�
���[c@s�dZd
dl
mZ
d
dl
mZ
d
dlZd
dlZd
dlZd
dlZdZdfd��YZ	d�Z
d	ejejfd
��YZ
dS(sK
rhn.SSL builds an abstraction on top of the objects provided by pyOpenSSL
i����(
tSSL(
tcryptoNixt	SSLSocketcBs�eZ
dZdd
�
Zd�Zd�Zdd�
Zd�Zd�Z	d�Z
d�Zd	�Zd
�Z
dd�
Zdd
�
Zd�Zd�Zd�ZeZeZdd�
ZRS(sM
    Class that wraps a pyOpenSSL Connection object, adding more methods
    cCs�d|_
d|_|
|_g|_|p-g}x|D]}|j|�

q7Wtj|_tj	|_
d
|_d|_d|_
d|_d|_dS(Ni it(tNonet_ctxt_connectiont_sockt_trusted_certstadd_trusted_certRt
SSLv23_METHODt_ssl_methodtVERIFY_PEERt_ssl_verify_flagst_buffer_sizet_post_buffert_makefile_calledt_closed(tselftsockett
trusted_certst
f((s+/usr/lib/python2.7/site-packages/rhn/SSL.pyt__init__+s		
	
	


				cCs9tj
|
tj�s%td
|
�n|jj|
�

dS(sh
        Adds a trusted certificate to the certificate store of the SSL context
        object.
        s"Unable to read certificate file %sN(tostaccesstR_OKt
ValueErrorRtappend(Rtfile((s+/usr/lib/python2.7/site-packages/rhn/SSL.pyR	Hs

c
Cs�|j�
t
j|j�
|_|jjt
j�

|jjt
j�

|jrux-|jD]}
|jj	|
�

qXWn	d
|_
|jj|j
t�
t
t
d�r�|jjt
j�

nt
j|j|j�|_|jj�
dS(s1
        Initializes the SSL connection.
        itOP_DONT_INSERT_EMPTY_FRAGMENTSN(t
_check_closedRtContextRRtset_optionstOP_NO_SSLv2tOP_NO_SSLv3Rtload_verify_locationsR
t
set_verifytssl_verify_callbackthasattrRt
ConnectionRRtset_connect_state(RR((s+/usr/lib/python2.7/site-packages/rhn/SSL.pytinit_sslQs



	
	
cCs&|r||_n|j
d
|_
|S(sG
        Returns self, since we are a file-like object already
        i
(RR(Rtmodetbufsize((s+/usr/lib/python2.7/site-packages/rhn/SSL.pytmakefileos

c

Cs8|jr
d
S|j
s$|j�
d
S|j
d|_
d
S(s+
        Closes the SSL connection
        Ni
(RRt
_really_close(
R((s+/usr/lib/python2.7/site-packages/rhn/SSL.pytclose|s	
	



c

Cs�|jdkrdStjd
dkrN|jj�dkrs|jj�
qsn%|jj�dkrs|jj�
n|jj�
d|_dS(Niis%SSL negotiation finished successfullyi
(	RRtsystversion_infotget_state_stringtshutdowntstate_stringR/R(
R((s+/usr/lib/python2.7/site-packages/rhn/SSL.pyR.�s





c

Cs|jrt
d
�ndS(NsI/O operation on closed file(RR(
R((s+/usr/lib/python2.7/site-packages/rhn/SSL.pyR�s
	
cCs/t|j
|
�r"t|j
|
�St|
�dS(
N(R'RtgetattrtAttributeError(Rtname((s+/usr/lib/python2.7/site-packages/rhn/SSL.pyt__getattr__�s


c


Csd
S(s'
        Returns false always.
        i((
R((s+/usr/lib/python2.7/site-packages/rhn/SSL.pytisatty�sc


