File manager - Edit - /opt/saltstack/salt/lib/python3.10/site-packages/salt/modules/__pycache__/mac_keychain.cpython-310.pyc
Back
o ;j� � @ s� d Z ddlZddlZddlZddlZe�e�ZdZ dd� Z ddd �Z dd d �Z dd d �Z d dd�Zd dd�Zd dd�Zdd� Zd dd�ZdS ) zO Install certificates into the keychain on Mac OS .. versionadded:: 2016.3.0 � N�keychainc C s t jj�� rtS dS )z Only work on Mac OS )Fz+Only available on Mac OS systems with pipes)�salt�utils�platformZ is_darwin�__virtualname__� r r �M/opt/saltstack/salt/lib/python3.10/site-packages/salt/modules/mac_keychain.py� __virtual__ s r �"/Library/Keychains/System.keychainFc C s@ |dur t ||� d| � d|� d|� �}|r|d7 }td |�S )a� Install a certificate cert The certificate to install password The password for the certificate being installed formatted in the way described for openssl command in the PASS PHRASE ARGUMENTS section. Note: The password given here will show up as plaintext in the job returned info. keychain The keychain to install the certificate to, this defaults to /Library/Keychains/System.keychain allow_any Allow any application to access the imported certificate without warning keychain_password If your keychain is likely to be locked pass the password and it will be unlocked before running the import Note: The password given here will show up as plaintext in the returned job info. CLI Example: .. code-block:: bash salt '*' keychain.install test.p12 test123 Nzsecurity import z -P z -k z -A�cmd.run��unlock_keychain�__salt__)�cert�passwordr Z allow_any�keychain_password�cmdr r r �install s ( r c C s. |dur t ||� d| � d|� �}td |�S )aB Uninstall a certificate from a keychain cert_name The name of the certificate to remove keychain The keychain to install the certificate to, this defaults to /Library/Keychains/System.keychain keychain_password If your keychain is likely to be locked pass the password and it will be unlocked before running the import Note: The password given here will show up as plaintext in the returned job info. CLI Example: .. code-block:: bash salt '*' keychain.install test.p12 test123 Nz security delete-certificate -c "z" r r )Z cert_namer r r r r r � uninstallM s r c C s2 d� t�| ��}td |dd�}|�dd��d�S )a List all of the installed certificates keychain The keychain to install the certificate to, this defaults to /Library/Keychains/System.keychain CLI Example: .. code-block:: bash salt '*' keychain.list_certs zUsecurity find-certificate -a {} | grep -o "alis.*" | grep -o '\"[-A-Za-z0-9.:() ]*\"'r T�Z python_shell�"� � )�format�shlex�quoter �replace�split)r r �outr r r � list_certsn s �r c C sL d}|r |� d�}d� |t�| �t�|��}td |dd�}|�dd��� S ) ag Get the friendly name of the given certificate cert The certificate to install password The password for the certificate being installed formatted in the way described for openssl command in the PASS PHRASE ARGUMENTS section Note: The password given here will show up as plaintext in the returned job info. legacy Assume legacy format for certificate. CLI Example: .. code-block:: bash salt '*' keychain.get_friendly_name /tmp/test.p12 test123 salt '*' keychain.get_friendly_name /tmp/test.p12 test123 legacy=True zopenssl pkcs12z -legacyzP{} -in {} -passin pass:{} -info -nodes -nokeys 2> /dev/null | grep friendlyName:r Tr zfriendlyName: r )r r r r r �strip)r r �legacyZ openssl_cmdr r r r r �get_friendly_name� s ��r" �userc C s d|� �}t d || d�S )a! Get the default keychain user The user to check the default keychain of domain The domain to use valid values are user|system|common|dynamic, the default is user CLI Example: .. code-block:: bash salt '*' keychain.get_default_keychain � security default-keychain -d r �Zrunas�r )r# �domainr r r r �get_default_keychain� s r( c C s d|� d| � �}t d ||d�S )a� Set the default keychain keychain The location of the keychain to set as default domain The domain to use valid values are user|system|common|dynamic, the default is user user The user to set the default keychain as CLI Example: .. code-block:: bash salt '*' keychain.set_keychain /Users/fred/Library/Keychains/login.keychain r$ z -s r r% r& )r r' r# r r r r �set_default_keychain� � r) c C s d|� d| � �}t d |� dS )at Unlock the given keychain with the password keychain The keychain to unlock password The password to use to unlock the keychain. Note: The password given here will show up as plaintext in the returned job info. CLI Example: .. code-block:: bash salt '*' keychain.unlock_keychain /tmp/test.p12 test123 z security unlock-keychain -p � r Nr& )r r r r r r r � r* r c C s^ d| dd� v rd� | |�}nd| � d�}td |�}t�d|tjtjB �}|r-|�d �S d S ) a� Returns the hash of a certificate in the keychain. name The name of the certificate (which you can get from keychain.get_friendly_name) or the location of a p12 file. password The password that is used in the certificate. Only required if your passing a p12 file. Note: This will be outputted to logs CLI Example: .. code-block:: bash salt '*' keychain.get_hash /tmp/test.p12 test123 z.p12���Nz9openssl pkcs12 -in {0} -passin pass:{1} -passout pass:{1}z security find-certificate -c "z" -m -pr z8-----BEGIN CERTIFICATE-----(.*)-----END CERTIFICATE-----� F)r r �re�search�DOTALL� MULTILINE�group)�namer r r �matchesr r r �get_hash� s � � r5 )r FN)r N)r )F)Nr# )r# N)N)�__doc__�loggingr. r Zsalt.utils.platformr � getLogger�__name__�logr r r r r r" r( r) r r5 r r r r �<module> s( �2 � ! '
| ver. 1.4 |
Github
|
.
| PHP 8.2.30 | Generation time: 0 |
proxy
|
phpinfo
|
Settings