�
N�g;k � �h � d Z ddlZddlZddlZddlZddlmZmZ ddlm Z
ddlm Z ddlm
Z
mZmZmZ ddlmZ ddlmZmZ dd lmZ dd
lmZmZ dd lmZ dd lm Z dd
l m Z ddl m!Z! ddl"m#Z# ddl$m%Z%m&Z& ddl'm(Z( ddl)m*Z*m+Z+m Z m,Z,m-Z-m.Z.mZm/Z/m0Z0mZ ddl1m2Z2 ddl3m4Z4 ddl5m6Z6m7Z7m8Z8m9Z9m:Z:m;Z;m<Z< ddl=m>Z> ej� rddl1mAZA dZBdZCdZDdZE ddlFZF e!� ZGeGj� e7e6� � d!d �ZI G d � d � ZJ G d � d eJ� ZKy# e?$ r d� Z>Y �kw xY w# e?$ r dZGY �;w xY w)"z�
requests.adapters
~~~~~~~~~~~~~~~~~
This module contains the transport adapters that Requests uses to define
and maintain connections.
� N)�ClosedPoolError�ConnectTimeoutError)� HTTPError)�
InvalidHeader)�LocationValueError�
MaxRetryError�NewConnectionError�
ProtocolError)�
ProxyError)�ReadTimeoutError�
ResponseError)�SSLError)� PoolManager�proxy_from_url)�Timeout)� parse_url)�Retry)�create_urllib3_context� )�_basic_auth_str)�
basestring�urlparse)�extract_cookies_to_jar)
�ConnectionError�ConnectTimeoutr �InvalidProxyURL�
InvalidSchema�
InvalidURLr � ReadTimeout�
RetryErrorr )�Response)�CaseInsensitiveDict)�DEFAULT_CA_BUNDLE_PATH�extract_zipped_paths�get_auth_from_url�get_encoding_from_headers�prepend_scheme_if_needed� select_proxy�
urldefragauth)�SOCKSProxyManagerc � � t d� �)Nz'Missing dependencies for SOCKS support.)r )�args�kwargss ��/build/snapcraft-certbot-2c33630aaf29c47357e5a1683f659d3d/parts/certbot/install/lib/python3.12/site-packages/requests/adapters.pyr* r* ? s � �� E�F�F� )�PreparedRequestF�
c � � i }i }t | j � }|j j � }|j }t |di � } | j
d� }
t d uxr |
} d} |du rd} nJ|du r | r
t |d< n:t |t � r*t j j |� s||d< n||d< | |d < |�4t |t � r t |� d
k( r|d |d < |d
|d< n||d < ||j |d�}||fS )N�connection_pool_kw� ssl_context�
CERT_REQUIREDF� CERT_NONET�ca_certs� ca_cert_dir� cert_reqs� r � cert_filer �key_file)�scheme�host�port)r �urlr= �lowerr? �getattr�get�_preloaded_ssl_context�
isinstance�str�os�path�isdir�tuple�len�hostname)
�request�verify� client_cert� poolmanager� host_params� pool_kwargs�parsed_request_urlr= r? �poolmanager_kwargs�has_poolmanager_ssl_context� should_use_default_ssl_contextr9 s
r. �_urllib3_request_contextrW Z s; � � �K��K�!�'�+�+�.��
�
&�
&�
,�
,�
.�F� � "� "�D� !��.B�B�G��"4�"8�"8� �"G� � �d�*�N�3N�/N� #� �I�
��� � � �4� � :�%;� �M�"� �F�C� ��w�w�}�}�V�$�&,�K�
� #�)/�K�
� &� (�K� � �� � �k�5� )�c�+�.>�!�.C�'2�1�~�K� � $�&1�!�n�K�
� #� (3�K� � $��"�+�+���K�
� � #�#r/ c �2 � � e Zd ZdZ� fd�Z dd�Zd� Z� xZS )� BaseAdapterzThe Base Transport Adapterc �" �� t �| � � y �N)�super�__init__)�self� __class__s �r. r] zBaseAdapter.__init__� s �� �
���r/ c � � t �)aC Sends PreparedRequest object. Returns Response object.
:param request: The :class:`PreparedRequest <PreparedRequest>` being sent.
:param stream: (optional) Whether to stream the request content.
