
    h3                       S SK Jr  S SKrS SKrS SKrS SKrS SKJrJr  S SK	J
r
  S SKJr  S SKJrJr  SSKJrJrJrJrJr  SS	KJrJr  SS
KJrJrJrJr  \R<                  S:  a	  S SKJrJ r   OS SK!JrJ r   \" S5      r"\" S5      r#\$\$\%\%4   S4   r&\$\&S4   r' " S S\5      r(\
" SS9 " S S\5      5       r)\
" SS9 " S S\\)   5      5       r*g)    )annotationsN)CallableMapping)	dataclass)wraps)AnyTypeVar   )BrokenResourceErrorEndOfStreamaclose_forcefullyget_cancelled_exc_class	to_thread)TypedAttributeSettyped_attribute)AnyByteStream
ByteStreamListener	TaskGroup)      )TypeVarTupleUnpackT_RetvalPosArgsT.c                  
   \ rS rSr% Sr\" 5       rS\S'   \" 5       rS\S'   \" 5       r	S\S'   \" 5       r
S	\S
'   \" 5       rS\S'   \" 5       rS\S'   \" 5       rS\S'   \" 5       rS\S'   \" 5       rS\S'   \" 5       rS\S'   Srg)TLSAttribute!   z5Contains Transport Layer Security related attributes.
str | Nonealpn_protocolbyteschannel_binding_tls_uniqueztuple[str, str, int]cipherz*None | dict[str, str | _PCTRTTT | _PCTRTT]peer_certificatezbytes | Nonepeer_certificate_binaryboolserver_sidez!list[tuple[str, str, int]] | Noneshared_ciphersssl.SSLObject
ssl_objectstandard_compatiblestrtls_version N)__name__
__module____qualname____firstlineno____doc__r   r    __annotations__r"   r#   r$   r%   r'   r(   r*   r+   r-   __static_attributes__r.       C/var/www/html/env/lib/python3.13/site-packages/anyio/streams/tls.pyr   r   !   s    ? !0 1M:1(7(99#2#4F 4 FUEVBV,;,=\=')K) 9H8IN5I / 1J1 !0 11&(K(r6   r   F)eqc                      \ rS rSr% SrS\S'   S\S'   S\S'   S	\S
'   S	\S'   \SSSSS.           SS jj5       r      SS jrSS jr	SS jr
SSS jjrSS jrSS jr\SS j5       rSrg) 	TLSStream=   a  
A stream wrapper that encrypts all sent data and decrypts received data.

This class has no public initializer; use :meth:`wrap` instead.
All extra attributes from :class:`~TLSAttribute` are supported.

:var AnyByteStream transport_stream: the wrapped stream

r   transport_streamr&   r+   r)   _ssl_objectzssl.MemoryBIO	_read_bio
_write_bioNT)r'   hostnamessl_contextr+   c                 #    Uc  U(       + nU(       d  U(       a  [         R                  R                  O[         R                  R                  n[         R                  " U5      n[        [         S5      (       a$  U=R                  [         R                  ) -  sl        [         R                  " 5       n[         R                  " 5       n[        U5      [         R                  L a  UR                  XxX#S9n	O-[        R                  " UR                  UUUUS5      I Sh  vN n	U " UUU	UUS9n
U
R                  U	R                  5      I Sh  vN   U
$  N3 N7f)a\  
Wrap an existing stream with Transport Layer Security.

This performs a TLS handshake with the peer.

:param transport_stream: a bytes-transporting stream to wrap
:param server_side: ``True`` if this is the server side of the connection,
    ``False`` if this is the client side (if omitted, will be set to ``False``
    if ``hostname`` has been provided, ``False`` otherwise). Used only to create
    a default context when an explicit context has not been provided.
:param hostname: host name of the peer (if host name checking is desired)
:param ssl_context: the SSLContext object to use (if not provided, a secure
    default will be created)
:param standard_compatible: if ``False``, skip the closing handshake when
    closing the connection, and don't raise an exception if the peer does the
    same
:raises ~ssl.SSLError: if the TLS handshake fails

