�
o�
@s�dd
kZddk
lZ
ddklZ
y+dd
kZeiZeid
d�Z	Wn@e
j
o4



dZdd
kZdd
kZed
d�Z	n
Xd�Z
d�Zd	ef
d
��YZd
S(i�N(
tutil(
t
_cCsKti
||
|d
|d|�}|i�p
titd���n

|S(Nt	cert_reqstca_certssssl connection failed(tssltwrap_sockettcipherRtAbortR
(tsocktkeyfiletcertfileRRt	sslsocket((s@/sys/lib/python/lib/python2.5/site-packages/mercurial/sslutil.pytssl_wrap_sockets




icCsqti
td
�p
titd���n

|o
titd���n

ti||
|�}ti||�S(NRsPython SSL support not founds(certificate checking requires Python 2.6(RtsafehasattrtsocketRR
Rthttplibt
FakeSocket(Rtkey_filet	cert_fileRRR((s@/sys/lib/python/lib/python2.5/site-packages/mercurial/sslutil.pyRs


	

csw
|p
td
�Sn

|
i
���f
d�}|idg�}|o�
g}|D]*\}}|djo
||i
�qT
qT~}x#|D]}||�o
d
Sq�
q�W|o
td�di|�Sq�
n

x�|idg�D]�}	|	d\}}|d	jo`
y|i
�id
�}
Wntj
o



td�Sn
X||
�o
d
Sn

td�|
Sq�q�td�S(s�Verify that cert (in socket.getpeercert() format) matches hostname.
    CRLs is not handled.

    Returns error message if any problems are found and None on success.
    sno certificate receivedc

s8|�jp+
d
�jo
|d�id
d�djS(Nt
.s*.i
(
tsplit(
tcertname(
tdnsname(s@/sys/lib/python/lib/python2.5/site-packages/mercurial/sslutil.pytmatchdnsname3s


tsubjectAltNametDNSscertificate is for %ss, tsubjectit
commonNametasciis IDN in certificate not supporteds4no commonName or subjectAltName found in certificateN(R
tlowertgettNonetjointencodetUnicodeEncodeError(tcertthostnameRtsant_[1]tkeytvaluet	certnamestnamet
sR((
Rs@/sys/lib/python/lib/python2.5/site-packages/mercurial/sslutil.pyt_verifycert*s2




>
















cCs�|id
d�}|id|
�}|oa
|oY
t
i|�}tii|�p
t
itd�|��n

h|d<td<Sn

hS(Ntwebtcacertsthostfingerprintsscould not find web.cacerts: %sRR(	tconfigRt
expandpathtostpathtexistsRR
t
CERT_REQUIRED(tuithostR.thostfingerprint((s@/sys/lib/python/lib/python2.5/site-packages/mercurial/sslutil.pyt	sslkwargsUs









t	validatorc
BseZ
d�Zd
�ZRS(cCs|
|_||_
dS(
N(R6R7(tselfR6R7((s@/sys/lib/python/lib/python2.5/site-packages/mercurial/sslutil.pyt__init__bs
	
cCsm|i}|i
id
d�}|i
id|�}t|
dt�pc
|o
titd�|��n

|i
iddt	�o
|i
i
td�|�
n

dSn

|
i�p
titd	�|��n

|
it	�}|p
titd
�|��n

ti
|�i�}dig}tdt|�d
�D]}||||d
!q>
~�}	|or
|i�|idd�i�jo/
titd�||	fdtd��
�n

|i
id||	f�
n�
|og
t|
i�|�}
|
o3
titd�||
fdtd�|	�
�n

|i
id|�
n!
|i
i
td�||	f�
dS(NR-R.R/tgetpeercerts:host fingerprint for %s can't be verified (Python too old)R6treportoldssls?warning: certificate for %s can't be verified (Python too old)
s%s ssl connection errors-%s certificate error: no certificate receivedt
:iits0certificate for %s has unexpected fingerprint %sthints#check hostfingerprint configurations&%s certificate matched fingerprint %s
s%s certificate error: %ssDconfigure hostfingerprint %s or use --insecure to connect insecurelys%%s certificate successfully verified
spwarning: %s certificate with fingerprint %s not verified (check hostfingerprints or web.cacerts config setting)
(R7R6R0tgetattrtFalseRRR
t
configbooltTruetwarnRR=tsha1t	hexdigestR txrangetlenRtreplacetdebugR,(R;RR7R.R8tpeercerttpeerfingerprintR&t
xtnicefingerprinttmsg((s@/sys/lib/python/lib/python2.5/site-packages/mercurial/sslutil.pyt__call__fsJ
	




















:

	











	
(t__name__t
__module__R<RR(((s@/sys/lib/python/lib/python2.5/site-packages/mercurial/sslutil.pyR:as
	(R2t	mercurialRtmercurial.i18nR
RR5t	CERT_NONERRtImportErrorRRR,R9tobjectR:(((s@/sys/lib/python/lib/python2.5/site-packages/mercurial/sslutil.pys<module>	s


	

	+