File manager - Edit - /opt/saltstack/salt/lib/python3.10/site-packages/salt/modules/__pycache__/gpg.cpython-310.pyc
Back
o ;j � � @ s$ d Z ddlZddlZddlZddlZddlZddlZddlZddl Zddl m Z e� e �ZdZddddd d d dd �Zd dddddd�Zdddddd d�Zdddddd�Zd ZzddlZd ZW n eyi d ZY nw d d � Zd!d"� ZdQd#d$�Zd%d&� Zd'd(� Z dRd)d*�Z dSd+d,�Z dQd-d.�Z dRd/d0�Z dRd1d2�Z!dRd3d4�Z"e 5 6 7 8 dTd9d:��Z# dUd;d<�Z$dVd=d>�Z%dVd?d@�Z&e dVdAdB��Z' dWdCdD�Z(e dVdEdF��Z)dVdGdH�Z* dXdIdJ�Z+ dYdKdL�Z, dZdMdN�Z- d[dOdP�Z.dS )\ai Manage a GPG keychains, add keys, create keys, retrieve keys from keyservers. Sign, encrypt and sign plus encrypt text and files. .. versionadded:: 2015.5.0 .. note:: The ``python-gnupg`` library and ``gpg`` binary are required to be installed. Be aware that the alternate ``gnupg`` and ``pretty-bad-protocol`` libraries are not supported. � N)�SaltInvocationError�gpgZExpiredZUnknownz Not Trustedz Fully TrustedzMarginally TrustedzUltimately TrustedZRevoked)�e�q�n�f�m�u�r�-�1�2�3�4�5�6�Zexpired�unknownZ not_trustedZ marginallyZfullyZ ultimatelyZ Marginally)r r r r r r Z UndefinedZNeverZMarginalZFullyZUltimate)�0r r r r zkeys.openpgp.orgTFc C s t jj�d�S )z, Returns the path to the gpg binary r )�salt�utils�path�which� r r �D/opt/saltstack/salt/lib/python3.10/site-packages/salt/modules/gpg.py�_gpgO s r c C s t � sdS tr tS dS )z= Makes sure that python-gnupg and gpg are available. )FzIThe gpg execution module cannot be loaded: gpg binary is not in the path.)FzTThe gpg execution module cannot be loaded; the gnupg python module is not installed.)r �HAS_GPG_BINDINGS�__virtualname__r r r r � __virtual__W s ���r c C sF | st d d�} t d | �}|s!| dkrt� }|S td| � d���|S )z- Wrapper for user.info Salt function z config.option�userz user.infor zUser z does not exist)�__salt__�_get_user_infor )r �userinfor r r r! l s �r! c C s< | dkrt j�td d�d�}|S t j�t| �d d�}|S )z= Return default GnuPG home directory path for a user r � config.get� config_dir�gpgkeys�homez.gnupg)�osr �joinr r! )r � gnupghomer r r �_get_user_gnupghome� s �r* c s t �� �� fdd��}|S )Nc s� |� d�}|� d�}|st|�}t|�}t� }|d |d krCtj�|�rCtd |d �}|gtd |� D ] }td ||d |� q6t|�D ] }|�d �rQ||= qG� | i |��} |d |d kr}td |d �}|gtd |� D ] }td |||� qr| S ) z< Wrap gpg function calls to fix permissions r r) �uidzfile.gid_to_group�gidz file.findz file.chown�name�__) �getr* r! r' r �existsr �list� startswith) �args�kwargsr r) r" Zrun_user�groupr �key�ret��funcr r � func_wrapper� s( �z(_restore_ownership.<locals>.func_wrapper)� functools�wraps)r9 r: r r8 r �_restore_ownership� s "r= c C s |st | �}tj|d�}|S )z Create the GPG object )r) )r* �gnupgZGPG)r r) r r r r � _create_gpg� s r? c C s t | |�}|�|�}|S )z* Helper function for Listing keys )r? � list_keys)r r) �secretr �_keysr r r � _list_keys� s rC c C s* t |�}|r|�| |�}|S |�| �}|S )z; Helper function for searching keys from keyserver )r? � search_keys)�text� keyserverr r rB r r r � _search_keys� s �rG c C s� |st }g }t| ||�D ]L}|d |d d�}|�dd�}|�dd�}|�dd�}|r:t�dt�t|d ���|d< |rKt�dt�t|d ���|d < |rS|d |d < |�|� q |S ) a� Search keys from keyserver text Text to search the keyserver for, e.g. email address, keyID or fingerprint. keyserver Keyserver to use for searching for GPG