File manager - Edit - /opt/saltstack/salt/lib/python3.10/site-packages/__pycache__/gnupg.cpython-310.pyc
Back
o ;jM � @ sT d Z ddlZddlmZ ddlmZ ddlmZ ddlZddlZz ddl m Z m Z W n e y; ddl m Z m Z Y nw ddl Z ddlZddlmZmZ ddlZddlZdZd Zd ZdZejd kryz dd lmZmZmZ W n e yx dZY nw ze d Z e Z eZ e e!fZ"W n e#y� dZ e!Z e!Z e!fZ"Y nw e�$e%�Z&e&j's�e&�(e�)� � d Z*ej+j%dkr�dd� Z,n e �-d�Z.dd� Z,e�/� Z0dd� Z1dd� Z2dd� Z3dd� Z4d d � Z5d d � Z6d d!� Z7G d"d#� d#e8�Z9G d$d%� d%e9�Z:G d&d'� d'e9�Z;e �-d(e j<�Z=d)d*d+d,d-d.d/�Z>G d0d1� d1e9�Z?d2d3� Z@G d4d5� d5e9eA�ZBG d6d7� d7eB�ZCG d8d9� d9eC�ZDG d:d;� d;e8�ZEd<d=d>d?d@dAdBdCdDdEdFdGdHdIdJdK�ZFdLdM� ZGG dNdO� dOe:eE�ZHG dPdQ� dQe9�ZIG dRdS� dSe9�ZJG dTdU� dUeI�ZKG dVdW� dWe9�ZLG dXdY� dYeL�ZMG dZd[� d[e9eE�ZNG d\d]� d]e9�ZOe �-d^�Pd_��ZQe �-d`e j<�ZRe �-da�ZSG dbdc� dce8�ZTdS )da� A wrapper for the GnuPG `gpg` command. Portions of this module are derived from A.M. Kuchling's well-designed GPG.py, using Richard Jones' updated version 1.3, which can be found in the pycrypto CVS repository on Sourceforge: http://pycrypto.cvs.sourceforge.net/viewvc/pycrypto/gpg/GPG.py This module is *not* forward-compatible with amk's; some of the old interface has changed. For instance, since I've added decrypt functionality, I elected to initialize with a 'gnupghome' argument instead of 'keyring', so that gpg can find both the public and secret keyrings. I've also altered some of the returned objects in order for the caller to not have to know as much about the internals of the result classes. While the rest of ISconf is released under the GPL, I am releasing this single file under the same terms that A.M. Kuchling used for pycrypto. Steve Traugott, stevegt@terraluna.org Thu Jun 23 21:27:20 PDT 2005 This version of the module has been modified from Steve Traugott's version (see http://trac.t7a.org/isconf/browser/trunk/lib/python/isconf/GPG.py) by Vinay Sajip to make use of the subprocess module (Steve's version uses os.fork() and so does not work on Windows). Renamed to gnupg.py to avoid confusion with the previous versions. Modifications Copyright (C) 2008-2025 Vinay Sajip. All rights reserved. For the full documentation, see https://docs.red-dove.com/python-gnupg/ or https://gnupg.readthedocs.io/ � N)�datetime)� parseaddr)�StringIO)�Queue�Empty)�Popen�PIPEz0.5.6z Vinay Sajipz$31-Dec-2025 16:41:34$�nt)� STARTUPINFO�STARTF_USESHOWWINDOW�SW_HIDEFT�ntpathc C s d| S )Nz"%s"� ��sr r �9/opt/saltstack/salt/lib/python3.10/site-packages/gnupg.py� shell_quoteZ s r z[^\w%+,./:=@-]c C sL t | t�s tdt| � ��| sd}|S t�| �s | }|S d| �dd� }|S )au Quote text so that it is safe for POSIX command shells. For example, "*.py" would be converted to "'*.py'". If the text is considered safe it is returned unquoted. Args: s (str): The value to quote Returns: str: A safe version of the input, from the point of view of POSIX command shells. z Expected string type, got %sz''z'%s'�'z'\'')� isinstance� string_types� TypeError�type�UNSAFE�search�replace)r �resultr r r r c s ��c C s t s t| t�r | �t�} | S )z7 Legacy function which is a no-op on Python 3. )�_py3kr � text_type�encode� fsencodingr r r r �no_quote� s r c C s2 |dksJ �d}t tjd�rtjj}nd} z| �|�}W n ty; } ztjddd� |�|� W Y d }~nCd }~ww |s?n;|t |�7 }z|� |� W n, t y] |� |� |�� Y n tyx } zt� d� |�|� W Y d }~nd }~ww qz|�� W n ty� tjd dd� Y nw t�d |� d S ) Nr �encoding�asciiTz Exception occurred while reading� )�exc_infozError sending dataz)Exception occurred while closing: ignoredz closed output, %d bytes sent)�hasattr�sys�stdinr! �read� Exception�logger�warning� put_nowait�len�write� UnicodeErrorr � exception�close�IOError�debug)�instream� outstream� buffer_size� error_queue�sent�enc�data�er r r � _copy_data� sD �� ��� �r< c C sD |dksJ �t jt| |||fd�}d|_t�d|| |� |�� |S )Nr ��target�argsTzdata copier: %r, %r, %r)� threading�Threadr< �daemonr* r3 �start)r4 r5 r6 r7 �wrr r r �_threaded_copy_data� s rE c C s* d| }|� |�}| �|� t�d� d S )Nz%s zWrote passphrase)r r. r* r3 )�stream� passphraser! r r r �_write_passphrase� s rH c C s t | ttttf�S �N)r �list�tuple�set� frozenset)�instancer r r � _is_sequence� � rO c C s8 z ddl m} || �}W |S ty t| �}Y |S w )Nr )�BytesIO)�iorQ � ImportErrorr )r rQ �rvr r r �_make_memory_stream� s � �rU c C s> t rt| t�r | �|�} t| �S t| �tur| �|�} t| �S rI )r r �strr r rU )r r! r r r �_make_binary_stream� s � rW c @ s$ e Zd ZdZdZdd� Zdd� ZdS )� StatusHandlerzA The base class for handling status messages from `gpg`. Nc C s || _ dS )zq Initialize an instance. Args: gpg (GPG): The :class:`GPG` instance in use. N)�gpg��selfrY r r r �__init__� s zStatusHandler.__init__c C s t �)a. Handle status messages from the `gpg` child process. These are lines of the format [GNUPG:] <key> <value> Args: key (str): Identifies what the status message is. value (str): Identifies additional data, which differs depending on the key. )�NotImplementedError�r[ �key�valuer r r � handle_status� s zStatusHandler.handle_status)�__name__� __module__� __qualname__�__doc__�on_data_failurer\ ra r r r r rX � s rX c @ sp e Zd ZdZdZdZdZdZdZdZ eeeeee d�Z d d d d d �Z ddiZ dZ dd� Zdd� ZeZdd� ZdS )�VerifyzJ This class handles status messages during signature verificaton. r r# � � � � )� TRUST_EXPIRED�TRUST_UNDEFINED� TRUST_NEVER�TRUST_MARGINAL� TRUST_FULLY�TRUST_ULTIMATEzpermission deniedz file existszfile not foundznot a directory)r# �# �Q �a � zincorrect passphraseNc C sv t �| |� d| _d | _ | _| _d | _| _d | _d | _d | _ d | _ d | _ d | _ d | _ d | _d | _i | _g | _d S �NF)rX r\ �valid� fingerprint� creation_date� timestamp� signature_id�key_id�username� key_status�status�pubkey_fingerprint�expire_timestamp� sig_timestamp� trust_text� trust_level�sig_info�problemsrZ r r r r\ s zVerify.