a
�M�e � @ s� d dl Z d dlZd dlmZ d dlZd dlZd dlZd dlZd dl Zd dl
Zej � d�Z
G dd� d�Zdd� Zdd � Zd
d � ZdS ) � N)�urlparsez_dns.resolver.arpac @ s6 e Zd Zdd� Zdd� Zdd� Zdd� Zd d
d �Zd S )
� _SVCBInfoc C s || _ || _|| _|| _d S �N)�bootstrap_address�port�hostname� nameservers)�selfr r r r � r
�,/usr/lib/python3.9/site-packages/dns/_ddr.py�__init__ s z_SVCBInfo.__init__c C s. |d D ] \}}|dkr|| j kr dS qdS )zIVerify that the _SVCBInfo's address is in the cert's subjectAltName (SAN)ZsubjectAltNamez
IP AddressTF)r )r �cert�name�valuer
r
r �ddr_check_certificate! s z _SVCBInfo.ddr_check_certificatec C s t jj}|�� }|jj|_|S r )�dns�query�sslZcreate_default_contextZ
TLSVersionZTLSv1_2Zminimum_version)r r �ctxr
r
r �make_tls_context( s
z_SVCBInfo.make_tls_contextc C s� | � � }t�� | }t�| j| jf|��z}|j|| jd��J}|�t j
� |�� |� � |�
� }| �|�W d � W d � S 1 s�0 Y W d � n1 s�0 Y d S )N)Zserver_hostname)r �time�socketZcreate_connectionr r Z wrap_socketr Z
settimeoutr r �
_remainingZ do_handshake� getpeercertr )r �lifetimer �
expiration�s�tsr
r
r
r �ddr_tls_check_sync. s �z _SVCBInfo.ddr_tls_check_syncNc
� s� |d u rt j�� }| �� }t�� | }|�t j�| j�t j
dd | j| j f||| j �I d H 4 I d H �8}|�
t j�|��I d H }| �|�W d �I d H S 1 I d H s�0 Y d S )Nr )r Z asyncbackendZget_default_backendr r Z make_socket�inetZaf_for_addressr r Z SOCK_STREAMr r r r r r )r r Zbackendr r r r
r
r
r �ddr_tls_check_async: s"
� z _SVCBInfo.ddr_tls_check_async)N)�__name__�
__module__� __qualname__r r r r r r
r
r
r r s
r c C s� | j }tj�|�sg S g }| j�� D �]�}g }|j�tjj j
j �}|d u rLq$t |j
�}|jjdd�}d }|j�tjj j
j�}|d ur�|j}d|v �r8|j�tjj j
j�}|d u s$|j�d�s�q$|jd d� �� } | �d�s�d| } |d u r�d}d|� d |� | � �}
z t|
� |�tj �|
|�� W n t�y6 Y n0 d
|v �rf|d u �rPd }|�tj �|||�� d |v �r�|d u �r~d }|�tj � ||d|�� t |�d
kr$|�t ||||�� q$|S )NT)Zomit_final_dots h2s {?dns}i�����/i� zhttps://�:s dotiU s doqr ) Z
nameserverr r Z
is_addressZrrsetZprocessing_order�params�getZrdtypesZsvcbbaseZParamKeyZALPN�setZids�targetZto_textZPORTr ZDOHPATHr �endswith�decode�
startswithr �appendZ
DoHNameserver� ExceptionZ
DoTNameserverZ
DoQNameserver�lenr ) �answerr �infosZrrr ZparamZalpns�hostr �path�urlr
r
r � _extract_nameservers_from_svcbM sZ
�
� r5 c C sH g }t | �}|D ]2}z|�|�r,|�|j� W q ty@ Y q0 q|S )�VReturn a list of TLS-validated resolver nameservers extracted from an SVCB
answer.)r5 r �extendr r. �r0 r r r1 �infor
r
r �_get_nameservers_sync� s
r: c � sN g }t | �}|D ]8}z |�|�I dH r2|�|j� W q tyF Y q0 q|S )r6 N)r5 r r7 r r. r8 r
r
r �_get_nameservers_async� s r; )r r � urllib.parser Zdns.asyncbackendr Zdns.inetZdns.nameZdns.nameserverZ dns.queryZdns.rdtypes.svcbbaser Z from_textZ_local_resolver_namer r5 r: r; r
r
r
r �<module> s 34