:param timeout: (optional) How long to wait for the server to send
data before giving up, as a float, or a :ref:`(connect timeout,
read timeout) <timeouts>` tuple.
:type timeout: float or tuple
:param verify: (optional) Either a boolean, in which case it controls whether we verify
the server's TLS certificate, or a string, in which case it must be a path
to a CA bundle to use
:param cert: (optional) Any user-provided SSL certificate to be trusted.
:param proxies: (optional) The proxies dictionary to apply to the request.
��NotImplementedError)r^ rM �stream�timeoutrN �cert�proxiess r. �sendzBaseAdapter.send� s
� �" "�!r/ c � � t �)z!Cleans up adapter specific items.ra )r^ s r. �closezBaseAdapter.close� s � �!�!r/ �FNTNN)�__name__�
__module__� __qualname__�__doc__r] rg ri �
__classcell__�r_ s @r. rY rY � s �� �$�� TX�"�&"r/ rY c � � � e Zd ZdZg d�Zeeeef� fd� Zd� Z d� Z
efd�Z d� Z d� Z
d � Zdd
�Zdd �Zdd �Zd
� Zd� Zd� Zd� Z dd�Z� xZS )� HTTPAdaptera� The built-in HTTP Adapter for urllib3.
Provides a general-case interface for Requests sessions to contact HTTP and
HTTPS urls by implementing the Transport Adapter interface. This class will
usually be created by the :class:`Session <Session>` class under the
covers.
:param pool_connections: The number of urllib3 connection pools to cache.
:param pool_maxsize: The maximum number of connections to save in the pool.
:param max_retries: The maximum number of retries each connection
should attempt. Note, this applies only to failed DNS lookups, socket
connections and connection timeouts, never to requests where data has
made it to the server. By default, Requests does not retry failed
connections. If you need granular control over the conditions under
which we retry a request, import urllib3's ``Retry`` class and pass
that instead.
:param pool_block: Whether the connection pool should block for connections.
Usage::
>>> import requests
>>> s = requests.Session()
>>> a = requests.adapters.HTTPAdapter(max_retries=3)
>>> s.mount('http://', a)
)� max_retries�config�_pool_connections�
_pool_maxsize� _pool_blockc � �� |t k( rt dd�� | _ nt j |� | _ i | _ i | _ t �| � � || _ || _ || _
| j |||�� y )Nr F)�read��block) �DEFAULT_RETRIESr rs �from_intrt �
proxy_managerr\ r] ru rv rw �init_poolmanager)r^ �pool_connections� pool_maxsizers �
pool_blockr_ s �r. r] zHTTPAdapter.__init__� su �� � �/� )� $�Q�U� 3�D� � $�~�~�k� :�D� ��� � ���
����!1�� � )���%��� � � � .� �J� �Or/ c �X � | j D �ci c] }|t | |d � �� c}S c c}w r[ )� __attrs__rB )r^ �attrs r. � __getstate__zHTTPAdapter.__getstate__� s( � �<@�N�N�K�D��g�d�D�$�/�/�K�K��Ks �'c �� � i | _ i | _ |j � D ] \ }}t | ||� � | j | j
| j | j �� y )Nrz )r~ rt �items�setattrr ru rv rw )r^ �stater� �values r. � __setstate__zHTTPAdapter.__setstate__� sf � � ����� � �;�;�=� '�K�D�%� �D�$�� &� '�
� � � � "� "�D�$6�$6�d�>N�>N� �
r/ c �V � || _ || _ || _ t d|||d�|��| _ y)a Initializes a urllib3 PoolManager.
This method should not be called from user code, and is only
exposed for use when subclassing the
:class:`HTTPAdapter <requests.adapters.HTTPAdapter>`.
:param connections: The number of urllib3 connection pools to cache.
:param maxsize: The maximum number of connections to save in the pool.
:param block: Block when no free connections are available.
:param pool_kwargs: Extra keyword arguments used to initialize the Pool Manager.
)� num_pools�maxsizer{ N� )ru rv rw r rP )r^ � connectionsr� r{ rR s r. r z HTTPAdapter.init_poolmanager� sA � � "-�� � $��� ���&�
�!���
� �
��r/ c � � || j v r| j | }|S |j � j d� rOt |� \ }}t |f||| j
| j | j d�|��x}| j |< |S | j |� }t |f|| j
| j | j d�|��x}| j |< |S )a� Return urllib3 ProxyManager for the given proxy.
