Coverage for /pythoncovmergedfiles/medio/medio/usr/local/lib/python3.8/site-packages/astroid/brain/brain_ssl.py: 56%
16 statements
« prev ^ index » next coverage.py v7.2.7, created at 2023-06-07 06:53 +0000
1# Licensed under the LGPL: https://www.gnu.org/licenses/old-licenses/lgpl-2.1.en.html
2# For details: https://github.com/pylint-dev/astroid/blob/main/LICENSE
3# Copyright (c) https://github.com/pylint-dev/astroid/blob/main/CONTRIBUTORS.txt
5"""Astroid hooks for the ssl library."""
7from astroid import parse
8from astroid.brain.helpers import register_module_extender
9from astroid.const import PY310_PLUS
10from astroid.manager import AstroidManager
13def _verifyflags_enum() -> str:
14 enum = """
15 class VerifyFlags(_IntFlag):
16 VERIFY_DEFAULT = 0
17 VERIFY_CRL_CHECK_LEAF = 1
18 VERIFY_CRL_CHECK_CHAIN = 2
19 VERIFY_X509_STRICT = 3
20 VERIFY_X509_TRUSTED_FIRST = 4"""
21 if PY310_PLUS:
22 enum += """
23 VERIFY_ALLOW_PROXY_CERTS = 5
24 VERIFY_X509_PARTIAL_CHAIN = 6
25 """
26 return enum
29def _options_enum() -> str:
30 enum = """
31 class Options(_IntFlag):
32 OP_ALL = 1
33 OP_NO_SSLv2 = 2
34 OP_NO_SSLv3 = 3
35 OP_NO_TLSv1 = 4
36 OP_NO_TLSv1_1 = 5
37 OP_NO_TLSv1_2 = 6
38 OP_NO_TLSv1_3 = 7
39 OP_CIPHER_SERVER_PREFERENCE = 8
40 OP_SINGLE_DH_USE = 9
41 OP_SINGLE_ECDH_USE = 10
42 OP_NO_COMPRESSION = 11
43 OP_NO_TICKET = 12
44 OP_NO_RENEGOTIATION = 13
45 OP_ENABLE_MIDDLEBOX_COMPAT = 14"""
46 return enum
49def ssl_transform():
50 return parse(
51 """
52 # Import necessary for conversion of objects defined in C into enums
53 from enum import IntEnum as _IntEnum, IntFlag as _IntFlag
55 from _ssl import OPENSSL_VERSION_NUMBER, OPENSSL_VERSION_INFO, OPENSSL_VERSION
56 from _ssl import _SSLContext, MemoryBIO
57 from _ssl import (
58 SSLError, SSLZeroReturnError, SSLWantReadError, SSLWantWriteError,
59 SSLSyscallError, SSLEOFError,
60 )
61 from _ssl import CERT_NONE, CERT_OPTIONAL, CERT_REQUIRED
62 from _ssl import txt2obj as _txt2obj, nid2obj as _nid2obj
63 from _ssl import RAND_status, RAND_add, RAND_bytes, RAND_pseudo_bytes
64 try:
65 from _ssl import RAND_egd
66 except ImportError:
67 # LibreSSL does not provide RAND_egd
68 pass
69 from _ssl import (OP_ALL, OP_CIPHER_SERVER_PREFERENCE,
70 OP_NO_COMPRESSION, OP_NO_SSLv2, OP_NO_SSLv3,
71 OP_NO_TLSv1, OP_NO_TLSv1_1, OP_NO_TLSv1_2,
72 OP_SINGLE_DH_USE, OP_SINGLE_ECDH_USE)
74 from _ssl import (ALERT_DESCRIPTION_ACCESS_DENIED, ALERT_DESCRIPTION_BAD_CERTIFICATE,
75 ALERT_DESCRIPTION_BAD_CERTIFICATE_HASH_VALUE,
76 ALERT_DESCRIPTION_BAD_CERTIFICATE_STATUS_RESPONSE,
77 ALERT_DESCRIPTION_BAD_RECORD_MAC,
78 ALERT_DESCRIPTION_CERTIFICATE_EXPIRED,
79 ALERT_DESCRIPTION_CERTIFICATE_REVOKED,
80 ALERT_DESCRIPTION_CERTIFICATE_UNKNOWN,
81 ALERT_DESCRIPTION_CERTIFICATE_UNOBTAINABLE,
82 ALERT_DESCRIPTION_CLOSE_NOTIFY, ALERT_DESCRIPTION_DECODE_ERROR,
83 ALERT_DESCRIPTION_DECOMPRESSION_FAILURE,
84 ALERT_DESCRIPTION_DECRYPT_ERROR,
