U
    ³.¬bsF  ã                   @   s*  d dl Z d dlZd dlZd dlZd dlZd dlmZ d dlmZm	Z	m
Z
 d dlmZ d dlmZmZmZmZ d dlmZ d dlmZ d dlmZ d d	lmZmZmZmZmZmZmZ d d
l m!Z! zd dlm"Z"m#Z# W n$ e$k
rø   d dlm"Z"m#Z# Y nX zd dl%m&Z' W n" e$k
�r,   d dlm'Z' Y nX d dl(Z)d dl*m+Z+m,Z,m-Z-m.Z. d dl/m0Z0mZm1Z1m2Z2m3Z3m4Z4mZmZ d dl5m6Z6 e-ƒ  e  7e8¡Z9dZ:dZ;ej< =ej< >e?¡d¡Z@zd dlAmBZB W n e$k
�rÞ   dd„ ZBY nX dd„ ZCd%dd„ZDdd„ ZEdd„ ZFdd „ ZGG d!d"„ d"ƒZHG d#d$„ d$ƒZIdS )&é    N)Ú	b64encode)ÚPoolManagerÚTimeoutÚproxy_from_url)ÚConnectTimeoutError)ÚLocationParseErrorÚNewConnectionErrorÚProtocolErrorÚ
ProxyError)ÚReadTimeoutError)ÚSSLError)ÚRetry)ÚDEFAULT_CIPHERSÚOP_NO_COMPRESSIONÚPROTOCOL_TLSÚOP_NO_SSLv2ÚOP_NO_SSLv3Úis_ipaddressÚssl)Ú	parse_url)ÚOP_NO_TICKETÚPROTOCOL_TLS_CLIENT)Úorig_util_SSLContext)Ú
SSLContext)ÚIPV6_ADDRZ_REÚensure_bytesÚfilter_ssl_warningsÚurlparse)ÚConnectionClosedErrorr   ÚEndpointConnectionErrorÚHTTPClientErrorÚInvalidProxiesConfigErrorÚProxyConnectionErrorr   r   )Úunquoteé<   é
   z
cacert.pem)Úwherec                   C   s   t S ©N)ÚDEFAULT_CA_BUNDLE© r)   r)   ú8/tmp/pip-unpacked-wheel-7df6wvge/botocore/httpsession.pyr&   J   s    r&   c                 C   s&   | dk	r| S t ƒ }t d|› �¡ |S )NTzCertificate path: )r&   ÚloggerÚdebug)ÚverifyZ	cert_pathr)   r)   r*   Úget_cert_pathN   s
    r.   c                    sø   | r| t krt} t| ƒ‰ ˆ  |p"t¡ |dkr4tjn|}|dkrdd}|tO }|tO }|t	O }|t
O }ˆ  j|O  _|tjks†tjdkrœtˆ ddƒdk	rœdˆ _‡ fdd„}|tjkrÀ|ˆ _|ƒ  n|ƒ  |ˆ _tˆ dƒrôtj d	¡}|rôtjjsô|ˆ _ˆ S )
zÎThis function is a vendored version of the same function in urllib3

    We vendor this function to ensure that the SSL contexts we construct
    always use the std lib SSLContext instead of pyopenssl.
    Nr   )é   é   é   Úpost_handshake_authTc                      s   t ˆ dd ƒd k	rdˆ _d S )NÚcheck_hostnameF)Úgetattrr3   r)   ©Úcontextr)   r*   Údisable_check_hostname‡   s    ÿz6create_urllib3_context.<locals>.disable_check_hostnameÚkeylog_filenameÚSSLKEYLOGFILE)r   r   r   Úset_ciphersr   r   ÚCERT_REQUIREDr   r   r   r   ÚoptionsÚsysÚversion_infor4   r2   Úverify_modeÚhasattrÚosÚenvironÚgetÚflagsÚignore_environmentr8   )Ússl_versionÚ	cert_reqsr<   Úciphersr7   Zsslkeylogfiler)   r5   r*   Úcreate_urllib3_contextX   s<    		ÿÿþ

rI   c                 C   s   t | tƒr| S |  ¡ dkS dS )z~Ensures a boolean value if a string or boolean is provided

    For strings, the value for True/False is case insensitive
    ÚtrueN)Ú
isinstanceÚboolÚlower)Úvalr)   r)   r*   Úensure_boolean¥   s    
rO   c                 C   s<   d}t | ƒ}|jr"|  |j|d¡} |jr8|  |j|d¡} | S )zÌ
    Mask proxy url credentials.

