U •uÄc;5ã@sÜddlZddlZddlZddlmZmZmZmZddlm Z ddl m Z m Z ddl mZmZddlmZzddlmZWnek r”edƒZYnXzddl mZd ZWn ek rÊd ZedƒZYnXz,dd l mZdd lmZdd lmZd ZWnek rd ZYnXdZddd„Zeeefe dœdd„Z!es`de"e#ee ee$dœdd„Z%nd e"e#ee ee$dœdd„Z%es¢e"eee efdœdd„Z&neeee efdœdd„Z&eeefe#edœdd„Z'dS)!éN)ÚOptionalÚUnionÚDictÚAny)ÚDeferred)Ú IPv4AddressÚ UNIXAddress)Ú ITransportÚIProcessTransport)ÚTransportDetails)Ú PipeAddress)Ú IPv6AddressTF)Ú ISSLTransport)ÚTLSMemoryBIOProtocol)Ú Connection)ÚsleepÚpeer2strÚtransport_channel_idÚextract_peer_certificateÚcreate_transport_detailscCs*|sddlm}tƒ}| ||jd¡|S)aD Inline sleep for use in co-routines (Twisted ``inlineCallback`` decorated functions). .. seealso:: * `twisted.internet.defer.inlineCallbacks `__ * `twisted.internet.interfaces.IReactorTime `__ :param delay: Time to sleep in seconds. :type delay: float :param reactor: The Twisted reactor to use. :type reactor: None or provider of ``IReactorTime``. r)ÚreactorN)Útwisted.internetrrZ callLaterÚcallback)ÚdelayrÚd©rúW/var/www/html/NKSPORTS/school/venv/lib/python3.8/site-packages/autobahn/twisted/util.pyrDs  r)Ú transportÚreturncCs²t |¡rd |j¡}n–t |¡rª| ¡}t|tƒrFd |j|j ¡}q®t rft|t ƒrfd |j|j ¡}q®t|t ƒrŠ|j r„d |j ¡}q¨d}q®t|tƒr¤d t ¡¡}q®d}nd}|S)a• Return a *peer descriptor* given a Twisted transport, for example: * ``tcp4:127.0.0.1:52914``: a TCPv4 socket * ``unix:/tmp/server.sock``: a Unix domain socket * ``process:142092``: a Pipe originating from a spawning (parent) process * ``pipe``: a Pipe terminating in a spawned (child) process :returns: Returns a string representation of the peer of the Twisted transport. z process:{}z tcp4:{0}:{1}z tcp6:{0}:{1}zunix:{0}Úunixz process:{0}Úunknown)r Ú providedByÚformatÚpidr ZgetPeerÚ isinstancerÚhostÚportÚ _HAS_IPV6r rÚnamer ÚosÚgetppid)rÚresÚaddrrrrrXs"     r)rÚ is_serverÚchannel_id_typercCs|dkr dStd |¡ƒ‚dS)Nó zUcannot determine TLS channel ID of type "{}" when TLS is not available on this system)Ú RuntimeErrorr")rr-r.rrrr€srcCsº|dkr dS|dkr"td |¡ƒ‚t|tƒs@td |t|ƒ¡ƒ‚| ¡}|rVt|tƒsZt‚d}|dkr¨||krx| ¡}n|  ¡}|dkrŒdSt   ¡}|  |¡|  ¡Sntd |¡ƒ‚dS) a( Return TLS channel ID of WAMP transport of the given TLS channel ID type. Application-layer user authentication protocols are vulnerable to generic credential forwarding attacks, where an authentication credential sent by a client C to a server M may then be used by M to impersonate C at another server S. To prevent such credential forwarding attacks, modern authentication protocols rely on channel bindings. For example, WAMP-cryptosign can use the tls-unique channel identifier provided by the TLS layer to strongly bind authentication credentials to the underlying channel, so that a credential received on one TLS channel cannot be forwarded on another. :param transport: The Twisted TLS transport to extract the TLS channel ID from. If the transport isn't TLS based, and non-empty ``channel_id_type`` is requested, ``None`` will be returned. If the transport is indeed TLS based, an empty ``channel_id_type`` of ``None`` is requested, 32 NUL bytes will be returned. :param is_server: Flag indicating that the transport is a server transport. :param channel_id_type: TLS channel ID type, if set currently only ``"tls-unique"`` is supported. :returns: The TLS channel ID (32 bytes). Nr/)ú tls-uniquez*invalid TLS channel ID type "{}" requestedz[cannot determine TLS channel ID of type "{}" when TLS is not available on this transport {}Tr1z7should not arrive here (unhandled channel_id_type "{}"))r0r"r$rÚtypeZ getHandlerÚAssertionErrorZget_peer_finishedZ get_finishedÚhashlibÚsha256ÚupdateÚdigestÚNotImplementedError)rr-r.Z connectionZis_not_resumedZtls_finished_msgÚmrrrr†s0 ÿÿ   cCsdS)z~ Dummy when no TLS is available. :param transport: Ignored. :return: Always return ``None``. Nr)rrrrrÈsrc Csˆt |¡rt|dƒsdS| ¡}|r„dd„}d || d¡ƒ¡ ¡d || d¡ƒ¡ ¡d || d¡ƒ¡ ¡t| ¡ƒ||  ¡ƒt |  ¡ƒ||  ¡ƒt |  ¡ƒ|| ¡ƒ|| ¡ƒgd œ }t| ¡ƒD]H}| |¡}d || ¡ƒ¡d ||ƒ¡| ¡d kd œ}|d  |¡qÊd | ¡fd| ¡ffD]R\}}i||<| ¡D]6\} } || ƒ} || ƒ} d | ¡||d | ¡ ¡<qDq,|SdS)a« Extract TLS x509 client certificate information from a Twisted stream transport, and return a dict with x509 TLS client certificate information (if the client provided a TLS client certificate). :param transport: The secure transport from which to extract the peer certificate (if present). :returns: If the peer provided a certificate, the parsed certificate information set. ÚgetPeerCertificateNcSst|tƒr| d¡S|SdS)NÚutf8)r$ÚbytesÚdecode)Ú_valuerrrÚ maybe_bytesás  z-extract_peer_certificate..maybe_bytesz{}Úmd5Úsha1r5) r@rAr5ZexpiredÚhashÚserialZsignature_algorithmÚversionZ not_beforeZ not_afterÚ extensionsr)r(ÚvalueÚcriticalrEÚsubjectZissuer)rr!Úhasattrr:r"r7ÚupperÚboolZ has_expiredZsubject_name_hashÚintZget_serial_numberZget_signature_algorithmÚ get_versionZ get_notBeforeZ get_notAfterÚrangeZget_extension_countÚ get_extensionZget_short_nameZ get_criticalÚappendZ get_subjectZ get_issuerZget_componentsÚlower) rÚcertr?ÚresultÚiÚextZext_infoÚentityr(ÚkeyrFrrrrÑs>        õ   ý $)rr-rc Csšt|ƒ}t ¡}ttdƒr$t ¡}nt ¡}d}trbt  |¡rbdt ||dƒi}t j }t |ƒ}d} ni}t j}d}d} t j} t || |||||| ||d } | S)aB Create transport details from Twisted transport. :param transport: The Twisted transport to extract information from. :param is_server: Flag indicating whether this transport side is a "server" (as in TCP server). :return: Transport details object filled with information from the Twisted transport. Ú get_native_idéÿÿÿÿr1TNF) Ú channel_typeÚchannel_framingÚpeerr-Úown_pidÚown_tidÚown_fdÚ is_secureÚ channel_idÚ peer_cert)rr)ÚgetpidrIÚ threadingrXÚ get_identÚ_HAS_TLSrr!rr ZCHANNEL_TYPE_TLSrZCHANNEL_TYPE_TCPZCHANNEL_FRAMING_WEBSOCKET) rr-r\r]r^r_rarZrbr`r[Útdrrrrs8   þþr)N)N)N)(r)r4rdÚtypingrrrrZtwisted.internet.deferrZtwisted.internet.addressrrZtwisted.internet.interfacesr r Zautobahn.wamp.typesr Ztwisted.internet.stdior Ú ImportErrorr2r r'rZtwisted.protocols.tlsrZ OpenSSL.SSLrrfZ__allrÚstrrÚobjectrKr<rrrrrrrÚsD        ' A 7