This method should not be called from user code, and is only
exposed for use when subclassing the
:class:`HTTPAdapter <requests.adapters.HTTPAdapter>`.
:param proxy: The proxy to return a urllib3 ProxyManager for.
:param proxy_kwargs: Extra keyword arguments used to configure the Proxy Manager.
:returns: ProxyManager
:rtype: urllib3.ProxyManager
�socks)�username�passwordr� r� r{ )�
proxy_headersr� r� r{ )
r~ rA �
startswithr% r* ru rv rw r� r )r^ �proxy� proxy_kwargs�managerr� r� r� s r. �proxy_manager_forz HTTPAdapter.proxy_manager_for
s � � �D�&�&� &��(�(��/�G�. ��- �[�[�]�
%�
%�g�
.�!2�5�!9� �H�h�2C��3�!�!� �0�0� �*�*��&�&�
3� �3�
�G�d�(�(��/�( �� !� .� .�u� 5�M�2@��3� +� �0�0� �*�*��&�&� 3� �
3�
�G�d�(�(��/� �r/ c �� � |j � j d� rk|rid|_ |durs|}t j j |� st
d|� �� �t j j |� s||_ n ||_ nd|_ d|_ d|_ |r�t |t � s|d |_ |d |_
n||_ d|_
|j rAt j j |j � st
d |j � �� �|j rBt j j |j � st
d
|j � �� �yyy) aA Verify a SSL certificate. This method should not be called from user
code, and is only exposed for use when subclassing the
:class:`HTTPAdapter <requests.adapters.HTTPAdapter>`.
:param conn: The urllib3 connection object associated with the cert.
:param url: The requested URL.
:param verify: Either a boolean, in which case it controls whether we verify
the server's TLS certificate, or a string, in which case it must be a path
to a CA bundle to use
:param cert: The SSL certificate to verify.
�httpsr5 TzCCould not find a suitable TLS CA certificate bundle, invalid path: r6 Nr r z7Could not find the TLS certificate file, invalid path: z/Could not find the TLS key file, invalid path: )rA r� r9 rG rH �exists�OSErrorrI r7 r8 rE r r; r< )r^ �connr@ rN re �cert_locs r. � cert_verifyzHTTPAdapter.cert_verify0 sC � � �9�9�;� !� !�'� *�v� ,�D�N� �T�!�!���w�w�~�~�h�/�!�)�)1�
�4�� �
�w�w�}�}�X�.�$,�D�M�'/�D�$� (�D�N� �D�M� #�D� � � �d�J�/�!%�a���� $�Q���
�!%��� $��
��~�~�b�g�g�n�n�T�^�^�&D� �%�%)�^�^�$4�6�� � �}�}�R�W�W�^�^�D�M�M�%B� �E�d�m�m�_�U�� � &C�}� r/ c �� � t � }t |dd� |_ t t |di � � |_ t |j � |_ ||_ |j j |_ t |j t � r!|j j d� |_
n|j |_
t |j ||� ||_ | |_ |S )a� Builds a :class:`Response <requests.Response>` object from a urllib3
response. This should not be called from user code, and is only exposed
for use when subclassing the
:class:`HTTPAdapter <requests.adapters.HTTPAdapter>`
:param req: The :class:`PreparedRequest <PreparedRequest>` used to generate the response.
:param resp: The urllib3 response object.
:rtype: requests.Response
�statusN�headerszutf-8)r! rB � status_coder" r� r& �encoding�raw�reasonrE r@ �bytes�decoder �cookiesrM �
connection)r^ �req�resp�responses r. �build_responsezHTTPAdapter.build_responseg s� � � �:�� '�t�X�t� <�� � /�w�t�Y��/K�L��� 6�h�6F�6F� G����� �"�,�,�-�-��� �c�g�g�u� %� �7�7�>�>�'�2�H�L� �7�7�H�L� �x� /� /��d�;� ��� "����r/ c �2 � t |||| j � S )a� Build the PoolKey attributes used by urllib3 to return a connection.
This looks at the PreparedRequest, the user-specified verify value,
and the value of the cert parameter to determine what PoolKey values
to use to select a connection from a given urllib3 Connection Pool.
