Current File : //usr/lib/python2.7/site-packages/salt/modules/gpg.pyo
�
���^c
@@ s� d Z d d l m Z m Z m Z d d l Z d d l Z d d l Z d d l Z d d l Z d d l
Z d d l Z d d l
Z d d l m Z d d l m Z d d l m Z e j e � Z d Z i d d 6d
d 6d d
6d d 6d d 6d d 6d
d 6Z i d d 6d d 6d d 6d d 6d d 6d d 6Z i d d 6d
d 6d d 6d! d 6d d 6d d 6Z i d" d# 6d$ d 6d% d 6d& d 6d' d 6Z e Z y1 d d l Z e Z! e e j" � e d( � k Z Wn e# k
r�e Z! n Xd) � Z$ d* � Z% d d+ � Z' d, � Z( d- � Z) d d d. � Z* d d e d/ � Z+ d d0 � Z, d d d1 � Z- d d d2 � Z. d d d3 � Z/ e) d4 d5 d6 d7 d d d d e d d d8 � � Z0 d d e d d d9 � Z1 d d d d d: � Z2 d d d d d; � Z3 e) d d d d d< � � Z4 d e d d d= � Z5 e) d d d d d> � � Z6 d d d d d? � Z7 d d d d d e d d@ � Z8 d d d d d d dA � Z9 d d d d d d e d e dB � Z: d d d d e d e dC � Z; d S(D u
Manage a GPG keychains, add keys, create keys, retrieve keys from keyservers.
Sign, encrypt and sign plus encrypt text and files.
.. versionadded:: 2015.5.0
.. note::
The ``python-gnupg`` library and ``gpg`` binary are required to be
installed.
i ( t absolute_importt print_functiont unicode_literalsN( t SaltInvocationError( t LooseVersion( t sixu gpgu Expiredu eu Unknownu qu Not Trustedu nu
Fully Trustedu fu Marginally Trustedu mu Ultimately Trustedu uu -u 1u expiredu 2u unknownu 3u not_trustedu 4u
marginallyu 5u fullyu 6u
ultimatelyu
Marginallyu Undefinedu 0u Neveru Marginalu Fullyu Ultimateu 1.3.1c C@ s t j j j d � S( u,
Returns the path to the gpg binary
u gpg( t saltt utilst patht which( ( ( s4 /usr/lib/python2.7/site-packages/salt/modules/gpg.pyt _gpgT s c C@ s' t � s t d f St r t St d f S( u=
Makes sure that python-gnupg and gpg are available.
uI The gpg execution module cannot be loaded: gpg binary is not in the path.uT The gpg execution module cannot be loaded; the gnupg python module is not installed.( R
t Falset HAS_GPG_BINDINGSt __virtualname__( ( ( s4 /usr/lib/python2.7/site-packages/salt/modules/gpg.pyt __virtual__\ s
c C@ sc | s t d d � } n t d | � } | s_ | d k rG t � } q_ t d j | � � � n | S( u-
Wrapper for user.info Salt function
u
config.optionu useru user.infou saltu User {0} does not exist( t __salt__t _get_user_infoR t format( t usert userinfo( ( s4 /usr/lib/python2.7/site-packages/salt/modules/gpg.pyR i s c C@ sQ | d k r. t j j t d d � d � } n t j j t | � d d � } | S( u=
Return default GnuPG home directory path for a user
u saltu
config.getu
config_diru gpgkeysu homeu .gnupg( t osR t joinR R ( R t gnupghome( ( s4 /usr/lib/python2.7/site-packages/salt/modules/gpg.pyt _get_user_gnupghome~ s " c @ s" t j � � � f d � � } | S( Nc
@ sc | j d � } | j d � } | s3 t | � } n t | � } t � } | d | d k r� t j j | � r� t d | d � } x: | g t d | � D] } t d | | d | � q� Wn x- t | � D] } | j d � r� | | =q� q� W� | | � } | d | d k r_t d | d � } x6 | g t d | � D] } t d | | | � q>Wn | S(
u<
Wrap gpg function calls to fix permissions
u useru gnupghomeu uidu file.gid_to_groupu gidu file.findu
file.chownu nameu __( t getR R R R t existsR t listt
startswith(
