hBddlZddlZ ddlmZej ddkreZndZddlm Z d dZ dZ d Z y#e$rdZY3wxYw) N) ip_addresscyN)addresss ]/var/www/html/ranktracker/api/venv/lib/python3.12/site-packages/pymongo/ssl_match_hostname.pyr sc|Srr)values rr r sUr )CertificateErrorcg}|sy|jd}|d}|dd}|jd}||kDrtdt|z|s!|j |j k(S|dk(r|j dn{|j d s|j d r%|j tj|n4|j tj|jd d |D]&}|j tj|(tjd d j|zdztj} | j|S)zhMatching according to RFC 6125, section 6.4.3 http://tools.ietf.org/html/rfc6125#section-6.4.3 F.rN*z,too many wildcards in certificate DNS name: z[^.]+zxn--z\*z[^.]*z\Az\.z\Z)splitcountrreprlowerappend startswithreescapereplacecompilejoin IGNORECASEmatch) dnhostname max_wildcardspatspartsleftmost remainder wildcardsfragpats r_dnsname_matchr*sJ D  HHTNEQxHab Is#I=  :T"X EG G xxzX^^--- 3 G   V $(;(;F(C BIIh'( BIIh'//w?@% BIIdO$% **UUZZ--5r}} EC 99X r cPtt|j}||k(S)zExact matching of IP addresses. RFC 6125 explicitly doesn't define an algorithm for this (section 1.7.2 - "Out of Scope"). )r_unicoderstrip)ipnamehost_ipips r_ipaddress_matchr1Hs& HV$++- .B =r c |s td tt|}g}|j dd}|D]S\}}|dk(r"|t ||ry|j |-|dk(s3|t||ry|j |U|sG|j ddD]2}|D]+\}}|dk(s t ||ry|j |-4t|d kDr.td |d d jtt|t|d k(rtd |d |dtd#ttf$rd}Y2wxYw)zVerify that *cert* (in decoded format as returned by SSLSocket.getpeercert()) matches the *hostname*. RFC 2818 and RFC 6125 rules are followed. CertificateError is raised on failure. On success, the function returns nothing. ztempty or no certificate, match_hostname needs a SSL socket or SSL context with either CERT_OPTIONAL or CERT_REQUIREDNsubjectAltNamerDNSz IP Addresssubject commonNamerz hostname z doesn't match either of z, z doesn't match rz=no appropriate commonName or subjectAltName fields were found) ValueErrorrr, UnicodeErrorgetr*rr1lenrrmapr)certr!r/dnsnamessankeyr subs rmatch_hostnamerASs :; ;Xh/0H ((#R (C# U %<>%#B OOE " L "'7w'G OOE "# 88Ir* +C! + U,&%eX6OOE*  + + 8}q3tX#67 9: : X! ! &' ' /0 0E  %sEEE)r) rsys ipaddressr ImportError version_infounicoder,pymongo.errorsrr*r1rArr rrHs^ &$ AH"H+0f10S&%J&s9AA