�
��uVc@s�dZddlZddlZyddlZWnek
rGdZnXdZdefd��YZdd�Z d�Z
d �Z d
�Z dS( sJThe match_hostname() function from Python 3.3.3, essential when using SSL.i����Ns3.5.0.1tCertificateErrorcBseZRS((t__name__t
__module__(((sI/usr/lib/python2.7/site-packages/backports/ssl_match_hostname/__init__.pyRsic
CsRg}|stS|jd�}|d}|d }|jd�}||krgtdt|���n|s�|j�|j�kS|dkr�|jd�nY|jd�s�|jd�r�|jtj |��n"|jtj |�j
dd ��x$|D] }|jtj |��q�Wtj d
d j |�d tj
�} | j|�S(
shMatching according to RFC 6125, section 6.4.3
http://tools.ietf.org/html/rfc6125#section-6.4.3
t.iit*s,too many wildcards in certificate DNS name: s[^.]+sxn--s\*s[^.]*s\As\.s\Z(tFalsetsplittcountRtreprtlowertappendt
startswithtretescapetreplacetcompiletjoint
IGNORECASEtmatch(
tdnthostnamet
max_wildcardstpatstpartstleftmostt remaindert wildcardstfragtpat((sI/usr/lib/python2.7/site-packages/backports/ssl_match_hostname/__init__.pyt_dnsname_matchs*
"
&cCs=t|t�r9tjdkr9t|dddd�}n|S(Nitencodingtasciiterrorststrict(i(t
isinstancetstrtsyst version_infotunicode(tobj((sI/usr/lib/python2.7/site-packages/backports/ssl_match_hostname/__init__.pyt _to_unicodeLs cCs%tjt|�j��}||kS(s�Exact matching of IP addresses.
RFC 6125 explicitly doesn't define an algorithm for this
(section 1.7.2 - "Out of Scope").
(t ipaddresst
ip_addressR(trstrip(tipnamethost_iptip((sI/usr/lib/python2.7/site-packages/backports/ssl_match_hostname/__init__.pyt_ipaddress_matchQscCs|std��nytjt|��}WnUtk
rGd}n?tk
r]d}n)tk
r�tdkrd}q��nXg}|jdd�}x�|D]�\}}|dkr�|dkr�t||�r�dS|j |�q�|dkr�|dk rt
||�rdS|j |�q�q�W|s�xc|jdd�D]L}xC|D];\}}|dkrQt||�r|dS|j |�qQqQWqDWnt |�dkr�t d |d
j
tt|��f��n;t |�dkrt d ||d f��n t d
��dS(s)Verify that *cert* (in decoded format as returned by
SSLSocket.getpeercert()) matches the *hostname*. RFC 2818 and RFC 6125
rules are followed, but IP addresses are not accepted for *hostname*.
CertificateError is raised on failure. On success, the function
returns nothing.
stempty or no certificate, match_hostname needs a SSL socket or SSL context with either CERT_OPTIONAL or CERT_REQUIREDtsubjectAltNametDNSNs
IP Addresstsubjectt
commonNameis&hostname %r doesn't match either of %ss, s hostname %r doesn't match %ris=no appropriate commonName or subjectAltName fields were found(((t
ValueErrorR)R*R(tNonet UnicodeErrortAttributeErrortgetR R
R/tlenRRtmapR(tcertRR-tdnsnamestsantkeytvaluetsub((sI/usr/lib/python2.7/site-packages/backports/ssl_match_hostname/__init__.pytmatch_hostname]sJ
%(
t__doc__R R$R)t ImportErrorR5t __version__R4RR R(R/RA(((sI/usr/lib/python2.7/site-packages/backports/ssl_match_hostname/__init__.pyt<module>s
5 |