a ì)g Mã@sàdZddlmZmZmZeZddlZddlZddl Z ddl Z ddl Z ddl Z ddlZ ddlZddlZddlZddlZddlZddlZddlZddlZddlZddlZddlZddlZddlmZzddlZdZdZWn"e yödZe !¡Ze"Z#Yn0ej#Z#z ddl$Z Wne y&ddl%Z Yn0z ddl&Z&Wn e yTddl'm(Z&Yn0ddl)m*m+m,Z-ddl.m*m/m0m1Z2ddl3m*m/m0m4m5Z6ddl7m8Z8m9Z9ddl:m;Z;mm?Z?dd l@mAZAmBZBdd lCmDZDmEZEmFZFz ddlGmHZIdd lGmJZJmKZKWn,e yPddlLZIdd lLmJZJmKZKYn0eIjMjNeIjM_Ozdd lPmQZQmRZRmSZSdZTWneUy’dZTYn0zddlVZVdZWWneUy¼dZWYn0zddlVmXZXmYZYdZZWne yîdZZYn0dZ[dZ\eZsžz:zddl]m^Z^Wn eUy0ddl_m^Z^Yn0dZ[WndeUyœz:zddl]m`Z`Wn eUyzddl_m`Z`Yn0dZ\WneUy–Yn0Yn0eWrªeVjaZbeZs4eWr4zddlcZcddldZcWne yÞYnV0ecje fd¡Zgec heg¡ZidD]6ZjzeiejeVjkZbWq2Wnely,Yn0qú[idddœZmenƒZodZpzddlVmqZqmrZrWnBe yžzddlsmqZqmrZrWne y˜dZpYn0Yn0dZtz4ddlumvZvddlwmxZxddlymzZzddl{m|Z|Wne yðdZtYn0zddl}Z}dZ~Wne ydZ~Yn0dZzddl€Z€Gdd„deKƒZWn e y\e !¡ZdZYn0epsÂzddl‚mƒZƒeƒZrWn$e yœGdd„de„ƒZrYn0d d!„Z…d"d#„Z†d$d%„Z‡d&d'„ZqdZpd(Zˆej‰d)ejŠej‹Bd*ZŒGd+d,„d,eUƒZGd-d.„d.eƒZŽGd/d0„d0eƒZGd1d2„d2eƒZGd3d4„d4eUƒZ‘dZ’dZ“dZ”dZ•e–e&d5ƒr¨e–eId6ƒr¨Gd7d8„d8e&j—ƒZ’Gd9d:„d:eIj˜ƒZ“Gd;d<„d„ƒZ™Gd?d@„d@e&j—ƒZ•GdAdB„dBe&jšƒZ›GdCdD„dDeIjœƒZGdEdF„dFežƒZŸdGdH„Z dIdJ„Z¡dKdL„Z¢dMdN„Z£GdOdP„dPe#ƒZ¤GdQdR„dReIj¥ƒZ¦ddSdT„Z§d€dUdV„Z¨dWdX„Z©ddYdZ„Zªd‚d[d\„Z«Gd]d^„d^eIjKƒZ¬dƒd_d`„Z­d„dadb„Z®dcdd„Z¯d…dfdg„Z°Gdhdi„diƒZ¥d†dldm„Z±dndo„Z²dpdq„Z³drds„Z´d‡dtdu„Zµdvdw„Z¶dˆd{d|„Z·d‰d}d~„Z¸dS)ŠaÏ The **urls** utils module offers a replacement for the urllib2 python library. urllib2 is the python stdlib way to retrieve files from the Internet but it lacks some security features (around verifying SSL certificates) that users should care about in most situations. Using the functions in this module corrects deficiencies in the urllib2 module wherever possible. There are also third-party libraries (for instance, requests) which can be used to replace urllib2 with a more secure library. However, all third party libraries require that the library be installed on the managed machine. That is an extra step for users making use of a module. If possible, avoid third party libraries by using this code instead. é)Úabsolute_importÚdivisionÚprint_functionN)ÚcontextmanagerTF)ÚMappingÚ is_sequence)ÚPY2ÚPY3Ú string_types)Ú cStringIO)Úget_distributionÚmissing_required_lib)Úto_bytesÚ to_nativeÚto_text)ÚAbstractHTTPHandlerÚ BaseHandler)ÚurlparseÚ urlunparseÚunquote)Úcreate_default_contextÚ SSLContext)ÚPyOpenSSLContext)Ússl_wrap_socketÚssl)ZTLSv1_1_methodZTLSv1_2_methodzbackports.ssl_match_hostnamez3.7.0.1)Z pypi_nameÚversion)Úmatch_hostnameÚCertificateError)Úx509)Údefault_backend)Úhashes)ÚUnsupportedAlgorithmc@s<eZdZdZe dej¡ZdZd dd„Z dd„Z d d „Z dS) ÚHTTPGSSAPIAuthHandlerz@ Handles Negotiate/Kerberos support through the gssapi library. z)(?:.*)\s*(Negotiate|Kerberos)\s*([^,]*),?iàNcCs||_||_d|_dS©N)ÚusernameÚpasswordÚ_context)Úselfr$r%©r(ú=/usr/lib/python3.9/site-packages/ansible/module_utils/urls.pyÚ__init__ÖszHTTPGSSAPIAuthHandler.__init__cCs6|j | dd¡¡}|r2| d¡t | d¡¡fSdS)Nzwww-authenticateÚéé)ÚAUTH_HEADER_PATTERNÚsearchÚgetÚgroupÚbase64Z b64decode)r'ÚheadersZ auth_matchr(r(r)Úget_auth_valueÛsz$HTTPGSSAPIAuthHandler.get_auth_valuecCs‚|jr dStt| ¡ƒƒ}| |¡}|s,dS|\}} d} |jrRtj|jtjj d} | r”|j r”t tj dƒspt dƒ‚t|j dd} tj j| | ddj} ntj| dd} d} t|d ƒ}|rÞt ¡d krÞt|ƒ}|rÞtj jd |d } t d |dtjj¡}tjd|| | d|_d}|jjs~|j | ¡}|s.q~d|tt |¡ƒf}| d|¡|j  |¡}| |j!¡}|srq~|d} q|S)N)Z name_typeÚacquire_cred_with_passwordzŽPlatform GSSAPI library does not support gss_acquire_cred_with_password, cannot acquire GSSAPI credential with explicit username and password.Úsurrogate_or_strict©ÚerrorsZinitiate)Úusage)Únamer9TÚDarwinstls-server-end-point:)Zapplication_datazHTTP@%sÚhostname)r9r:ÚcredsZchannel_bindingsz%s %sÚ Authorizationr,)"r&Úgeneric_urlparserÚ get_full_urlr4r$ÚgssapiÚNameZNameTypeÚuserr%ÚhasattrÚrawÚNotImplementedErrorrr5r=Z CredentialsÚ getpeercertÚplatformÚsystemÚget_channel_binding_cert_hashZChannelBindingsZhostbased_serviceZSecurityContextZcompleteÚsteprr2Ú b64encodeÚadd_unredirected_headerÚparentÚopenr3)r'ÚreqÚfpÚcodeÚmsgr3ÚparsedZ auth_headerZ auth_protocolZin_tokenr$Z b_passwordZcredZcbtÚcertZ cert_hashÚtargetZrespZ out_tokenr(r(r)Úhttp_error_401àsJ          z$HTTPGSSAPIAuthHandler.http_error_401)NN) Ú__name__Ú __module__Ú __qualname__Ú__doc__ÚreÚcompileÚIr.Z handler_orderr*r4rWr(r(r(r)r"Ðs  r")ÚSSLCertVerificationErrorc@s eZdZdS)rN)rXrYrZr(r(r(r)r*srcCs¾|sdS| d¡}|s&| ¡| ¡kS|dkr>tdt|ƒƒ‚| d¡\}}}d|vrftdt|ƒƒ‚|sztdt|ƒƒ‚|dkr’tdt|ƒƒ‚| d¡\}}}|rª|s®dS| ¡| ¡kS) aÀMatching according to RFC 6125, section 6.4.3 - Hostnames are compared lower case. - For IDNA, both dn and hostname must be encoded as