File: //usr/local/CyberPanel/lib/python3.10/site-packages/urllib3/__pycache__/connection.cpython-310.pyc
o
��hu� � @ s� d dl mZ d dlZd dlZd dlZd dlZd dlZd dlZd dl Z d dl
Z
d dl Z d dl Z d dlm
Z d dlmZ d dlmZ d dlmZ e jr[ddlmZ dd lmZ dd
lmZ dd lmZ dd l m Z dd
l m Z ddl!m"Z"m#Z#m$Z$ ddl%m&Z& ddl'm(Z( z d dl)Z)e)j*Z+W n e,e-fy� dZ)G dd� de.�Z+Y nw ddl/m0Z0 ddl/m1Z1 ddl/m2Z2 ddl3m4Z4 ddl5m6Z6m7Z7m8Z8m9Z9m:Z:m;Z; ddl<m=Z=m>Z>m?Z?m@Z@ ddlAmBZB ddlmCZD ddlmEZEmFZFmGZGmHZHmIZI dd lJmKZKmLZL dd lMmNZN eOZOePZPe�QeR�ZSd d d �ZTe�Ud!dd�ZVe�Wd"�ZXG d#d$� d$e�Z
G d%d&� d&e
�ZYG d'd(� d(e jZ�Z[d)d*�d]dDdE�Z\ )d^d_dLdM�Z]d`dRdS�Z^dadTdU�Z_G dVdW� dW�Z`e)�sVe`ZYeYZa dbdcd[d\�ZbdS )d� )� annotationsN)�HTTPConnection)�
HTTPException)�ResponseNotReady��timeout� �� HTTPResponse)�_TYPE_PEER_CERT_RET_DICT)� SSLTransport)�HTTPHeaderDict)�probe)�assert_header_parsing)�_DEFAULT_TIMEOUT�
_TYPE_TIMEOUT�Timeout)�to_str)�
wait_for_readc @ s e Zd ZdS )� BaseSSLErrorN)�__name__�
__module__� __qualname__� r r �H/usr/local/CyberPanel/lib/python3.10/site-packages/urllib3/connection.pyr % s r )�
_TYPE_BODY)� ProxyConfig)�_ResponseOptions�� __version__)�ConnectTimeoutError�HeaderParsingError�NameResolutionError�NewConnectionError�
ProxyError�SystemTimeWarning)� SKIP_HEADER�SKIPPABLE_HEADERS�
connection�ssl_)�body_to_chunks)�assert_fingerprint)�create_urllib3_context� is_ipaddress�resolve_cert_reqs�resolve_ssl_version�ssl_wrap_socket)�CertificateError�match_hostname)�Url�P i� ��http�httpsi� z[^-!#$%&'*+.^_`|~0-9a-zA-Z]c s e Zd ZU dZed Zded< ejej dfgZ
ded< dZ d ed
< d Z d ed
< ded< ded< ded< d ed< ded< ded< ded< ded< die
d d e
d d d �dj� fd*d+�Zedkd,d-��Zejdld/d-��Zdmd1d2�Z dndo� fd6d7�
Zejd8k s�d9ej kr�d:k r�n n"dpd=d>�Zejd8k r�dqd?d@�Znd9ej kr�d:k r�n ndqdAd@�ZdqdBdC�ZedrdDdE��ZedrdFdG��ZedrdHdI��ZedrdJdK��Z edrdLdM��Z dq� fdNdO� Z dsdt� fdTdU�
Z du� fdXdY� Z dvddZdZdZd[�dwdbdc�Z! dvdxddde�Z"dy� fdgdh� Z#� Z$S )zr a�
Based on :class:`http.client.HTTPConnection` but provides an extra constructor
backwards-compatibility layer between older and newer Pythons.
Additional keyword parameters are used to configure attributes of the connection.
Accepted parameters include:
- ``source_address``: Set the source address for the current connection.
- ``socket_options``: Set specific options on the underlying socket. If not specified, then
defaults are loaded from ``HTTPConnection.default_socket_options`` which includes disabling
Nagle's algorithm (sets TCP_NODELAY to 1) unless the connection is behind a proxy.
