Show More
@@ -1,127 +1,127 b'' | |||
|
1 | 1 | # Copyright 2010, Google Inc. |
|
2 | 2 | # All rights reserved. |
|
3 | 3 | # |
|
4 | 4 | # Redistribution and use in source and binary forms, with or without |
|
5 | 5 | # modification, are permitted provided that the following conditions are |
|
6 | 6 | # met: |
|
7 | 7 | # |
|
8 | 8 | # * Redistributions of source code must retain the above copyright |
|
9 | 9 | # notice, this list of conditions and the following disclaimer. |
|
10 | 10 | # * Redistributions in binary form must reproduce the above |
|
11 | 11 | # copyright notice, this list of conditions and the following disclaimer |
|
12 | 12 | # in the documentation and/or other materials provided with the |
|
13 | 13 | # distribution. |
|
14 | 14 | # * Neither the name of Google Inc. nor the names of its |
|
15 | 15 | # contributors may be used to endorse or promote products derived from |
|
16 | 16 | # this software without specific prior written permission. |
|
17 | 17 | |
|
18 | 18 | # THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS |
|
19 | 19 | # "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT |
|
20 | 20 | # LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR |
|
21 | 21 | # A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT |
|
22 | 22 | # OWNER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, |
|
23 | 23 | # SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT |
|
24 | 24 | # LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, |
|
25 | 25 | # DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY |
|
26 | 26 | # THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT |
|
27 | 27 | # (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE |
|
28 | 28 | # OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. |
|
29 | 29 | """Abstraction to simplify socket use for Python < 2.6 |
|
30 | 30 | |
|
31 | 31 | This will attempt to use the ssl module and the new |
|
32 | 32 | socket.create_connection method, but fall back to the old |
|
33 | 33 | methods if those are unavailable. |
|
34 | 34 | """ |
|
35 | 35 | import logging |
|
36 | 36 | import socket |
|
37 | 37 | |
|
38 | 38 | logger = logging.getLogger(__name__) |
|
39 | 39 | |
|
40 | 40 | try: |
|
41 | 41 | import ssl |
|
42 | 42 | ssl.wrap_socket # make demandimporters load the module |
|
43 | 43 | have_ssl = True |
|
44 | 44 | except ImportError: |
|
45 | 45 | import httplib |
|
46 | 46 | import urllib2 |
|
47 | 47 | have_ssl = getattr(urllib2, 'HTTPSHandler', False) |
|
48 | 48 | ssl = False |
|
49 | 49 | |
|
50 | 50 | |
|
51 | 51 | try: |
|
52 | 52 | create_connection = socket.create_connection |
|
53 | 53 | except AttributeError: |
|
54 | 54 | def create_connection(address): |
|
55 | 55 | host, port = address |
|
56 | 56 | msg = "getaddrinfo returns an empty list" |
|
57 | 57 | sock = None |
|
58 | 58 | for res in socket.getaddrinfo(host, port, 0, |
|
59 | 59 | socket.SOCK_STREAM): |
|
60 | 60 | af, socktype, proto, _canonname, sa = res |
|
61 | 61 | try: |
|
62 | 62 | sock = socket.socket(af, socktype, proto) |
|
63 | 63 | logger.info("connect: (%s, %s)", host, port) |
|
64 | 64 | sock.connect(sa) |
|
65 | 65 | except socket.error, msg: |
|
66 | 66 | logger.info('connect fail: %s %s', host, port) |
|
67 | 67 | if sock: |
|
68 | 68 | sock.close() |
|
69 | 69 | sock = None |
|
70 | 70 | continue |
|
71 | 71 | break |
|
72 | 72 | if not sock: |
|
73 |
raise socket.error |
|
|
73 | raise socket.error(msg) | |
|
74 | 74 | return sock |
|
75 | 75 | |
|
76 | 76 | if ssl: |
|
77 | 77 | wrap_socket = ssl.wrap_socket |
|
78 | 78 | CERT_NONE = ssl.CERT_NONE |
|
79 | 79 | CERT_OPTIONAL = ssl.CERT_OPTIONAL |
|
80 | 80 | CERT_REQUIRED = ssl.CERT_REQUIRED |
|
81 | 81 | else: |
|
82 | 82 | class FakeSocket(httplib.FakeSocket): |
|
83 | 83 | """Socket wrapper that supports SSL. |
|
84 | 84 | """ |
|
85 | 85 | # backport the behavior from Python 2.6, which is to busy wait |
|
86 | 86 | # on the socket instead of anything nice. Sigh. |
|
87 | 87 | # See http://bugs.python.org/issue3890 for more info. |
|
88 | 88 | def recv(self, buflen=1024, flags=0): |
|
89 | 89 | """ssl-aware wrapper around socket.recv |
|
90 | 90 | """ |
|
91 | 91 | if flags != 0: |
|
92 | 92 | raise ValueError( |
|
93 | 93 | "non-zero flags not allowed in calls to recv() on %s" % |
|
94 | 94 | self.__class__) |
|
95 | 95 | while True: |
|
96 | 96 | try: |
|
97 | 97 | return self._ssl.read(buflen) |
|
98 | 98 | except socket.sslerror, x: |
|
99 | 99 | if x.args[0] == socket.SSL_ERROR_WANT_READ: |
|
100 | 100 | continue |
|
101 | 101 | else: |
|
102 | 102 | raise x |
|
103 | 103 | |
|
104 | 104 | _PROTOCOL_SSLv23 = 2 |
|
105 | 105 | |
|
106 | 106 | CERT_NONE = 0 |
|
107 | 107 | CERT_OPTIONAL = 1 |
|
108 | 108 | CERT_REQUIRED = 2 |
|
109 | 109 | |
|
110 | 110 | def wrap_socket(sock, keyfile=None, certfile=None, |
|
111 | 111 | server_side=False, cert_reqs=CERT_NONE, |
|
112 | 112 | ssl_version=_PROTOCOL_SSLv23, ca_certs=None, |
|
113 | 113 | do_handshake_on_connect=True, |
|
114 | 114 | suppress_ragged_eofs=True): |
|
115 | 115 | if cert_reqs != CERT_NONE and ca_certs: |
|
116 | 116 | raise CertificateValidationUnsupported( |
|
117 | 117 | 'SSL certificate validation requires the ssl module' |
|
118 | 118 | '(included in Python 2.6 and later.)') |
|
119 | 119 | sslob = socket.ssl(sock) |
|
120 | 120 | # borrow httplib's workaround for no ssl.wrap_socket |
|
121 | 121 | sock = FakeSocket(sock, sslob) |
|
122 | 122 | return sock |
|
123 | 123 | |
|
124 | 124 | |
|
125 | 125 | class CertificateValidationUnsupported(Exception): |
|
126 | 126 | """Exception raised when cert validation is requested but unavailable.""" |
|
127 | 127 | # no-check-code |
General Comments 0
You need to be logged in to leave comments.
Login now