Current File : //opt/plesk/python/2.7/lib/python2.7/site-packages/paramiko/pkey.pyc
�
��Abc @ sW d Z d d l Z d d l m Z d d l Z d d l m Z d d l Z d d l Z d d l Z d d l
Z
d d l m Z d d l
m Z d d l m Z m Z m Z d d l m Z d d l m Z d d
l m Z m Z m Z m Z m Z d d l m Z m Z d d l m! Z! d
Z" d � Z# d e$ f d � � YZ% d e$ f d � � YZ& d S( s!
Common API for all public keys.
i����N( t unhexlify( t md5( t default_backend( t
serialization( t
algorithmst modest Cipher( t util( t o600( t ut bt encodebytest decodebytest string_types( t SSHExceptiont PasswordRequiredException( t Messages openssh-key-v1 c C s� t j | d � } d | k o) d k n r2 | S| d k rM t d � � n xC t | � D]5 } t j | | | � | d k rZ t d � � qZ qZ W| | S( Ni����i i i s Invalid keyi ( t sixt
indexbytesR t range( t datat padding_lengtht i( ( sB /opt/plesk/python/2.7/lib/python2.7/site-packages/paramiko/pkey.pyt _unpad_openssh/ s t PKeyc B s� e Z d Z i i e j d 6d d 6d d 6e j d 6d 6i e j d 6d d 6d d 6e j d 6d 6i e j d 6d d 6d
d 6e j d 6d 6Z d Z d
Z
e j d � Z
e j d � Z d, d, d � Z d � Z d � Z d � Z d � Z d � Z e d � � Z d � Z d � Z d � Z d � Z d � Z d, d � Z d � Z e d, d � � Z e d, d � � Z! d, d � Z" d, d! � Z# d, d" � Z$ d, d# � Z% d$ � Z& d% � Z' d& � Z( d' � Z) d, d( � Z* d, d) � Z+ d* � Z, d+ � Z- RS(- s%
Base class for public keys.
t cipheri t keysizet blocksizet modes AES-128-CBCi s AES-256-CBCi i s DES-EDE3-CBCi i s3 ^-{5}BEGIN (RSA|DSA|EC|OPENSSH) PRIVATE KEY-{5}\s*$s1 ^-{5}END (RSA|DSA|EC|OPENSSH) PRIVATE KEY-{5}\s*$c C s d S( s[
Create a new instance of this public key type. If ``msg`` is given,
the key's public part(s) will be filled in from the message. If
``data`` is given, the key's public part(s) will be filled in from
the string.
:param .Message msg:
an optional SSH `.Message` containing a public key of this type.
:param str data: an optional string containing a public key
of this type
:raises: `.SSHException` --
if a key cannot be created from the ``data`` or ``msg`` given, or
no key was passed in.
N( ( t selft msgR ( ( sB /opt/plesk/python/2.7/lib/python2.7/site-packages/paramiko/pkey.pyt __init___ s c C s t � S( s�
Return a string of an SSH `.Message` made up of the public part(s) of
this key. This string is suitable for passing to `__init__` to
re-create the key object later.
( t bytes( R ( ( sB /opt/plesk/python/2.7/lib/python2.7/site-packages/paramiko/pkey.pyt asbytesq s c C s
| j � S( N( R! ( R ( ( sB /opt/plesk/python/2.7/lib/python2.7/site-packages/paramiko/pkey.pyt __str__y s c C sJ t | � } t | � } | | k r1 t | | � St | j � | j � � S( sB
Compare this key to another. Returns 0 if this key is equivalent to
the given key, or non-0 if they are different. Only the public parts
of the key are compared, so a public key will compare equal to its
corresponding private key.
:param .PKey other: key to compare to.