t argst kwargsR R R t run_usert groupR t keyt ret( t func( s4 /usr/lib/python2.7/site-packages/salt/modules/gpg.pyt func_wrapper� s& & ( t functoolst wraps( R" R# ( ( R" s4 /usr/lib/python2.7/site-packages/salt/modules/gpg.pyt _restore_ownership� s #c C@ sF | s t | � } n t r0 t j d | � } n t j d | � } | S( u
Create the GPG object
t homedirR ( R t GPG_1_3_1t gnupgt GPG( R R t gpg( ( s4 /usr/lib/python2.7/site-packages/salt/modules/gpg.pyt _create_gpg� s c C@ s" t | | � } | j | � } | S( u*
Helper function for Listing keys
( R, t list_keys( R R t secretR+ t _keys( ( s4 /usr/lib/python2.7/site-packages/salt/modules/gpg.pyt
_list_keys� s c C@ s: t | � } | r' | j | | � } n | j | � } | S( u;
Helper function for searching keys from keyserver
( R, t search_keys( t textt keyserverR R+ R/ ( ( s4 /usr/lib/python2.7/site-packages/salt/modules/gpg.pyt _search_keys� s
c C@ s) t r t d � � n| s$ d } n g } x� t | | | � D]� } i | d d 6| d d 6} | j d d � } | j d d � } | j d d � } | r� t j d t j t | d � � � | d <n | r� t j d t j t | d � � � | d <n | r| d | d
<n | j | � q= W| Sd S( u�
Search keys from keyserver
text
Text to search the keyserver for, e.g. email address, keyID or fingerprint.
keyserver
Keyserver to use for searching for GPG keys, defaults to pgp.mit.edu.
user
Which user's keychain to access, defaults to user Salt is running as.
Passing the user as ``salt`` will set the GnuPG home directory to the
``/etc/salt/gpgkeys``.
CLI Example:
.. code-block:: bash
salt '*' gpg.search_keys user@example.com
salt '*' gpg.search_keys user@example.com keyserver=keyserver.ubuntu.com
salt '*' gpg.search_keys user@example.com keyserver=keyserver.ubuntu.com user=username
uJ The search_keys function is not support with this version of python-gnupg.u pgp.mit.eduu keyidu uidsu expiresu dateu lengthu %Y-%m-%du createdu keyLengthN(
R( R R4 R t Nonet timet strftimet localtimet floatt append( R2 R3 R R/ t _keyt tmpt expirest datet length( ( s4 /usr/lib/python2.7/site-packages/salt/modules/gpg.pyR1 � s* # #c
C@ sc g } xVt | | � D]E} i | d d 6| d d 6| d d 6} | j d d
� } | j d d
� } | j d d
� } | j d d
� } | j d d
� } | r� t j d t j t | d � � � | d <n | rt j d t j t | d � � � | d
<n | r| d | d <n | r3t | d | d <n | rNt | d | d <n | j | � q W| S( u�
List keys in GPG keychain
user
Which user's keychain to access, defaults to user Salt is running as.
Passing the user as ``salt`` will set the GnuPG home directory to the
``/etc/salt/gpgkeys``.
gnupghome
Specify the location where GPG keyring and related files are stored.
CLI Example:
.. code-block:: bash
salt '*' gpg.list_keys
u keyidu fingerprintu uidsu expiresu dateu lengthu
ownertrustu trustu %Y-%m-%du createdu keyLengthu
ownerTrustN( R0 R R5 R6 R7 R8 R9 t LETTER_TRUST_DICTR: (
R R R/ R; R< R= R> R? t owner_trustt trust( ( s4 /usr/lib/python2.7/site-packages/salt/modules/gpg.pyR-
s0 # #c
C@ si g } x\t | | d t �D]E} i | d d 6| d d 6| d d 6} | j d d � } | j d d � } | j d d � } | j d d � } | j d d � } | r� t j d
t j t | d � � � | d <n | rt j d
t j t | d � � � | d <n | r | d | d <n | r9t | d | d
<n | rTt | d | d <n | j | � q W| S( u�
List secret keys in GPG keychain
user
Which user's keychain to access, defaults to user Salt is running as.
