£Á°èZ¨Ä…–K§‚«“ô4“ÒÙ´dîfUÙÃÅ WKbyʦ•êŽ…È®FÒ¿ÊÎóCozá¬S@6{Í:›œêZÌ:Š•_%:¢¾¾~;‘Ã~芩ÊǍí`ÔÑ©ú뙵'5I¿fš×WO%ø9¾«¾DK|€ùÍD”Ýs]nHÕ¶êםӼ㞪éUWŸÈË%DÒÕ¬ï‘]/Åcx ‰ï2ß]ä6G[]S£Ôϯrs{úëóµmÒï#UQxo·õÞCe]"±/aÙ&Eã4ú9Jé_ÞåëdãöKë)AÞ ¯¹ægƒÛowЍø^d™ý½ßB7áyMä9ÜÖUã !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!! B Y@sBdZddlmZddlZdZGdddeZd dd Zd d ZdS) zHThe match_hostname() function from Python 3.2, essential when using SSL.)absolute_importNz3.2.2c@s eZdZdS)CertificateErrorN)__name__ __module__ __qualname__rrO/opt/alt/python37/lib/python3.7/site-packages/raven/utils/ssl_match_hostname.pyr src Csg}|s dS|d}|d}|d}||kr@tdt||sT||kS|dkrh|dn>|ds||dr|t|n|t| dd x$|d d D]}|t|qWt d d |dtj }| |S)zhMatching according to RFC 6125, section 6.4.3 http://tools.ietf.org/html/rfc6125#section-6.4.3 F.r*z,too many wildcards in certificate DNS name: z[^.]+zxn--z\*z[^.]*r Nz\Az\.z\Z)splitcountrreprlowerappend startswithreescapereplacecompilejoin IGNORECASEmatch) ZdnhostnameZ max_wildcardsZpatspartsZleftmostZ wildcardsfragpatrrr_dnsname_matchs(   rcCs|s tdg}|dd}x0|D](\}}|dkr"t||r@dS||q"W|sxF|ddD]6}x0|D](\}}|dkrjt||rdS||qjWq`Wt|dkrtd |d tt|fn*t|dkrtd ||d fntd dS)a)Verify that *cert* (in decoded format as returned by SSLSocket.getpeercert()) matches the *hostname*. RFC 2818 and RFC 6125 rules are followed, but IP addresses are not accepted for *hostname*. CertificateError is raised on failure. On success, the function returns nothing. zempty or no certificateZsubjectAltNamerZDNSNZsubjectZ commonNamer z&hostname %r doesn't match either of %sz, zhostname %r doesn't match %rrz=no appropriate commonName or subjectAltName fields were found) ValueErrorgetrrlenrrmapr)ZcertrZdnsnamesZsankeyvaluesubrrrmatch_hostname@s2     r%)r ) __doc__ __future__rr __version__rrrr%rrrrs   2