Your IP : 172.28.240.42

Current Path : /usr/lib/python2.7/dist-packages/twisted/internet/
Upload File :
Current File : //usr/lib/python2.7/dist-packages/twisted/internet/_newtls.pyc

ó
Í;±Nc@s×dZddlmZddlmZddlmZmZddlmZddl	m
Z
ddlmZm
Z
defd	„ƒYZd
„Zdefd„ƒYZd
efd„ƒYZdefd„ƒYZdS(sÚ
This module implements memory BIO based TLS support.  It is the preferred
implementation and will be used whenever pyOpenSSL 0.10 or newer is installed
(whenever L{twisted.protocols.tls} is importable).

@since: 11.1
iÿÿÿÿ(t
implements(tdirectlyProvides(t
ITLSTransportt
ISSLTransport(tFileDescriptor(t_TLSDelayed(tTLSMemoryBIOFactorytTLSMemoryBIOProtocolt
_BypassTLScBs;eZdZd„Zd„Zd„Zd„Zd„ZRS(s
    L{_BypassTLS} is used as the transport object for the TLS protocol object
    used to implement C{startTLS}.  Its methods skip any TLS logic which
    C{startTLS} enables.

    @ivar _base: A transport class L{_BypassTLS} has been mixed in with to which
        methods will be forwarded.  This class is only responsible for sending
        bytes over the connection, not doing TLS.

    @ivar _connection: A L{Connection} which TLS has been started on which will
        be proxied to by this object.  Any method which has its behavior
        altered after C{startTLS} will be skipped in favor of the base class's
        implementation.  This allows the TLS protocol object to have direct
        access to the transport, necessary to actually implement TLS.
    cCs||_||_dS(N(t_baset_connection(tselftbaset
connection((s</usr/lib/python2.7/dist-packages/twisted/internet/_newtls.pyt__init__'s	cCst|j|ƒS(sÈ
        Forward any extra attribute access to the original transport object.
        For example, this exposes C{getHost}, the behavior of which does not
        change after TLS is enabled.
        (tgetattrR
(Rtname((s</usr/lib/python2.7/dist-packages/twisted/internet/_newtls.pyt__getattr__,scCs|jj|j|ƒS(s>
        Write some bytes directly to the connection.
        (R	twriteR
(Rtdata((s</usr/lib/python2.7/dist-packages/twisted/internet/_newtls.pyR5scCs|jj|j|ƒS(s@
        Write a some bytes directly to the connection.
        (R	t
writeSequenceR
(Rtiovec((s</usr/lib/python2.7/dist-packages/twisted/internet/_newtls.pyR<scOs|jj|j||ŽS(s2
        Close the underlying connection.
        (R	tloseConnectionR
(Rtargstkwargs((s</usr/lib/python2.7/dist-packages/twisted/internet/_newtls.pyRCs(t__name__t
__module__t__doc__RRRRR(((s</usr/lib/python2.7/dist-packages/twisted/internet/_newtls.pyRs					cCs—|r|j}n
|j}t||dƒ}t||jtƒ}||_|j|_|j|_t|t	ƒt
|_|jjt
||ƒƒdS(sP
    Add a layer of SSL to a transport.

    @param transport: The transport which will be modified.  This can either by
        a L{FileDescriptor<twisted.internet.abstract.FileDescriptor>} or a
        L{FileHandle<twisted.internet.iocpreactor.abstract.FileHandle>}.  The
        actual requirements of this instance are that it have:

          - a C{_tlsClientDefault} attribute indicating whether the transport is
            a client (C{True}) or a server (C{False})
          - a settable C{TLS} attribute which can be used to mark the fact
            that SSL has been started
          - settable C{getHandle} and C{getPeerCertificate} attributes so
            these L{ISSLTransport} methods can be added to it
          - a C{protocol} attribute referring to the L{IProtocol} currently
            connected to the transport, which can also be set to a new
            L{IProtocol} for the transport to deliver data to

    @param contextFactory: An SSL context factory defining SSL parameters for
        the new SSL layer.
    @type contextFactory: L{twisted.internet.ssl.ContextFactory}

    @param normal: A flag indicating whether SSL will go in the same direction
        as the underlying transport goes.  That is, if the SSL client will be
        the underlying client and the SSL server will be the underlying server.
        C{True} means it is the same, C{False} means they are switched.
    @type param: L{bool}

