o .j@sddlmZddlZddlZddlZddlmZddlmZm Z ddl m Z ddl mZmZddlmZd d lmZmZmZmZmZGd d d ZGd ddeZeZ                   d2d3d0d1ZdS)4) annotationsN)Path)ssl IS_NONSTDLIB)load_cert_chain) AsyncSocketSSLAsyncSocket)SSLError)ALPN_PROTOCOLS_CacheableSSLContext_is_key_file_encryptedcreate_urllib3_context _KnownCallerc@s eZdZdddZd ddZdS) DummyLockreturncCs|SN)selfrrT/home/thesage/.local/lib/python3.10/site-packages/urllib3_future/util/_async/ssl_.py __enter__zDummyLock.__enter__NonecCsdSrr)rexc_typeexc_valexc_tbrrr__exit__rzDummyLock.__exit__N)rr)rr)__name__ __module__ __qualname__rrrrrrrs rcs$eZdZdZddfdd ZZS) _NoLock_CacheableSSLContextzrDeprecated: we no longer avoid the lock in the async part because we want to allow many loop within many thread... maxsize int | Nonecstj|dt|_dS)N)r#)super__init__r_lock)rr# __class__rrr&!s z$_NoLock_CacheableSSLContext.__init__)r")r#r$)rrr __doc__r& __classcell__rrr(rr!sr!Fsockrkeyfile str | Nonecertfile cert_reqsr$ca_certsserver_hostname ssl_versionciphers ssl_contextssl.SSLContext | None ca_cert_dir key_password ca_cert_dataNone | str | bytes tls_in_tlsboolalpn_protocolslist[str] | Nonecertdatastr | bytes | Nonekeydatacheck_hostname bool | Nonessl_minimum_versionssl_maximum_versionech_config_list bytes | Nonerr cs|}|du}t||dur|nt|||||| dur| nt| | ||| | tdd||||s7tnd}|dur+|durMt|||tj||d}|durT||_ |dur[||_ |sa| sa| r| rlt | t rl| } z ||| | Wn4ty}zt||d}~wwt|drz|}d|vs|ds|Wn ttfyYnw|r| durt|rtd|r| dur|||n@|||| n8|r|rtr|||| n(z t|||| Wntjy}ztd|dtWYd}~nd}~wwz || p t Wn tyYnw|r"|!||s*t"|n|}Wdn 1s8wY|rKt|d rK|#|}|j$||d IdHS) aJ All arguments except for server_hostname, ssl_context, and ca_cert_dir have the same meaning as they do when using :func:`ssl.wrap_socket`. :param server_hostname: When SNI is supported, the expected hostname of the certificate :param ssl_context: A pre-made :class:`SSLContext` object. If none is provided, one will be created using :func:`create_urllib3_context`. :param ciphers: A string of ciphers we wish the client to support. :param ca_cert_dir: A directory containing CA certificates in multiple separate files, as supported by OpenSSL's -CApath flag or the capath argument to SSLContext.load_verify_locations(). :param key_password: Optional password if the keyfile is encrypted. :param ca_cert_data: Optional string containing CA certificates in PEM format suitable for passing as the cadata parameter to SSLContext.load_verify_locations() :param tls_in_tls: No-op in asynchronous mode. Call wrap_socket of the SSLAsyncSocket later. :param alpn_protocols: Manually specify other protocols to be announced during tls handshake. :param certdata: Specify an in-memory client intermediary certificate for mTLS. :param keydata: Specify an in-memory client intermediary key for mTLS. N SSLKEYLOGFILE)r4 caller_idrDrEload_default_certsx509_caz5Client private key is encrypted, password is requiredzdPassing in-memory client/intermediary certificate for mTLS is unsupported on your platform. Reason: zr. It will be picked out if you upgrade to a QUIC connection or if you install alternative ssl backend (rtls/utls).set_ech_configs)r2)%_SSLContextCachelockrosgetenvgetrrNIQUESTS verify_moderB isinstancebytesdecodeload_verify_locationsOSErrorr hasattrcert_store_statsrJAttributeErrorNotImplementedErrorrrr_ctx_load_cert_chainioUnsupportedOperationwarningswarn UserWarningset_alpn_protocolsr set_cipherssaverL wrap_socket)r,r-r/r0r1r2r3r4r5r7r8r9r;r=r?rArBrDrErFcontextcache_disabled cached_ctxe store_statsrrrssl_wrap_socket)s3            c rl)NNNNNNNNNNNFNNNNNNN)*r,rr-r.r/r.r0r$r1r.r2r.r3r$r4r.r5r6r7r.r8r.r9r:r;r<r=r>r?r@rAr@rBrCrDr$rEr$rFrGrr ) __future__rr^rOr`pathlibrcontrib.anytlsrr contrib.imccrr] contrib.ssarr exceptionsr ssl_r r rrrrr!rMrlrrrrsB