o
    c""                  	   @   s  d dl Z d dlZd dlZd dlZd dlZd dlZd dlZd dlmZ d dl	m
Z
mZ d dlmZ eddefdefdefd	efgZG d
d dZdeje fddZdeje deje fddZdd Z	d'dedejeje  ddfddZdeddfddZdejdejeejg eje f f dejfddZG dd dZ deddfd d!Z!e!ej" e #  ej$d"kre j%&d#durej'd$e(d%d& dS dS dS )(    N)InternalError)ffilib)CONDITIONAL_NAMES_OpenSSLErrorWithTextcoder   reasonreason_textc                   @   sn   e Zd ZdededefddZdededefddZedefd	d
ZedefddZ	edefddZ
dS )_OpenSSLErrorr   r   r   c                 C   s   || _ || _|| _d S N)_code_lib_reason)selfr   r   r    r   Y/opt/certbot/lib/python3.10/site-packages/cryptography/hazmat/bindings/openssl/binding.py__init__   s   
z_OpenSSLError.__init__returnc                 C   s   || j ko	|| jkS r   )r   r   )r   r   r   r   r   r   _lib_reason_match   s   z_OpenSSLError._lib_reason_matchc                 C      | j S r   )r   r   r   r   r   r          z_OpenSSLError.codec                 C   r   r   )r   r   r   r   r   r   $   r   z_OpenSSLError.libc                 C   r   r   )r   r   r   r   r   r   (   r   z_OpenSSLError.reasonN)__name__
__module____qualname__intr   boolr   propertyr   r   r   r   r   r   r   r
      s    r
   r   c                 C   sD   g }	 |   }|dkr	 |S | |}| |}|t||| q)NTr   )ERR_get_errorERR_GET_LIBERR_GET_REASONappendr
   )r   errorsr   err_lib
err_reasonr   r   r   _consume_errors-   s   

r%   r"   c                 C   sV   g }| D ]$}t dd}t|j|t| t |}|t|j|j|j	| q|S )Nzchar[]   )
r   newr   ERR_error_string_nr   lenstringr!   r   r   )r"   errors_with_texterrbuferr_text_reasonr   r   r   _errors_with_text<   s   
r/   c                 C   s   t t| S r   )r/   r%   )r   r   r   r   _consume_errors_with_textN      r0   okc                 C   s0   |s|d u r
t | }t|}td||d S )Nai  Unknown OpenSSL error. This error is commonly encountered when another library is not cleaning up the OpenSSL error stack. If you are using cryptography with another library that uses OpenSSL try disabling it before reporting a bug. Otherwise please file an issue at https://github.com/pyca/cryptography/issues with information on how to reproduce this. ({0!r}))r%   r/   r   format)r   r2   r"   r+   r   r   r   _openssl_assertR   s   r4   loadedc                 C   s   | st dd S )Na1  OpenSSL 3.0's legacy provider failed to load. This is a fatal error by default, but cryptography supports running without legacy algorithms by setting the environment variable CRYPTOGRAPHY_OPENSSL_NO_LEGACY. If you did not expect this error, you have likely made a mistake with your OpenSSL configuration.)RuntimeError)r5   r   r   r   _legacy_provider_errorf   s
   r7   conditional_namesc                 C   sj   t d}| |_t }| D ]\}}t| |s||  qt| D ]}||vr2t||t| | q#|S )Nr   )	types
ModuleType_original_libsetitemsgetattrupdatedirsetattr)r   r8   conditional_libexcluded_names	conditionnames_cbattrr   r   r   build_conditional_libraryq   s   

rG   c                   @   s   e Zd ZU dZdZejed< eZdZ	e
 ZejZejed< dZejZejed< ddd	Zdd
dZedddZedddZedddZdS )Bindingz
    OpenSSL API wrapper.
    Nr   F_legacy_provider_default_providerr   c                 C      |    d S r   _ensure_ffi_initializedr   r   r   r   r      r1   zBinding.__init__c                 C   s   t | j| jj | j| jjd| _t | j| j| jjk | j| jjd| j_t | j| jj| jjk | j| jjd}t | j|dk d S )Ns   bases   fips   )	r4   r   #CRYPTOGRAPHY_OPENSSL_300_OR_GREATEROSSL_PROVIDER_loadr   NULL_base_provider_fips_provider"EVP_default_properties_enable_fips)r   resr   r   r   _enable_fips   s   zBinding._enable_fipsc                 C   s4   | j   | j jr| j  }t| j |dv  d S d S )N)rN      )r   ERR_clear_error"CRYPTOGRAPHY_NEEDS_OSRANDOM_ENGINE Cryptography_add_osrandom_enginer4   )clsresultr   r   r   _register_osrandom_engine   s
   

z!Binding._register_osrandom_enginec                 C   s   | j _ | jsRttt| _d| _|   | jjrZtj	ds5| j
| jjd| _| j| jjk| _t| j | j
| jjd| _t| j| j| jjk W d    d S W d    d S W d    d S 1 sew   Y  d S )NTCRYPTOGRAPHY_OPENSSL_NO_LEGACYs   legacys   default)
_init_lock_lib_loadedrG   r   r   r]   rO   osenvirongetrP   r   rQ   rI   _legacy_provider_loadedr7   rJ   r4   r[   r   r   r   rM      s0   

"zBinding._ensure_ffi_initializedc                 C   rK   r   rL   re   r   r   r   init_static_locks   s   zBinding.init_static_locks)r   N)r   r   r   __doc__r   typingClassVar__annotations__r   r`   	threadingLockr_   rQ   rI   Anyrd   rJ   r   rV   classmethodr]   rM   rf   r   r   r   r   rH      s"   
 

rH   versionc                 C   s.   t tj}| d|krtd| |d S )Nasciia  The version of cryptography does not match the loaded shared object. This can happen if you have multiple copies of cryptography installed in your Python path. Please try creating a new virtual environment to resolve this issue. Loaded python version: {}, shared object version: {})r   r*   r   CRYPTOGRAPHY_PACKAGE_VERSIONencodeImportErrorr3   )ro   so_package_versionr   r   r   _verify_package_version   s   ru   win32PROCESSOR_ARCHITEW6432zYou are using cryptography on a 32-bit Python on a 64-bit Windows Operating System. Cryptography will be significantly faster if you switch to using a 64-bit Python.rW   )
stacklevelr   ))ra   sysrk   r9   rh   warningscryptographycryptography.exceptionsr   %cryptography.hazmat.bindings._opensslr   r   1cryptography.hazmat.bindings.openssl._conditionalr   
NamedTupler   bytesr   r
   Listr%   r/   r0   r   Optionalr4   r7   rm   DictstrCallablerG   rH   ru   __version__rf   platformrb   rc   warnUserWarningr   r   r   r   <module>   sh   


N

