ssl2 1.2.0__tar.gz → 2.0.1__tar.gz

{ssl2-1.2.0 → ssl2-2.0.1}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.3
 Name: ssl2
-Version: 1.2.0
+Version: 2.0.1
 Summary: PEP 748 TLS interface: typed ClientHello model and parser, JA3, JA4 and Akamai fingerprints, proxies, sockets and asyncio streams
 Requires-Python: >=3.14
 Project-URL: Repository, https://github.com/baobien-dev/ssl2
@@ -126,7 +126,7 @@ print(JA3.parse(JA3.of(chrome).text) == JA3.of(chrome))  # True
 
 `JA3.builder()` starts a `ClientHelloBuilder` from the JA3 fields; the payloads JA3 does not carry, such as signature schemes, key shares and ALPN, go in before `build()`.
 
-`.trust_anchor_ids("44947.2.1", ...)` lists the trust anchor identifiers of draft-ietf-tls-trust-anchor-ids in dotted form, which the parser reads back from the wire. `CHROME_TRUST_ANCHOR_IDS` is the 28 Chrome 155 requests, and `TrustAnchorIdentifier.encode` and `.decode` move between the dotted form and the wire bytes.
+`.trust_anchor_ids("44947.2.1", ...)` lists the trust anchor identifiers of draft-ietf-tls-trust-anchor-ids in dotted form, which the parser reads back from the wire. `TrustAnchorIdentifier.encode` and `.decode` move between the dotted form and the wire bytes.
 
 ## Configuration, credentials, trust
 
@@ -150,7 +150,7 @@ proxy = Proxy.parse("socks5h://user:secret@proxy.example:1080")  # http, https,
 print(proxy.scheme, proxy.host, proxy.port, proxy.credentials)
 ```
 
-`socks4` and `socks5` resolve the destination locally, `socks4a`, `socks5h` and the HTTP schemes let the proxy resolve it, and an `https` proxy carries TLS inside TLS with the same client context. A refusal raises `ProxyError` with the proxy's reason.
+`socks4` and `socks5` resolve the destination locally, `socks4a`, `socks5h` and the HTTP schemes let the proxy resolve it, and an `https` proxy carries TLS inside TLS with the same client context, or with `proxy_context=` on `connect` when given; CONNECT is HTTP/1.1, so that context should offer only `http/1.1`. A refusal raises `ProxyError` with the proxy's reason.
 
 ## Sockets and streams on any engine
 

{ssl2-1.2.0 → ssl2-2.0.1}/README.md

@@ -118,7 +118,7 @@ print(JA3.parse(JA3.of(chrome).text) == JA3.of(chrome))  # True
 
 `JA3.builder()` starts a `ClientHelloBuilder` from the JA3 fields; the payloads JA3 does not carry, such as signature schemes, key shares and ALPN, go in before `build()`.
 
-`.trust_anchor_ids("44947.2.1", ...)` lists the trust anchor identifiers of draft-ietf-tls-trust-anchor-ids in dotted form, which the parser reads back from the wire. `CHROME_TRUST_ANCHOR_IDS` is the 28 Chrome 155 requests, and `TrustAnchorIdentifier.encode` and `.decode` move between the dotted form and the wire bytes.
+`.trust_anchor_ids("44947.2.1", ...)` lists the trust anchor identifiers of draft-ietf-tls-trust-anchor-ids in dotted form, which the parser reads back from the wire. `TrustAnchorIdentifier.encode` and `.decode` move between the dotted form and the wire bytes.
 
 ## Configuration, credentials, trust
 
@@ -142,7 +142,7 @@ proxy = Proxy.parse("socks5h://user:secret@proxy.example:1080")  # http, https,
 print(proxy.scheme, proxy.host, proxy.port, proxy.credentials)
 ```
 
-`socks4` and `socks5` resolve the destination locally, `socks4a`, `socks5h` and the HTTP schemes let the proxy resolve it, and an `https` proxy carries TLS inside TLS with the same client context. A refusal raises `ProxyError` with the proxy's reason.
+`socks4` and `socks5` resolve the destination locally, `socks4a`, `socks5h` and the HTTP schemes let the proxy resolve it, and an `https` proxy carries TLS inside TLS with the same client context, or with `proxy_context=` on `connect` when given; CONNECT is HTTP/1.1, so that context should offer only `http/1.1`. A refusal raises `ProxyError` with the proxy's reason.
 
