ekddlZddlZddlZddlZddlZddlZddlZddlZddl Z ddl Z ddl m Z ddl m Z ddlmZmZddlmZmZmZmZmZddlZddlmZmZmZmZddlmZ ddlZdZ Gd d Z"Gd d Z#y#e!$rd Z YwxYw)N)gaierror)exc_info)SSLErrorcert_time_to_seconds)LockBoundedSemaphoreThreadEvent currentThread) imaplibutilimaputil threadutilOfflineImapError) getglobaluiTFceZdZdZdZdZdZdZdZdZ dZ d Z d Z d Z d Zd ZdZdZdZdZdZdZdZdZddZy) IMAPServera"Initializes all variables from an IMAPRepository() instance Various functions, such as acquireconnection() return an IMAP4 object on which we can operate. Public instance variables are: self.: delim The server's folder delimiter. Only valid after acquireconnection() ct|_||_|j|_|jj dd|_|jj dd|_|j|_ |j|_ |jr6|jr*td|zdztjj|jr |jn |j|_|jrdn|j!|_|j%|_|j)|_d|_d|_d|_|j3|_|j7|_|j8durt:j<|_n9|j8durt:j@|_nt:jB|_|js |jrdn|jE|_#|jI|_%|jJ|j4rd nd |_%|jM|_'|jQ|_)|jU|_+|jVd|_,|j[|_.|j_|_0|jc|_2|jg|_4|j4r&|j`d k7r|jd tkd |jm|_7|jq|_9|ju|_;|jy|_=|j}|_?d|_@d|_Ad|_B|j|_Dg|_Eg|_Fi|_Gt|j|_It|_K|j|_M|j|_Od|_Pd|_Q|jd t:j:|_S|jd|j|_Ty)z":repos: a IMAPRepository instance.generalzignore-keyringzupdate-keyringz%s: zMyou must enable precisely one type of tunnel (preauth or transport), not bothNTF tls_compatzNWhen 'tls_level' is not 'tls_compat' the 'ssl_version' must be set explicitly.proxy authproxy)Uruirepos getconfigconfig getbooleanignore_keyringupdate_keyringgetpreauthtunnelpreauth_tunnelgettransporttunneltransport_tunnelrERRORREPOtunnelgetuserusernameget_remote_identity user_identityget_auth_mechanisms authmechspassword passworderror goodpasswordgetsslusesslgetipv6useipv6socketAF_INET6afAF_INET AF_UNSPECgethosthostnamegetportportgetsslclientcert sslclientcertgetsslclientkey sslclientkeygetsslcacertfile sslcacertfile_IMAPServer__verifycertget_ssl_fingerprint fingerprint gettlsleveltlslevel getsslversion sslversion getstarttlsstarttls Exceptiongetoauth2_refresh_tokenoauth2_refresh_tokengetoauth2_access_tokenoauth2_access_tokengetoauth2_client_idoauth2_client_idgetoauth2_client_secretoauth2_client_secretgetoauth2_request_urloauth2_request_urloauth2_access_token_expires_atdelimrootgetmaxconnectionsmaxconnectionsavailableconnectionsassignedconnections lastownerr semaphorerconnectionlock getreference referencegetidlefolders idlefoldersgss_vcgssapi _get_proxyproxied_socketauthproxied_socket)selfrs 1/usr/share/offlineimap3/offlineimap/imapserver.py__init__zIMAPServer.__init__5s- oo' "kk44Y@PQ"kk44Y@PQ#446 % 8 8 :   4#8#8"6E>$.$.0@/E/E/J/JL L $(#6#6D  ** ''DU]]_ "668224 ! lln }} <<4 ooDG \\U "nnDG&&DG $ 5 59L9LRWR_R_Ra MMO 99 #{{DI"335!113"335    % $D  446))+ --/))+ ;;MM\1OO+HI I%*$A$A$C!#(#?#?#A % 9 9 ;$)$A$A$C!"'"="="?.2+  #557$&!#% )$*=*=>"f++- //1  #oogv}}E#'//+262E2E#Gc d|jjjz}|jj ||s|S|jj ||}|dk(rt j S ddl}|jd\}}}t|}|jt|||||jS#t$r|jjdY|St t"f$rQ} |jjd|d|jjjd| d |d Yd} ~ |Sd} ~ wwxYw) NzAccount r:z-PySocks not installed, ignoring proxy option.zBad proxy option z for account : z Ignoring z option.)raccountnamer has_optiongetr5sockssplitintsetdefaultproxygetattr socksocket ImportErrorrwarnAttributeError ValueError) rk proxysection dfltsocket_account_sectionrrw proxy_typehostr=es rlrhzIMAPServer._get_proxys#% (:(:(?(??{{%%&6 E   0,? B;==  L %*[[%5 "Jdt9D  ! !'%"