__init__c C � | j S rI )rw �r[ r r r � __nonzero__/ � zVerify.__nonzero__c s� � fdd�}|� j v r!|� _� j | � _|� j� jd� d � _d S |dv r.t�d||� d S |dkr[d� _d� _|�d d �\� _ � _ � j � � j� j � j d �� |� j � j � jd � d S |d kr�d� _|�� }|d d � \� _ }}}� _ t|�dkr~|d � _d� _|� j � j � j� jd� � j � � j� j � j � jd�� d S |dkr�d� _d� _|�d d �\� _ � _ |� j � j � jd � � j � � j� j � j d �� d S |dkr�d� _d� _|�d d �\� _ � _ |� j � j � jd � d S |dk�r)|�� }|d d� \}} } } || | | f\� _� _� _� _t|�dk�r|d � _d � _||| | | � j� jd � d S |d k�rJ|�� \} } } | | d �� j| < | | | � _� _� _ d S |d k�red� _|� _ d!� _� j � � j� j d"�� d S |d#k�r�d� _|� _ d$� _� j � � j� j d"�� d S |d%v �r�d� _|�d d �\� _ � _ |d&k�r�d'� _nd(� _� j� _|� j� j d"� � j � � j� j d"�� d S |d)v �r#d� _|d*k�r�d+� _d S d,| }|�d-d �\}}|�� �rt|�d.@ }� jj�r�|� jjv �r�d/|� jj| f }n!t|d0@ �}|d1@ }|�r� j }n� j }||v �rd/||| f }� j�s!|� _d S d S |d2k�r0d� _d3� _d S |d4v �r7d S |d5v �rAd � _d S t� d6||� d S )7Nc s2 � j }|r� j| }|�| � d S t�d| � d S )Nz!Ignored due to missing sig iD: %s)r{ r� �updater* r3 )�kwargs�sig_id�infor� r r �update_sig_info6 s z-Verify.handle_status.<locals>.update_sig_info)r� r� ��WARNING�ERROR�potential problem: %s: %sZBADSIGFz signature badr# )r �keyid�user)r� r} r ZERRSIGrk � � zsignature error)r� rz rx r )r r� rz rx ZEXPSIGzsignature expiredZGOODSIGTzsignature goodZVALIDSIGrj � � zsignature valid)rx ry rz Zexpiryr� r ZSIG_ID)ry rz Z NO_PUBKEYz no public key)r r� Z NO_SECKEY� no secret key)� EXPKEYSIGZ REVKEYSIGr� zsigning key has expiredzsigning key was revoked)� UNEXPECTED�FAILUREr� zunexpected dataz error - %s� i��� �%s: %si � i� �NODATAz signature expected but not found)ZDECRYPTION_INFOZ PLAINTEXTZPLAINTEXT_LENGTH� BEGIN_SIGNING�KEY_CONSIDERED)ZNEWSIGzmessage ignored: %r, %r) � TRUST_LEVELSr� r� r{ r* r+ rw r �splitr| r} r� �appendrz r- rx ry r� r� r� r� r~ �rsplit�isdigit�intrY � error_map�bool�GPG_SYSTEM_ERROR_CODES�GPG_ERROR_CODESr3 )r[ r_ r` r� �parts�algo� hash_algo�clsrx ry Zsig_tsZ expire_tsr� rz �messageZ operation�codeZ system_error�mappingr r� r ra 4 s� � � � � � zVerify.handle_status)rb rc rd re rl rm rn ro rp rq r� r� r� � returncoder\ r� �__bool__ra r r r r rg � s6 � �� rg c @ sb e Zd ZdZd�� ZdZdd� Zdd� ZeZ dd d d d d d�Z dddddd�Z dd� Z dd� Z dS )� ImportResultz? This class handles status messages during key import. z�count no_user_id imported imported_rsa unchanged n_uids n_subk n_sigs n_revoc sec_read sec_imported sec_dups not_importedNc C s4 t �| |� g | _g | _| jD ]}t| |d� qd S )Nr )rX r\ �results� fingerprints�counts�setattr)r[ rY r r r r r\ � s �zImportResult.__init__c C s t | j o| j�S rI )r� � not_importedr� r� r r r r� � rP zImportResult.__nonzero__zNot actually changedzEntirely new keyz New user IDszNew signaturesz New subkeyszContains private key)�0�1�2�4�8Z16zNo specific reason givenzInvalid CertificatezIssuer Certificate missingzCertificate Chain too longzError storing certificate)r� r� r� �3r� c C s� |dv r t �d||� d S |dv rd S |dkr#| j�d ddd�� d S |dkre|�� \}}g }t| j�� �D ]\}}t|�t|�B t|�krK|�|� q6d � |�d }| j�|||d �� | j �|� d S |d kr�z|�� \}}W n t y~ |}d }Y nw | j�||| j | d�� d S |d kr�|�� } t | j�D ]\} } t| | t| | �� q�d S |dkr�| j�d ddd�� d S |dkr�| j�d ddd�� d S |dkr�| j�d ddd�� d S t �d||� d S )Nr� r� )�IMPORTEDr� r� r� zNo valid data found)rx Zproblem�textZ IMPORT_OK� )rx �okr� ZIMPORT_PROBLEMz <unknown>Z IMPORT_RES� KEYEXPIREDz Key expired� SIGEXPIREDzSignature expiredr� z Other failure�message ignored: %s, %s)r* r+ r� r� r� rJ � ok_reason�itemsr� �joinr� r) �problem_reason� enumerater� r� r3 ) r[ r_ r` �reasonrx Zreasonsr� r� Z reasontextZ import_res�i�countr r r ra � sH � � �zImportResult.handle_statusc C s4 g }|� d| j � | jr|� d| j � d�|�S )zi Return a summary indicating how many keys were imported and how many were not imported. z %d importedz%d not imported�, )r� Zimportedr� r� )r[ r r r r �summary s zImportResult.summary)rb rc rd re r� r� r� r\ r� r� r� r� ra r� r r r r r� � s0 �� � %r� z\\x([0-9a-f][0-9a-f])r� � � � �� )z\nz\rz\fz\vz\bz\0c @ s e Zd ZdZdZdd� ZdS )� SendResultz@ This class handles status messages during key sending. Nc C s t �d||� d S )NzSendResult: %s: %s)r* r3 r^ r r r ra % rP zSendResult.handle_status)rb rc rd re r� ra r r r r r� s r� c C s8 t |�D ]\}}|t|�k r|| | |< qd| |< qd S )NZ unavailable)r� r- )r> Z fieldnamesr? r� �varr r r � _set_fields) s �r� c @ sH e Zd ZdZdZd�� ZdZdd� Zdd� Z d d � Z d d � Z d d� Z dS )� SearchKeysz? This class handles status messages during key search. r# z#type keyid algo length date expiresNc C s( t �| |� d | _g | _g | _i | _d S rI )rX r\ �curkeyr� �uids�uid_maprZ r r r r\ = s zSearchKeys.__init__c C s& i }t || j|� g |d< g |d< |S )�Z Internal method used to update the instance from a `gpg` status message. r� �sigs)r� �FIELDS)r[ r? r r r r � get_fieldsD s zSearchKeys.get_fieldsc C s | � |� | _}| �|� dS )r� N)r� r� r� �r[ r? r� r r r �pubN s zSearchKeys.pubc C s� || j }t�dd� |�}t�� D ] \}}|�||�}q| jd �|� | j�|� i }|| j |< t | j |�D ]\}}|||< q7dS )r� c S s t t| �d�d��S )Nr# � )�chrr� �group)�mr r r �<lambda>Z � z SearchKeys.uid.<locals>.