The SSL related pool key arguments are not consistently set. As of
this writing, use the following to determine what keys may be in that
dictionary:
* If ``verify`` is ``True``, ``"ssl_context"`` will be set and will be the
default Requests SSL Context
* If ``verify`` is ``False``, ``"ssl_context"`` will not be set but
``"cert_reqs"`` will be set
* If ``verify`` is a string, (i.e., it is a user-specified trust bundle)
``"ca_certs"`` will be set if the string is not a directory recognized
by :py:func:`os.path.isdir`, otherwise ``"ca_certs_dir"`` will be
set.
* If ``"cert"`` is specified, ``"cert_file"`` will always be set. If
``"cert"`` is a tuple with a second item, ``"key_file"`` will also
be present
To override these settings, one may subclass this class, call this
method and use the above logic to change parameters as desired. For
example, if one wishes to use a custom :py:class:`ssl.SSLContext` one
must both set ``"ssl_context"`` and based on what else they require,
alter the other keys to ensure the desired behaviour.
:param request:
The PreparedReqest being sent over the connection.
:type request:
:class:`~requests.models.PreparedRequest`
:param verify:
Either a boolean, in which case it controls whether
we verify the server's TLS certificate, or a string, in which case it
must be a path to a CA bundle to use.
:param cert:
(optional) Any user-provided SSL certificate for client
authentication (a.k.a., mTLS). This may be a string (i.e., just
the path to a file which holds both certificate and key) or a
tuple of length 2 with the certificate file path and key file
path.
:returns:
A tuple of two dictionaries. The first is the "host parameters"
portion of the Pool Key including scheme, hostname, and port. The
second is a dictionary of SSLContext related parameters.
)rW rP )r^ rM rN re s r. �$build_connection_pool_key_attributesz0HTTPAdapter.build_connection_pool_key_attributes� s � �` (����t�?O�?O�P�Pr/ c � � t |j |� } | j |||� \ }}|rWt |d� }t
|� } | j s t d� �| j |� }
|
j di |�d|i��} | S | j j di |�d|i��} | S # t $ r}t ||�� �d}~ww xY w)aq Returns a urllib3 connection for the given request and TLS settings.
This should not be called from user code, and is only exposed for use
when subclassing the :class:`HTTPAdapter <requests.adapters.HTTPAdapter>`.
:param request:
The :class:`PreparedRequest <PreparedRequest>` object to be sent
over the connection.
:param verify:
Either a boolean, in which case it controls whether we verify the
server's TLS certificate, or a string, in which case it must be a
path to a CA bundle to use.
:param proxies:
(optional) The proxies dictionary to apply to the request.
:param cert:
(optional) Any user-provided SSL certificate to be used for client
authentication (a.k.a., mTLS).
:rtype:
urllib3.ConnectionPool
�rM N�http�FPlease check proxy URL. It is malformed and could be missing the host.rR r� ) r( r@ r� �
ValueErrorr r' r r> r r� �connection_from_hostrP ) r^ rM rN rf re r� rQ rR �e� proxy_urlr~ r� s r. � get_connection_with_tls_contextz+HTTPAdapter.get_connection_with_tls_context� s� � �( �W�[�[�'�2�� 1�'+�'P�'P����(� $�K�� �,�U�F�;�E�!�%�(�I� �>�>�%�5�� � !� 2� 2�5� 9�M�5�=�5�5� � ��+6��D� � � 9�4�#�#�8�8� � ��+6��D� � ��) � 1� �Q��0� 0�� 1�s �B) �) C�2
B?�?Cc �f � t j dt � t ||� }|rRt |d� }t |� }|j s t d� �| j |� }|j |� }|S t |� }|j � }| j j |� }|S )a DEPRECATED: Users should move to `get_connection_with_tls_context`
for all subclasses of HTTPAdapter using Requests>=2.32.2.
Returns a urllib3 connection for the given URL. This should not be
called from user code, and is only exposed for use when subclassing the
:class:`HTTPAdapter <requests.adapters.HTTPAdapter>`.
:param url: The URL to connect to.
:param proxies: (optional) A Requests-style dictionary of proxies used on this request.