For example, if you wish to enable TCP Keep Alive in addition to the defaults,
you might pass:
.. code-block:: python
HTTPConnection.default_socket_options + [
(socket.SOL_SOCKET, socket.SO_KEEPALIVE, 1),
]
Or you may want to disable the defaults by passing an empty list (e.g., ``[]``).
r6 ztyping.ClassVar[int]� default_portr z0typing.ClassVar[connection._TYPE_SOCKET_OPTIONS]�default_socket_optionsF�bool� is_verifiedNz bool | None�proxy_is_verified�int� blocksize�tuple[str, int] | None�source_addressz&connection._TYPE_SOCKET_OPTIONS | None�socket_options�_has_connected_to_proxyz_ResponseOptions | None�_response_options�
str | None� _tunnel_host�
int | None� _tunnel_port�_tunnel_scheme� @ )r r@ r> rA �proxy� proxy_config�host�str�portr r �&None | connection._TYPE_SOCKET_OPTIONSrJ �
Url | NonerK �ProxyConfig | None�return�Nonec sP t � j||t�|�||d� || _|| _|| _d| _d | _d | _ d | _
d | _ d S )N)rL rN r r@ r> F) �super�__init__r �resolve_default_timeoutrA rJ rK rB rC rE rG rH ) �selfrL rN r r@ r> rA rJ rK �� __class__r r rU � s �
zHTTPConnection.__init__c C s | j �d�S )a�
Getter method to remove any trailing dots that indicate the hostname is an FQDN.
In general, SSL certificates don't include the trailing dot indicating a
fully-qualified domain name, and thus, they don't validate properly when
checked against a domain name that includes the dot. In addition, some
servers may not expect to receive the trailing dot when provided.
However, the hostname with trailing dot is critical to DNS resolution; doing a
lookup with the trailing dot will properly only resolve the appropriate FQDN,
whereas a lookup without a trailing dot will search the system's search domain
list. Thus, it's important to keep the original host around for use only in
those cases where it's appropriate (i.e., when doing DNS lookup to establish the
actual TCP connection across which we're going to send HTTP requests).
�.)� _dns_host�rstrip�rW r r r rL � s zHTTPConnection.host�valuec C s
|| _ dS )z�
Setter for the `host` property.
We assume that only urllib3 uses the _dns_host attribute; httplib itself
only uses `host`, and it seems reasonable that other libraries follow suit.
N)r[ )rW r^ r r r rL � s
�
socket.socketc
C s� zt j| j| jf| j| j| jd�}W nC tjy' } zt | j
| |�|�d}~w t yA } zt | d| j
� d| j� d��|�d}~w t
yU } z t| d|� ��|�d}~ww t�d| | j
| j� |S )zoEstablish a socket connection and set nodelay settings on it.
:return: New socket connection.
)r@ rA NzConnection to z timed out. (connect timeout=�)z&Failed to establish a new connection: zhttp.client.connect)r( �create_connectionr[ rN r r@ rA �socket�gaierrorr" rL �
SocketTimeoutr �OSErrorr# �sys�audit)rW �sock�er r r � _new_conn� s8
�����
����zHTTPConnection._new_conn�headers� typing.Mapping[str, str] | None�schemec s4 |dvr t d|�d���t� j|||d� || _d S )Nr5 z$Invalid proxy scheme for tunneling: z", must be either 'http' or 'https')rN rk )�
ValueErrorrT �
set_tunnelrH )rW rL rN rk rm rX r r ro � s
�
zHTTPConnection.set_tunnel)� � � )rp � )rp rs rp �ip�bytesc C s$ d|v r|d dkrd| d S |S )N� :r �[ � [� ]r )rW rt r r r �
_wrap_ipv6� s zHTTPConnection._wrap_ipv6c C s> t jj}d| �| j�d��| jf }|g}| j�� D ]\}}|� |� d|� d��d�� q|� d� | �
d� |�� ~| j | j
| jd�}zU|�� \}}} |t jjkrb| �� td |� d
| �� � ��� |j�|d �}
t|
�|krwt j�d
��|
szn|
dv rn| jdkr�td|
�� � qcW |�� d S W |�� d S |�� w )Ns CONNECT %s:%d HTTP/1.0
�ascii�: �
�latin-1�
� ��method�Tunnel connection failed: � Tr z header line)r �
r� r �header:) r6 �client�_MAXLINErz rE �encoderG �_tunnel_headers�items�append�send�join�response_classrh �_method� _read_status�
HTTPStatus�OK�closere �strip�fp�readline�len� LineTooLong�
debuglevel�print�decode) rW r� �connectrk �headerr^ �response�version�code�message�liner r r �_tunnel� sD �
�
� �zHTTPConnection._tunnelc C s d| � | j�d��| jf }|g}| j�� D ]\}}|�|� d|� d��d�� q|�d� | �d�|�� ~| j | j
| j d�}z>|� � \}}}t
j�|j�| _| jd krb| jD ] }td
|�� � qX|t
jjkrx| �� td |� d |�� � ���W |�� d S |�� w )
Ns CONNECT %s:%d HTTP/1.1
�idnar| r} r~ r r� r� r r� r� r� )rz rE r� rG r� r� r� r� r� r� rh r� r� r6 r� �
_read_headersr� �_raw_proxy_headersr� r� r� r� r� r� re r� ) rW r� rk r� r^ r� r� r� r� r r r r� " s0 �
��c C s> | � � | _| jrd| _| �� t| j�| _| jr d| _d S d S )NTF)rj rh rE rB r� r: rJ r< r] r r r r� D s
�zHTTPConnection.connectc C s
| j d u S �N)rh r] r r r � is_closedU s
zHTTPConnection.is_closedc C s | j d u rdS t| j dd� S )NFg r )rh r r] r r r � is_connectedY s
zHTTPConnection.is_connectedc C s | j S r� )rB r] r r r �has_connected_to_proxy_ s z%HTTPConnection.has_connected_to_proxyc C s t | j�o | jdu S )zT
Return True if a forwarding proxy is configured, else return False
N)r: rJ rE r] r r r �proxy_is_forwardingc s z"HTTPConnection.proxy_is_forwardingc C s
| j duS )zS
Return True if a tunneling proxy is configured, else return False
N)rE r] r r r �proxy_is_tunnelingj s
z!HTTPConnection.proxy_is_tunnelingc st z t � �� W d | _d| _d | _d| _d | _d | _d | _d | _ d S d | _d| _d | _d| _d | _d | _d | _d | _ w )NF)
rT r� rh r; r< rB rC rE rG rH r] rX r r r� q s$
�zHTTPConnection.closer� �url� skip_host�skip_accept_encodingc s< t �|�}|rtd|�d|�� �d���t� j||||d�S )� z+Method cannot contain non-token characters z (found at least r` )r� r� )�_CONTAINS_CONTROL_CHAR_RE�searchrn �grouprT �
putrequest)rW r� r� r� r� �matchrX r r r� � s
��zHTTPConnection.putrequestr� �valuesc sf t dd� |D ��st� j|g|�R � dS t|�� �tvr1d�dd� tt�D ��}td|� d���dS ) r� c s s" � | ] }t |t�o |tkV qd S r� )�
isinstancerM r& )�.0�vr r r � <genexpr>� s � z+HTTPConnection.putheader.<locals>.<genexpr>z', 'c S s g | ]}t �|��qS r )rM �title)r� r� r r r �
<listcomp>� s z,HTTPConnection.putheader.<locals>.<listcomp>z(urllib3.util.SKIP_HEADER only supports '�'N) �anyrT � putheaderr �lowerr' r� �sortedrn )rW r� r� �skippable_headersrX r r r� � s �
��zHTTPConnection.putheaderT)�chunked�preload_content�decode_content�enforce_content_length�body�_TYPE_BODY | Noner� r� r� r� c C s� | j d ur | j �| j� t|||||d�| _|d u r i }tdd� |D ��} d| v }
d| v } | j|||
| d� t||| jd�} | j }
| j
}|rQd| vrP| � d d