IDN A-label (ACE). - Partial wildcards like 'www*.example.org', multiple wildcards, sole wildcard or wildcards in labels other then the left-most label are not supported and a CertificateError is raised. - A wildcard must match at least one character. FÚ*r,z.too many wildcards in certificate DNS name: %sÚ.z7wildcard can only be present in the leftmost label: %s.z          rsñ-----BEGIN CERTIFICATE----- MIICvDCCAiWgAwIBAgIJAO8E12S7/qEpMA0GCSqGSIb3DQEBBQUAMEkxCzAJBgNV BAYTAlVTMRcwFQYDVQQIEw5Ob3J0aCBDYXJvbGluYTEPMA0GA1UEBxMGRHVyaGFt MRAwDgYDVQQKEwdBbnNpYmxlMB4XDTE0MDMxODIyMDAyMloXDTI0MDMxNTIyMDAy MlowSTELMAkGA1UEBhMCVVMxFzAVBgNVBAgTDk5vcnRoIENhcm9saW5hMQ8wDQYD VQQHEwZEdXJoYW0xEDAOBgNVBAoTB0Fuc2libGUwgZ8wDQYJKoZIhvcNAQEBBQAD gY0AMIGJAoGBANtvpPq3IlNlRbCHhZAcP6WCzhc5RbsDqyh1zrkmLi0GwcQ3z/r9 gaWfQBYhHpobK2Tiq11TfraHeNB3/VfNImjZcGpN8Fl3MWwu7LfVkJy3gNNnxkA1 4Go0/LmIvRFHhbzgfuo9NFgjPmmab9eqXJceqZIlz2C8xA7EeG7ku0+vAgMBAAGj gaswgagwHQYDVR0OBBYEFPnN1nPRqNDXGlCqCvdZchRNi/FaMHkGA1UdIwRyMHCA FPnN1nPRqNDXGlCqCvdZchRNi/FaoU2kSzBJMQswCQYDVQQGEwJVUzEXMBUGA1UE CBMOTm9ydGggQ2Fyb2xpbmExDzANBgNVBAcTBkR1cmhhbTEQMA4GA1UEChMHQW5z aWJsZYIJAO8E12S7/qEpMAwGA1UdEwQFMAMBAf8wDQYJKoZIhvcNAQEFBQADgYEA MUB80IR6knq9K/tY+hvPsZer6eFMzO3JGkRFBh2kn6JdMDnhYGX7AXVHGflrwNQH qFy+aenWXsC0ZvrikFxbQnX8GVtDADtVznxOi7XzFw7JOxdsVrpXgSN0eh0aMzvV zKPZsZ2miVGclicJHzm5q080b1p/sZtuKIEZk6vZqEg= -----END CERTIFICATE----- s;^-----BEGIN CERTIFICATE-----\n.+?-----END CERTIFICATE-----$)Úflagsc@seZdZdZdS)ÚConnectionErrorzFailed to connect to the serverN©rXrYrZr[r(r(r(r)r‚ösr‚c@seZdZdZdS)Ú ProxyErrorz%Failure to connect because of a proxyNrƒr(r(r(r)r„ûsr„c@seZdZdZdS)ÚSSLValidationErrorz0Failure to connect due to SSL validation failingNrƒr(r(r(r)r…sr…c@seZdZdZdS)Ú NoSSLErrorzXNeeded to connect to an HTTPS url but no ssl library available to verify the certificateNrƒr(r(r(r)r†sr†cs"eZdZdZd‡fdd„ Z‡ZS)ÚMissingModuleErrorz8Failed to import 3rd party module required by the callerNcs tt|ƒ |¡||_||_dSr#)Úsuperr‡r*Úimport_tracebackÚmodule)r'Úmessager‰rŠ©Ú __class__r(r)r* szMissingModuleError.__init__)N)rXrYrZr[r*Ú __classcell__r(r(rŒr)r‡ sr‡ÚHTTPSConnectionÚ HTTPSHandlerc@seZdZdd„Zdd„ZdS)ÚCustomHTTPSConnectioncOsdtjj|g|¢Ri|¤Žd|_tr.|j|_ntrBttƒ|_|_|jr`|j r`|j  |j |j ¡dSr#) Úhttplibrr*ÚcontextÚHAS_SSLCONTEXTr&ÚHAS_URLLIB3_PYOPENSSLCONTEXTrÚPROTOCOLÚ cert_fileZload_cert_chainÚkey_file©r'ÚargsÚkwargsr(r(r)r*s  zCustomHTTPSConnection.__init__cCs¶t|dƒr&t |j|jf|j|j¡}nt |j|jf|j¡}|j}|jr\||_|  ¡|j}t sdt rx|j j ||d|_n:tršt||jtj|jt|d|_ntj ||j|jtd|_dS)z(Connect to a host on a given (SSL) port.Úsource_address©Úserver_hostname)ÚkeyfileÚ cert_reqsÚcertfileÚ ssl_versionrž)rŸr¡r¢N)rDrnÚcreate_connectionÚhostÚportÚtimeoutrœZ _tunnel_hostÚsockZ_tunnelr”r•r“Ú wrap_socketÚHAS_URLLIB3_SSL_WRAP_SOCKETrr˜rÚ CERT_NONEr—r–)r'r§ržr(r(r)Úconnect$s  ÿ zCustomHTTPSConnection.connectN)rXrYrZr*r«r(r(r(r)r‘s r‘c@seZdZdd„ZejZdS)ÚCustomHTTPSHandlercCs,i}tr|j|d<| tjtfi|¤Ž|¡S)Nr“)r”r&Údo_openÚ functoolsÚpartialr‘)r'rPr›r(r(r)Ú https_open>s ÿþûzCustomHTTPSHandler.https_openN)rXrYrZr°rZ do_request_Ú https_requestr(r(r(r)r¬<s r¬c@s*eZdZdZd dd„Zdd„Zdd„ZdS) ÚHTTPSClientAuthHandlerz¥Handles client authentication via cert/key This is a fairly lightweight extension on HTTPSHandler, and can be used in place of HTTPSHandler NcKs*tjj|fi|¤Ž||_||_||_dSr#)Úurllib_requestrr*Ú client_certÚ client_keyÚ _unix_socket)r'r´rµÚ unix_socketr›r(r(r)r*SszHTTPSClientAuthHandler.__init__cCs| |j|¡Sr#)r­Ú_build_https_connection©r'rPr(r(r)r°Ysz!HTTPSClientAuthHandler.https_opencKsx| |j|jdœ¡z|j|d<Wnty4Yn0|jrRt|jƒ|fi|¤ŽStsft|fi|¤ŽSt j |fi|¤ŽS)N)r—r˜r“) Úupdater´rµr&rrr¶ÚUnixHTTPSConnectionr”r‘r’r)r'r¤r›r(r(r)r¸\sþ z.HTTPSClientAuthHandler._build_https_connection)NNN)rXrYrZr[r*r°r¸r(r(r(r)r²Ls r²ccs$tjj}tjtj_dV|tj_dS)z÷Monkey patch ``httplib.HTTPConnection.connect`` to be ``UnixHTTPConnection.connect`` so that when calling ``super(UnixHTTPSConnection, self).connect()`` we get the correct behavior of creating self.sock for the unix socket N)r’ÚHTTPConnectionr«ÚUnixHTTPConnection)Z_connectr(r(r)Ú(unix_socket_patch_httpconnection_connectks r¾cs,eZdZdd„Z‡fdd„Zdd„Z‡ZS)r»cCs ||_dSr#©r¶©r'r·r(r(r)r*wszUnixHTTPSConnection.__init__cs8tƒtt|ƒ ¡Wdƒn1s*0YdSr#)r¾rˆr»r«©r'rŒr(r)r«zszUnixHTTPSConnection.connectcOstjj|g|¢Ri|¤Ž|Sr#)r’rr*r™r(r(r)Ú__call__„szUnixHTTPSConnection.__call__)rXrYrZr*r«rÂrŽr(r(rŒr)r»vs r»c@s(eZdZdZdd„Zdd„Zdd„ZdS) r½z+Handles http requests to a unix socket filecCs ||_dSr#r¿rÀr(r(r)r*ŒszUnixHTTPConnection.