+ iRt^RIHt^RIt^RIt^RIt^RIHtHt]P'd^RI H t Rt !RR] 4t RRR lltR R ltRR R lltR#)zHThe match_hostname() function from Python 3.5, essential when using SSL.) annotationsN) IPv4Address IPv6Address)_TYPE_PEER_CERT_RET_DICTz3.5.0.1c]tRt^tRtR#)CertificateErrorN)__name__ __module__ __qualname____firstlineno____static_attributes__re/Users/ahmad/.openclaw/workspace/venv/lib/python3.14/site-packages/urllib3/util/ssl_match_hostname.pyrrsrrc(V^8dQhRRRRRRRR/#) dnz typing.Anyhostnamestr max_wildcardsintreturnztyping.Match[str] | None | boolr)formats"r __annotate__rs,555!5255$5rcn.pV'gR#VPR4pV^,pVR,pVPR4pWr8d\R\V4,4hV'g+\ VP 4VP 48H4#VR8XdVP R4MVPR4'gVPR4'd'VP \P!V44M5VP \P!V4PRR 44VF(pVP \P!V44K* \P!R R PV4,R ,\P4p V PV4#) z`Matching according to RFC 6125, section 6.4.3 http://tools.ietf.org/html/rfc6125#section-6.4.3 F.:NN*z,too many wildcards in certificate DNS name: z[^.]+zxn--z\*z[^.]*z\Az\.z\Z)splitcountrreprboollowerappend startswithreescapereplacecompilejoin IGNORECASEmatch) rrrpatspartsleftmost remainder wildcardsfragpats &&& r_dnsname_matchr3sL D  HHTNEQxHb Is#I  :T"X E  BHHJ(.."2233 3 G   V $ $(;(;F(C(C BIIh'( BIIh'//w?@ BIIdO$ **UUZZ--5r}} EC 99X rc$V^8dQhRRRRRR/#)ripnamerhost_ipzIPv4Address | IPv6Addressrr!r)rs"rrrPs" - -S -+D - -rc\P!VP44p\VPVP8H4#)amExact matching of IP addresses. RFC 9110 section 4.3.5: "A reference identity of IP-ID contains the decoded bytes of the IP address. An IP version 4 address is 4 octets, and an IP version 6 address is 16 octets. [...] A reference identity of type IP-ID matches if the address is identical to an iPAddress value of the subjectAltName extension of the certificate." ) ipaddress ip_addressrstripr!packed)r5r6ips&& r_ipaddress_matchr=Ps2   fmmo .B  W^^+ ,,rc(V^8dQhRRRRRRRR/#) rcertz_TYPE_PEER_CERT_RET_DICT | Nonerrhostname_checks_common_namer!rNoner)rs"rrr_s<@R@R )@R@R"&@R @Rrc V'g \R4hRV9d*\P!VRVPR44pM\P!V4p.pVP RR4pVFiwrgVR8Xd,Vf\ Wq4'dR#VP V4K7VR8XgK@Ve\Ws4'dR#VP V4Kk V'd`Vf\V'gTVP RR4F=pVF4wrgVR8XgK\ Wq4'dR#VP V4K6 K? \V4^8d1\R V: R R P\\V44: 24h\V4^8Xd\R V: R V^,: 24h\R 4h \dRpELoi;i)aVerify that *cert* (in decoded format as returned by SSLSocket.getpeercert()) matches the *hostname*. RFC 2818 and RFC 6125 rules are followed, but IP addresses are not accepted for *hostname*. CertificateError is raised on failure. On success, the function returns nothing. ztempty or no certificate, match_hostname needs a SSL socket or SSL context with either CERT_OPTIONAL or CERT_REQUIRED%NsubjectAltNameDNSz IP Addresssubject commonNamez hostname z doesn't match either of z, z doesn't match z/no appropriate subjectAltName fields were foundr) ValueErrorr8r9rfindgetr3r#r=lenrr)mapr ) r?rr@r6dnsnamessankeyvaluesubs &&& rmatch_hostnamerR_s  -   (?**84IhnnS6I+JKG**84G H'+xx0@"'EC  %<>%#B#B OOE " L "'7'G'G OOE "#wx88Ir*C! ,&%e66OOE* "+ 8}q,4diiD(@S6T V   X! 8,ohqk_UVVPQQG s/F;F;; G  G )r)F)__doc__ __future__rr8r%typingrr TYPE_CHECKINGssl_r __version__rHrr3r=rRrrrrYsRN # . .  z 5p -@R@Rr