U
    M8czG                  	   @   sN  d dl Z d dlZd dlZd dlZd dlZd dlZd dlmZ d dlm	Z	m
Z
mZ d dlmZ d dlmZmZmZmZ d dlmZ d dlmZ d dlmZ d d	lmZmZmZmZmZmZm Z  d d
l!m"Z" zd dlm#Z#m$Z$ W n& e%k
r   d dl m#Z#m$Z$ Y nX z2e&   ej'de(d d dl)m*Z+ W 5 Q R X W n" e%k
rX   d dlm+Z+ Y nX d dl,Z-d dl.m/Z/m0Z0m1Z1m2Z2m3Z3 d dl4m5Z5mZm6Z6m7Z7m8Z8m9Z9mZmZ e1  e :e;Z<dZ=dZ>ej?@ej?AeBdZCzd dlDmEZE W n e%k
r   dd ZEY nX dd ZFd&ddZGdd ZHdd ZId d! ZJG d"d# d#ZKG d$d% d%ZLdS )'    N)	b64encode)PoolManagerTimeoutproxy_from_url)ConnectTimeoutError)LocationParseErrorNewConnectionErrorProtocolError
ProxyError)ReadTimeoutError)SSLError)Retry)DEFAULT_CIPHERSOP_NO_COMPRESSIONPROTOCOL_TLSOP_NO_SSLv2OP_NO_SSLv3is_ipaddressssl)	parse_url)OP_NO_TICKETPROTOCOL_TLS_CLIENTignore)category)orig_util_SSLContext)
SSLContext)IPV6_ADDRZ_REensure_bytesfilter_ssl_warningsunquoteurlparse)ConnectionClosedErrorr   EndpointConnectionErrorHTTPClientErrorInvalidProxiesConfigErrorProxyConnectionErrorr   r   <   
   z
cacert.pem)wherec                   C   s   t S N)DEFAULT_CA_BUNDLE r+   r+   8/tmp/pip-unpacked-wheel-ozje0y8b/botocore/httpsession.pyr(   Q   s    r(   c                 C   s&   | dk	r| S t  }td|  |S )NTzCertificate path: )r(   loggerdebug)verifyZ	cert_pathr+   r+   r,   get_cert_pathU   s
    r0   c                    s   | r| t krt} t|   |p"t |dkr4tjn|}|dkrdd}|tO }|tO }|t	O }|t
O }  j|O  _|tjkstjdkrt dddk	rd _ fdd}|tjkr| _|  n|  | _t drtjd	}|rtjjs| _ S )
zThis function is a vendored version of the same function in urllib3

    We vendor this function to ensure that the SSL contexts we construct
    always use the std lib SSLContext instead of pyopenssl.
    Nr   )         post_handshake_authTc                      s   t  dd d k	rd _d S )Ncheck_hostnameF)getattrr5   r+   contextr+   r,   disable_check_hostname   s    z6create_urllib3_context.<locals>.disable_check_hostnamekeylog_filenameSSLKEYLOGFILE)r   r   r   set_ciphersr   r   CERT_REQUIREDr   r   r   r   optionssysversion_infor6   r4   verify_modehasattrosenvirongetflagsignore_environmentr:   )ssl_version	cert_reqsr>   ciphersr9   Zsslkeylogfiler+   r7   r,   create_urllib3_context_   s<    		

rK   c                 C   s   t | tr| S |  dkS dS )z~Ensures a boolean value if a string or boolean is provided

    For strings, the value for True/False is case insensitive
    trueN)
isinstanceboollower)valr+   r+   r,   ensure_boolean   s    
rQ   c                 C   s<   d}t | }|jr"| |j|d} |jr8| |j|d} | S )z
    Mask proxy url credentials.

    :type proxy_url: str
    :param proxy_url: The proxy url, i.e. https://username:password@proxy.com

    :return: Masked proxy url, i.e. https://***:***@proxy.com
    z***   )r    usernamereplacepassword)	proxy_urlmask
parsed_urlr+   r+   r,   mask_proxy_url   s    	rY   c                 C   s   t | ptt| S )z@Wrap urllib3's is_ipaddress to support bracketed IPv6 addresses.)r   rN   r   match)hostr+   r+   r,   _is_ipaddress   s    r\   c                   @   sN   e Zd ZdZdddZdd Zdd Zed	d
 Zdd Z	dd Z
dd ZdS )ProxyConfigurationa  Represents a proxy configuration dictionary and additional settings.

