| durin42 |
| hg-reviewers |
| Automatic diff as part of commit; lint not applicable. |
| Automatic diff as part of commit; unit tests not applicable. |
| elif leftmost.startswith('xn--') or hostname.startswith('xn--'): | elif leftmost.startswith('xn--') or hostname.startswith('xn--'): | ||||
| # RFC 6125, section 6.4.3, subitem 3. | # RFC 6125, section 6.4.3, subitem 3. | ||||
| # The client SHOULD NOT attempt to match a presented identifier | # The client SHOULD NOT attempt to match a presented identifier | ||||
| # where the wildcard character is embedded within an A-label or | # where the wildcard character is embedded within an A-label or | ||||
| # U-label of an internationalized domain name. | # U-label of an internationalized domain name. | ||||
| pats.append(re.escape(leftmost)) | pats.append(re.escape(leftmost)) | ||||
| else: | else: | ||||
| # Otherwise, '*' matches any dotless string, e.g. www* | # Otherwise, '*' matches any dotless string, e.g. www* | ||||
| pats.append(re.escape(leftmost).replace(r'\*', '[^.]*')) | pats.append(re.escape(leftmost).replace(br'\*', '[^.]*')) | ||||
| # add the remaining fragments, ignore any wildcards | # add the remaining fragments, ignore any wildcards | ||||
| for frag in remainder: | for frag in remainder: | ||||
| pats.append(re.escape(frag)) | pats.append(re.escape(frag)) | ||||
| pat = re.compile(r'\A' + r'\.'.join(pats) + r'\Z', re.IGNORECASE) | pat = re.compile(br'\A' + br'\.'.join(pats) + br'\Z', re.IGNORECASE) | ||||
| return pat.match(hostname) is not None | return pat.match(hostname) is not None | ||||
| def _verifycert(cert, hostname): | def _verifycert(cert, hostname): | ||||
| '''Verify that cert (in socket.getpeercert() format) matches hostname. | '''Verify that cert (in socket.getpeercert() format) matches hostname. | ||||
| CRLs is not handled. | CRLs is not handled. | ||||
| Returns error message if any problems are found and None on success. | Returns error message if any problems are found and None on success. | ||||
| ''' | ''' | ||||