Passing the user as ``salt`` will set the GnuPG home directory to the
``/etc/salt/gpgkeys``.
gnupghome
Specify the location where GPG keyring and related files are stored.
CLI Example:
.. code-block:: bash
salt '*' gpg.list_secret_keys
R. u keyidu fingerprintu uidsu expiresu dateu lengthu
ownertrustu trustu %Y-%m-%du createdu keyLengthu
ownerTrustN(
R0 t TrueR R5 R6 R7 R8 R9 R@ R: (
R R R/ R; R< R= R> R? RA RB ( ( s4 /usr/lib/python2.7/site-packages/salt/modules/gpg.pyt list_secret_keys9 s0 # #u RSAi u Autogenerated Keyu Generated by SaltStackc C@ s2 i t d 6d d 6d d 6} i | d 6| d 6| d 6| d 6} t | |
� }
| r_ | | d <n | rr | | d
<n | r� | | d <n | r� | | d <n | r� t d
d � } | s� t | d <d | d <| S| | d <n |
j | � } |
j | � } | j r| j | d <d | d <n t | d <d | d <| S( u
Create a key in the GPG keychain
.. note::
GPG key generation requires *a lot* of entropy and randomness.
Difficult to do over a remote connection, consider having
another process available which is generating randomness for
the machine. Also especially difficult on virtual machines,
consider the `rng-tools
<http://www.gnu.org/software/hurd/user/tlecarrour/rng-tools.html>`_
package.
The create_key process takes awhile so increasing the timeout
may be necessary, e.g. -t 15.
key_type
The type of the primary key to generate. It must be capable of signing.
'RSA' or 'DSA'.
key_length
The length of the primary key in bits.
name_real
The real name of the user identity which is represented by the key.
name_comment
A comment to attach to the user id.
name_email
An email address for the user.
subkey_type
The type of the secondary key to generate.
subkey_length
The length of the secondary key in bits.
expire_date
The expiration date for the primary and any secondary key.
You can specify an ISO date, A number of days/weeks/months/years,
an epoch value, or 0 for a non-expiring key.
use_passphrase
Whether to use a passphrase with the signing key. Passphrase is received
from Pillar.
user
Which user's keychain to access, defaults to user Salt is running as.
Passing the user as ``salt`` will set the GnuPG home directory to the
``/etc/salt/gpgkeys``.
gnupghome
Specify the location where GPG keyring and related files are stored.
CLI Example:
.. code-block:: bash
salt -t 15 '*' gpg.create_key
u resu u fingerprintu messageu key_typeu
key_lengthu name_realu name_commentu
name_emailu subkey_typeu
subkey_lengthu expire_dateu
pillar.getu gpg_passphraseu' gpg_passphrase not available in pillar.u
passphraseu$ GPG key pair successfully generated.u Unable to generate GPG key pair.( RC R, R R t
gen_key_inputt gen_keyt fingerprint( t key_typet
key_lengtht name_realt name_commentt
name_emailt subkey_typet
subkey_lengtht expire_datet use_passphraseR R R! t
create_paramsR+ t gpg_passphraset
input_dataR ( ( s4 /usr/lib/python2.7/site-packages/salt/modules/gpg.pyt
create_keyh s@ J
c
C@ sm i t d 6d d 6} | r8 | r8 t | d <d | d <| S| r^ | r^ t | d <d | d <| St | | � } t | | | � } | rQ| d } t | | | � } | r� | r� t | d <d | d <| S| r | r t j | j | t � � d k r d j | � | d <n t j | j | � � d k rC| d c d
j | � 7<n t | d <| St | d <d | d <| Sd S(
u�
Get a key from the GPG keychain
keyid
The keyid of the key to be deleted.
fingerprint
The fingerprint of the key to be deleted.
delete_secret
Whether to delete a corresponding secret key prior to deleting the public key.
Secret keys must be deleted before deleting any corresponding public keys.
user
Which user's keychain to access, defaults to user Salt is running as.
Passing the user as ``salt`` will set the GnuPG home directory to the
``/etc/salt/gpgkeys``.
gnupghome
Specify the location where GPG keyring and related files are stored.
CLI Example:
.. code-block:: bash
salt '*' gpg.delete_key keyid=3FAD9F1E
salt '*' gpg.delete_key fingerprint=53C96788253E58416D20BCD352952C84C3252192
salt '*' gpg.delete_key keyid=3FAD9F1E user=username
salt '*' gpg.delete_key keyid=3FAD9F1E user=username delete_secret=True
u resu u messageu/ Only specify one argument, fingerprint or keyidu' Required argument, fingerprint or keyidu fingerprintu; Secret key exists, delete first or pass delete_secret=True.u oku Secret key for {0} deleted
u Public key for {0} deletedu Key not available in keychain.N( RC R R, t get_keyt get_secret_keyR t text_typet delete_keysR ( t keyidRG t
delete_secretR R R! R+ R t skey( ( s4 /usr/lib/python2.7/site-packages/salt/modules/gpg.pyt
delete_key� s: '
-
c C@ s� i } x�t | | � D]r} | d | k sP | d | k sP | d d | k r | d | d <| d | d <| d | d <| j d d � } | j d d � } | j d d � } | j d d � } | j d d � }
| rt j d
t j t | d � � � | d <n | r8t j d
t j t | d � � � | d <n | rO| d | d <n | rjt | d | d
<n |
r�t | d | d <q�q q W| s�t S| Sd S( u�
Get a key from the GPG keychain
keyid
The key ID (short or long) of the key to be retrieved.
fingerprint
The fingerprint of the key to be retrieved.
user
Which user's keychain to access, defaults to user Salt is running as.
Passing the user as ``salt`` will set the GnuPG home directory to the
``/etc/salt/gpgkeys``.
gnupghome
Specify the location where GPG keyring and related files are stored.
CLI Example:
.. code-block:: bash
salt '*' gpg.get_key keyid=3FAD9F1E
salt '*' gpg.get_key fingerprint=53C96788253E58416D20BCD352952C84C3252192
salt '*' gpg.get_key keyid=3FAD9F1E user=username
u fingerprintu keyidi u uidsu expiresu dateu lengthu
ownertrustu trustu %Y-%m-%du createdu keyLengthu
ownerTrustN( R0 R R5 R6 R7 R8 R9 R@ R ( RY RG R R R< R; R= R> R? RA RB ( ( s4 /usr/lib/python2.7/site-packages/salt/modules/gpg.pyRU / s8 # # c C@ s� i } x�t | | d t �D]r} | d | k sV | d | k sV | d d | k r | d | d <| d | d <| d | d <| j d d � } | j d d � } | j d d � } | j d d � } | j d
d � }
| r t j d t j t | d � � � | d <n | r>t j d t j t | d � � � | d <n | rU| d | d
<n | rpt | d | d <n |
r�t | d
| d
<q�q q W| s�t S| Sd S( u�
Get a key from the GPG keychain
keyid
The key ID (short or long) of the key to be retrieved.
fingerprint
The fingerprint of the key to be retrieved.
user
Which user's keychain to access, defaults to user Salt is running as.
Passing the user as ``salt`` will set the GnuPG home directory to the
``/etc/salt/gpgkeys``.
gnupghome
Specify the location where GPG keyring and related files are stored.
