diff options
Diffstat (limited to 'lib/python2.7/site-packages/Twisted-12.2.0-py2.7-linux-x86_64.egg/twisted/internet/ssl.py')
| -rwxr-xr-x | lib/python2.7/site-packages/Twisted-12.2.0-py2.7-linux-x86_64.egg/twisted/internet/ssl.py | 203 |
1 files changed, 0 insertions, 203 deletions
diff --git a/lib/python2.7/site-packages/Twisted-12.2.0-py2.7-linux-x86_64.egg/twisted/internet/ssl.py b/lib/python2.7/site-packages/Twisted-12.2.0-py2.7-linux-x86_64.egg/twisted/internet/ssl.py deleted file mode 100755 index 2141f204..00000000 --- a/lib/python2.7/site-packages/Twisted-12.2.0-py2.7-linux-x86_64.egg/twisted/internet/ssl.py +++ /dev/null @@ -1,203 +0,0 @@ -# -*- test-case-name: twisted.test.test_ssl -*- -# Copyright (c) Twisted Matrix Laboratories. -# See LICENSE for details. - - -""" -SSL transport. Requires PyOpenSSL (http://pyopenssl.sf.net). - -SSL connections require a ContextFactory so they can create SSL contexts. -End users should only use the ContextFactory classes directly - for SSL -connections use the reactor.connectSSL/listenSSL and so on, as documented -in IReactorSSL. - -All server context factories should inherit from ContextFactory, and all -client context factories should inherit from ClientContextFactory. At the -moment this is not enforced, but in the future it might be. - -Future Plans: - - split module so reactor-specific classes are in a separate module -""" - -# System imports -from OpenSSL import SSL -supported = True - -from zope.interface import implements, implementsOnly, implementedBy - -# Twisted imports -from twisted.internet import tcp, interfaces - - -class ContextFactory: - """A factory for SSL context objects, for server SSL connections.""" - - isClient = 0 - - def getContext(self): - """Return a SSL.Context object. override in subclasses.""" - raise NotImplementedError - - -class DefaultOpenSSLContextFactory(ContextFactory): - """ - L{DefaultOpenSSLContextFactory} is a factory for server-side SSL context - objects. These objects define certain parameters related to SSL - handshakes and the subsequent connection. - - @ivar _contextFactory: A callable which will be used to create new - context objects. This is typically L{SSL.Context}. - """ - _context = None - - def __init__(self, privateKeyFileName, certificateFileName, - sslmethod=SSL.SSLv23_METHOD, _contextFactory=SSL.Context): - """ - @param privateKeyFileName: Name of a file containing a private key - @param certificateFileName: Name of a file containing a certificate - @param sslmethod: The SSL method to use - """ - self.privateKeyFileName = privateKeyFileName - self.certificateFileName = certificateFileName - self.sslmethod = sslmethod - self._contextFactory = _contextFactory - - # Create a context object right now. This is to force validation of - # the given parameters so that errors are detected earlier rather - # than later. - self.cacheContext() - - - def cacheContext(self): - if self._context is None: - ctx = self._contextFactory(self.sslmethod) - # Disallow SSLv2! It's insecure! SSLv3 has been around since - # 1996. It's time to move on. - ctx.set_options(SSL.OP_NO_SSLv2) - ctx.use_certificate_file(self.certificateFileName) - ctx.use_privatekey_file(self.privateKeyFileName) - self._context = ctx - - - def __getstate__(self): - d = self.__dict__.copy() - del d['_context'] - return d - - - def __setstate__(self, state): - self.__dict__ = state - - - def getContext(self): - """ - Return an SSL context. - """ - return self._context - - -class ClientContextFactory: - """A context factory for SSL clients.""" - - isClient = 1 - - # SSLv23_METHOD allows SSLv2, SSLv3, and TLSv1. We disable SSLv2 below, - # though. - method = SSL.SSLv23_METHOD - - _contextFactory = SSL.Context - - def getContext(self): - ctx = self._contextFactory(self.method) - # See comment in DefaultOpenSSLContextFactory about SSLv2. - ctx.set_options(SSL.OP_NO_SSLv2) - return ctx - - - -class Client(tcp.Client): - """ - I am an SSL client. - """ - - implementsOnly(interfaces.ISSLTransport, - *[i for i in implementedBy(tcp.Client) if i != interfaces.ITLSTransport]) - - def __init__(self, host, port, bindAddress, ctxFactory, connector, reactor=None): - # tcp.Client.__init__ depends on self.ctxFactory being set - self.ctxFactory = ctxFactory - tcp.Client.__init__(self, host, port, bindAddress, connector, reactor) - - def _connectDone(self): - self.startTLS(self.ctxFactory) - self.startWriting() - tcp.Client._connectDone(self) - - - -class Server(tcp.Server): - """ - I am an SSL server. - """ - implements(interfaces.ISSLTransport) - - def __init__(self, *args, **kwargs): - tcp.Server.__init__(self, *args, **kwargs) - self.startTLS(self.server.ctxFactory) - - - -class Port(tcp.Port): - """ - I am an SSL port. - """ - transport = Server - - _type = 'TLS' - - def __init__(self, port, factory, ctxFactory, backlog=50, interface='', reactor=None): - tcp.Port.__init__(self, port, factory, backlog, interface, reactor) - self.ctxFactory = ctxFactory - - # Force some parameter checking in pyOpenSSL. It's better to fail now - # than after we've set up the transport. - ctxFactory.getContext() - - - def _getLogPrefix(self, factory): - """ - Override the normal prefix to include an annotation indicating this is a - port for TLS connections. - """ - return tcp.Port._getLogPrefix(self, factory) + ' (TLS)' - - - -class Connector(tcp.Connector): - def __init__(self, host, port, factory, contextFactory, timeout, bindAddress, reactor=None): - self.contextFactory = contextFactory - tcp.Connector.__init__(self, host, port, factory, timeout, bindAddress, reactor) - - # Force some parameter checking in pyOpenSSL. It's better to fail now - # than after we've set up the transport. - contextFactory.getContext() - - - def _makeTransport(self): - return Client(self.host, self.port, self.bindAddress, self.contextFactory, self, self.reactor) - - - -from twisted.internet._sslverify import DistinguishedName, DN, Certificate -from twisted.internet._sslverify import CertificateRequest, PrivateCertificate -from twisted.internet._sslverify import KeyPair -from twisted.internet._sslverify import OpenSSLCertificateOptions as CertificateOptions - -__all__ = [ - "ContextFactory", "DefaultOpenSSLContextFactory", "ClientContextFactory", - - 'DistinguishedName', 'DN', - 'Certificate', 'CertificateRequest', 'PrivateCertificate', - 'KeyPair', - 'CertificateOptions', - ] |