( t hasht cmpR! ( R t othert hst ho( ( sB /opt/plesk/python/2.7/lib/python2.7/site-packages/paramiko/pkey.pyt __cmp__ s
c C s | j | j k S( N( t _fields( R R% ( ( sB /opt/plesk/python/2.7/lib/python2.7/site-packages/paramiko/pkey.pyt __eq__� s c C s
t | j � S( N( R# R) ( R ( ( sB /opt/plesk/python/2.7/lib/python2.7/site-packages/paramiko/pkey.pyt __hash__� s c C s
t � d S( N( t NotImplementedError( R ( ( sB /opt/plesk/python/2.7/lib/python2.7/site-packages/paramiko/pkey.pyR) � s c C s d S( s�
Return the name of this private key implementation.
:return:
name of this private key type, in SSH terminology, as a `str` (for
example, ``"ssh-rsa"``).
t ( ( R ( ( sB /opt/plesk/python/2.7/lib/python2.7/site-packages/paramiko/pkey.pyt get_name� s c C s d S( s�
Return the number of significant bits in this key. This is useful
for judging the relative security of a key.
:return: bits in the key (as an `int`)
i ( ( R ( ( sB /opt/plesk/python/2.7/lib/python2.7/site-packages/paramiko/pkey.pyt get_bits� s c C s t S( sf
Return ``True`` if this key has the private part necessary for signing
data.
( t False( R ( ( sB /opt/plesk/python/2.7/lib/python2.7/site-packages/paramiko/pkey.pyt can_sign� s c C s t | j � � j � S( s�
Return an MD5 fingerprint of the public part of this key. Nothing
secret is revealed.
:return:
a 16-byte `string <str>` (binary) of the MD5 fingerprint, in SSH
format.
( R R! t digest( R ( ( sB /opt/plesk/python/2.7/lib/python2.7/site-packages/paramiko/pkey.pyt get_fingerprint� s c C s" t t | j � � � j d d � S( s+
Return a base64 string containing the public part of this key. Nothing
secret is revealed. This format is compatible with that used to store
public key files or recognized host keys.
:return: a base64 `string <str>` containing the public part of the key.
s
R- ( R R R! t replace( R ( ( sB /opt/plesk/python/2.7/lib/python2.7/site-packages/paramiko/pkey.pyt
get_base64� s c C s t � S( s�
Sign a blob of data with this private key, and return a `.Message`
representing an SSH signature message.
:param str data:
the data to sign.
:param str algorithm:
the signature algorithm to use, if different from the key's
internal name. Default: ``None``.
:return: an SSH signature `message <.Message>`.
.. versionchanged:: 2.9
Added the ``algorithm`` kwarg.
( R ( R R t algorithm( ( sB /opt/plesk/python/2.7/lib/python2.7/site-packages/paramiko/pkey.pyt
sign_ssh_data� s c C s t S( s\
Given a blob of data, and an SSH message representing a signature of
that data, verify that it was signed with this key.
:param str data: the data that was signed.
:param .Message msg: an SSH signature message
:return:
``True`` if the signature verifies correctly; ``False`` otherwise.
( R0 ( R R R ( ( sB /opt/plesk/python/2.7/lib/python2.7/site-packages/paramiko/pkey.pyt verify_ssh_sig� s
c C s | d | d | � } | S( s�
Create a key object by reading a private key file. If the private
key is encrypted and ``password`` is not ``None``, the given password
will be used to decrypt the key (otherwise `.PasswordRequiredException`
is thrown). Through the magic of Python, this factory method will
exist in all subclasses of PKey (such as `.RSAKey` or `.DSSKey`), but
is useless on the abstract PKey class.
:param str filename: name of the file to read
:param str password:
an optional password to use to decrypt the key file, if it's
encrypted
:return: a new `.PKey` based on the given private key
:raises: ``IOError`` -- if there was an error reading the file
:raises: `.PasswordRequiredException` -- if the private key file is
encrypted, and ``password`` is ``None``
:raises: `.SSHException` -- if the key file is invalid
t filenamet password( ( t clsR9 R: t key( ( sB /opt/plesk/python/2.7/lib/python2.7/site-packages/paramiko/pkey.pyt from_private_key_file� s c C s | d | d | � } | S( s
Create a key object by reading a private key from a file (or file-like)
object. If the private key is encrypted and ``password`` is not
``None``, the given password will be used to decrypt the key (otherwise
`.PasswordRequiredException` is thrown).
