@ -14,7 +14,8 @@
# See the License for the specific language governing permissions and
# limitations under the License.
import urllib . request as u2
import urllib2 as u2
if hasattr ( u2 , " ssl " ) :
u2 . ssl . _create_default_https_context = u2 . ssl . _create_unverified_context
import os
@ -24,23 +25,33 @@ import ssl
import OpenSSL
import hashlib
import M2Crypto
from M2Crypto import BIO
import calculate . contrib
from calculate . core . datavars import DataVarsCore
from calculate . lib . datavars import DataVars
import calculate . contrib
# from sudsds.client import Client
from suds . client import Client
from . cert_verify import verify , get_CRL
import http . client as httplib
from cert_verify import verify , get_CRL
# from sudsds.transport.http import (HttpTransport, SUDSHTTPRedirectHandler,
# CheckingHTTPSConnection,
# CheckingHTTPSHandler,
# PYOPENSSL_AVAILABLE, PyOpenSSLSocket)
import httplib
from suds . transport . http import HttpTransport
from . pyopenssl_wrapper import PyOpenSSLSocket
try :
from pyopenssl_wrapper import PyOpenSSLSocket
except ImportError :
PYOPENSSL_AVAILABLE = False
else :
PYOPENSSL_AVAILABLE = True
# from sudsds.transport import Transport
# from sudsds.properties import Unskin
from suds . transport import Transport
from suds . properties import Unskin
from http . cookiejar import CookieJar , DefaultCookiePolicy
from cookielib import CookieJar , DefaultCookiePolicy
from logging import getLogger
from . . datavars import DataVarsConsole
from calculate .console . datavars import DataVarsConsole
from calculate . lib . cl_lang import setLocalTranslate
from . sid_func import SessionId
from calculate. console . application .sid_func import SessionId
from calculate . lib . utils . files import readFile
_ = lambda x : x
@ -75,58 +86,94 @@ class SUDSHTTPRedirectHandler(u2.HTTPRedirectHandler):
else :
raise u2 . HTTPError ( req . get_full_url ( ) , code , msg , headers , fp )
# class CheckingHTTPSConnection(httplib.HTTPSConnection):
# """based on httplib.HTTPSConnection code - extended to support
# server certificate verification and client certificate authorization"""
# response_class = MyHTTPResponse
# FORCE_SSL_VERSION = None
# SERVER_CERT_CHECK = True # might be turned off when a workaround is needed
# def __init__(self, host, ca_certs=None, cert_verifier=None,
# keyobj=None, certobj=None, **kw):
# """cert_verifier is a function returning either True or False
# based on whether the certificate was found to be OK,
# keyobj and certobj represent internal PyOpenSSL structures holding
# the key and certificate respectively.
# """
# httplib.HTTPSConnection.__init__(self, host, **kw)
# self.ca_certs = ca_certs
# self.cert_verifier = cert_verifier
# self.keyobj = keyobj
# self.certobj = certobj
# def connect(self):
# sock = socket.create_connection((self.host, self.port), self.timeout)
# if hasattr(self, '_tunnel_host') and self._tunnel_host:
# self.sock = sock
# self._tunnel()
# if self.FORCE_SSL_VERSION:
# add = {'ssl_version': self.FORCE_SSL_VERSION}
# else:
# add = {}
# if self.SERVER_CERT_CHECK and self.ca_certs:
# add['cert_reqs'] = ssl.CERT_REQUIRED
# else:
# add['cert_reqs'] = ssl.CERT_NONE
# # try to use PyOpenSSL by default
# if PYOPENSSL_AVAILABLE:
# wrap_class = PyOpenSSLSocket
# add['keyobj'] = self.keyobj
# add['certobj'] = self.certobj
# add['keyfile'] = self.key_file
# add['certfile'] = self.cert_file
# else:
# wrap_class = ssl.SSLSocket
# self.sock = wrap_class(sock, ca_certs=self.ca_certs, **add)
# #if self.cert_verifier and self.SERVER_CERT_CHECK:
# # if not self.cert_verifier(self.sock.getpeercert()):
# # raise Exception("Server certificate did not pass security check.",
# # self.sock.getpeercert())
class MyHTTPResponse ( httplib . HTTPResponse ) :
def __init__ ( self , sock , debuglevel = 0 , strict = 0 , method = None ) :
httplib . HTTPResponse . __init__ ( self , sock , debuglevel , strict , method )
class CheckingHTTPSConnection ( httplib . HTTPSConnection ) :
""" based on httplib.HTTPSConnection code - extended to support
server certificate verification and client certificate authorization """
response_class = MyHTTPResponse
FORCE_SSL_VERSION = None
SERVER_CERT_CHECK = True # might be turned off when a workaround is needed
def __init__ ( self , host , ca_certs = None , cert_verifier = None ,
keyobj = None , certobj = None , * * kw ) :
""" cert_verifier is a function returning either True or False
based on whether the certificate was found to be OK ,
keyobj and certobj represent internal PyOpenSSL structures holding
the key and certificate respectively .