keys, defaults to keys.openpgp.org. user Which user's keychain to access, defaults to user Salt is running as. Passing the user as ``salt`` will set the GnuPG home directory to the ``/etc/salt/gpgkeys``. CLI Example: .. code-block:: bash salt '*' gpg.search_keys user@example.com salt '*' gpg.search_keys user@example.com keyserver=keyserver.ubuntu.com salt '*' gpg.search_keys user@example.com keyserver=keyserver.ubuntu.com user=username �keyid�uids)rH rI �expiresN�date�length�%Y-%m-%d�created� keyLength)�_DEFAULT_KEY_SERVERrG r/ �time�strftime� localtime�float�append) rE rF r rB �_key�tmprJ rK rL r r r rD � s( �� rD c C s� g }t | |�D ]o}|d |d |d d�}|�dd�}|�dd�}|�dd�}|�d d�}|�d d�} |rDt�d t�t|d ���|d< |rUt�d t�t|d ���|d < |r]|d |d < |rgt|d |d< | rqt|d |d < |�|� q|S )a� List keys in GPG keychain user Which user's keychain to access, defaults to user Salt is running as. Passing the user as ``salt`` will set the GnuPG home directory to the ``/etc/salt/gpgkeys``. gnupghome Specify the location where GPG keyring and related files are stored. CLI Example: .. code-block:: bash salt '*' gpg.list_keys rH � fingerprintrI �rH rX rI rJ NrK rL � ownertrust�trustrM rN rO � ownerTrust�rC r/ rQ rR rS rT �LETTER_TRUST_DICTrU � r r) rB rV rW rJ rK rL � owner_trustr[ r r r r@ s6 � �� r@ c C s� g }t | |dd�D ]o}|d |d |d d�}|�dd�}|�d d�}|�d d�}|�d d�}|�d d�} |rFt�d t�t|d ���|d< |rWt�d t�t|d ���|d< |r_|d |d< |rit|d |d< | rst|d |d < |�|� q |S )a� List secret keys in GPG keychain user Which user's keychain to access, defaults to user Salt is running as. Passing the user as ``salt`` will set the GnuPG home directory to the ``/etc/salt/gpgkeys``. gnupghome Specify the location where GPG keyring and related files are stored. CLI Example: .. code-block:: bash salt '*' gpg.list_secret_keys T�rA rH rX rI rY rJ NrK rL rZ r[ rM rN rO r\ r] r_ r r r �list_secret_keys; s6 � �� rb �RSA� �Autogenerated Key�Generated by SaltStackc C s dddd�} | |||d�} t | | �} |r|| d< |r || d< |r$|| d< |r*|| d< |rCtd d �}|s>d | d < d | d< | S || d< nd| d< | jdi | ��}d|v rl|�� }|�d� |�|�d�d� d�|�d }| �|�}|j r|j | d< d| d< | S d | d < d| d< | S )a Create a key in the GPG keychain .. note:: GPG key generation requires *a lot* of entropy and randomness. Difficult to do over a remote connection, consider having another process available which is generating randomness for the machine. Also especially difficult on virtual machines, consider the `rng-tools <http://www.gnu.org/software/hurd/user/tlecarrour/rng-tools.html>`_ package. The create_key process takes awhile so increasing the timeout may be necessary, e.g. -t 15. key_type The type of the primary key to generate. It must be capable of signing. 'RSA' or 'DSA'. key_length The length of the primary key in bits. name_real The real name of the user identity which is represented by the key. name_comment A comment to attach to the user id. name_email An email address for the user. subkey_type The type of the secondary key to generate. subkey_length The length of the secondary key in bits. expire_date The expiration date for the primary and any secondary key. You can specify an ISO date, A number of days/weeks/months/years, an epoch