JK##%$%99$+KK11:=  f:VCD rnc|jjdd|j|j|j y)z( Basic authentication via LOGIN command.rz$Attempting IMAP LOGIN authenticationN)rrloginr)rrkimapobjs rl __loginauthzIMAPServer.__loginauths2  fDE dmmT%7%7%9:rncf|j}|s?td|jjztjj |j }d}d}|j |j}|j|||f}|jjdd|d|d|S)z\Implements SASL PLAIN authentication, RFC 4616, http://tools.ietf.org/html/rfc4616zNo username provided for '%s'rprz__plainhandler: returning rz (passwd hidden for log)) r)rrgetnamer%r&rr+joinrr)rkrauthcrauthzNULLrs rl__plainhandlerzIMAPServer.__plainhandlers "#B%)ZZ%7%7%9$:#3#9#9#>#>@ @##%    )&&EE5&12  f38%A B rncFtjj}|jr2|j|kr#d|_|jj dd|j|j 'td|ztjji}|j|d<|j|d<|j|d<d|d<|jj dd|j z|jj dd |ztj}|jt_ tj j#|j tj$j'|j)d j+} |t_ t3j4|}|jj dd|zd|vr'td|ztjj|d|_d|vr$|tj6|ddz z|_|jj dd|jd|jdd|j8d|jd} |jj dd| z| S#t,$rR} |d t/|d }n#t,$r}|d |d}Yd}~nd}~wwxYw|jj1|d}~wwxYw#|t_ wxYw)Nrz+xoauth2handler: oauth2_access_token expiredz;No remote oauth2_request_url for repository '%s' specified. client_id client_secret refresh_token grant_typezxoauth2handler: url "%s"zxoauth2handler: params "%s"rz (configuration is: )z [cannot display configuration: ]zxoauth2handler: response "%s"errorzxoauth2handler got: %s access_token expires_in)secondszxoauth2handler: access_token "z expires "zuser=z auth=Bearer zzxoauth2handler: returning "%s")datetimenowrXrQrrrWrr%r&rSrUrOr5rjurllibrequesturlopenparse urlencodeencodereadrMstrrjsonloads timedeltar)) rkrrparamsoriginal_socketrmsgeparamsresp auth_strings rl__xoauth2handlerzIMAPServer.__xoauth2handlers##%  . .77#='+D $ GGMM&"O P  # # +&&.&(D'+(,-=-C-C-H-HJJ F"&"7"7F; &*&?&?F? #&*&?&?F? ##2F< GGMM&"<11#2 3 GGMM&"?&"H I$mmO 33FM 0!>>11++V\\-C-CF-K-R-RSZ-[]]a]a]c!0 ::h'D GGMM&"AD"H I$&'?$'F'7'='='B'BDD'+N';D $t#69HLM9 Q9:CKHC QEFPCQ c" !0 sI?A$J55 L?KL  K,K'"L 'K,,L  LL L c|dk(rd} |jsWtjd|jztjj }tj d||_|jjs!|jj|}|r|SdS|y|jj|}d|jddz}|t|jdz }|jj||j}|jr |jSdS#tjj $r4}|j"j%d |j'Yd}~yd}~wwxYw) Nrpzimap@initiate)usagertrr)rfrgNamer;NameTypehostbased_serviceSecurityContextcompletestepunwrapmessagerr)wrap encrypted exceptionsGSSErrorrr gen_message)rktokenrtrreplyerrs rl __gsshandlerzIMAPServer.__gsshandlersF B;E$ ;;{{7T]]#:#)??#D#DF$44::>@ ;;'';;++E2#+x33  {{))%0H h..q33E U4=='2 2E{{''x/A/ABH'/'7'78## ?R ?  ))  GGMM&#//"3 4  s1BD,!D,#D,&BD,*D,,E= *E88E=c<d|jvr;|js.|jjdd |j yyy#|j $rA}t dt|zt jjtdd}~wwxYw)NSTARTTLSrzUsing STARTTLS connectionz"Failed to start TLS connection: %sr) capabilitiesr2rrrLrrrr%r&r)rkrrs rl __start_tlszIMAPServer.__start_tlsHs -- -dkk GGMM&"= > 6  "7B -== 6&(<>A!f(E'7'='='B'B'/z!}66 6sA Brncd|jvr$tdtjj|j |y)N LOGINDISABLEDz3IMAP LOGIN is disabled by server. Need to use SSL?T)rrr%r&_IMAPServer__loginauthrs rl __authn_loginzIMAPServer.__authn_loginsI g22 2"$K#3#9#9#>#>@ @   W %rnc g}d}d}|jddf|jddf|jddf|jddf|jddfd}|j D]}||vrt d|z||\}}} |r!|jr|sd}|j|| rd|z} | |jvrWd}|jjdd|z ||ryt!|rfd j#|D cgc]$} d j#| d t%| d f&c} } td| ztj&j(|sdj#|jD cgc] } | d ddk(s | c} D cgc]} | dd c} }td|j*ddj#|j d|tj&j(y#|jtf$r>} |jj|d | |j|| fYd} ~ d} ~ wwxYwcc} wcc} wcc} w)agAuthentication machinery for self.acquireconnection(). Raises OfflineImapError() of type ERROR.REPO when there are either fatal problems or no authentications succeeded. If any authentication method succeeds, routine should exit: warnings for failed methods are to be produced in the respective except blocks.FT)rrrrLOGINz:Bad authentication method %s, please, file OfflineIMAP bugzAUTH=rzAttempting %s authenticationNz authentication failed: z rrrrz$All authentication types failed: %sz, z Repository z;: no supported authentication mechanisms found; configured z, server advertises )_IMAPServer__authn_gssapi_IMAPServer__authn_xoauth2_IMAPServer__authn_cram_md5_IMAPServer__authn_plain_IMAPServer__authn_loginr-rMrL_IMAPServer__start_tlsrrrrrr~appendlenrrr%r&r)rkr exc_stacktried_to_authn tried_tls auth_methodsmfunctryTLS check_capcaprxrmethodss rl__authn_helperzIMAPServer.__authn_helpers|  **E48,,dD9..d;(($5(($6   )A $!?AB!CDD'31o #D&)$--    )kg222!N GGMM&#689#: ; )=!- )8 y>++YOtyy!A$AaD ):;OPC"$358$9:J:P:P:U:UW Wii-4-A-A!WQqVwEV!!W!Y112!YZG"=AZZ=AYYt~~=VX_$a$4#9#9#>#> @ @MM#34 ) q!DE  !Q(( ) P "X!Ys0G(;)H>- I;I I(H;=3H66H;c>d}|sd|zS|j}g}|jd}|r'tjt|k\r|d|S|jdgD]/}|d\}} |dk(s|j | j1t |dk(rd|zS|jd gD]*\}} |d k(s |j | j,|D])} | |k(s!d |vs | d |j d d d zk(s)yd|zS)zVerify that cert (in socket.getpeercert() format) matches hostname. CRLs are not handled. Returns error message if any problems are found and None on success.zCA Cert verifying failed: z%s no certificate receivednotAfterz certificate expired subjectr commonNamez%%s no commonName found in certificatesubjectAltNameDNS.z*.rNz/%s no matching domain name found in certificate)lowerrvtimerr r rx) rkcertr;errstrdnsname certnamesnotafterskeyvaluecertnames rl __verifycertzIMAPServer.__verifycertsB ./&8 8.." 88J' yy{28<<6Q :VC C((#3R8 0JCe|  / 0 " HG#7Nx4'--Q:OPQ:R3R'R  A6IIrnc|jj|jjt}d}d}d|jj vrd}t |jrtt |jdz ddD]>}|j|}|j||jk(s/|}|j|=n|s|jd}|jd=|jj||j|j|<|jj|S|jjd} |dur|jr|jj|j j#d |jt%j&|jt)j*||j, }d}n|j.r=|jj|j j#|j0|j2|jj5d|j j#d |j6d |j8d t%j:|j0|j2|j<|j>|j@|jB|j8|t)j*|jD|j,|j6|jF }n|jj|j j#|j0|j2t%jH|j0|j2t)j*|j,||jF}d|jJvr0djMtNjP}|jS||jTs% |jW||jX|_-d}|dur|j jcddr|je|jg\} } | dgk7rM| djijkD cgc]} | jmd} } to| |_%|jp|js|jtdd} | dgk(s| |js|jtdd} | dgk(s| Qd|j j#d|jtd }|jjw|ty|t{j|| ddd\|_8|_?t{j|jp|_8t{j|j~|_?|j5|jj||j|j|<ddd|S#t\$r}t_||_0d}~wwxYwcc} w#1swY|SxYw#tx$re} |jjt\jj}t|tk(r5d|j0d|j d}t]||tdt|tr|jtjk(rc|j2dk7rd|j0|j2|fz}nd|j0d|j d|}t]||tdt|t(jrj|jr^|jdtjk(r>d |j0|j2|j fz}t]||tdt_|dd!d"k(rKt]d#|j0d|j d$t\jjtd|jrg |jddd%d&k(rHt]d'jM|j0|j t\jj #YxYwd}~wwxYw)(zFetches a connection from the pool, making sure to create a new one if needed, to obey the maximum connection limits, etc. Opens a connection to the server and returns an appropriate object.NrrrrFTr')timeoutr use_socketz : level 'z ', version '') rr=keyfilecertfileca_certscert_verify_cb ssl_versionrr.rFr/ tls_levelr7)r.r/rr7IDz%("name" "OfflineIMAP" "version" "{}")usecompressionrz""z"*"zServer 'z' returned no folders in 'zCould not resolve name 'z' for repository 'zS'. Make sure you have configured the server name correctly and that you are online.rrzCould not connect via SSL to host '%s' and non-standard ssl port %d configured. Make sure you connect to the correct port. Got: %sz)Unknown SSL protocol connecting to host 'z'. OpenSSL responded: zConnection to host '%s:%d' for repository '%s' was refused. Make sure you have the right host and port configured and that you are actually able to access the network.zcan't open socket; errorz$Could not connect to remote server 'z'. Remote does not answer.#z#IMAP4 protocol error: socket error:zPCould not connect to remote server '{}' for repository '{}'. Connection Refused.)Nr`rrar r debuglistr r]ranger_identr^r rr' connectingrrr IMAP4_Tunnelr5getdefaulttimeoutrir2r;r=rrHrJWrappedIMAP4_SSLrAr?rCrDrFr7 WrappedIMAP4rformat offlineimap __version__idr"_IMAPServer__authn_helperr.r0rrr/getconfbooleanenable_compression capabilityupperrxdecodetuplerYlistrcr~rMr imapsplitrZdequoter%r&typerr isinstancererrnoEPERMrargs ECONNREFUSEDCRITICAL)rk curThreadr imap_debugitryobjsuccessl_strrtypdatrs_datlistresrseverityreasons rlacquireconnectionzIMAPServer.acquireconnections`   ##%!O  TWW&& &J t(( )3t889A=r2F 2215>>&)Y__<$G2215   33A6..q1  $ $ + +G 4&/ooDNN7 #    ' ' )N ##%X %;;GG&& **,h E)66 & 8 8 :(#'#6#6 G #G[[GG&& **,dmmTYYHGGMM&#'::#5#5#7+YZ)::!]]!YY $ 1 1!%!3!3!%!3!3'+'8'8$(OO( & 8 8 :$($4$4#'#6#6"&--77G GG&& **,dmmTYYH)66 tyy & 8 8 :#'#6#6(77 G7///CJJ;KbKbcEJJu%**++G4,0MM)"&i%tzz(()91=**,))+HCtf}47GMMO4I4I4KLq'*LL',U|$zz!!,,t~~t>5A!DGtf$  ::--/ACGGLL%#C.(&&wqz2126& DI%--djj9 $,,TYY7 $$ :((//8*3//w' :NK,-0V*M, :N<   NN " " $'--22HAw(" --5'vxAGG!X&177ekk+A99#="& 1@>>F$!% tzz1>F'vxAGG!V\\*qvv!&&)uGYGY:Y$(,}}dii&LM'vxAGG1vcr{88&FJmmUYU_U_a$**//JqM ## vvvvay"~)NN.GGMv $ tzzH;,22;; ==O   Ey< s!KY>'$Y Y>A(Y>9Y,D:Y> 5Y1 Y> Y)Y$$Y))Y>1Y;6Y>;Y>> c-G8c(Ac c( c$"c((c-cl|jj|jjy)aWaits until there is a connection available. Note that between the time that a connection becomes available and the time it is requested, another thread may have grabbed it. This function is mainly present as a way to avoid spawning thousands of threads to copy messages, then have them all wait for 3 available connections. It's OK if we have maxconnections + 1 or 2 threads, which is what this will help us do.N)r`rrrs rlconnectionwaitzIMAPServer.connectionwaits$    rnc<|j5tj|j|j|j |j zD]}|jg|_g|_i|_d|_ d|_ dddy#1swYyxYw)NF) rarsemaphoreresetr`r\r^r]logoutr_rfrgrs rlclosezIMAPServer.closes  % %dnnd6I6I J33d6O6OO !  !')D $(*D %DNDKDK s A* & f&Q .1'23t''(1,&tT-=-=a-@AE't,E u% & GGMM&"B C JJw  GGMM&"9 :      GGMM&"A B7++-8  f@ArncP|y|jj|jj||js|r|j n|j j||jj|jjy)zReleases a connection, returning it to the pool. :param connection: Connection object :param drop_conn: If True, the connection will be released and not be reused. This can be used to indicate broken connections.N) rarr^remove Terminaterir]r rr`)rk connection drop_conns rlreleaseconnectionzIMAPServer.releaseconnections    ##%   '' 3   9      % % , ,Z 8 ##%  rnN)F)__name__ __module__ __qualname____doc__rmrhrrrrrrr rrrrr rGrDrdrfrjrur{rnrlrr+s}\G|0" ; *9z'R 68 * F@P%JN~@ ! $&P!rnrc8eZdZd dZdZdZdZdZdZdZ y) rmNc||_||_t|_t |_|t |j|_nt |j|_|jjdy)zIf invoked without 'folder', perform a NOOP and wait for self.stop() to be called. If invoked with folder, switch to IDLE mode and synchronize once we have a new messageN)targetT) parentfolderr stop_sigrrr noopthread_IdleThread__idle setDaemon)rkrrs rlrmzIdleThread.__init__s[    - >  2DK  4DK d#rnc8|jjyN)rrnrs rlrnzIdleThread.start(s rnc8|jjyr)rsetrs rlrpzIdleThread.stop+s rnc8|jjyr)rrrs rlrzIdleThread.join.s rnc|jj} |j|r6|jj||jjyy#|j$rI|jj d|j z|jj|dd}YwxYw#|r6|jj||jjwwxYw)N(Attempting NOOP on dropped connection %sT) rrdrabortrr~ identifierr{rrors rlrzIdleThread.noop1s++//1 % LLN --g6 ""$ }}  GGLLC ++, - KK ) )'4 8G    --g6 ""$s$A%%AB=:C<B==C:C:c|jj}|j}|j}|j |j d}|j dd}|j|dtjj||d|j dd}|j|dt}|jty)NF)rL presynchookrpidle)quick postsynchook)rrrs remoterepos getfolderrgetconfcallhookrDaccounts syncfolderrunregisterthreadr )rkrrs remotefolderhookrs rl__dosynczIdleThread.__dosyncEskk'' %%)) ",,T[[,G }b1v&''U'K~r2v& ] MO,rnc fd}fd}jjs d_d}|s;jj } |j j d}|s;dj vr|j#|n0jj%d |j&z||jj)||jr*jj+j-jjs yy#t$r}|jtjjk(rDjj|tdjj|dnP|jtjjk(r(jj|tdnYd}~d}~wwxYw) z9Invoke IDLE mode until timeout or self.stop() is invoked.c|\}}}|!jjsd_jjy)a IDLE callback function invoked by imaplib2. This is invoked when a) The IMAP server tells us something while in IDLE mode, b) we get an Exception (e.g. on dropped connections, or c) the standard imaplib IDLE timeout of 29 minutes kicks in.NT)rrlneedsyncr)rUresultcb_argexc_datarks rlcallbackz#IdleThread.__idle..callbackWs=(, $FFH (;(;(= $ MM   rnc |jjj|y#|j$rGjj d|j zjj|dYywxYw)zFactorize the noop code.rTN)rrr{rrr~r)rrks rlrzIdleThread.__idle..noopeso 7   --g6 == = G$//01 --gt< =s/ABBFTrNIDLE)rzFIMAP IDLE not supported on server '%s'.Sleep until next refresh cycle.)rrlrrrdselectrrrbr% FOLDER_RETRYrrrr{FOLDERrrr~rroclear_IdleThread__dosync)rkrrr\rrs` rl__idlezIdleThread.__idleTs  7--%%'!DMG++779#NN4;;/#G!"--- h / ?AHASASTUW MM   M}} ##% E--%%''( zz%5%;%;%H%HH aA7 55gtD'7'='='D'DD aA7 s D44 H=B;G>>Hr) r|r}r~rmrnrprrrrrrnrlrmrms& $%( -@ rnrm)$rrrrurllib.requestr urllib.parse urllib.errorr!rSr5rsysrsslrr threadingrrr r r offlineimap.accountsrDr r rrofflineimap.uirrgrr}rrmrrnrlrs}$  .JJKK&H j !j !Z| | cHs"A==BB