Tryag File Manager
Home
-
Turbo Force
Current Path :
/
usr
/
lib
/
python2.4
/
site-packages
/
M2Crypto
/
SSL
/
Upload File :
New :
File
Dir
//usr/lib/python2.4/site-packages/M2Crypto/SSL/Checker.pyc
mò kQ²Oc @ s» d Z d k l Z l Z l Z d k Z d e f d „ ƒ YZ d e f d „ ƒ YZ d e f d „ ƒ YZ d e f d „ ƒ YZ d f d „ ƒ YZ e d j o d k Z e i ƒ n d S( s{ SSL peer certificate checking routines Copyright (c) 2004-2007 Open Source Applications Foundation. All rights reserved. ( s utils EVPs m2Nt SSLVerificationErrorc B s t Z RS( N( t __name__t __module__( ( ( t8 /usr/lib/python2.4/site-packages/M2Crypto/SSL/Checker.pyR s t NoCertificatec B s t Z RS( N( R R ( ( ( R R s t WrongCertificatec B s t Z RS( N( R R ( ( ( R R s t WrongHostc B s t Z d d „ Z d „ Z RS( Nt commonNamec C sI | d j o t d ƒ ‚ n t i | ƒ | | _ | | _ | | _ d S( sz This exception will be raised if the certificate returned by the peer was issued for a different host than we tried to connect to. This could be due to a server misconfiguration or an active attack. @param expectedHost: The name of the host we expected to find in the certificate. @param actualHost: The name of the host we actually found in the certificate. @param fieldName: The field name where we noticed the error. This should be either 'commonName' or 'subjectAltName'. R t subjectAltNames@ Unknown fieldName, should be either commonName or subjectAltNameN( s commonNames subjectAltName( t fieldNamet ValueErrorR t __init__t selft expectedHostt actualHost( R R R R ( ( R R s c C s d | i | i | i f S( Ns< Peer certificate %s does not match host, expected %s, got %s( R R R R ( R ( ( R t __str__* s ( R R R R ( ( ( R R s t Checkerc B s8 t Z d d d d „ Z d d „ Z d „ Z d „ Z RS( Nt sha1c C s1 | | _ | | _ | | _ t i d ƒ | _ d S( Ns ^[0-9]+(\.[0-9]+)*$( t hostR t peerCertHasht fingerprintt peerCertDigestt digestt ret compilet numericIpMatch( R R R R ( ( R R 0 s c C sŸ | d j o t d ƒ ‚ n | d j o | | _ n | i oð | i d j o t d | i ƒ ‚ n | i d j o t | i ƒ d j p& | i d j o& t | i ƒ d j o t d ƒ ‚ n | i ƒ } t i | i ƒ } | i | ƒ | i ƒ } t i | ƒ t | i d ƒ j o t d ƒ ‚ q1n | i o`t } t | _ ye | i d ƒ i ƒ } | i | i | ƒ o t } n- | i o" t d | i d | d d ƒ ‚ n Wn t j o n X| pË t } d } xx | i ƒ i! t" i# ƒ D]^ } t } | i% ƒ i& ƒ } | p | } n | d | 7} | i( | i | ƒ o t } PqñqñW| p t d ƒ ‚ n | p" t d | i d | d d ƒ ‚ q—q›n t S( Ns peer did not return certificateR t md5s unsupported digest "%s"i( i s2 peer certificate fingerprint length does not matchi s+ peer certificate fingerprint does not matchR R R R t t ,s! no commonName in peer certificateR ( R R () t peerCertt NoneR R R R R R t lenR t as_dert dert EVPt MessageDigestt mdt updatet finalt utilt octx_to_numt intt Falset hostValidationPassedt useSubjectAltNameOnlyt get_extt get_valueR t _splitSubjectAltNamet TrueR t LookupErrort hasCommonNamet commonNamest get_subjectt get_entries_by_nidt m2t NID_commonNamet entryt get_datat as_textR t _match( R R R R3 R R2 R R R+ R$ R! R8 ( ( R t __call__6 s` L " c C sv t | _ xf | i d ƒ D]U } | i ƒ i ƒ } | d d j o, t | _ | i | | d ƒ o t Sqn q q Wt S( sg >>> check = Checker() >>> check._splitSubjectAltName(host='my.example.com', subjectAltName='DNS:my.example.com') True >>> check._splitSubjectAltName(host='my.example.com', subjectAltName='DNS:*.example.com') True >>> check._splitSubjectAltName(host='my.example.com', subjectAltName='DNS:m*.example.com') True >>> check._splitSubjectAltName(host='my.example.com', subjectAltName='DNS:m*ample.com') False >>> check.useSubjectAltNameOnly True >>> check._splitSubjectAltName(host='my.example.com', subjectAltName='DNS:m*ample.com, othername:<unsupported>') False >>> check._splitSubjectAltName(host='my.example.com', subjectAltName='DNS:m*ample.com, DNS:my.example.org') False >>> check._splitSubjectAltName(host='my.example.com', subjectAltName='DNS:m*ample.com, DNS:my.example.com') True >>> check._splitSubjectAltName(host='my.example.com', subjectAltName='DNS:my.example.com, DNS:my.example.org') True >>> check.useSubjectAltNameOnly True >>> check._splitSubjectAltName(host='my.example.com', subjectAltName='') False >>> check._splitSubjectAltName(host='my.example.com', subjectAltName='othername:<unsupported>') False >>> check.useSubjectAltNameOnly False R i s dns:N( R* R R, R t splitt certHostt lowert stripR0 R; R ( R R R R> ( ( R R/ u s c C sð | i ƒ } | i ƒ } | | j o t Sn | i d ƒ d j o t Sn | i i | ƒ p | i i | i d d ƒ ƒ o t Sn | i d ƒ d j o t Sn | i d d ƒ } | i d d ƒ } t i d | ƒ i | ƒ o t Sn t S( s >>> check = Checker() >>> check._match(host='my.example.com', certHost='my.example.com') True >>> check._match(host='my.example.com', certHost='*.example.com') True >>> check._match(host='my.example.com', certHost='m*.example.com') True >>> check._match(host='my.example.com', certHost='m*.EXAMPLE.com') True >>> check._match(host='my.example.com', certHost='m*ample.com') False >>> check._match(host='my.example.com', certHost='*.*.com') False >>> check._match(host='1.2.3.4', certHost='1.2.3.4') True >>> check._match(host='1.2.3.4', certHost='*.2.3.4') False >>> check._match(host='1234', certHost='1234') True t *i R s \iÿÿÿÿt .s \.s [^\.]*s ^%s$N( R R? R> R0 t countR* R R t matcht replacet findR R ( R R R> ( ( R R; s 2 ( R R R R R< R/ R; ( ( ( R R / s ? (t __main__( t __doc__t M2CryptoR' R" R6 R t ExceptionR R R R R R t doctestt testmod( R R R' R R RK R6 R" R R ( ( R t ? s ¥