value, or 0 for a non-expiring key. use_passphrase Whether to use a passphrase with the signing key. Passphrase is received from Pillar. user Which user's keychain to access, defaults to user Salt is running as. Passing the user as ``salt`` will set the GnuPG home directory to the ``/etc/salt/gpgkeys``. gnupghome Specify the location where GPG keyring and related files are stored. CLI Example: .. code-block:: bash salt -t 15 '*' gpg.create_key T� )�resrX �message)�key_type� key_length� name_real� name_comment� name_email� subkey_type� subkey_length� expire_date� pillar.get�gpg_passphraseFrh �'gpg_passphrase not available in pillar.ri � passphraseZ no_protectionzNo-Protection: Truez%commitz%no-protection� rX z$GPG key pair successfully generated.z Unable to generate GPG key pair.Nr ) r? r Z gen_key_input� splitlines�remove�insert�indexr( Zgen_keyrX )rj rk rl rm rn ro rp rq �use_passphraser r) r7 Z create_paramsr rs Z input_dataZ temp_datar6 r r r � create_keyn sJ L� �r| c s ddd��|r| rd�d< d�d< �S |s!| s!d�d< d�d< �S t ||�� t| ||�}� �fd d �}|r{|d }t| ||�}|r_|sMd�d< d �d< �S t||d|��d kr_d|� d��d< t||d|��d kru�d d|� d�7 < d�d< �S d�d< d�d< �S )a] Get a key from the GPG keychain keyid The keyid of the key to be deleted. fingerprint The fingerprint of the key to be deleted. delete_secret Whether to delete a corresponding secret key prior to deleting the public key. Secret keys must be deleted before deleting any corresponding public keys. user Which user's keychain to access, defaults to user Salt is running as. Passing the user as ``salt`` will set the GnuPG home directory to the ``/etc/salt/gpgkeys``. gnupghome Specify the location where GPG keyring and related files are stored. use_passphrase Whether to use a passphrase with the signing key. Passphrase is received from Pillar. .. versionadded:: 3003 CLI Example: .. code-block:: bash salt '*' gpg.delete_key keyid=3FAD9F1E salt '*' gpg.delete_key fingerprint=53C96788253E58416D20BCD352952C84C3252192 salt '*' gpg.delete_key keyid=3FAD9F1E user=username salt '*' gpg.delete_key keyid=3FAD9F1E user=username delete_secret=True Trg �rh ri Frh �/Only specify one argument, fingerprint or keyidri �'Required argument, fingerprint or keyidc sP |r t d d�}|sd�d< d�d< �S � j| ||d�}|S � j| |dd�}|S ) Nrr rs Frh rt ri �ru �Zexpect_passphrase)r Z delete_keys)rX rA r{ rs �out�r r7 r r � __delete_key0 s �z delete_key.<locals>.__delete_keyrX z;Secret key exists, delete first or pass delete_secret=True.�okzSecret key for z deleted zPublic key for z deletedz Key not available in keychain.)r? �get_key�get_secret_key�str) rH rX Z delete_secretr r) r{ r6 r� Zskeyr r� r � delete_key� s< 0 �r� c C s( i }t ||�D ]�}|d |ks |d | ks |d dd� | kr�|d |d< |d |d< |d |d< |�dd�}|�dd�}|�dd�}|�d d�} |�d d�} |r`t�d t�t|d ���|d< |rqt�d t�t|d ���|d < |ry|d |d < | r�t|d |d< | r�t|d |d < q|s�dS |S )a� Get a key from the GPG keychain keyid The key ID (short or long) of the key to be retrieved. fingerprint The fingerprint of the key to be retrieved. user Which user's keychain to access, defaults to user Salt is running as. Passing the user as ``salt`` will set the GnuPG home directory to the ``/etc/salt/gpgkeys``. gnupghome Specify the location where GPG keyring and related files are stored. CLI Example: .. code-block:: bash salt '*' gpg.get_key keyid=3FAD9F1E salt '*' gpg.get_key fingerprint=53C96788253E58416D20BCD352952C84C3252192 salt '*' gpg.get_key keyid=3FAD9F1E user=username rX rH � NrI rJ rK rL rZ r[ rM rN rO r\ F�rC r/ rQ rR rS rT r^ � rH rX r r) rW rV rJ rK rL r` r[ r r r r� W s> �� �r� c C s, i }t ||dd�D ]�}|d |ks!