Index: third_party/gsutil/boto/contrib/m2helpers.py |
diff --git a/third_party/gsutil/boto/contrib/m2helpers.py b/third_party/gsutil/boto/contrib/m2helpers.py |
new file mode 100644 |
index 0000000000000000000000000000000000000000..82d2730515eefb5e2c98a8a4b0a98af5cd9a7f39 |
--- /dev/null |
+++ b/third_party/gsutil/boto/contrib/m2helpers.py |
@@ -0,0 +1,52 @@ |
+# Copyright (c) 2006,2007 Jon Colverson |
+# |
+# Permission is hereby granted, free of charge, to any person obtaining a |
+# copy of this software and associated documentation files (the |
+# "Software"), to deal in the Software without restriction, including |
+# without limitation the rights to use, copy, modify, merge, publish, dis- |
+# tribute, sublicense, and/or sell copies of the Software, and to permit |
+# persons to whom the Software is furnished to do so, subject to the fol- |
+# lowing conditions: |
+# |
+# The above copyright notice and this permission notice shall be included |
+# in all copies or substantial portions of the Software. |
+# |
+# THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS |
+# OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABIL- |
+# ITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT |
+# SHALL THE AUTHOR BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, |
+# WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, |
+# OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS |
+# IN THE SOFTWARE. |
+ |
+""" |
+This module was contributed by Jon Colverson. It provides a couple of helper |
+functions that allow you to use M2Crypto's implementation of HTTPSConnection |
+rather than the default version in httplib.py. The main benefit is that |
+M2Crypto's version verifies the certificate of the server. |
+ |
+To use this feature, do something like this: |
+ |
+from boto.ec2.connection import EC2Connection |
+ |
+ec2 = EC2Connection(ACCESS_KEY_ID, SECRET_ACCESS_KEY, |
+ https_connection_factory=https_connection_factory(cafile=CA_FILE)) |
+ |
+See http://code.google.com/p/boto/issues/detail?id=57 for more details. |
+""" |
+from M2Crypto import SSL |
+from M2Crypto.httpslib import HTTPSConnection |
+ |
+def secure_context(cafile=None, capath=None): |
+ ctx = SSL.Context() |
+ ctx.set_verify(SSL.verify_peer | SSL.verify_fail_if_no_peer_cert, depth=9) |
+ if ctx.load_verify_locations(cafile=cafile, capath=capath) != 1: |
+ raise Exception("Couldn't load certificates") |
+ return ctx |
+ |
+def https_connection_factory(cafile=None, capath=None): |
+ def factory(*args, **kwargs): |
+ return HTTPSConnection( |
+ ssl_context=secure_context(cafile=cafile, capath=capath), |
+ *args, **kwargs) |
+ return (factory, (SSL.SSLError,)) |