__init__c Cszt tjtj¡|_z|j |j¡Wn6tyZ}ztd|j|fƒ‚WYd}~n d}~00|jtjurv|j  |j¡dS)NzInvalid Socket File (%s): %s) rnZAF_UNIXZ SOCK_STREAMr§r«r¶ror¦Z_GLOBAL_DEFAULT_TIMEOUTZ settimeout)r'Úer(r(r)r«s( zUnixHTTPConnection.connectcOstjj|g|¢Ri|¤Ž|Sr#)r’r¼r*r™r(r(r)r˜szUnixHTTPConnection.__call__N)rXrYrZr[r*r«rÂr(r(r(r)r½‰s r½c@s eZdZdZdd„Zdd„ZdS)ÚUnixHTTPHandlerzHandler for Unix urlscKstjj|fi|¤Ž||_dSr#)r³Ú HTTPHandlerr*r¶)r'r·r›r(r(r)r* szUnixHTTPHandler.__init__cCs| t|jƒ|¡Sr#)r­r½r¶r¹r(r(r)Ú http_open¤szUnixHTTPHandler.http_openN)rXrYrZr[r*rÆr(r(r(r)rÄsrÄcs(eZdZdZ‡fdd„Zdd„Z‡ZS)ÚParseResultDottedDictzO A dict that acts similarly to the ParseResult named tuple from urllib cs tt|ƒj|i|¤Ž||_dSr#)rˆrÇr*Ú__dict__r™rŒr(r)r*¬szParseResultDottedDict.__init__cs‡fdd„dDƒS)z] Generate a list from this dict, that looks like the ParseResult named tuple csg|]}ˆ |d¡‘qSr#)r0)Ú.0ÚkrÁr(r)Ú ´óz1ParseResultDottedDict.as_list..)ÚschemeÚnetlocÚpathÚparamsÚqueryÚfragmentr(rÁr(rÁr)Úas_list°szParseResultDottedDict.as_list)rXrYrZr[r*rÓrŽr(r(rŒr)rǨs rÇc CsDtƒ}t|dƒr"|j|d<|j|d<|j|d<|j|d<|j|d<|j|d<|j|d<|j |d<|j }|r¨|d d kr¨d |jvr¨d |jvr¨|j  d ¡d d d …  ¡}||d<z |j }WnZty|j  d¡d  d ¡d}d|vr |  d¡d }|rt|ƒ}nd }Yn0||d<n|d |d<|d |d<|d|d<|d|d<|d|d<|d|d<zœt d¡}| |d ¡}| d ¡}| d¡}| d¡}|r¸t|d d …ƒ}|rÜ|d d…}|  dd ¡\}} nd }} ||d<| |d<||d<||d<Wn8ty>d |d<d |d<|d |d<d |d<Yn0|S)z¶ Returns a dictionary of url parts as parsed by urlparse, but accounts for the fact that older versions of that library do not support named attributes (ie. .netloc) rÎrÍrÏrÐrÑrÒr$r%rú[ú]r,Nr<ú@éÿÿÿÿú:r¥r-riééz1^((?:\w)+(?::(?:\w)+)?@)?([A-Za-z0-9.-]+)(:\d+)?$)rÇrDrÍrÎrÏrÐrÑrÒr$r%r<Úsplitrcr¥rkÚintr\r]Úmatchr1Ú Exception) ÚpartsZ generic_partsr<r¥rÎZ netloc_rerÝZauthr$r%r(r(r)r?·sh         $                  r?ccs t |¡D]}| d¡Vq dS)Nr)Ú b_PEM_CERT_REÚfinditerr1)Úb_datarÝr(r(r)Úextract_pem_certssrãcCsJ| ¡}t|ƒd}tj | d¡¡p(d}|r6t|ƒ}|jjdddpH|S)Nr-ú/Úfilenamezcontent-disposition©Úheader) ÚgeturlrÚosrÏÚbasenamerurr3Ú get_param)ÚresponseÚurlrÏrår(r(r)Úget_response_filenames  rîcCsjtr|jj}|jj}n|jj}|jj}|ƒp.d d¡d}| d¡\}}|dƒpRd d¡d}||||fS)Núapplication/octet-streamú,rräÚcharsetzutf-8)rr3ZgettypeZgetparamZget_content_typerërÛ)rìZget_typerëZ content_typeÚ main_typeÚsub_typerñr(r(r)Úparse_content_types rôc@s,eZdZdZdd„Zdd„Zedd„ƒZdS) ÚGzipDecodedReaderz¡A file-like object to decode a response encoded with the gzip method, as described in RFC 1952. Largely copied from ``xmlrpclib``/``xmlrpc.client`` cCs|tst| ¡td‚tr ||_nDt ¡|_tt   |j d¡dƒD]}|j  |¡q>|j  d¡| ¡tjj|d|jddS)N©r‰érÌrÚrb)ÚmodeZfileobj)ÚHAS_GZIPr‡Úmissing_gzip_errorÚ GZIP_IMP_ERRr Ú_ioÚioÚBytesIOÚiterr®r¯ÚreadÚwriteÚseekÚcloseÚgzipÚGzipFiler*)r'rQÚblockr(r(r)r*%s  zGzipDecodedReader.__init__cCs,ztj |¡W|j ¡n |j ¡0dSr#)rrrrýrÁr(r(r)r5szGzipDecodedReader.closecCs tdddS)Nrzito decompress gzip encoded responses. Set "decompress" to False, to prevent attempting auto decompression)Úreason)r r(r(r(r)rû;sþz$GzipDecodedReader.missing_gzip_errorN)rXrYrZr[r*rÚ staticmethodrûr(r(r(r)rõs rõc@s"eZdZdZddd„Zdd„ZdS) ÚRequestWithMethodz} Workaround for using DELETE/PUT/etc with urllib2 Originally contained in library/net_infrastructure/dnsmadeeasy NTcCs0|dur i}| ¡|_tj ||||||¡dSr#)ÚupperÚ_methodr³ÚRequestr*)r'ríÚmethodÚdatar3Úorigin_req_hostÚ unverifiabler(r(r)r*Js zRequestWithMethod.__init__cCs|jr |jStj |¡SdSr#)r r³r Ú get_methodrÁr(r(r)rPszRequestWithMethod.get_method)NNNT)rXrYrZr[r*rr(r(r(r)r Ds r cs G‡‡‡‡fdd„dtjƒ}|S)aThis is a class factory that closes over the value of ``follow_redirects`` so that the RedirectHandler class has access to that value without having to use globals, and potentially cause problems where ``open_url`` or ``fetch_url`` are used multiple times in a module. cs"eZdZdZ‡‡‡‡fdd„ZdS)z/RedirectHandlerFactory..RedirectHandleraThis is an implementation of a RedirectHandler to match the functionality provided by httplib2. It will utilize the value of ``follow_redirects`` that is passed into ``RedirectHandlerFactory`` to determine how redirects should be handled in urllib2. c s¸tttfƒs,t|ˆˆˆd}|r,tj |¡ˆdkrLtj |||||||¡Sˆdvrft   |||||¡‚|  ¡}ˆdvrž|dks†|dkrìt   |  ¡||||¡‚nNˆdkrÖ|dks¾|dks¾|dvrìt   |  ¡||||¡‚nt   |  ¡||||¡‚z|  ¡} | ¡} Wn ty |j} |j} Yn0| d d ¡}|d vr@|j} ndd} td d „|j ¡Dƒƒ} |dkrt|dkrtd}|dkrŒ|dkrŒd}|dkr¤|dkr¤d}t||| | | ddS)N©Úca_pathÚciphersÚurllib2)ÚnoZnoneF)ÚallZyesTi,iÚsafe)ÚGETÚHEADú z%20)i3i4css&|]\}}| ¡dvr||fVqdS))zcontent-lengthú content-typeztransfer-encodingN©rc©rÉrÊÚvr(r(r)Ú ’s  ÿzSRedirectHandlerFactory..RedirectHandler.redirect_request..i/rri.i-ÚPOSTT)rr3rrr)Úanyr”r•Úmaybe_add_ssl_handlerr³Ú_openerZ add_handlerÚHTTPRedirectHandlerÚredirect_requestÚ urllib_errorÚ HTTPErrorrr@Úget_dataZget_origin_req_hostrrrrÚreplacer3ÚdictÚitemsr ) r'rPrQrRrSZhdrsZnewurlZhandlerrrrr3©rrÚfollow_redirectsÚvalidate_certsr(r)r'esP      ûz@RedirectHandlerFactory..RedirectHandler.redirect_requestN)rXrYrZr[r'r(r.r(r)ÚRedirectHandler^sr1)r³r&)r/r0rrr1r(r.r)ÚRedirectHandlerFactoryWsLr2cCs’dg}tsP| d¡| dtjd tj ¡¡f¡tsFtsF| d¡| d¡| d¡|rp| dt |ƒ¡t d  |¡||d  |¡fƒ‚d S) z_Inteligently build out the SSLValidationError based on what support you have installed zwFailed to validate the SSL certificate for %s:%s. Make sure your managed systems have a valid CA certificate installed.zXIf the website serving the url uses SNI you need python >= 2.7.9 on your managed machinez1 (the python executable used (%s) is version: %s)r+z]or you can install the `urllib3`, `pyOpenSSL`, `ndg-httpsclient`, and `pyasn1` python modulesz-to perform SNI verification in python >= 2.6.z You can use validate_certs=False if you do not need to confirm the servers identity but this is unsafe and not recommended. Paths checked for this platform: %s.zThe exception msg was: %s.rryN) r”rzrlÚ executabler|rÚ splitlinesr•r©rr…)r<r¥ÚpathsÚexcrSr(r(r)Úbuild_ssl_validation_error­sÿ ÿ   r7cCs2tj |¡r.zt |¡Wnty,Yn0dSr#)rérÏÚexistsÚunlinkrÞ)rår(r(r)Úatexit_remove_fileÍs   r:cCs¾|dur g}t|ƒs$td|jjƒ‚tr4t|d}ntrBttƒ}nt dƒ‚|s‚t j rd|j t j O_ |j t j O_ d|_t j|_|r t||fƒr |j||d|rº| d tt|ƒ¡¡|S)NzCiphers must be a list. Got %s.)Úcafilezc Cstƒ}g}|r~|g}tt|dddƒ>}trVt| ¡ƒD]}| t t |dd¡¡q8Wdƒn1sj0Y|||fStsŒ|  d¡t t   ¡dd}|dkrÄ|  d¡|  d¡|  d¡nr|d krØ|  d ¡n^|d krì|  d ¡nJ|d kr|  d¡n4|dkr|  d¡n|dkr6|  d¡|  d¡|  d¡d}tsbt ¡\}}t t|¡|dkr¢trŒ| t t tdd¡¡n t |t¡|  d¡|D]&}tj |¡s¾q¦t |¡} | D]þ}tj ||¡} tj | ¡rÌtj |¡ddvrÌz¬| tvr¬t| dƒ} |  ¡} Wdƒn1s80Ytr”z,t| ƒD]}| t t |dd¡¡qRWntyYWqÌYn0nt || ¡t |d¡WnttfyÆYn0qÌq¦trðt  ¡} | j!g|dd…<n t "|¡|||fS)Nr6r7røz/etc/ssl/certsZLinuxz/etc/pki/ca-trust/extracted/pemz/etc/pki/tls/certsz%/usr/share/ca-certificates/cacert.orgZFreeBSDz/usr/local/share/certsZOpenBSDz/etc/sslZNetBSDz/etc/openssl/certsZSunOSz/opt/local/etc/openssl/certsZAIXz/var/ssl/certsz/opt/freeware/etc/ssl/certsz /etc/ansibler;z/usr/local/etc/opensslr,)z.crtz.pemó r)#Ú bytearrayrOrr”rãrÚextendrZPEM_cert_to_DER_certrrzrrHrIÚtempfileZmkstempÚatexitÚregisterr:Úb_DUMMY_CA_CERTrérrÏÚisdirÚlistdirr|ÚisfileÚsplitextÚLOADED_VERIFY_LOCATIONSrÞroÚIOErrorZget_default_verify_pathsZcapathr)r;r<Ú paths_checkedÚfZb_pemrIZtmp_pathZtmp_fdrÏZ dir_contentsÚ full_pathr—Zb_certZdefault_verify_pathsr(r(r)Ú get_ca_certsôs– ÿÿ$                   ÿÿ    $  (  ÿÿ   rOc@sNeZdZdZdZddd„Zdd„Zdd d „Zd d „Zdd d„Z dd„Z e Z dS)ÚSSLValidationHandlerzÊ A custom handler class for SSL validation. Based on: http://stackoverflow.com/questions/1087227/validate-ssl-certificates-with-python http://techknack.net/python-urllib2-handlers/ zCONNECT %s:%s HTTP/1.0 NTcCs"||_||_||_||_||_dSr#)r<r¥rrr0)r'r<r¥rrr0r(r(r)r*es zSSLValidationHandler.__init__cCs t|jƒSr#)rOrrÁr(r(r)rOlsz!SSLValidationHandler.get_ca_certscCs\|durdgn|}z*t d|¡ ¡\}}}t|ƒ|vr:t‚WntyVtdƒ‚Yn0dS)zC make sure we get back a valid code from the proxy NéÈs(HTTP/\d\.\d) (\d\d\d) (.*)zConnection to proxy failed)r\rÝÚgroupsrÜrÞr„)r'rìZ valid_codesZ http_versionZ resp_coderSr(r(r)Úvalidate_proxy_responseos  z,SSLValidationHandler.validate_proxy_responsecCsVtj d¡}|rR| d¡}t|ƒj}|D](}| |¡sJ| d¡d |¡r(dSq(dS)za Detect if the 'no_proxy' environment variable is set and honor those locations. Zno_proxyrðrØrFT)réÚenvironr0rÛrrÎÚendswith)r'ríZ env_no_proxyrÎr¤r(r(r)Údetect_no_proxy|s   z$SSLValidationHandler.detect_no_proxycCs.|jp|}|jrd}n|pd}t||||dS)N©r;r<rr0)rr>)r'r;r<rr0r(r(r)r>Œs  z!SSLValidationHandler.make_contextc Csî| ¡\}}}| | ¡¡}tj d¡}d}z|j|||j|jd}Wnt yXYn0z|rô|rôt t |ƒƒ}| d¡p‚d} | dd¡} | dus¦| d¡dkr®t dƒ‚t  | | f¡} | d¡d krà|  t|j|j|jfd d ¡| d ¡r4d | d d¡| dd¡f} |  dt t| d d ¡ ¡¡|  d¡d} |  d¡dkrz| |  d¡7} t| ƒdkrBt dƒ‚qB| | ¡|rœ|j| |jd}nBtrºt| |tjt |jd}n$tj| |tjt d}t!