<lambda>r� N) � UID_INDEX�ESCAPE_PATTERN�sub� BASIC_ESCAPESr� r r� r� r� r� �zipr� )r[ r? �uid�k�vZuid_data�fnZfvr r r r� U s �zSearchKeys.uidc C s d S rI r r^ r r r ra d s zSearchKeys.handle_status) rb rc rd re r� r� r� r� r\ r� r� r� ra r r r r r� 1 s r� c sl e Zd ZdZdZd�� Z� fdd�Zdd� Ze Z Z dd � Z d d � Z d d � Z dd� Zdd� Zdd� Z� ZS )�ListKeysa� This class handles status messages during listing keys and signatures. Handle pub and uid (relating the latter to the former). We don't care about (info from GnuPG DETAILS file): crt = X.509 certificate crs = X.509 certificate and private key available uat = user attribute (same as user id except for field 10). sig = signature rev = revocation signature pkd = public key data (special field format, see below) grp = reserved for gpgsm rvk = revocation key r� z�type trust length algo keyid date expires dummy ownertrust uid sig cap issuer flag token hash curve compliance updated origin keygripc s t t| ��|� d| _i | _d S rv )�superr� r\ � in_subkey�key_maprZ �� __class__r r r\ ~ s zListKeys.__init__c C sL | � |� | _}|d r|d �|d � |d= g |d< | �|� d| _dS )r� r� r� �subkeysFN)r� r� r� r� r� r r r r_ � s z ListKeys.keyc C st |d }|| j v r| jjrtd| ��| js)|| jd< | j�|� | j| j |< dS || jd d d< | j| j |< dS )r� r� z$Unexpected fingerprint collision: %srx r� ���rh N)r� rY � check_fingerprint_collisions� ValueErrorr� r� r� r� )r[ r? �fpr r r �fpr� s z ListKeys.fprc C s2 |d }| j s|| jd< dS || jd d d< dS )r� r� �keygripr� r� ri N)r� r� )r[ r? �grpr r r r � s z ListKeys.grpc C s. |� di �}i }t|| j|� |||d < d S )N� subkey_inforj )� setdefaultr� r� )r[ r� r? Zinfo_mapr� r r r �_collect_subkey_info� s z ListKeys._collect_subkey_infoc C �< |d |d ddg}| j d �|� | �| j |� d| _dS )r� rj ru Nr� T�r� r� r r� �r[ r? Zsubkeyr r r r� � s z ListKeys.subc C s8 |d dddg}| j d �|� | �| j |� d| _dS )r� rj Nr� Tr r r r r �ssb� s z ListKeys.ssbc C s& | j d �|d |d |d f� dS )r� r� rj r� r� N)r� r� �r[ r? r r r �sig� s &z ListKeys.sig)rb rc rd re r� r� r� r\ r_ r� Zsecr� r r r� r r � __classcell__r r r� r r� h s � r� c @ s e Zd ZdZdd� ZdS )�ScanKeyszB This class handles status messages during scanning keys. c C r )r� rj r� Nr� Tr r r r r r� � s z ScanKeys.subN)rb rc rd re r� r r r r r � s r c @ s, e Zd Zdd� ZereZdS eZdd� ZdS )� TextHandlerc C s | j �| jj| jj�S rI )r: �decoderY r! � decode_errorsr� r r r �_as_text� s zTextHandler._as_textc C r� rI )r: r� r r r �__str__� r� zTextHandler.__str__N)rb rc rd r r r Z __unicode__r r r r r � s r zno specific reason givenz not foundzambiguous specificationzwrong key usage� key revoked� key expiredz no crl knownz crl too oldzpolicy mismatchznot a secret keyzkey not trustedzmissing certificatezmissing issuer certificatez key disabledz syntax error in specification)r r# rh ri rj rk r� r� � r� r� ru � � � c C sv | � � }t|�dkr|d d� \}}n|d }d}d| }z t|�}t�||�}W n ty4 |}Y nw d||f S )Nrh r z <no ident>zunexpected return code %rz%s:%s)r� r- r� �_INVALID_KEY_REASONS�getr� )r r� r� �identZ unexpectedr_ r r r r �&_determine_invalid_recipient_or_signer� s � r c @ s, e Zd ZdZdd� Zdd� ZeZdd� ZdS ) �CryptzN This class handles status messages during encryption and decryption. c C s. t �| |� d| _d| _d| _d| _d | _d S )N� F)rg r\ r: r� r � status_detailr| rZ r r r r\ � zCrypt.__init__c C � t | j�S rI )r� r� r� r r r r� � zCrypt.__nonzero__c C s� |dv r t �d||� d S |dkr | jdvrd| _d S d S |dv r,|�dd��� | _d S |d kr<| jd kr:d | _d S d S |d krEd | _d S |dkrU| jd krSd| _d S d S |dkr^d| _d S |dkrjd| _d| _d S |dkrvd| _d| _d S |dkr�| js�d| _nd| j | _t|�| _d S |dkr�d| _d S |d kr�d | _d S |d kr�d | _d S |d kr�|�dd!�d" | _ d S |d#v r�d S t � | ||� d S )$Nr� r� r� )�decryption failedzno data was provided)�NEED_PASSPHRASE�BAD_PASSPHRASE�GOOD_PASSPHRASEZMISSING_PASSPHRASE�KEY_NOT_CREATEDZNEED_PASSPHRASE_PIN�_r� �DECRYPTION_FAILEDr� r" ZNEED_PASSPHRASE_SYMzneed symmetric passphraseZBEGIN_DECRYPTIONzdecryption incompleteZBEGIN_ENCRYPTIONzencryption incompleteZDECRYPTION_OKAYz decryption okTZEND_ENCRYPTIONz encryption ok�INV_RECPzinvalid recipientzinvalid recipient: %sr� r � SIG_CREATEDz sig createdr� z sig expiredZENC_TOr# r )� USERID_HINTZGOODMDCZEND_DECRYPTIONZCARDCTRLZBADMDCZ SC_OP_FAILUREZ SC_OP_SUCCESSZPINENTRY_LAUNCHED) r* r+ r r �lowerr� r r r� r| rg ra r^ r r r ra ! sT � � � zCrypt.handle_statusN)rb rc rd re r\ r� r� ra r r r r r s r c @ �8 e Zd ZdZdZdd� Zdd� ZeZdd� Zd d � Z dS ) �GenKeyzC This class handles status messages during key generation. Nc C �" t �| |� d | _d| _d | _d S �Nr �rX r\ r rx r rZ r r r r\ W � zGenKey.__init__c C r rI �r� rx r� r r r r� ] r! zGenKey.__nonzero__c C r� rI �rx r� r r r r b r� zGenKey.__str__c C s� |dv r t �d||� d S |dkr$|�� }|d d� \| _| _d| _d S |dkr3|�dd��� | _d S |d v r9d S t �d ||� d S ) Nr� r� � KEY_CREATEDrh r� r& r' r� )ZPROGRESSr% r� ) r* r+ r� r rx r r r, r3 )r[ r_ r` r� r r r ra e s zGenKey.handle_status� rb rc rd re r� r\ r� r� r ra r r r r r. P � r. c @ r- ) � AddSubkeyzD This class handles status messages during subkey addition. Nc C r/ r0 r1 rZ r r r r\ { r2 zAddSubkey.__init__c C r rI r3 r� r r r r� � r! zAddSubkey.__nonzero__c C r� rI r4 r� r r r r � r� zAddSubkey.__str__c C sN |dv r t �d||� d S |dkr |�� \| _| _d| _d S t �d||� d S )Nr� r� r5 r� r� )r* r+ r� r rx r r3 r^ r r r ra � s zAddSubkey.handle_statusr6 r r r r r8 t r7 r8 c s e Zd ZdZ� fdd�Z� ZS )� ExportResultz? This class handles status messages during key export. c s" |dv rd S t t| ��||� d S )N)ZEXPORTEDZ EXPORT_RES)r� r9 ra r^ r� r r ra � s zExportResult.handle_status)rb rc rd re ra r r r r� r r9 � s r9 c @ sD e Zd ZdZdZdd� Zdd� Zddd d �Zd d � Zd d� Z e Z dS )� DeleteResultzA This class handles status messages during key deletion. Nc C s t �| |� d| _d S �Nr� )rX r\ r rZ r r r r\ � s zDeleteResult.