ssl.SSLContext | Nonereturnc s|dur| }|s'|rtjjntjj}t|}ttdr'|jtjM_t}t}|j ||||d} |||| ||d} | | j IdH| S)a Wrap an existing stream with Transport Layer Security. This performs a TLS handshake with the peer. :param transport_stream: a bytes-transporting stream to wrap :param server_side: ``True`` if this is the server side of the connection, ``False`` if this is the client side (if omitted, will be set to ``False`` if ``hostname`` has been provided, ``False`` otherwise). Used only to create a default context when an explicit context has not been provided. :param hostname: host name of the peer (if host name checking is desired) :param ssl_context: the SSLContext object to use (if not provided, a secure default will be created) :param standard_compatible: if ``False``, skip the closing handshake when closing the connection, and don't raise an exception if the peer does the same :raises ~ssl.SSLError: if the TLS handshake fails NOP_IGNORE_UNEXPECTED_EOF)r#server_hostname)r3r'r4r5r6) sslPurpose CLIENT_AUTH SERVER_AUTHcreate_default_contexthasattroptionsr< MemoryBIOwrap_bio_call_sslobject_method do_handshake) clsr3r#r7r8r'purposebio_inbio_outr&wrapperr/r/r0wrapNs.  zTLSStream.wrapfunc&Callable[[Unpack[PosArgsT]], T_Retval]argsUnpack[PosArgsT]rc s z||}WntjyYz|jjr!|j|jIdH|jIdH}Wn&ty8|j Ynt yP}z |j |j t |d}~ww|j |Ynltjyn|j|jIdHYnWtjy}z |j |j t |d}~wtjy}z|j |j t|tjsd|jvr|jrt |tdd}~ww|jjr|j|jIdH|Sq)NTUNEXPECTED_EOF_WHILE_READING)r>SSLWantReadErrorr6pendingr3sendreadreceiver r5 write_eofOSErrorr writeSSLWantWriteErrorSSLSyscallErrorSSLError isinstance SSLEOFErrorstrerrorr')selfrOrQresultdataexcr/r/r0rGsT           z TLSStream._call_sslobject_methodtuple[AnyByteStream, bytes]cs:||jjIdH|j|j|j|jfS)z Does the TLS closing handshake. :return: a tuple of (wrapped byte stream, bytes left in the read buffer) N)rGr4unwrapr5rYr6r3rWrbr/r/r0rgs   zTLSStream.unwrapNonecsP|jrz |IdHWntyt|jIdHw|jIdHdSN)r'rg BaseExceptionr r3acloserhr/r/r0rls zTLSStream.aclose max_bytesintrcs$||jj|IdH}|st|Srj)rGr4rWr )rbrnrdr/r/r0rXs zTLSStream.receiveitemcs||jj|IdHdSrj)rGr4r[)rbrpr/r/r0rVszTLSStream.sendcsb|tj}td|}|r-t|dt|dpd}}||fdkr-td|td)NzTLSv(\d+)(?:\.(\d+))?r r)rqrz;send_eof() requires at least TLSv1.3; current session uses z7send_eof() has not yet been implemented for TLS streams)extrarr)rematchrogroupNotImplementedError)rbr)rtmajorminorr/r/r0send_eofs  " zTLSStream.send_eofMapping[Any, Callable[[], Any]]csijjtjjjtjjjtjjjtj fddtj fddtj fddtj fddtj fddtjfddtjjji S)Nc jdS)NFr4 getpeercertr/rhr/r0s z,TLSStream.extra_attributes..cr{)NTr|r/rhr/r0r~scsjjSrj)r4r#r/rhr/r0r~scsjjr jSdSrj)r4r#r$r/rhr/r0r~s cjSrjr'r/rhr/r0r~crrj)r4r/rhr/r0r~r)r3extra_attributesrrr4selected_alpn_protocolrget_channel_bindingrr r!r#r$r'r&r)versionrhr/rhr0rs   zTLSStream.extra_attributes) r3rr#r9r7rr8r:r'r"r;r2)rOrPrQrRr;r)r;rfr;ri)rm)rnror;r)rprr;rir;rz)r*r+r,r-r. classmethodrNrGrgrlrXrVrypropertyrr/r/r/r0r2<s*   8 /  r2c@sneZdZUdZded<ded<dZded<d Zd ed <ed ddZ d!d"ddZ d#ddZ e d$ddZ dS)% TLSListenera A convenience listener that wraps another listener and auto-negotiates a TLS session on every accepted connection. If the TLS handshake times out or raises an exception, :meth:`handle_handshake_error` is called to do whatever post-mortem processing is deemed necessary. Supports only the :attr:`~TLSAttribute.standard_compatible` extra attribute. :param Listener listener: the listener to wrap :param ssl_context: the SSL context object :param standard_compatible: a flag passed through to :meth:`TLSStream.wrap` :param handshake_timeout: time limit for the TLS handshake (passed to :func:`~anyio.fail_after`) z Listener[Any]listenerzssl.SSLContextr8Tr"r'floathandshake_timeoutrerkstreamrr;ricsLt|IdHt|tsttjd|dt|tr#t|tr$dS)a Handle an exception raised during the TLS handshake. This method does 3 things: #. Forcefully closes the original stream #. Logs the exception (unless it was a cancellation exception) using the ``anyio.streams.tls`` logger #. Reraises the exception if it was a base exception or a cancellation exception :param exc: the exception :param stream: the original stream NzError during TLS handshake)exc_info)r r_r logging getLoggerr* exception Exception)rerr/r/r0handle_handshake_errors  z"TLSListener.handle_handshake_errorNhandlerCallable[[TLSStream], Any] task_groupTaskGroup | Nonecs2tdfdd }j||IdHdS)Nrrr;ric sddlm}z$|jtj|jjdIdH}Wdn1s%wYWntyG}z||IdHWYd}~dSd}~ww|IdHdS)Nr ) fail_after)r8r') rrr2rNr8r'rkr)rrwrapped_streamrerrbr/r0handler_wrapper9s    z*TLSListener.serve..handler_wrapper)rrr;ri)rrserve)rbrrrr/rr0r4szTLSListener.servecs|jIdHdSrj)rrlrhr/r/r0rlKszTLSListener.acloserzcstjfddiS)Ncrrjrr/rhr/r0r~Qrz.TLSListener.extra_attributes..)rr'rhr/rhr0rNszTLSListener.extra_attributes)rerkrrr;rirj)rrrrr;rirr) r*r+r,r-r.r'r staticmethodrrrlrrr/r/r/r0rs    " r)* __future__rrrsr>syscollections.abcrr dataclassesr functoolsrtypingrrrr r r r _core._typedattrrrabcrrrr version_inforrtyping_extensionsrrtupler(_PCTRTT_PCTRTTTrr2rr/r/r/r0s2     @