
    g1                       S SK Jr  S SKrS SKrS SKrS SKrS SKJrJr  S SK	J
r
  S SKJr  S SKJrJr  SSKJrJrJrJr  SS	KJrJr  SS
KJrJrJrJr  \R:                  S:  a	  S SKJrJr  OS SK JrJr  \" S5      r!\" S5      r"\#\#\$\$4   S4   r%\#\%S4   r& " S S\5      r'\
" SS9 " S S\5      5       r(\
" SS9 " S S\\(   5      5       r)g)    )annotationsN)CallableMapping)	dataclass)wraps)AnyTypeVar   )BrokenResourceErrorEndOfStreamaclose_forcefullyget_cancelled_exc_class)TypedAttributeSettyped_attribute)AnyByteStream
ByteStreamListener	TaskGroup)      )TypeVarTupleUnpackT_RetvalPosArgsT.c                  
   \ rS rSr% Sr\" 5       rS\S'   \" 5       rS\S'   \" 5       r	S\S'   \" 5       r
S	\S
'   \" 5       rS\S'   \" 5       rS\S'   \" 5       rS\S'   \" 5       rS\S'   \" 5       rS\S'   \" 5       rS\S'   Srg)TLSAttribute    z5Contains Transport Layer Security related attributes.
str | Nonealpn_protocolbyteschannel_binding_tls_uniqueztuple[str, str, int]cipherz*None | dict[str, str | _PCTRTTT | _PCTRTT]peer_certificatezbytes | Nonepeer_certificate_binaryboolserver_sidez!list[tuple[str, str, int]] | Noneshared_ciphersssl.SSLObject
ssl_objectstandard_compatiblestrtls_version N)__name__
__module____qualname____firstlineno____doc__r   r   __annotations__r!   r"   r#   r$   r&   r'   r)   r*   r,   __static_attributes__r-       J/home/matz/Project1/venv/lib/python3.13/site-packages/anyio/streams/tls.pyr   r       s    ? !0 1M:1(7(99#2#4F 4 FUEVBV,;,=\=')K) 9H8IN5I / 1J1 !0 11&(K(r5   r   F)eqc                      \ rS rSr% SrS\S'   S\S'   S\S'   S	\S
'   S	\S'   \SSSSS.           SS jj5       r      SS jrSS jr	SS jr
SSS jjrSS jrSS jr\SS j5       rSrg) 	TLSStream<   a  
A stream wrapper that encrypts all sent data and decrypts received data.

This class has no public initializer; use :meth:`wrap` instead.
All extra attributes from :class:`~TLSAttribute` are supported.

:var AnyByteStream transport_stream: the wrapped stream

r   transport_streamr%   r*   r(   _ssl_objectzssl.MemoryBIO	_read_bio
_write_bioNT)r&   hostnamessl_contextr*   c                 #    Uc  U(       + nU(       d  U(       a  [         R                  R                  O[         R                  R                  n[         R                  " U5      n[        [         S5      (       a$  U=R                  [         R                  ) -  sl        [         R                  " 5       n[         R                  " 5       nUR                  XxX#S9n	U " UUU	UUS9n
U
R                  U	R                  5      I Sh  vN   U
$  N7f)a\  
Wrap an existing stream with Transport Layer Security.

This performs a TLS handshake with the peer.

:param transport_stream: a bytes-transporting stream to wrap
:param server_side: ``True`` if this is the server side of the connection,
    ``False`` if this is the client side (if omitted, will be set to ``False``
    if ``hostname`` has been provided, ``False`` otherwise). Used only to create
    a default context when an explicit context has not been provided.
:param hostname: host name of the peer (if host name checking is desired)
:param ssl_context: the SSLContext object to use (if not provided, a secure
    default will be created)
:param standard_compatible: if ``False``, skip the closing handshake when
    closing the connection, and don't raise an exception if the peer does the
    same
:raises ~ssl.SSLError: if the TLS handshake fails

NOP_IGNORE_UNEXPECTED_EOF)r&   server_hostname)r;   r*   r<   r=   r>   )sslPurposeCLIENT_AUTHSERVER_AUTHcreate_default_contexthasattroptionsrB   	MemoryBIOwrap_bio_call_sslobject_methoddo_handshake)clsr;   r&   r?   r@   r*   purposebio_inbio_outr)   wrappers              r6   wrapTLSStream.wrapN   s     : &,K+6''CKK<S<S  44W=K s677##(D(D'DD#--/ )) * 

