File: //proc/2/cwd/proc/2/root/proc/2/root/usr/lib/python2.4/site-packages/M2Crypto/SSL/Context.pyc
mò
üäìPc @ sz d Z d k l Z d k Z d k l Z l Z l Z l Z l Z l
Z
d f d „ ƒ YZ d „ Z d f d „ ƒ YZ
d S( sR M2Crypto.SSL.Context
Copyright (c) 1999-2004 Ng Pheng Siong. All rights reserved.( s WeakValueDictionaryN( s utils BIOs Errs RSAs m2s X509t _ctxmapc B s2 t Z d Z d „ Z d „ Z d „ Z d „ Z RS( Nc C s t ƒ | _ d S( N( t WeakValueDictionaryt selft map( R ( ( t8 /usr/lib/python2.4/site-packages/M2Crypto/SSL/Context.pyt __init__
s c C s | i | S( N( R R t key( R R ( ( R t __getitem__ s c C s | | i | <d S( N( t valueR R R ( R R R ( ( R t __setitem__ s c C s | i | =d S( N( R R R ( R R ( ( R t __delitem__ s ( t __name__t
__module__t Nonet singletonR R R R
( ( ( R R s
c C s' t i d j o t ƒ t _ n t i S( N( R R R
( ( ( R R s t Contextc B sJ t Z d Z e i Z d e e d „ Z d „ Z d „ Z e e
i d „ Z e e
i d „ Z
d „ Z e Z Z e e d „ Z e Z d „ Z d
„ Z d „ Z e d „ Z d
„ Z d „ Z d „ Z e d „ Z d „ Z e d „ Z e i d „ Z d „ Z d „ Z! d „ Z" d „ Z# d „ Z$ d „ Z% d „ Z& d „ Z' d „ Z( RS( s 'Context' for SSL connections.t sslv23c C sÎ t t | d d ƒ } | d j o t d | ‚ n t i | ƒ ƒ | _ d | _ | | _
| t ƒ t | i ƒ <t i
| i d ƒ | d j o9 | d j o | i t i t i Bƒ n | i d ƒ n d S( Nt _methods no such protocol '%s'i l € R s! ALL:!ADH:!LOW:!EXP:!MD5:@STRENGTH( t getattrt m2t protocolR
t protot
ValueErrort ssl_ctx_newR t ctxt allow_unknown_cat post_connection_checkR t longt ssl_ctx_set_cache_sizet weak_cryptot set_optionst
SSL_OP_ALLt SSL_OP_NO_SSLv2t set_cipher_list( R R R R R ( ( R R % s
c C s+ t | d d ƒ o | i | i ƒ n d S( NR ( R R R
t m2_ssl_ctx_freeR ( R ( ( R t __del__4 s c C s t ƒ t | i ƒ =d S( N( R R R R ( R ( ( R t close8 s c C sn t i | i | ƒ t i | i | ƒ | p
| } n t i | i | ƒ t i | i ƒ p
t
d ‚ n d S( sw Load certificate and private key into the context.
@param certfile: File that contains the PEM-encoded certificate.
@type certfile: str
@param keyfile: File that contains the PEM-encoded private key.
Default value of None indicates that the private key
is to be found in 'certfile'.
@type keyfile: str
@param callback: Callable object to be invoked if the private key is
passphrase-protected. Default callback provides a
simple terminal-style input for the passphrase.
s public/private key mismatchN( R t ssl_ctx_passphrase_callbackR R t callbackt ssl_ctx_use_certt certfilet keyfilet ssl_ctx_use_privkeyt ssl_ctx_check_privkeyR ( R R( R) R& ( ( R t load_cert; s
c C sn t i | i | ƒ t i | i | ƒ | p
| } n t i | i | ƒ t i | i ƒ p
t
d ‚ n d S( sü Load certificate chain and private key into the context.
@param certchainfile: File object containing the PEM-encoded
certificate chain.
@type certchainfile: str
@param keyfile: File object containing the PEM-encoded private
key. Default value of None indicates that the
private key is to be found in 'certchainfile'.
@type keyfile: str
@param callback: Callable object to be invoked if the private key
is passphrase-protected. Default callback
provides a simple terminal-style input for the
passphrase.
s public/private key mismatchN( R R% R R R& t ssl_ctx_use_cert_chaint
certchainfileR) R* R+ R ( R R. R) R& ( ( R t load_cert_chainQ s
c C s t i | i | ƒ d S( s Load CA certs into the context. These CA certs are sent to the
peer during *SSLv3 certificate request*.
@param cafile: File object containing one or more PEM-encoded CA
certificates concatenated together.
@type cafile: str
N( R t$ ssl_ctx_set_client_CA_list_from_fileR R t cafile( R R1 ( ( R t set_client_CA_list_from_filei s c C s; | d j o
| d j p
t d ‚ t i | i | | ƒ S( s¦ Load CA certs into the context. These CA certs are used during
verification of the peer's certificate.
@param cafile: File containing one or more PEM-encoded CA certificates
concatenated together.
@type cafile: str
@param capath: Directory containing PEM-encoded CA certificates
(one certificate per file).