__init__c C r� rI �r r� r r r r � r� zDeleteResult.__str__z No such keyz Must delete secret key firstzAmbiguous specification)r� r� r� c C s2 |dkr| j �|d| �| _d S t�d||� d S )NZDELETE_PROBLEMzUnknown error: %rr� )r� r r r* r3 r^ r r r ra � s zDeleteResult.handle_statusc C s | j dkS r; r< r� r r r r� � r! zDeleteResult.__nonzero__) rb rc rd re r� r\ r r� ra r� r� r r r r r: � s �r: c @ s e Zd ZdZdS )� TrustResultzF This class handles status messages during key trust setting. N)rb rc rd re r r r r r= � s r= c @ s0 e Zd ZdZdZdd� Zdd� ZeZdd� ZdS ) �Signz< This class handles status messages during signing. Nc C s: t �| |� d | _d | _d | _d | _d | _d | _d | _d S rI ) rX r\ r r� rx r r r| r} rZ r r r r\ � s z Sign.__init__c C s | j d uS rI r4 r� r r r r� � r! zSign.__nonzero__c C s� |dv r t �d||� d S |dv rd| _d S |dkr d| _d S |dkr6|�� \| _}| _}| _| _d| _d S |d krF|�d d �\| _| _ d S |d krOd | _d S |dv rg| jsZd| _nd| j | _t |�| _ d S |dv rmd S t � d||� d S )N)r� r� r� r� )r� r� r Z KEYREVOKEDr r* zsignature createdr+ r� r# r$ zbad passphrase)ZINV_SGNRr) zinvalid signerzinvalid signer: %s)r# r% r� r� ) r* r+ r r� r r� rz rx r| r} r r r3 )r[ r_ r` r� r� r r r ra � s* zSign.handle_status) rb rc rd re r� r\ r� r� ra r r r r r> � s r> c @ s@ e Zd ZdZdd� Zdd� Zdd� Zdd � Zd d � Zd d � Z dS )� AutoLocateKeyz� This class handles status messages during key auto-locating. fingerprint: str key_length: int created_at: date email: str email_real_name: str c C s. t �| |� d | _d | _d | _d | _d | _d S rI )rX r\ rx r � created_at�email�email_real_namerZ r r r r\ r zAutoLocateKey.__init__c C sP |dkr|� � \}}}|| _|dd� | _d S |dkr&|�� � � d | _d S d S )Nr� r# r� r� r )r� rA rB �striprx )r[ r_ r` r' rA Z display_namer r r ra s �zAutoLocateKey.handle_statusc C s dS )z� Internal method to handle the 'pub' status message. `pub` message contains the fingerprint of the public key, its type and its creation date. Nr r r r r r� s zAutoLocateKey.pubc C s8 t �t|d ��| _|d }t|�\}}|| _|| _d S )Nrk r� )r � fromtimestampr� r@ r rA rB )r[ r? Zraw_email_contentrA Z real_namer r r r� s zAutoLocateKey.uidc C s t |d �| _d S )Nrh )r� Z key_lengthr r r r r� # rP zAutoLocateKey.subc C s | j p|d | _ d S )Nr� r4 r r r r r� & s zAutoLocateKey.fprN) rb rc rd re r\ ra r� r� r� r� r r r r r? � s r? z\bcfg:version:(\d+(\.\d+)*)r" z [0-9a-f]+$zgpg: public key is (\w+)c @ s� e Zd ZdZdZdZdZeee e e e e eeeeeeed�Z d\dd �Zd d � Zd]d d �Zdd� Zd^dd�Zd_dd�Zdd� Z dd� Z d`dd�Z dd � Z d d � Z d d � Z! ! dad"d#�Z"d$d%� Z#dbd&d'�Z$dcd(d)�Z%d_d*d+�Z&d,d-� Z'd.d/� Z(d0d1� Z)ddd2d3�Z* ! ! ded4d5�Z+d6d7� Z,d8d9� Z-dfd:d;�Z.d<d=� Z/d>d?� Z0dgdAdB�Z1dcdCdD�Z2dEdF� Z3dGdH� Z4dhdLdM�Z5 ! didNdO�Z6dPdQ� Z7dRdS� Z8djdTdU�Z9dVdW� Z:dcdXdY�Z;dZd[� Z<dS )k�GPGzL This class provides a high-level programmatic interface for `gpg`. N�stricti @ )�crypt�delete�generate� addSubkey�import�sendrJ �scanr �sign�trust�verify�export�auto-locate-keyrY Fc C sz || _ || _|| _|rtj�|�std| ��|r!t|t�r!|g}|| _ |r.t|t�r.|g}|| _ || _ || _ t|t �r?|g}|| _d| _d| _|rXtj�| j�sXt�| jd� z | �ddg�} W n tyv d| j } t�| � t| ��w | jd | �} | j| | | jd � | jd kr�td | j| jf ��t� | j �} | s�d| _ nd � d �} t dd� | �!� d �"| �D ��| _ d| _#dS )a9 Initialize a GPG process wrapper. Args: gpgbinary (str): A pathname for the GPG binary to use. gnupghome (str): A pathname to where we can find the public and private keyrings. The default is whatever `gpg` defaults to. keyring (str|list): The name of alternative keyring file to use, or a list of such keyring files. If specified, the default keyring is not used. options (list): A list of additional options to pass to the GPG binary. secret_keyring (str|list): The name of an alternative secret keyring file to use, or a list of such keyring files. env (dict): A dict of environment variables to be used for the GPG subprocess. z.gnupghome should be a directory (it isn't): %sNzlatin-1i� z --list-config� --with-colonsz1Unable to run gpg (%s) - it may not be available.rP �r' r zError invoking gpg: %s: %s�.r" c S � g | ]}t |��qS r )r� ��.0r r r r � <listcomp>� r� z GPG.__init__.<locals>.<listcomp>F)$� gpgbinary� gnupghome�env�os�path�isdirr� r r �keyring�secret_keyring�verbose� use_agentrV �options�on_datar! �makedirs�_open_subprocess�OSErrorr* r0 � result_map�_collect_outputr' r� �stderr� VERSION_REr r: �versionr rK �groupsr� r� )r[ rZ r[ rb rc r` rd ra r\ �p�msgr r� �dotr r r r\ L sN � " z GPG.