:param file_obj: the file-like object to read from
:param str password:
an optional password to use to decrypt the key, if it's encrypted
:return: a new `.PKey` based on the given private key
:raises: ``IOError`` -- if there was an error reading the key
:raises: `.PasswordRequiredException` --
if the private key file is encrypted, and ``password`` is ``None``
:raises: `.SSHException` -- if the key file is invalid
t file_objR: ( ( R; R> R: R< ( ( sB /opt/plesk/python/2.7/lib/python2.7/site-packages/paramiko/pkey.pyt from_private_key� s c C s t d � � d S( s�
Write private key contents into a file. If the password is not
``None``, the key is encrypted before writing.
:param str filename: name of the file to write
:param str password:
an optional password to use to encrypt the key file
:raises: ``IOError`` -- if there was an error writing the file
:raises: `.SSHException` -- if the key is invalid
s Not implemented in PKeyN( t Exception( R R9 R: ( ( sB /opt/plesk/python/2.7/lib/python2.7/site-packages/paramiko/pkey.pyt write_private_key_file s c C s t d � � d S( s�
Write private key contents into a file (or file-like) object. If the
password is not ``None``, the key is encrypted before writing.
:param file_obj: the file-like object to write into
:param str password: an optional password to use to encrypt the key
:raises: ``IOError`` -- if there was an error writing to the file
:raises: `.SSHException` -- if the key is invalid
s Not implemented in PKeyN( R@ ( R R> R: ( ( sB /opt/plesk/python/2.7/lib/python2.7/site-packages/paramiko/pkey.pyt write_private_key s c C s1 t | d � � } | j | | | � } Wd QX| S( s�
Read an SSH2-format private key file, looking for a string of the type
``"BEGIN xxx PRIVATE KEY"`` for some ``xxx``, base64-decode the text we
find, and return it as a string. If the private key is encrypted and
``password`` is not ``None``, the given password will be used to
decrypt the key (otherwise `.PasswordRequiredException` is thrown).
:param str tag: ``"RSA"`` or ``"DSA"``, the tag used to mark the
data block.
:param str filename: name of the file to read.
:param str password:
an optional password to use to decrypt the key file, if it's
encrypted.
:return: data blob (`str`) that makes up the private key.
:raises: ``IOError`` -- if there was an error reading the file.
:raises: `.PasswordRequiredException` -- if the private key file is
encrypted, and ``password`` is ``None``.
:raises: `.SSHException` -- if the key file is invalid.
t rN( t opent _read_private_key( R t tagR9 R: t fR ( ( sB /opt/plesk/python/2.7/lib/python2.7/site-packages/paramiko/pkey.pyt _read_private_key_file, s c C s� | j � } d } | j j | | � } t | � d } x7 | | k rq | rq | d 7} | j j | | � } q; W| d 7} | r� | j d � n d } | t | � k s� | d k r� t d j | � � � n | } | j j | | � } x7 | | k r"| r"| d 7} | j j | | � } q� W| | k rP| j | | | � }
| j
} nI | d k r�| j | | | !| � }
| j } n t d j | | � � � | |
f S( Ni i s not a valid {} private key filet OPENSSHs# encountered {} key, expected {} key(
t readlinest BEGIN_TAGt matcht lent groupt NoneR t formatt END_TAGt _read_private_key_pemt _PRIVATE_KEY_FORMAT_ORIGINALt _read_private_key_openssht _PRIVATE_KEY_FORMAT_OPENSSH( R RF RG R: t linest startt mt
