1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
|
# Copyright (C) 2020 Philipp Hörist <philipp AT hoerist.com>
#
# This file is part of nbxmpp.
#
# This program is free software; you can redistribute it and/or
# modify it under the terms of the GNU General Public License
# as published by the Free Software Foundation; either version 3
# of the License, or (at your option) any later version.
#
# This program is distributed in the hope that it will be useful,
# but WITHOUT ANY WARRANTY; without even the implied warranty of
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
# GNU General Public License for more details.
#
# You should have received a copy of the GNU General Public License
# along with this program; If not, see <http://www.gnu.org/licenses/>.
import logging
from gi.repository import Gio
from nbxmpp.const import TCPState
from nbxmpp.util import Observable
from nbxmpp.util import LogAdapter
log = logging.getLogger('nbxmpp.connection')
class Connection(Observable):
'''
Base Connection Class
Signals:
data-sent
data-received
bad-certificate
certificate-set
connection-failed
disconnected
'''
def __init__(self,
log_context,
address,
accepted_certificates,
ignore_tls_errors,
ignored_tls_errors,
client_cert):
self._log = LogAdapter(log, {'context': log_context})
Observable.__init__(self, self._log)
self._client_cert = client_cert
self._address = address
self._local_address = None
self._remote_address = None
self._state = None
self._state = TCPState.DISCONNECTED
self._peer_certificate = None
self._peer_certificate_errors = None
self._accepted_certificates = accepted_certificates
self._ignore_tls_errors = ignore_tls_errors
self._ignored_tls_errors = ignored_tls_errors
@property
def local_address(self):
return self._local_address
@property
def remote_address(self):
return self._remote_address
@property
def peer_certificate(self):
return (self._peer_certificate, self._peer_certificate_errors)
@property
def connection_type(self):
return self._address.type
@property
def state(self):
return self._state
@state.setter
def state(self, value):
self._log.info('Set Connection State: %s', value)
self._state = value
def _accept_certificate(self):
if not self._peer_certificate_errors:
return True
self._log.info('Found TLS certificate errors: %s',
self._peer_certificate_errors)
if self._ignore_tls_errors:
self._log.warning('Ignore all errors')
return True
if self._ignored_tls_errors:
self._log.warning('Ignore TLS certificate errors: %s',
self._ignored_tls_errors)
self._peer_certificate_errors -= self._ignored_tls_errors
if Gio.TlsCertificateFlags.UNKNOWN_CA in self._peer_certificate_errors:
for accepted_certificate in self._accepted_certificates:
if self._peer_certificate.is_same(accepted_certificate):
self._peer_certificate_errors.discard(
Gio.TlsCertificateFlags.UNKNOWN_CA)
break
if not self._peer_certificate_errors:
return True
return False
def disconnect(self):
raise NotImplementedError
def connect(self):
raise NotImplementedError
def send(self, stanza, now=False):
raise NotImplementedError
def _log_stanza(self, data, received=True):
direction = 'RECEIVED' if received else 'SENT'
message = ('::::: DATA %s ::::\n\n%s\n')
self._log.info(message, direction, data)
def start_tls_negotiation(self):
raise NotImplementedError
def shutdown_output(self):
raise NotImplementedError
def shutdown_input(self):
raise NotImplementedError
def destroy(self):
self.remove_subscriptions()
self._peer_certificate = None
self._client_cert = None
self._address = None
|
