o 2.a@s:ddlZddlZddlmZddlmZGdddZdS)N)errors)SSLHTTPAdapterc@s8eZdZdZdZdZdZdZ   dddZddZ dS) TLSConfiga TLS configuration. Args: client_cert (tuple of str): Path to client cert, path to client key. ca_cert (str): Path to CA cert file. verify (bool or str): This can be ``False`` or a path to a CA cert file. ssl_version (int): A valid `SSL version`_. assert_hostname (bool): Verify the hostname of the server. .. _`SSL version`: https://docs.python.org/3.5/library/ssl.html#ssl.PROTOCOL_TLSv1 Nc Cs||_||_|r ||_ntjdddkr!ttdr!ttd|_ntj|_|rTz|\}}Wn ty9t dw|rJ|rJt j |rJt j |sOt d||f|_||_||_|jrl|jrnt j |jspt ddSdSdS)N)rrrZPROTOCOL_TLSv1_2z=client_cert must be a tuple of (client certificate, key file)zRPath to a certificate and key files must be provided through the client_cert paramz.Invalid CA certificate provided for `ca_cert`.)assert_hostnameassert_fingerprint ssl_versionsslZOPENSSL_VERSION_INFOhasattrgetattrZPROTOCOL_TLSv1 ValueErrorrZTLSParameterErrorospathisfilecertverifyca_cert) selfZ client_certrrr rrZtls_certZtls_keyr,/usr/lib/python3/dist-packages/docker/tls.py__init__s>      zTLSConfig.__init__cCsT|j|_|jr|jr|j|_n|j|_|jr|j|_|dt|j|j|jddS)z< Configure a client with these TLS options. zhttps://)r rrN)r rrrZmountrrr)rZclientrrrconfigure_client^s   zTLSConfig.configure_client)NNNNNN) __name__ __module__ __qualname____doc__rrrr rrrrrrrs Br)rr rZ transportrrrrrrs