__init__c C s | j ddddg}dtjv r|�ddg� |r(t| d�r(| jd kr(d d g|d d �< |�g d �� | jr<|�dt| j�g� | jrS|� d� | jD ] }|�dt|�g� qG| j re| j D ] }|�dt|�g� qY|rn|�ddg� | j rv|� d� | j r|�| j � |�|� |S )aN Make a list of command line elements for GPG. The value of ``args`` will be appended. The ``passphrase`` argument needs to be True if a passphrase will be sent to `gpg`, else False. Args: args (list[str]): A list of arguments. passphrase (str): The passphrase to use. z --status-fdr� z--no-ttyz --no-verboseZ DEBUG_IPCz--debugZipcrm �rh r# z--pinentry-modeZloopbackr# )�--fixed-list-modez--batchrS z --homedirz--no-default-keyringz --keyringz--secret-keyringz--passphrase-fdr� z --use-agent) rZ r] �environ�extendr% rm r[ r r` r� ra rc rd )r[ r? rG �cmdr� r r r � make_args� s0 z GPG.make_argsc C sv ddl m} | �||�}| jrt||�� tsd }n t� }t|_t|_ t |dt t t || j d�}t �d|j||�� |S )Nr )� list2cmdlineF)�shellr' �stdoutrk � startupinfor\ r� )� subprocessrx rw rb �printr r ZdwFlagsr Z wShowWindowr r r\ r* r3 �pid)r[ r? rG Z debug_printrv �sir r r r rg � s zGPG._open_subprocessc C s� g } |� � }t|�dkrnB|�|� |�� }| jr t|� t�d|� |dd� dkrO|dd � }|�d d�}|d }t|�dkrG|d }nd}|� ||� qd� |�|_ d S )NTr z%sr� z [GNUPG:] r# r ) �readliner- r� �rstriprb r} r* r3 r� ra r� rk )r[ rF r �lines�line�L�keywordr` r r r �_read_response� s( �zGPG._read_response� c C s |dksJ �g }d } |� |�}t|�dkr8|r7z||� W n ty6 } z |d u r,|}W Y d }~nd }~ww n<trEt�d|d d� � d} |rlz ||�} | du} W n tyk } z |d u ra|}W Y d }~nd }~ww | rs|�|� q tr�t|�� � |�|_ nd� |�|_ |r�||_ d S d S )Nr Tz chunk: %r� Fr ) r( r- r) �log_everythingr* r3 r� r r r� r: rf ) r[ rF r re r6 �chunksrf r: r; r� Zon_data_resultr r r � _read_data� sH �� �� � �zGPG._read_datac C s t �| j�|j�}tj| j||fd�}d|_t� d|� |� � |j }tj| j ||| j | jfd�}d|_t� d|� |� � |�� |�� |durO|�d� |�� |j |_} | dkrct�d| � |durwz|�� W n tyv Y nw |�� |�� | S ) a Drain the subprocesses output streams, writing the collected output to the result. If a writer thread (writing to the subprocess) is given, make sure it's joined before returning. If a stdin stream is given, close it before returning. r= Tzstderr reader: %rzstdout reader: %rN�{�G�z�?r z&gpg returned a non-zero error code: %d)�codecs� getreaderr! rk r@ rA r� rB r* r3 rC rz r� re r6 r� �waitr� r+ r1 r2 ) r[ �processr �writerr' rk Zrrrz Zdr�rcr r r rj s6 �zGPG._collect_outputc C s t |d�S )z� A simplistic check for a file-like object. Args: fileobj (object): The object to test. Returns: bool: ``True`` if it's a file-like object, else ``False``. r( )r% )r[ �fileobjr r r � is_valid_file3 s zGPG.is_valid_filec C sN | � |�r |}|S t|t�std| ��tj�|�s td| ��t|d�}|S )Nz Not a valid file or path: %szNo such file: %s�rb) r� r � path_typesr r] r^ �existsr� �open)r[ �fileobj_or_pathr r r r � _get_fileobj> s � zGPG._get_fileobjc C s� | � |�}d}zV| �||du�}|s t�| j�|j�} n|j} |r(t| || j� t� } t|| | j | �}| � |||| � z| � � } | � t yJ Y nw |W |rT|� d� ||ur]|�� S S |re|� d� ||urn|�� w w )z;Handle a call to GPG - pass input data, collect output dataNr� )r� rg r� � getwriterr! r' rH r rE r6 rj � get_nowaitr r� r1 ) r[ r? r� r rG �binaryr� r� ro r' r7 �excr r r � _handle_ioI s: � �� �zGPG._handle_ioc K �* t || j�}| j|fi |��}|�� |S )a� Sign a message. This method delegates most of the work to the `sign_file()` method. Args: message (str|bytes): The data to sign. kwargs (dict): Keyword arguments, which are passed to `sign_file()`: * keyid (str): The key id of the signer. * passphrase (str): The passphrase for the key. * clearsign (bool): Whether to use clear signing. * detach (bool): Whether to produce a detached signature. * binary (bool): Whether to produce a binary signature. * output (str): The path to write a detached signature to. * extra_args (list[str]): Additional arguments to pass to `gpg`. )rW r! � sign_filer1 )r[ r� r� �fr r r r rN k s zGPG.signc C s. t j�|�r |�dg� |�dt|�g� dS )a: If writing to a file which exists, avoid a confirmation message by updating the *args* value in place to set the output path and avoid any cpmfirmation prompt. Args: args (list[str]): A list of arguments. output (str): The path to the outpur file. �--yesz--outputN)r] r^ r� ru r )r[ r? �outputr r r � set_output_without_confirmation� s z#GPG.set_output_without_confirmationc C s d|vo d|vo d|vS )a� Confirm that the passphrase doesn't contain newline-type characters - it is passed in a pipe to `gpg`, and so not checking could lead to spoofing attacks by passing arbitrary text after passphrase and newline. Args: passphrase (str): The passphrase to test. Returns: bool: ``True`` if it's a valid passphrase, else ``False``. r� r� r� r )r[ rG r r r �is_valid_passphrase� s zGPG.is_valid_passphraseTc C s| |r | � |�s td��t�d|� |rdg} ndg} |r"| �d� n|r)| �d� |r4| �dt|�g� |r<| �| |� |rC| �|� | jd | �} | � |�} | � | |d u�} d } zIz)| j }|rgt ||| j � t� }t| || j|�} z|�� }|� ty� Y nw W n ty� t�d � Y nw W | r�| �d � | |ur�| �� n| r�| �d � | |ur�| �� w w | �| | | |� | S ) a] Sign data in a file or file-like object. Args: fileobj_or_path (str|file): The file or file-like object to sign. keyid (str): The key id of the signer. passphrase (str): The passphrase for the key. clearsign (bool): Whether to use clear signing. detach (bool): Whether to produce a detached signature. binary (bool): Whether to produce a binary signature. output (str): The path to write a detached signature to. extra_args (list[str]): Additional arguments to pass to `gpg`. �Invalid passphrasez sign_file: %sz-sz-saz --detach-signz --clearsign� --default-keyrN Nzerror writing messager� )r� r� r* r3 r� ru r r� ri r� rg r' rH r! r rE r6 r� r r2 �loggingr0 r� r1 rj )r[ r� r� rG Z clearsign�detachr� r� � extra_argsr? r r� ro r� r' r7 r� r r r r� � sb � �� �� �z GPG.sign_filec K r� )a� Verify the signature on the contents of the string *data*. This method delegates most of the work to `verify_file()`. Args: data (str|bytes): The data to verify. kwargs (dict): Keyword arguments, which are passed to `verify_file()`: * fileobj_or_path (str|file): A path to a signature, or a file-like object containing one. * data_filename (str): If the signature is a detached one, the path to the data that was signed. * close_file (bool): If a file-like object is passed in, whether to