CLI Example:
.. code-block:: bash
salt '*' gpg.get_secret_key keyid=3FAD9F1E
salt '*' gpg.get_secret_key fingerprint=53C96788253E58416D20BCD352952C84C3252192
salt '*' gpg.get_secret_key keyid=3FAD9F1E user=username
R. u fingerprintu keyidi u uidsu expiresu dateu lengthu
ownertrustu trustu %Y-%m-%du createdu keyLengthu
ownerTrustN(
R0 RC R R5 R6 R7 R8 R9 R@ R ( RY RG R R R< R; R= R> R? RA RB ( ( s4 /usr/lib/python2.7/site-packages/salt/modules/gpg.pyRV m s8 # # c C@ s� i t d 6d d 6} t | | � } | r@ | r@ t d � � n | r� y@ t j j j | d � �" } t j j j | j � � } Wd QXWq� t
k
r� t d � � q� Xn | j | � } t r]| j
} | j d � s� | j d � r� d
| d <q�| j d � rd | d <q�| j d
� r4t | d <d | d <q�| j d � s�t | d <d | d <q�nu | j so| j r|d
| d <nV | j r�d | d <n@ | j r�t | d <d | d <n | j s�t | d <d | d <n | S( u�
Import a key from text or file
text
The text containing to import.
filename
The filename containing the key to import.
user
Which user's keychain to access, defaults to user Salt is running as.
Passing the user as ``salt`` will set the GnuPG home directory to the
``/etc/salt/gpgkeys``.
gnupghome
Specify the location where GPG keyring and related files are stored.
CLI Example:
.. code-block:: bash
salt '*' gpg.import_key text='-----BEGIN PGP PUBLIC KEY BLOCK-----\n ... -----END PGP PUBLIC KEY BLOCK-----'
salt '*' gpg.import_key filename='/path/to/public-key-file'
u resu u messageu filename or text must be passed.u rbNu filename does not exist.u importedu imported_rsau Successfully imported key(s).u unchangedu! Key(s) already exist in keychain.u not_importedu Unable to import key.u count( RC R, R R R t filest flopent stringutilst
to_unicodet readt IOErrort import_keysR( t countsR R t importedt imported_rsat unchangedt not_importedt count( R2 t filenameR R R! R+ t _fpt
imported_dataRd ( ( s4 /usr/lib/python2.7/site-packages/salt/modules/gpg.pyt
import_key� sH
%
c C@ sC t | | � } t | t j � r3 | j d � } n | j | | � S( u�
Export a key from the GPG keychain
keyids
The key ID(s) of the key(s) to be exported. Can be specified as a comma
separated string or a list. Anything which GnuPG itself accepts to
identify a key - for example, the key ID or the fingerprint could be
used.
secret
Export the secret key identified by the ``keyids`` information passed.
user
Which user's keychain to access, defaults to user Salt is running as.
Passing the user as ``salt`` will set the GnuPG home directory to the
``/etc/salt/gpgkeys``.
gnupghome
Specify the location where GPG keyring and related files are stored.
CLI Example:
.. code-block:: bash
salt '*' gpg.export_key keyids=3FAD9F1E
salt '*' gpg.export_key keyids=3FAD9F1E secret=True
salt '*' gpg.export_key keyids="['3FAD9F1E','3FBD8F1E']" user=username
u ,( R, t
isinstanceR t string_typest splitt export_keys( t keyidsR. R R R+ ( ( s4 /usr/lib/python2.7/site-packages/salt/modules/gpg.pyt
export_key� s c C@ s i t d 6i d 6g d 6} t | | � } | s9 d } n t | t j � r] | j d � } n | j | | � } x� | j D]� } d | k r� | d d k r� | d j d j | d � � q| d d
k r| d j d j | d � � qqy d | k ry | d j d
� qy qy W| S( u
Receive key(s) from keyserver and add them to keychain
keyserver
Keyserver to use for searching for GPG keys, defaults to pgp.mit.edu
keys
The keyID(s) to retrieve from the keyserver. Can be specified as a comma
separated string or a list.
user
Which user's keychain to access, defaults to user Salt is running as.
