o èó·i;5ã @sæddlZddlZddlZddlmZmZmZmZddlm Z ddl m Z m Z ddl mZmZddlmZzddlmZWn eyIedƒZYnwz ddl mZd ZWneycd ZedƒZYnwzdd l mZdd lmZdd lmZd ZWn ey…d ZYnwdZddd„Zdeeefde fdd„Z!es¯dde"de#dee dee$fdd„Z%ndde"de#dee dee$fdd„Z%esÓde"deee effdd„Z&ndedeee effdd„Z&deeefde#defdd„Z'dS) éN)ÚOptionalÚUnionÚDictÚAny)ÚDeferred)Ú IPv4AddressÚ UNIXAddress)Ú ITransportÚIProcessTransport)ÚTransportDetails)Ú PipeAddress)Ú IPv6AddressTF)Ú ISSLTransport)ÚTLSMemoryBIOProtocol)Ú Connection)ÚsleepÚpeer2strÚtransport_channel_idÚextract_peer_certificateÚcreate_transport_detailscCs*|sddlm}tƒ}| ||jd¡|S)aD Inline sleep for use in co-routines (Twisted ``inlineCallback`` decorated functions). .. seealso:: * `twisted.internet.defer.inlineCallbacks `__ * `twisted.internet.interfaces.IReactorTime `__ :param delay: Time to sleep in seconds. :type delay: float :param reactor: The Twisted reactor to use. :type reactor: None or provider of ``IReactorTime``. r)ÚreactorN)Ztwisted.internetrrZ callLaterÚcallback)ÚdelayrÚd©rú[C:\Users\psant\Downloads\PAF backend\school\venv\Lib\site-packages\autobahn/twisted/util.pyrDs  rÚ transportÚreturncCsÀt |¡r d |j¡}|St |¡r\| ¡}t|tƒr%d |j|j ¡}|St r6t|t ƒr6d |j|j ¡}|St|t ƒrJ|j rFd |j ¡}|Sd}|St|tƒrXd t ¡¡}|Sd}|Sd}|S) a• Return a *peer descriptor* given a Twisted transport, for example: * ``tcp4:127.0.0.1:52914``: a TCPv4 socket * ``unix:/tmp/server.sock``: a Unix domain socket * ``process:142092``: a Pipe originating from a spawning (parent) process * ``pipe``: a Pipe terminating in a spawned (child) process :returns: Returns a string representation of the peer of the Twisted transport. z process:{}z tcp4:{0}:{1}z tcp6:{0}:{1}zunix:{0}Úunixz process:{0}ÚunknownN)r Ú providedByÚformatÚpidr ZgetPeerÚ isinstancerÚhostÚportÚ _HAS_IPV6r rÚnamer ÚosÚgetppid)rÚresÚaddrrrrrXs0  ë ï ñ  õ öüÿrÚ is_serverÚchannel_id_typecCs|durdStd |¡ƒ‚)Nó zUcannot determine TLS channel ID of type "{}" when TLS is not available on this system)Ú RuntimeErrorr!)rr,r-rrrr€srcCs´|durdS|dvrtd |¡ƒ‚t|tƒs td |t|ƒ¡ƒ‚| ¡}|r+t|tƒs-J‚d}|dkrS||kr<| ¡}n| ¡}|durFdSt   ¡}|  |¡|  ¡St d |¡ƒ‚) a( Return TLS channel ID of WAMP transport of the given TLS channel ID type. Application-layer user authentication protocols are vulnerable to generic credential forwarding attacks, where an authentication credential sent by a client C to a server M may then be used by M to impersonate C at another server S. To prevent such credential forwarding attacks, modern authentication protocols rely on channel bindings. For example, WAMP-cryptosign can use the tls-unique channel identifier provided by the TLS layer to strongly bind authentication credentials to the underlying channel, so that a credential received on one TLS channel cannot be forwarded on another. :param transport: The Twisted TLS transport to extract the TLS channel ID from. If the transport isn't TLS based, and non-empty ``channel_id_type`` is requested, ``None`` will be returned. If the transport is indeed TLS based, an empty ``channel_id_type`` of ``None`` is requested, 32 NUL bytes will be returned. :param is_server: Flag indicating that the transport is a server transport. :param channel_id_type: TLS channel ID type, if set currently only ``"tls-unique"`` is supported. :returns: The TLS channel ID (32 bytes). Nr.)