Current File : //usr/lib/python2.7/site-packages/salt/utils/nacl.pyc
�
���^c @@ s� d Z d d l m Z m Z m Z d d l Z d d l Z d d l Z d d l m Z d d l
Z d d l Z d d l
Z d d l Z d d l Z d d l Z d d l Z e j e � Z d Z y d d l Z d d l Z Wn e e f k
r� Z d Z n Xd Z d � Z d � Z d � Z d
� Z! d � Z" d d d � Z# d
� Z$ d d � Z% d � Z& d d � Z' d � Z( d � Z) d � Z* d � Z+ d S( u8
Common code shared between the nacl module and runner.
i ( t absolute_importt print_functiont unicode_literalsN( t sixuN libnacl import error, perhaps missing python libnacl package or should update.u naclc C@ s t � S( N( t check_requirements( ( ( s3 /usr/lib/python2.7/site-packages/salt/utils/nacl.pyt __virtual__" s c C@ s t d k t f S( u0
Check required libraries are available
N( t REQ_ERRORt None( ( ( s3 /usr/lib/python2.7/site-packages/salt/utils/nacl.pyR & s c K@ s i d d 6d
d 6t j j | d j d � d � d 6d
d 6t j j | d j d � d � d
6} d j t � } y | j t d | i � � Wn6 t t
f k
r� } | j | d j | i � � n Xx8 t | j � � t | j � � @D] } | | | | <q� W| S( u
Return configuration
u sealedboxu box_typeu sku optsu pki_diru master/naclu sk_fileu pku master/nacl.pubu pk_fileu
{0}.configu
config.getN(
R t ost patht joint gett formatt __virtualname__t updatet __salt__t NameErrort KeyErrort sett keys( t kwargst configt
config_keyt et k( ( s3 /usr/lib/python2.7/site-packages/salt/utils/nacl.pyt _get_config- s #& !)c K@ s� t | � } d } | d r8 t j j j | d � } n | d } | r� | r� yI t j j j | d � �+ } t j j j | j � � j
d � } Wd QXWq� t t f k
r� t
d � � q� Xn t j | � S( u
Return sk
u sku sk_fileu rbu
Nu no key or sk_file found( R R t saltt utilst stringutilst to_strt filest fopent
to_unicodet readt rstript IOErrort OSErrort Exceptiont base64t b64decode( R R t keyt sk_filet keyf( ( s3 /usr/lib/python2.7/site-packages/salt/utils/nacl.pyt _get_skE s
.c K@ s� t | � } d } | d r8 t j j j | d � } n | d } | r� | r� yI t j j j | d � �+ } t j j j | j � � j
d � } Wd QXWq� t t f k
r� t
d � � q� Xn t j | � } t j | � S( u
Return pk
u pku pk_fileu rbu
Nu no pubkey or pk_file found( R R R R R R R R R R! R" R# R$ R% R t text_typeR& R' ( R R t pubkeyt pk_fileR* ( ( s3 /usr/lib/python2.7/site-packages/salt/utils/nacl.pyt _get_pkW s
.c K@ s� d | k r/ t j j j d d � | d } n | d k rt t j j � } i t j | j
� d 6t j | j � d 6S| d k r� d j | � } n | r�| d k r�t
j j | � s�t j j � } t j j j | d � � } | j t j | j
� � Wd QXt j j j � rdt j j j � } t j j j | | � t j j j | | d d
d t d t �n t
j | d
� d j | � St d j | � � � n | d k r�| r�t d � � n t
j j | � r�t
j j | � r�t d j | | � � � n t
j j | � r�t
j j | � r�t j j j | d � �: } t j j j | j � � j d � } t j! | � } Wd QXt j j | � } t j j j | d � � } | j t j | j � � Wd QXd j | � St j j � } t j j j | d � � } | j t j | j
� � Wd QXt j j j � ryt j j j � } t j j j | | � t j j j | | d d
d t d t �n t
j | d
� t j j j | d � � } | j t j | j � � Wd QXd j | | � S( uP
Use libnacl to generate a keypair.
If no `sk_file` is defined return a keypair.
If only the `sk_file` is defined `pk_file` will use the same name with a postfix `.pub`.
When the `sk_file` is already existing, but `pk_file` is not. The `pk_file` will be generated
using the `sk_file`.