|d | ks!|d dd� | kr�|d |d< |d |d< |d |d< |�dd�}|�d d�}|�d d�}|�d d�} |�d d�} |rbt�d t�t|d ���|d< |rst�d t�t|d ���|d< |r{|d |d< | r�t|d |d< | r�t|d |d < q |s�dS |S )a� Get a key from the GPG keychain keyid The key ID (short or long) of the key to be retrieved. fingerprint The fingerprint of the key to be retrieved. user Which user's keychain to access, defaults to user Salt is running as. Passing the user as ``salt`` will set the GnuPG home directory to the ``/etc/salt/gpgkeys``. gnupghome Specify the location where GPG keyring and related files are stored. CLI Example: .. code-block:: bash salt '*' gpg.get_secret_key keyid=3FAD9F1E salt '*' gpg.get_secret_key fingerprint=53C96788253E58416D20BCD352952C84C3252192 salt '*' gpg.get_secret_key keyid=3FAD9F1E user=username Tra rX rH r� NrI rJ rK rL rZ r[ rM rN rO r\ Fr� r� r r r r� � s> �� �r� c C s� ddd�}t ||�}| s|std��|rCz#tjj�|d��}tjj�|�� �} W d � n1 s1w Y W n t yB td��w |� | �}|j sN|j rTd|d < |S |j r]d |d < |S |jrjd |d < d |d < |S |jsud |d < d |d < |S )a� Import a key from text or file text The text containing to import. filename The filename containing the key to import. user Which user's keychain to access, defaults to user Salt is running as. Passing the user as ``salt`` will set the GnuPG home directory to the ``/etc/salt/gpgkeys``. gnupghome Specify the location where GPG keyring and related files are stored. CLI Example: .. code-block:: bash salt '*' gpg.import_key text='-----BEGIN PGP PUBLIC KEY BLOCK-----\n ... -----END PGP PUBLIC KEY BLOCK-----' salt '*' gpg.import_key filename='/path/to/public-key-file' Trg r} � filename or text must be passed.�rbNzfilename does not exist.z Successfully imported key(s).ri z!Key(s) already exist in keychain.Frh zUnable to import key.)r? r r r �files�flopen� stringutilsZ to_unicode�read�OSErrorZ import_keysZimportedZ imported_rsaZ unchangedZ not_imported�count)rE �filenamer r) r7 r �_fpZ imported_datar r r � import_key� s8 �� � ���r� c C s� ddi}t ||�}t| t�r| �d�} |r,|r,td d�} | s#td��|j| || d�} n|j| |dd �} | rZ|rZtjj � |d ��} | � tjj � | �� W d � n1 sUw Y | rs|so|rid �|�|d < |S | |d < |S | }|S |s{d|d< |S d}|S )am Export a key from the GPG keychain keyids The key ID(s) of the key(s) to be exported. Can be specified as a comma separated string or a list. Anything which GnuPG itself accepts to identify a key for example, the key ID, fingerprint, user ID or email address could be used. secret Export the secret key identified by the ``keyids`` information passed. user Which user's keychain to access, defaults to user Salt is running as. Passing the user as ``salt`` will set the GnuPG home directory to the ``/etc/salt/gpgkeys``. gnupghome Specify the location where GPG keyring and related files are stored. use_passphrase Whether to use a passphrase