� n)d | v rXd }n"d| v r_d
}nd }|d u rr|
d urqd
}| � d d
� n| � dt |�� d| vr�| � dt
� � |�� D ]
\}}| � ||� q�| �� |
d ur�|
D ]"}|s�q�t|t �r�|�d�}|r�| �dt|�|f � q�| �|� q�|r�| �d� d S d S )N)�request_method� request_urlr� r� r� c s s � | ] }t |�� �V qd S r� )r r� )r� �kr r r r� � s � z)HTTPConnection.request.<locals>.<genexpr>zaccept-encodingrL )r� r� )r� r> ztransfer-encodingzTransfer-Encodingr� zcontent-lengthFTzContent-Lengthz
user-agentz
User-Agentzutf-8s %x
%b
s 0
)rh �
settimeoutr r rC � frozensetr� r* r> �chunks�content_lengthr� rM �_get_default_user_agentr� �
endheadersr� r� r� r� )rW r� r� r� rk r� r� r� r� � header_keysr� r� �
chunks_and_clr� r� r� r^ �chunkr r r �request� sh
�� � �
�zHTTPConnection.requestc C s( t jdtdd� | j||||dd� dS )z�
Alternative to the common request method, which sends the
body with chunked encoding and not as one block
z�HTTPConnection.request_chunked() is deprecated and will be removed in urllib3 v2.1.0. Instead use HTTPConnection.request(..., chunked=True).� ��category�
stacklevelT)r� rk r� N)�warnings�warn�DeprecationWarningr� )rW r� r� r� rk r r r �request_chunked s �z HTTPConnection.request_chunkedr
c s� | j du rt� �| j }d| _ | j�| j� ddlm} t| jdd�}t� � � }zt
|j � W n! t t
fyO } ztjdt| |j�|dd� W Y d}~nd}~ww t|j �� �}||||j|jt| dd �|j|j|j||j|j|j|d
�
}|S ) a
Get the response from the server.
If the HTTPConnection is in the correct state, returns an instance of HTTPResponse or of whatever object is returned by the response_class variable.
If a request has not been sent or if a previous response has not be handled, ResponseNotReady is raised. If the HTTP response indicates that the connection should be closed, then it will be closed before the response is returned. When the connection is closed, the underlying socket is closed.
Nr r �shutdownz$Failed to parse headers (url=%s): %sT)�exc_info�
_http_vsn_strzHTTP/?)
r� rk �statusr� �version_string�reasonr� r� �original_responser� r� r� �
sock_shutdown)rC r rh r� r r� r
�getattrrT � getresponser �msgr! � TypeError�log�warning�_url_from_connectionr� r
r� r� r� r� r� r� r� r� )rW � resp_optionsr
� _shutdown�httplib_response�hperk r� rX r r r� sH
���
�zHTTPConnection.getresponser� )rL rM rN rF r r r@ r? r> r= rA rO rJ rP rK rQ rR rS �rR rM )r^ rM rR rS )rR r_ )NNr6 )
rL rM rN rF rk rl rm rM rR rS )rt ru rR ru �rR rS )rR r: )FF)
r� rM r� rM r� r: r� r: rR rS )r� rM r� rM rR rS )NN)r� rM r� rM r� r� rk rl r� r: r� r: r� r: r� r: rR rS )
r� rM r� rM r� r� rk rl rR rS )rR r
)%r r r �__doc__�port_by_schemer8 �__annotations__rb � IPPROTO_TCP� TCP_NODELAYr9 r; r< r rU �propertyrL �setterrj ro rf � version_inforz r� r� r� r� r� r� r� r� r� r� r� r� r� �
__classcell__r r rX r r R s�
� ��
�$
(
" ���e �r c s� e Zd ZU dZed ZdZded< dZded< dZ ded< dZ
d ed
< dZ ded < dZ d ed
< dZ
d ed< dZded< dZded< d9eddejddddddddddddddddd�d:� fd-d.�Z d;d<d/d0�Zd=d1d2�Zd>d7d8�Z� ZS )?�HTTPSConnectionz�
Many of the parameters to this constructor are passed to the underlying SSL
socket by means of :py:func:`urllib3.util.ssl_wrap_socket`.