85 ALERT_DESCRIPTION_HANDSHAKE_FAILURE,
86 ALERT_DESCRIPTION_ILLEGAL_PARAMETER,
87 ALERT_DESCRIPTION_INSUFFICIENT_SECURITY,
88 ALERT_DESCRIPTION_INTERNAL_ERROR,
89 ALERT_DESCRIPTION_NO_RENEGOTIATION,
90 ALERT_DESCRIPTION_PROTOCOL_VERSION,
91 ALERT_DESCRIPTION_RECORD_OVERFLOW,
92 ALERT_DESCRIPTION_UNEXPECTED_MESSAGE,
93 ALERT_DESCRIPTION_UNKNOWN_CA,
94 ALERT_DESCRIPTION_UNKNOWN_PSK_IDENTITY,
95 ALERT_DESCRIPTION_UNRECOGNIZED_NAME,
96 ALERT_DESCRIPTION_UNSUPPORTED_CERTIFICATE,
97 ALERT_DESCRIPTION_UNSUPPORTED_EXTENSION,
98 ALERT_DESCRIPTION_USER_CANCELLED)
99 from _ssl import (SSL_ERROR_EOF, SSL_ERROR_INVALID_ERROR_CODE, SSL_ERROR_SSL,
100 SSL_ERROR_SYSCALL, SSL_ERROR_WANT_CONNECT, SSL_ERROR_WANT_READ,
101 SSL_ERROR_WANT_WRITE, SSL_ERROR_WANT_X509_LOOKUP, SSL_ERROR_ZERO_RETURN)
102 from _ssl import VERIFY_CRL_CHECK_CHAIN, VERIFY_CRL_CHECK_LEAF, VERIFY_DEFAULT, VERIFY_X509_STRICT
103 from _ssl import HAS_SNI, HAS_ECDH, HAS_NPN, HAS_ALPN
104 from _ssl import _OPENSSL_API_VERSION
105 from _ssl import PROTOCOL_SSLv23, PROTOCOL_TLSv1, PROTOCOL_TLSv1_1, PROTOCOL_TLSv1_2
106 from _ssl import PROTOCOL_TLS, PROTOCOL_TLS_CLIENT, PROTOCOL_TLS_SERVER
108 class AlertDescription(_IntEnum):
109 ALERT_DESCRIPTION_ACCESS_DENIED = 0
110 ALERT_DESCRIPTION_BAD_CERTIFICATE = 1
111 ALERT_DESCRIPTION_BAD_CERTIFICATE_HASH_VALUE = 2
112 ALERT_DESCRIPTION_BAD_CERTIFICATE_STATUS_RESPONSE = 3
113 ALERT_DESCRIPTION_BAD_RECORD_MAC = 4
114 ALERT_DESCRIPTION_CERTIFICATE_EXPIRED = 5
115 ALERT_DESCRIPTION_CERTIFICATE_REVOKED = 6
116 ALERT_DESCRIPTION_CERTIFICATE_UNKNOWN = 7
117 ALERT_DESCRIPTION_CERTIFICATE_UNOBTAINABLE = 8
118 ALERT_DESCRIPTION_CLOSE_NOTIFY = 9
119 ALERT_DESCRIPTION_DECODE_ERROR = 10
120 ALERT_DESCRIPTION_DECOMPRESSION_FAILURE = 11
121 ALERT_DESCRIPTION_DECRYPT_ERROR = 12
122 ALERT_DESCRIPTION_HANDSHAKE_FAILURE = 13
123 ALERT_DESCRIPTION_ILLEGAL_PARAMETER = 14
124 ALERT_DESCRIPTION_INSUFFICIENT_SECURITY = 15
125 ALERT_DESCRIPTION_INTERNAL_ERROR = 16
126 ALERT_DESCRIPTION_NO_RENEGOTIATION = 17
127 ALERT_DESCRIPTION_PROTOCOL_VERSION = 18
128 ALERT_DESCRIPTION_RECORD_OVERFLOW = 19
129 ALERT_DESCRIPTION_UNEXPECTED_MESSAGE = 20
130 ALERT_DESCRIPTION_UNKNOWN_CA = 21
131 ALERT_DESCRIPTION_UNKNOWN_PSK_IDENTITY = 22
132 ALERT_DESCRIPTION_UNRECOGNIZED_NAME = 23
133 ALERT_DESCRIPTION_UNSUPPORTED_CERTIFICATE = 24
134 ALERT_DESCRIPTION_UNSUPPORTED_EXTENSION = 25
135 ALERT_DESCRIPTION_USER_CANCELLED = 26
137 class SSLErrorNumber(_IntEnum):
138 SSL_ERROR_EOF = 0
139 SSL_ERROR_INVALID_ERROR_CODE = 1
140 SSL_ERROR_SSL = 2
141 SSL_ERROR_SYSCALL = 3
142 SSL_ERROR_WANT_CONNECT = 4
143 SSL_ERROR_WANT_READ = 5
144 SSL_ERROR_WANT_WRITE = 6
145 SSL_ERROR_WANT_X509_LOOKUP = 7
146 SSL_ERROR_ZERO_RETURN = 8
148 class VerifyMode(_IntEnum):
149 CERT_NONE = 0
150 CERT_OPTIONAL = 1
151 CERT_REQUIRED = 2
152 """
153 + _verifyflags_enum()
154 + _options_enum()
155 )
158register_module_extender(AstroidManager(), "ssl", ssl_transform)