to export the secret key. Passphrase is received from Pillar. .. versionadded:: 3003 output The filename where the exported key data will be written to, default is standard out. .. versionadded:: 3006.0 bare If ``True``, return the (armored) exported key block as a string without the standard comment/res dict. .. versionadded:: 3006.0 CLI Example: .. code-block:: bash salt '*' gpg.export_key keyids=3FAD9F1E salt '*' gpg.export_key keyids=3FAD9F1E secret=True salt '*' gpg.export_key keyids="['3FAD9F1E','3FBD8F1E']" user=username rh T�,rr rs rt r� Fr� �wNz(Exported key data has been written to {}�comment)r? � isinstancer� �splitr r Z export_keysr r r� r� �writer� Zto_str�format) ZkeyidsrA r r) r{ �output�barer7 r rs �result�foutr r r � export_key s< 8 �� � ���r� c C s� di g d�}t ||�}| st} t|t�r|�d�}|j| g|�R � }|jD ]7}d|v rQ|d dkr>|d �d�|d �� q%|d d krP|d �d �|d �� q%d |v r\|d �d � q%|S ) a# Receive key(s) from keyserver and add them to keychain keyserver Keyserver to use for searching for GPG keys, defaults to keys.openpgp.org keys The keyID(s) to retrieve from the keyserver. Can be specified as a comma separated string or a list. user Which user's keychain to access, defaults to user Salt is running as. Passing the user as ``salt`` will set the GnuPG home directory to the ``/etc/salt/gpgkeys``. gnupghome Specify the location where GPG keyring and related files are stored. CLI Example: .. code-block:: bash salt '*' gpg.receive_keys keys='3FAD9F1E' salt '*' gpg.receive_keys keys="['3FAD9F1E','3FBD9F2E']" salt '*' gpg.receive_keys keys=3FAD9F1E user=username T)rh Zchangesri r� r� r ri zKey {} added to keychainrX r z!Key {} already exists in keychainZproblemz Unable to add key to keychain) r? rP r� r� r� Z recv_keys�resultsrU r� )rF �keysr r) r7 r Z recv_datar� r r r � receive_keysp s, � ���r� c C s� ddd�}g d�}|r| rd|d< d|d< |S |sQ| rGt | |d �}|r9d |vr4d|d< d | � �|d< |S |d }nd|d< d | � d �|d< |S d|d< d|d< |S ||vr]d�d�|��S |� dt| � d�}t� dg}|} |dkr�tj�td d�d�} |�d| g� d} td ||| dd�} | d d ks�d|d< | d |d< |S | d r�t � d | d �} t | �d kr�||d < d!�t | d t | d" �|d< |S ||d < d#�t | d �|d< |S | d |d< |S )$a Set the trust level for a key in GPG keychain keyid The keyid of the key to set the trust level for. fingerprint The fingerprint of the key to set the trust level for. trust_level The trust level to set for the specified key, must be one of the following: expired, unknown, not_trusted, marginally, fully, ultimately user Which user's keychain to access, defaults to user Salt is running as. Passing the user as ``salt`` will set the GnuPG home directory to the ``/etc/salt/gpgkeys``. CLI Example: .. code-block:: bash salt '*' gpg.trust_key keyid='3FAD9F1E' trust_level='marginally' salt '*' gpg.trust_key fingerprint='53C96788253E58416D20BCD352952C84C3252192' trust_level='not_trusted' salt '*' gpg.trust_key keys=3FAD9F1E trust_level='ultimately' user='username' Trg r} r Frh r~ ri )r rX z Fingerprint not found for keyid zKeyID z not in GPG keychainr z ERROR: Valid trust levels - {}r� �:rv z--import-ownertrustr r# r$ r% z --homedir�rootz cmd.run_all)�stdinZrunasZ python_shell�retcoder �stderrz\d� z'Changing ownership trust from {} to {}.