:rtype: urllib3.ConnectionPool
z�`get_connection` has been deprecated in favor of `get_connection_with_tls_context`. Custom HTTPAdapter subclasses will need to migrate for Requests>=2.32.2. Please see https://github.com/psf/requests/pull/6710 for more details.r� r� )
�warnings�warn�DeprecationWarningr( r' r r> r r� �connection_from_urlr �geturlrP )r^ r@ rf r� r� r~ r� �parseds r. �get_connectionzHTTPAdapter.get_connection� s� � � �
�
�N�
�
� �S�'�*�� �,�U�F�;�E�!�%�(�I� �>�>�%�5�� � !� 2� 2�5� 9�M� �4�4�S�9�D� � � �c�]�F��-�-�/�C��#�#�7�7��<�D�� r/ c � � | j j � | j j � D ] }|j � � y)z�Disposes of any internal state.
Currently, this closes the PoolManager and any active ProxyManager,
which closes any pooled connections.
N)rP �clearr~ �values)r^ r� s r. ri zHTTPAdapter.close s= � �
��� � � ��'�'�.�.�0� �E� �K�K�M� r/ c � � t |j |� }t |j � j }|xr |dk7 }d}|r4t |� j j � }|j d� }|j }|j d� rd|j d� � �}|r|st |j � }|S )a? Obtain the url to use when making the final request.
If the message is being sent through a HTTP proxy, the full URL has to
be used. Otherwise, we should only use the path portion of the URL.
This should not be called from user code, and is only exposed for use
when subclassing the
:class:`HTTPAdapter <requests.adapters.HTTPAdapter>`.
:param request: The :class:`PreparedRequest <PreparedRequest>` being sent.
:param proxies: A dictionary of schemes or schemes and hosts to proxy URLs.
:rtype: str
r� Fr� z//�/) r( r@ r r= rA r� �path_url�lstripr) ) r^ rM rf r� r= �is_proxied_http_request�using_socks_proxy� proxy_schemer@ s r. � request_urlzHTTPAdapter.request_url" s� � � �W�[�[�'�2���'�+�+�&�-�-��"'�"=�F�g�,=� � !�� �#�E�?�1�1�7�7�9�L� ,� 7� 7�� @� �� � �� �>�>�$� ��c�j�j��o�&�'�C� "�+<� �� � �,�C��
r/ c � � y)a" Add any headers needed by the connection. As of v2.0 this does
nothing by default, but is left for overriding by users that subclass
the :class:`HTTPAdapter <requests.adapters.HTTPAdapter>`.
This should not be called from user code, and is only exposed for use
when subclassing the
:class:`HTTPAdapter <requests.adapters.HTTPAdapter>`.
:param request: The :class:`PreparedRequest <PreparedRequest>` to add headers to.
:param kwargs: The keyword arguments from the call to send().
Nr� )r^ rM r- s r. � add_headerszHTTPAdapter.add_headersB s � �
r/ c �H � i }t |� \ }}|rt ||� |d< |S )a Returns a dictionary of the headers to add to any request sent
through a proxy. This works with urllib3 magic to ensure that they are
correctly sent to the proxy, rather than in a tunnelled request if
CONNECT is being used.
This should not be called from user code, and is only exposed for use
when subclassing the
:class:`HTTPAdapter <requests.adapters.HTTPAdapter>`.
:param proxy: The url of the proxy being used for this request.
:rtype: dict
zProxy-Authorization)r% r )r^ r� r� r� r� s r. r� zHTTPAdapter.proxy_headersP s2 � � �� .�u� 5���(� �-<�X�x�-P�G�)� *��r/ c
� � | j ||||�� }| j ||j ||� | j ||� } | j
||||||�� |j du xs d|j v }
t |t � r |\ } } t | | �� }n t |t � rn
t ||�� } |j |j | |j |j d d d d | j ||
�
� }
| jI ||
� S # t $ r}t ||�� �d}~ww xY w# t $ r t d|� d�� �w xY w# t t" f$ r}t% ||�� �d}~wt& $ r�}t |j( t* � r't |j( t, � s
t/ ||�� �t |j( t0 � r
t3 ||�� �t |j( t4 � r
t7 ||�� �t |j( t8 � r
t; ||�� �t% ||�� �d}~wt< $ r}t% ||�� �d}~wt4 $ r}t7 |� �d}~wt8 t> f$ r]}t |t8 � r
t; ||�� �t |t@ � r
tC ||�� �t |tD � r
tG ||�� �� d}~ww xY w) a Sends PreparedRequest object. Returns Response object.