"""
httplib . HTTPSConnection . __init__ ( self , host , * * kw )
self . ca_certs = ca_certs
self . cert_verifier = cert_verifier
self . keyobj = keyobj
self . certobj = certobj
def connect ( self ) :
sock = socket . create_connection ( ( self . host , self . port ) , self . timeout )
if hasattr ( self , ' _tunnel_host ' ) and self . _tunnel_host :
self . sock = sock
self . _tunnel ( )
if self . FORCE_SSL_VERSION :
add = { ' ssl_version ' : self . FORCE_SSL_VERSION }
else :
add = { }
if self . SERVER_CERT_CHECK and self . ca_certs :
add [ ' cert_reqs ' ] = ssl . CERT_REQUIRED
else :
add [ ' cert_reqs ' ] = ssl . CERT_NONE
# try to use PyOpenSSL by default
if PYOPENSSL_AVAILABLE :
wrap_class = PyOpenSSLSocket
add [ ' keyobj ' ] = self . keyobj
add [ ' certobj ' ] = self . certobj
add [ ' keyfile ' ] = self . key_file
add [ ' certfile ' ] = self . cert_file
else :
wrap_class = ssl . SSLSocket
self . sock = wrap_class ( sock , ca_certs = self . ca_certs , * * add )
#if self.cert_verifier and self.SERVER_CERT_CHECK:
# if not self.cert_verifier(self.sock.getpeercert()):
# raise Exception("Server certificate did not pass security check.",
# self.sock.getpeercert())
class CheckingHTTPSHandler ( u2 . HTTPSHandler ) :
def __init__ ( self , ca_certs = None , cert_verifier = None ,
client_certfile = None , client_keyfile = None ,
client_keyobj = None , client_certobj = None ,
* args , * * kw ) :
""" cert_verifier is a function returning either True or False
based on whether the certificate was found to be OK """
u2 . HTTPSHandler . __init__ ( self , * args , * * kw )
self . ca_certs = ca_certs
self . cert_verifier = cert_verifier
self . client_keyfile = client_keyfile # filename
self . client_certfile = client_certfile # filename
self . keyobj = client_keyobj
self . certobj = client_certobj
# FOR DEBUG
# self.set_http_debuglevel(100)
def https_open ( self , req ) :
def open ( * args , * * kw ) :
new_kw = dict ( ca_certs = self . ca_certs ,
cert_verifier = self . cert_verifier ,
cert_file = self . client_certfile ,
key_file = self . client_keyfile ,
keyobj = self . keyobj ,
certobj = self . certobj )
new_kw . update ( kw )
return CheckingHTTPSConnection ( * args , * * new_kw )
return self . do_open ( open , req )
https_request = u2 . AbstractHTTPHandler . do_request_
class Client_suds ( SessionId , Client ) :
@ -146,12 +193,9 @@ class Client_suds(SessionId, Client):
class CheckingClientHTTPSConnection ( httplib . HTTPSConnection ) :
""" based on httplib.HTTPSConnection code """
response_class = httplib . HTTPResponse
FORCE_SSL_VERSION = None
SERVER_CERT_CHECK = True # might be turned off when a workaround is needed
class CheckingClientHTTPSConnection ( CheckingHTTPSConnection ) :
""" based on httplib.HTTPSConnection code - extended to support
server certificate verification and client certificate authorization """
def __init__ ( self , cert_path , host , ca_certs = None , cert_verifier = None ,
keyobj = None , certobj = None , wait_thread = None , * * kw ) :
@ -160,12 +204,11 @@ class CheckingClientHTTPSConnection(httplib.HTTPSConnection):
keyobj and certobj represent internal PyOpenSSL structures holding
the key and certificate respectively .