 - 3"
 ,,Z-D-DEEE 	Fs   C>D	 DD	c                  #      U" U6 nU R                   R                  (       a;  U R                  R                  U R                   R	                  5       5      I S h  vN   U$  N! [
        R                   Ga     U R                   R                  (       a<  U R                  R                  U R                   R	                  5       5      I S h  vN    U R                  R                  5       I S h  vN  nU R                  R                  U5         GO! [         a    U R                  R                  5           GO[         a@  nU R                  R                  5         U R                   R                  5         [        UeS nAff = f[
        R                   a@    U R                  R                  U R                   R	                  5       5      I S h  vN     GO[
        R                   a@  nU R                  R                  5         U R                   R                  5         [        UeS nAf[
        R                    a  nU R                  R                  5         U R                   R                  5         [#        U[
        R$                  5      (       d!  UR&                  (       a/  SUR&                  ;   a  U R(                  (       a  [        Ue[        S ee S nAff = fGM  7f)NUNEXPECTED_EOF_WHILE_READING)r>   pendingr;   sendreadrD   SSLWantReadErrorreceiver=   writer   	write_eofOSErrorr   SSLWantWriteErrorSSLSyscallErrorSSLError
isinstanceSSLEOFErrorstrerrorr*   )selffuncargsresultdataexcs         r6   rM    TLSStream._call_sslobject_method   s     (tH ??**//44T__5I5I5KLLL MI '' //.."33889M9M9OPPP!%!6!6!>!>!@@@D NN((. # /NN,,.. 7NN,,.OO--/-367 (( I++001E1E1GHHH&& 3((*))+)s2<< ((*))+c3??33LL%Cs||%S//1s:)t31 s   KA$ AKA"K$K:ADC"D.C1/D4KK$F6K7K:	F;E>>FAKGKKK+;H&&K=BKKKc                  #    U R                  U R                  R                  5      I Sh  vN   U R                  R	                  5         U R
                  R	                  5         U R                  U R                  R                  5       4$  N^7f)zl
Does the TLS closing handshake.

:return: a tuple of (wrapped byte stream, bytes left in the read buffer)

N)rM   r<   unwrapr=   r^   r>   r;   rZ   rf   s    r6   rn   TLSStream.unwrap   sk      ))$*:*:*A*ABBB  "!!#$$dnn&9&9&;;; 	Cs   )BB
ABc                  #    U R                   (       a   U R                  5       I S h  vN   U R                  R                  5       I S h  vN   g  N'! [         a     [        U R                  5      I S h  vN    e f = f N47fN)r*   rn   BaseExceptionr   r;   aclosero   s    r6   rt   TLSStream.aclose   sl     ##kkm##
 ##**,,, $  '(=(=>>> 	-sC   BA AA B
A?BA "A<4A75A<<Bc                   #    U R                  U R                  R                  U5      I S h  vN nU(       d  [        eU$  N7frr   )rM   r<   rZ   r   )rf   	max_bytesrj   s      r6   r\   TLSStream.receive   s:     001A1A1F1F	RR	 Ss   *AA Ac                l   #    U R                  U R                  R                  U5      I S h  vN   g  N7frr   )rM   r<   r]   )rf   items     r6   rY   TLSStream.send   s'     ))$*:*:*@*@$GGGs   *424c                <  #    U R                  [        R                  5      n[        R                  " SU5      nU(       aQ  [        UR                  S5      5      [        UR                  S5      =(       d    S5      pCX44S:  a  [        SU 35      e[        S5      e7f)NzTLSv(\d+)(?:\.(\d+))?   r
   r   )r}   r   z;send_eof() requires at least TLSv1.3; current session uses z7send_eof() has not yet been implemented for TLS streams)extrar   r,   rematchintgroupNotImplementedError)rf   r,   r   majorminors        r6   send_eofTLSStream.send_eof   s     jj!9!9:1;?u{{1~.EKKN4Ga0H5~&)$$/=2 
 "E
 	
s   BBc                H  ^  0 T R                   R                  E[        R                  T R                  R
                  [        R                  T R                  R                  [        R                  T R                  R                  [        R                  U 4S j[        R                  U 4S j[        R                  U 4S j[        R                  U 4S j[        R                  U 4S j[        R                  U 4S j[        R                  T R                  R                   0
E$ )Nc                 :   > T R                   R                  S5      $ )NFr<   getpeercertro   s   r6   <lambda>,TLSStream.extra_attributes.<locals>.<lambda>   s    43C3C3O3OPU3Vr5   c                 :   > T R                   R                  S5      $ )NTr   ro   s   r6   r   r      s    $:J:J:V:V;r5   c                 0   > T R                   R                  $ rr   )r<   r&   ro   s   r6   r   r      s    d.>.>.J.Jr5   c                 r   > T R                   R                  (       a  T R                   R                  5       $ S $ rr   )r<   r&   r'   ro   s   r6   r   r      s3    ++ 261A1A1P1P1R 22r5   c                    > T R                   $ rr   r*   ro   s   r6   r   r          d6N6Nr5   c                    > T R                   $ rr   )r<   ro   s   r6   r   r      s    T-=-=r5   )r;   extra_attributesr   r   r<   selected_alpn_protocolr!   get_channel_bindingr"   r#   r$   r&   r'   r*   r)   r,   versionro   s   `r6   r   TLSStream.extra_attributes   s    
##44
&&(8(8(O(O33  44!1!1!8!8))+V00 3 $$&J'' * ,,.N##%=$$d&6&6&>&>#
 	