close it. * extra_args (list[str]): Additional arguments to pass to `gpg`. )rW r! � verify_filer1 )r[ r: r� r� r r r r rP � s z GPG.verifyc C s� t �d||� | jd | �}dg}|r|�|� |du r'| j|||dd� |S t �d� ddl}|jd d �\}} |�� } |rB|�� t �d | � t � || � t �|� |� t | �� |� t |�� z| � |�} | j| || jd � W t �| � |S t �| � w ) a� Verify a signature. Args: fileobj_or_path (str|file): A path to a signature, or a file-like object containing one. data_filename (str): If the signature is a detached one, the path to the data that was signed. close_file (bool): If a file-like object is passed in, whether to close it. extra_args (list[str]): Additional arguments to pass to `gpg`. zverify_file: %r, %rrP �--verifyNT�r� z Handling detached verificationr �pygpg-��prefixzWrote to temp file: %rrT )r* r3 ri ru r� �tempfile�mkstempr( r1 r] r. r� r rg rj r' �remove) r[ r� Z data_filenameZ close_filer� r r? r� �fdr� r ro r r r r� s2 � �zGPG.verify_filec C sh t �d||dd� � | jd | �}dg}|r |�|� |�t|�dg� t|�}| j|||dd� |S ) a Verify the signature in sig_filename against data in memory Args: sig_filename (str): The path to a signature. data (str|bytes): The data to be verified. extra_args (list[str]): Additional arguments to pass to `gpg`. zverify_data: %r, %r ...Nr� rP r� �-Tr� )r* r3 ri ru r rU r� )r[ Z sig_filenamer: r� r r? rF r r r � verify_data- s zGPG.verify_datac C sp | j d | �}t�d|dd� � t|| j�}dg}|r!|�|� | j||||dd� t�d|j� |�� |S ) a Import the key_data into our keyring. Args: key_data (str|bytes): The key data to import. passphrase (str): The passphrase to use. extra_args (list[str]): Additional arguments to pass to `gpg`. rK zimport_keys: %rNr� �--importT�rG r� zimport_keys result: %r) ri r* r3 rW r! ru r� �__dict__r1 )r[ �key_datar� rG r r: r? r r r � import_keysF s zGPG.import_keysc K sD t |d��}| j|�� fi |��W d � S 1 sw Y dS )z� Import the key data in key_path into our keyring. Args: key_path (str): A path to the key data to be imported. r� N)r� r� r( )r[ Zkey_pathr� r� r r r �import_keys_file\ s $�zGPG.import_keys_filec O � | j d | �}t�d|� td| j�}dt|�g}d|v r$|�|d � |�d� |�dd� |D �� | j|||d d � t�d |j � |� � |S ) z� Import one or more keys from a keyserver. Args: keyserver (str): The key server hostname. keyids (str): A list of key ids to receive. rK z recv_keys: %rr � --keyserverr� z --recv-keysc S rV r �r �rX r� r r r rY v r� z!GPG.recv_keys.<locals>.<listcomp>Tr� zrecv_keys result: %r� ri r* r3 rW r! r ru r� r� r� r1 �r[ � keyserver�keyidsr� r r: r? r r r � recv_keysf s z GPG.recv_keysc O r� ) z� Send one or more keys to a keyserver. Args: keyserver (str): The key server hostname. keyids (list[str]): A list of key ids to send. rL z send_keys: %rr r� r� z --send-keysc S rV r r� r� r r r rY � r� z!GPG.send_keys.<locals>.<listcomp>Tr� zsend_keys result: %rr� r� r r r � send_keys~ s z GPG.send_keysc C s |r | � |�s td��d}|r | jdkr |du r |r td��d}t|�r,dd� |D �}nt|�g}|r:d d� |D �}d | g}|rL| jdkrL|�d d � |�|� | jd | �}|r_| jdk ro| �|�} | j | || j d� |S t d| j �} z| j || ||dd� W | �� |S | �� w )a9 Delete the indicated keys. Args: fingerprints (str|list[str]): The keys to delete. secret (bool): Whether to delete secret keys. passphrase (str): The passphrase to use. expect_passphrase (bool): Whether a passphrase is expected. exclamation_mode (bool): If specified, a `'!'` is appended to each fingerprint. This deletes only a subkey or an entire key, depending on what the fingerprint refers to. .. note:: Passphrases Since GnuPG 2.1, you can't delete secret keys without providing a passphrase. However, if you're expecting the passphrase to go to `gpg` via pinentry, you should specify expect_passphrase=False. (It's only checked for GnuPG >= 2.1). r� r_ rr NzHFor GnuPG >= 2.1, deleting secret keys needs a passphrase to be providedz secret-keyc S rV r r� rW r r r rY � r� z#GPG.delete_keys.<locals>.<listcomp>c S s g | ]}|d �qS )�!r )rX r� r r r rY � r� z --delete-%sr r� rH rT r Tr� )r� r� rm rO r �insertru ri rg rj r' rW r! r� r1 ) r[ r� �secretrG �expect_passphraseZexclamation_mode�whichr? r ro r� r r r � delete_keys� s6 � �zGPG.delete_keysc C sL |r | � |�s td��d}|r d}| jdkr |du r |r td��t|�r,dd� |D �}nt|�g}d | g} |r=| �d � |rF| �d d g� |rN| �| |� | �|� | jd | �} |ra| jdk rp| � | �} | j | | | j d� n t d| j �} z| j| | | |dd� W | �� n| �� w t�d| jdd� � | j} |r�| �| j | j�} | S )at Export the indicated keys. A 'keyid' is anything `gpg` accepts. Args: keyids (str|list[str]): A single keyid or a list of them. secret (bool): Whether to export secret keys. armor (bool): Whether to ASCII-armor the output. minimal (bool): Whether to pass `--export-options export-minimal` to `gpg`. passphrase (str): The passphrase to use. expect_passphrase (bool): Whether a passphrase is expected. output (str): If specified, the path to write the exported key(s) to. .. note:: Passphrases Since GnuPG 2.1, you can't export secret keys without providing a passphrase. However, if you're expecting the passphrase to go to `gpg` via pinentry, you should specify expect_passphrase=False. (It's only checked for GnuPG >= 2.1). r� r z -secret-keyrr NzIFor GnuPG >= 2.1, exporting secret keys needs a passphrase to be providedc S rV r r� r� r r r rY � r� z#GPG.export_keys.<locals>.