Passing the user as ``salt`` will set the GnuPG home directory to the
``/etc/salt/gpgkeys``.
gnupghome
Specify the location where GPG keyring and related files are stored.
CLI Example:
.. code-block:: bash
salt '*' gpg.receive_keys keys='3FAD9F1E'
salt '*' gpg.receive_keys keys="['3FAD9F1E','3FBD9F2E']"
salt '*' gpg.receive_keys keys=3FAD9F1E user=username
u resu changesu messageu pgp.mit.eduu ,u oku 1u Key {0} added to keychainu fingerprintu 0u" Key {0} already exists in keychainu problemu Unable to add key to keychain(
RC R, Rn R Ro Rp t recv_keyst resultsR: R ( R3 t keysR R R! R+ t recv_datat result( ( s4 /usr/lib/python2.7/site-packages/salt/modules/gpg.pyt receive_keys s&
!$ c
C@ sm i t d 6d d 6} d d d d d d g } | rP | rP t | d <d
| d <| S| s� | r� t | d | �} | r� d | k r� t | d <d
j | � | d <| S| d } q� t | d <d j | � | d <| Sq� t | d <d | d <| Sn | | k rd j d j | � � Sd j | t | � } t � d g } | } | d k r�t j j t d d � d � }
| j
d |
g � d } n t d | d | d | d t �} | d d k s�t | d <| d | d <n� | d r[t j d! | d � } t
| � d" k r3| | d <d# j t | d t | d$ � | d <qi| | d <d% j t | d � | d <n | d | d <| S(& u
Set the trust level for a key in GPG keychain
keyid
The keyid of the key to set the trust level for.
fingerprint
The fingerprint of the key to set the trust level for.
trust_level
The trust level to set for the specified key, must be one
of the following:
expired, unknown, not_trusted, marginally, fully, ultimately
user
Which user's keychain to access, defaults to user Salt is running as.
Passing the user as ``salt`` will set the GnuPG home directory to the
``/etc/salt/gpgkeys``.
CLI Example:
.. code-block:: bash
salt '*' gpg.trust_key keyid='3FAD9F1E' trust_level='marginally'
salt '*' gpg.trust_key fingerprint='53C96788253E58416D20BCD352952C84C3252192' trust_level='not_trusted'
salt '*' gpg.trust_key keys=3FAD9F1E trust_level='ultimately' user='username'
u resu u messageu expiredu unknownu not_trustedu
marginallyu fullyu
ultimatelyu/ Only specify one argument, fingerprint or keyidR u fingerprintu# Fingerprint not found for keyid {0}u KeyID {0} not in GPG keychainu' Required argument, fingerprint or keyidu ERROR: Valid trust levels - {0}u ,u {0}:{1}
u --import-ownertrustu saltu
config.getu
config_diru gpgkeysu --homediru rootu cmd.run_allt stdint runast python_shellu retcodei u stderru \di u) Changing ownership trust from {0} to {1}.i u Setting ownership trust to {0}.( RC R RU R R t NUM_TRUST_DICTR
R R R t extendt ret findallt lent INV_NUM_TRUST_DICT(
RY RG t trust_levelR R! t _VALID_TRUST_LEVELSR Rz t cmdt _usert homeDirt rest _match( ( s4 /usr/lib/python2.7/site-packages/salt/modules/gpg.pyt trust_keyV sh
c
C@ sw t | | � } | r= t d d � } | sC t d � � qC n d } t t j � } | r� | t d � k r� | j | d | d | �}
qp| j | d | d | �}
n� | rdt j j
j | d � �R } | t d � k r� | j | d | d | �}
n | j | d | d | �}
Wd QX| rpt j j
j | d
� �& } | j
t j j j |
j � � Wd QXqpn t d � � |
j S( u�
Sign message or file
user
Which user's keychain to access, defaults to user Salt is running as.
