o ßý°j2ã@sndZddlZddlmZmZmZz ddlmZmZWdSe y6Gdd„de ƒZd d d „Z d d „ZYdSw)Ú éNé)ÚlogÚ log_enabledÚNETWORK)Úmatch_hostnameÚCertificateErrorc@s eZdZdS)rN)Ú__name__Ú __module__Ú __qualname__©r r ú‹/root/aizidognhua/tmp/workspace/projects/ec89d86c-575f-41c9-af57-ac45cbdbf775/venv/lib/python3.10/site-packages/ldap3/utils/tls_backport.pyrsréc Csttƒr ttd||ƒg}|sdS| d¡}|d}|dd…}| d¡}||kr1tdt|ƒƒ‚|s;| ¡| ¡kS|dkrE| d ¡n|  d ¡sO|  d ¡rX| t   |¡¡n | t   |¡  d d ¡¡|D] }| t   |¡¡qft   d d |¡dt j¡} |  |¡S)z§Backported from Python 3.4.3 standard library Matching according to RFC 6125, section 6.4.3 http://tools.ietf.org/html/rfc6125#section-6.4.3 zmatching dn %s with hostname %sFÚ.rrNÚ*z,too many wildcards in certificate DNS name: z[^.]+zxn--z\*z[^.]*z\Az\.z\Z)rrrÚsplitÚcountrÚreprÚlowerÚappendÚ startswithÚreÚescapeÚreplaceÚcompileÚjoinÚ IGNORECASEÚmatch) ÚdnÚhostnameÚ max_wildcardsÚpatsÚpiecesÚleftmostÚ remainderÚ wildcardsÚfragÚpatr r r Ú_dnsname_match#s0    ÿ  r(cCsä|stdƒ‚g}| dd¡}|D]\}}|dkr%t||ƒr dS| |¡q|sJ| dd¡D]}|D]\}}|dkrHt||ƒrCdS| |¡q2q.t|ƒdkr^td |d  tt|ƒ¡fƒ‚t|ƒdkrntd ||d fƒ‚td ƒ‚)auBackported from Python 3.4.3 standard library. Verify that *cert* (in decoded format as returned by SSLSocket.getpeercert()) matches the *hostname*. RFC 2818 and RFC 6125 rules are followed, but IP addresses are not accepted for *hostname*. CertificateError is raised on failure. On success, the function returns nothing. ztempty or no certificate, match_hostname needs a SSL socket or SSL context with either CERT_OPTIONAL or CERT_REQUIREDÚsubjectAltNamer ÚDNSNÚsubjectÚ commonNamerz&hostname %r doesn't match either of %sz, zhostname %r doesn't match %rrz=no appropriate commonName or subjectAltName fields were found) Ú ValueErrorÚgetr(rÚlenrrÚmapr)ÚcertrÚdnsnamesÚsanÚkeyÚvalueÚsubr r r rZs8     €   €ú þ  þr)r) Ú__doc__rÚ utils.logrrrÚbackports.ssl_match_hostnamerrÚ ImportErrorr-r(r r r r Ús  7Ä