o >hc@sdZddlmZddlZddlZddlmZddlmZ ddl m Z m Z m Z mZeeddlmZdd lmZWdn1sDwYd gZddd ZdddZdddZdddZdS)zA `pyOpenSSL `_-specific code. ) annotationsN)Sequence)extract_patterns)DNS_IDCertificatePattern IPAddress_IDverify_service_identity)X509) Connectionverify_hostname connectionr hostnamestrreturnNonecC tt|t|ggddS)a; Verify whether the certificate of *connection* is valid for *hostname*. Args: connection: A pyOpenSSL connection object. hostname: The hostname that *connection* should be connected to. Raises: service_identity.VerificationError: If *connection* does not provide a certificate that is valid for *hostname*. service_identity.CertificateError: If certificate provided by *connection* contains invalid / unexpected data. This includes the case where the certificate contains no ``subjectAltName``\ s. .. versionchanged:: 24.1.0 :exc:`~service_identity.CertificateError` is raised if the certificate contains no ``subjectAltName``\ s instead of :exc:`~service_identity.VerificationError`.  cert_patternsobligatory_ids optional_idsN)r rget_peer_certificater)r rrz/var/www/vedio/testing/chatpythonscript.ninositsolution.com/env/lib/python3.10/site-packages/service_identity/pyopenssl.pyr s ip_addresscCr)aX Verify whether the certificate of *connection* is valid for *ip_address*. Args: connection: A pyOpenSSL connection object. ip_address: The IP address that *connection* should be connected to. Can be an IPv4 or IPv6 address. Raises: service_identity.VerificationError: If *connection* does not provide a certificate that is valid for *ip_address*. service_identity.CertificateError: If the certificate chain of *connection* contains a certificate that contains invalid/unexpected data. .. versionadded:: 18.1.0 .. versionchanged:: 24.1.0 :exc:`~service_identity.CertificateError` is raised if the certificate contains no ``subjectAltName``\ s instead of :exc:`~service_identity.VerificationError`. rN)r rrr)r rrrrverify_ip_address?s rcertr Sequence[CertificatePattern]cCs t|S)a  Extract all valid ID patterns from a certificate for service verification. Args: cert: The certificate to be dissected. Returns: List of IDs. .. versionchanged:: 23.1.0 ``commonName`` is not used as a fallback anymore. )_cryptography_extract_patternsto_cryptographyrrrrrcs rcCstjtdddt|S)zm Deprecated and never public API. Use :func:`extract_patterns` instead. .. deprecated:: 23.1.0 z?`extract_ids()` is deprecated, please use `extract_patterns()`.)categorymessage stacklevel)warningswarnDeprecationWarningrr rrr extract_idsss r()r r rrrr)r r rrrr)rr rr)__doc__ __future__r contextlibr%typingr cryptographyrrhazmatrrrr suppress ImportErrorOpenSSL.cryptor OpenSSL.SSLr __all__r rr(rrrrs        ! $