Coverage for requests.packages.urllib3.connection : 58%

Hot-keys on this page
r m x p toggle line displays
j k next/prev highlighted chunk
0 (zero) top of page
1 (one) first highlighted chunk
"Used to detect a failed ConnectionCls import."
except (ImportError, AttributeError): # Platform-specific: No SSL. ssl = None
class BaseSSLError(BaseException): pass
# Not a no-op, we're adding this to the namespace so it can be imported.
ConnectTimeoutError, SystemTimeWarning, SecurityWarning, )
resolve_cert_reqs, resolve_ssl_version, ssl_wrap_socket, assert_fingerprint, )
'http': 80, 'https': 443, }
""" Based on httplib.HTTPConnection but provides an extra constructor backwards-compatibility layer between older and newer Pythons.
Additional keyword parameters are used to configure attributes of the connection. Accepted parameters include:
- ``strict``: See the documentation on :class:`urllib3.connectionpool.HTTPConnectionPool` - ``source_address``: Set the source address for the current connection.
.. note:: This is ignored for Python 2.6. It is only applied for 2.7 and 3.x
- ``socket_options``: Set specific options on the underlying socket. If not specified, then defaults are loaded from ``HTTPConnection.default_socket_options`` which includes disabling Nagle's algorithm (sets TCP_NODELAY to 1) unless the connection is behind a proxy.
For example, if you wish to enable TCP Keep Alive in addition to the defaults, you might pass::
HTTPConnection.default_socket_options + [ (socket.SOL_SOCKET, socket.SO_KEEPALIVE, 1), ]
Or you may want to disable the defaults by passing an empty list (e.g., ``[]``). """
#: Disable Nagle's algorithm by default. #: ``[(socket.IPPROTO_TCP, socket.TCP_NODELAY, 1)]``
#: Whether this connection verifies the host's certificate.
kw.pop('strict', None)
# Pre-set source_address in case we have an older Python like 2.6.
# _HTTPConnection on Python 2.6 will balk at this keyword arg, but # not newer versions. We can still use it when creating a # connection though, so we pop it *after* we have saved it as # self.source_address. kw.pop('source_address', None)
#: The socket options provided by the user. If no options are #: provided, we use the default options.
# Superclass also sets self.source_address in Python 2.7+.
""" Establish a socket connection and set nodelay settings on it.
:return: New socket connection. """ extra_kw = {} if self.source_address: extra_kw['source_address'] = self.source_address
if self.socket_options: extra_kw['socket_options'] = self.socket_options
try: conn = connection.create_connection( (self.host, self.port), self.timeout, **extra_kw)
except SocketTimeout: raise ConnectTimeoutError( self, "Connection to %s timed out. (connect timeout=%s)" % (self.host, self.timeout))
return conn
self.sock = conn # the _tunnel_host attribute was added in python 2.6.3 (via # http://hg.python.org/cpython/rev/0f57b30a152f) so pythons 2.6(0-2) do # not have them. if getattr(self, '_tunnel_host', None): # TODO: Fix tunnel so it doesn't depend on self.sock state. self._tunnel() # Mark this connection as not reusable self.auto_open = 0
conn = self._new_conn() self._prepare_conn(conn)
strict=None, timeout=socket._GLOBAL_DEFAULT_TIMEOUT, **kw):
timeout=timeout, **kw)
# Required property for Google AppEngine 1.9.0 which otherwise causes # HTTPS requests to go out as HTTP. (See Issue #356)
conn = self._new_conn() self._prepare_conn(conn) self.sock = ssl.wrap_socket(conn, self.key_file, self.cert_file)
""" Based on httplib.HTTPSConnection but wraps the socket with SSL certification. """
cert_reqs=None, ca_certs=None, assert_hostname=None, assert_fingerprint=None):
# Add certificate verification conn = self._new_conn()
resolved_cert_reqs = resolve_cert_reqs(self.cert_reqs) resolved_ssl_version = resolve_ssl_version(self.ssl_version)
hostname = self.host if getattr(self, '_tunnel_host', None): # _tunnel_host was added in Python 2.6.3 # (See: http://hg.python.org/cpython/rev/0f57b30a152f)
self.sock = conn # Calls self._set_hostport(), so self.host is # self._tunnel_host below. self._tunnel() # Mark this connection as not reusable self.auto_open = 0
# Override the host with the one we're requesting data from. hostname = self._tunnel_host
is_time_off = datetime.date.today() < RECENT_DATE if is_time_off: warnings.warn(( 'System time is way off (before {0}). This will probably ' 'lead to SSL verification errors').format(RECENT_DATE), SystemTimeWarning )
# Wrap socket using verification with the root certs in # trusted_root_certs self.sock = ssl_wrap_socket(conn, self.key_file, self.cert_file, cert_reqs=resolved_cert_reqs, ca_certs=self.ca_certs, server_hostname=hostname, ssl_version=resolved_ssl_version)
if self.assert_fingerprint: assert_fingerprint(self.sock.getpeercert(binary_form=True), self.assert_fingerprint) elif resolved_cert_reqs != ssl.CERT_NONE \ and self.assert_hostname is not False: cert = self.sock.getpeercert() if not cert.get('subjectAltName', ()): warnings.warn(( 'Certificate has no `subjectAltName`, falling back to check for a `commonName` for now. ' 'This feature is being removed by major browsers and deprecated by RFC 2818. ' '(See https://github.com/shazow/urllib3/issues/497 for details.)'), SecurityWarning ) match_hostname(cert, self.assert_hostname or hostname)
self.is_verified = (resolved_cert_reqs == ssl.CERT_REQUIRED or self.assert_fingerprint is not None)
# Make a copy for testing. else: HTTPSConnection = DummyConnection |