NOP_IGNORE_UNEXPECTED_EOF)r'   server_hostname)r<   r+   r=   r>   r?   )sslPurposeCLIENT_AUTHSERVER_AUTHcreate_default_contexthasattroptionsrC   	MemoryBIOtype
SSLContextwrap_bior   run_sync_call_sslobject_methoddo_handshake)clsr<   r'   r@   rA   r+   purposebio_inbio_outr*   wrappers              r7   wrapTLSStream.wrapO   s,    : &,K+6''CKK<S<S  44W=K s677##(D(D'DD#--/ .$--[ . J  )11$$  J - 3"
 ,,Z-D-DEEE#  	Fs$   DEE,E
EEEc                  #      U" U6 nU R                   R                  (       a;  U R                  R                  U R                   R	                  5       5      I S h  vN   U$  N! [
        R                   Ga     U R                   R                  (       a<  U R                  R                  U R                   R	                  5       5      I S h  vN    U R                  R                  5       I S h  vN  nU R                  R                  U5         GO! [         a    U R                  R                  5           GO[         a@  nU R                  R                  5         U R                   R                  5         [        UeS nAff = f[
        R                   a@    U R                  R                  U R                   R	                  5       5      I S h  vN     GO[
        R                   a@  nU R                  R                  5         U R                   R                  5         [        UeS nAf[
        R                    a  nU R                  R                  5         U R                   R                  5         [#        U[
        R$                  5      (       d!  UR&                  (       a/  SUR&                  ;   a  U R(                  (       a  [        Ue[        S ee S nAff = fGM  7f)NUNEXPECTED_EOF_WHILE_READING)r?   pendingr<   sendreadrE   SSLWantReadErrorreceiver>   writer   	write_eofOSErrorr   SSLWantWriteErrorSSLSyscallErrorSSLError
isinstanceSSLEOFErrorstrerrorr+   )selffuncargsresultdataexcs         r7   rQ    TLSStream._call_sslobject_method   s     (tH ??**//44T__5I5I5KLLL MI '' //.."33889M9M9OPPP!%!6!6!>!>!@@@D NN((. # /NN,,.. 7NN,,.OO--/-367 (( I++001E1E1GHHH&& 3((*))+)s2<< ((*))+c3??33LL%Cs||%S//1s:)t31 s   KA$ AKA"K$K:ADC"D.C1/D4KK$F6K7K:	F;E>>FAKGKKK+;H&&K=BKKKc                  #    U R                  U R                  R                  5      I Sh  vN   U R                  R	                  5         U R
                  R	                  5         U R                  U R                  R                  5       4$  N^7f)zl
Does the TLS closing handshake.

:return: a tuple of (wrapped byte stream, bytes left in the read buffer)

N)rQ   r=   unwrapr>   rb   r?   r<   r^   rj   s    r7   rr   TLSStream.unwrap   sk      ))$*:*:*A*ABBB  "!!#$$dnn&9&9&;;; 	Cs   )BB
ABc                  #    U R                   (       a   U R                  5       I S h  vN   U R                  R                  5       I S h  vN   g  N'! [         a     [        U R                  5      I S h  vN    e f = f N47fN)r+   rr   BaseExceptionr   r<   aclosers   s    r7   rx   TLSStream.aclose   sl     ##kkm##
 ##**,,, $  '(=(=>>> 	-sC   BA AA B
A?BA "A<4A75A<<Bc                   #    U R                  U R                  R                  U5      I S h  vN nU(       d  [        eU$  N7frv   )rQ   r=   r^   r   )rj   	max_bytesrn   s      r7   r`   TLSStream.receive   s:     001A1A1F1F	RR	 Ss   *AA Ac                l   #    U R                  U R                  R                  U5      I S h  vN   g  N7frv   )rQ   r=   ra   )rj   items     r7   r]   TLSStream.send   s'     ))$*:*:*@*@$GGGs   *424c                <  #    U R                  [        R                  5      n[        R                  " SU5      nU(       aQ  [        UR                  S5      5      [        UR                  S5      =(       d    S5      pCX44S:  a  [        SU 35      e[        S5      e7f)NzTLSv(\d+)(?:\.(\d+))?   r
   r   )r   r   z;send_eof() requires at least TLSv1.3; current session uses z7send_eof() has not yet been implemented for TLS streams)extrar   r-   rematchintgroupNotImplementedError)rj   r-   r   majorminors        r7   send_eofTLSStream.send_eof   s     jj!9!9:1;?u{{1~.EKKN4Ga0H5~&)$$/=2 
 "E
 	
s   BBc                H  ^  0 T R                   R                  E[        R                  T R                  R
                  [        R                  T R                  R                  [        R                  T R                  R                  [        R                  U 4S j[        R                  U 4S j[        R                  U 4S j[        R                  U 4S j[        R                  U 4S j[        R                  U 4S j[        R                  T R                  R                   0
E$ )Nc                 :   > T R                   R                  S5      $ )NFr=   getpeercertrs   s   r7   <lambda>,TLSStream.extra_attributes.<locals>.<lambda>   s    43C3C3O3OPU3Vr6   c                 :   > T R                   R                  S5      $ )NTr   rs   s   r7   r   r      s    $:J:J:V:V;r6   c                 0   > T R                   R                  $ rv   )r=   r'   rs   s   r7   r   r      s    d.>.>.J.Jr6   c                 r   > T R                   R                  (       a  T R                   R                  5       $ S $ rv   )r=   r'   r(   rs   s   r7   r   r     s3    ++ 261A1A1P1P1R 22r6   c                    > T R                   $ rv   r+   rs   s   r7   r   r         d6N6Nr6   c                    > T R                   $ rv   )r=   rs   s   r7   r   r     s    T-=-=r6   )r<   extra_attributesr   r    r=   selected_alpn_protocolr"   get_channel_bindingr#   r$   r%   r'   r(   r+   r*   r-   versionrs   s   `r7   r   TLSStream.extra_attributes   s    
##44
&&(8(8(O(O33  44!1!1!8!8))+V00 3 $$&J'' * ,,.N##%=$$d&6&6&>&>#
 	