line_ranget keytypet endR t pkformat( ( sB /opt/plesk/python/2.7/lib/python2.7/site-packages/paramiko/pkey.pyRE E s2
c C s( d } t | j | j j | � � � d S( Ns= {}._read_private_key() spat out an unknown key format id '{}'( R RP t __class__t __name__( R t id_t err( ( sB /opt/plesk/python/2.7/lib/python2.7/site-packages/paramiko/pkey.pyt _got_bad_key_format_idh s c C s( d } i } | d 7} xg | t | � k r | | j d � } t | � d k rT Pn | d j � | | d j � <| d 7} q Wy& t t d j | | | !� � � } Wn. t j j k
r� } t
d j | � � � n Xd | k r� | S| d } | d k rt
d j | � � � n y | d j d
� \ }
} Wn t
d � � n X|
| j k rot
d j |
� � � n | d k r�t d
� � n | j |
d } | j |
d }
| j |
d } t t | � � } t j t | | |
� } t | | � | | � d t � �j � } | j | � | j � S( Ni i s : R- s base64 decoding error: {}s proc-types 4,ENCRYPTEDs" Unknown private key structure "{}"s dek-infot ,s( Can't parse DEK-info in private key files Unknown private key cipher "{}"s Private key file is encryptedR R R t backend( RM t splitt stript lowerR R
t joint base64t binasciit ErrorR RP t
_CIPHER_TABLERO R R R t generate_key_bytesR R R t decryptort updatet finalize( R RV R[ R: RW t headerst lineR t et proc_typet encryption_typet saltstrR R R t saltR< Rm ( ( sB /opt/plesk/python/2.7/lib/python2.7/site-packages/paramiko/pkey.pyRR l sH
&
'c C s~ y t t d j | � � � } Wn. t j j k
rO } t d j | � � � n X| d } | t k ru t d � � n | j | d d � } | \ } } } }
} |
d k r� t d � � n | j | d � \ } }
| t d � k r�| t d
� k rt
j } n< | t d � k r!t
j } n t d j | j
d
� � � � | d k rZt d � � n | j | d � \ } } t j t | � t | � d | d t �} | d } | d } t t j | � | | � t � � j � } | j |
� } | | j � 7} n9 | t d � k r)| t d � k r)|
} n t d � � | j | d � } | \ } } } } | | k rtt d � � n t | � S( s�
Read the new OpenSSH SSH2 private key format available
since OpenSSH version 6.5
Reference:
https://github.com/openssh/openssh-portable/blob/master/PROTOCOL.key
R- s base64 decoding error: {}i s) unexpected OpenSSH key header encounteredt sssuri s. unsupported: private keyfile has multiple keyst sst bcrypts
aes256-cbcs
aes256-ctrs, unknown cipher `{}` used in private key files utf-8s private key file is encryptedt sui0 t ignore_few_roundsi t nones. unknown cipher or kdf used in private key filet uusrs/ OpenSSH private key file checkints do not matchN( R R
Rg Rh Ri Rj R RP t OPENSSH_AUTH_MAGICt _uint32_cstruct_unpackR t CBCt CTRt decodeRO R Ry t kdft TrueR R t AESR Rm Rn Ro R ( R RV R: R Rr t
auth_magict cstructR t kdfnamet kdf_optionst num_pubkeyst remaindert pubkeyt privkey_blobR Rv t roundst key_ivR< t ivRm t decrypted_privkeyt checkint1t checkint2RZ t keydata( ( sB /opt/plesk/python/2.7/lib/python2.7/site-packages/paramiko/pkey.pyRT � s^
'$ c C s� g } d } yYxR| D]J} | d k r~ t j d | | | d !� d } | d 7} | | | | !} | | 7} | j | � n | d k r� t j d | | | d !� d } | d 7} | | | | !} | | 7} t j | t � } | j | � q | d k r9t j d | | | d !� d } | d 7} | j | � q | d k r | | } | j | � Pq q WWn% t k
r�}
t t |
� � � n Xt | � S( s
Used to read new OpenSSH private key format.
Unpacks a c data structure containing a mix of 32-bit uints and
variable length strings prefixed by 32-bit uint size field,
according to the specified format. Returns the unpacked vars
in a tuple.