@type capath: str
s cafile and capath are None.N( R1 R
t capatht AssertionErrorR t ssl_ctx_load_verify_locationsR R ( R R1 R3 ( ( R t load_verify_locationsv s
%c C s< t i | i | ƒ } | p t i t i ƒ d ƒ ‚ n d S( Nt ( R t ssl_ctx_set_session_id_contextR R t idt rett Errt SSLErrort get_error_code( R R9 R: ( ( R t set_session_id_ctx‡ s c C s
| | _ d S( sÅ Set the context to accept/reject a peer certificate if the
certificate's CA is unknown.
@param ok: True to accept, False to reject.
@type ok: boolean
N( t okR R ( R R? ( ( R t set_allow_unknown_caΠs c C s | i S( sv Get the context's setting that accepts/rejects a peer
certificate if the certificate's CA is unknown.
N( R R ( R ( ( R t get_allow_unknown_ca• s c C sQ | d j o t i | i | ƒ n t i | i | | ƒ t i | i | ƒ d S( s®
Set verify options. Most applications will need to call this
method with the right options to make a secure SSL connection.
@param mode: The verification mode to use. Typically at least
SSL.verify_peer is used. Clients would also typically
add SSL.verify_fail_if_no_peer_cert.
@param mode: int
@param depth: The maximum allowed depth of the certificate chain
returned by the peer.
@type depth: int
@param callback: Callable that can be used to specify custom
verification checks.
N(
R& R
R t ssl_ctx_set_verify_defaultR R t modet ssl_ctx_set_verifyt ssl_ctx_set_verify_deptht depth( R RC RF R& ( ( R t
set_verify› s
c C s t i | i ƒ S( N( R t ssl_ctx_get_verify_modeR R ( R ( ( R t get_verify_mode° s c C s t i | i ƒ S( N( R t ssl_ctx_get_verify_depthR R ( R ( ( R t get_verify_depth³ s c C s7 t i | ƒ } t i | i ƒ ƒ } t i | i
| ƒ S( s» Load ephemeral DH parameters into the context.
@param dhpfile: File object containing the PEM-encoded DH
parameters.
@type dhpfile: str
N( t BIOt openfilet dhpfilet fR t dh_read_parameterst bio_ptrt dhpt ssl_ctx_set_tmp_dhR R ( R RN RO RR ( ( R t
set_tmp_dh¶ s c C s( | d j o t i | i | ƒ n d S( N( R& R
R t ssl_ctx_set_tmp_dh_callbackR R ( R R& ( ( R t set_tmp_dh_callbackÁ s
c C sA t | t i ƒ o t i | i | i ƒ Sn t d | f ‚ d S( sa Load ephemeral RSA key into the context.
@param rsa: M2Crypto.RSA.RSA instance.
s( Expected an instance of RSA.RSA, got %s.N( t
isinstancet rsat RSAR t ssl_ctx_set_tmp_rsaR R t TypeError( R RX ( ( R t set_tmp_rsaÅ s c C s( | d j o t i | i | ƒ n d S( N( R& R
R t ssl_ctx_set_tmp_rsa_callbackR R ( R R& ( ( R t set_tmp_rsa_callbackÏ s
c C s t i | i | ƒ d S( s
Set a callback function that can be used to get state information
about the SSL connections that are created from this context.
@param callback: Callback function. The default prints information to
stderr.
N( R t ssl_ctx_set_info_callbackR R R& ( R R& ( ( R t set_info_callbackÓ s c C s t i | i | ƒ S( N( R t ssl_ctx_set_cipher_listR R t cipher_list( R Rb ( ( R R! Ý s c C s t i | i | i ƒ ƒ S( N( R t ssl_ctx_add_sessionR R t sessiont _ptr( R Rd ( ( R t add_sessionà s c C s t i | i | i ƒ ƒ S( N( R t ssl_ctx_remove_sessionR R Rd Re ( R Rd ( ( R t remove_sessionã s c C s t i | i ƒ S( N( R t ssl_ctx_get_session_timeoutR R ( R ( ( R t get_session_timeoutæ s c C s t i | i | ƒ S( N( R t ssl_ctx_set_session_timeoutR R t timeout( R Rl ( ( R t set_session_timeouté s c C s t i | i | ƒ S( N( R t ssl_ctx_set_session_cache_modeR R RC ( R RC ( ( R t set_session_cache_modeì s c C s t i | i ƒ S( N( R t ssl_ctx_get_session_cache_modeR R ( R ( ( R t get_session_cache_modeï s c C s t i | i | ƒ S( N( R t ssl_ctx_set_optionsR R t op( R Rs ( ( R R ò s c C s t i t i | i ƒ ƒ S( sÝ
Get the certificate store associated with this context.
@warning: The store is NOT refcounted, and as such can not be relied
to be valid once the context goes away or is changed.
N( t X509t
X509_StoreR t ssl_ctx_get_cert_storeR R ( R ( ( R t get_cert_storeõ s () R R t __doc__R t ssl_ctx_freeR" R
R R# R$ t utilt passphrase_callbackR, R/ R2 t load_client_CAt load_client_caR6 t load_verify_infoR> R@ RA RG RI RK RT RV R\ R^ t cbt ssl_info_callbackR` R! Rf Rh Rj Rm Ro Rq R Rw ( ( ( R R s>
( Rx t weakrefR R t M2CryptoRz RL R; RY R Rt R R R ( Rz R; RL Rt R R RY R R R R ( ( R t ? s
+