    :type proxy_url: str
    :param proxy_url: The proxy url, i.e. https://username:password@proxy.com

    :return: Masked proxy url, i.e. https://***:***@proxy.com
    z***é   )r   ÚusernameÚreplaceÚpassword)Ú	proxy_urlÚmaskÚ
parsed_urlr)   r)   r*   Úmask_proxy_url°   s    	rW   c                 C   s   t | ƒptt | ¡ƒS )z@Wrap urllib3's is_ipaddress to support bracketed IPv6 addresses.)r   rL   r   Úmatch)Úhostr)   r)   r*   Ú_is_ipaddressÂ   s    rZ   c                   @   sN   e Zd ZdZddd„Zdd„ Zdd„ Zed	d
„ ƒZdd„ Z	dd„ Z
dd„ ZdS )ÚProxyConfigurationa  Represents a proxy configuration dictionary and additional settings.

    This class represents a proxy configuration dictionary and provides utility
    functions to retreive well structured proxy urls and proxy headers from the
    proxy configuration dictionary.
    Nc                 C   s(   |d kri }|d kri }|| _ || _d S r'   )Ú_proxiesÚ_proxies_settings)ÚselfÚproxiesÚproxies_settingsr)   r)   r*   Ú__init__Ï   s    zProxyConfiguration.__init__c                 C   s(   t |ƒ}| j |j¡}|r$|  |¡}|S )z6Retrieves the corresponding proxy url for a given url.)r   r\   rC   ÚschemeÚ_fix_proxy_url)r^   ÚurlrV   Úproxyr)   r)   r*   Úproxy_url_forØ   s
    
z ProxyConfiguration.proxy_url_forc                 C   s2   i }|   |¡\}}|r.|r.|  ||¡}||d< |S )z@Retrieves the corresponding proxy headers for a given proxy url.zProxy-Authorization)Ú_get_auth_from_urlÚ_construct_basic_auth)r^   rT   ÚheadersrQ   rS   Ú
basic_authr)   r)   r*   Úproxy_headers_forà   s    z$ProxyConfiguration.proxy_headers_forc                 C   s   | j S r'   )r]   ©r^   r)   r)   r*   Úsettingsé   s    zProxyConfiguration.settingsc                 C   s6   |  d¡s|  d¡r|S |  d¡r*d| S d| S d S )Núhttp:zhttps:z//zhttp://)Ú
startswith)r^   rT   r)   r)   r*   rc   í   s
    
z!ProxyConfiguration._fix_proxy_urlc                 C   s.   |› d|› �}t | d¡ƒ ¡  ¡ }d|› �S )Nú:ÚasciizBasic )r   ÚencodeÚstripÚdecode)r^   rQ   rS   Úauth_strZencoded_strr)   r)   r*   rh   õ   s    z(ProxyConfiguration._construct_basic_authc              	   C   s>   t |ƒ}zt|jƒt|jƒfW S  ttfk
r8   Y dS X d S )N)NN)r   r#   rQ   rS   ÚAttributeErrorÚ	TypeError)r^   rd   rV   r)   r)   r*   rg   ú   s
    z%ProxyConfiguration._get_auth_from_url)NN)Ú__name__Ú
__module__Ú__qualname__Ú__doc__ra   rf   rk   Úpropertyrm   rc   rh   rg   r)   r)   r)   r*   r[   Ç   s   
		
r[   c                   @   sŠ   e Zd ZdZdddedddfdd„Zdd„ Zdd	„ Zd
d„ Zdd„ Z	dd„ Z
dd„ Zdd„ Zddd„Zdd„ Zdd„ Zdd„ Zdd„ ZdS )ÚURLLib3Sessiona_  A basic HTTP client that supports connection pooling and proxies.