    @param bypass: A transport base class to call methods on to bypass the new
        SSL layer (so that the SSL layer itself can send its bytes).
    @type bypass: L{type}
    N(t_tlsClientDefaultRtNoneRtprotocoltFalset	getHandletgetPeerCertificateRRtTruetTLStmakeConnectionR(t	transporttcontextFactorytnormaltbypasstclientt
tlsFactoryttlsProtocol((s</usr/lib/python2.7/dist-packages/twisted/internet/_newtls.pytstartTLSKs%
	
	tConnectionMixincBsTeZdZeeƒeZdZe	d„Z
d„Zd„Zd„Z
d„ZRS(s:
    A mixin for L{twisted.internet.abstract.FileDescriptor} which adds an
    L{ITLSTransport} implementation.

    @ivar TLS: A flag indicating whether TLS is currently in use on this
        transport.  This is not a good way for applications to check for TLS,
        instead use L{ISSLTransport.providedBy}.

    @ivar _tlsWaiting: If TLS has been requested but the write buffer for
        non-TLS data still needs to be flushed, this is set to a L{_TLSDelayed}
        instance which will buffer data that must only be sent once TLS has been
        started.
    cCsB|js|jr+tg||ƒ|_tSt|||tƒdS(s1
        @see: L{ITLSTransport.startTLS}
        N(t
dataBuffert_tempDataBufferRt_tlsWaitingRR,R(RtctxR'((s</usr/lib/python2.7/dist-packages/twisted/internet/_newtls.pyR,›scCsa|jr(|jr]|jj|ƒq]n5|jdk	rM|jjj|ƒntj||ƒdS(s©
        Write some bytes to this connection, passing them through a TLS layer if
        necessary, or discarding them if the connection has already been lost.
        N(	R#t	connectedRRR0RtbufferedDatatappendR(Rtbytes((s</usr/lib/python2.7/dist-packages/twisted/internet/_newtls.pyR©s		cCsa|jr(|jr]|jj|ƒq]n5|jdk	rM|jjj|ƒntj||ƒdS(sÇ
        Write some bytes to this connection, scatter/gather-style, passing them
        through a TLS layer if necessary, or discarding them if the connection
        has already been lost.
        N(	R#R2RRR0RR3textendR(RR((s</usr/lib/python2.7/dist-packages/twisted/internet/_newtls.pyR·s		cCs@|jr/|jr<|jr<|jjƒq<n
tj|ƒdS(s„
        Close this connection after writing all pending data.

        If TLS has been negotiated, perform a TLS shutdown.
        N(R#R2t
disconnectingRRR(R((s</usr/lib/python2.7/dist-packages/twisted/internet/_newtls.pyRÆs	cCsttj|ƒ}|jdk	rp|jrp|jrp|j}d|_|j|j|jƒ|j	|j
ƒqpn|S(s£
        Write out some data from the send buffer.

        If the buffer becomes empty and TLS has been requested but not yet
        enabled, enable it.
        N(RtdoWriteR0RR.R/R,tcontexttextraRR3(Rtresulttwaiting((s</usr/lib/python2.7/dist-packages/twisted/internet/_newtls.pyR8Ós		N(RRRRRRR#RR0R"R,RRRR8(((s</usr/lib/python2.7/dist-packages/twisted/internet/_newtls.pyR-ˆs

			
tClientMixincBseZdZeZRS(s=
    A mixin for L{twisted.internet.tcp.Client} which just marks it as a client
    for the purposes of the default TLS handshake.

    @ivar _tlsClientDefault: Always C{True}, indicating that this is a client
        connection, and by default when TLS is negotiated this class will act as
        a TLS client.
    (RRRR"R(((s</usr/lib/python2.7/dist-packages/twisted/internet/_newtls.pyR=åstServerMixincBseZdZeZRS(s>
    A mixin for L{twisted.internet.tcp.Server} which just marks it as a server
    for the purposes of the default TLS handshake.

    @ivar _tlsClientDefault: Always C{False}, indicating that this is a server
        connection, and by default when TLS is negotiated this class will act as
        a TLS server.
    (RRRRR(((s</usr/lib/python2.7/dist-packages/twisted/internet/_newtls.pyR>òsN(Rtzope.interfaceRRttwisted.internet.interfacesRRttwisted.internet.abstractRttwisted.internet._sslRttwisted.protocols.tlsRRtobjectRR,R-R=R>(((s</usr/lib/python2.7/dist-packages/twisted/internet/_newtls.pyt<module>s4	=]