mirror of
https://github.com/home-assistant/core
synced 2024-08-02 23:40:32 +02:00
dc880118a4
* Unused pylint suppression cleanups * Remove outdated pylint bug references * Add flake8-noqa config and note to run it every now and then * Add codes to noqa's * Unused noqa cleanups
47 lines
1.5 KiB
Python
47 lines
1.5 KiB
Python
"""Helper functions for the Cert Expiry platform."""
|
|
import socket
|
|
import ssl
|
|
|
|
from homeassistant.util import dt
|
|
|
|
from .const import TIMEOUT
|
|
from .errors import (
|
|
ConnectionRefused,
|
|
ConnectionTimeout,
|
|
ResolveFailed,
|
|
ValidationFailure,
|
|
)
|
|
|
|
|
|
def get_cert(host, port):
|
|
"""Get the certificate for the host and port combination."""
|
|
ctx = ssl.create_default_context()
|
|
address = (host, port)
|
|
with socket.create_connection(address, timeout=TIMEOUT) as sock:
|
|
with ctx.wrap_socket(sock, server_hostname=address[0]) as ssock:
|
|
cert = ssock.getpeercert()
|
|
return cert
|
|
|
|
|
|
async def get_cert_expiry_timestamp(hass, hostname, port):
|
|
"""Return the certificate's expiration timestamp."""
|
|
try:
|
|
cert = await hass.async_add_executor_job(get_cert, hostname, port)
|
|
except socket.gaierror as err:
|
|
raise ResolveFailed(f"Cannot resolve hostname: {hostname}") from err
|
|
except socket.timeout as err:
|
|
raise ConnectionTimeout(
|
|
f"Connection timeout with server: {hostname}:{port}"
|
|
) from err
|
|
except ConnectionRefusedError as err:
|
|
raise ConnectionRefused(
|
|
f"Connection refused by server: {hostname}:{port}"
|
|
) from err
|
|
except ssl.CertificateError as err:
|
|
raise ValidationFailure(err.verify_message) from err
|
|
except ssl.SSLError as err:
|
|
raise ValidationFailure(err.args[0]) from err
|
|
|
|
ts_seconds = ssl.cert_time_to_seconds(cert["notAfter"])
|
|
return dt.utc_from_timestamp(ts_seconds)
|