    This class represents a proxy configuration dictionary and provides utility
    functions to retreive well structured proxy urls and proxy headers from the
    proxy configuration dictionary.
    Nc                 C   s(   |d kri }|d kri }|| _ || _d S r)   )_proxies_proxies_settings)selfproxiesproxies_settingsr+   r+   r,   __init__   s    zProxyConfiguration.__init__c                 C   s(   t |}| j|j}|r$| |}|S )z6Retrieves the corresponding proxy url for a given url.)r    r^   rE   scheme_fix_proxy_url)r`   urlrX   proxyr+   r+   r,   proxy_url_for   s
    
z ProxyConfiguration.proxy_url_forc                 C   s2   i }|  |\}}|r.|r.| ||}||d< |S )z@Retrieves the corresponding proxy headers for a given proxy url.zProxy-Authorization)_get_auth_from_url_construct_basic_auth)r`   rV   headersrS   rU   
basic_authr+   r+   r,   proxy_headers_for   s    z$ProxyConfiguration.proxy_headers_forc                 C   s   | j S r)   )r_   r`   r+   r+   r,   settings   s    zProxyConfiguration.settingsc                 C   s6   | ds| dr|S | dr*d| S d| S d S )Nhttp:zhttps:z//zhttp://)
startswith)r`   rV   r+   r+   r,   re      s
    
z!ProxyConfiguration._fix_proxy_urlc                 C   s.   | d| }t |d  }d| S )N:asciizBasic )r   encodestripdecode)r`   rS   rU   auth_strZencoded_strr+   r+   r,   rj      s    z(ProxyConfiguration._construct_basic_authc              	   C   s>   t |}zt|jt|jfW S  ttfk
r8   Y dS X d S )N)NN)r    r   rS   rU   AttributeError	TypeError)r`   rf   rX   r+   r+   r,   ri     s
    z%ProxyConfiguration._get_auth_from_url)NN)__name__
__module____qualname____doc__rc   rh   rm   propertyro   re   rj   ri   r+   r+   r+   r,   r]      s   
		
r]   c                   @   s   e Zd ZdZdddedddfddZdd Zdd	 Zd
d Zdd Z	dd Z
dd Zdd ZdddZdd Zdd Zdd Zdd ZdS )URLLib3Sessiona_  A basic HTTP client that supports connection pooling and proxies.

    This class is inspired by requests.adapters.HTTPAdapter, but has been
    boiled down to meet the use cases needed by botocore. For the most part
    this classes matches the functionality of HTTPAdapter in requests v2.7.0
    (the same as our vendored version). The only major difference of note is
    that we currently do not support sending chunked requests. While requests
    v2.7.0 implemented this themselves, later version urllib3 support this
    directly via a flag to urlopen so enabling it if needed should be trivial.
    TNc                 C   s   || _ t||d| _tjjtjjd| _|d kr4t}t	|t
tfsVt|d |d d}d | _d | _t	|trt|| _nt	|tr|\| _| _|| _|| _|| _|d krg | _i | _tf |  | _| j| j_d S )N)ra   rb   )httphttpsr   rR   )connectread)_verifyr]   _proxy_configbotocore
awsrequestZAWSHTTPConnectionPoolZAWSHTTPSConnectionPool_pool_classes_by_schemeDEFAULT_TIMEOUTrM   intfloatr   
_cert_file	_key_filestrtuple_timeout_max_pool_connections_socket_options_proxy_managersr   _get_pool_manager_kwargs_managerpool_classes_by_scheme)r`   r/   ra   timeoutZmax_pool_connectionssocket_optionsclient_certZproxies_configr+   r+   r,   rc     s4    
 

zURLLib3Session.__init__c                 K   s,   | j j}d|di|}dd | D S )Nuse_forwarding_for_httpsZproxy_use_forwarding_for_httpsc                 S   s   i | ]\}}|d k	r||qS r)   r+   ).0kvr+   r+   r,   
<dictcomp>D  s       z2URLLib3Session._proxies_kwargs.<locals>.<dictcomp>)r   ro   rE   items)r`   kwargsrb   Zproxies_kwargsr+   r+   r,   _proxies_kwargs<  s     zURLLib3Session._proxies_kwargsc                 K   s2   d| j | j|  | j| j| jd}|jf | |S )NT)strictr   maxsizessl_contextr   	cert_filekey_file)r   r   _get_ssl_contextr   r   r   update)r`   extra_kwargsZpool_manager_kwargsr+   r+   r,   r   F  s    	z'URLLib3Session._get_pool_manager_kwargsc                 C   s   t  S r)   )rK   rn   r+   r+   r,   r   S  s    zURLLib3Session._get_ssl_contextc                 C   sf   || j kr\| j|}| |}| j|d}|| j|d t|f|}| j|_	|| j |< | j | S )N)proxy_headers)proxy_ssl_context)
r   r   rm   _setup_proxy_ssl_contextr   r   r   r   r   r   )r`   rV   r   r   Zproxy_manager_kwargsproxy_managerr+   r+   r,   _get_proxy_managerV  s    



z!URLLib3Session._get_proxy_managerc                 C   s.   t |}|j}|sd}|jr*|d |j }|S )N/?)r    pathquery)r`   rf   rX   r   r+   r+   r,   	_path_urlf  s    zURLLib3Session._path_urlc                 C   s4   |  dr$|r$d|_t||_nd|_d |_d S )Nr   r=   	CERT_NONE)rO   rq   rI   r0   ca_certs)r`   connrf   r/   r+   r+   r,   _setup_ssl_certo  s
    zURLLib3Session._setup_ssl_certc              
   C   s   | j j}|d}|d}|d kr0|d kr0d S |  }zht|}t|jsRd|_|d k	rf|j|d t	|t
r|j|d |d d nt	|tr|| |W S  tttfk
r } zt|dW 5 d }~X Y nX d S )	Nproxy_ca_bundleZproxy_client_certT)cafiler   rR   )keyfileerror)r   ro   rE   r   r   r\   r[   r5   load_verify_locationsrM   r   load_cert_chainr   OSErrorURLLib3SSLErrorr   r$   )r`   rV   rb   r   Z
proxy_certr8   rf   er+   r+   r,   r   w  s&    





z'URLLib3Session._setup_proxy_ssl_contextc                 C   s   |r|  |}n| j}|S r)   )r   r   )r`   rf   rV   managerr+   r+   r,   _get_connection_manager  s    z&URLLib3Session._get_connection_managerc                 C   sX   |d k	}|s|  |S t|j}|dko6|  dd}|sF|drJ|S |  |S d S )Nr   r   Frp   )r   r    rd   r   rE   rq   )r`   rf   rV   	has_proxyproxy_schemeZusing_https_forwarding_proxyr+   r+   r,   _get_request_target  s    

z"URLLib3Session._get_request_targetc                 C   s    | dd}t|}| dkS )NzTransfer-Encoding    s   chunked)rE   r   rO   )r`   rk   Ztransfer_encodingr+   r+   r,   _chunked  s    zURLLib3Session._chunkedc                 C   s&   | j   | j D ]}|  qd S r)   )r   clearr   values)r`   r   r+   r+   r,   close  s    
zURLLib3Session.closec                 C   s<  z| j |j}| |j|}||j}| ||j| j ttj	
ddrdt|jj}||jd< | |j|}|j|j||j|jtdddd| |jd	}tj|j|j|j|}|js|j |W S  tk
 r }	 zt|j|	dW 5 d }	~	X Y n< ttjfk
r4 }	 zt |j|	dW 5 d }	~	X Y n t!k
rf }	 zt"t#||	dW 5 d }	~	X Y n t$k
r }	 zt%|j|	dW 5 d }	~	X Y n t&k
r }	 zt'|j|	dW 5 d }	~	X Y nr t(k
r }	 zt)|	||jdW 5 d }	~	X Y n@ t*k
r6 }	 z d	}
t+j,|
d
d t-|	dW 5 d }	~	X Y nX d S )NZ(BOTO_EXPERIMENTAL__ADD_PROXY_HOST_HEADER r[   F)	methodrf   bodyrk   retriesassert_same_hostpreload_contentdecode_contentchunked)endpoint_urlr   )rV   r   )r   requestr   z4Exception received when sending urllib3 HTTP requestT)exc_infor   ).r   rh   rf   r   connection_from_urlr   r   rQ   rC   rD   rE   r    hostnamer   r   urlopenr   r   rk   r   r   r   r   ZAWSResponsestatusZstream_outputcontentr   r   r   socketgaierrorr"   r
   r%   rY   URLLib3ConnectTimeoutErrorr   URLLib3ReadTimeoutErrorr   r	   r!   	Exceptionr-   r.   r#   )r`   r   rV   r   r   r[   Zrequest_targetZurllib_responsehttp_responser   messager+   r+   r,   send  sl    

     zURLLib3Session.send)N)rz   r{   r|   r}   MAX_POOL_CONNECTIONSrc   r   r   r   r   r   r   r   r   r   r   r   r   r+   r+   r+   r,   r   	  s*   
'
	
r   )NNNN)MloggingrC   os.pathr   r?   warningsbase64r   urllib3r   r   r   Zurllib3.exceptionsr   r   r   r   r	   r
   r   r   r   r   Zurllib3.util.retryr   Zurllib3.util.ssl_r   r   r   r   r   r   r   Zurllib3.util.urlr   r   r   ImportErrorcatch_warningssimplefilterDeprecationWarningZurllib3.contrib.pyopensslr   r   Zbotocore.awsrequestr   Zbotocore.compatr   r   r   r   r    Zbotocore.exceptionsr!   r"   r#   r$   r%   	getLoggerrz   r-   r   r   r   joindirname__file__r*   certifir(   r0   rK   rQ   rY   r\   r]   r   r+   r+   r+   r,   <module>   s^   $	
(
       
M;