<listcomp>z --export%s�--armorz--export-optionszexport-minimalrQ rT Tr� z export_keys result[:100]: %r�d )r� r� rm rO r r� ru r� ri rg rj r' rW r! r� r1 r* r3 r: r r ) r[ r� r� �armorZminimalrG r� r� r� r? r ro r� r r r � export_keys� s> zGPG.export_keysc C s� |j �| j| j��� }d�� }|D ]/}| jrt|� t� d|� � � |s' |S |� � �d�}|s1q|d }||v r@t ||�|� q|S )Nz pub uid sec fpr sub ssb sig grp�line: %r�:r ) r: r r! r � splitlinesr� rb r} r* r3 r� rC �getattr)r[ r r� �valid_keywordsr� r� r� r r r �_decode_result s" ��zGPG._decode_resultc C s* | j | | �}| j|||jd� | �|�S )NrT )ri rj r' r� )r[ ro �kindr r r r �_get_list_output) s zGPG._get_list_outputc C s� |rd}n|r dnd}d| ddg}| j dkr |�d� |r+t|t�r&|g}|�|� | �|�}| �|d�}|D ](}|d } |�d �} | r`| D ]} | \} } }}| | }| |d < ||d < ||d < qGq8|S )aZ List the keys currently in the keyring. Args: secret (bool): Whether to list secret keys. keys (str|list[str]): A list of key ids to match. sigs (bool): Whether to include signature information. Returns: list[dict]: A list of dictionaries with key information. z secret-keysr� �keysz --list-%s� --fingerprintrr z--with-keygriprJ r� r � capabilityrx r )rm r� r r ru rg r� r )r[ r� r� r� r� r? ro r r_ r� r �skZskidr� r� r �dr r r � list_keys/ s0 �z GPG.list_keysc C sJ | j dkr g d�}n t�d� g d�}|�t|�� | �|�}| �|d�S )a List details of an ascii armored or binary key file without first importing it to the local keyring. Args: filename (str): The path to the file containing the key(s). .. warning:: Warning: Care is needed. The function works on modern GnuPG by running: $ gpg --dry-run --import-options import-show --import filename On older versions, it does the *much* riskier: $ gpg --with-fingerprint --with-colons filename rr �z --dry-runz--import-optionsz import-showr� �TTrying to list packets, but if the file is not a keyring, might accidentally decrypt�z--with-fingerprintrS rs rM )rm r* r+ r� r rg r� )r[ �filenamer? ro r r r � scan_keys[ s z GPG.scan_keysc C s� | j d | �}t�d|dd� � t|| j�}| jdkr!g d�}n t�d� g d�}| j|||d d � t�d |j� |� � | � |�S ) a� List details of an ascii armored or binary key without first importing it to the local keyring. Args: key_data (str|bytes): The key data to import. .. warning:: Warning: Care is needed. The function works on modern GnuPG by running: $ gpg --dry-run --import-options import-show --import filename On older versions, it does the *much* riskier: $ gpg --with-fingerprint --with-colons filename rM z scan_keys: %rNr� rr r� r� r� Tr� zscan_keys result: %r) ri r* r3 rW r! rm r+ r� r� r1 r� )r[ r� r r: r? r r r � scan_keys_memu s zGPG.scan_keys_mem� pgp.mit.educ C s� |� � }t�|�r d| }ddt|�g}|r|�|� |�dt|�g� | �|�}| jd | �}| j|||jd� |j � | j | j �� � }ddg}|D ]-} | jrSt| � t�d | �� � | s^qJ| � � �d �} | shqJ| d } | |v rwt|| �| � qJ|S ) a search a keyserver by query (using the `--search-keys` option). Args: query(str): The query to use. keyserver (str): The key server hostname. extra_args (list[str]): Additional arguments to pass to `gpg`. �0xr� r� z --search-keysr rT r� r� r� r� r )rC � HEX_DIGITS_RE�matchr ru rg ri rj r' r: r r! r r� rb r} r* r3 r� r� r� ) r[ �queryr� r� r? ro r r� r� r� r� r� r r r � search_keys� s4 �zGPG.search_keysc K sl |pg d�}dd� |�d|g}| jd | �}d|v r!|�|d � | �|�}| j|||jd� | �|� |S )a� Auto locate a public key by `email`. Args: email (str): The email address to search for. mechanisms (list[str]): A list of mechanisms to use. Valid mechanisms can be found here https://www.gnupg.org/documentation/manuals/gnupg/GPG-Configuration-Options.html under "--auto-key-locate". Default: ['wkd', 'ntds', 'ldap', 'cert', 'dane', 'local'] )ZwkdZntdsZldap�certZdane�localz--auto-key-locate�,z --locate-keysrR r� rT )r� ri ru rg rj r' r� )r[ rA Z mechanismsr� r? r r� r r r �auto_locate_key� s zGPG.auto_locate_keyc C s> dg}| j d | �}t|| j�}| j|||dd� |�� |S )z� Generate a key; you might use `gen_key_input()` to create the input. Args: input (str): The input to the key creation operation. z --gen-keyrI Tr� )ri rW r! r� r1 )r[ �inputr? r r� r r r �gen_key� s z GPG.gen_keyc K s i }|� dd�}t|�� �D ]\}}|�dd��� }t|��� r$|||< q|�dd� d|vr5|�dd � |�d d � tj � d �pHtj � d �pHd}t � � }|�dd|�dd�|f � d|� d� }t|�� �D ] \}}|d||f 7 }qh|r{|d7 }|d7 }|S )z� Generate `--gen-key` input (see `gpg` documentation in DETAILS). Args: kwargs (dict): A list of keyword arguments. Returns: str: A string suitable for passing to the `gen_key()` method. � no_protectionFr' r� zKey-TypeZRSAZ key_curvez Key-Lengthi z Name-RealzAutogenerated KeyZLOGNAME�USERNAME� unspecifiedz Name-Emailz%s@%sr� z Key-Type: %s z%s: %s z%no-protection z%commit ) �poprJ r� r �titlerV rC r r] rt r �socket� gethostname) r[ r� Zparmsr� r_ �valZlogname�hostname�outr r r � gen_key_input� s* � zGPG.gen_key_input�rsa�encryptr� c C s| | j d dk r td��|std��|r | �|�s td��d|||t|�g}| jd | �}td| j�}| j||||d d � |S ) ae Add subkeys to a master key, Args: master_key (str): The master key. master_passphrase (str): The passphrase for the master key. algorithm (str): The key algorithm to use. usage (str): The desired uses for the subkey. expire (str): The expiration date of the subkey. r rh zNot available in GnuPG 1.xz#No master key fingerprint specifiedr� z--quick-add-keyrJ r Tr� ) rm r] r� r� rV ri rW r! r� ) r[ Z master_keyZmaster_passphrase� algorithm�usageZexpirer? r r� r r r � add_subkey s zGPG.add_subkeyc C s |r | � |�s td��dg} |r!dg} |dur | �dt|�g� n|s'td��t|�s.