1

from __future__ import absolute_import

     2

from __future__ import print_function

     3

     4

import socket

     5

import re

     6

import sslpsk

     7

import ssl

     8

import Pyro

     9

from Pyro.core import PyroURI

    10

from Pyro.protocol import _connect_socket, TCPConnection, PYROAdapter

    11

from Pyro.errors import ConnectionDeniedError, ProtocolError

    12

from Pyro.util import Log

    13

    14

    15

# The TLS-PSK adapter that handles SSL connections instead of regular sockets,

    16

# but using Pre Shared Keys instead of Certificates

    17

#

    18

class PYROPSKAdapter(PYROAdapter):

    19

    # This is essentialy the same as in Pyro/protocol.py

    20

    # only raw_sock wrapping into sock through sslpsk.wrap_socket was added

    21

    # Pyro unfortunately doesn't allow cleaner customization

    22

    def bindToURI(self, URI):

    23

        with self.lock:   # only 1 thread at a time can bind the URI

    24

            try:

    25

                self.URI = URI

    26

    27

                # This are the statements that differ from Pyro/protocol.py

    28

                raw_sock = socket.socket(socket.AF_INET, socket.SOCK_STREAM)

    29

                _connect_socket(raw_sock, URI.address, URI.port, self.timeout)

    30

                sock = sslpsk.wrap_socket(

    31

                    raw_sock, psk=Pyro.config.PYROPSK, server_side=False,

    32

                    ciphers="PSK-AES256-CBC-SHA",  # available in openssl 1.0.2

    33

                    ssl_version=ssl.PROTOCOL_TLSv1)

    34

                # all the rest is the same as in Pyro/protocol.py

    35

    36

                conn = TCPConnection(sock, sock.getpeername())

    37

                # receive the authentication challenge string, and use that to build the actual identification string.

    38

                try:

    39

                    authChallenge = self.recvAuthChallenge(conn)

    40

                except ProtocolError, x:

    41

                    # check if we were denied

    42

                    if hasattr(x, "partialMsg") and x.partialMsg[:len(self.denyMSG)] == self.denyMSG:

    43

                        raise ConnectionDeniedError(Pyro.constants.deniedReasons[int(x.partialMsg[-1])])

    44

                    else:

    45

                        raise

    46

                # reply with our ident token, generated from the ident passphrase and the challenge

    47

                msg = self._sendConnect(sock, self.newConnValidator.createAuthToken(self.ident, authChallenge, conn.addr, self.URI, None))

    48

                if msg == self.acceptMSG:

    49

                    self.conn = conn

    50

                    self.conn.connected = 1

    51

                    Log.msg('PYROAdapter', 'connected to', str(URI))

    52

                    if URI.protocol == 'PYROLOCPSK':

    53

                        self.resolvePYROLOC_URI("PYROPSK")  # updates self.URI

    54

                elif msg[:len(self.denyMSG)] == self.denyMSG:

    55

                    try:

    56

                        raise ConnectionDeniedError(Pyro.constants.deniedReasons[int(msg[-1])])

    57

                    except (KeyError, ValueError):

    58

                        raise ConnectionDeniedError('invalid response')

    59

            except socket.error:

    60

                Log.msg('PYROAdapter', 'connection failed to URI', str(URI))

    61

                raise ProtocolError('connection failed')

    62

    63

    64

_getProtocolAdapter = Pyro.protocol.getProtocolAdapter

    65

    66

    67

def getProtocolAdapter(protocol):

    68

    if protocol in ('PYROPSK', 'PYROLOCPSK'):

    69

        return PYROPSKAdapter()

    70

    return _getProtocolAdapter(protocol)

    71

    72

    73

Pyro.protocol.getProtocolAdapter = getProtocolAdapter

    74

    75

    76

_processStringURI = Pyro.core.processStringURI

    77

    78

    79

def processStringURI(URI):

    80

    x = re.match(r'(?P<protocol>PYROLOCPSK)://(?P<hostname>[^\s:]+):?(?P<port>\d+)?/(?P<name>\S*)', URI)

    81

    if x:

    82

        protocol = x.group('protocol')

    83

        hostname = x.group('hostname')

    84

        port = x.group('port')

    85

        if port:

    86

            port = int(port)

    87

        else:

    88

            port = 0

    89

        name = x.group('name')

    90

        return PyroURI(hostname, name, port, protocol)

    91

    return _processStringURI(URI)

    92

    93

    94

Pyro.core.processStringURI = processStringURI