| "¡|jƒnt d| d¡ƒ‚nlt  |j|jf¡} |r|j| |jd}nBtr://:'Úhttpr6r7r$ú%s:%sr%sProxy-Authorization: Basic %s s rÌó riiz4Proxy sent too verbose headers. Only 128KiB allowed.r)Úca_certsr r¢rž)r]r r¢zKUnsupported proxy scheme: %s. Currently ansible only supports HTTP proxies.z&Failed to connect to %s at port %s: %s)*rOrVr@rérTr0r>rr0rFr?rr„rnr£ZsendallrÚCONNECT_COMMANDr<r¥r2rLÚstripÚfindZrecvr{rSr¨r©rrZ CERT_REQUIREDr–rrGrZSSLErrorrr7rpr‚r)r'rPZtmp_ca_cert_pathr<rLÚ use_proxyrXr“Z proxy_partsr¥Zproxy_hostnameÚsÚ credentialsZconnect_resultZssl_srÃr(r(r)Ú http_request•s`            &0z!SSLValidationHandler.http_request)NNT)N)NT) rXrYrZr[r^r*rOrSrVr>rdr±r(r(r(r)rP[s   ArPcCsDtt|ƒƒ}|jdkr@|r@ts&tdƒ‚t|j|jp4d|||dSdS)NÚhttpsz‡SSL validation is not available in your version of python. You can use validate_certs=False, however this is unsafe and not recommendedrY)rrr0)r?rrÍÚHAS_SSLr†rPr<r¥)rír0rrrTr(r(r)r$Ùs  r$cCs@tr|jjj}n |jjjj}z | |¡WSty:Yn0dS)zC Attempt to get the peer certificate of the response from urlopen. N)r rQrEZ_sockrGrr)rìZ binary_formrnr(r(r)rGäs    rGcCsntsdSt |tƒ¡}d}z |j}Wnty6Yn0|rF|jdvrNt ¡}t  |tƒ¡}|  |¡|  ¡S)zM Gets the channel binding app data for a TLS connection using the peer cert. N)Zmd5Zsha1) ÚHAS_CRYPTOGRAPHYrZload_der_x509_certificaterZsignature_hash_algorithmr!r:r ZSHA256ZHashrºÚfinalize)Zcertificate_derrUZhash_algorithmZdigestr(r(r)rJòs   rJú-0000c CsHdgd¢|d|dgd¢|dd|d|d|d |d |fS) zïAccepts a timetuple and optional zone which defaults to ``-0000`` and returns a date string as specified by RFC 2822, e.g.: Fri, 09 Nov 2001 01:08:47 -0000 Copied from email.utils.formatdate and modified for separate use z"%s, %02d %s %04d %02d:%02d:%02d %s)ZMonZTueZWedZThuZFriZSatZSunér-) ZJanZFebZMarZAprZMayZJunZJulZAugZSepZOctZNovZDecr,rrirÙrÚr()Ú timetupleÚzoner(r(r)Úrfc2822_date_string s ÿúrmc@sfeZdZddd„Zdd „Zdd d „Zd d „Zdd„Zdd„Zddd„Z ddd„Z ddd„Z dd„Z dS)r NTFé rcCs¬|pi|_t|jtƒs$td|jƒ‚||_||_||_||_||_||_ ||_ | |_ | |_ | |_ | |_||_||_||_||_||_||_t| tjƒrž| |_n t ¡|_dS)a;This class works somewhat similarly to the ``Session`` class of from requests by defining a cookiejar that an be used across requests as well as cascaded defaults that can apply to repeated requests For documentation of params, see ``Request.open`` >>> from ansible.module_utils.urls import Request >>> r = Request() >>> r.open('GET', 'http://httpbin.org/cookies/set?k1=v1').read() '{ "cookies": { "k1": "v1" } } ' >>> r = Request(url_username='user', url_password='passwd') >>> r.open('GET', 'http://httpbin.org/basic-auth/user/passwd').read() '{ "authenticated": true, "user": "user" } ' >>> r = Request(headers=dict(foo='bar')) >>> r.open('GET', 'http://httpbin.org/get', headers=dict(baz='qux')).read() zheaders must be a dict: %rN)r3Ú isinstancer,rkraÚforcer¦r0Ú url_usernameÚ url_passwordÚ http_agentÚforce_basic_authr/r´rµr·rÚunredirected_headersÚ decompressrÚ use_netrcÚ cookiejarÚ CookieJarÚcookies)r'r3rarpr¦r0rqrrrsrtr/r´rµrzr·rrurvrrwr(r(r)r*s.   zRequest.__init__cCs|dur |S|Sr#r()r'rÚfallbackr(r(r)Ú _fallbackJszRequest._fallbackc4CsÌ| ¡}|duri}nt|tƒs(tdƒ‚t|jfi|¤Ž}| ||j¡}| ||j¡}| ||j¡}| | |j ¡} | | |j ¡} | | |j ¡} | | |j ¡} | | |j ¡} | ||j¡}| ||j¡}| ||j¡}| ||j¡}| ||j¡}| ||j¡}| ||j¡}| ||j¡}| ||j¡}| ||j¡}g}|rN| t|ƒ¡tt|ƒƒ}|jdkræ| }| }|r||j}nZd|jvrÖ|j dd¡\}}d|vr¶| dd¡\}}n|}d}| ¡}||d<t |ƒ}|rt!rô| t!||ƒ¡nt"dd d d } t#| t$d ‚nÖ|r^| s^t% &¡}!|! 'd|||¡t% (|!¡}"t% )|!¡}#| |"¡| |#¡nˆ|rz| rzt*||ƒ|d <nl|ræz"t+ +t,j- .d¡¡}$|$ /|j0¡}%Wnt1yºd}%Yn0|%ræ|%\}}&}|ræ|ræt*||ƒ|d <|st% 2i¡}'| |'¡t3t4t5fƒs0t6|| ||d}(|(rd| |(¡n4t7|ƒ\})}*}+t8|)|*|| d},| t9||||,d¡| t:|| ||d¡|dur”| t% ;|¡¡t%j<|Ž}-t% =|-¡t>|dd}t?|||ƒ}.| rÒ|. @d| ¡|ræ|. @dd¡n |rtA| B¡dƒ}/|. @d|/¡dd„|pgDƒ}|D]6}0|0 C¡|vrB|. D|0||0¡n|. @|0||0¡qt% E|.d|¡}1|rÈ|1j .dd¡ C¡dkrÈtF|1jGƒ}2tHr |2|1_Gd|1_In(|1jJ}3t% K|2|1 L¡|1 M¡|1 N¡¡}1|3|1_J|1S)a Sends a request via HTTP(S) or FTP using urllib2 (Python2) or urllib (Python3) Does not require the module environment Returns :class:`HTTPResponse` object. :arg method: method for the request :arg url: URL to request :kwarg data: (optional) bytes, or file-like object to send in the body of the request :kwarg headers: (optional) Dictionary of HTTP Headers to send with the request :kwarg use_proxy: (optional) Boolean of whether or not to use proxy :kwarg force: (optional) Boolean of whether or not to set `cache-control: no-cache` header :kwarg last_mod_time: (optional) Datetime object to use when setting If-Modified-Since header :kwarg timeout: (optional) How long to wait for the server to send data before giving up, as a float :kwarg validate_certs: (optional) Booleani that controls whether we verify the server's TLS certificate :kwarg url_username: (optional) String of the user to use when authenticating :kwarg url_password: (optional) String of the password to use when authenticating :kwarg http_agent: (optional) String of the User-Agent to use in the request :kwarg force_basic_auth: (optional) Boolean determining if auth header should be sent in the initial request :kwarg follow_redirects: (optional) String of urllib2, all/yes, safe, none to determine how redirects are followed, see RedirectHandlerFactory