� z Setting ownership trust to {}.) r� r� r( �NUM_TRUST_DICTr r' r r �extend�re�findall�len�INV_NUM_TRUST_DICT) rH rX � trust_levelr r7 Z_VALID_TRUST_LEVELSr6 r� �cmd�_userZhomeDirrh Z_matchr r r � trust_key� sd � � � � �r� c C s� t | |�}|rtd d�}|std��nd}|r#|j|||d�} | j S |rotjj�|d��} |j| ||d�} W d � n1 s@w Y |rltjj�|d��} | � tjj � | j �� W d � | j S 1 sgw Y | j S td��) a� Sign message or file user Which user's keychain to access, defaults to user Salt is running as. Passing the user as ``salt`` will set the GnuPG home directory to the ``/etc/salt/gpgkeys``. keyid The keyid of the key to set the trust level for, defaults to first key in the secret keyring. text The text to sign. filename The filename to sign. output The filename where the signed file will be written, default is standard out. use_passphrase Whether to use a passphrase with the signing key. Passphrase is received from Pillar. gnupghome Specify the location where GPG keyring and related files are stored. CLI Example: .. code-block:: bash salt '*' gpg.sign text='Hello there. How are you?' salt '*' gpg.sign filename='/path/to/important.file' salt '*' gpg.sign filename='/path/to/important.file' use_passphrase=True rr rs rt N)rH ru r� �wbr� ) r? r r �signr r r� r� Z sign_filer� r� �to_bytes�data) r rH rE r� r� r{ r) r rs Z signed_datar� r� r r r r� s, 0 � � � ���r� c C sX t ||�}d}|r ||vr d�|d�|��}t�|� d|d�S g } |r+| �d|g� | r5|j| | d�} nI|rz|rZtjj � |d��} |j | || d�} W d � n1 sTw Y n$tjj � |d��} |j | | d�} W d � n1 stw Y nt d ��i } | jd ur�d | d < | j| d < | j| d< tt| j� | d< d| d< | S d| d < d| d< | S )a< Verify a message or file text The text to verify. filename The filename to verify. user Which user's keychain to access, defaults to user Salt is running as. Passing the user as ``salt`` will set the GnuPG home directory to the ``/etc/salt/gpgkeys``. gnupghome Specify the location where GPG keyring and related files are stored. signature Specify the filename of a detached signature. .. versionadded:: 2018.3.0 trustmodel Explicitly define the used trust model. One of: - pgp - classic - tofu - tofu+pgp - direct - always - auto .. versionadded:: 2019.2.0 CLI Example: .. code-block:: bash salt '*' gpg.verify text='Hello there. How are you?' salt '*' gpg.verify filename='/path/to/important.file' salt '*' gpg.verify filename='/path/to/important.file' use_passphrase=True salt '*' gpg.verify filename='/path/to/important.file' trustmodel=direct )ZpgpZclassicZtofuztofu+pgpZdirect�always�autoz.Invalid trustmodel defined: {}. Use one of: {}z, Fr} z --trust-model)� extra_argsr� Nr� Trh �username�key_idr� zThe signature is verified.ri z$The signature could not be verified.)r? r� r( �log�warningr� �verifyr r r� ZfopenZ verify_filer� r r� r� r� �VERIFY_TRUST_LEVELSr� ) rE r r� r) Z signatureZ trustmodelr Z trustmodels�msgr� Zverifiedr� r7 r r r r� P sF / � �� �� �r� c C s ddd�} t | |�} |r|rtd d�} | std��nd} |r+| j|||| ||d�} n*|rQtjj�|d ��}| j|||| ||d�} W d � n1 sKw Y ntd ��| j rq| sl|red |� �| d < | S | j | d < | S | j } | S | s�d | d< d� | j �| d < nd } t �| j� | S )a# Encrypt a message or file user Which user's keychain to access, defaults to user Salt is running as. Passing