Passing the user as ``salt`` will set the GnuPG home directory to the
``/etc/salt/gpgkeys``.
keyid
The keyid of the key to set the trust level for, defaults to
first key in the secret keyring.
text
The text to sign.
filename
The filename to sign.
output
The filename where the signed file will be written, default is standard out.
use_passphrase
Whether to use a passphrase with the signing key. Passphrase is received
from Pillar.
gnupghome
Specify the location where GPG keyring and related files are stored.
CLI Example:
.. code-block:: bash
salt '*' gpg.sign text='Hello there. How are you?'
salt '*' gpg.sign filename='/path/to/important.file'
salt '*' gpg.sign filename='/path/to/important.file' use_passphrase=True
u
pillar.getu gpg_passphraseu' gpg_passphrase not available in pillar.u 1.3.1t default_keyt
passphraseRY u rbNu wu filename or text must be passed.( R, R R R5 t
_LooseVersionR) t __version__t signR R R] R^ t sign_filet writeR_ t to_bytest data(
R RY R2 Rj t outputRP R R+ RR t
gnupg_versiont signed_dataRk t fout( ( s4 /usr/lib/python2.7/site-packages/salt/modules/gpg.pyR� � s* . !+ c
C@ s� t | � } d } | r^ | | k r^ d j | d j | � � } t j | � i t d
6| d 6Sg } | r� | j d | g � n | r� | j | d
| �}
n� | r | r� t j j
j | d � � } | j | | d
| �}
Wd QXq+t j j
j
| d � � } | j | d
| �}
Wd QXn t d � � i } |
j d k r�t | d
<|
j | d <|
j | d <t t j |
j � | d <d | d <n t | d
<d | d <| S( u<
Verify a message or file
text
The text to verify.
filename
The filename to verify.
user
Which user's keychain to access, defaults to user Salt is running as.
Passing the user as ``salt`` will set the GnuPG home directory to the
``/etc/salt/gpgkeys``.
gnupghome
Specify the location where GPG keyring and related files are stored.
signature
Specify the filename of a detached signature.
.. versionadded:: 2018.3.0
trustmodel
Explicitly define the used trust model. One of:
- pgp
- classic
- tofu
- tofu+pgp
- direct
- always
- auto
.. versionadded:: fluorine
CLI Example:
.. code-block:: bash
salt '*' gpg.verify text='Hello there. How are you?'
salt '*' gpg.verify filename='/path/to/important.file'
salt '*' gpg.verify filename='/path/to/important.file' use_passphrase=True
salt '*' gpg.verify filename='/path/to/important.file' trustmodel=direct
u pgpu classicu tofuu tofu+pgpu directu alwaysu autou. Invalid trustmodel defined: {}. Use one of: {}u , u resu messageu
--trust-modelt
extra_argsu rbNu filename or text must be passed.u usernameu key_idu trust_levelu The signature is verified.u$ The signature could not be verified.( u pgpu classicu tofuu tofu+pgpu directu alwaysu auto( R, R R t logt warnR R~ t verifyR R R] t fopent verify_fileR^ R R� R5 RC t usernamet key_idt VERIFY_TRUST_LEVELSR RW (
R2 R Rj R t signaturet
trustmodelR+ t trustmodelst msgR� t verifiedRk R! ( ( s4 /usr/lib/python2.7/site-packages/salt/modules/gpg.pyR� s8 2
!
c
C@ s� i t d 6d d 6} t | | � }
| r[ t d d � } | sN t d � � n | d } n d } | r� |
j | | d | �} n� | rZt r� t j j j
| d � �" }
t j j j |
j
� � } Wd QX|
j | | d | d
| �} qft j j j
| d � �R }
| r3|
j |
| d | d
| d | �} n |
j |
| d | d | �} Wd QXn t d � � | j r�| s�| r�d
j | � | d <q�| j | d <q�| j } n? | s�t | d <d j | j � | d <n t } t j | j � | S( u�
Encrypt a message or file
user
Which user's keychain to access, defaults to user Salt is running as.