for more information :kwarg client_cert: (optional) PEM formatted certificate chain file to be used for SSL client authentication. This file can also include the key as well, and if the key is included, client_key is not required :kwarg client_key: (optional) PEM formatted file that contains your private key to be used for SSL client authentication. If client_cert contains both the certificate and key, this option is not required :kwarg cookies: (optional) CookieJar object to send with the request :kwarg use_gssapi: (optional) Use GSSAPI handler of requests. :kwarg unix_socket: (optional) String of file system path to unix socket file to use when establishing connection to the provided url :kwarg ca_path: (optional) String of file system path to CA cert bundle to use :kwarg unredirected_headers: (optional) A list of headers to not attach on a redirected request :kwarg decompress: (optional) Whether to attempt to decompress gzip content-encoded responses :kwarg ciphers: (optional) List of ciphers to use :kwarg use_netrc: (optional) Boolean determining whether to use credentials from ~/.netrc file :returns: HTTPResponse. Added in Ansible 2.9 Nzheaders must be a dictÚftprÖr,rØr+rAzfor use_gssapi=Truez https://pypi.org/project/gssapi/)rrírör>ZNETRCrrW)r´rµr·r“Zpassthru)Z nonstringz User-agentz cache-controlzno-cacheZGMTzIf-Modified-SincecSsg|] }| ¡‘qSr(r)rÉÚhr(r(r)rËrÌz Request.open..zcontent-encodingr)Or ror,rkr3r|rarpr¦r0rqrrrsrtr/r´rµrzr·rrurvrrwrzrÄr?rrÍrÎrÛrÓrr"r r‡ÚGSSAPI_IMP_ERRr³ZHTTPPasswordMgrWithDefaultRealmZ add_passwordZHTTPBasicAuthHandlerZHTTPDigestAuthHandlerÚbasic_auth_headerÚnetrcrérTr0Zauthenticatorsr<rKZ ProxyHandlerr#r”r•r$rOr>r²r2ZHTTPCookieProcessorZ build_openerZinstall_openerrr Ú add_headerrmrkrcrMZurlopenrõrQr ÚlengthrSZ addinfourlÚinforèZgetcode)4r'rrírr3rarpÚ last_mod_timer¦r0rqrrrsrtr/r´rµrzÚ use_gssapir·rrurvrrwÚhandlersrTr$r%rÎrcZ parsed_listZ imp_err_msgZpassmanZ authhandlerZdigest_authhandlerÚrcZloginÚ_Z proxyhandlerZ ssl_handlerZ tmp_ca_pathr<rLr“ÚopenerÚrequestZtstamprçÚrrQrSr(r(r)rOOsò3     ÿ            üý        üz Request.opencKs|jd|fi|¤ŽS)zÇSends a GET request. Returns :class:`HTTPResponse` object. :arg url: URL to request :kwarg \*\*kwargs: Optional arguments that ``open`` takes. :returns: HTTPResponse r©rO©r'rír›r(r(r)r0*sz Request.getcKs|jd|fi|¤ŽS)zËSends a OPTIONS request. Returns :class:`HTTPResponse` object. :arg url: URL to request :kwarg \*\*kwargs: Optional arguments that ``open`` takes. :returns: HTTPResponse ZOPTIONSrrŽr(r(r)r=4szRequest.optionscKs|jd|fi|¤ŽS)zÈSends a HEAD request. Returns :class:`HTTPResponse` object. :arg url: URL to request :kwarg \*\*kwargs: Optional arguments that ``open`` takes. :returns: HTTPResponse rrrŽr(r(r)Úhead>sz Request.headcKs|jd|fd|i|¤ŽS)a(Sends a POST request. Returns :class:`HTTPResponse` object. :arg url: URL to request. :kwarg data: (optional) bytes, or file-like object to send in the body of the request. :kwarg \*\*kwargs: Optional arguments that ``open`` takes. :returns: HTTPResponse r"rr©r'rírr›r(r(r)ÚpostHs z Request.postcKs|jd|fd|i|¤ŽS)a'Sends a PUT request. Returns :class:`HTTPResponse` object. :arg url: URL to request. :kwarg data: (optional) bytes, or file-like object to send in the body of the request. :kwarg \*\*kwargs: Optional arguments that ``open`` takes. :returns: HTTPResponse ZPUTrrrr(r(r)ÚputSs z Request.putcKs|jd|fd|i|¤ŽS)a)Sends a PATCH request. Returns :class:`HTTPResponse` object. :arg url: URL to request. :kwarg data: (optional) bytes, or file-like object to send in the body of the request. :kwarg \*\*kwargs: Optional arguments that ``open`` takes. :returns: HTTPResponse ZPATCHrrrr(r(r)Úpatch^s z Request.patchcKs|jd|fi|¤ŽS)zËSends a DELETE request. Returns :class:`HTTPResponse` object. :arg url: URL to request :kwargs \*\*kwargs: Optional arguments that ``open`` takes. :returns: HTTPResponse ZDELETErrŽr(r(r)ÚdeleteiszRequest.delete)NTFrnTNNNFrNNNNNNTNT)NNNNNNNNNNNNNNNFNNNNNN)N)N)N) rXrYrZr*r|rOr0r=rr‘r’r“r”r(r(r(r)r s,ý /ú \   r rnrcCsL|p|r dnd}tƒj|||||||||| | | | | ||||||||||dS)z… Sends a request via HTTP(S) or FTP using urllib2 (Python2) or urllib (Python3) Does not require the module environment r"r)rr3rarpr…r¦r0rqrrrsrtr/r´rµrzr†r·rrurvrrw)r rO)rírr3rrarpr…r¦r0rqrrrsrtr/r´rµrzr†r·rrurvrrwr(r(r)Úopen_urlts úr•c CsZt|tƒstd|jjƒ‚tjj d¡}t |  ¡ƒD]–\}}t|t ƒrZd}d}|}d}n˜t|tƒrâ|  d¡}|  d¡}t ||fƒsŒtdƒ‚|  d ¡}|sÐztj|p¦d d d d p´d}WntyÎd}Yn0| d¡\}} }ntd|jjƒ‚|s`|r`tt|dddƒ<} tjj |  ¡¡} | d=|  dd||f¡Wdƒn1sT0Yntjj ||¡} |  t|ƒ¡|  dd¡| d=| jd|dd|rÂ| jdttj  |¡ƒdd| !