# -*- coding: utf-8 -*- # # _methods.py # # Copyright (C) 2006-2026 wolfSSL Inc. # # This file is part of wolfSSL. # # wolfSSL is free software; you can redistribute it and/or modify # it under the terms of the GNU General Public License as published by # the Free Software Foundation; either version 3 of the License, or # (at your option) any later version. # # wolfSSL is distributed in the hope that it will be useful, # but WITHOUT ANY WARRANTY; without even the implied warranty of # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the # GNU General Public License for more details. # # You should have received a copy of the GNU General Public License # along with this program; if not, write to the Free Software # Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1335, USA # pylint: disable=missing-docstring, invalid-name try: from wolfssl._ffi import lib as _lib from wolfssl._ffi import ffi as _ffi except ImportError as e: from wolfssl.utils import _FFIPlaceholder _ffi = _FFIPlaceholder(e) _lib = _FFIPlaceholder(e) PROTOCOL_SSLv23 = 1 PROTOCOL_SSLv3 = 2 PROTOCOL_TLS = 1 PROTOCOL_TLSv1 = 3 PROTOCOL_TLSv1_1 = 4 PROTOCOL_TLSv1_2 = 5 PROTOCOL_TLSv1_3 = 6 PROTOCOL_DTLSv1 = 7 PROTOCOL_DTLSv1_2 = 8 PROTOCOL_DTLSv1_3 = 9 _PROTOCOL_LIST = [PROTOCOL_SSLv23, PROTOCOL_SSLv3, PROTOCOL_TLS, PROTOCOL_TLSv1, PROTOCOL_TLSv1_1, PROTOCOL_TLSv1_2, PROTOCOL_TLSv1_3, PROTOCOL_DTLSv1, PROTOCOL_DTLSv1_2, PROTOCOL_DTLSv1_3] _DYNAMIC_TYPE_METHOD = 11 def _native_free(native_object, dynamic_type): _lib.wolfSSL_Free(native_object) class WolfSSLMethod(object): # pylint: disable=too-few-public-methods """ An SSLMethod holds SSL-related configuration options such as protocol version and communication side. """ def __init__(self, protocol, server_side): if protocol not in _PROTOCOL_LIST: raise ValueError("this protocol is not supported") elif protocol == PROTOCOL_SSLv3: raise ValueError("this protocol is not supported") elif protocol == PROTOCOL_TLSv1: raise ValueError("this protocol is not supported") elif protocol == PROTOCOL_TLSv1_1: if not _lib.OLDTLS_ENABLED: raise ValueError("wolfSSL not built with old TLS support") self.native_object = \ _lib.wolfTLSv1_1_server_method() if server_side else \ _lib.wolfTLSv1_1_client_method() elif protocol == PROTOCOL_TLSv1_2: self.native_object = \ _lib.wolfTLSv1_2_server_method() if server_side else \ _lib.wolfTLSv1_2_client_method() elif protocol == PROTOCOL_TLSv1_3: self.native_object = \ _lib.wolfTLSv1_3_server_method() if server_side else \ _lib.wolfTLSv1_3_client_method() elif protocol in [PROTOCOL_SSLv23, PROTOCOL_TLS]: self.native_object = \ _lib.wolfSSLv23_server_method() if server_side else \ _lib.wolfSSLv23_client_method() elif protocol == PROTOCOL_DTLSv1: if not _lib.OLDTLS_ENABLED: raise ValueError("wolfSSL not built with old TLS support") self.native_object = \ _lib.wolfDTLSv1_server_method() if server_side else \ _lib.wolfDTLSv1_client_method() elif protocol == PROTOCOL_DTLSv1_2: self.native_object = \ _lib.wolfDTLSv1_2_server_method() if server_side else \ _lib.wolfDTLSv1_2_client_method() elif protocol == PROTOCOL_DTLSv1_3: self.native_object = \ _lib.wolfDTLSv1_3_server_method() if server_side else \ _lib.wolfDTLSv1_3_client_method() if self.native_object == _ffi.NULL: raise MemoryError("Cannot allocate method object") def __del__(self): if getattr(self, 'native_object', None) is not None and self.native_object != _ffi.NULL: _native_free(self.native_object, _DYNAMIC_TYPE_METHOD)