Cs|jS(
N(
R(
R((s+/usr/lib/python2.7/site-packages/rhn/SSL.pyttell�s
icCs
td
�dS(Ntseek(
tNotImplementedError(RtposR+((s+/usr/lib/python2.7/site-packages/rhn/SSL.pyR;�s
cCs�
|j�
|j
}t|j�
}x
||
ks=|
dkr<
|
dk	r_t|
||�}nyT|jj|�
}|j||_t|j�
}|jj�}|d
kr�PnWq%t	j
k
r�


Pq%t	jk
r�
}
dG|jGHPq%t	j
k
r



|jtjd�
q%t	jk
r8



|jtjd�
q%Xq%W|
rc
|j|
 }|j|
|_n|j}d|_|jt|�
|_|S(s@
        Reads up to amt bytes from the SSL connection.
        is
SSL exceptiontreadRN(RRtlenRRtminRtrecvtpendingRtZeroReturnErrortSysCallErrortargstWantWriteErrort_polltselecttPOLLOUTt
WantReadErrortPOLLINR(Rtamttbuffer_sizet
buffer_lengthtdataRBt
etret((s+/usr/lib/python2.7/site-packages/rhn/SSL.pyR>�s:
	














	
	
cCs[tj
�}|j|j|
�
|j
|jj�d
�
}|gkrWtd|�ndS(Ni�sConnection timed out on %s(RHtpolltregisterRt
gettimeouttTimeoutException(Rtfilter_typetcaller_nametpollertres((s+/usr/lib/python2.7/site-packages/rhn/SSL.pyRG�s





cCs�|j�
t
|
�
}x�tr�y6|jj|
�
}|t
|
�
krJPn|
|}
Wqtjk
r~


|jtj	d
�
qtj
k
r�


|jtjd
�
qXqW|S(s/
        Writes to the SSL connection.
        twrite(RR?tTrueRtsendRRFRGRHRIRJRK(RROtoriglentsent((s+/usr/lib/python2.7/site-packages/rhn/SSL.pyRZ�s

	








cCs
|j|
�
S(
N(
R>(RRL((s+/usr/lib/python2.7/site-packages/rhn/SSL.pyRA

s
cCs�
|j�
x]
t
ri
d}|jjd
�
}|dkrD|d}n$|
rht|j�
|
krh|
}n|dk	r�|j| }|j||_|jt|�
|_|S|j}|
r�t|j|
t|j�
�}ny&|j	j
|�
}|j||_Wq
tjk
r



Pq
tj
k
r?



|jtjd�
q
tjk
re



|jtjd�
q
Xq
W|j}d|_|jt|�
|_|S(sg
        Reads a single line (up to `length' characters long) from the SSL
        connection.
        s

ii
treadlineRN(RR[RRtfindR?RRR@RRARRCRFRGRHRIRJRK(Rtlengtht	charcountt
iRQR,RO((s+/usr/lib/python2.7/site-packages/rhn/SSL.pyR_
s:

	




	




	
"






	
	

N(t__name__t
__module__t__doc__RRR	R*R-R/R.RR8R9R:R;R>RGRZRAR\tsendallR_(((s+/usr/lib/python2.7/site-packages/rhn/SSL.pyR's&
			
						2			c
Cs|S(
sb
    Verify callback, which will be called for each certificate in the
    certificate chain.
    ((tconntcertterrnumtdepthtok((s+/usr/lib/python2.7/site-packages/rhn/SSL.pyR&7
sRUc
BseZ
d�Zd
�ZRS(c
Gs
|
|_dS(
N(
RE(RRE((s+/usr/lib/python2.7/site-packages/rhn/SSL.pyRA
s
c


Csd
S(NsTimeout Exception((
R((s+/usr/lib/python2.7/site-packages/rhn/SSL.pyt__str__D
s
(RdReRRm(((s+/usr/lib/python2.7/site-packages/rhn/SSL.pyRU?
s	(RftOpenSSLRR
RR0RRHtDEFAULT_TIMEOUTRR&tErrorttimeoutRU(((s+/usr/lib/python2.7/site-packages/rhn/SSL.pyt<module>s