r7 N�int | str | None� cert_reqsrD �ca_certs� ca_cert_dir�None | str | bytes� ca_cert_data� ssl_versionrF �ssl_minimum_version�ssl_maximum_versionr+ z!typing.Callable[..., None] | None�_connect_callbackrI )r r@ r> rA rJ rK r� �assert_hostnamer+ �server_hostname� ssl_contextr r r r r r � cert_file�key_file� key_passwordrL rM rN r r r@ r? r> r= rA rO rJ rP rK rQ r �"None | str | typing.Literal[False]r r
�ssl.SSLContext | Noner r r
rR rS c
s� t � j||||||||d� || _|| _|| _|
| _| | _|
| _| | _|| _ || _
|| _ |o3t j
�|�| _|o<t j
�|�| _|| _| d u rS| jd urO| jj} ntd �} | | _d | _d S )N)rN r r@ r> rA rJ rK )rT rU r r r
r
r r r+ r r r �os�path�
expanduserr r r � verify_moder. r� r )rW rL rN r r@ r> rA rJ rK r� r r+ r r
r r r r r r r r r
rX r r rU g s: �
zHTTPSConnection.__init__c
C s� t jdtdd� |du r| jdur| jj}ntd�}|| _|| _|| _|| _ || _
|| _ |o3t j
�|�| _|o<t j
�|�| _| | _dS )zX
This method should only be called once, before the connection is used.
z�HTTPSConnection.set_cert() is deprecated and will be removed in urllib3 v2.1.0. Instead provide the parameters to the HTTPSConnection constructor.r� r� N)r� r� r� r
r r. r r r� r
r r+ r r r r r r )
rW r r r� r
r r r+ r r r r r �set_cert� s$ �
zHTTPSConnection.set_certc C sd | j d ur| jd ur| j }| j}n| j}| j}dtjv r$tj||d�}nd}| jd ur5| jdt �
� |d� z�| � � | _ }| j}d}| j
rm| jdkrW| �| j|� | _ }d}n| jdkr_d| _d| _| �� t�t| j �}| jd uru| j}tj�� tk }|r�t� d t� d
�t � |� d �}t d i d |�d
| j �d| j!�d| j"�d| j#�d| j$�d| j%�d| j&�d| j'�d| j(�d| j)�d|�d| j*�d|�d| j+�d| j,��} | j-| _ W n# t.y� | jd ur�| jd t �
� |d� |d u r�tj/||d d � � w |d u �r | j-�0� dk}
tj/|||
d � | j1�rd| _2n| j2| _2t3| j4�| _| j�r.| jd u �r0| j2| _d S d S d S ) N�h2)rL rN Fzbefore connect)� thread_id�target_supports_http2r7 Tr6 z System time is way off (before z5). This will probably lead to SSL verification errorsrZ rh r� r r r r r r r r r
r r
�
tls_in_tlsr r+ zafter connect failure)rL rN �supports_http2r )5rE rG rL rN r) �ALPN_PROTOCOLS� http2_probe�acquire_and_getr � threading� get_identrj rh r� rH �_connect_tls_proxyr< rB r� �typing�castrM r �datetime�date�today� RECENT_DATEr� r� r% r\ �#_ssl_wrap_socket_and_match_hostnamer� r r r r r r r r r
r
r r+ rb �
BaseException�set_and_release�selected_alpn_protocolr� r; r: rJ ) rW �probe_http2_host�probe_http2_portr rh r r � is_time_off�server_hostname_rm_dot�sock_and_verifiedr r r r r� � s�
�
�
�
�������� �
� � �
����
���
�
�zHTTPSConnection.connect�hostnamerh r_ �
ssl.SSLSocketc C s` t �t| j�}|j}t|f| j| j| j| j | j
| j | j |||j
|jddddd��}|j| _|jS )zY
Establish a TLS connection to the proxy using the provided SSL context.
NF)r� r r r r r r r r
r r+ r r r
r )r r! r rK r
r& r� r r r r r r r r+ r; r< rb )rW r/ rh rK r
r. r r r r W s. ��z"HTTPSConnection._connect_tls_proxyr� ).rL rM rN rF r r r@ r? r> r= rA rO rJ rP rK rQ r� r� r r r+ rD r rD r
r r rD r rD r r r rF r rF r r� r rD r rD r
rD rR rS ) NNNNNNNNN)r rD r rD r� r� r
rD r rD r r r+ rD r rD r r rR rS r� )r/ rM rh r_ rR r0 )r r r r� r� r8 r� r� r r r r r r r+ r r r r9 rU r r� r r� r r rX r r� U s`
��@ �
)
r� c @ s" e Zd ZU dZded< ded< dS )�_WrappedAndVerifiedSocketz[
Wrapped socket and whether the connection is
verified after the TLS handshake
z ssl.SSLSocket | SSLTransportrb r: r; N)r r r r� r� r r r r r1 u s
r1 F)r rh r_ r� �None | str | intr r rF r r rD r r
r r r r r r r+ r r
r r r: rR c C sl d}|du rd}t t|�||t|�d�}n|}t|�|_| s*| s*| du s*tjs*tjs-d|_|s>| s>|
s>|r>t|d�r>|� � |
durZ|
�
d�}d|v rT|d|� d�� }t |�rZ|}
t
| ||||| |
|
||d�
}zA| rut|jdd �| � n&|jtjkr�|js�| dur�|�� }|r�d}nt|d
d�p�d}t|| p�|
|� t||jtjkp�t| �d �W S ty� |�� � w ) a2 Logic for constructing an SSLContext from all TLS parameters, passing
that down into ssl_wrap_socket, and then doing certificate verification
either via hostname or fingerprint. This function exists to guarantee
that both proxies and targets have the same behavior when connecting via TLS.
