o ?8¾\Eã@s†ddlZddlZzddlmZWn eydd„ZYnwejddkr(eZndd„ZGdd„deƒZ dd d „Z d d „Z dd„Z dS)éN)Ú ip_addresscCsdS©N©)ÚaddressrrúL/var/www/html/env/lib/python3.10/site-packages/pymongo/ssl_match_hostname.pyÚ órécCs|Srr)Úvaluerrrrrc@s eZdZdS)ÚCertificateErrorN)Ú__name__Ú __module__Ú __qualname__rrrrr sr éc Csòg}|sdS| d¡}|d}|dd…}| d¡}||kr&tdt|ƒƒ‚|s0| ¡| ¡kS|dkr:| d¡n| d ¡sD| d ¡rM| t |¡¡n | t |¡  d d ¡¡|D] }| t |¡¡q[t  d d   |¡dtj ¡} |   |¡S)zhMatching according to RFC 6125, section 6.4.3 http://tools.ietf.org/html/rfc6125#section-6.4.3 FÚ.rrNÚ*z,too many wildcards in certificate DNS name: z[^.]+zxn--z\*z[^.]*z\Az\.z\Z)ÚsplitÚcountr ÚreprÚlowerÚappendÚ startswithÚreÚescapeÚreplaceÚcompileÚjoinÚ IGNORECASEÚmatch) ÚdnÚhostnameÚ max_wildcardsÚpatsÚpartsÚleftmostÚ remainderÚ wildcardsÚfragÚpatrrrÚ_dnsname_matchs,    ÿ  r)cCstt|ƒ ¡ƒ}||kS)zˆExact matching of IP addresses. RFC 6125 explicitly doesn't define an algorithm for this (section 1.7.2 - "Out of Scope"). )rÚ_unicodeÚrstrip)ÚipnameÚhost_ipÚiprrrÚ_ipaddress_matchKsr/c CsD|stdƒ‚ztt|ƒƒ}Wn ttfyd}Ynwg}| dd¡}|D]/\}}|dkr@|dur:t||ƒr:dS| |¡q&|dkrU|durPt||ƒrPdS| |¡q&|sz| dd¡D]}|D]\}}|dkrxt||ƒrsdS| |¡qbq^t|ƒd krŽt d |d   t t |ƒ¡fƒ‚t|ƒd kržt d ||d fƒ‚t dƒ‚)z÷Verify that *cert* (in decoded format as returned by SSLSocket.getpeercert()) matches the *hostname*. RFC 2818 and RFC 6125 rules are followed. CertificateError is raised on failure. On success, the function returns nothing. ztempty or no certificate, match_hostname needs a SSL socket or SSL context with either CERT_OPTIONAL or CERT_REQUIREDNÚsubjectAltNamerÚDNSz IP AddressÚsubjectÚ commonNamerz&hostname %r doesn't match either of %sz, zhostname %r doesn't match %rrz=no appropriate commonName or subjectAltName fields were found) Ú ValueErrorrr*Ú UnicodeErrorÚgetr)rr/Úlenr rÚmapr)Úcertr r-ÚdnsnamesÚsanÚkeyr ÚsubrrrÚmatch_hostnameVsJþ    €   €ú þ  þr>)r) rÚsysÚ ipaddressrÚ ImportErrorÚ version_infoÚunicoder*r4r r)r/r>rrrrÚs  ÿ 3