| ¡q4t"ræ|j#tj$j%d} n0t&ƒ} tj'j(| d d}| )|¡tj* +|  ,¡¡} ~|  d¡\}} }~ t"r>tj- .¡j/}n tj- 0¡j1}||ƒd|fS)aATakes a mapping, and prepares a multipart/form-data body :arg fields: Mapping :returns: tuple of (content_type, body) where ``content_type`` is the ``multipart/form-data`` ``Content-Type`` header including ``boundary`` and ``body`` is the prepared bytestring body Payload content from a file will be base64 encoded and will include the appropriate ``Content-Transfer-Encoding`` and ``Content-Type`` headers. Example: { "file1": { "filename": "/bin/true", "mime_type": "application/octet-stream" }, "file2": { "content": "text based file content", "filename": "fake.txt", "mime_type": "text/plain", }, "text_form_field": "value" } z&Mapping is required, cannot be type %sz form-dataÚtextZplainNråÚcontentz4at least one of filename or content must be providedZ mime_typer+F)rhrrïräz5value must be a string, or mapping, cannot be type %sr6r7røz Content-Typez%s/%szContent-Dispositionz MIME-Versionr:ræ)Úpolicy)Z maxheaderlenr\r)2rorrqrrXÚemailÚmimeZ multipartZ MIMEMultipartÚsortedr-r r0r#rkÚ mimetypesZ guess_typerÞrerOrZ applicationZMIMEApplicationrr‚Z nonmultipartZMIMENonMultipartZ set_payloadZ set_paramrrérÏrêZattachr Zas_bytesr˜ZHTTPr Ú generatorÚ GeneratorZflattenZutilsZfix_eolsÚgetvalueÚparserZBytesHeaderParserZ parsebytesZ HeaderParserZparsestr)ÚfieldsÚmZfieldrròrór—råršrfrMÚpartrârQÚgr3Z b_contentr r(r(r)Úprepare_multipartŠs|  ÿ         ÿ 6 ýý    þr¥cCs*|dur d}dt td||fdd¡S)z‰Takes a username and password and returns a byte string suitable for using as value of an Authorization header to do basic auth. Nr+sBasic %sr[r6r7)r2rLr)r$r%r(r(r)r€sr€cCsnttddtdddtdddtdddtdddtddtdddtdddtd dtd dtdddd S) zz Creates an argument spec that can be used with any module that will be requesting content via urllib/urllib2 Ústr)ÚtypeÚboolF)r§Údefaultúansible-httpgetT)r§Zno_logrÏ) rírprsrar0rqrrrtr´rµr†)r,r(r(r(r)Úurl_argument_spec s       õr«c&Cs ts|jddts6|dur6d}|jdt ¡ddtj}|jt_|j   dd¡}|d urh|j   d d¡}|j   d d ¡}|j   d d ¡}|j   dd¡}|j   dd ¡}|j   dd¡}|j   d¡}|j   d¡}|j   d| ¡} t | t j ƒsèt  ¡} d }t|dd}zz6t||||||||||||||||| | | | | |||d}| tdd„| ¡ ¡Dƒƒ¡tr´i}|j ¡D]<\}}| ¡}||vržd |||f¡||<n|||<ql| |¡g}tƒ} | D]$}!|!j| |!j<| |!j|!jf¡qÂd dd„|Dƒ¡|d<| |d<| td |j  d!d"¡| ¡|jd#¡WnÐty´}"zftƒ}#|#d ur‚|# ¡d$kr‚|jfd%d&t|"ƒi|¤Žn|jfd%d't|"ƒi|¤ŽWYd }"~"nZd }"~"0t t!fyö}"z&|jfd%t|"ƒi|¤ŽWYd }"~"nd }"~"0t"y0}"z"|jt#|"ƒ|"j$d(WYd }"~"nÞd }"~"0t%j&yì}"z¢|"}z|"j'd urXt(‚|" )¡}$Wnt(yzd }$Yn 0|" *¡z$| td)d„|" ¡ ¡Dƒƒ¡Wnt+y¼Yn0| t|"ƒ|$|"jd*œ¡WYd }"~"n"d }"~"0t%j,y<}"z6t-t.|"d+dƒƒ}%| td,t|"ƒ|%d-¡WYd }"~"nÒd }"~"0t/j0y|}"z&| td.t|"ƒdd-¡WYd }"~"n’d }"~"0t1j2y¾}"z(| td/t|"j3ƒdd-¡WYd }"~"nPd }"~"0t+y}"z.|jtd0t|"ƒdd-t4 5¡d1WYd }"~"n d }"~"00W|t_n|t_0||fS)2aâSends a request via HTTP(S) or FTP (needs the module as parameter) :arg module: The AnsibleModule (used to get username, password etc. (s.b.). :arg url: The url to use. :kwarg data: The data to be sent (in case of POST/PUT). :kwarg headers: A dict with the request headers. :kwarg method: "POST", "PUT", etc. :kwarg use_proxy: (optional) whether or not to use proxy (Default: True) :kwarg boolean force: If True: Do not get a cached copy (Default: False) :kwarg last_mod_time: Default: None :kwarg int timeout: Default: 10 :kwarg boolean use_gssapi: Default: False :kwarg unix_socket: (optional) String of file system path to unix socket file to use when establishing connection to the provided url :kwarg ca_path: (optional) String of file system path to CA cert bundle to use :kwarg cookies: (optional) CookieJar object to send with the request :kwarg unredirected_headers: (optional) A list of headers to not attach on a redirected request :kwarg decompress: (optional) Whether to attempt to decompress gzip content-encoded responses :kwarg cipher: (optional) List of ciphers to use :kwarg boolean use_netrc: (optional) If False: Ignores login and password in ~/.netrc file (Default: True) :returns: A tuple of (**response**, **info**). Use ``response.read()`` to read the data. The **info** contains the 'status' and other meta data. When a HttpError (status >= 400) occurred then ``info['body']`` contains the error response data:: Example:: data={...