r6   r.   )r<   r   r'   zbool | Noner@   r   rA   zssl.SSLContext | Noner+   r&   returnr:   )rk   z&Callable[[Unpack[PosArgsT]], T_Retval]rl   zUnpack[PosArgsT]r   r   )r   ztuple[AnyByteStream, bytes]r   None)i   )r{   r   r   r!   )r~   r!   r   r   r   zMapping[Any, Callable[[], Any]])r/   r0   r1   r2   r3   r4   classmethodrX   rQ   rr   rx   r`   r]   r   propertyr   r5   r.   r6   r7   r:   r:   =   s     $#
 $(#-1$(D'D !	D
 D +D "D 
D DL,:,CS,	,\
<-H
 
 
r6   r:   c                      \ rS rSr% SrS\S'   S\S'   SrS\S	'   S
rS\S'   \SS j5       r	 S     SS jjr
SS jr\SS j5       rSrg)TLSListeneri
  aj  
A convenience listener that wraps another listener and auto-negotiates a TLS session
on every accepted connection.

If the TLS handshake times out or raises an exception,
:meth:`handle_handshake_error` is called to do whatever post-mortem processing is
deemed necessary.

Supports only the :attr:`~TLSAttribute.standard_compatible` extra attribute.

:param Listener listener: the listener to wrap
:param ssl_context: the SSL context object
:param standard_compatible: a flag passed through to :meth:`TLSStream.wrap`
:param handshake_timeout: time limit for the TLS handshake
    (passed to :func:`~anyio.fail_after`)
zListener[Any]listenerzssl.SSLContextrA   Tr&   r+      floathandshake_timeoutc                  #    [        U5      I Sh  vN   [        U [        5       5      (       d(  [        R                  " [
        5      R                  SU S9  [        U [        5      (       a  [        U [        5       5      (       a  e g Nu7f)au  
Handle an exception raised during the TLS handshake.

This method does 3 things:

#. Forcefully closes the original stream
#. Logs the exception (unless it was a cancellation exception) using the
   ``anyio.streams.tls`` logger
#. Reraises the exception if it was a base exception or a cancellation exception

:param exc: the exception
:param stream: the original stream

NzError during TLS handshake)exc_info)r   rg   r   logging	getLoggerr/   	exception	Exception)ro   streams     r7   handle_handshake_error"TLSListener.handle_handshake_error"  sz        ''' #6899
 h'11,s 2 
 #y))Z=T=V-W-W .X 	(s   B	BA6B	Nc                   ^ ^#    [        T5      SUU 4S jj5       nT R                  R                  X25      I S h  vN   g  N7f)Nc                `  >#    SSK Jn   U" TR                  5         [        R	                  U TR
                  TR                  S9I S h  vN nS S S 5        T" W5      I S h  vN   g  N! , (       d  f       N!= f N! [         a$  nTR                  X05      I S h  vN     S nAg S nAff = f7f)Nr
   )
fail_after)rA   r+   )	 r   r   r:   rX   rA   r+   rw   r   )r   r   wrapped_streamro   handlerrj   s       r7   handler_wrapper*TLSListener.serve.<locals>.handler_wrapperG  s     %
. 6 67+4>>$($4$4,0,D,D ,: , &N 8 n---& 87 . ! ?11#>>>?su   B.A= -A*
A(A*A= B."A;#B.(A**
A84A= ;B.=
B+B&BB&!B.&B++B.)r   r   r   r   )r   r   serve)rj   r   
task_groupr   s   ``  r7   r   TLSListener.serveB  s8     
 
w	. 
	. mm!!/>>>s   6AA Ac                T   #    U R                   R                  5       I S h  vN   g  N7frv   )r   rx   rs   s    r7   rx   TLSListener.acloseY  s     mm""$$$s   (&(c                0   ^  [         R                  U 4S j0$ )Nc                    > T R                   $ rv   r   rs   s   r7   r   .TLSListener.extra_attributes.<locals>.<lambda>_  r   r6   )r   r+   rs   s   `r7   r   TLSListener.extra_attributes\  s     ,,.N
 	
r6   r.   )ro   rw   r   r   r   r   rv   )r   zCallable[[TLSStream], Any]r   zTaskGroup | Noner   r   r   r   )r/   r0   r1   r2   r3   r4   r+   r   staticmethodr   r   rx   r   r   r5   r.   r6   r7   r   r   
  s}    "  $$!u! D (,?+? %? 
	?.% 
 
r6   r   )+
__future__r   r   r   rE   syscollections.abcr   r   dataclassesr   	functoolsr   typingr   r	   r   r   r   r   r   r   _core._typedattrr   r   abcr   r   r   r   version_infor   r   typing_extensionsr   r   tupler,   _PCTRTT_PCTRTTTr   r:   r   r.   r6   r7   <module>r      s    "  	 
 
 - !    B @ @w++6:
#
c3h$
%#)$ )8 eI

 I
 I
X eU
(9% U
 U
r6   