"""
httplib . HTTPSConnection . __init__ ( self , host , * * kw )
self . ca_certs = ca_certs
self . cert_verifier = cert_verifier
self . keyobj = keyobj
self . certobj = certobj
CheckingHTTPSConnection . __init__ ( self , host , ca_certs , cert_verifier ,
keyobj , certobj , * * kw )
# self.ClientObj = ClientObj
self . cert_path = cert_path
self . ca_certs = ca_certs
self . CRL_PATH = os . path . join ( cert_path , ' ca/crl/ ' )
self . wait_thread = wait_thread
@ -196,7 +239,7 @@ class CheckingClientHTTPSConnection(httplib.HTTPSConnection):
if not filename :
return None
except :
print ( _ ( " Certificate not found on the client`s side " ) )
print _ ( " Certificate not found on the client`s side " )
return None
try :
fd = open ( self . trusted_path + filename , ' r ' )
@ -205,7 +248,7 @@ class CheckingClientHTTPSConnection(httplib.HTTPSConnection):
if store_cert == server_cert :
return filename
except :
print ( _ ( " Failed to open the file " ) , self . trusted_path , filename )
print _ ( " Failed to open the file " ) , self . trusted_path , filename
return None
def add_all_ca_cert ( self , list_ca_certs ) :
@ -237,10 +280,10 @@ class CheckingClientHTTPSConnection(httplib.HTTPSConnection):
continue
md5 = hashlib . md5 ( )
md5 . update ( cert . encode ( " UTF-8 " ) )
md5 . update ( cert )
md5sum = md5 . hexdigest ( )
print ( " \n ================================================= " )
print ( " md5sum = " , md5sum )
print " \n ================================================= "
print " md5sum = " , md5sum
if not os . path . exists ( root_cert_md5 ) :
fc = open ( root_cert_md5 , " w " )
@ -260,15 +303,15 @@ class CheckingClientHTTPSConnection(httplib.HTTPSConnection):
OpenSSL . SSL . FILETYPE_PEM , cert )
Issuer = certobj . get_issuer ( ) . get_components ( )
for item in Issuer :
if item [ 0 ] == b ' CN ' :
filename = item [ 1 ] . decode ( " UTF-8 " )
if item [ 0 ] == ' CN ' :
filename = item [ 1 ]
fc = open ( root_cert_md5 , " a " )
fc . write ( ' %s %s \n ' % ( md5sum , filename ) )
fc . close ( )
if not filename :
print ( _ ( ' Field " CN " not found in the certificate! ' ) )
print _ ( ' Field " CN " not found in the certificate! ' )
return 1
fd = open ( os . path . join ( cl_client_cert_dir , ' ca/ ' , filename ) ,
@ -279,10 +322,10 @@ class CheckingClientHTTPSConnection(httplib.HTTPSConnection):
fa = open ( user_root_cert , ' a ' )
fa . write ( cert )
fa . close ( )
print ( _ ( " filename = " ) , filename )
print ( _ ( " Certificate added " ) )
print _ ( " filename = " ) , filename
print _ ( " Certificate added " )
else :
print ( _ ( " The file containing the CA certificate now exists " ) )
print _ ( " The file containing the CA certificate now exists " )
get_CRL ( cl_client_cert_dir )
def add_ca_cert ( self , cert , list_ca_certs ) :
@ -292,56 +335,56 @@ class CheckingClientHTTPSConnection(httplib.HTTPSConnection):
client . wsdl . services [ 0 ] . setlocation ( url )
cert = client . service . get_ca ( )
if cert == ' 1 ' :
print ( _ ( " Invalid server certificate! " ) )
print _ ( " Invalid server certificate! " )
raise Exception ( 1 )
if cert == ' 2 ' :
print ( _ ( " CA certificate not found on the server " ) )
print _ ( " CA certificate not found on the server " )
raise Exception ( 1 )
try :
certobj = OpenSSL . crypto . load_certificate (
OpenSSL . SSL . FILETYPE_PEM , cert )
except :
print ( _ ( " Error. Certificate not added to trusted " ) )
print _ ( " Error. Certificate not added to trusted " )
raise Exception ( 1 )
print ( ' \n ' , _ ( " Fingerprint = %s " ) % certobj . digest ( ' SHA1 ' ) )
print ( _ ( " Serial Number = " ) , certobj . get_serial_number ( ) )
