+ ]icsRt^RIHt^RIt^RIt^RIt^RIHtHt]P'd^RI H t Rt !RR] 4t RRR lltR R ltRR R lltR#)zHThe match_hostname() function from Python 3.5, essential when using SSL.) annotationsN) IPv4Address IPv6Address)_TYPE_PEER_CERT_RET_DICTz3.5.0.1cs]tRt^tRtR#)CertificateErrorN)Z__name__Z __module__Z __qualname__Z__firstlineno__Z__static_attributes__rD/usr/lib/python3.14/site-packages/urllib3/util/ssl_match_hostname.pyrrsrrc(V^8dQhRRRRRRRR/#) dnz typing.Anyhostnamestr max_wildcardsZintreturnztyping.Match[str] | None | boolrZformat"r __annotate__rs,555!5255$5rcsn.pV'gR#VPR4pV^,pVR,pVPR4pWr8d\R\V4,4hV'g+\ VP 4VP 48H4#VR8XdVP R4MVPR4'gVPR4'd'VP \P!V44M5VP \P!V4PRR 44VF(pVP \P!V44K* \P!R R PV4,R ,\P4p V PV4#) z`Matching according to RFC 6125, section 6.4.3 http://tools.ietf.org/html/rfc6125#section-6.4.3 FZ.:NNZ*z,too many wildcards in certificate DNS name: z[^.]+zxn--z\*z[^.]*z\Az\.z\Z)ZsplitZcountrreprboolZlowerappendZ startswithreZescapeZreplaceZcompilejoinZ IGNORECASEZmatch) r r r ZpatsZpartsZleftmostZ remainderZ wildcardsZfragZpats &&& r_dnsname_matchrsL D  HHTNEQxHb Is#I  :T"X E  BHHJ(.."2233 3 G   V $ $(;(;F(C(C BIIh'( BIIh'//w?@ BIIdO$ **UUZZ--5r}} EC 99X rcs$V^8dQhRRRRRR/#)r ipnamer host_ipzIPv4Address | IPv6AddressrrrrrrrrPs" - -S -+D - -rcs\P!VP44p\VPVP8H4#)amExact matching of IP addresses. RFC 9110 section 4.3.5: "A reference identity of IP-ID contains the decoded bytes of the IP address. An IP version 4 address is 4 octets, and an IP version 6 address is 16 octets. [...] A reference identity of type IP-ID matches if the address is identical to an iPAddress value of the subjectAltName extension of the certificate." ) ipaddress ip_addressZrstriprZpacked)rrZips&& r_ipaddress_matchrPs2   fmmo .B  W^^+ ,,rcr) r certz_TYPE_PEER_CERT_RET_DICT | Noner r hostname_checks_common_namerrZNonerrrrrr_s<@R@R )@R@R"&@R @Rrc sV'g \R4hRV9d*\P!VRVPR44pM\P!V4p.pVP RR4pVFiwrgVR8Xd,Vf\ Wq4'dR#VP V4K7VR8XgK@Ve\Ws4'dR#VP V4Kk V'd`Vf\V'gTVP RR4F=pVF4wrgVR8XgK\ Wq4'dR#VP V4K6 K? \V4^8d1\R V: R R P\\V44: 24h\V4^8Xd\R V: R V^,: 24h\R 4h \dRpELoi;i)aVerify that *cert* (in decoded format as returned by SSLSocket.getpeercert()) matches the *hostname*. RFC 2818 and RFC 6125 rules are followed, but IP addresses are not accepted for *hostname*. CertificateError is raised on failure. On success, the function returns nothing. ztempty or no certificate, match_hostname needs a SSL socket or SSL context with either CERT_OPTIONAL or CERT_REQUIREDZ%NZsubjectAltNameZDNSz IP AddressZsubjectZ commonNamez hostname z doesn't match either of z, z doesn't match z/no appropriate subjectAltName fields were foundr) ValueErrorrrZrfindZgetrrrZlenrrZmapr) rr rrZdnsnamesZsanZkeyZvalueZsubs &&& rmatch_hostnamer!_s  -   (?**84IhnnS6I+JKG**84G H'+xx0@"'EC  %<>%#B#B OOE " L "'7'G'G OOE "#wx88Ir*C! ,&%e66OOE* "+ 8}q,4diiD(@S6T V   X! 8,ohqk_UVVPQQG s/F;F;; G  G )r)F)Z__doc__Z __future__rrrZtypingrrZ TYPE_CHECKINGZssl_rZ __version__r rrrr!rrrr"sRN # . .  z 5p -@R@Rr