File manager - Edit - /opt/saltstack/salt/lib/python3.10/site-packages/salt/modules/__pycache__/keystore.cpython-310.pyc
Back
o ;j� � @ s� d Z ddlZddlZddlmZ ddlmZmZ e�e�Z dZ z ddl Z ddl Z dZ W n ey6 dZ Y nw dd � Zdd d �Zdd d �Zdd� Zddd�Zdd� Zdd� ZdS )z# Module to interact with keystores � N)�datetime)�CommandExecutionError�SaltInvocationError�keystoreTFc C s t du r d�t�} d| fS tS )z Check dependencies Fz4jks unavailable: {} execution module cant be loaded )� has_depends�format�__virtualname__)�msg� r �I/opt/saltstack/salt/lib/python3.10/site-packages/salt/modules/keystore.py� __virtual__ s �r c C s� t jj}t jj}i }|�d�}t j�||�}|�� �t�}t � |d�} | � d�} |� � �t�} t � | d�} | � d�} |r@||d< | |d< ||d< | |d< | |d< | t � � k |d< |S ) N�sha1z %Y%m%d%H%M%SZz%B %d %YZpem�aliasZ valid_untilZ valid_startZexpired)�OpenSSL�crypto� FILETYPE_ASN1� FILETYPE_PEM�digest�dump_certificateZ get_notAfter�decodeZ__salt_system_encoding__r �strptime�strftimeZ get_notBefore�now)r � public_cert� return_cert�ASN1�PEMZ cert_datar Zcert_pemZ raw_untilZ date_untilZ string_untilZ raw_startZ date_startZ string_startr r r � _parse_cert% s& r c C s� g }g }t j�| |�} |r| j�|�}|r||fg}n| j�� }|ra|D ]<\}}i } t|t j�r<|jd d } d| d< nt|t j �rJ|j } d| d< nt d��t | �} | � t|| |�� |�| � q$|S )a� Lists certificates in a keytool managed keystore. :param keystore: The path to the keystore file to query :param passphrase: The passphrase to use to decode the keystore :param alias: (Optional) If found, displays details on only this key :param return_certs: (Optional) Also return certificate PEM. .. warning:: There are security implications for using return_cert to return decrypted certificates. CLI Example: .. code-block:: bash salt '*' keystore.list /usr/lib/jvm/java-8/jre/lib/security/cacerts changeit salt '*' keystore.list /usr/lib/jvm/java-8/jre/lib/security/cacerts changeit debian:verisign_-_g5.pem r � �PrivateKeyEntry�type�TrustedCertEntryz*Unsupported EntryType detected in keystore)�jks�KeyStore�load�entries�get�items� isinstancer Z cert_chainr! �certr � _get_cert�updater �append) r � passphraser r Z decoded_certsr% Z entry_valueZ entry_aliasZcert_encZ entry_dataZ cert_resultr r r r �list? s2 � � r. c C s@ t jj}t jj}| d dkrt j�|| �}|S t j�|| �}|S )z] Gets the correct certificate depending of the encoding :param certificate: str r �0 )r r r r �load_certificate)� certificater r r r r r r* w s �r* c C s t jj}t jj}g }tj�|�r&tj� ||�}|j � � D ] \} } |� | � q zt d |�} W n ty< td|� ���w |rlt d |�} t j�|| �} t j�|| �} t j�|| �}t j�|| �}tj�| |g|d�}ntj�| | �}|� |� tj�d|�}|�||� dS )a6 Adds certificates to an existing keystore or creates a new one if necesssary. :param name: alias for the certificate :param keystore: The path to the keystore file to query :param passphrase: The passphrase to use to decode the keystore :param certificate: The PEM public certificate to add to keystore. Can be a string for file. :param private_key: (Optional for TrustedCert) The PEM private key to add to the keystore CLI Example: .. code-block:: bash salt '*' keystore.add aliasname /tmp/test.store changeit /tmp/testcert.crt salt '*' keystore.add aliasname /tmp/test.store changeit certificate="-----BEGIN CERTIFICATE-----SIb...BM=-----END CERTIFICATE-----" salt '*' keystore.add keyname /tmp/test.store changeit /tmp/512.cert private_key=/tmp/512.key zx509.get_pem_entryz$Invalid certificate file or string: Zrsa_rawr" T)r r r r �os�path�isfiler" r# r$ r% r' r, Z__salt__r r0 Zload_privatekeyr Zdump_privatekeyr �newr! �save)�namer r- r1 Z private_keyr r � certs_list�keystore_objectr � loaded_certZ cert_stringZ key_stringZ loaded_keyZ dumped_certZ dumped_keyZ new_entryr r r �add� s0 � r; c C sl g }t j�||�}|j�� D ] \}}| |vr|�|� qt|j�t|�kr4t j�d|�}|�||� dS dS )a� Removes a certificate from an existing keystore. Returns True if remove was successful, otherwise False :param name: alias for the certificate :param keystore: The path to the keystore file to query :param passphrase: The passphrase to use to decode the keystore CLI Example: .. code-block:: bash salt '*' keystore.remove aliasname /tmp/test.store changeit r" TF) r" r# r$ r% r' r, �lenr5 r6 )r7 r r- r8 r9 r r: r r r �remove� s � r= c C s t | �}|�d�S )z� Returns the SHA1 sum of a ASN1/PEM certificate :param name: ASN1/PEM certificate CLI Example: .. code-block:: bash salt '*' keystore.get_sha1 "(certificate_content_string)" �SHA1)r* r )r1 r r r r �get_sha1� s r? )F)NF)N)�__doc__�loggingr2 r Zsalt.exceptionsr r � getLogger�__name__�logr r" r r � ImportErrorr r r. r* r; r= r? r r r r �<module> s* � 8 3
| ver. 1.4 |
Github
|
.
| PHP 8.2.30 | Generation time: 0 |
proxy
|
phpinfo
|
Settings