Passing the user as ``salt`` will set the GnuPG home directory to the
``/etc/salt/gpgkeys``.
recipients
The fingerprints for those recipient whom the data is being encrypted for.
text
The text to encrypt.
filename
The filename to encrypt.
output
The filename where the signed file will be written, default is standard out.
sign
Whether to sign, in addition to encrypt, the data. ``True`` to use
default key or fingerprint to specify a different key to sign with.
use_passphrase
Whether to use a passphrase with the signing key. Passphrase is received
from Pillar.
gnupghome
Specify the location where GPG keyring and related files are stored.
bare
If ``True``, return the (armored) encrypted block as a string without
the standard comment/res dict.
CLI Example:
.. code-block:: bash
salt '*' gpg.encrypt text='Hello there. How are you?'
salt '*' gpg.encrypt filename='/path/to/important.file'
salt '*' gpg.encrypt filename='/path/to/important.file' use_passphrase=True
u resu u commentu
pillar.getu gpg_passphraseu' gpg_passphrase not available in pillar.R� u rbNR� R� u filename or text must be passed.u& Encrypted data has been written to {0}u& {0}.
Please check the salt-minion log.( RC R, R R R5 t encryptR( R R R] R^ R_ R` Ra t encrypt_filet okR R� R t statusR� t errort stderr( R t
recipientsR2 Rj R� R� RP R t bareR! R+ RR Rx Rk t _contents( ( s4 /usr/lib/python2.7/site-packages/salt/modules/gpg.pyR� a sD 7
!!''
c
C@ sx i t d 6d d 6} t | | � } | r[ t d d � } | sN t d � � n | d } n d
} | r | j | d | �}
no | r� t j j j | d � �@ } | r� | j
| d | d | �}
n | j
| d | �}
Wd
QXn t d � � |
j r5| s)| rd j | � | d <q2|
j
| d <qt|
j
} n? | s^t | d <d
j |
j � | d <n t } t j |
j � | S( u�
Decrypt a message or file
user
Which user's keychain to access, defaults to user Salt is running as.
Passing the user as ``salt`` will set the GnuPG home directory to the
``/etc/salt/gpgkeys``.
text
The encrypted text to decrypt.
filename
The encrypted filename to decrypt.
output
The filename where the decrypted data will be written, default is standard out.
use_passphrase
Whether to use a passphrase with the signing key. Passphrase is received
from Pillar.
gnupghome
Specify the location where GPG keyring and related files are stored.
bare
If ``True``, return the (armored) decrypted block as a string without the
standard comment/res dict.
CLI Example:
.. code-block:: bash
salt '*' gpg.decrypt filename='/path/to/important.file.gpg'
salt '*' gpg.decrypt filename='/path/to/important.file.gpg' use_passphrase=True
u resu u commentu
pillar.getu gpg_passphraseu' gpg_passphrase not available in pillar.R� u rbR� Nu filename or text must be passed.u& Decrypted data has been written to {0}u& {0}.
Please check the salt-minion log.( RC R, R R R5 t decryptR R R] R^ t decrypt_fileR� R R� R R� R� R� R� ( R R2 Rj R� RP R R� R! R+ RR Rx Rk ( ( s4 /usr/lib/python2.7/site-packages/salt/modules/gpg.pyR� � s< ,
(< t __doc__t
__future__R R R R$ t loggingR R R6 t salt.utils.filesR t salt.utils.patht salt.utils.stringutilst salt.exceptionsR t salt.utils.versionsR R� t salt.extR t getLoggert __name__R� R
R@ R} R� R� R R( R) RC R R� t ImportErrorR
R R5 R R R& R, R0 R4 R1 R- RD RT R\ RU RV Rm Rs Ry R� R� R� R� R� ( ( ( s4 /usr/lib/python2.7/site-packages/salt/modules/gpg.pyt <module>
s�
' 5//n J>>G'8 a G U b
Mini Shell