��c@s�dd
lZddl
mZ
ddlmZ
y+dd
lZejZejd
d�Z	Wn>e
k
r�


dZdd
lZdd
lZed
d�Z	n
Xd�Z
d�Zd	ef
d
��YZd
S(i�N(
tutil(
t
_cCsItj
||
|d
|d|�}|j�sEtjtd���n|S(Nt	cert_reqstca_certssssl connection failed(tssltwrap_sockettcipherRtAbortR
(tsocktkeyfiletcertfileRRt	sslsocket((s5/sys/lib/python2.7/site-packages/mercurial/sslutil.pytssl_wrap_sockets



icCsmtj
td
�s*tjtd���n|rHtjtd���ntj||
|�}tj||�S(NRsPython SSL support not founds(certificate checking requires Python 2.6(RtsafehasattrtsocketRR
Rthttplibt
FakeSocket(Rtkey_filet	cert_fileRRR((s5/sys/lib/python2.7/site-packages/mercurial/sslutil.pyRs


	

c
sJ
|std
�S|
j
���f
d�}|jdg�}|r�g|D]$\}}|dkrJ|j
�^qJ}x|D]}||�r{d
Sq{W|r�td�dj|�Snx�|jdg�D]t}|d\}}|d	kr�y|j
�jd
�}	Wntk
r



td�SX||	�r.
d
Std�|	Sq�Wtd�S(s�Verify that cert (in socket.getpeercert() format) matches hostname.
    CRLs is not handled.

    Returns error message if any problems are found and None on success.
    sno certificate receivedc

s6|�kp5d
�ko5|d�jd
d�dkS(Nt
.s*.i
(
tsplit(
tcertname(
tdnsname(s5/sys/lib/python2.7/site-packages/mercurial/sslutil.pytmatchdnsname3s

tsubjectAltNametDNSscertificate is for %ss, tsubjectit
commonNametasciis IDN in certificate not supporteds4no commonName or subjectAltName found in certificateN(R
tlowertgettNonetjointencodetUnicodeEncodeError(
tcertthostnameRtsantkeytvaluet	certnamestnamet
sR((
Rs5/sys/lib/python2.7/site-packages/mercurial/sslutil.pyt_verifycert*s.





1















cCs�|jd
d�}|jd|
�}|r�|r�t
j|�}tjj|�snt
jtd�|��ni|d6td6SiS(Ntwebtcacertsthostfingerprintsscould not find web.cacerts: %sRR(	tconfigRt
expandpathtostpathtexistsRR
t
CERT_REQUIRED(tuithostR-thostfingerprint((s5/sys/lib/python2.7/site-packages/mercurial/sslutil.pyt	sslkwargsUs









t	validatorcBseZ
d�Zed
�ZRS(cCs|
|_||_
dS(
N(R5R6(tselfR5R6((s5/sys/lib/python2.7/site-packages/mercurial/sslutil.pyt__init__bs
	
cCs�|j}|j
jd
d�}|j
jd|�}t|
dt�s�|rgtjtd�|��n|r�tjtd�|��n|j
jddt	�r�|j
j
td	�|�
ndS|
j�s�jtd
�|��ny|
jt	�}|
j�}Wn*t
k
r5



tjtd
�|��n
X|sX
tjtd�|��ntj|�j�}djgtd
t|�d�D]}	||	|	d!^q��}
|r!|j�|jdd�j�krtjtd�||
fdtd��
�n|j
jd||
f�
n�|r�t||�}|rntjtd�||fdtd�|
�
�n|j
jd|�
nT|r�tjtd�||
fdtd��
�n |j
j
td�||
f�
dS(NR,R-R.tgetpeercerts:host fingerprint for %s can't be verified (Python too old)s5certificate for %s can't be verified (Python too old)R5treportoldssls?warning: certificate for %s can't be verified (Python too old)
s%s ssl connection errors-%s certificate error: no certificate receivedt
:iits0certificate for %s has unexpected fingerprint %sthints#check hostfingerprint configurations&%s certificate matched fingerprint %s
s%s certificate error: %ssDconfigure hostfingerprint %s or use --insecure to connect insecurelys%%s certificate successfully verified
s/%s certificate with fingerprint %s not verifieds4check hostfingerprints or web.cacerts config settingspwarning: %s certificate with fingerprint %s not verified (check hostfingerprints or web.cacerts config setting)
(R6R5R/tgetattrtFalseRRR
t
configbooltTruetwarnRR<tAttributeErrortsha1t	hexdigestR txrangetlenRtreplacetdebugR+(R:RtstrictR6R-R7tpeercertt	peercert2tpeerfingerprintt
xtnicefingerprinttmsg((s5/sys/lib/python2.7/site-packages/mercurial/sslutil.pyt__call__fs`
	


























	
6

	











	






(t__name__t
__module__R;RBRT(((s5/sys/lib/python2.7/site-packages/mercurial/sslutil.pyR9as
	(R1t	mercurialRtmercurial.i18nR
RR4t	CERT_NONERRtImportErrorRRR+R8tobjectR9(((s5/sys/lib/python2.7/site-packages/mercurial/sslutil.pyt<module>	s


	


	+