File manager - Edit - /opt/saltstack/salt/lib/python3.10/site-packages/salt/auth/__pycache__/pki.cpython-310.pyc
Back
o ;j5 � @ s� d Z ddlZddlZddlZz6z ddlmZ dZW n' ey@ dZzddl m Z W n ey9 ddl m Z Y nw ddl Z Y nw dZ W n eyO dZ Y nw e�e�Zdd� Zd d � ZdS ) az Authenticate via a PKI certificate. .. note:: This module is Experimental and should be used with caution Provides an authenticate function that will allow the caller to authenticate a user via their public cert against a pre-defined Certificate Authority. TODO: Add a 'ca_dir' option to configure a directory of CA files, a la Apache. :depends: - pyOpenSSL module � N)�X509TF)�asn1c C s t rdS dS )z/ Requires newer pycrypto and pyOpenSSL TF)�HAS_DEPS� r r �A/opt/saltstack/salt/lib/python3.10/site-packages/salt/auth/pki.py� __virtual__, s r c K s� t jj�dd� |}td d�}t�d� t�d|� t�d|� trHt� |tj �}t� |tj �}|� |� � �r@t�d|� d S t�d |� d S tj}|�|j|�}t jj�|��}|�|j|�� �}W d � n1 smw Y |�� } |�|j|�} t�� } | �| � | d } | d } t� � }|�| � |j }|d dkr�t d��|dd � }z!|� ||| | � t |� � �!� �d | ks�J d��t�d|� W d S tjj"t#fy� t�d |� Y d S w )a� Returns True if the given user cert (password is the cert contents) was issued by the CA and if cert's Common Name is equal to username. Returns False otherwise. ``username``: we need it to run the auth function from CLI/API; it should be in master config auth/acl ``password``: contents of user certificate (pem-encoded user public key); why "password"? For CLI, it's the only available name Configure the CA cert in the master config file: .. code-block:: yaml external_auth: pki: ca_file: /etc/pki/tls/ca_certs/trusted-ca.crt your_user: - .* ZArgonz>This module has been deprecated as it is known to be insecure.z config.getzexternal_auth:pki:ca_filez#Attempting to authenticate via pki.zUsing CA file: %szCertificate contents: %sz*Successfully authenticated certificate: %sTz&Failed to authenticate certificate: %sFNr � � z Number of unused bits is strange� ZCNz*Certificate's CN should match the username)$�salt�utilsZversionsZ warn_untilZ__salt__�log�debug�HAS_M2r Zload_cert_stringZ FORMAT_PEMZ load_certZverifyZ get_pubkey�info�OpenSSLZcryptoZload_certificateZ FILETYPE_PEM�filesZfopen�readZget_signature_algorithmZdump_certificateZ FILETYPE_ASN1r Z DerSequence�decodeZ DerObject�payload� Exception�dictZ get_subjectZget_components�Error�AssertionError)�username�password�kwargsZpemZ cacert_file�certZcacert�c�fZalgoZ cert_asn1ZderZder_certZder_sigZ der_sig_inZsig0�sigr r r �auth5 sZ � � � �r! )�__doc__�loggingZsalt.utils.filesr Zsalt.utils.versionsZM2Cryptor r � ImportErrorZCryptodome.Utilr Z Crypto.Utilr r � getLogger�__name__r r r! r r r r �<module> s0 � � �
| ver. 1.4 |
Github
|
.
| PHP 8.2.30 | Generation time: 0 |
proxy
|
phpinfo
|
Settings