From 3b3731d873664db00c02603363f61d34c41a3990 Mon Sep 17 00:00:00 2001 From: Kali Kaneko Date: Mon, 25 Apr 2016 22:13:19 -0400 Subject: embed pixelated --- src/pixelated/extensions/__init__.py | 0 src/pixelated/extensions/esmtp_sender_factory.py | 28 ++++++++ src/pixelated/extensions/protobuf_socket.py | 37 +++++++++++ src/pixelated/extensions/requests_urllib3.py | 84 ++++++++++++++++++++++++ src/pixelated/extensions/shared_db.py | 16 +++++ src/pixelated/extensions/sqlcipher_wal.py | 24 +++++++ 6 files changed, 189 insertions(+) create mode 100644 src/pixelated/extensions/__init__.py create mode 100644 src/pixelated/extensions/esmtp_sender_factory.py create mode 100644 src/pixelated/extensions/protobuf_socket.py create mode 100644 src/pixelated/extensions/requests_urllib3.py create mode 100644 src/pixelated/extensions/shared_db.py create mode 100644 src/pixelated/extensions/sqlcipher_wal.py (limited to 'src/pixelated/extensions') diff --git a/src/pixelated/extensions/__init__.py b/src/pixelated/extensions/__init__.py new file mode 100644 index 00000000..e69de29b diff --git a/src/pixelated/extensions/esmtp_sender_factory.py b/src/pixelated/extensions/esmtp_sender_factory.py new file mode 100644 index 00000000..9288fc4d --- /dev/null +++ b/src/pixelated/extensions/esmtp_sender_factory.py @@ -0,0 +1,28 @@ +# +# Copyright (c) 2014 ThoughtWorks, Inc. +# +# Pixelated is free software: you can redistribute it and/or modify +# it under the terms of the GNU Affero General Public License as published by +# the Free Software Foundation, either version 3 of the License, or +# (at your option) any later version. +# +# Pixelated is distributed in the hope that it will be useful, +# but WITHOUT ANY WARRANTY; without even the implied warranty of +# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the +# GNU Affero General Public License for more details. +# +# You should have received a copy of the GNU Affero General Public License +# along with Pixelated. If not, see . + +from twisted.mail import smtp + + +def no_require_transport_security(f): + def wrapper(*args, **kwargs): + kwargs['requireTransportSecurity'] = False + return f(*args, **kwargs) + return wrapper + + +smtp.ESMTPSenderFactory = no_require_transport_security( + smtp.ESMTPSenderFactory) diff --git a/src/pixelated/extensions/protobuf_socket.py b/src/pixelated/extensions/protobuf_socket.py new file mode 100644 index 00000000..548f5fd6 --- /dev/null +++ b/src/pixelated/extensions/protobuf_socket.py @@ -0,0 +1,37 @@ +# +# Copyright (c) 2014 ThoughtWorks, Inc. +# +# Pixelated is free software: you can redistribute it and/or modify +# it under the terms of the GNU Affero General Public License as published by +# the Free Software Foundation, either version 3 of the License, or +# (at your option) any later version. +# +# Pixelated is distributed in the hope that it will be useful, +# but WITHOUT ANY WARRANTY; without even the implied warranty of +# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the +# GNU Affero General Public License for more details. +# +# You should have received a copy of the GNU Affero General Public License +# along with Pixelated. If not, see . + +from __future__ import print_function +from sys import platform as _platform + +import protobuf.socketrpc.server + +# protobuf throws a lot of 'Socket is not connected' exceptions on OSX but they are not an issue. +# refer too https://code.google.com/p/protobuf-socket-rpc/issues/detail?id=10 and +# or https://leap.se/code/issues/2187 +if _platform == 'darwin': + def try_except_decorator(func): + def wrapper(*args, **kwargs): + try: + func(*args, **kwargs) + pass + except: + pass + + return wrapper + + protobuf.socketrpc.server.SocketHandler.handle = try_except_decorator( + protobuf.socketrpc.server.SocketHandler.handle) diff --git a/src/pixelated/extensions/requests_urllib3.py b/src/pixelated/extensions/requests_urllib3.py new file mode 100644 index 00000000..5b0a6644 --- /dev/null +++ b/src/pixelated/extensions/requests_urllib3.py @@ -0,0 +1,84 @@ +# +# Copyright (c) 2014 ThoughtWorks, Inc. +# +# Pixelated is free software: you can redistribute it and/or modify +# it under the terms of the GNU Affero General Public License as published by +# the Free Software Foundation, either version 3 of the License, or +# (at your option) any later version. +# +# Pixelated is distributed in the hope that it will be useful, +# but WITHOUT ANY WARRANTY; without even the implied warranty of +# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the +# GNU Affero General Public License for more details. +# +# You should have received a copy of the GNU Affero General Public License +# along with Pixelated. If not, see . + +import requests + + +if requests.