|f}|D ] } | �dt| �g� q0|rC| �d� |rK| �| |� |du rU| �d � n |ra| �d d t|�g� |rj| �d d g� | rq| �| � | jd | �} | j| || |dd� t � d| j dd� � | S )a* Encrypt data in a file or file-like object. Args: fileobj_or_path (str|file): A path to a file or a file-like object containing the data to be encrypted. recipients (str|list): A key id of a recipient of the encrypted data, or a list of such key ids. sign (str): If specified, the key id of a signer to sign the encrypted data. always_trust (bool): Whether to always trust keys. passphrase (str): The passphrase to use for a signature. armor (bool): Whether to ASCII-armor the output. output (str): A path to write the encrypted output to. symmetric (bool): Whether to use symmetric encryption, extra_args (list[str]): A list of additional arguments to pass to `gpg`. r� z --encryptz --symmetricTz --cipher-algoz2No recipients specified with asymmetric encryptionz --recipientr� z--signr� � --trust-model�alwaysrG r� zencrypt result[:100]: %rNr� ) r� r� ru r rO r� r� ri r� r* r3 r: ) r[ r� � recipientsrN � always_trustrG r� r� Z symmetricr� r? Z recipientr r r r � encrypt_file8 s< � zGPG.encrypt_filec K s, t || j�}| j||fi |��}|�� |S )a� Encrypt the message contained in the string *data* for *recipients*. This method delegates most of the work to `encrypt_file()`. Args: data (str|bytes): The data to encrypt. recipients (str|list[str]): A key id of a recipient of the encrypted data, or a list of such key ids. kwargs (dict): Keyword arguments, which are passed to `encrypt_file()`: * sign (str): If specified, the key id of a signer to sign the encrypted data. * always_trust (bool): Whether to always trust keys. * passphrase (str): The passphrase to use for a signature. * armor (bool): Whether to ASCII-armor the output. * output (str): A path to write the encrypted output to. * symmetric (bool): Whether to use symmetric encryption, * extra_args (list[str]): A list of additional arguments to pass to `gpg`. )rW r! r r1 )r[ r: r r� r r r r r� | s z GPG.encryptc K r� )ac Decrypt the data in *message*. This method delegates most of the work to `decrypt_file()`. Args: message (str|bytes): The data to decrypt. A default key will be used for decryption. kwargs (dict): Keyword arguments, which are passed to `decrypt_file()`: * always_trust: Whether to always trust keys. * passphrase (str): The passphrase to use. * output (str): If specified, the path to write the decrypted data to. * extra_args (list[str]): A list of extra arguments to pass to `gpg`. )rW r! � decrypt_filer1 �r[ r� r� r: r r r r �decrypt� s z GPG.decryptc C sr |r | � |�s td��dg}|r| �||� |r |�ddg� |r&|�|� | jd | �}| j||||dd� |S )a� Decrypt data in a file or file-like object. Args: fileobj_or_path (str|file): A path to a file or a file-like object containing the data to be decrypted. always_trust: Whether to always trust keys. passphrase (str): The passphrase to use. output (str): If specified, the path to write the decrypted data to. extra_args (list[str]): A list of extra arguments to pass to `gpg`. r� � --decryptr r rG Tr� )r� r� r� ru ri r� )r[ r� r rG r� r� r? r r r r r � s zGPG.decrypt_filec K r� )a� Get the list of recipients for an encrypted message. This method delegates most of the work to `get_recipients_file()`. Args: message (str|bytes): The encrypted message. kwargs (dict): Keyword arguments, which are passed to `get_recipients_file()`: * extra_args (list[str]): A list of extra arguments to pass to `gpg`. )rW r! �get_recipients_filer1 r r r r �get_recipients� s zGPG.get_recipientsc C s` g d�}|r |� |� | jd | �}| j|||dd� g }t�|j�D ] }|�|�d�� q#|S )a0 Get the list of recipients for an encrypted message in a file or file-like object. Args: fileobj_or_path (str|file): A path to a file or file-like object containing the encrypted data. extra_args (list[str]): A list of extra arguments to pass to `gpg`. )r z --list-onlyz-vrG Tr� r# )ru ri r� � PUBLIC_KEY_RE�finditerrk r� r� )r[ r� r� r? r Zidsr� r r r r � s zGPG.get_recipients_filec C s t j}||vrd�t|��}td||f ��|| d }ddl}zi|jdd�\}}g }t|t�r3|g}|D ] } |� d| |f � q5t j �|�t j } t � d | � t �|| �| j�� t �|� | jd | �} | �d |g�} | j| | | jd � | jdkr�td | j ��W t �|� | S t �|� w )aY Set the trust level for one or more keys. Args: fingerprints (str|list[str]): A key id for which to set the trust level, or a list of such key ids. trustlevel (str): The trust level. This is one of the following. * ``'TRUST_EXPIRED'`` * ``'TRUST_UNDEFINED'`` * ``'TRUST_NEVER'`` * ``'TRUST_MARGINAL'`` * ``'TRUST_FULLY'`` * ``'TRUST_ULTIMATE'`` r� z-Invalid trust level: "%s" (must be one of %s)r# r Nr� r� z%s:%s:zwriting ownertrust info: %srO z--import-ownertrustrT z&gpg returned an error - return code %d)rg r� r� �sortedr� r� r� r r r� r] �linesepr* r3 r. r r! r1 ri rg rj r' r� r� ) r[ r� Z trustlevelZlevelsZpossr� r� r� r� r� r r ro r r r � trust_keys� s4 � �zGPG.trust_keys)rY NFFNNNN)F)Nr� )NNrv )NNTFFNN)NTNrI )FNTF)FTFNTN)FNF)r� N)Nr� r� r� )NFNTNFN)FNNN)=rb rc rd re r� r r6 r r: r. r8 r� r� r� r r� r> r= rg r9 r? ri r\ rw rg r� r� rj r� r� r� rN r� r� r� rP r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r r r� r r r r r r r r r rE 0 s� � �O # ## " �N ' 9 �I , ' 5& �D rE )Ure r� r � email.utilsr rR r r� r] �queuer r rS �rer� r| r r r& r@ � __version__� __author__�__date__r �namer r Zunicoder Z basestringr r �bytesrV r� � NameError� getLoggerrb r* �handlers� addHandler� NullHandlerr� r^ r �compiler �getfilesystemencodingr r r< rE rH rO rU rW �objectrX rg r� �Ir� r� r� r� rJ r� r� r r r r r r. r8 r9 r: r= r> r? r rl r� r rE r r r r �<module> s� # � � � ! & CW� 7e�A$ 11
| ver. 1.4 |
Github
|
.
| PHP 8.2.30 | Generation time: 0 |
proxy
|
phpinfo
|
Settings