print ' \n ' , _ ( " Fingerprint = %s " ) % certobj . digest ( ' SHA1 ' )
print _ ( " Serial Number = " ) , certobj . get_serial_number ( )
Issuer = certobj . get_issuer ( ) . get_components ( )
print ( ' \n ' , _ ( " Issuer " ) )
print ' \n ' , _ ( " Issuer " )
for i in Issuer :
print ( " %s : %s " % ( i [ 0 ] , i [ 1 ] ) )
print " %s : %s " % ( i [ 0 ] , i [ 1 ] )
Subject = certobj . get_subject ( ) . get_components ( )
print ( ' \n ' , _ ( " Subject " ) )
print ' \n ' , _ ( " Subject " )
for subj in Subject :
print ( " %s : %s " % ( subj [ 0 ] , subj [ 1 ] ) )
ans = ( _ ( " Add the CA certificate to trusted? y/[n]: " ) )
print " %s : %s " % ( subj [ 0 ] , subj [ 1 ] )
ans = raw_ ( _ ( " Add the CA certificate to trusted? y/[n]: " ) )
if ans . lower ( ) in [ ' y ' , ' yes ' ] :
list_ca_certs . append ( cert )
self . add_all_ca_cert ( list_ca_certs )
else :
print ( _ ( " Certificate not added to trusted " ) )
print _ ( " Certificate not added to trusted " )
# add certificate server in trusted
def add_server_cert ( self , cert ) :
self . wait_thread . stop ( )
print ( _ ( " Untrusted server certificate! " ) )
print _ ( " Untrusted server certificate! " )
certobj = OpenSSL . crypto . load_certificate (
OpenSSL . SSL . FILETYPE_PEM , cert )
print ( ' \n ' + _ ( " Fingerprint = %s " ) % certobj . digest ( ' SHA1 ' ) )
print ( _ ( " Serial Number = " ) , certobj . get_serial_number ( ) )
print ' \n ' + _ ( " Fingerprint = %s " ) % certobj . digest ( ' SHA1 ' )
print _ ( " Serial Number = " ) , certobj . get_serial_number ( )
Issuer = certobj . get_issuer ( ) . get_components ( )
print ( ' \n ' + _ ( " Issuer " ) )
print ' \n ' + _ ( " Issuer " )
for i in Issuer :
print ( " %s : %s " % ( i [ 0 ] , i [ 1 ] ) )
print " %s : %s " % ( i [ 0 ] , i [ 1 ] )
Subject = certobj . get_subject ( ) . get_components ( )
print ( ' \n ' + _ ( " Subject " ) )
print ' \n ' + _ ( " Subject " )
for item in Subject :
print ( " %s : %s " % ( item [ 0 ] , item [ 1 ] ) )
print " %s : %s " % ( item [ 0 ] , item [ 1 ] )
print ( ' \n ' + _ ( ' Add this server certificate to trusted (s) or ' ) )
print ( _ ( ' Try to add the CA and root certificates to trusted (c) or ' ) )
choice = ( _ ( " Quit (q)? s/c/[q]: " ) )
print ' \n ' + _ ( ' Add this server certificate to trusted (s) or ' )
print _ ( ' Try to add the CA and root certificates to trusted (c) or ' )
choice = raw_ ( _ ( " Quit (q)? s/c/[q]: " ) )
if choice . lower ( ) in [ ' s ' , ' c ' ] :
# self.sock = ssl.wrap_socket(sock)
ca_certs = os . path . join ( self . trusted_path , " cert.list " )
@ -387,10 +430,10 @@ class CheckingClientHTTPSConnection(httplib.HTTPSConnection):
try :
os . makedirs ( root_cert_dir )
except OSError :
print ( _ ( " Failed to create directory %s " ) % root_cert_dir )
print _ ( " Failed to create directory %s " ) % root_cert_dir
raise Exception ( 1 )
print ( ' \n ' + _ ( " Add the CA and root certificates " ) )
print ' \n ' + _ ( " Add the CA and root certificates " )
self . list_ca_certs = [ ]
self . add_ca_cert ( cert , self . list_ca_certs )
return 3
@ -419,11 +462,16 @@ class CheckingClientHTTPSConnection(httplib.HTTPSConnection):
else :
add = { }
add [ ' cert_reqs ' ] = ssl . CERT_REQUIRED
add [ ' keyobj ' ] = self . keyobj
add [ ' certobj ' ] = self . certobj
add [ ' keyfile ' ] = self . key_file
add [ ' certfile ' ] = self . cert_file
self . sock = PyOpenSSLSocket ( sock , ca_certs = self . ca_certs , * * add )
# try to use PyOpenSSL by default
if PYOPENSSL_AVAILABLE :
wrap_class = PyOpenSSLSocket
add [ ' keyobj ' ] = self . keyobj
add [ ' certobj ' ] = self . certobj
add [ ' keyfile ' ] = self . key_file
add [ ' certfile ' ] = self . cert_file
else :
wrap_class = ssl . SSLSocket
self . sock = wrap_class ( sock , ca_certs = self . ca_certs , * * add )
return 0
except :
return 1
@ -450,11 +498,17 @@ class CheckingClientHTTPSConnection(httplib.HTTPSConnection):
else :
add = { }
add [ ' cert_reqs ' ] = ssl . CERT_NONE
add [ ' keyobj ' ] = self . keyobj
add [ ' certobj ' ] = self . certobj
add [ ' keyfile ' ] = self . key_file
add [ ' certfile ' ] = self . cert_file
self . sock = PyOpenSSLSocket ( sock , ca_certs = None , * * add )
# try to use PyOpenSSL by default
if PYOPENSSL_AVAILABLE :
wrap_class = PyOpenSSLSocket
add [ ' keyobj ' ] = self . keyobj
add [ ' certobj ' ] = self . certobj
add [ ' keyfile ' ] = self . key_file
add [ ' certfile ' ] = self . cert_file
else :
wrap_class = ssl . SSLSocket
self . sock = wrap_class ( sock , ca_certs = None , * * add )
return 0
except Exception :
HTTPSClientCertTransport . filename = None
@ -508,7 +562,7 @@ class CheckingClientHTTPSConnection(httplib.HTTPSConnection):
elif result_server_con == 3 :
continue
elif result_server_con == 4 :
print ( _ ( ' This server is not trusted ' ) )
print _ ( ' This server is not trusted ' )
self . wait_thread . stop ( )
sys . exit ( 1 )
elif result_root_con == 2 :
@ -518,24 +572,19 @@ class CheckingClientHTTPSConnection(httplib.HTTPSConnection):
break
class CheckingClientHTTPSHandler ( u2 . HTTPSHandler ) :
class CheckingClientHTTPSHandler ( CheckingHTTPSHandler ) :
def __init__ ( self , cert_path , ca_certs = None , cert_verifier = None ,
client_certfile = None , client_keyfile = None ,
client_keyobj = None , client_certobj = None ,
client_keyobj = None , client_certobj = None , wait_thread = None ,
* args , * * kw ) :
""" cert_verifier is a function returning either True or False
based on whether the certificate was found to be OK """
u2 . HTTPSHandler . __init__ ( self , * args , * * kw )
self . ca_certs = ca_certs
self . cert_verifier = cert_verifier
self . client_keyfile = client_keyfile # filename
self . client_certfile = client_certfile # filename
self . keyobj = client_keyobj
self . certobj = client_certobj
# FOR DEBUG
# self.set_http_debuglevel(100)
CheckingHTTPSHandler . __init__ ( self , ca_certs , cert_verifier ,
client_keyfile , client_certfile ,
client_keyobj , client_certobj )
# self.ClientObj = ClientObj
self . cert_path = cert_path
self . wait_thread = wait_thread
def https_open ( self , req ) :
def open ( * args , * * kw ) :
@ -543,10 +592,12 @@ class CheckingClientHTTPSHandler(u2.HTTPSHandler):
cert_verifier = self . cert_verifier ,
cert_file = self . client_certfile ,
key_file = self . client_keyfile ,
keyobj = self . keyobj ,
certobj= self . certobj )
keyobj = self . keyobj , certobj = self . certobj ,
wait_thread= self . wait_thread )
new_kw . update ( kw )
return CheckingClientHTTPSConnection ( self . cert_path , * args , * * new_kw )
return CheckingClientHTTPSConnection ( self . cert_path ,
* args , * * new_kw )
return self . do_open ( open , req )
https_request = u2 . AbstractHTTPHandler . do_request_
@ -558,71 +609,62 @@ class HTTPSClientCertTransport(HttpTransport):
client_keyfile = None , client_certfile = None ,
client_keyobj = None , client_certobj = None ,
cookie_callback = None , user_agent_string = None ,
wait_thread = None , rsa_password = None , * * kwargs ) :
wait_thread = None , * * kwargs ) :
Transport . __init__ ( self )
# self.ClientObj = parent
self . key = key
self . cert = cert
self . cert_path = path_to_cert
self . rsa_password = rsa_password or b " "
if key :
with open ( cert ) as cert_file :
client_certobj = OpenSSL . crypto . load_certificate \