    This class is inspired by requests.adapters.HTTPAdapter, but has been
    boiled down to meet the use cases needed by botocore. For the most part
    this classes matches the functionality of HTTPAdapter in requests v2.7.0
    (the same as our vendored version). The only major difference of note is
    that we currently do not support sending chunked requests. While requests
    v2.7.0 implemented this themselves, later version urllib3 support this
    directly via a flag to urlopen so enabling it if needed should be trivial.
    TNc                 C   sÎ   || _ t||d�| _tjjtjjdœ| _|d kr4t}t	|t
tfƒsVt|d |d d�}d | _d | _t	|tƒrt|| _nt	|tƒrŠ|\| _| _|| _|| _|| _|d krªg | _i | _tf |  ¡ Ž| _| j| j_d S )N)r_   r`   )ÚhttpÚhttpsr   rP   )ÚconnectÚread)Ú_verifyr[   Ú_proxy_configÚbotocoreÚ
awsrequestZAWSHTTPConnectionPoolZAWSHTTPSConnectionPoolÚ_pool_classes_by_schemeÚDEFAULT_TIMEOUTrK   ÚintÚfloatr   Ú
_cert_fileÚ	_key_fileÚstrÚtupleÚ_timeoutÚ_max_pool_connectionsÚ_socket_optionsÚ_proxy_managersr   Ú_get_pool_manager_kwargsÚ_managerÚpool_classes_by_scheme)r^   r-   r_   ÚtimeoutZmax_pool_connectionsÚsocket_optionsÚclient_certZproxies_configr)   r)   r*   ra     s4    
 ÿþ

zURLLib3Session.__init__c                 K   s,   | j j}d| d¡i|–}dd„ | ¡ D ƒS )NÚuse_forwarding_for_httpsZproxy_use_forwarding_for_httpsc                 S   s   i | ]\}}|d k	r||“qS r'   r)   )Ú.0ÚkÚvr)   r)   r*   Ú
<dictcomp>=  s       z2URLLib3Session._proxies_kwargs.<locals>.<dictcomp>)rƒ   rm   rC   Úitems)r^   Úkwargsr`   Zproxies_kwargsr)   r)   r*   Ú_proxies_kwargs5  s     ÿÿüzURLLib3Session._proxies_kwargsc                 K   s2   d| j | j|  ¡ | j| j| jdœ}|jf |Ž |S )NT)Ústrictr•   ÚmaxsizeÚssl_contextr–   Ú	cert_fileÚkey_file)rŽ   r�   Ú_get_ssl_contextr�   rŠ   r‹   Úupdate)r^   Úextra_kwargsZpool_manager_kwargsr)   r)   r*   r’   ?  s    ù	z'URLLib3Session._get_pool_manager_kwargsc                 C   s   t ƒ S r'   )rI   rl   r)   r)   r*   r¥   L  s    zURLLib3Session._get_ssl_contextc                 C   sf   || j kr\| j |¡}|  |¡}| j|d�}| | j|d�¡ t|f|Ž}| j|_	|| j |< | j | S )N)Úproxy_headers)Úproxy_ssl_context)
r‘   rƒ   rk   Ú_setup_proxy_ssl_contextr’   r¦   rŸ   r   r†   r”   )r^   rT   r¨   r©   Zproxy_manager_kwargsÚproxy_managerr)   r)   r*   Ú_get_proxy_managerO  s    

ÿ
ÿ
z!URLLib3Session._get_proxy_managerc                 C   s.   t |ƒ}|j}|sd}|jr*|d |j }|S )Nú/ú?)r   ÚpathÚquery)r^   rd   rV   r¯   r)   r)   r*   Ú	_path_url_  s    zURLLib3Session._path_urlc                 C   s4   |  ¡  d¡r$|r$d|_t|ƒ|_nd|_d |_d S )Nr   r;   Ú	CERT_NONE)rM   ro   rG   r.   Úca_certs)r^   Úconnrd   r-   r)   r)   r*   Ú_setup_ssl_certh  s
    zURLLib3Session._setup_ssl_certc              
   C   sØ   | j j}| d¡}| d¡}|d kr0|d kr0d S |  ¡ }zht|ƒ}t|jƒsRd|_|d k	rf|j|d� t	|t
ƒrˆ|j|d |d d� nt	|tƒrœ| |¡ |W S  tttfk
rÒ } zt|d�‚W 5 d }~X Y nX d S )	NÚproxy_ca_bundleZproxy_client_certT)Úcafiler   rP   )Úkeyfile©Úerror)rƒ   rm   rC   r¥   r   rZ   rY   r3   Úload_verify_locationsrK   r�   Úload_cert_chainrŒ   ÚOSErrorÚURLLib3SSLErrorr   r!   )r^   rT   r`   r¶   Z
proxy_certr6   rd   Úer)   r)   r*   rª   p  s&    





z'URLLib3Session._setup_proxy_ssl_contextc                 C   s   |r|   |¡}n| j}|S r'   )r¬   r“   )r^   rd   rT   Úmanagerr)   r)   r*   Ú_get_connection_managerŠ  s    z&URLLib3Session._get_connection_managerc                 C   sX   |d k	}|s|   |¡S t|ƒj}|dko6|  ¡  dd¡}|sF| d¡rJ|S |   |¡S d S )Nr   r˜   Frn   )r±   r   rb   rŸ   rC   ro   )r^   rd   rT   Ú	has_proxyÚproxy_schemeZusing_https_forwarding_proxyr)   r)   r*   Ú_get_request_target‘  s    

