✘✘ GRAYBYTE WORDPRESS FILE MANAGER ✘✘

a

�M�e�@s�dd
lZdd
l
Z
ddlmZ
dd
lZdd
lZdd
lZdd
lZdd
l	Zdd
l
Zej�d�
Z
Gdd�d�Zdd�Zdd	�Zd
d�Zd
S)�N)
�urlparsez_dns.resolver.arpac@s6eZ
dZd
d�Zdd�Zdd�Zdd�Zdd
d�
Zd	S)
�	_SVCBInfocCs|
|_||_
||_||_dS�
N)�bootstrap_address�port�hostname�nameservers)�selfrrrr�r
�,/usr/lib/python3.9/site-packages/dns/_ddr.py�__init__s



z_SVCBInfo.__init__cCs.|
d
D] \}}|dkr||jkr
dSqdS)zIVerify that the _SVCBInfo's address is in the cert's subjectAltName (SAN)ZsubjectAltNamez
IP AddressTF)
r)r	�cert�name�valuer
r
r�ddr_check_certificate!s


z_SVCBInfo.ddr_check_certificatec
Cstj
j}
|
��}|
jj|_|Sr)�dns�query�sslZcreate_default_contextZ
TLSVersionZTLSv1_2Zminimum_version)r	r�ctxr
r
r�make_tls_context(s




z_SVCBInfo.make_tls_contextc	Cs�|��}t
�
�|
}t�|j|jf|
��z}|j||jd
��J}|�t	j
�|�
�

|��
|�
�}|�|�
Wd�
Wd�
S1s�0


Y
Wd�
n1s�0


Y
dS)N)
Zserver_hostname)r�time�socketZcreate_connectionrrZwrap_socketrZ
settimeoutrr�
_remainingZdo_handshake�getpeercertr)r	�lifetimer�
expiration�
s�tsr
r
r
r�ddr_tls_check_sync.s



�




z_SVCBInfo.ddr_tls_check_syncNc
�s�|durtj
��}|��}t��|
}|�tj�|j�
t	j
d
d|j|jf|
||j�IdH4IdH�8}|�
tj�|�
�
IdH}|�|�
Wd�IdH
S1IdHs�0


Y
dS)Nr
)rZasyncbackendZget_default_backendrrZmake_socket�inetZaf_for_addressrrZSOCK_STREAMrrrrrr)r	rZbackendrrrr
r
r
r�ddr_tls_check_async:s"














�	

z_SVCBInfo.ddr_tls_check_async)
N)�__name__�
__module__�__qualname__rrrrr r
r
r
rrs

rc
	Cs�
|j}
t
j�|
�
sgSg}|j��D�
]�}g}|j�t
jj	j
j�
}|durLq$t|j
�
}|jjd
d�
}d}|j�t
jj	j
j�
}|du
r�|j}d|v�
r8|j�t
jj	j
j�
}|dus$|j�d�
s�q$|jdd���}	|	�d�
s�d|	}	|dur�d}d|�d	|�|	��}
z t|
�

|�t
j�|
|
��

Wnt�
y6


Yn0d
|v�
rf|du�
rPd}|�t
j�|
||��

d|v�
r�|du�
r~d}|�t
j�|
|d
|��

t|�
d
kr$|�t|
|||��

q$|S)NT)
Zomit_final_dotsh2s{?dns}i�����
/i�
zhttps://�
:sdotiUsdoqr
)Z
nameserverrrZ
is_addressZrrsetZprocessing_order�params�getZrdtypesZsvcbbaseZParamKeyZALPN�setZids�targetZto_textZPORTrZDOHPATHr�endswith�decode�
startswithr�appendZ
DoHNameserver�	ExceptionZ
DoTNameserverZ
DoQNameserver�lenr)�answerr�infosZrrrZparamZalpns�hostr�path�urlr
r
r�_extract_nameservers_from_svcbMsZ




































�





�

r5c	CsHg}t|�
}|D]2}z|�
|
�
r,|�|j�

Wqty@


Yq0q|S)
�VReturn a list of TLS-validated resolver nameservers extracted from an SVCB
    answer.)r5r�extendrr.�r0rrr1�infor
r
r�_get_nameservers_sync�s








r:c	�sNg}t|�
}|D]8}z |�
|
�
Id
Hr2|�|j�

WqtyF


Yq0q|S)r6N)r5r r7rr.r8r
r
r�_get_nameservers_async�s







r;)rr�urllib.parserZdns.asyncbackendrZdns.inetZdns.nameZdns.nameserverZ	dns.queryZdns.rdtypes.svcbbaserZ	from_textZ_local_resolver_namerr5r:r;r
r
r
r�<module>s






	34