File manager - Edit - /opt/saltstack/salt/lib/python3.10/site-packages/salt/utils/__pycache__/nacl.cpython-310.pyc
Back
o ;jw6 � @ s� d Z ddlZddlZddlZddlZddlZddlZddlZddl Zddl ZdZ z ddl Z ddlZ W n ey= dZ Y nw dZdd� Zdd� Zd d � Zd d � Zd d� Zd!dd�Zdd� Zd"dd�Zdd� Zd"dd�Zdd� Zdd � Z d d � Z d d � Z dS )#z8 Common code shared between the nacl module and runner. � NzLPyNaCl import error, perhaps missing python PyNaCl package or should update.�naclc C s t d du rdS t� S )NZ fips_modeT)Fz%nacl utils not available in FIPS mode)Z__opts__�check_requirements� r r �C/opt/saltstack/salt/lib/python3.10/site-packages/salt/utils/nacl.py� __virtual__ s r c C s t du t fS )z0 Check required libraries are available N)� REQ_ERRORr r r r r " s r c K s� | � d�}|stj�| d � d�d�}| � d�}|s&tj�| d � d�d�}| � dd�d |d |d �}t� d �}z |�td |i �� W n ttfyb } z|�| d � |i �� W Y d }~nd }~ww t |� � �t | � � �@ D ]}| | ||< qo|S ) z Return configuration �sk_file�optsZpki_dirz master/nacl�pk_filezmaster/nacl.pub�box_typeZ sealedboxN)r �skr �pkr z.configz config.get) �get�os�path�join�__virtualname__�update�__salt__� NameError�KeyError�set�keys)�kwargsr r �configZ config_key�e�kr r r � _get_config) s, � "�� r c K s� t di | ��}d}|d rtjj�|d �}|d }|sP|rPz&tjj�|d��}tjj�|�� �� d�}W d � n1 s>w Y W n t yO t d��w t � |�S )z Return sk Nr r �rb� zno key or sk_file foundr )r �salt�utils� stringutils�to_str�files�fopen� to_unicode�read�rstrip�OSError� Exception�base64� b64decode)r r �keyr �keyfr r r �_get_skI s �� � r/ c K s� t di | ��}d}|d rtjj�|d �}|d }|sP|rPz&tjj�|d��}tjj�|�� �� d�}W d � n1 s>w Y W n t yO t d��w t |�}t �|�S )z Return pk Nr r r r zno pubkey or pk_file foundr )r r r! r" r# r$ r% r& r' r( r) r* �strr+ r, )r r Zpubkeyr r. r r r �_get_pk[ s �� � r1 c K s2 d|v r|d } | du r"t jj�� }t�|�� �t�|j�� �d�S |du r+| � d�}| r�|du r�tj � | �s�t jj�� }t j j �| d��}|�t�|�� �� W d � n1 sZw Y t j j�� r�t j j�� }t j j�| |� t j jj| |ddddd � nt�| d � d | � �S td | � d ���| du r�|r�td��tj � | �r�tj � |�r�td | � d|� d ���tj � | ��rtj � |��st j j �| d��}t j j�|�� �� d�}t� |�}W d � n1 s�w Y t j�|�}t j j �|d��}|�t�|j�� �� W d � n 1 �sw Y d|� �S t jj�� }t j j �| d��}|�t�|�� �� W d � n 1 �s?w Y t j j�� �rgt j j�� }t j j�| |� t j jj| |ddddd � nt�| d � t j j �|d��}|�t�|j�� �� W d � n 1 �s�w Y d| � d|� �S )aW Use PyNaCl to generate a keypair. If no `sk_file` is defined return a keypair. If only the `sk_file` is defined `pk_file` will use the same name with a postfix `.pub`. When the `sk_file` is already existing, but `pk_file` is not. The `pk_file` will be generated using the `sk_file`. CLI Examples: .. code-block:: bash salt-call nacl.keygen salt-call nacl.keygen sk_file=/etc/salt/pki/master/nacl salt-call nacl.keygen sk_file=/etc/salt/pki/master/nacl pk_file=/etc/salt/pki/master/nacl.pub salt-call --local nacl.keygen sk_file Path to where there secret key exists. The argrument ``keyfile`` was deprecated in favor of ``sk_file``. ``keyfile`` will continue to work to ensure backwards compatbility, but please use the preferred ``sk_file``. �keyfileN)r r z.pub�wbZ full_controlZgrantT)Z reset_permsZ protectedi zsaved sk_file: zsk_file:� already exist.z6sk_file: Must be set inorder to generate a public key.z and pk_file:r r zsaved pk_file: zsaved sk_file:z pk_file: ) r �public� PrivateKeyZgenerater+ � b64encode�encodeZ public_keyr r �isfiler r! r$ r% �write�platformZ is_windowsZ win_functionsZget_current_userZwin_daclZ set_ownerZset_permissions�chmodr* r" r& r' r( r, )r r r Zkpr. Zcur_userr r r r �keygenn st � � � � � � � �r= c K �r d|v r|d |d< d|d< d|v r |d |d< d|d< t di |��d }|dkr1t| fi |��S t| fi |��S ) a4 Alias to `{box_type}_encrypt` box_type: secretbox, sealedbox(default) sk_file Path to where there secret key exists. The argrument ``keyfile`` was deprecated in favor of ``sk_file``. ``keyfile`` will continue to work to ensure backwards compatbility, but please use the preferred ``sk_file``. sk Secret key contents. The argument ``key`` was deprecated in favor of ``sk``. ``key`` will continue to work to ensure backwards compatibility, but please use the preferred ``sk``. r2 r � secretboxr r- r Nr )r �secretbox_encrypt�sealedbox_encrypt��datar r r r r �enc� s rD c K � zt d | �}W n3 ty; } z'tjj�| d��}tjj�|�� �}W d � n1 s,w Y W Y d}~nd}~ww