þz"URLLib3Session._get_request_targetc                 C   s    |  dd¡}t|ƒ}| ¡ dkS )NzTransfer-Encodingó    s   chunked)rC   r   rM   )r^   ri   Ztransfer_encodingr)   r)   r*   Ú_chunked¥  s    zURLLib3Session._chunkedc                 C   s&   | j  ¡  | j ¡ D ]}| ¡  qd S r'   )r“   Úclearr‘   Úvalues)r^   rÀ   r)   r)   r*   Úcloseª  s    
zURLLib3Session.closec                 C   s<  zÈ| j  |j¡}|  |j|¡}| |j¡}|  ||j| j¡ ttj	 
dd¡ƒrdt|jƒj}||jd< |  |j|¡}|j|j||j|jtdƒddd|  |j¡d�	}tj |j|j|j|¡}|jsÄ|j |W S  tk
� rü }	 zt|j|	d�‚W 5 d }	~	X Y �n< ttjfk
�r4 }	 zt |j|	d�‚W 5 d }	~	X Y �n t!k
�rf }	 zt"t#|ƒ|	d�‚W 5 d }	~	X Y nÒ t$k
�r– }	 zt%|j|	d�‚W 5 d }	~	X Y n¢ t&k
�rÆ }	 zt'|j|	d�‚W 5 d }	~	X Y nr t(k
�rø }	 zt)|	||jd�‚W 5 d }	~	X Y n@ t*k
�r6 }	 z d	}
t+j,|
d
d� t-|	d�‚W 5 d }	~	X Y nX d S )NZ(BOTO_EXPERIMENTAL__ADD_PROXY_HOST_HEADERÚ rY   F)	Úmethodrd   Úbodyri   ÚretriesÚassert_same_hostÚpreload_contentÚdecode_contentÚchunked)Úendpoint_urlrº   )rT   rº   )rº   ÚrequestrÒ   z4Exception received when sending urllib3 HTTP requestT)Úexc_infor¹   ).rƒ   rf   rd   rÁ   Úconnection_from_urlrµ   r‚   rO   rA   rB   rC   r   Úhostnamer¨   rÄ   ÚurlopenrË   rÌ   ri   r   rÆ   r„   r…   ZAWSResponseÚstatusZstream_outputÚcontentr¾   r   r   ÚsocketÚgaierrorr   r
   r"   rW   ÚURLLib3ConnectTimeoutErrorr   ÚURLLib3ReadTimeoutErrorr   r	   r   Ú	Exceptionr+   r,   r    )r^   rÓ   rT   rÀ   r´   rY   Zrequest_targetZurllib_responseÚhttp_responser¿   Úmessager)   r)   r*   Úsend¯  sl    ÿ

÷ü   ÿ  ÿzURLLib3Session.send)N)rx   ry   rz   r{   ÚMAX_POOL_CONNECTIONSra   rŸ   r’   r¥   r¬   r±   rµ   rª   rÁ   rÄ   rÆ   rÉ   rá   r)   r)   r)   r*   r}     s*   ø
'
	
r}   )NNNN)JÚloggingrA   Úos.pathrÚ   r=   Úbase64r   Úurllib3r   r   r   Zurllib3.exceptionsr   rÜ   r   r   r	   r
   r   rÝ   r   r¾   Zurllib3.util.retryr   Zurllib3.util.ssl_r   r   r   r   r   r   r   Zurllib3.util.urlr   r   r   ÚImportErrorZurllib3.contrib.pyopensslr   r   Zbotocore.awsrequestr„   Zbotocore.compatr   r   r   r   Zbotocore.exceptionsr   r   r    r!   r"   Z(botocore.vendored.six.moves.urllib_parser#   Ú	getLoggerrx   r+   r‡   râ   r¯   ÚjoinÚdirnameÚ__file__r(   Úcertifir&   r.   rI   rO   rW   rZ   r[   r}   r)   r)   r)   r*   Ú<module>   sZ   $	(

       ÿ
M;