CVE-2023-40217 Add the definitions Python needs to know about the new methods

Author: rickprice

Modules/_ssl.c

@@ -2125,6 +2125,36 @@ If the TLS handshake is not yet complete, None is returned");
 
 #endif /* HAVE_OPENSSL_FINISHED */
 
+/*[clinic input]
+_ssl._SSLSocket.verify_client_post_handshake
+
+Initiate TLS 1.3 post-handshake authentication
+[clinic start generated code]*/
+
+PyDoc_STRVAR(_ssl__SSLSocket_verify_client_post_handshake__doc__,
+"verify_client_post_handshake($self, /)\n"
+"--\n"
+"\n"
+"Initiate TLS 1.3 post-handshake authentication");
+
+static PyObject *
+_ssl__SSLSocket_verify_client_post_handshake_impl(PySSLSocket *self)
+/*[clinic end generated code: output=532147f3b1341425 input=6bfa874810a3d889]*/
+{
+#ifdef TLS1_3_VERSION
+    int err = SSL_verify_client_post_handshake(self->ssl);
+    if (err == 0)
+        return _setSSLError(NULL, 0, __FILE__, __LINE__);
+    else
+        Py_RETURN_NONE;
+#else
+    PyErr_SetString(PyExc_NotImplementedError,
+                    "Post-handshake auth is not supported by your "
+                    "OpenSSL version.");
+    return NULL;
+#endif
+}
+
 static PyGetSetDef ssl_getsetlist[] = {
     {"context", (getter) PySSL_get_context,
                 (setter) PySSL_set_context, PySSL_set_context_doc},
@@ -2156,6 +2186,7 @@ static PyMethodDef PySSLMethods[] = {
     {"tls_unique_cb", (PyCFunction)PySSL_tls_unique_cb, METH_NOARGS,
      PySSL_tls_unique_cb_doc},
 #endif
+    {"verify_client_post_handshake", (PyCFunction)_ssl__SSLSocket_verify_client_post_handshake_impl, METH_NOARGS, _ssl__SSLSocket_verify_client_post_handshake__doc__},
     {NULL, NULL}
 };
 
@@ -4611,26 +4642,3 @@ init_ssl(void)
         return;
 }
 
-/*[clinic input]
-_ssl._SSLSocket.verify_client_post_handshake
-
-Initiate TLS 1.3 post-handshake authentication
-[clinic start generated code]*/
-
-static PyObject *
-_ssl__SSLSocket_verify_client_post_handshake_impl(PySSLSocket *self)
-/*[clinic end generated code: output=532147f3b1341425 input=6bfa874810a3d889]*/
-{
-#ifdef TLS1_3_VERSION
-    int err = SSL_verify_client_post_handshake(self->ssl);
-    if (err == 0)
-        return _setSSLError(NULL, 0, __FILE__, __LINE__);
-    else
-        Py_RETURN_NONE;
-#else
-    PyErr_SetString(PyExc_NotImplementedError,
-                    "Post-handshake auth is not supported by your "
-                    "OpenSSL version.");
-    return NULL;
-#endif
-}