Format strings:
s - denotes a string
i - denotes a long integer, encoded as a byte string
u - denotes a 32-bit unsigned integer
r - the remainder of the input string, returned as a string
i t ss >Li R R RC (
t structt unpackt appendR t inflate_longR� R@ R t strt tuple( R R t strformatt arrt idxRG t s_sizeR� R R Rr ( ( sB /opt/plesk/python/2.7/lib/python2.7/site-packages/paramiko/pkey.pyR � s8
!
!
!
c
C sq t j t j Bt j Bt g } t j t j | | � d � �0 } t j | t � | j | | | d | �Wd QXd S( s�
Write an SSH2-format private key file in a form that can be read by
paramiko or openssh. If no password is given, the key is written in
a trivially-encoded format (base64) which is completely insecure. If
a password is given, DES-EDE3-CBC is used.
:param str tag:
``"RSA"`` or ``"DSA"``, the tag used to mark the data block.
:param filename: name of the file to write.
:param str data: data blob that makes up the private key.
:param str password: an optional password to use to encrypt the file.
:raises: ``IOError`` -- if there was an error writing the file.
t wR: N( t ost O_WRONLYt O_TRUNCt O_CREATR t fdopenRD t chmodt _write_private_key( R R9 R< RP R: t argsRG ( ( sB /opt/plesk/python/2.7/lib/python2.7/site-packages/paramiko/pkey.pyt _write_private_key_file" s !c C s\ | d k r t j � } n t j t | � � } | j | j t j j | | � j � � d S( N(
RO R t NoEncryptiont BestAvailableEncryptionR
t writet
private_bytest Encodingt PEMR� ( R RG R< RP R: t
encryption( ( sB /opt/plesk/python/2.7/lib/python2.7/site-packages/paramiko/pkey.pyR� @ s c C s� | } | } t | t � r' | g } n t | t � rB | g } n | d k r] t d � � n | j � | j � } | | k r� nV | | k r� | j t | j � � � | j � n$ d } t | j
| j j | � � � d S( s�
Perform message type-checking & optional certificate loading.
This includes fast-forwarding cert ``msg`` objects past the nonce, so
that the subsequent fields are the key numbers; thus the caller may
expect to treat the message as key material afterwards either way.
The obtained key type is returned for classes which need to know what
it was (e.g. ECDSA.)
s Key object may not be emptys% Invalid key (class: {}, data type: {}N(
t
isinstanceR
RO R t rewindt get_textt load_certificateR R! t
get_stringRP R] R^ ( R R t key_typet cert_typet key_typest
cert_typest type_R` ( ( sB /opt/plesk/python/2.7/lib/python2.7/site-packages/paramiko/pkey.pyt _check_type_and_load_certL s"
c C s� t | t � r d } n! t j j | � r3 d } n d } t t | � | � } | j j | j � � s� d } t
| j | j | j � � � � n | | _ d S( s5
Supplement the private key contents with data loaded from an OpenSSH
public key (``.pub``) or certificate (``-cert.pub``) file, a string
containing such a file, or a `.Message` object.
The .pub contents adds no real value, since the private key
file includes sufficient information to derive the public
key info. For certificates, however, this can be used on
the client side to offer authentication requests to the server
based on certificate instead of raw public key.
See:
https://github.com/openssh/openssh-portable/blob/master/PROTOCOL.certkeys
Note: very little effort is made to validate the certificate contents,
that is for the server to decide if it is good enough to authenticate
successfully.
t from_messaget from_filet from_strings0 PublicBlob type {} incompatible with key type {}N(
R� R R� t patht isfilet getattrt
PublicBlobR� t
startswithR. t
ValueErrorRP t public_blob( R t valuet constructort blobR` ( ( sB /opt/plesk/python/2.7/lib/python2.7/site-packages/paramiko/pkey.pyR� { s $N(. R^ t
__module__t __doc__R R� R R� t TripleDESRk RS RU t ret compileRK RQ RO R R! R" R( R* R+ t propertyR) R. R/ R1 R3 R5 R7 R8 t classmethodR= R? RA RB RH RE Ra RR RT R R� R� R� R� ( ( ( sB /opt/plesk/python/2.7/lib/python2.7/site-packages/paramiko/pkey.pyR > sh
# / V 1 /R� c B sb e Z d Z d d � Z e d � � Z e d � � Z e d � � Z d � Z d � Z
d � Z RS( s�
OpenSSH plain public key or OpenSSH signed public key (certificate).
