Edit File: low_level.pyc
� ��abc @ s� d Z d d l Z d d l Z d d l Z d d l Z d d l Z d d l Z d d l Z d d l m Z m Z m Z e j d e j � Z d � Z d � Z d � Z d d � Z d � Z d � Z d � Z d � Z d � Z d � Z d S( s� Low-level helpers for the SecureTransport bindings. These are Python functions that are not directly related to the high-level APIs but are necessary to get them to work. They include a whole bunch of low-level CoreFoundation messing about and memory management. The concerns in this module are almost entirely about trying to avoid memory leaks and providing appropriate and useful assistance to the higher-level code. i����Ni ( t Securityt CoreFoundationt CFConsts; -----BEGIN CERTIFICATE----- (.*?) -----END CERTIFICATE-----c C s t j t j | t | � � S( sv Given a bytestring, create a CFData object from it. This CFData object must be CFReleased by the caller. ( R t CFDataCreatet kCFAllocatorDefaultt len( t bytestring( ( sZ /usr/lib/python2.7/site-packages/pip/_vendor/urllib3/contrib/_securetransport/low_level.pyt _cf_data_from_bytes s c C sw t | � } d � | D� } d � | D� } t j | | � } t j | | � } t j t j | | | t j t j � S( sK Given a list of Python tuples, create an associated CFDictionary. c s s | ] } | d Vq d S( i N( ( t .0t t( ( sZ /usr/lib/python2.7/site-packages/pip/_vendor/urllib3/contrib/_securetransport/low_level.pys <genexpr>, s c s s | ] } | d Vq d S( i N( ( R R ( ( sZ /usr/lib/python2.7/site-packages/pip/_vendor/urllib3/contrib/_securetransport/low_level.pys <genexpr>- s ( R R t CFTypeReft CFDictionaryCreateR t kCFTypeDictionaryKeyCallBackst kCFTypeDictionaryValueCallBacks( t tuplest dictionary_sizet keyst valuest cf_keyst cf_values( ( sZ /usr/lib/python2.7/site-packages/pip/_vendor/urllib3/contrib/_securetransport/low_level.pyt _cf_dictionary_from_tuples% s c C s� t j | t j t j � � } t j | t j � } | d k r� t j d � } t j | | d t j � } | s~ t d � � n | j } n | d k r� | j d � } n | S( s� Creates a Unicode string from a CFString object. Used entirely for error reporting. Yes, it annoys me quite a lot that this function is this complex. i s' Error copying C string from CFStringRefs utf-8N( t ctypest castt POINTERt c_void_pR t CFStringGetCStringPtrR t kCFStringEncodingUTF8t Nonet create_string_buffert CFStringGetCStringt OSErrort valuet decode( R t value_as_void_pt stringt buffert result( ( sZ /usr/lib/python2.7/site-packages/pip/_vendor/urllib3/contrib/_securetransport/low_level.pyt _cf_string_to_unicode; s" c C s� | d k r d St j | d � } t | � } t j | � | d k sS | d k r` d | } n | d k rx t j } n | | � � d S( s[ Checks the return code and throws an exception if there is an error to report i Nu u OSStatus %s( R t SecCopyErrorMessageStringR R% R t CFReleaset sslt SSLError( t errort exception_classt cf_error_stringt output( ( sZ /usr/lib/python2.7/site-packages/pip/_vendor/urllib3/contrib/_securetransport/low_level.pyt _assert_no_errorX s c C s= g t j | � D] } t j | j d � � ^ q } | sL t j d � � n t j t j d t j t j � � } | s� t j d � � n y� x� | D]� } t | � } | s� t j d � � n t j t j | � } t j | � | s� t j d � � n t j | | � t j | � q� WWn t k r8t j | � n X| S( s� Given a bundle of certs in PEM format, turns them into a CFArray of certs that can be used to validate a cert chain. i s No root certificates specifiedi s Unable to allocate memory!s Unable to build cert object!