 ## Sockets and streams on any engine
 

{ssl2-1.2.0 → ssl2-2.0.1}/pyproject.toml

@@ -1,6 +1,6 @@
 [project]
 name = "ssl2"
-version = "1.2.0"
+version = "2.0.1"
 description = "PEP 748 TLS interface: typed ClientHello model and parser, JA3, JA4 and Akamai fingerprints, proxies, sockets and asyncio streams"
 readme = "README.md"
 requires-python = ">=3.14"

{ssl2-1.2.0 → ssl2-2.0.1}/pyproject.toml.orig

@@ -1,6 +1,6 @@
 [project]
 name = "ssl2"
-version = "1.2.0"
+version = "2.0.1"
 description = "PEP 748 TLS interface: typed ClientHello model and parser, JA3, JA4 and Akamai fingerprints, proxies, sockets and asyncio streams"
 readme = "README.md"
 requires-python = ">=3.14"

{ssl2-1.2.0 → ssl2-2.0.1}/src/ssl2/__init__.py

@@ -6,7 +6,6 @@ from ssl2.asynchronous import (
     Tunnel,
 )
 from ssl2.client_hello import (
-    CHROME_TRUST_ANCHOR_IDS,
     ClientHello,
     ClientHelloBuilder,
     ClientHelloParser,
@@ -65,7 +64,6 @@ from ssl2.parameters import (
 from ssl2.proxy import Proxy, ProxyCredentials, ProxyError, ProxyScheme
 
 __all__ = (
-    "CHROME_TRUST_ANCHOR_IDS",
     "JA3",
     "JA4",
     "AkamaiFingerprint",

{ssl2-1.2.0 → ssl2-2.0.1}/src/ssl2/asynchronous.py

@@ -109,9 +109,12 @@ class TLSStream:
         *,
         proxy: Proxy | None = None,
         timeout: float | None = None,
+        proxy_context: ClientContext | None = None,
     ) -> Self:
         async with asyncio.timeout(timeout):
-            tunnel = await cls.tunnel(context, address, proxy)
+            tunnel = await cls.tunnel(
+                context if proxy_context is None else proxy_context, address, proxy
+            )
             try:
                 buffer = context.create_buffer(address[0])
                 if tunnel.socket is not None and not tunnel.leftover:

{ssl2-1.2.0 → ssl2-2.0.1}/src/ssl2/client_hello.py

@@ -108,37 +108,6 @@ class ClientHello:
 
 
 EMPTY_CLIENT_HELLO = ClientHello(cipher_suites=(), extensions=())
-# the trust anchor identifiers Chrome 155 requests: its root store, in the dotted form of draft-ietf-tls-trust-anchor-ids
-CHROME_TRUST_ANCHOR_IDS = (
-    "44947.2.1",
-    "44947.2.6",
-    "44947.2.13",
-    "44947.2.14",
-    "44947.2.15",
-    "44947.2.18",
-    "44947.2.19",
-    "44947.2.20",
-    "52580.200109.1.7",
-    "52580.200109.1.8",
-    "52580.200109.1.9",
-    "52580.200109.1.10",
-    "52580.200109.1.11",
-    "52580.200109.1.12",
-    "52580.200109.1.13",
-    "52580.200109.1.18",
-    "52580.200109.1.19",
-    "11129.9.1",
-    "11129.9.4",
-    "11129.9.5",
-    "11129.9.6",
-    "11129.9.7",
-    "11129.9.8",
-    "11129.9.10",
-    "11129.9.11",
-    "11129.9.12",
-    "11129.9.13",
-    "11129.9.15",
-)
 
 
 class TrustAnchorIdentifier:

{ssl2-1.2.0 → ssl2-2.0.1}/src/ssl2/interface.py

@@ -196,6 +196,7 @@ class TLSSocket:
         *,
         proxy: Proxy | None = None,
         timeout: float | None = None,
+        proxy_context: ClientContext | None = None,
     ) -> Self:
         buffer = context.create_buffer(address[0])
         if proxy is None:
@@ -203,7 +204,11 @@ class TLSSocket:
                 context, buffer, socket.create_connection(address, timeout=timeout)
             )
         if proxy.scheme is ProxyScheme.HTTPS:
-            hop = cls.connect(context, (proxy.host, proxy.port), timeout=timeout)
+            hop = cls.connect(
+                context if proxy_context is None else proxy_context,
+                (proxy.host, proxy.port),
+                timeout=timeout,
+            )
             try:
                 return cls.open(context, buffer, hop, cls._tunnel(proxy, address, hop))
             except BaseException: