a

�,�h
�@s�dd
lm
Z
mZ
ddlZddlZddlmZ
ee
edd�dd�Zee
edd�dd�Z	deeeeeeedd	�d
d�Z
dd
�ZdS)�)�Callable�OptionalN)
�Config)�config�api�path�returncCstj
�|
|�
t|�

d
S)z�Start CherryPy running an API.

    :param config: The configuration to use for CherryPy
    :param api: The API callable to be started
    :param path: The path under which the API should respond to requests
    N)�cherrypy�tree�graft�run_cherrypy)rrr�r
�L/opt/nydus/tmp/pip-target-wkfpz8uv/lib/python/primordial/wsgi/cherrytools.py�start_cherry
s
rcCs@tj
�|
|�
|�d
�
}|�d�
}|�d�
}t||||d�
dS)a*
Start CherryPy running an API on HTTPS only.

    This is a backport of how ServiceGroup & DNS
    verticals start.

    :param config: The configuration to use for CherryPy
    :param api: The API callable to be started
    :param path: The path under which the API should respond to requests
    Zserver_certZ
server_keyZ	server_ca)�	cert_path�key_path�
ca_certs_pathN)r	r
r�getr)rrr�	cert_fileZ	pkey_fileZ
ca_certs_filer
r
r�start_cherry_httpss








�r)rrrrrcCs�|�d
�
}t
jjj�|�

|t
jj_|�d�
}|�d�
}|rh|
du
rht
j�	||d|
|t
|
||�d��

n|�d�
}t
j�	||d��

t
j��
t
j��
dS)	znRun CherryPy. Called by `start_cherry`.

    :param config: The configuration to use for running CherryPy
    �restart_triggerzserver.hostzserver.https.portN�builtin)�server.socket_host�server.socket_portzserver.ssl_modulezserver.ssl_certificatezserver.ssl_private_keyzserver.ssl_contextzserver.port)rr)
rr	ZengineZ
autoreload�files�add�matchZget_intr�update�ssl_context�start�block)rrrrrZserver_hostZ
https_portZserver_portr
r
rr-s(	














�



�

rcCs*tj
tjj|d
�}|�||
�
tj|_|S)a4
Create a server SSL context requiring client certificate authentication.
    :param certificate: Path to server certificate.
    :param private_key: Path to server private key.
    :param ca_certs: Path to certificate authority chain against which client
                     certificates are validated.
    )�purpose�cafile)�ssl�create_default_context�Purpose�CLIENT_AUTH�load_cert_chain�
CERT_REQUIRED�verify_mode)ZcertificateZprivate_key�ca_certs�contextr
r
rrPs

�

r)NNN)�typingrrr#r	Zprimordial.configr�strrrrrr
r
r
r�<module>s


�



�#