o -‚c~ã@srdZddlZddlZzddlZWn eydZYnwdZGdd„deƒZddd„Zd d „Z d d „Z d d„Z dS)zJThe match_hostname() function from Python 3.3.3, essential when using SSL.éNz3.5.0.1c@s eZdZdS)ÚCertificateErrorN)Ú__name__Ú __module__Ú __qualname__©rrúCusr/lib/python3.10/site-packages/urllib3/util/ssl_match_hostname.pyrsréc Csòg}|sdS| d¡}|d}|dd…}| d¡}||kr&tdt|ƒƒ‚|s0| ¡| ¡kS|dkr:| d¡n| d ¡sD| d ¡rM| t |¡¡n | t |¡  d d ¡¡|D] }| t |¡¡q[t  d d   |¡dtj ¡} |   |¡S)zhMatching according to RFC 6125, section 6.4.3 http://tools.ietf.org/html/rfc6125#section-6.4.3 FÚ.rrNÚ*z,too many wildcards in certificate DNS name: z[^.]+zxn--z\*z[^.]*z\Az\.z\Z)ÚsplitÚcountrÚreprÚlowerÚappendÚ startswithÚreÚescapeÚreplaceÚcompileÚjoinÚ IGNORECASEÚmatch) ZdnÚhostnameZ max_wildcardsZpatsÚpartsZleftmostÚ remainderZ wildcardsÚfragÚpatrrrÚ_dnsname_matchs,    ÿ  rcCs&t|tƒrtjdkrt|ddd}|S)N)éÚasciiÚstrict)ÚencodingÚerrors)Ú isinstanceÚstrÚsysÚ version_infoÚunicode)ÚobjrrrÚ _to_unicodeOsr)cCst t|ƒ ¡¡}||kS)zˆExact matching of IP addresses. RFC 6125 explicitly doesn't define an algorithm for this (section 1.7.2 - "Out of Scope"). )Ú ipaddressÚ ip_addressr)Úrstrip)ZipnameÚhost_ipÚiprrrÚ_ipaddress_matchVsr/c Csf|stdƒ‚z t t|ƒ¡}Wnttfyd}Ynty,tdur)d}n‚Ynwg}| dd¡}|D]/\}}|dkrQ|durKt||ƒrKdS| |¡q7|dkrf|durat ||ƒradS| |¡q7|s‹| dd¡D]}|D]\}}|dkr‰t||ƒr„dS| |¡qsqot |ƒd krŸt d |d   t t|ƒ¡fƒ‚t |ƒd kr¯t d ||d fƒ‚t dƒ‚)a)Verify that *cert* (in decoded format as returned by SSLSocket.getpeercert()) matches the *hostname*. RFC 2818 and RFC 6125 rules are followed, but IP addresses are not accepted for *hostname*. CertificateError is raised on failure. On success, the function returns nothing. ztempty or no certificate, match_hostname needs a SSL socket or SSL context with either CERT_OPTIONAL or CERT_REQUIREDNZsubjectAltNamerZDNSz IP AddressÚsubjectZ commonNamerz&hostname %r doesn't match either of %sz, zhostname %r doesn't match %rrz=no appropriate commonName or subjectAltName fields were found)Ú ValueErrorr*r+r)Ú UnicodeErrorÚAttributeErrorÚgetrrr/ÚlenrrÚmapr )Zcertrr-ZdnsnamesZsanÚkeyÚvalueÚsubrrrÚmatch_hostnamebs\ÿ þý    €   €ú ÿÿ ÿr:)r) Ú__doc__rr%r*Ú ImportErrorÚ __version__r1rrr)r/r:rrrrÚs  ÿ 6