ssl2 2.0.1__tar.gz → 2.2.0__tar.gz

{ssl2-2.0.1 → ssl2-2.2.0}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.3
 Name: ssl2
-Version: 2.0.1
+Version: 2.2.0
 Summary: PEP 748 TLS interface: typed ClientHello model and parser, JA3, JA4 and Akamai fingerprints, proxies, sockets and asyncio streams
 Requires-Python: >=3.14
 Project-URL: Repository, https://github.com/baobien-dev/ssl2
@@ -175,7 +175,7 @@ async def main() -> None:
 asyncio.run(main())
 ```
 
-`context` is an engine's `ClientContext`. A peer that drops TCP without close_notify reads as `b""`, the same default the `ssl` module has. On a direct connection, and behind an HTTP or SOCKS proxy, both hand the TCP socket to the engine through `TLSBuffer.attach`, so records move between the kernel and the TLS state without a stop in Python; behind an HTTPS proxy, or over any other `AsyncTransport`, the records go through the buffer's memory BIOs instead. A socket timeout applies to every wait.
+`context` is an engine's `ClientContext`. `server_hostname=` names the server for SNI and certificate verification when the address is not that name, such as an IP address picked in advance. A peer that drops TCP without close_notify reads as `b""`, the same default the `ssl` module has. On a direct connection, and behind an HTTP or SOCKS proxy, both hand the TCP socket to the engine through `TLSBuffer.attach`, so records move between the kernel and the TLS state without a stop in Python; behind an HTTPS proxy, or over any other `AsyncTransport`, the records go through the buffer's memory BIOs instead. A socket timeout applies to every wait. An `AsyncTransport` answers `getsockname()` and `getpeername()` like a socket, and a `TLSStream` passes the question to the transport under it, so a stream behind an HTTPS proxy names the TCP socket to the proxy.
 
 ## Writing an engine
 

{ssl2-2.0.1 → ssl2-2.2.0}/README.md

@@ -167,7 +167,7 @@ async def main() -> None:
 asyncio.run(main())
 ```
 
-`context` is an engine's `ClientContext`. A peer that drops TCP without close_notify reads as `b""`, the same default the `ssl` module has. On a direct connection, and behind an HTTP or SOCKS proxy, both hand the TCP socket to the engine through `TLSBuffer.attach`, so records move between the kernel and the TLS state without a stop in Python; behind an HTTPS proxy, or over any other `AsyncTransport`, the records go through the buffer's memory BIOs instead. A socket timeout applies to every wait.
+`context` is an engine's `ClientContext`. `server_hostname=` names the server for SNI and certificate verification when the address is not that name, such as an IP address picked in advance. A peer that drops TCP without close_notify reads as `b""`, the same default the `ssl` module has. On a direct connection, and behind an HTTP or SOCKS proxy, both hand the TCP socket to the engine through `TLSBuffer.attach`, so records move between the kernel and the TLS state without a stop in Python; behind an HTTPS proxy, or over any other `AsyncTransport`, the records go through the buffer's memory BIOs instead. A socket timeout applies to every wait. An `AsyncTransport` answers `getsockname()` and `getpeername()` like a socket, and a `TLSStream` passes the question to the transport under it, so a stream behind an HTTPS proxy names the TCP socket to the proxy.
 
 ## Writing an engine
 

{ssl2-2.0.1 → ssl2-2.2.0}/pyproject.toml

@@ -1,6 +1,6 @@
 [project]
 name = "ssl2"
-version = "2.0.1"
+version = "2.2.0"
 description = "PEP 748 TLS interface: typed ClientHello model and parser, JA3, JA4 and Akamai fingerprints, proxies, sockets and asyncio streams"
 readme = "README.md"
 requires-python = ">=3.14"

{ssl2-2.0.1 → ssl2-2.2.0}/pyproject.toml.orig

@@ -1,6 +1,6 @@
 [project]
 name = "ssl2"
-version = "2.0.1"
+version = "2.2.0"
 description = "PEP 748 TLS interface: typed ClientHello model and parser, JA3, JA4 and Akamai fingerprints, proxies, sockets and asyncio streams"
 readme = "README.md"
 requires-python = ">=3.14"

{ssl2-2.0.1 → ssl2-2.2.0}/src/ssl2/asynchronous.py

@@ -20,6 +20,10 @@ class AsyncTransport(Protocol):
 
     async def close(self) -> None: ...
 
+    def getsockname(self) -> tuple[str | None, int]: ...
+
+    def getpeername(self) -> tuple[str | None, int]: ...
+
 
 class StreamTransport:
     def __init__(
@@ -38,6 +42,12 @@ class StreamTransport:
     async def close(self) -> None:
         self._writer.close()
 
+    def getsockname(self) -> tuple[str | None, int]:
+        return self._writer.get_extra_info("sockname")
+
+    def getpeername(self) -> tuple[str | None, int]:
+        return self._writer.get_extra_info("peername")
+
 
 class SocketTransport:
     def __init__(self, sock: socket.socket) -> None:
@@ -77,6 +87,12 @@ class SocketTransport:
     async def close(self) -> None:
         self._socket.close()
 
+    def getsockname(self) -> tuple[str | None, int]:
+        return self._socket.getsockname()
+
+    def getpeername(self) -> tuple[str | None, int]:
+        return self._socket.getpeername()
+
 
 @dataclass(frozen=True, slots=True)
 class Tunnel:
@@ -110,13 +126,16 @@ class TLSStream:
         proxy: Proxy | None = None,
         timeout: float | None = None,
         proxy_context: ClientContext | None = None,
+        server_hostname: str | None = None,
     ) -> Self:
         async with asyncio.timeout(timeout):
             tunnel = await cls.tunnel(
                 context if proxy_context is None else proxy_context, address, proxy
             )
             try:
-                buffer = context.create_buffer(address[0])
+                buffer = context.create_buffer(
+                    address[0] if server_hostname is None else server_hostname
+                )
                 if tunnel.socket is not None and not tunnel.leftover:
                     return await cls.open_socket(context, buffer, tunnel.socket)
                 return await cls.open(
@@ -214,6 +233,12 @@ class TLSStream:
     def getpeercert(self) -> bytes | None:
         return self._buffer.getpeercert()
 
+    def getsockname(self) -> tuple[str | None, int]:
+        return self._transport.getsockname()
+
+    def getpeername(self) -> tuple[str | None, int]:
+        return self._transport.getpeername()
+
     @classmethod
     async def associate(
         cls, proxy: Proxy, transport: AsyncTransport

{ssl2-2.0.1 → ssl2-2.2.0}/src/ssl2/interface.py

@@ -197,8 +197,11 @@ class TLSSocket:
         proxy: Proxy | None = None,
         timeout: float | None = None,
         proxy_context: ClientContext | None = None,
+        server_hostname: str | None = None,
     ) -> Self:
-        buffer = context.create_buffer(address[0])
+        buffer = context.create_buffer(
+            address[0] if server_hostname is None else server_hostname
+        )
         if proxy is None:
             return cls.open_socket(
                 context, buffer, socket.create_connection(address, timeout=timeout)