
    (g)                        % S SK r S SKrS SKrS SKrS SKrS SKrS SKrSSKJrJ	r	J
r
Jr  \R                  " 5       S:X  a	  SSKJrJr  O&\R                  " 5       S:X  a	  SSKJrJr  OSSKJrJr  \R$                  (       a  S SKJr  \\-  \ R.                  \   -  \ R.                  \   -  r\R2                  \S'   \\-  \R6                  / \\-  4   -  r\R2                  \S	'   SS jrSS jr " S S\5      r\R@                  S:  a  S\RB                  S
\"\   4S jr#OS\RB                  S
\"\   4S jr#S\RH                  \RB                  -  S\S-  S
S4S jr%g)    N   )_original_SSLContext_original_super_SSLContext#_truststore_SSLContext_dunder_class"_truststore_SSLContext_super_classWindows)_configure_context_verify_peercerts_implDarwin)Buffer_StrOrBytesPath_PasswordTypereturnc                      [        [        S[        5         SSKJs  Jn   [        U S[        5        g! [         a     gf = f)ziInjects the :class:`truststore.SSLContext` into the ``ssl``
module by replacing :class:`ssl.SSLContext`.

SSLContextr   N)setattrsslr   urllib3.util.ssl_utilssl_ImportErrorurllib3_ssls    /lib/python3.13/site-packages/truststore/_api.pyinject_into_sslr       s9     Cz*//\:6 s   2 
??c                  x    [        [        S[        5         SSKJs  Jn   [        U l        g! [         a     gf = f)z@Restores the :class:`ssl.SSLContext` class to its original stater   r   N)r   r   r   r   r   r   r   r   r   s    r   extract_from_sslr   /   s4    C34//!5 s   , 
99c                   D   \ rS rSrSr\S\4S j5       rSDS\SS4S jjr	     SES
\
R                  S\S\S\S\S-  S\R                  S-  S\R                  4S jjr   SFS\R"                  S\R"                  S\S\S-  S\R                  S-  S\R$                  4S jjr   SGS\\-  \R,                  \   -  \R,                  \   -  S-  S\\-  \R,                  \   -  \R,                  \   -  S-  S\R0                  \SS4   SS4S jjr  SHS\S\S-  S\S-  SS4S jjr\R:                  R<                  4S\R:                  SS4S jjrS\R@                  \   SS4S  jr!S!\R@                  \   SS4S" jr"S#\SS4S$ jr#S\RH                  4S% jr%S\&\\4   4S& jr'S\&\\4   4S' jr(SIS( jr)\RT                   SJS)\RV                  S   S\,\RH                     4S* jj5       r-\RT                  SJS)\RV                  S	   S\,\   4S+ jj5       r-\RT                  SJS)\S\RH                  4S, jj5       r-SKS)\S\,\RH                     \,\   -  4S- jjr-\S\4S. j5       r.\.R^                  S/\SS4S0 j5       r.\S\4S1 j5       r0\0R^                  S/\SS4S2 j5       r0\S\4S3 j5       r1\1R^                  S/\SS4S4 j5       r1\S\Rd                  4S5 j5       r3\3R^                  S/\Rd                  SS4S6 j5       r3\S\Rd                  4S7 j5       r4\4R^                  S/\Rd                  SS4S8 j5       r4\S\Rj                  4S9 j5       r6\6R^                  S/\Rj                  SS4S: j5       r6\S\4S; j5       r7\7R^                  S/\SS4S< j5       r7\S\Rp                  4S= j5       r9\S\4S> j5       r:\S\Rv                  4S? j5       r<\<R^                  S/\Rv                  SS4S@ j5       r<\S\Rz                  4SA j5       r>\>R^                  S/\Rz                  SS4SB j5       r>SCr?g)Lr   :   z=SSLContext API that uses system certificates on all platformsr   c                 (    [         =(       d    [        $ N)r   r   selfs    r   	__class__SSLContext.__class__=   s    
 3@j@    Nprotocolc                 v    [        U5      U l         " S S[        R                  5      nX R                  l        g )Nc                   ,   ^  \ rS rSrSU 4S jjrSrU =r$ )0SSLContext.__init__.<locals>.TruststoreSSLObjectG   c                 J   > [         TU ]  5       n[        X R                  S9  U$ )Nserver_hostname)superdo_handshake_verify_peercertsr.   )r#   retr$   s     r   r0   =SSLContext.__init__.<locals>.TruststoreSSLObject.do_handshakeL   s#    g*,!$8L8LM
r&    r   N)__name__
__module____qualname____firstlineno__r0   __static_attributes____classcell__)r$   s   @r   TruststoreSSLObjectr*   G   s    
 r&   r<   )r   _ctxr   	SSLObjectsslobject_class)r#   r'   r<   s      r   __init__SSLContext.__init__D   s*    (2		#-- 	 %8		!r&   FTsockserver_sidedo_handshake_on_connectsuppress_ragged_eofsr.   sessionc           
          [        U R                  5         U R                  R                  UUUUUUS9nS S S 5         [        WUS9  U$ ! , (       d  f       N= f! [         a    WR                  5         e f = f)N)rC   r.   rD   rE   rF   r-   )r	   r=   wrap_socketr1   	Exceptionclose)r#   rB   rC   rD   rE   r.   rF   ssl_socks           r   rH   SSLContext.wrap_socketS   s|      		*yy,,' /(?%9 - H +	hH  +*  	NN	s   A

A 

AA7incomingoutgoingc           	          [        U R                  5         U R                  R                  UUUUUS9nS S S 5        U$ ! , (       d  f       W$ = f)N)r.   rC   rF   )r	   r=   wrap_bio)r#   rM   rN   rC   r.   rF   ssl_objs          r   rP   SSLContext.wrap_bioo   sT      		*ii(( /' ) G +  +* s	   >
Acafilecapathcadatar   c                 6    U R                   R                  XUS9$ )N)rS   rT   rU   )r=   load_verify_locations)r#   rS   rT   rU   s       r   rW    SSLContext.load_verify_locations   s%     yy.. / 
 	
r&   certfilekeyfilepasswordc                 6    U R                   R                  XUS9$ )N)rY   rZ   r[   )r=   load_cert_chain)r#   rY   rZ   r[   s       r   r]   SSLContext.load_cert_chain   s%     yy(( ) 
 	
r&   purposec                 8    U R                   R                  U5      $ r!   )r=   load_default_certs)r#   r_   s     r   ra   SSLContext.load_default_certs   s     yy++G44r&   alpn_protocolsc                 8    U R                   R                  U5      $ r!   )r=   set_alpn_protocols)r#   rc   s     r   re   SSLContext.set_alpn_protocols   s    yy++N;;r&   npn_protocolsc                 8    U R                   R                  U5      $ r!   )r=   set_npn_protocols)r#   rg   s     r   ri   SSLContext.set_npn_protocols   s    yy**=99r&   _SSLContext__cipherlistc                 8    U R                   R                  U5      $ r!   )r=   set_ciphers)r#   rk   s     r   rm   SSLContext.set_ciphers   s    yy$$\22r&   c                 6    U R                   R                  5       $ r!   )r=   get_ciphersr"   s    r   rp   SSLContext.get_ciphers   s    yy$$&&r&   c                 6    U R                   R                  5       $ r!   )r=   session_statsr"   s    r   rs   SSLContext.session_stats   s    yy&&((r&   c                     [        5       er!   NotImplementedErrorr"   s    r   cert_store_statsSSLContext.cert_store_stats       !##r&   c                 8    U R                   R                  5         g r!   )r=   set_default_verify_pathsr"   s    r   r|   #SSLContext.set_default_verify_paths   s    		**,r&   binary_formc                     g r!   r4   r#   r~   s     r   get_ca_certsSSLContext.get_ca_certs   s     r&   c                     g r!   r4   r   s     r   r   r      s    TWr&   c                     g r!   r4   r   s     r   r   r      s    CFr&   c                     [        5       er!   rv   r   s     r   r   r      rz   r&   c                 .    U R                   R                  $ r!   r=   check_hostnamer"   s    r   r   SSLContext.check_hostname       yy'''r&   valuec                 $    XR                   l        g r!   r   r#   r   s     r   r   r      s    #(		 r&   c                 .    U R                   R                  $ r!   r=   hostname_checks_common_namer"   s    r   r   &SSLContext.hostname_checks_common_name   s    yy444r&   c                 $    XR                   l        g r!   r   r   s     r   r   r      s    05		-r&   c                 .    U R                   R                  $ r!   r=   keylog_filenamer"   s    r   r   SSLContext.keylog_filename       yy(((r&   c                 $    XR                   l        g r!   r   r   s     r   r   r      s    $)		!r&   c                 .    U R                   R                  $ r!   )r=   maximum_versionr"   s    r   r   SSLContext.maximum_version   r   r&   c                 X    [         R                  R                  U R                  U5        g r!   )r   r   __set__r=   r   s     r   r   r          "22::IIu	
r&   c                 .    U R                   R                  $ r!   )r=   minimum_versionr"   s    r   r   SSLContext.minimum_version   r   r&   c                 X    [         R                  R                  U R                  U5        g r!   )r   r   r   r=   r   s     r   r   r      r   r&   c                 .    U R                   R                  $ r!   )r=   optionsr"   s    r   r   SSLContext.options   s    yy   r&   c                 X    [         R                  R                  U R                  U5        g r!   )r   r   r   r=   r   s     r   r   r      s    "**22IIu	
r&   c                 .    U R                   R                  $ r!   r=   post_handshake_authr"   s    r   r   SSLContext.post_handshake_auth   s    yy,,,r&   c                 $    XR                   l        g r!   r   r   s     r   r   r      s    (-		%r&   c                 .    U R                   R                  $ r!   )r=   r'   r"   s    r   r'   SSLContext.protocol   s    yy!!!r&   c                 .    U R                   R                  $ r!   )r=   security_levelr"   s    r   r   SSLContext.security_level   r   r&   c                 .    U R                   R                  $ r!   )r=   verify_flagsr"   s    r   r   SSLContext.verify_flags  s    yy%%%r&   c                 X    [         R                  R                  U R                  U5        g r!   )r   r   r   r=   r   s     r   r   r     s    "//77IIu	
r&   c                 .    U R                   R                  $ r!   )r=   verify_moder"   s    r   r   SSLContext.verify_mode  s    yy$$$r&   c                 X    [         R                  R                  U R                  U5        g r!   )r   r   r   r=   r   s     r   r   r     s    "..66IIu	
r&   )r=   r!   )FTTNN)FNN)NNN)NNr5   ).)F)@r6   r7   r8   r9   __doc__propertytyper$   intr@   socketboolstrr   
SSLSession	SSLSocketrH   	MemoryBIOr>   rP   bytesosPathLiketypingUnionrW   r   r   r]   PurposeSERVER_AUTHra   Iterablere   ri   rm   Anyrp   dictrs   rx   r|   overloadLiterallistr   r   setterr   r   
TLSVersionr   r   Optionsr   r   
_SSLMethodr'   r   VerifyFlagsr   
VerifyModer   r:   r4   r&   r   r   r   :   s   GA4 A A8 8 8$ "(,%)&*)-mm  "&	
 # t $& 
@ "&*)--- -- 	
 t $& 
( NRMQ48	
ebkk#..U1CCdJ
 ebkk#..U1CCdJ
 S(D01	

 

 +/)-	
!
 !4'
  $&	

 

 &)[[%<%<5{{5	5
<1E <$ <:vs/C : :3 3 3'VZZ ')tCH~ )$$sCx. $- __36!>>%0	fjj	  __Wt(<WtE{W W__FFvzzF F$ $fjj9IDQVK9W $ ( ( ( )D )T ) ) 5T 5 5 !''6 6$ 6 (6 ) ) ) *S *T * * ) ) ) 
S^^ 
 
 

 ) ) ) 
S^^ 
 
 

 ! ! ! ^^
S[[ 
T 
 

 -T - - . .$ .  . "#.. " " ( ( ( &coo & & 
#// 
d 
 

 %S^^ % % 
 
D 
 
r&   r   )      sslobjc                     U R                  5       =(       d    SnU Vs/ s H9  n[        U[        5      (       a  UOUR                  [        R
                  5      PM;     sn$ s  snf Nr4   )get_unverified_chain
isinstancer   public_bytes_sslENCODING_DERr   unverified_chaincerts      r   _get_unverified_chain_bytesr     s_    !668>B )
( tU++D1B1B4CTCT1UU(
 	
 
s   A A!c                     U R                  5       =(       d    SnU Vs/ s H!  o"R                  [        R                  5      PM#     sn$ s  snf r   )r   r   r   r   r   s      r   r   r   &  s?    !668>BAQRAQ!!$"3"34AQRRRs   (A	sock_or_sslobjr.   c                     U n [        US5      (       d  UR                  n[        US5      (       d  M  [        U5      n[	        U R
                  X1S9  g! [         a     N,f = f)zo
Verifies the peer certificates from an SSLSocket or SSLObject
against the certificates in the OS trust store.
r   r-   N)hasattr_sslobjAttributeErrorr   r
   context)r   r.   r   
cert_bytess       r   r1   r1   +  sh     +F&"899^^F &"899
 -V4J
	  s   .A 
A! A!r5   )&r   platformr   r   sysr   r   _ssl_constantsr   r   r   r   system_windowsr	   r
   _macos_opensslTYPE_CHECKINGtyping_extensionsr   r   r   r   r   	TypeAlias__annotations__Callabler   r   r   r   version_infor>   r   r   r   r1   r4   r&   r   <module>r      sM   	   
 
    ??	!DD__("BBD	( %(%K"++c2B$BR[[QVEW$W!! W"%+C%K0P"Pv P[
3 [
B w
CMM 
d5k 
SCMM Sd5k S
MMCMM1DG$J	r&   