__version__ == '2.0.0': + try: + import requests.packages.urllib3.connectionpool + from socket import error as SocketError, timeout as SocketTimeout + from requests.packages.urllib3.packages.ssl_match_hostname import CertificateError, match_hostname + import socket + import ssl + + from requests.packages.urllib3.exceptions import ( + ClosedPoolError, + ConnectTimeoutError, + EmptyPoolError, + HostChangedError, + MaxRetryError, + SSLError, + ReadTimeoutError, + ProxyError, + ) + + from requests.packages.urllib3.util import ( + assert_fingerprint, + get_host, + is_connection_dropped, + resolve_cert_reqs, + resolve_ssl_version, + ssl_wrap_socket, + Timeout, + ) + + def patched_connect(self): + # Add certificate verification + try: + sock = socket.create_connection( + address=(self.host, self.port), timeout=self.timeout) + except SocketTimeout: + raise ConnectTimeoutError( + self, "Connection to %s timed out. (connect timeout=%s)" % (self.host, self.timeout)) + + resolved_cert_reqs = resolve_cert_reqs(self.cert_reqs) + resolved_ssl_version = resolve_ssl_version(self.ssl_version) + + if self._tunnel_host: + self.sock = sock + # Calls self._set_hostport(), so self.host is + # self._tunnel_host below. + self._tunnel() + + # Wrap socket using verification with the root certs in + # trusted_root_certs + self.sock = ssl_wrap_socket(sock, self.key_file, self.cert_file, + cert_reqs=resolved_cert_reqs, + ca_certs=self.ca_certs, + server_hostname=self.host, + ssl_version=resolved_ssl_version) + + if self.assert_fingerprint: + assert_fingerprint(self.sock.getpeercert(binary_form=True), + self.assert_fingerprint) + elif resolved_cert_reqs != ssl.CERT_NONE and self.assert_hostname is not False: + match_hostname(self.sock.getpeercert(), + self.assert_hostname or self.host) + + requests.packages.urllib3.connectionpool.VerifiedHTTPSConnection.connect = patched_connect + except ImportError: + pass # The patch is specific for the debian package. Ignore it if it can't be found diff --git a/src/pixelated/extensions/shared_db.py b/src/pixelated/extensions/shared_db.py new file mode 100644 index 00000000..b433dd50 --- /dev/null +++ b/src/pixelated/extensions/shared_db.py @@ -0,0 +1,16 @@ +from leap.soledad.client.auth import TokenBasedAuth +import base64 +from u1db import errors + + +def patched_sign_request(self, method, url_query, params): + if 'token' in self._creds: + uuid, token = self._creds['token'] + auth = '%s:%s' % (uuid, token) + return [('Authorization', 'Token %s' % base64.b64encode(auth))] + else: + raise errors.UnknownAuthMethod( + 'Wrong credentials: %s' % self._creds) + + +# TokenBasedAuth._sign_request = patched_sign_request diff --git a/src/pixelated/extensions/sqlcipher_wal.py b/src/pixelated/extensions/sqlcipher_wal.py new file mode 100644 index 00000000..776087bf --- /dev/null +++ b/src/pixelated/extensions/sqlcipher_wal.py @@ -0,0 +1,24 @@ +# +# Copyright (c) 2014 ThoughtWorks, Inc. +# +# Pixelated is free software: you can redistribute it and/or modify +# it under the terms of the GNU Affero General Public License as published by +# the Free Software Foundation, either version 3 of the License, or +# (at your option) any later version. +# +# Pixelated is distributed in the hope that it will be useful, +# but WITHOUT ANY WARRANTY; without even the implied warranty of +# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the +# GNU Affero General Public License for more details. +# +# You should have received a copy of the GNU Affero General Public License +# along with Pixelated. If not, see . + +from sys import platform as _platform + +import leap.soledad.client.sqlcipher + +# WAL is breaking for the debian sqlcipher package so we need to disable it +# refer to https://leap.se/code/issues/5562 +if _platform == 'linux2': + leap.soledad.client.sqlcipher.SQLCipherDatabase._pragma_write_ahead_logging = lambda x, y: None -- cgit v1.2.3