( OpenSSL . SSL . FILETYPE_PEM , cert_file . read ( ) )
if password :
with open ( key ) as key_file :
client_keyobj = OpenSSL . crypto . load_privatekey \
( OpenSSL . SSL . FILETYPE_PEM , key_file . read ( ) ,
password )
else :
import M2Crypto
bio = M2Crypto . BIO . openfile ( key )
rsa = M2Crypto . m2 . rsa_read_key ( bio . _ptr ( ) , lambda * unused : self . rsa_password )
if not rsa :
raise OpenSSL . crypto . Error
with open ( key ) as key_file :
client_keyobj = OpenSSL . crypto . load_privatekey ( OpenSSL . SSL . FILETYPE_PEM ,
key_file . read ( ) , passphrase = self . rsa_password or None )
client_certobj = OpenSSL . crypto . load_certificate (
OpenSSL . SSL . FILETYPE_PEM , file ( cert ) . read ( ) )
if password :
client_keyobj = OpenSSL . crypto . load_privatekey (
OpenSSL . SSL . FILETYPE_PEM , file ( key ) . read ( ) , str ( password ) )
else :
bio = M2Crypto . BIO . openfile ( key )
rsa = M2Crypto . m2 . rsa_read_key ( bio . _ptr ( ) , lambda * unused : " " )
if not rsa :
raise OpenSSL . crypto . Error
client_keyobj = OpenSSL . crypto . load_privatekey (
OpenSSL . SSL . FILETYPE_PEM , file ( key ) . read ( ) )
Unskin ( self . options ) . update ( kwargs )
self . cookiejar = CookieJar ( DefaultCookiePolicy ( ) )
self . cookie_callback = cookie_callback
self . user_agent_string = user_agent_string
log . debug ( " Proxy: %s " , self . options . proxy )
#TODO to be removed:
# artifacts from old times:
if ca_certs or ( client_keyfile and client_certfile ) \
or ( client_keyobj and client_certobj ) :
https_handler = CheckingClientHTTPSHandler ( cert_path = path_to_cert ,
ca_certs = ca_certs ,
cert_verifier = cert_verifier ,
client_keyfile = client_keyfile ,
client_certfile = client_certfile ,
client_keyobj = client_keyobj ,
client_certobj = client_certobj )
else :
https_handler = u2 . HTTPSHandler ( )
self . urlopener = u2 . build_opener ( SUDSHTTPRedirectHandler ( ) ,
u2 . HTTPCookieProcessor ( self . cookiejar ) ,
https_handler )
# relic from old times:
# from dslib.network import ProxyManager
# proxy_handler = ProxyManager.HTTPS_PROXY.create_proxy_handler()
# proxy_auth_handler = ProxyManager.HTTPS_PROXY.create_proxy_auth_handler()
# apparently, dslib simply returned None on create_proxy_auth_handler
# if this is ever needed, probably use urllib2.ProxyBasicAuthHandler
# proxy_auth_handler =
proxy_auth_handler = None
# and create_proxy_handler SHOULD HAVE eval'd to this:
# proxy_handler = urllib2.ProxyHandler({"https" : "https://hostname"})
# but because no hostname was given, it also just returned None
# proxy_handler = None
#these two literally do nothing right now
# if proxy_handler:
# self.urlopener.add_handler(proxy_handler)
# if proxy_auth_handler:
# self.urlopener.add_handler(proxy_auth_handler)
self . urlopener . addheaders = [ ( ' User-agent ' , str ( self . user_agent_string ) ) ]
proxy_handler = None
if ( ca_certs or ( client_keyfile and client_certfile )
or ( client_keyobj and client_certobj ) ) :
https_handler = CheckingClientHTTPSHandler (
cert_path = path_to_cert ,
ca_certs = ca_certs ,
cert_verifier = cert_verifier ,
client_keyfile = client_keyfile ,
client_certfile = client_certfile ,
client_keyobj = client_keyobj ,
client_certobj = client_certobj ,
wait_thread = wait_thread )
else :
https_handler = u2 . HTTPSHandler ( )
self . urlopener = u2 . build_opener ( SUDSHTTPRedirectHandler ( ) ,
u2 . HTTPCookieProcessor ( self . cookiejar ) ,
https_handler )
if proxy_handler :
self . urlopener . add_handler ( proxy_handler )
if proxy_auth_handler :
self . urlopener . add_handler ( proxy_auth_handler )
self . urlopener . addheaders = [ ( ' User-agent ' , self . user_agent_string ) ]