ú tls-uniquez*invalid TLS channel ID type "{}" requestedz[cannot determine TLS channel ID of type "{}" when TLS is not available on this transport {}Tr0z7should not arrive here (unhandled channel_id_type "{}"))r/r!r#rÚtypeZ getHandlerZget_peer_finishedZ get_finishedÚhashlibÚsha256ÚupdateÚdigestÚNotImplementedError)rr,r-Ú connectionZis_not_resumedZtls_finished_msgÚmrrrr†s. ÿÿ  cCsdS)z~ Dummy when no TLS is available. :param transport: Ignored. :return: Always return ``None``. Nr)rrrrrÈsrc Cs‚t |¡r t|dƒs dS| ¡}|r¿dd„}d || d¡ƒ¡ ¡d || d¡ƒ¡ ¡d || d¡ƒ¡ ¡t| ¡ƒ||  ¡ƒt |  ¡ƒ||  ¡ƒt |  ¡ƒ|| ¡ƒ|| ¡ƒgd œ }t| ¡ƒD]$}| |¡}d || ¡ƒ¡d ||ƒ¡| ¡d kd œ}|d  |¡qdd | ¡fd| ¡ffD]'\}}i||<| ¡D]\} } || ƒ} || ƒ} d | ¡||d | ¡ ¡<q¡q•|SdS)a« Extract TLS x509 client certificate information from a Twisted stream transport, and return a dict with x509 TLS client certificate information (if the client provided a TLS client certificate). :param transport: The secure transport from which to extract the peer certificate (if present). :returns: If the peer provided a certificate, the parsed certificate information set. ÚgetPeerCertificateNcSst|tƒr | d¡S|S)NÚutf8)r#ÚbytesÚdecode)Ú_valuerrrÚ maybe_bytesás  z-extract_peer_certificate..maybe_bytesz{}Úmd5Úsha1r3) r?r@r3ZexpiredÚhashÚserialZsignature_algorithmÚversionZ not_beforeZ not_afterÚ extensionsr)r'ÚvalueÚcriticalrDÚsubjectZissuer)rr Úhasattrr9r!r5ÚupperÚboolZ has_expiredZsubject_name_hashÚintZget_serial_numberZget_signature_algorithmÚ get_versionZ get_notBeforeZ get_notAfterÚrangeZget_extension_countÚ get_extensionZget_short_nameZ get_criticalÚappendZ get_subjectZ get_issuerZget_componentsÚlower) rÚcertr>ÚresultÚiÚextZext_infoÚentityr'ÚkeyrErrrrÑsB        õ   ý ýÚc Csšt|ƒ}t ¡}ttdƒrt ¡}nt ¡}d}tr1t  |¡r1dt ||dƒi}t j }t |ƒ}d} n i}t j}d}d} t j} t || |||||| ||d } | S)aB Create transport details from Twisted transport. :param transport: The Twisted transport to extract information from. :param is_server: Flag indicating whether this transport side is a "server" (as in TCP server). :return: Transport details object filled with information from the Twisted transport. Ú get_native_idéÿÿÿÿr0TNF) Ú channel_typeÚchannel_framingÚpeerr,Úown_pidÚown_tidÚown_fdÚ is_secureÚ channel_idÚ peer_cert)rr(ÚgetpidrHÚ threadingrWÚ get_identÚ_HAS_TLSrr rr ZCHANNEL_TYPE_TLSrZCHANNEL_TYPE_TCPZCHANNEL_FRAMING_WEBSOCKET) rr,r[r\r]r^r`rYrar_rZÚtdrrrrs,   þþr)N)(r(r2rcÚtypingrrrrZtwisted.internet.deferrZtwisted.internet.addressrrZtwisted.internet.interfacesr r Zautobahn.wamp.typesr Ztwisted.internet.stdior Ú ImportErrorr1r r&rZtwisted.protocols.tlsrZ OpenSSL.SSLrreZ__allrÚstrrÚobjectrJr;rrrrrrrÚsL    þ   þ    ÿ '&$A  "7