:param request: The :class:`PreparedRequest <PreparedRequest>` being sent.
:param stream: (optional) Whether to stream the request content.
:param timeout: (optional) How long to wait for the server to send
data before giving up, as a float, or a :ref:`(connect timeout,
read timeout) <timeouts>` tuple.
:type timeout: float or tuple or urllib3 Timeout object
:param verify: (optional) Either a boolean, in which case it controls whether
we verify the server's TLS certificate, or a string, in which case it
must be a path to a CA bundle to use
:param cert: (optional) Any user-provided SSL certificate to be trusted.
:param proxies: (optional) The proxies dictionary to apply to the request.
:rtype: requests.Response
)rf re r� N)rc rd rN re rf zContent-Length)�connectry zInvalid timeout za. Pass a (connect, read) timeout tuple, or a single float to set both timeouts to the same value.F) �methodr@ �bodyr� �redirect�assert_same_host�preload_content�decode_content�retriesrd �chunked)%r� r r r� r@ r� r� r� r� rE rJ � TimeoutSaucer� �urlopenr� rs r
r� r r r� r r r r
r � _ProxyErrorr � _SSLErrorr r �
_HTTPErrorr r �_InvalidHeaderr r� )r^ rM rc rd rN re rf r� r� r@ r� r� ry r� �errs r. rg zHTTPAdapter.sende s� � �& 1��7�7����t� 8� �D�
����w�{�{�F�D�9�� � �w��0�� ��� ������
�
� �|�|�t�+�R�/?�7�?�?�/R�S�� �g�u� %�
� '�
���&�w�T�B�� �� �
.� �"�7��A�G�3 ��<�<� �~�~�� �\�\� ��� �!&� %� $� �(�(� � � � �D�h �"�"�7�D�1�1��g "� 1� �Q��0� 0�� 1��( �
� �&�w�i� 0P� Q�� �
��2 �w�'� 8�!�#�w�7� 7�� � 6��!�(�(�$7�8�!�!�(�(�,>�?�(��G�<�<��!�(�(�M�2� ��G�4�4��!�(�(�K�0� ��G�4�4��!�(�(�I�.� �q�'�2�2�!�!�W�5� 5�� � 6�!�!�W�5� 5��� � �Q�-� ���:�&� ��!�Y�'� �q�'�2�2��A� /�0�!�!�W�5�5��A�~�.�#�A�w�7�7��� �sn �D �D4 � AE � D1�
D,�,D1�4E
�K�
E,�, K�8CH;�; K�
I� K� I+�+K�=AK�Kr[ )NNrj )rk rl rm rn r� �DEFAULT_POOLSIZEr| �DEFAULT_POOLBLOCKr] r� r� r r� r� r� r� r� r� ri r� r� r� rg ro rp s @r. rr rr � s �� ��4�I� *�%�#�$� P�,L�
� +<�
�4$�L5�n#�J0Q�d/�b'�R� �@
� �, TX�j2r/ rr )
rM r0 rN zbool | str | NonerO z#typing.Tuple[str, str] | str | NonerP r �returnz<(typing.Dict[str, typing.Any], typing.Dict[str, typing.Any]))Lrn �os.pathrG �socket�typingr� �urllib3.exceptionsr r r r� r r� r r r r
r r� r r
r r� �urllib3.poolmanagerr r � urllib3.utilr r� r �urllib3.util.retryr �urllib3.util.ssl_r �authr �compatr r r� r �
exceptionsr r r r r r r �modelsr! �
structuresr" �utilsr# r$ r% r& r' r( r) �urllib3.contrib.socksr* � ImportError�
TYPE_CHECKINGr0 r� r� r| �DEFAULT_POOL_TIMEOUT�sslrD �load_verify_locationsrW rY rr r� r/ r. �<module>r� sK ��� �
�
� � C� 6� >�� � 9� >� 4� ;� 0� "� $� 4� !� (� +� � � � � +�� � �G�7�
���'� � �� ���� �
"�� 3� 5���0�0� � 3�4��,$�
�,$� �,$� 7�,$� � ,$�
D� ,$�^"� "�<h2�+� h2��U � G�G�G��. � "� "��"�s$ �2D �"D' �D$�#D$�'D1�0D1 |