} resp, info = fetch_url(module, "http://example.com", data=module.jsonify(data), headers={'Content-type': 'application/json'}, method="POST") status_code = info["status"] body = resp.read() if status_code >= 400 : body = info['body'] zurlparse is not installed©rSTFzE%s. "decompress" has been automatically disabled to prevent a failurez2.16)rr0Nrarqr+rrrsrªrtr/rr´rµr†r×)ríÚstatus)rr3rrarpr…r¦r0rqrrrsrtr/r´rµrzr†r·rrurvrrwcss|]\}}| ¡|fVqdSr#rrr(r(r)r!wrÌzfetch_url..ryz; css|]}d|VqdS)z%s=%sNr()rÉÚcr(r(r)r!rÌZcookies_stringrzz OK (%s bytes)zContent-LengthÚunknown)rSrír­ZredhatrSz-%s. You can also install python-ssl from EPELz%s)rSÚ exceptioncss|]\}}| ¡|fVqdSr#rrr(r(r)r!¯rÌ)rSÚbodyr­rRzRequest failed: %s)rSr­zConnection failure: %szRConnection failure: connection was closed before a valid response was received: %szAn unknown error occurred: %s)r°)6Ú HAS_URLPARSEÚ fail_jsonrúZ deprecaterõrûrBZtempdirÚtmpdirrÐr0rorxryZ LWPCookieJarr,r•rºr„r-r r3rcr|rr:rzrèrRr†r rr‚rkr‡rr‰r(r)rQrrrrrÞZURLErrorrÜÚgetattrrnrpr’Z BadStatusLineÚlineÚ tracebackÚ format_exc)&rŠrírr3rrarpr…r¦r†r·rrzrurvrrwZ old_tempdirr0r$r%rsrtr/r´rµrŒr„Z temp_headersr:rZ cookie_listZ cookie_dictZcookierÃZ distributionr±rRr(r(r)Ú fetch_urls°,   þ     ù     .2.*   $...0ÿr¹cCs4| d¡rgS| d¡}dd„| d¡dd…DƒS)z1A list of the final component's suffixes, if any.racSsg|] }d|‘qS)rar()rÉrbr(r(r)rËÊrÌz_suffixes..r,N)rUÚlstriprÛ)r:r(r(r)Ú _suffixesÅs  r»rirÙr-cCsjd}ttt|ƒƒƒD]L\}}||kr(qb|t|ƒkr@|kr\nnd||f}| |¡}qqbq||fS)aŸSplit a multi-part extension from a file name. Returns '([name minus extension], extension)'. Define the valid extension length (including the '.') with 'min' and 'max', 'count' sets the number of extensions, counting from the end, to evaluate. Evaluation stops on the first file extension that is outside the min and max range. If no valid extensions are found, the original ``name`` is returned and ``extension`` is empty. :arg name: File name or path. :kwarg min: Minimum length of a valid file extension. :kwarg max: Maximum length of a valid file extension. :kwarg count: Number of suffixes from the end to evaluate. r+z%s%s)Ú enumerateÚreversedr»r{ru)r:ÚminÚmaxrbÚ extensionÚiZsfxr(r(r)Ú_split_multiextÍs  rÂc Csúd} t|ƒ} ttj | j¡dd\}}tj|j||dd}| |j ¡zpt |||||||||| | | d \}}|sˆ|j d||dfd |  | ¡}|r¬|  |¡|  | ¡}q’| ¡Wn<tyò}z$|j d|t|ƒfd WYd }~n d }~00|j S) a°Download and save a file via HTTP(S) or FTP (needs the module as parameter). This is basically a wrapper around fetch_url(). :arg module: The AnsibleModule (used to get username, password etc. (s.b.). :arg url: The url to use. :kwarg data: The data to be sent (in case of POST/PUT). :kwarg headers: A dict with the request headers. :kwarg method: "POST", "PUT", etc. :kwarg boolean use_proxy: Default: True :kwarg boolean force: If True: Do not get a cached copy (Default: False) :kwarg last_mod_time: Default: None :kwarg int timeout: Default: 10 :kwarg unredirected_headers: (optional) A list of headers to not attach on a redirected request :kwarg decompress: (optional) Whether to attempt to decompress gzip content-encoded responses :kwarg ciphers: (optional) List of ciphers to use :returns: A string, the path to the downloaded file. r÷r-)rbF)ÚdirÚprefixÚsuffixr”)rurvrzFailure downloading %s, %srSr¬N)rrÂrérÏrêrBZNamedTemporaryFiler´Zadd_cleanup_filer:r¹r³rrrrÞr)rŠrírr3rrarpr…r¦rurvrÚbufsizerßZ file_prefixZfile_extZfetch_temp_fileZrspr„rÃr(r(r)Ú fetch_fileîs& ÿ     .rÇ)NTNN)N)NNNT)N)NN)F)ri)NNNTFNrnTNNNFrNNNFNNNTNT)NNNNFNrnFNNNNTNT)rirÙr-) NNNTFNrnNTN)¹r[Z __future__rrrr§Z __metaclass__rCr2Zemail.mime.multipartr™Zemail.mime.nonmultipartZemail.mime.applicationZ email.parserZ email.utilsr®rþrœrrérHr\rnrlrBr·ÚtypesÚ contextlibrrrúrüÚ ImportErrorr¸ÚobjectrZ email.policyZemail.generatorr’Z http.clientZclientZ"ansible.module_utils.compat.typingZ module_utilsÚcompatÚtypingÚtZ-ansible.module_utils.six.moves.http_cookiejarZsixZmovesZhttp_cookiejarrxZ+ansible.module_utils.six.moves.urllib.errorZurllibrpr(Z'ansible.module_utils.common.collectionsrrZansible.module_utils.sixrr r Zansible.module_utils.six.movesr Zansible.module_utils.basicr r Zansible.module_utils._textrrrZurllib.requestr‹r³rrrr&Zhttp_error_307Zhttp_error_308Z+ansible.module_utils.six.moves.urllib.parserrrr²rÞrrfrrr”r•r©Zurllib3.contrib.pyopensslrZ+requests.packages.urllib3.contrib.pyopensslrZPROTOCOL_TLSv1r–ZctypesZ ctypes.utilÚutilZ find_libraryZ libssl_nameZCDLLZlibsslrZPROTOCOL_SSLv23rrZ_BUNDLED_METADATAÚsetrJZHAS_MATCH_HOSTNAMErrZbackports.ssl_match_hostnamergZ cryptographyrZcryptography.hazmat.backendsrZcryptography.hazmat.primitivesr Zcryptography.exceptionsr!Z urllib_gssapiZ HAS_GSSAPIrrAr"Z_sslr_rkrgrtrxrEr]ÚMÚSràr‚r„r…r†r‡r‘r¬r²r»rDrrr¾r¼r½rÅrÄr,rÇr?rãrîrôrõr r r2r7r:r>rOrPr$rGrJrmr•r¥r€r«r¹r»rÂrÇr(r(r(r)Ús¨     $                   K  4, ; þ  #  K % V   g~  \ú v ý ) !þ