( t _PEM_CERTS_REt finditert base64t b64decodet groupR( R) R t CFArrayCreateMutableR R t byreft kCFTypeArrayCallBacksR R t SecCertificateCreateWithDataR' t CFArrayAppendValuet Exception( t pem_bundlet matcht der_certst cert_arrayt der_bytest certdatat cert( ( sZ /usr/lib/python2.7/site-packages/pip/_vendor/urllib3/contrib/_securetransport/low_level.pyt _cert_array_from_pemm s2 1 c C s t j � } t j | � | k S( s= Returns True if a given CFTypeRef is a certificate. ( R t SecCertificateGetTypeIDR t CFGetTypeID( t itemt expected( ( sZ /usr/lib/python2.7/site-packages/pip/_vendor/urllib3/contrib/_securetransport/low_level.pyt _is_cert� s c C s t j � } t j | � | k S( s; Returns True if a given CFTypeRef is an identity. ( R t SecIdentityGetTypeIDR RC ( RD RE ( ( sZ /usr/lib/python2.7/site-packages/pip/_vendor/urllib3/contrib/_securetransport/low_level.pyt _is_identity� s c C s� t j d � } t j | d � j d � } t j | d � } t j � } t j j | | � j d � } t j � } t j | t | � | t d t j | � � } t | � | | f S( s� This function creates a temporary Mac keychain that we can use to work with credentials. This keychain uses a one-time password and a temporary file to store the data. We expect to have one keychain per socket. The returned SecKeychainRef must be freed by the caller, including calling SecKeychainDelete. Returns a tuple of the SecKeychainRef and the path to the temporary directory that contains it. i( i s utf-8N( t ost urandomR1 t b64encodeR t tempfilet mkdtempt patht joint encodeR t SecKeychainReft SecKeychainCreateR t FalseR R R5 R. ( t random_bytest filenamet passwordt tempdirectoryt keychain_patht keychaint status( ( sZ /usr/lib/python2.7/site-packages/pip/_vendor/urllib3/contrib/_securetransport/low_level.pyt _temporary_keychain� s c C sk g } g } d } t | d � � } | j � } Wd QXzt j t j | t | � � } t j � } t j | d d d d d | t j | � � } t | � t j | � } x� t | � D] } t j | | � } t j | t j � } t | � r t j | � | j | � q� t | � r� t j | � | j | � q� q� WWd | rSt j | � n t j | � X| | f S( s� Given a single file, loads all the trust objects from it into arrays and the keychain. Returns a tuple of lists: the first list is a list of identities, the second a list of certs. t rbNi ( R t opent readR R R R t CFArrayRefR t SecItemImportR R5 R. t CFArrayGetCountt ranget CFArrayGetValueAtIndexR R RF t CFRetaint appendRH R' ( RY RN t certificatest identitiest result_arrayt ft raw_filedatat filedataR$ t result_countt indexRD ( ( sZ /usr/lib/python2.7/site-packages/pip/_vendor/urllib3/contrib/_securetransport/low_level.pyt _load_items_from_file� sH c G sK g } g } d � | D� } z� x= | D]5 } t | | � \ } } | j | � | j | � q& W| s� t j � } t j | | d t j | � � } t | � | j | � t j | j d � � n t j t j d t j t j � � } x* t j | | � D] } t j | | � q� W| SWd x' t j | | � D] } t j | � q/WXd S( s� Load certificates and maybe keys from a number of files. Has the end goal of returning a CFArray containing one SecIdentityRef, and then zero or more SecCertificateRef objects, suitable for use as a client certificate trust chain. c s s | ] } | r | Vq d S( N( ( R RN ( ( sZ /usr/lib/python2.7/site-packages/pip/_vendor/urllib3/contrib/_securetransport/low_level.pys <genexpr>/ s i N( Rn t extendR t SecIdentityReft SecIdentityCreateWithCertificateR R5 R. Re R R' t popR4 R R6 t itertoolst chainR8 ( RY t pathsRf Rg t file_patht new_identitiest new_certst new_identityRZ t trust_chainRD t obj( ( sZ /usr/lib/python2.7/site-packages/pip/_vendor/urllib3/contrib/_securetransport/low_level.pyt _load_client_cert_chain s6 ( t __doc__R1 R Rs t reRI R( RL t bindingsR R R t compilet DOTALLR/ R R R% R R. RA RF RH R[ Rn R| ( ( ( sZ /usr/lib/python2.7/site-packages/pip/_vendor/urllib3/contrib/_securetransport/low_level.pyt <module> s( + ( ;