OwlCyberSecurity - MANAGER
Edit File: _common.pyc
� V��ac @` s� d Z d d l m Z m Z m Z d d l Z d d l Z d d l Z d d l m Z m Z d d l m Z m Z m Z m Z m Z m Z y d d l Z Wn e k r� d Z n Xe j d e � d e f d � � Y� Z d � Z d � Z d � Z d � Z e j d e d e � d e f d � � Y� Z e j d e � d e f d � � Y� Z e j d e d e � d e f d � � Y� Z e j d e d e � d e f d � � Y� Z! e j d e d e � d e f d � � Y� Z" e j d e � d e f d � � Y� Z# e j d e d e � d e f d � � Y� Z$ e j d e d e � d e f d � � Y� Z% d � Z& d � Z' e d! d" � Z( d S(# s Common verification code. i ( t absolute_importt divisiont print_functionNi ( t maketranst text_type( t CertificateErrort DNSMismatcht IPAddressMismatcht SRVMismatcht URIMismatcht VerificationErrort slotst ServiceMatchc B` s& e Z d Z e j � Z e j � Z RS( s< A match of a service id and a certificate pattern. ( t __name__t __module__t __doc__t attrt ibt service_idt cert_pattern( ( ( s[ /opt/cpanel-ccs/.develop/virtualenv/lib/python2.7/site-packages/service_identity/_common.pyR s c C` s� g } t | | � t | | � } g | D] } | j ^ q) } x6 | D]. } | | k rE | j | j d | � � qE qE WxH | D]@ } | | k r~ t | | j � r~ | j | j d | � � q~ q~ W| r� t d | � � n | S( s� Verify whether *cert_patterns* are valid for *obligatory_ids* and *optional_ids*. *obligatory_ids* must be both present and match. *optional_ids* must match if a pattern of the respective type is present. t mismatched_idt errors( t _find_matchesR t appendt error_on_mismatcht _contains_instance_oft pattern_classR ( t cert_patternst obligatory_idst optional_idsR t matchest matcht matched_idst i( ( s[ /opt/cpanel-ccs/.develop/virtualenv/lib/python2.7/site-packages/service_identity/_common.pyt verify_service_identity' s c C` sZ g } xM | D]E } x< | D]4 } | j | � r | j t d | d | � � q q Wq W| S( s Search for matching certificate patterns and service_ids. :param cert_ids: List certificate IDs like DNSPattern. :type cert_ids: `list` :param service_ids: List of service IDs like DNS_ID. :type service_ids: `list` :rtype: `list` of `ServiceMatch` R R ( t verifyR R ( R t service_idsR t sidt cid( ( s[ /opt/cpanel-ccs/.develop/virtualenv/lib/python2.7/site-packages/service_identity/_common.pyR I s 'c C` s( x! | D] } t | | � r t Sq Wt S( sB :type seq: iterable :type cl: type :rtype: bool ( t isinstancet Truet False( t seqt clt e( ( s[ /opt/cpanel-ccs/.develop/virtualenv/lib/python2.7/site-packages/service_identity/_common.pyR ] s c C` s� t | t � r: y | j d � } Wq: t k r6 t SXn y t | � t SWn t k r_ n Xy t j | j d d � � Wn t k r� t SXt S( s� Check whether *pattern* could be/match an IP address. :param pattern: A pattern for a host name. :type pattern: `bytes` or `unicode` :return: `True` if *pattern* could be an IP address, else `False`. :rtype: bool t asciit *t 1( R' t bytest decodet UnicodeErrorR) t intR( t ValueErrort ipaddresst ip_addresst replace( t pattern( ( s[ /opt/cpanel-ccs/.develop/virtualenv/lib/python2.7/site-packages/service_identity/_common.pyt _is_ip_addressj s t initt DNSPatternc B` s2 e Z d Z e j � Z e j d � Z d � Z RS( s7 A DNS pattern as extracted from certificates. s ^[a-z0-9\-_.]+$c C` s� t | t � s t d � � n | j � } | d k sN t | � sN d | k rf t d j | � � � n | j t � | _ d | j k r� t | j � n d S( s( :type pattern: `bytes` s' The DNS pattern must be a bytes string.t s s Invalid DNS pattern {0!r}.R. N( R' R0 t TypeErrort stripR9 R t formatt translatet _TRANS_TO_LOWERR8 t _validate_pattern( t selfR8 ( ( s[ /opt/cpanel-ccs/.develop/virtualenv/lib/python2.7/site-packages/service_identity/_common.pyt __init__� s $( R R R R R R8 t ret compilet _RE_LEGAL_CHARSRD ( ( ( s[ /opt/cpanel-ccs/.develop/virtualenv/lib/python2.7/site-packages/service_identity/_common.pyR; � s t IPAddressPatternc B` s) e Z d Z e j � Z e d � � Z RS( s? An IP address pattern as extracted from certificates. c C` sG y | d t j | � � SWn& t k rB t d j | � � � n Xd S( NR8 s Invalid IP address pattern {!r}.( R5 R6 R4 R R? ( t clst bs( ( s[ /opt/cpanel-ccs/.develop/virtualenv/lib/python2.7/site-packages/service_identity/_common.pyt from_bytes� s ( R R R R R R8 t classmethodRK ( ( ( s[ /opt/cpanel-ccs/.develop/virtualenv/lib/python2.7/site-packages/service_identity/_common.pyRH � s t URIPatternc B` s/ e Z d Z e j � Z e j � Z d � Z RS( s8 An URI pattern as extracted from certificates. c C` s� t | t � s t d � � n | j � j t � } d | k sW d | k sW t | � ro t d j | � � � n | j d � \ | _ } t | � | _ d S( s( :type pattern: `bytes` s' The URI pattern must be a bytes string.t :R. s Invalid URI pattern {0!r}.N( R' R0 R= R> R@ RA R9 R R? t splitt protocol_patternR; t dns_pattern( RC R8 t hostname( ( s[ /opt/cpanel-ccs/.develop/virtualenv/lib/python2.7/site-packages/service_identity/_common.pyRD � s $( R R R R R RP RQ RD ( ( ( s[ /opt/cpanel-ccs/.develop/virtualenv/lib/python2.7/site-packages/service_identity/_common.pyRM � s t SRVPatternc B` s/ e Z d Z e j � Z e j � Z d � Z RS( s8 An SRV pattern as extracted from certificates. c C` s� t | t � s t d � � n | j � j t � } | d d k sg d | k sg d | k sg t | � r t d j | � � � n | j d d � \ } } | d | _ t | � | _ d S( s( :type pattern: `bytes` s' The SRV pattern must be a bytes string.i t _t .R. s Invalid SRV pattern {0!r}.i NRT ( R' R0 R= R> R@ RA R9 R R? RO t name_patternR; RQ ( RC R8 t nameRR ( ( s[ /opt/cpanel-ccs/.develop/virtualenv/lib/python2.7/site-packages/service_identity/_common.pyRD � s ( R R R R R RV RQ RD ( ( ( s[ /opt/cpanel-ccs/.develop/virtualenv/lib/python2.7/site-packages/service_identity/_common.pyRS � s t DNS_IDc B` sG e Z d Z e j � Z e j d � Z e Z e Z d � Z d � Z RS( s) A DNS service ID, aka hostname. s ^[a-z0-9\-_.]+$c C` s� t | t � s t d � � n | j � } | d k sB t | � rQ t d � � n t d � | D� � r� t r t j | � } q� t d � � n | j d � } | j t � | _ | j j | j � d k r� t d � � n d S( s+ :type hostname: `unicode` s DNS-ID must be a unicode string.u s Invalid DNS-ID.c s` s! | ] } t | � d k Vq d S( i N( t ord( t .0t c( ( s[ /opt/cpanel-ccs/.develop/virtualenv/lib/python2.7/site-packages/service_identity/_common.pys <genexpr> s s+ idna library is required for non-ASCII IDs.R- N( R' R R= R> R9 R4 t anyt idnat encodet ImportErrorR@ RA RR RG R t None( RC RR t ascii_id( ( s[ /opt/cpanel-ccs/.develop/virtualenv/lib/python2.7/site-packages/service_identity/_common.pyRD � s c C` s- t | | j � r% t | j | j � St Sd S( sC https://tools.ietf.org/search/rfc6125#section-6.4 N( R' R t _hostname_matchesR8 RR R) ( RC R8 ( ( s[ /opt/cpanel-ccs/.develop/virtualenv/lib/python2.7/site-packages/service_identity/_common.pyR# s ( R R R R R RR RE RF RG R; R R R RD R# ( ( ( s[ /opt/cpanel-ccs/.develop/virtualenv/lib/python2.7/site-packages/service_identity/_common.pyRX � s t IPAddress_IDc B` s8 e Z d Z e j d e j � Z e Z e Z d � Z RS( s# An IP address service ID. t converterc C` s | j | j k S( sC https://tools.ietf.org/search/rfc2818#section-3.1 ( t ipR8 ( RC R8 ( ( s[ /opt/cpanel-ccs/.develop/virtualenv/lib/python2.7/site-packages/service_identity/_common.pyR# , s ( R R R R R R5 R6 Re RH R R R R# ( ( ( s[ /opt/cpanel-ccs/.develop/virtualenv/lib/python2.7/site-packages/service_identity/_common.pyRc ! s t URI_IDc B` sD e Z d Z e j � Z e j � Z e Z e Z d � Z d � Z RS( s An URI service ID. c C` s� t | t � s t d � � n | j � } d | k sB t | � rQ t d � � n | j d � \ } } | j d � j t � | _ t | j d � � | _ d S( s& :type uri: `unicode` s URI-ID must be a unicode string.u :s Invalid URI-ID.R- u /N( R' R R= R> R9 R4 RO R^ R@ RA t protocolRX t dns_id( RC t urit protRR ( ( s[ /opt/cpanel-ccs/.develop/virtualenv/lib/python2.7/site-packages/service_identity/_common.pyRD ? s c C` s? t | | j � r7 | j | j k o6 | j j | j � St Sd S( sE https://tools.ietf.org/search/rfc6125#section-6.5.2 N( R' R RP Rg Rh R# RQ R) ( RC R8 ( ( s[ /opt/cpanel-ccs/.develop/virtualenv/lib/python2.7/site-packages/service_identity/_common.pyR# O s ( R R R R R Rg Rh RM R R R RD R# ( ( ( s[ /opt/cpanel-ccs/.develop/virtualenv/lib/python2.7/site-packages/service_identity/_common.pyRf 3 s t SRV_IDc B` sD e Z d Z e j � Z e j � Z e Z e Z d � Z d � Z RS( s An SRV service ID. c C` s� t | t � s t d � � n | j � } d | k sR t | � sR | d d k ra t d � � n | j d d � \ } } | d j d � j t � | _ t | � | _ d S( s& :type srv: `unicode` s SRV-ID must be a unicode string.u .i u _s Invalid SRV-ID.i R- N( R' R R= R> R9 R4 RO R^ R@ RA RW RX Rh ( RC t srvRW RR ( ( s[ /opt/cpanel-ccs/.develop/virtualenv/lib/python2.7/site-packages/service_identity/_common.pyRD h s ( c C` s? t | | j � r7 | j | j k o6 | j j | j � St Sd S( sE https://tools.ietf.org/search/rfc6125#section-6.5.1 N( R' R RW RV Rh R# RQ R) ( RC R8 ( ( s[ /opt/cpanel-ccs/.develop/virtualenv/lib/python2.7/site-packages/service_identity/_common.pyR# x s ( R R R R R RW Rh RS R R R RD R# ( ( ( s[ /opt/cpanel-ccs/.develop/virtualenv/lib/python2.7/site-packages/service_identity/_common.pyRk \ s c C` s� d | k ru | j d d � \ } } | j d d � \ } } | | k rL t S| j d � r_ t S| d k pt | | k S| | k Sd S( s� :type cert_pattern: `bytes` :type actual_hostname: `bytes` :return: `True` if *cert_pattern* matches *actual_hostname*, else `False`. :rtype: `bool` R. RU i s xn--N( RO R) t startswith( R t actual_hostnamet cert_headt cert_tailt actual_headt actual_tail( ( s[ /opt/cpanel-ccs/.develop/virtualenv/lib/python2.7/site-packages/service_identity/_common.pyRb � s c C` s� | j d � } | d k r3 t d j | � � � n | j d � } t | � d k rl t d j | � � � n d | d k r� t d j | � � � n t d � | D� � r� t d j | � � � n d S( s� Check whether the usage of wildcards within *cert_pattern* conforms with our expectations. :type hostname: `bytes` :return: None R. i s7 Certificate's DNS-ID {0!r} contains too many wildcards.RU i sJ Certificate's DNS-ID {0!r} has too few host components for wildcard usage.i sE Certificate's DNS-ID {0!r} has a wildcard outside the left-most part.c s` s | ] } t | � Vq d S( N( t len( RZ t p( ( s[ /opt/cpanel-ccs/.develop/virtualenv/lib/python2.7/site-packages/service_identity/_common.pys <genexpr>� s s0 Certificate's DNS-ID {0!r} contains empty parts.N( t countR R? RO Rs R\ ( R t cntt parts( ( s[ /opt/cpanel-ccs/.develop/virtualenv/lib/python2.7/site-packages/service_identity/_common.pyRB � s$ t ABCDEFGHIJKLMNOPQRSTUVWXYZt abcdefghijklmnopqrstuvwxyz() R t __future__R R R R5 RE R t _compatR R t exceptionsR R R R R R R] R_ R` t sR( t objectR R" R R R9 R) R; RH RM RS RX Rc Rf Rk Rb RB RA ( ( ( s[ /opt/cpanel-ccs/.develop/virtualenv/lib/python2.7/site-packages/service_identity/_common.pyt <module> sH . " /(' %