m�
���Pc@s�dZd
k
Z
dklZlZ
dklZ
dklZlZlZ
d
k	Z	d
k
Z
dklZ
d�Z
dfd��YZd
S(	sUM2Crypto.SSL.Connection

Copyright (c) 1999-2004 Ng Pheng Siong. All rights reserved.N(sCiphersCipher_Stack(
sSession(sBIOsX509sm2(
sSSLErrorc
Osd
S(Ni
((targstkw((t;/usr/lib/python2.4/site-packages/M2Crypto/SSL/Connection.pyt_serverPostConnectionChecks
t
ConnectioncBs�tZ
dZei�ZeZeiZ	ei
Zee
id
�Zd�Zd�Zd�Zd�Zd�Zd�Zdd	�
Zd
�Zd�Zd�Zd
�Zd�Zd�Zd�Zd�Zd�Zd�Z d�Z!d�Z"d�Z#d�Z$d�Z%d�Z&d�Z'd�Z(d�Z)dd�
Z*dd�
Z+d �Z,e,Z-Z.dd!�
Z/e/Z0d"�Z1d#�Z2d$�Z3d%�Z4d&�Z5d'�Z6d(�Z7d)�Z8d*�Z9d+�Z:d,�Z;d-�Z<d.�Z=d/�Z>d0�Z?d1d2�
Z@d3�ZAd4d5d6�ZBd7�ZCd8�ZDd9�ZEd:�ZFd;�ZGd<�ZHd=�ZId>�ZJd?�ZKd@�ZLdA�ZMdB�ZNRS(CsAn SSL connection.cCs�|
|_ti|ii�
|_|dj	o

||_n5
ti|ti	�|_|ii
titid
�
|ii
�|_|ii�|_|idjo

d|_n

ti|_|iidj	o
|i|ii�

n

dS(Ni
f-1.0(tctxtselftm2tssl_newtssltsocktNonetsockettfamilytSOCK_STREAMt
setsockoptt
SOL_SOCKETtSO_REUSEADDRtfilenot_filenot
gettimeoutt_timeouttbio_noclosetssl_close_flagtpost_connection_checkt"set_post_connection_check_callback(RRR
R
((Rt__init__s
	










c

Cs�t|d
d�o
|i|i�

n

t|dd�o
|i|i�

n

|itijo'
t|dd�o
|i	|i
�

n

|ii�
dS(NtsslbiotsockbioR	(
tgetattrRRtm2_bio_freeRRRRRtm2_ssl_freeR	Rtclose(
R((Rt__del__3s




&

c

Csti
|i�

dS(
N(Rtssl_shutdownRR	(
R((RR <s
c

Csti
|i�
S(s�
        If there were errors in this connection, call clear() rather
        than close() to end it, so that bad sessions will be cleared
        from cache.
        N(Rt	ssl_clearRR	(
R((Rtclear?s
cCsti
|i|
�
dS(
N(Rtssl_set_shutdown1RR	tmode(RR&((Rtset_shutdownGs
c

Csti
|i�
S(
N(Rtssl_get_shutdownRR	(
R((Rtget_shutdownJs
cCs|i
i|
�

dS(
N(RRtbindtaddr(RR+((RR*Ms
icCs|i
i|
�

dS(
N(RRtlistentqlen(RR-((RR,Ps
cCsti
|i|
�S(
N(Rt
ssl_get_errorRR	tret(RR/((RR.Ss
cCs&ti
|i|
i�|i��
d
S(s4
        Explicitly set read and write bios
        N(Rtssl_set_bioRR	treadbiot_ptrtwritebio(RR1R3((Rtset_bioVs
cCsti
|i|
�
d
S(s

        Set the acceptable client CA list. If the client
        returns a certificate, it must have been issued by
        one of the CAs listed in cafile.
        
        Makes sense only for servers.
        
        @param cafile: Filename from which to load the CA list.
        N(Rt ssl_set_client_CA_list_from_fileRR	tcafile(RR6((Rtset_client_CA_list_from_file\s	
c

Csti
|i|ii�
d
S(s�
        Set the acceptable client CA list. If the client
        returns a certificate, it must have been issued by
        one of the CAs listed in context.
        
        Makes sense only for servers.
        N(Rt#ssl_set_client_CA_list_from_contextRR	R(
R((Rtset_client_CA_list_from_contexths
cCs
|
|_dS(
N(R+R(RR+((Rt
setup_addrrs
cCs6|
t
it
ifjo
td
�
�
n

|
|_dS(s{
        By default, SSL struct will be freed in __del__. Call with
        m2.bio_close to override this default.
        s+flag must be m2.bio_close or m2.bio_nocloseN(tflagRt	bio_closeRt
ValueErrorRR(RR;((Rtset_ssl_close_flagus


c

Csrti
|ii�d
�|_ti|i|i|i�
titi	��
|_
ti|i
|iti�
dS(Ni(
Rtbio_new_socketRRRRR0R	tbio_newt	bio_f_sslRtbio_set_sslR(
R((Rt	setup_ssl~scCs|i
|
�

|i�
d
S(t
DeprecatedN(RR:R+RC(RR+((Rt
_setup_ssl�s



c

Csti
|i�

dS(
N(Rtssl_set_accept_stateRR	(
R((Rtset_accept_state�s
c

Csti
|i|i�S(
N(Rt
ssl_acceptRR	R(
R((Rt
accept_ssl�s
c
Cs�|i
i�\}}
t|i|�}|
|_|i�
|i	�
|i
�
t|d
|i�}|dj	o1
||i�|id�p
tid�q�
n

||
fS(s�Accept an SSL connection. The return value is a pair (ssl, addr) where
        ssl is a new SSL connection object and addr is the address bound to the
        the other end of the SSL connection.tpostConnectionCheckispost connection check failedN(RRtacceptR
R+RRR	RCRGRIRtserverPostConnectionChecktcheckRt
get_peer_certtCheckertSSLVerificationError(RR+R
R	RM((RRK�s


	











c

Csti
|i�

dS(
N(Rtssl_set_connect_stateRR	(
R((Rtset_connect_state�s
c

Csti
|i|i�S(
N(Rtssl_connectRR	R(
R((Rtconnect_ssl�s
cCs�|i
i|
�

|
|_|i�
|i�
|i�}t|d
|i	�}|dj	o1
||i�|id�p
t
id�q�
n

|S(NRJispost connection check failed(RRtconnectR+RCRRRTR/RtclientPostConnectionCheckRMRRNRORP(RR+R/RM((RRU�s

	










cCsti
|i|
�
dS(
N(Rtssl_set_shutdownRR	thow(RRX((Rtshutdown�s
c

Csti
|i�
S(s-Renegotiate this connection's SSL parameters.N(Rtssl_renegotiateRR	(
R((Rtrenegotiate�s

c

Csti
|i�
S(sKReturn the numbers of octets that can be read from the 
        connection.N(Rtssl_pendingRR	(
R((Rtpending�s
cCsti
|i|
|i�S(
N(Rt	ssl_writeRR	tdataR(RR_((Rt
_write_bio�s
cCsti
|i|
�S(
N(Rtssl_write_nbioRR	R_(RR_((Rt_write_nbio�s
icCs3|
d
j
o

t
d�n

ti|i|
|i�S(Nis	size <= 0(tsizeR=Rtssl_readRR	R(RRc((Rt	_read_bio�s




cCs-|
d
j
o

t
d�n

ti|i|
�S(Nis	size <= 0(RcR=Rt
ssl_read_nbioRR	(RRc((Rt
_read_nbio�s




cCs.|i
d
jo
|i|
�
Sn

|i|
�
S(Nf0.0(RRR`R_Rb(RR_((Rtwrite�s


cCs.|i
d
jo
|i|
�
Sn

|i|
�
S(Nf0.0(RRReRcRg(RRc((Rtread�s


cCs1|i
i|
�

|
o

d
|_n

d|_dS(s2Set this connection's underlying socket to _mode_.f-1.0f0.0N(RRtsetblockingR&R(RR&((RRj�s





cCs:|i
i|
�

|
|_|idjo

d
|_n

dS(s?Set this connection's underlying socket's timeout to _timeout_.f-1.0N(RRt
settimeoutttimeoutRR(RRl((RRk�s



	

c


Cs
|i
i�S(
N(RRR(
R((RR�s
c
Gst|ii|
�S(
N(tapplyRRt
getsockoptR(RR((RRn�s
c
Gst|ii|
�S(
N(RmRRRR(RR((RR�s
c

Csti
|i�
S(sGReturn the SSL.Context object associated with this 
        connection.N(Rtssl_get_ssl_ctxRR	(
R((Rtget_context�s
c

Csti
|i�
S(s(Return the SSL state of this connection.N(Rt
ssl_get_stateRR	(
R((Rt	get_state�s

c

Csti
|i�
tijS(
N(Rtssl_get_verify_resultRR	t	X509_V_OK(
R((Rt	verify_ok�s
c

Csti
|i�
S(s.Return the peer certificate verification mode.N(Rtssl_get_verify_modeRR	(
R((Rtget_verify_mode

s

c

Csti
|i�
S(s/Return the peer certificate verification depth.N(Rtssl_get_verify_depthRR	(
R((Rtget_verify_depth
s

c

Csti
|i�
S(s0Return the peer certificate verification result.N(RRsRR	(
R((Rtget_verify_result	
s

c
Cs7ti
|i�
}
|
djo
dSn

ti|
d
�S(s]Return the peer certificate; if the peer did not provide 
        a certificate, return None.i
N(Rtssl_get_peer_certRR	t
cRtX509(RR|((RRN

s




c
Cs4ti
|i�
}
|
d
jo
d
Sn

ti|
�
S(siReturn the peer certificate chain; if the peer did not provide 
        a certificate chain, return None.N(Rtssl_get_peer_cert_chainRR	R|RR}t
X509_Stack(RR|((Rtget_peer_cert_chain
s




c
Cs1ti
|i�
}
|
d
jo
d
Sn

t|
�
S(s�Return an M2Crypto.SSL.Cipher object for this connection; if the 
        connection has not been initialised with a cipher suite, return None.N(Rtssl_get_current_cipherRR	R|RtCipher(RR|((Rt
get_cipher
s




c
Cs1ti
|i�
}
|
d
jo
d
Sn

t|
�
S(s�Return an M2Crypto.SSL.Cipher_Stack object for this connection; if the
        connection has not been initialised with cipher suites, return None.N(Rtssl_get_ciphersRR	R|RtCipher_Stack(RR|((Rtget_ciphers(
s




icCsti
|i|
�S(s@Return the cipher suites for this connection as a string object.N(Rtssl_get_cipher_listRR	tidx(RR�((Rtget_cipher_list1
s

cCsti
|i|
�S(s*Set the cipher suites for this connection.N(Rtssl_set_cipher_listRR	tcipher_list(RR�((Rtset_cipher_list5
s

trbi����cCsti
||
|�S(
N(Rt_fileobjectRR&tbufsize(RR&R�((Rtmakefile9
s
c


Cs
|i
i�S(
N(RRtgetsockname(
R((RR�<
s
c


Cs
|i
i�S(
N(RRtgetpeername(
R((RR�?
s
cCs?ti
|i|
�}|p
ttiti��
�
�
n

dS(
N(	Rtssl_set_session_id_contextRR	tidR/tSSLErrorterr_reason_error_stringt
err_get_error(RR�R/((Rtset_session_id_ctxB
s


c
Csti
|i�
}
t|
�
S(
N(Rtssl_get_sessionRR	tsesstSession(RR�((Rtget_sessionG
s

cCsti
|i|
i��
dS(
N(Rtssl_set_sessionRR	tsessionR2(RR�((Rtset_sessionK
s
c

Csti
|i�
S(
N(Rtssl_get_default_session_timeoutRR	(
R((Rtget_default_session_timeoutN
s
c

Cs%ti
|iititid
��
S(Ni(Rltstruct_to_timeoutRRRnRtSO_RCVTIMEO(
R((Rtget_socket_read_timeoutQ
s
c

Cs%ti
|iititid
��
S(Ni(RlR�RRRnRtSO_SNDTIMEO(
R((Rtget_socket_write_timeoutT
s
cCs@t|
ti�p
t�

|iititi|
i	��
dS(
N(
t
isinstancettimeoRltAssertionErrorRRRRR�tpack(RR�((Rtset_socket_read_timeoutW
s

cCs@t|
ti�p
t�

|iititi|
i	��
dS(
N(
R�R�RlR�RRRRR�R�(RR�((Rtset_socket_write_timeout[
s

c

Csti
|i�
S(s8Return the TLS/SSL protocol version for this connection.N(Rtssl_get_versionRR	(
R((Rtget_version_
s

cCs
|
|_dS(
N(RJR(RRJ((RRc
s
(Ot__name__t
__module__t__doc__RORVRRLRtbio_freeRtssl_freeRRRtAF_INETRR!R R$R'R)R*R,R.R4R7R9R:R>RCRERGRIRKRRRTRURYR[R]R`RbReRgRhtsendalltsendRitrecvRjRkRRnRRpRrRuRwRyRzRNR�R�R�R�R�R�R�R�R�R�R�R�R�R�R�R�R�R(((RRs�
	
												
				
													
																															(R�RR�R�R�tM2CryptotBIOR}RRlROtM2Crypto.SSLR�RR(R�RR�R}RRROR�R�RlRR�((Rt
?s