FNT)r r r r� �load_default_certs�[]�%)
rh �keyfile�certfiler
r r r r r
r )� binary_form�hostname_checks_common_name)rb r; )r, r/ r. r r) � IS_PYOPENSSL�HAS_NEVER_CHECK_COMMON_NAME�check_hostname�hasattrr3 r� �rfindr- r0 �_assert_fingerprint� getpeercert�ssl� CERT_NONEr� �_match_hostnamer1 �
CERT_REQUIREDr: r' r� )rh r� r r r r r r
r r r r r+ r r
r �default_ssl_context�context�
normalized�ssl_sock�certr9 r r r r& s� �
���������
�
� ��� � �r& rI � _TYPE_PEER_CERT_RET_DICT | None�asserted_hostnamerM r9 rS c
C sX |� d�}t|�r |}z t| ||� W d S ty+ } z t�d|| � | |_� d }~ww )Nr4 z@Certificate did not match expected hostname: %s. Certificate: %s)r� r- r2 r1 r� r� �
_peer_cert)rI rK r9 �stripped_hostnameri r r r rC � s
���rC �err� Exception� proxy_schemer$ c C s` d� t�dt| ��� ��}d|v pd|v pd|v }d}td|r%|dkr%|nd � �| �}| |_|S )
Nr� z[^a-z]zwrong version numberzunknown protocolzrecord layer failurez�. Your proxy appears to only use HTTP and not HTTPS, try changing your proxy URL to be HTTP. See: https://urllib3.readthedocs.io/en/latest/advanced-usage.html#https-proxy-error-http-proxyzUnable to connect to proxyr7 r� )r� �re�splitrM r� r$ � __cause__)rN rP �error_normalized�is_likely_http_proxy�http_proxy_warning�new_errr r r �_wrap_proxy_error s �����rX c C s
dt � �S )Nzpython-urllib3/r r r r r r� / s
r� c @ s e Zd ZdZdS )�DummyConnectionz-Used to detect a failed ConnectionCls import.N)r r r r� r r r r rY 3 s rY �conn� HTTPConnection | HTTPSConnectionr c C s( t | t�rdnd}t|| j| j|d�jS )zUReturns the URL from a given connection. This is mainly used for testing and logging.r7 r6 )rm rL rN r )r� r� r3 rL rN r� )rZ r rm r r r r� > s r� )"rh r_ r� r2 r r2 r rF r rF r rD r rD r
rD r rD r rD r r r r r+ rD r rD r
r r r: rR r1 )F)rI rJ rK rM r9 r: rR rS )rN rO rP rD rR r$ r� r� )rZ r[ r rD rR rM )c�
__future__r r" � http.clientr6 �loggingr rQ rb rf r r r� r �_HTTPConnectionr r r rd �
TYPE_CHECKINGr� r
� util.ssl_r �util.ssltransportr � _collectionsr
�http2r r �
util.responser � util.timeoutr r r � util.utilr � util.waitr rA �SSLErrorr � ImportError�AttributeErrorr' �_base_connectionr r r �_versionr �
exceptionsr r! r" r# r$ r% �utilr& r' r( r) � util.requestr* r+ r? r, r- r. r/ r0 �util.ssl_match_hostnamer1 r2 �util.urlr3 �ConnectionError�BrokenPipeError� getLoggerr r� r� r# r% �compiler� r� �
NamedTupler1 r& rC rX r� rY �VerifiedHTTPSConnectionr� r r r r �<module> s�
�
"� �
