a 97ay:@sddlZddlZddlZddlZddlmZddlZddlmZm Z m Z m Z ddl m Z ddlmZmZmZmZmZddlmZddlmZddlmZdd lmZmZmZzdd lmZ Wne!ydd lm Z Yn0ddl"Z#dd l$m%Z%dd l&m'Z'ddl(m)Z)m*Z*ddl+m,Z,m-Z-m.Z.mZm/Z/mZmZm0Z0e)e1e2Z3dZ4dZ5ej67ej68e9dZ:zddl;mddZ?Gddde@ZAGddde@ZBdS)!N) b64encode) PoolManager ProxyManagerproxy_from_urlTimeout)Retry)ssl OP_NO_SSLv2 OP_NO_SSLv3OP_NO_COMPRESSIONDEFAULT_CIPHERS)SSLError)ReadTimeoutError)ConnectTimeoutError)NewConnectionError ProtocolError ProxyError)orig_util_SSLContext) SSLContext)six)unquote)filter_ssl_warningsurlparse)ConnectionClosedErrorEndpointConnectionErrorHTTPClientErrorrProxyConnectionErrorrr InvalidProxiesConfigError< z cacert.pem)wherecCstSN)DEFAULT_CA_BUNDLEr#r#o/private/var/folders/s6/9n5zrl012gv99k63s4q6ccsd4s6mqz/T/pip-target-f5cq3f2q/lib/python/botocore/httpsession.pyr *sr cCs&|dur |St}td||S)NTzCertificate path: {0})r loggerdebugformat)verifyZ cert_pathr#r#r$ get_cert_path.s r)cCst|p tj}|durtjn|}|durDd}|tO}|tO}|tO}|j|O_t|ddrl| |pht ||_ t|dddurd|_ t |drtjd}|rtjjs||_|S) z This function is a vendored version of the same function in urllib3 We vendor this function to ensure that the SSL contexts we construct always use the std lib SSLContext instead of pyopenssl. NrZsupports_set_ciphersTcheck_hostnameFkeylog_filename SSLKEYLOGFILE)rrPROTOCOL_SSLv23 CERT_REQUIREDr r r optionsgetattr set_ciphersr verify_moder*hasattrosenvirongetsysflagsignore_environmentr+) ssl_version cert_reqsr/cipherscontext keylogfiler#r#r$create_urllib3_context8s$    r?cCst|tr|S|dkSdS)z~Ensures a boolean value if a string or boolean is provided For strings, the value for True/False is case insensitive trueN) isinstanceboollower)valr#r#r$ensure_booleanes rEc@sNeZdZdZdddZddZddZed d Zd d Z d dZ ddZ dS)ProxyConfigurationaRepresents a proxy configuration dictionary and additional settings. This class represents a proxy configuration dictionary and provides utility functions to retreive well structured proxy urls and proxy headers from the proxy configuration dictionary. NcCs(|dur i}|duri}||_||_dSr!)_proxies_proxies_settings)selfproxiesproxies_settingsr#r#r$__init__ws zProxyConfiguration.__init__cCs(t|}|j|j}|r$||}|S)z7Retrieves the corresponding proxy url for a given url. )rrGr6scheme_fix_proxy_url)rIurl parsed_urlproxyr#r#r$ proxy_url_fors  z ProxyConfiguration.proxy_url_forcCs2i}||\}}|r.|r.|||}||d<|S)zARetrieves the corresponding proxy headers for a given proxy url. zProxy-Authorization)_get_auth_from_url_construct_basic_auth)rI proxy_urlheadersusernamepassword basic_authr#r#r$proxy_headers_fors  z$ProxyConfiguration.proxy_headers_forcCs|jSr!)rHrIr#r#r$settingsszProxyConfiguration.settingscCs6|ds|dr|S|dr*d|Sd|SdS)Nhttp:zhttps:z//zhttp://) startswith)rIrUr#r#r$rNs  z!ProxyConfiguration._fix_proxy_urlcCs,d||}t|d}d|S)Nz{0}:{1}asciiz Basic {0})r'rencodestripdecode)rIrWrXauth_strZ encoded_strr#r#r$rTs z(ProxyConfiguration._construct_basic_authc Cs<t|}zt|jt|jfWSttfy6YdS0dS)N)NN)rrrWrXAttributeError TypeError)rIrOrPr#r#r$rSs z%ProxyConfiguration._get_auth_from_url)NN) __name__ __module__ __qualname____doc__rLrRrZpropertyr\rNrTrSr#r#r#r$rFps   rFc@seZdZdZdddedddfddZeddZdd Zd d Z d d Z ddZ ddZ ddZ dddZddZddZddZdS)URLLib3Sessiona_A basic HTTP client that supports connection pooling and proxies. This class is inspired by requests.adapters.HTTPAdapter, but has been boiled down to meet the use cases needed by botocore. For the most part this classes matches the functionality of HTTPAdapter in requests v2.7.0 (the same as our vendored version). The only major difference of note is that we currently do not support sending chunked requests. While requests v2.7.0 implemented this themselves, later version urllib3 support this directly via a flag to urlopen so enabling it if needed should be trivial. TNcCs||_t||d|_tjjtjjd|_|dur4t}t |t t fsVt |d|dd}d|_ d|_t |trt||_ nt |tr|\|_ |_||_||_||_|durg|_i|_tfi||_|j|j_dS)N)rJrK)httphttpsr)connectread)_verifyrF _proxy_configbotocore awsrequestZAWSHTTPConnectionPoolZAWSHTTPSConnectionPool_pool_classes_by_schemeDEFAULT_TIMEOUTrAintfloatr _cert_file _key_filestrtuple_timeout_max_pool_connections_socket_options_proxy_managersr_get_pool_manager_kwargs_managerpool_classes_by_scheme)rIr(rJtimeoutZmax_pool_connectionssocket_options client_certZproxies_configr#r#r$rLs2    zURLLib3Session.__init__cCs4|jj}||}||dd}dd|DS)NZproxy_use_forwarding_for_https)proxy_ssl_contextuse_forwarding_for_httpscSsi|]\}}|dur||qSr!r#).0kvr#r#r$ z2URLLib3Session._proxies_kwargs..)rrr\_setup_proxy_ssl_contextr6items)rIrKrZproxies_kwargsr#r#r$_proxies_kwargss zURLLib3Session._proxies_kwargscKs6d|j|j||j|j|jd}|jfi||S)NT)strictrmaxsize ssl_contextr cert_filekey_file)r}r~_get_ssl_contextrryrzupdate)rI extra_kwargsZpool_manager_kwargsr#r#r$rs z'URLLib3Session._get_pool_manager_kwargscCstSr!)r?r[r#r#r$rszURLLib3Session._get_ssl_contextcCs`||jvrV|j|}|j|d}|jfi|jt|fi|}|j|_||j|<|j|S)N) proxy_headers) rrrrZrrrrrur)rIrUrZproxy_manager_kwargs proxy_managerr#r#r$_get_proxy_managers   z!URLLib3Session._get_proxy_managercCs.t|}|j}|sd}|jr*|d|j}|S)N/?)rpathquery)rIrOrPrr#r#r$ _path_urlszURLLib3Session._path_urlcCs4|dr$|r$d|_t||_n d|_d|_dS)Nrmr. CERT_NONE)rCr^r;r)ca_certs)rIconnrOr(r#r#r$_setup_ssl_cert s  zURLLib3Session._setup_ssl_certc Cs|d}|d}|dur(|dur(dS|}zVd|_|durL|j|dt|trn|j|d|ddnt|tr|||WStt fy}zt |dWYd}~n d}~00dS) Nproxy_ca_bundleZproxy_client_certT)cafilerrn)keyfileerror) r6rr*load_verify_locationsrAr|load_cert_chainr{IOErrorURLLib3SSLErrorr)rIrKrZ proxy_certr=er#r#r$rs       z'URLLib3Session._setup_proxy_ssl_contextcCs|r||}n|j}|Sr!)rr)rIrOrUmanagerr#r#r$_get_connection_manager)s z&URLLib3Session._get_connection_managercCsV|du}|s||St|j}|dko4|jdd}|sD|drH|S||SdS)NrmrFr])rrrMrr6r^)rIrOrU has_proxy proxy_schemeZusing_https_forwarding_proxyr#r#r$_get_request_target0s   z"URLLib3Session._get_request_targetcCs|dddkS)NzTransfer-Encodingchunked)r6)rIrVr#r#r$_chunkedDszURLLib3Session._chunkedc CsFz|j|j}||j|}||j}|||j|jttj ddrdt |jj }||j d<||j|}|j|j||j|jtdddd||jd }tj|j|j|j|}|js|j|WSty} zt|j| dWYd} ~ nLd} ~ 0ttjfy8} zt |j| dWYd} ~ nd} ~ 0t!yh} zt"|| dWYd} ~ nd} ~ 0t#y} zt$|j| dWYd} ~ nd} ~ 0t%y} zt&|j| dWYd} ~ n~d} ~ 0t'y} zt(| ||jdWYd} ~ nJd} ~ 0t)y@} z(d } t*j+| d d t,| d WYd} ~ n d} ~ 00dS) NZ(BOTO_EXPERIMENTAL__ADD_PROXY_HOST_HEADERrhostF) methodrObodyrVretriesassert_same_hostpreload_contentdecode_contentr) endpoint_urlr)rUr)rrequestrz4Exception received when sending urllib3 HTTP requestT)exc_infor)-rrrRrOrconnection_from_urlrrqrEr4r5r6rhostnamerrurlopenrrrVrrrsrtZ AWSResponsestatusZ stream_outputcontentrr rsocketgaierrorrrrURLLib3ConnectTimeoutErrorrURLLib3ReadTimeoutErrorrrr Exceptionr%r&r) rIrrUrrrZrequest_targetZurllib_response http_responsermessager#r#r$sendGsf      $$ ""zURLLib3Session.send)N)rfrgrhriMAX_POOL_CONNECTIONSrLrjrrrrrrrrrrrr#r#r#r$rks*  %     rk)NNNN)Cos.pathr4loggingrbase64rr7urllib3rrrrZurllib3.util.retryrZurllib3.util.ssl_rr r r r Zurllib3.exceptionsr rrrrrrrrZurllib3.contrib.pyopensslrr ImportErrorZbotocore.awsrequestrsZbotocore.vendoredrZ(botocore.vendored.six.moves.urllib_parserZbotocore.compatrrZbotocore.exceptionsrrrrr getLoggerrfr%rvrrjoindirname__file__r"certifir r)r?rEobjectrFrkr#r#r#r$sJ        (   - :