t |fi |��}|r{t j � |�rTtd|� d���tjj�|d��}|� tjj�|�� W d � n1 sqw Y d|� �S |S )a This is a helper function to encrypt a file and return its contents. You can provide an optional output file using `out` `name` can be a local file or when not using `salt-run` can be a url like `salt://`, `https://` etc. CLI Examples: .. code-block:: bash salt-run nacl.enc_file name=/tmp/id_rsa salt-call nacl.enc_file name=salt://crt/mycert out=/tmp/cert salt-run nacl.enc_file name=/tmp/id_rsa box_type=secretbox sk_file=/etc/salt/pki/master/nacl.pub �cp.get_file_strr N�file:r4 r3 �Wrote: )r r* r r! r$ r% r" r& r' rD r r r9 r: �to_bytes��name�outr rC r �f�dr r r �enc_file� �" ��� � rO c K r> ) a4 Alias to `{box_type}_decrypt` box_type: secretbox, sealedbox(default) sk_file Path to where there secret key exists. The argrument ``keyfile`` was deprecated in favor of ``sk_file``. ``keyfile`` will continue to work to ensure backwards compatbility, but please use the preferred ``sk_file``. sk Secret key contents. The argument ``key`` was deprecated in favor of ``sk``. ``key`` will continue to work to ensure backwards compatibility, but please use the preferred ``sk``. r2 r r? r r- r Nr )r �secretbox_decrypt�sealedbox_decryptrB r r r �dec s rS c K rE )a This is a helper function to decrypt a file and return its contents. You can provide an optional output file using `out` `name` can be a local file or when not using `salt-run` can be a url like `salt://`, `https://` etc. CLI Examples: .. code-block:: bash salt-run nacl.dec_file name=/tmp/id_rsa.nacl salt-call nacl.dec_file name=salt://crt/mycert.nacl out=/tmp/id_rsa salt-run nacl.dec_file name=/tmp/id_rsa.nacl box_type=secretbox sk_file=/etc/salt/pki/master/nacl.pub rF r NrG r4 r3 rH )r r* r r! r$ r% r" r& r' rS r r r9 r: rI rJ r r r �dec_file= rP rT c K sD t jj�| �} tdi |��}tj�|�}tj�|�}t � |� | ��S )a� Encrypt data using a public key generated from `nacl.keygen`. The encryptd data can be decrypted using `nacl.sealedbox_decrypt` only with the secret key. CLI Examples: .. code-block:: bash salt-run nacl.sealedbox_encrypt datatoenc salt-call --local nacl.sealedbox_encrypt datatoenc pk_file=/etc/salt/pki/master/nacl.pub salt-call --local nacl.sealedbox_encrypt datatoenc pk='vrwQF7cNiNAVQVAiS3bvcbJUnF0cN6fU9YTZD9mBfzQ=' Nr ) r r! r" rI r1 r r5 Z PublicKey� SealedBoxr+ r7 �encrypt)rC r r �keypair�br r r rA ^ s rA c K sP | du rdS t jj�| �} tdi |��}tj�|�}tj�|�}|� t � | ��S )a� Decrypt data using a secret key that was encrypted using a public key with `nacl.sealedbox_encrypt`. CLI Examples: .. code-block:: bash salt-call nacl.sealedbox_decrypt pEXHQM6cuaF7A= salt-call --local nacl.sealedbox_decrypt data='pEXHQM6cuaF7A=' sk_file=/etc/salt/pki/master/nacl salt-call --local nacl.sealedbox_decrypt data='pEXHQM6cuaF7A=' sk='YmFkcGFzcwo=' Nr ) r r! r" rI r/ r r5 r6 rU �decryptr+ r, )rC r r rW rX r r r rR t s rR c K s8 t jj�| �} tdi |��}tj�|�}t� |� | ��S )a� Encrypt data using a secret key generated from `nacl.keygen`. The same secret key can be used to decrypt the data using `nacl.secretbox_decrypt`. CLI Examples: .. code-block:: bash salt-run nacl.secretbox_encrypt datatoenc salt-call --local nacl.secretbox_encrypt datatoenc sk_file=/etc/salt/pki/master/nacl salt-call --local nacl.secretbox_encrypt datatoenc sk='YmFkcGFzcwo=' Nr ) r r! r" rI r/ r �secret� SecretBoxr+ r7 rV )rC r r rX r r r r@ � s r@ c K sF | du rdS t jj�| �} tdi |��}tjj|d�}|�t � | ��S )a� Decrypt data that was encrypted using `nacl.secretbox_encrypt` using the secret key that was generated from `nacl.keygen`. CLI Examples: .. code-block:: bash salt-call nacl.secretbox_decrypt pEXHQM6cuaF7A= salt-call --local nacl.secretbox_decrypt data='pEXHQM6cuaF7A=' sk_file=/etc/salt/pki/master/nacl salt-call --local nacl.secretbox_decrypt data='pEXHQM6cuaF7A=' sk='YmFkcGFzcwo=' N)r- r ) r r! r" rI r/ r rZ r[ rY r+ r, )rC r r- rX r r r rQ � s rQ )NN)N) �__doc__r+ r Z salt.syspathsr Zsalt.utils.filesZsalt.utils.platformZsalt.utils.stringutilsZsalt.utils.versionsZsalt.utils.win_daclZsalt.utils.win_functionsr Z nacl.publicr Z nacl.secret� ImportErrorr r r r r/ r1 r= rD rO rS rT rA rR r@ rQ r r r r �<module> sB �� a &! '!
| ver. 1.4 |
Github
|
.
| PHP 8.2.30 | Generation time: 0 |
proxy
|
phpinfo
|
Settings