Current File : //lib/python2.7/site-packages/salt/modules/mac_keychain.pyc
�
���^c @@ sO d Z d d l m Z m Z m Z d d l Z d d l Z d d l Z y d d l Z e Z
Wn e k
ru e Z
n Xd d l
Z e j e � Z d Z e e d � r� e j Z n' e
r� e e d � r� e j Z n d Z d � Z d e d d � Z d d d � Z d d
� Z d � Z d d d
� Z d d d � Z d � Z d d � Z d S( uO
Install certificates into the keychain on Mac OS
.. versionadded:: 2016.3.0
i ( t absolute_importt unicode_literalst print_functionNu keychainu quotec C@ s& t j j j � r" t d k r" t St S( u
Only work on Mac OS
N( t saltt utilst platformt is_darwint _quotet Nonet __virtualname__t False( ( ( s= /usr/lib/python2.7/site-packages/salt/modules/mac_keychain.pyt __virtual__# s u" /Library/Keychains/System.keychainc C@ sR | d k r t | | � n d j | | | � } | rD | d 7} n t d | � S( u�
Install a certificate
cert
The certificate to install
password
The password for the certificate being installed formatted in the way
described for openssl command in the PASS PHRASE ARGUMENTS section.
Note: The password given here will show up as plaintext in the job returned
info.
keychain
The keychain to install the certificate to, this defaults to
/Library/Keychains/System.keychain
allow_any
Allow any application to access the imported certificate without warning
keychain_password
If your keychain is likely to be locked pass the password and it will be unlocked
before running the import
Note: The password given here will show up as plaintext in the returned job
info.
CLI Example:
.. code-block:: bash
salt '*' keychain.install test.p12 test123
u! security import {0} -P {1} -k {2}u -Au cmd.runN( R t unlock_keychaint formatt __salt__( t certt passwordt keychaint allow_anyt keychain_passwordt cmd( ( s= /usr/lib/python2.7/site-packages/salt/modules/mac_keychain.pyt install, s &
c C@ s< | d k r t | | � n d j | | � } t d | � S( uB
Uninstall a certificate from a keychain
cert_name
The name of the certificate to remove
keychain
The keychain to install the certificate to, this defaults to
/Library/Keychains/System.keychain
keychain_password
If your keychain is likely to be locked pass the password and it will be unlocked
before running the import
Note: The password given here will show up as plaintext in the returned job
info.
CLI Example:
.. code-block:: bash
salt '*' keychain.install test.p12 test123
u( security delete-certificate -c "{0}" {1}u cmd.runN( R R R
R ( t cert_nameR R R ( ( s= /usr/lib/python2.7/site-packages/salt/modules/mac_keychain.pyt uninstall[ s c C@ sD d j t | � � } t d | d t �} | j d d � j d � S( u
List all of the installed certificates
keychain
The keychain to install the certificate to, this defaults to
/Library/Keychains/System.keychain
CLI Example:
.. code-block:: bash
salt '*' keychain.list_certs
uX security find-certificate -a {0} | grep -o "alis".*\" | grep -o '\"[-A-Za-z0-9.:() ]*\"'u cmd.runt python_shellu "u u
( R
R R t Truet replacet split( R R t out( ( s= /usr/lib/python2.7/site-packages/salt/modules/mac_keychain.pyt
list_certs| s c C@ sJ d j t | � t | � � } t d | d t �} | j d d � j � S( u�
Get the friendly name of the given certificate
cert
The certificate to install
password
The password for the certificate being installed formatted in the way
described for openssl command in the PASS PHRASE ARGUMENTS section
Note: The password given here will show up as plaintext in the returned job
info.
CLI Example:
.. code-block:: bash
salt '*' keychain.get_friendly_name /tmp/test.p12 test123
u^ openssl pkcs12 -in {0} -passin pass:{1} -info -nodes -nokeys 2> /dev/null | grep friendlyName:u cmd.runR u friendlyName: u ( R
R R R R t strip( R R R R ( ( s= /usr/lib/python2.7/site-packages/salt/modules/mac_keychain.pyt get_friendly_name� s u userc C@ s# d j | � } t d | d | �S( u!
Get the default keychain
user
The user to check the default keychain of
domain
The domain to use valid values are user|system|common|dynamic, the default is user
CLI Example:
.. code-block:: bash
salt '*' keychain.get_default_keychain
u security default-keychain -d {0}u cmd.runt runas( R
R ( t usert domainR ( ( s= /usr/lib/python2.7/site-packages/salt/modules/mac_keychain.pyt get_default_keychain� s c C@ s& d j | | � } t d | d | �S( u�
Set the default keychain
keychain
The location of the keychain to set as default
domain
The domain to use valid values are user|system|common|dynamic, the default is user
user
The user to set the default keychain as
CLI Example:
.. code-block:: bash
salt '*' keychain.set_keychain /Users/fred/Library/Keychains/login.keychain
u' security default-keychain -d {0} -s {1}u cmd.runR ( R
R ( R R" R! R ( ( s= /usr/lib/python2.7/site-packages/salt/modules/mac_keychain.pyt set_default_keychain� s c C@ s$ d j | | � } t d | � d S( ut
Unlock the given keychain with the password
keychain
The keychain to unlock
password
The password to use to unlock the keychain.
Note: The password given here will show up as plaintext in the returned job
info.
CLI Example:
.. code-block:: bash
salt '*' keychain.unlock_keychain /tmp/test.p12 test123
u# security unlock-keychain -p {0} {1}u cmd.runN( R
R ( R R R ( ( s= /usr/lib/python2.7/site-packages/salt/modules/mac_keychain.pyR � s c C@ s~ d | d k r% d j | | � } n d j | � } t d | � } t j d | t j t j B� } | rv | j d � St Sd S( u�
Returns the hash of a certificate in the keychain.
name
The name of the certificate (which you can get from keychain.get_friendly_name) or the
location of a p12 file.
password
The password that is used in the certificate. Only required if your passing a p12 file.
Note: This will be outputted to logs
CLI Example:
.. code-block:: bash
salt '*' keychain.get_hash /tmp/test.p12 test123
u .p12i����u9 openssl pkcs12 -in {0} -passin pass:{1} -passout pass:{1}u( security find-certificate -c "{0}" -m -pu cmd.runu8 -----BEGIN CERTIFICATE-----(.*)-----END CERTIFICATE-----i N( R
R t ret searcht DOTALLt MULTILINEt groupR
( t nameR R R t matches( ( s= /usr/lib/python2.7/site-packages/salt/modules/mac_keychain.pyt get_hash� s
( t __doc__t
__future__R R R t loggingR% t shlext pipesR t HAS_DEPSt ImportErrorR
t salt.utils.platformR t getLoggert __name__t logR t hasattrt quoteR R R R R R R R# R$ R R, ( ( ( s= /usr/lib/python2.7/site-packages/salt/modules/mac_keychain.pyt <module> s:
,
Mini Shell