r5   r-   )r;   r   r&   zbool | Noner?   r   r@   zssl.SSLContext | Noner*   r%   returnr9   )rg   z&Callable[[Unpack[PosArgsT]], T_Retval]rh   zUnpack[PosArgsT]r   r   )r   ztuple[AnyByteStream, bytes]r   None)i   )rw   r   r   r    )rz   r    r   r   r   zMapping[Any, Callable[[], Any]])r.   r/   r0   r1   r2   r3   classmethodrT   rM   rn   rt   r\   rY   r   propertyr   r4   r-   r5   r6   r9   r9   <   s     $#
 $(#-1$(6'6 !	6
 6 +6 "6 
6 6p,:,CS,	,\
<-H
 
 
r5   r9   c                      \ rS rSr% SrS\S'   S\S'   SrS\S	'   S
rS\S'   \SS j5       r	 S     SS jjr
SS jr\SS j5       rSrg)TLSListener   aj  
A convenience listener that wraps another listener and auto-negotiates a TLS session
on every accepted connection.

If the TLS handshake times out or raises an exception,
:meth:`handle_handshake_error` is called to do whatever post-mortem processing is
deemed necessary.

Supports only the :attr:`~TLSAttribute.standard_compatible` extra attribute.

:param Listener listener: the listener to wrap
:param ssl_context: the SSL context object
:param standard_compatible: a flag passed through to :meth:`TLSStream.wrap`
:param handshake_timeout: time limit for the TLS handshake
    (passed to :func:`~anyio.fail_after`)
zListener[Any]listenerzssl.SSLContextr@   Tr%   r*      floathandshake_timeoutc                  #    [        U5      I Sh  vN   [        U [        5       5      (       d(  [        R                  " [
        5      R                  SU S9  [        U [        5      (       a  [        U [        5       5      (       a  e g Nu7f)au  
Handle an exception raised during the TLS handshake.

This method does 3 things:

#. Forcefully closes the original stream
#. Logs the exception (unless it was a cancellation exception) using the
   ``anyio.streams.tls`` logger
#. Reraises the exception if it was a base exception or a cancellation exception

:param exc: the exception
:param stream: the original stream

NzError during TLS handshake)exc_info)r   rc   r   logging	getLoggerr.   	exception	Exception)rk   streams     r6   handle_handshake_error"TLSListener.handle_handshake_error  sz        ''' #6899
 h'11,s 2 
 #y))Z=T=V-W-W .X 	(s   B	BA6B	Nc                   ^ ^#    [        T5      SUU 4S jj5       nT R                  R                  X25      I S h  vN   g  N7f)Nc                `  >#    SSK Jn   U" TR                  5         [        R	                  U TR
                  TR                  S9I S h  vN nS S S 5        T" W5      I S h  vN   g  N! , (       d  f       N!= f N! [         a$  nTR                  X05      I S h  vN     S nAg S nAff = f7f)Nr
   )
fail_after)r@   r*   )	 r   r   r9   rT   r@   r*   rs   r   )r   r   wrapped_streamrk   handlerrf   s       r6   handler_wrapper*TLSListener.serve.<locals>.handler_wrapper8  s     %
. 6 67+4>>$($4$4,0,D,D ,: , &N 8 n---& 87 . ! ?11#>>>?su   B.A= -A*
A(A*A= B."A;#B.(A**
A84A= ;B.=
B+B&BB&!B.&B++B.)r   r   r   r   )r   r   serve)rf   r   
task_groupr   s   ``  r6   r   TLSListener.serve3  s8     
 
w	. 
	. mm!!/>>>s   6AA Ac                T   #    U R                   R                  5       I S h  vN   g  N7frr   )r   rt   ro   s    r6   rt   TLSListener.acloseJ  s     mm""$$$s   (&(c                0   ^  [         R                  U 4S j0$ )Nc                    > T R                   $ rr   r   ro   s   r6   r   .TLSListener.extra_attributes.<locals>.<lambda>P  r   r5   )r   r*   ro   s   `r6   r   TLSListener.extra_attributesM  s     ,,.N
 	
r5   r-   )rk   rs   r   r   r   r   rr   )r   zCallable[[TLSStream], Any]r   zTaskGroup | Noner   r   r   r   )r.   r/   r0   r1   r2   r3   r*   r   staticmethodr   r   rt   r   r   r4   r-   r5   r6   r   r      s}    "  $$!u! D (,?+? %? 
	?.% 
 
r5   r   )*
__future__r   r   r   rD   syscollections.abcr   r   dataclassesr   	functoolsr   typingr   r	   r   r   r   r   r   _core._typedattrr   r   abcr   r   r   r   version_infor   r   typing_extensionsr   r   tupler+   _PCTRTT_PCTRTTTr   r9   r   r-   r5   r6   <module>r      s    "  	 
 
 - !    B @ @w++6:
#
c3h$
%#)$ )8 e{

 {
 {
| eU
(9% U
 U
r5   