Tries to be as dumb as possible and barely cares about specific
per-key-type data.
.. note::
Most of the time you'll want to call `from_file`, `from_string` or
`from_message` for useful instantiation, the main constructor is
basically "I should be using ``attrs`` for this."
c C s | | _ | | _ | | _ d S( s�
Create a new public blob of given type and contents.
:param str type_: Type indicator, eg ``ssh-rsa``.
:param blob: The blob bytes themselves.
:param str comment: A comment, if one was given (e.g. file-based.)
N( R� t key_blobt comment( R R� R� R� ( ( sB /opt/plesk/python/2.7/lib/python2.7/site-packages/paramiko/pkey.pyR � s c C s. t | � � } | j � } Wd QX| j | � S( sO
Create a public blob from a ``-cert.pub``-style file on disk.
N( RD t readR� ( R; R9 RG t string( ( sB /opt/plesk/python/2.7/lib/python2.7/site-packages/paramiko/pkey.pyR� � s c
C s� | j d
d � } t | � d k rB d } t | j | � � � n | d } t t | d � � } y | d j � } Wn t k
r� d
} n Xt | � } | j
� } | | k r� d j | | � } t d j | � � � n | d | d | d | � S( sI
Create a public blob from a ``-cert.pub``-style string.
i s% Not enough fields for public blob: {}i i s! key type={!r}, but blob type={!r}s Invalid PublicBlob contents: {}R� R� R� N( Rd RO RM R� RP R R
Re t
IndexErrorR R� (
R; R� t fieldsR R� R� R� RX t blob_typet deets( ( sB /opt/plesk/python/2.7/lib/python2.7/site-packages/paramiko/pkey.pyR� � s"
c C s% | j � } | d | d | j � � S( s�
Create a public blob from a network `.Message`.
Specifically, a cert-bearing pubkey auth packet, because by definition
OpenSSH-style certificates 'are' their own network representation."
R� R� ( R� R! ( R; t messageR� ( ( sB /opt/plesk/python/2.7/lib/python2.7/site-packages/paramiko/pkey.pyR� � s c C s8 d j | j � } | j r4 | d j | j � 7} n | S( Ns {} public key/certificates - {}( RP R� R� ( R t ret( ( sB /opt/plesk/python/2.7/lib/python2.7/site-packages/paramiko/pkey.pyR" � s c C s | o | o | j | j k S( N( R� ( R R% ( ( sB /opt/plesk/python/2.7/lib/python2.7/site-packages/paramiko/pkey.pyR* � s c C s | | k S( N( ( R R% ( ( sB /opt/plesk/python/2.7/lib/python2.7/site-packages/paramiko/pkey.pyt __ne__� s N( R^ R� R� RO R R� R� R� R� R" R* R� ( ( ( sB /opt/plesk/python/2.7/lib/python2.7/site-packages/paramiko/pkey.pyR� � s (' R� Rh Ri R R� t hashlibR R� R� R Ry t cryptography.hazmat.backendsR t cryptography.hazmat.primitivesR t& cryptography.hazmat.primitives.ciphersR R R t paramikoR t paramiko.commonR t paramiko.py3compatR R
R R R
t paramiko.ssh_exceptionR R t paramiko.messageR R~ R t objectR R� ( ( ( sB /opt/plesk/python/2.7/lib/python2.7/site-packages/paramiko/pkey.pyt <module> s, ( � � e
Mini Shell