(self)
| 175 | self.push('-ERR Command not permitted when TLS active') |
| 176 | |
| 177 | def _do_tls_handshake(self): |
| 178 | try: |
| 179 | self.socket.do_handshake() |
| 180 | except ssl.SSLError as err: |
| 181 | if err.args[0] in (ssl.SSL_ERROR_WANT_READ, |
| 182 | ssl.SSL_ERROR_WANT_WRITE): |
| 183 | return |
| 184 | elif err.args[0] == ssl.SSL_ERROR_EOF: |
| 185 | return self.handle_close() |
| 186 | # TODO: SSLError does not expose alert information |
| 187 | elif ("SSLV3_ALERT_BAD_CERTIFICATE" in err.args[1] or |
| 188 | "SSLV3_ALERT_CERTIFICATE_UNKNOWN" in err.args[1]): |
| 189 | return self.handle_close() |
| 190 | raise |
| 191 | except OSError as err: |
| 192 | if err.args[0] == errno.ECONNABORTED: |
| 193 | return self.handle_close() |
| 194 | else: |
| 195 | self.tls_active = True |
| 196 | self.tls_starting = False |
| 197 | |
| 198 | def handle_read(self): |
| 199 | if self.tls_starting: |
no test coverage detected