관리-도구
편집 파일: sslutil.pyc
� Hq�Qc @ s� d d l Z d d l m Z d d l m Z y+ d d l Z e j Z e j d d � Z Wn> e k r� d Z d d l Z d d l Z e d d � Z n Xd � Z d � Z d e f d � � YZ d S( i����N( t util( t _c C sI t j | | | d | d | �} | j � sE t j t d � � � n | S( Nt cert_reqst ca_certss ssl connection failed( t sslt wrap_sockett cipherR t AbortR ( t sockt keyfilet certfileR R t sslsocket( ( s7 /usr/lib64/python2.7/site-packages/mercurial/sslutil.pyt ssl_wrap_socket s i c C sm t j t d � s* t j t d � � � n | rH t j t d � � � n t j | | | � } t j | | � S( NR s Python SSL support not founds( certificate checking requires Python 2.6( R t safehasattrt socketR R R t httplibt FakeSocket( R t key_filet cert_fileR R R ( ( s7 /usr/lib64/python2.7/site-packages/mercurial/sslutil.pyR s c sJ | s t d � S| j � � � f d � } | j d g � } | r� g | D]$ \ } } | d k rJ | j � ^ qJ } x | D] } | | � r{ d Sq{ W| r� t d � d j | � Sn x� | j d g � D]t } | d \ } } | d k r� y | j � j d � } Wn t k r t d � SX| | � r.d St d � | Sq� Wt d � S( s� Verify that cert (in socket.getpeercert() format) matches hostname. CRLs is not handled. Returns error message if any problems are found and None on success. s no certificate receivedc s6 | � k p5 d � k o5 | d � j d d � d k S( Nt .s *.i ( t split( t certname( t dnsname( s7 /usr/lib64/python2.7/site-packages/mercurial/sslutil.pyt matchdnsname3 s t subjectAltNamet DNSs certificate is for %ss , t subjecti t commonNamet asciis IDN in certificate not supporteds4 no commonName or subjectAltName found in certificateN( R t lowert gett Nonet joint encodet UnicodeEncodeError( t certt hostnameR t sant keyt valuet certnamest namet sR ( ( R s7 /usr/lib64/python2.7/site-packages/mercurial/sslutil.pyt _verifycert* s. 1 c C s� | j d d � } | j d | � } | r� | r� t j | � } t j j | � sn t j t d � | � � n i | d 6t d 6Si S( Nt webt cacertst hostfingerprintss could not find web.cacerts: %sR R ( t configR t expandpatht ost patht existsR R t CERT_REQUIRED( t uit hostR- t hostfingerprint( ( s7 /usr/lib64/python2.7/site-packages/mercurial/sslutil.pyt sslkwargsU s t validatorc B s e Z d � Z e d � Z RS( c C s | | _ | | _ d S( N( R5 R6 ( t selfR5 R6 ( ( s7 /usr/lib64/python2.7/site-packages/mercurial/sslutil.pyt __init__b s c C s� | j } | j j d d � } | j j d | � } t | d t � s� | rg t j t d � | � � n | r� t j t d � | � � n | j j d d t � r� | j j t d � | � n d S| j � s� t j t d � | � � n y | j t � } | j � } Wn* t k r5t j t d � | � � n X| sXt j t d � | � � n t j | � j � } d j g t d t | � d � D] } | | | d !^ q�� } | r!| j � | j d d � j � k rt j t d � | | f d t d � �� n | j j d | | f � n� | r�t | | � } | rnt j t d � | | f d t d � | �� n | j j d | � nT | r�t j t d � | | f d t d � �� n | j j t d � | | f � d S( NR, R- R. t getpeercerts: host fingerprint for %s can't be verified (Python too old)s5 certificate for %s can't be verified (Python too old)R5 t reportoldssls? warning: certificate for %s can't be verified (Python too old) s %s ssl connection errors- %s certificate error: no certificate receivedt :i i t s0 certificate for %s has unexpected fingerprint %st hints# check hostfingerprint configurations& %s certificate matched fingerprint %s s %s certificate error: %ssD configure hostfingerprint %s or use --insecure to connect insecurelys% %s certificate successfully verified s/ %s certificate with fingerprint %s not verifieds4 check hostfingerprints or web.cacerts config settingsp warning: %s certificate with fingerprint %s not verified (check hostfingerprints or web.cacerts config setting) ( R6 R5 R/ t getattrt FalseR R R t configboolt Truet warnR R< t AttributeErrort sha1t hexdigestR t xranget lenR t replacet debugR+ ( R: R t strictR6 R- R7 t peercertt peercert2t peerfingerprintt xt nicefingerprintt msg( ( s7 /usr/lib64/python2.7/site-packages/mercurial/sslutil.pyt __call__f s` 6 ( t __name__t __module__R; RB RT ( ( ( s7 /usr/lib64/python2.7/site-packages/mercurial/sslutil.pyR9 a s ( R1 t mercurialR t mercurial.i18nR R R4 t CERT_NONER R t ImportErrorR R R+ R8 t objectR9 ( ( ( s7 /usr/lib64/python2.7/site-packages/mercurial/sslutil.pyt <module> s +