OwlCyberSecurity - MANAGER
Edit File: ssl.pyc
� `��ac @` s@ d Z d d l m Z m Z d d l m Z e Z d d l m Z m Z m Z d d l m Z m Z d d l m Z e e j � e d d( d � � Y� � Z d e f d � � YZ e e j � e d d) d � � Y� � Z e e j g e e j � D] Z e e j k r� e ^ q� � d e j f d � � Y� Z e e j � d e j f d � � Y� Z d e j f d � � YZ d e j f d � � YZ d d l m Z m Z m Z m Z m! Z! m" Z" m# Z$ m% Z& m' Z( m) Z) m* Z* m+ Z+ m, Z, m- Z- m. Z. m/ Z/ m0 Z0 d d d d d d d d d d d d d d d! d" d# d$ d% d& g Z1 d' S(* s This module implements Transport Layer Security (TLS) support for Twisted. It requires U{PyOpenSSL <https://pypi.python.org/pypi/pyOpenSSL>}. If you wish to establish a TLS connection, please use one of the following APIs: - SSL endpoints for L{servers <twisted.internet.endpoints.SSL4ServerEndpoint>} and L{clients <twisted.internet.endpoints.SSL4ClientEndpoint>} - L{startTLS <twisted.internet.interfaces.ITLSTransport.startTLS>} - L{connectSSL <twisted.internet.interfaces.IReactorSSL.connectSSL>} - L{listenSSL <twisted.internet.interfaces.IReactorSSL.listenSSL>} These APIs all require a C{contextFactory} argument that specifies their security properties, such as certificate, private key, certificate authorities to verify the peer, allowed TLS protocol versions, cipher suites, and so on. The recommended value for this argument is a L{CertificateOptions} instance; see its documentation for an explanation of the available options. The C{contextFactory} name is a bit of an anachronism now, as context factories have been replaced with "connection creators", but these objects serve the same role. Be warned that implementing your own connection creator (i.e.: value for the C{contextFactory}) is both difficult and dangerous; the Twisted team has worked hard to make L{CertificateOptions}' API comprehensible and unsurprising, and the Twisted team is actively maintaining it to ensure that it becomes more secure over time. If you are really absolutely sure that you want to take on the risk of implementing your own connection creator based on the pyOpenSSL API, see the L{server connection creator <twisted.internet.interfaces.IOpenSSLServerConnectionCreator>} and L{client connection creator <twisted.internet.interfaces.IOpenSSLServerConnectionCreator>} interfaces. Developers using Twisted, please ignore the L{Port}, L{Connector}, and L{Client} classes defined here, as these are details of certain reactors' TLS implementations, exposed by accident (and remaining here only for compatibility reasons). If you wish to establish a TLS connection, please use one of the APIs listed above. @note: "SSL" (Secure Sockets Layer) is an antiquated synonym for "TLS" (Transport Layer Security). You may see these terms used interchangeably throughout the documentation. i ( t divisiont absolute_import( t SSL( t implementert implementer_onlyt implementedBy( t tcpt interfaces( t _oldStylet ContextFactoryc B` s e Z d Z d Z d � Z RS( s> A factory for SSL context objects, for server SSL connections.i c C` s t � d S( s4 Return a SSL.Context object. override in subclasses.N( t NotImplementedError( t self( ( sW /opt/cpanel-ccs/.develop/virtualenv/lib/python2.7/site-packages/twisted/internet/ssl.pyt getContextL s ( t __name__t __module__t __doc__t isClientR ( ( ( sW /opt/cpanel-ccs/.develop/virtualenv/lib/python2.7/site-packages/twisted/internet/ssl.pyR E s t DefaultOpenSSLContextFactoryc B` sM e Z d Z d Z e j e j d � Z d � Z d � Z d � Z d � Z RS( sQ L{DefaultOpenSSLContextFactory} is a factory for server-side SSL context objects. These objects define certain parameters related to SSL handshakes and the subsequent connection. @ivar _contextFactory: A callable which will be used to create new context objects. This is typically L{OpenSSL.SSL.Context}. c C` s2 | | _ | | _ | | _ | | _ | j � d S( s� @param privateKeyFileName: Name of a file containing a private key @param certificateFileName: Name of a file containing a certificate @param sslmethod: The SSL method to use N( t privateKeyFileNamet certificateFileNamet sslmethodt _contextFactoryt cacheContext( R R R R R ( ( sW /opt/cpanel-ccs/.develop/virtualenv/lib/python2.7/site-packages/twisted/internet/ssl.pyt __init__] s c C` sa | j d k r] | j | j � } | j t j � | j | j � | j | j � | | _ n d S( N( t _contextt NoneR R t set_optionsR t OP_NO_SSLv2t use_certificate_fileR t use_privatekey_fileR ( R t ctx( ( sW /opt/cpanel-ccs/.develop/virtualenv/lib/python2.7/site-packages/twisted/internet/ssl.pyR o s c C` s | j j � } | d =| S( NR ( t __dict__t copy( R t d( ( sW /opt/cpanel-ccs/.develop/virtualenv/lib/python2.7/site-packages/twisted/internet/ssl.pyt __getstate__z s c C` s | | _ d S( N( R ( R t state( ( sW /opt/cpanel-ccs/.develop/virtualenv/lib/python2.7/site-packages/twisted/internet/ssl.pyt __setstate__� s c C` s | j S( s( Return an SSL context. ( R ( R ( ( sW /opt/cpanel-ccs/.develop/virtualenv/lib/python2.7/site-packages/twisted/internet/ssl.pyR � s N( R R R R R R t SSLv23_METHODt ContextR R R" R$ R ( ( ( sW /opt/cpanel-ccs/.develop/virtualenv/lib/python2.7/site-packages/twisted/internet/ssl.pyR R s t ClientContextFactoryc B` s/ e Z d Z d Z e j Z e j Z d � Z RS( s" A context factory for SSL clients.i c C` s& | j | j � } | j t j � | S( N( R t methodR R R ( R R ( ( sW /opt/cpanel-ccs/.develop/virtualenv/lib/python2.7/site-packages/twisted/internet/ssl.pyR � s ( R R R R R R% R( R& R R ( ( ( sW /opt/cpanel-ccs/.develop/virtualenv/lib/python2.7/site-packages/twisted/internet/ssl.pyR' � s t Clientc B` s# e Z d Z d d � Z d � Z RS( s I am an SSL client. c C` s, | | _ t j j | | | | | | � d S( N( t ctxFactoryR R) R ( R t hostt portt bindAddressR* t connectort reactor( ( sW /opt/cpanel-ccs/.develop/virtualenv/lib/python2.7/site-packages/twisted/internet/ssl.pyR � s c C` s. | j | j � | j � t j j | � d S( N( t startTLSR* t startWritingR R) t _connectDone( R ( ( sW /opt/cpanel-ccs/.develop/virtualenv/lib/python2.7/site-packages/twisted/internet/ssl.pyR2 � s N( R R R R R R2 ( ( ( sW /opt/cpanel-ccs/.develop/virtualenv/lib/python2.7/site-packages/twisted/internet/ssl.pyR) � s t Serverc B` s e Z d Z d � Z RS( s I am an SSL server. c O` s- t j j | | | � | j | j j � d S( N( R R3 R R0 t serverR* ( R t argst kwargs( ( sW /opt/cpanel-ccs/.develop/virtualenv/lib/python2.7/site-packages/twisted/internet/ssl.pyR � s ( R R R R ( ( ( sW /opt/cpanel-ccs/.develop/virtualenv/lib/python2.7/site-packages/twisted/internet/ssl.pyR3 � s t Portc B` s5 e Z d Z e Z d Z d d d d � Z d � Z RS( s I am an SSL port. t TLSi2 t c C` s, t j j | | | | | | � | | _ d S( N( R R7 R R* ( R R, t factoryR* t backlogt interfaceR/ ( ( sW /opt/cpanel-ccs/.develop/virtualenv/lib/python2.7/site-packages/twisted/internet/ssl.pyR � s c C` s t j j | | � d S( s| Override the normal prefix to include an annotation indicating this is a port for TLS connections. s (TLS)( R R7 t _getLogPrefix( R R: ( ( sW /opt/cpanel-ccs/.develop/virtualenv/lib/python2.7/site-packages/twisted/internet/ssl.pyR= � s N( R R R R3 t transportt _typeR R R= ( ( ( sW /opt/cpanel-ccs/.develop/virtualenv/lib/python2.7/site-packages/twisted/internet/ssl.pyR7 � s t Connectorc B` s e Z d d � Z d � Z RS( c C` s9 | | _ t j j | | | | | | | � | j � d S( N( t contextFactoryR R@ R R ( R R+ R, R: RA t timeoutR- R/ ( ( sW /opt/cpanel-ccs/.develop/virtualenv/lib/python2.7/site-packages/twisted/internet/ssl.pyR � s "c C` s( t | j | j | j | j | | j � S( N( R) R+ R, R- RA R/ ( R ( ( sW /opt/cpanel-ccs/.develop/virtualenv/lib/python2.7/site-packages/twisted/internet/ssl.pyt _makeTransport� s N( R R R R RC ( ( ( sW /opt/cpanel-ccs/.develop/virtualenv/lib/python2.7/site-packages/twisted/internet/ssl.pyR@ � s ( t KeyPairt DistinguishedNamet DNt Certificatet CertificateRequestt PrivateCertificatet OpenSSLAcceptableCipherst OpenSSLCertificateOptionst OpenSSLDiffieHellmanParameterst platformTrustt OpenSSLDefaultPathst VerificationErrort optionsForClientTLSt ProtocolNegotiationSupportt protocolNegotiationMechanismst trustRootFromCertificatest TLSVersionRE RF RG RH RI RD t AcceptableCipherst CertificateOptionst DiffieHellmanParametersRM RN RT RO RP RQ RR RS N( ( (2 R t __future__R R t OpenSSLR t Truet supportedt zope.interfaceR R R t twisted.internetR R t twisted.python._oldstyleR t IOpenSSLContextFactoryR R R' t ISSLTransportR) t it ITLSTransportR3 R7 R@ t twisted.internet._sslverifyRD RE RF RG RH RI RJ RU RK RV RL RW RM RN RO RP RQ RR RS RT t __all__( ( ( sW /opt/cpanel-ccs/.develop/virtualenv/lib/python2.7/site-packages/twisted/internet/ssl.pyt <module>6 s: : p