ssl2 2.0.0__tar.gz → 2.1.0__tar.gz

{ssl2-2.0.0 → ssl2-2.1.0}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.3
 Name: ssl2
-Version: 2.0.0
+Version: 2.1.0
 Summary: PEP 748 TLS interface: typed ClientHello model and parser, JA3, JA4 and Akamai fingerprints, proxies, sockets and asyncio streams
 Requires-Python: >=3.14
 Project-URL: Repository, https://github.com/baobien-dev/ssl2
@@ -150,7 +150,7 @@ proxy = Proxy.parse("socks5h://user:secret@proxy.example:1080")  # http, https,
 print(proxy.scheme, proxy.host, proxy.port, proxy.credentials)
 ```
 
-`socks4` and `socks5` resolve the destination locally, `socks4a`, `socks5h` and the HTTP schemes let the proxy resolve it, and an `https` proxy carries TLS inside TLS with the same client context. A refusal raises `ProxyError` with the proxy's reason.
+`socks4` and `socks5` resolve the destination locally, `socks4a`, `socks5h` and the HTTP schemes let the proxy resolve it, and an `https` proxy carries TLS inside TLS with the same client context, or with `proxy_context=` on `connect` when given; CONNECT is HTTP/1.1, so that context should offer only `http/1.1`. A refusal raises `ProxyError` with the proxy's reason.
 
 ## Sockets and streams on any engine
 
@@ -175,7 +175,7 @@ async def main() -> None:
 asyncio.run(main())
 ```
 
-`context` is an engine's `ClientContext`. A peer that drops TCP without close_notify reads as `b""`, the same default the `ssl` module has. On a direct connection, and behind an HTTP or SOCKS proxy, both hand the TCP socket to the engine through `TLSBuffer.attach`, so records move between the kernel and the TLS state without a stop in Python; behind an HTTPS proxy, or over any other `AsyncTransport`, the records go through the buffer's memory BIOs instead. A socket timeout applies to every wait.
+`context` is an engine's `ClientContext`. `server_hostname=` names the server for SNI and certificate verification when the address is not that name, such as an IP address picked in advance. A peer that drops TCP without close_notify reads as `b""`, the same default the `ssl` module has. On a direct connection, and behind an HTTP or SOCKS proxy, both hand the TCP socket to the engine through `TLSBuffer.attach`, so records move between the kernel and the TLS state without a stop in Python; behind an HTTPS proxy, or over any other `AsyncTransport`, the records go through the buffer's memory BIOs instead. A socket timeout applies to every wait.
 
 ## Writing an engine
 

{ssl2-2.0.0 → ssl2-2.1.0}/README.md

@@ -142,7 +142,7 @@ proxy = Proxy.parse("socks5h://user:secret@proxy.example:1080")  # http, https,
 print(proxy.scheme, proxy.host, proxy.port, proxy.credentials)
 ```
 
-`socks4` and `socks5` resolve the destination locally, `socks4a`, `socks5h` and the HTTP schemes let the proxy resolve it, and an `https` proxy carries TLS inside TLS with the same client context. A refusal raises `ProxyError` with the proxy's reason.
+`socks4` and `socks5` resolve the destination locally, `socks4a`, `socks5h` and the HTTP schemes let the proxy resolve it, and an `https` proxy carries TLS inside TLS with the same client context, or with `proxy_context=` on `connect` when given; CONNECT is HTTP/1.1, so that context should offer only `http/1.1`. A refusal raises `ProxyError` with the proxy's reason.
 
 ## Sockets and streams on any engine
 
@@ -167,7 +167,7 @@ async def main() -> None:
 asyncio.run(main())
 ```
 
-`context` is an engine's `ClientContext`. A peer that drops TCP without close_notify reads as `b""`, the same default the `ssl` module has. On a direct connection, and behind an HTTP or SOCKS proxy, both hand the TCP socket to the engine through `TLSBuffer.attach`, so records move between the kernel and the TLS state without a stop in Python; behind an HTTPS proxy, or over any other `AsyncTransport`, the records go through the buffer's memory BIOs instead. A socket timeout applies to every wait.
+`context` is an engine's `ClientContext`. `server_hostname=` names the server for SNI and certificate verification when the address is not that name, such as an IP address picked in advance. A peer that drops TCP without close_notify reads as `b""`, the same default the `ssl` module has. On a direct connection, and behind an HTTP or SOCKS proxy, both hand the TCP socket to the engine through `TLSBuffer.attach`, so records move between the kernel and the TLS state without a stop in Python; behind an HTTPS proxy, or over any other `AsyncTransport`, the records go through the buffer's memory BIOs instead. A socket timeout applies to every wait.
 
 ## Writing an engine
 

{ssl2-2.0.0 → ssl2-2.1.0}/pyproject.toml

@@ -1,6 +1,6 @@
 [project]
 name = "ssl2"
-version = "2.0.0"
+version = "2.1.0"
 description = "PEP 748 TLS interface: typed ClientHello model and parser, JA3, JA4 and Akamai fingerprints, proxies, sockets and asyncio streams"
 readme = "README.md"
 requires-python = ">=3.14"

{ssl2-2.0.0 → ssl2-2.1.0}/pyproject.toml.orig

@@ -1,6 +1,6 @@
 [project]
 name = "ssl2"
-version = "2.0.0"
+version = "2.1.0"
 description = "PEP 748 TLS interface: typed ClientHello model and parser, JA3, JA4 and Akamai fingerprints, proxies, sockets and asyncio streams"
 readme = "README.md"
 requires-python = ">=3.14"

{ssl2-2.0.0 → ssl2-2.1.0}/src/ssl2/asynchronous.py

@@ -109,11 +109,17 @@ class TLSStream:
         *,
         proxy: Proxy | None = None,
         timeout: float | None = None,
+        proxy_context: ClientContext | None = None,
+        server_hostname: str | None = None,
     ) -> Self:
         async with asyncio.timeout(timeout):
-            tunnel = await cls.tunnel(context, address, proxy)
+            tunnel = await cls.tunnel(
+                context if proxy_context is None else proxy_context, address, proxy
+            )
             try:
-                buffer = context.create_buffer(address[0])
+                buffer = context.create_buffer(
+                    address[0] if server_hostname is None else server_hostname
+                )
                 if tunnel.socket is not None and not tunnel.leftover:
                     return await cls.open_socket(context, buffer, tunnel.socket)
                 return await cls.open(

{ssl2-2.0.0 → ssl2-2.1.0}/src/ssl2/interface.py

@@ -196,14 +196,22 @@ class TLSSocket:
         *,
         proxy: Proxy | None = None,
         timeout: float | None = None,
+        proxy_context: ClientContext | None = None,
+        server_hostname: str | None = None,
     ) -> Self:
-        buffer = context.create_buffer(address[0])
+        buffer = context.create_buffer(
+            address[0] if server_hostname is None else server_hostname
+        )
         if proxy is None:
             return cls.open_socket(
                 context, buffer, socket.create_connection(address, timeout=timeout)
             )
         if proxy.scheme is ProxyScheme.HTTPS:
-            hop = cls.connect(context, (proxy.host, proxy.port), timeout=timeout)
+            hop = cls.connect(
+                context if proxy_context is None else proxy_context,
+                (proxy.host, proxy.port),
+                timeout=timeout,
+            )
             try:
                 return cls.open(context, buffer, hop, cls._tunnel(proxy, address, hop))
             except BaseException: