594
594
# gnutls.strerror()
596
596
if message is None and code is not None:
597
message = gnutls.strerror(code)
597
message = gnutls.strerror(code).decode(
598
"utf-8", errors="replace")
598
599
return super(gnutls.Error, self).__init__(
601
602
class CertificateSecurityError(Error):
606
def __init__(self, cls):
609
def from_param(self, obj):
610
if not isinstance(obj, self.cls):
611
raise TypeError("Not of type {}: {!r}"
612
.format(self.cls.__name__, obj))
613
return ctypes.byref(obj.from_param(obj))
615
class CastToVoidPointer:
616
def __init__(self, cls):
619
def from_param(self, obj):
620
if not isinstance(obj, self.cls):
621
raise TypeError("Not of type {}: {!r}"
622
.format(self.cls.__name__, obj))
623
return ctypes.cast(obj.from_param(obj), ctypes.c_void_p)
625
class With_from_param:
627
def from_param(cls, obj):
628
return obj._as_parameter_
631
class Credentials(With_from_param):
606
632
def __init__(self):
607
self._c_object = gnutls.certificate_credentials_t()
608
gnutls.certificate_allocate_credentials(
609
ctypes.byref(self._c_object))
633
self._as_parameter_ = gnutls.certificate_credentials_t()
634
gnutls.certificate_allocate_credentials(self)
610
635
self.type = gnutls.CRD_CERTIFICATE
612
637
def __del__(self):
613
gnutls.certificate_free_credentials(self._c_object)
638
gnutls.certificate_free_credentials(self)
640
class ClientSession(With_from_param):
616
641
def __init__(self, socket, credentials=None):
617
self._c_object = gnutls.session_t()
642
self._as_parameter_ = gnutls.session_t()
618
643
gnutls_flags = gnutls.CLIENT
619
644
if gnutls.check_version(b"3.5.6"):
620
645
gnutls_flags |= gnutls.NO_TICKETS
621
646
if gnutls.has_rawpk:
622
647
gnutls_flags |= gnutls.ENABLE_RAWPK
623
gnutls.init(ctypes.byref(self._c_object), gnutls_flags)
648
gnutls.init(self, gnutls_flags)
625
gnutls.set_default_priority(self._c_object)
626
gnutls.transport_set_ptr(self._c_object, socket.fileno())
627
gnutls.handshake_set_private_extensions(self._c_object,
650
gnutls.set_default_priority(self)
651
gnutls.transport_set_ptr(self, socket.fileno())
652
gnutls.handshake_set_private_extensions(self, True)
629
653
self.socket = socket
630
654
if credentials is None:
631
655
credentials = gnutls.Credentials()
632
gnutls.credentials_set(self._c_object, credentials.type,
633
ctypes.cast(credentials._c_object,
656
gnutls.credentials_set(self, credentials.type,
635
658
self.credentials = credentials
637
660
def __del__(self):
638
gnutls.deinit(self._c_object)
640
663
def handshake(self):
641
return gnutls.handshake(self._c_object)
664
return gnutls.handshake(self)
643
666
def send(self, data):
644
667
data = bytes(data)
645
668
data_len = len(data)
646
669
while data_len > 0:
647
data_len -= gnutls.record_send(self._c_object,
670
data_len -= gnutls.record_send(self, data[-data_len:],
652
return gnutls.bye(self._c_object, gnutls.SHUT_RDWR)
674
return gnutls.bye(self, gnutls.SHUT_RDWR)
654
676
# Error handling functions
655
677
def _error_code(result):
656
678
"""A function to raise exceptions on errors, suitable
657
679
for the 'restype' attribute on ctypes functions"""
680
if result >= gnutls.E_SUCCESS:
660
682
if result == gnutls.E_NO_CERTIFICATE_FOUND:
661
683
raise gnutls.CertificateSecurityError(code=result)
678
700
priority_set_direct = _library.gnutls_priority_set_direct
679
priority_set_direct.argtypes = [session_t, ctypes.c_char_p,
701
priority_set_direct.argtypes = [ClientSession, ctypes.c_char_p,
680
702
ctypes.POINTER(ctypes.c_char_p)]
681
703
priority_set_direct.restype = _error_code
683
705
init = _library.gnutls_init
684
init.argtypes = [ctypes.POINTER(session_t), ctypes.c_int]
706
init.argtypes = [PointerTo(ClientSession), ctypes.c_int]
685
707
init.restype = _error_code
687
709
set_default_priority = _library.gnutls_set_default_priority
688
set_default_priority.argtypes = [session_t]
710
set_default_priority.argtypes = [ClientSession]
689
711
set_default_priority.restype = _error_code
691
713
record_send = _library.gnutls_record_send
692
record_send.argtypes = [session_t, ctypes.c_void_p,
714
record_send.argtypes = [ClientSession, ctypes.c_void_p,
694
716
record_send.restype = ctypes.c_ssize_t
695
717
record_send.errcheck = _retry_on_error
697
719
certificate_allocate_credentials = (
698
720
_library.gnutls_certificate_allocate_credentials)
699
721
certificate_allocate_credentials.argtypes = [
700
ctypes.POINTER(certificate_credentials_t)]
722
PointerTo(Credentials)]
701
723
certificate_allocate_credentials.restype = _error_code
703
725
certificate_free_credentials = (
704
726
_library.gnutls_certificate_free_credentials)
705
certificate_free_credentials.argtypes = [
706
certificate_credentials_t]
727
certificate_free_credentials.argtypes = [Credentials]
707
728
certificate_free_credentials.restype = None
709
730
handshake_set_private_extensions = (
710
731
_library.gnutls_handshake_set_private_extensions)
711
handshake_set_private_extensions.argtypes = [session_t,
732
handshake_set_private_extensions.argtypes = [ClientSession,
713
734
handshake_set_private_extensions.restype = None
715
736
credentials_set = _library.gnutls_credentials_set
716
credentials_set.argtypes = [session_t, credentials_type_t,
737
credentials_set.argtypes = [ClientSession, credentials_type_t,
738
CastToVoidPointer(Credentials)]
718
739
credentials_set.restype = _error_code
720
741
strerror = _library.gnutls_strerror
739
760
global_set_log_function.restype = None
741
762
deinit = _library.gnutls_deinit
742
deinit.argtypes = [session_t]
763
deinit.argtypes = [ClientSession]
743
764
deinit.restype = None
745
766
handshake = _library.gnutls_handshake
746
handshake.argtypes = [session_t]
747
handshake.restype = _error_code
767
handshake.argtypes = [ClientSession]
768
handshake.restype = ctypes.c_int
748
769
handshake.errcheck = _retry_on_error
750
771
transport_set_ptr = _library.gnutls_transport_set_ptr
751
transport_set_ptr.argtypes = [session_t, transport_ptr_t]
772
transport_set_ptr.argtypes = [ClientSession, transport_ptr_t]
752
773
transport_set_ptr.restype = None
754
775
bye = _library.gnutls_bye
755
bye.argtypes = [session_t, close_request_t]
756
bye.restype = _error_code
776
bye.argtypes = [ClientSession, close_request_t]
777
bye.restype = ctypes.c_int
757
778
bye.errcheck = _retry_on_error
759
780
check_version = _library.gnutls_check_version