the user as ``salt`` will set the GnuPG home directory to the ``/etc/salt/gpgkeys``. recipients The key ID, fingerprint, user ID or email address associated with the recipients key can be used. text The text to encrypt. filename The filename to encrypt. output The filename where the signed file will be written, default is standard out. sign Whether to sign, in addition to encrypt, the data. ``True`` to use default key or fingerprint to specify a different key to sign with. use_passphrase Whether to use a passphrase with the signing key. Passphrase is received from Pillar. always_trust Skip key validation and assume that used keys are fully trusted. .. versionadded:: 3006.0 gnupghome Specify the location where GPG keyring and related files are stored. bare If ``True``, return the (armored) encrypted block as a string without the standard comment/res dict. CLI Example: .. code-block:: bash salt '*' gpg.encrypt text='Hello there. How are you?' recipients=recipient@example.com salt '*' gpg.encrypt filename='/path/to/important.file' recipients=recipient@example.com salt '*' gpg.encrypt filename='/path/to/important.file' sign=True use_passphrase=True \ recipients=recipient@example.com Trg �rh r� rr rs rt N)r� ru � always_trustr� r� r� z#Encrypted data has been written to r� Frh �%{}. Please check the salt-minion log.)r? r r �encryptr r r� r� Z encrypt_filer� r� r� �statusr� �errorr� )r Z recipientsrE r� r� r� r{ r� r) r� r7 r rs r� r� r r r r� � s^ A ��� �� �� � � r� c C s ddd�}t | |�}|rtd d�} | std��nd} |r%|j|| d�} n1|rRtjj�|d ��} |r;|j| | |d �} n|j| | d�} W d � n1 sLw Y ntd ��| j rr|sm|rfd |� �|d < |S | j |d < |S | j }|S |s�d|d< d� | j �|d < nd}t �| j� |S )a� Decrypt a message or file user Which user's keychain to access, defaults to user Salt is running as. Passing the user as ``salt`` will set the GnuPG home directory to the ``/etc/salt/gpgkeys``. text The encrypted text to decrypt. filename The encrypted filename to decrypt. output The filename where the decrypted data will be written, default is standard out. use_passphrase Whether to use a passphrase with the signing key. Passphrase is received from Pillar. gnupghome Specify the location where GPG keyring and related files are stored. bare If ``True``, return the (armored) decrypted block as a string without the standard comment/res dict. CLI Example: .. code-block:: bash salt '*' gpg.decrypt filename='/path/to/important.file.gpg' salt '*' gpg.decrypt filename='/path/to/important.file.gpg' use_passphrase=True Trg r� rr rs rt Nr� r� )ru r� r� z#Decrypted data has been written to r� Frh r� )r? r r �decryptr r r� r� Z decrypt_filer� r� r� r� r� r� r� ) r rE r� r� r{ r) r� r7 r rs r� r� r r r r� sH . �� �� �� � � r� )N)NN)NNF) rc rd re rf NNNNFNN)NNFNNT)NNNN)NFNNFNF)NNNNNFN)NNNNNN) NNNNNNFFNF)NNNNFNF)/�__doc__r; �loggingr' r� rQ Zsalt.utils.filesr Zsalt.utils.pathZsalt.utils.stringutilsZsalt.exceptionsr � getLogger�__name__r� r r^ r� r� r� rP r> r � ImportErrorr r r! r* r= r? rC rG rD r@ rb r| r� r� r� r� r� r� r� r� r� r� r� r r r r �<module> s� � � � � � ' 3 33 � � f BB 8 �] 8b �G �Z �x�
| ver. 1.4 |
Github
|
.
| PHP 8.2.30 | Generation time: 0 |
proxy
|
phpinfo
|
Settings