CLI Examples:
.. code-block:: bash
salt-call nacl.keygen
salt-call nacl.keygen sk_file=/etc/salt/pki/master/nacl
salt-call nacl.keygen sk_file=/etc/salt/pki/master/nacl pk_file=/etc/salt/pki/master/nacl.pub
salt-call --local nacl.keygen
u keyfileu Neonux The 'keyfile' argument has been deprecated and will be removed in Salt {version}. Please use 'sk_file' argument instead.u sku pku {0}.pubu wbNu full_controlu grantt reset_permst protectedi u saved sk_file: {0}u sk_file:{0} already exist.u6 sk_file: Must be set inorder to generate a public key.u* sk_file:{0} and pk_file:{1} already exist.u rbu
u saved pk_file: {0}u saved sk_file:{0} pk_file: {1}(" R R t versionst
warn_untilR t libnaclt publict SecretKeyR& t b64encodet skt pkR R R t isfileR R t writet platformt
is_windowst
win_functionst get_current_usert win_daclt set_ownert set_permissionst Truet chmodR% R R R! R" R' ( R) R. R t kpR* t cur_userR8 ( ( s3 /usr/lib/python2.7/site-packages/salt/utils/nacl.pyt keygenj sZ
* +
$%$
+ c K@ s� d | k r3 t j j j d d � | d | d <n d | k rf t j j j d d � | d | d <n t | � d } | d k r� t | | � St | | � S(
uT
Alias to `{box_type}_encrypt`
box_type: secretbox, sealedbox(default)
u keyfileu Neonux The 'keyfile' argument has been deprecated and will be removed in Salt {version}. Please use 'sk_file' argument instead.u sk_fileu keyuo The 'key' argument has been deprecated and will be removed in Salt {version}. Please use 'sk' argument instead.u sku box_typeu secretbox( R R R2 R3 R t secretbox_encryptt sealedbox_encrypt( t dataR t box_type( ( s3 /usr/lib/python2.7/site-packages/salt/utils/nacl.pyt enc� s
c K@ s� y t d | � } WnO t k
re } t j j j | d � �" } t j j j | j � � } Wd QXn Xt | | � } | r� t
j j | � r� t d j
| � � � n t j j j | d � �# } | j t j j j | � � Wd QXd j
| � S| S( u
This is a helper function to encrypt a file and return its contents.
You can provide an optional output file using `out`
`name` can be a local file or when not using `salt-run` can be a url like `salt://`, `https://` etc.
CLI Examples:
.. code-block:: bash
salt-run nacl.enc_file name=/tmp/id_rsa
salt-call nacl.enc_file name=salt://crt/mycert out=/tmp/cert
salt-run nacl.enc_file name=/tmp/id_rsa box_type=secretbox sk_file=/etc/salt/pki/master/nacl.pub
u cp.get_file_stru rbNu file:{0} already exist.u wbu
Wrote: {0}( R R% R R R R R R R! RL R R R: R R; t to_bytes( t namet outR RJ R t ft d( ( s3 /usr/lib/python2.7/site-packages/salt/utils/nacl.pyt enc_file� s %"
c K@ s� d | k r= t j j j d d � | d | d <d | d <n d | k rz t j j j d d � | d | d <d | d <n t | � d } | d k r� t | | � St | | � S(
uT
Alias to `{box_type}_decrypt`
box_type: secretbox, sealedbox(default)
u keyfileu Neonux The 'keyfile' argument has been deprecated and will be removed in Salt {version}. Please use 'sk_file' argument instead.u sk_fileu secretboxu box_typeu keyuo The 'key' argument has been deprecated and will be removed in Salt {version}. Please use 'sk' argument instead.u sk( R R R2 R3 R t secretbox_decryptt sealedbox_decrypt( RJ R RK ( ( s3 /usr/lib/python2.7/site-packages/salt/utils/nacl.pyt dec� s
c K@ s� y t d | � } WnO t k
re } t j j j | d � �" } t j j j | j � � } Wd QXn Xt | | � } | r� t
j j | � r� t d j
| � � � n t j j j | d � �# } | j t j j j | � � Wd QXd j
| � S| S( u
This is a helper function to decrypt a file and return its contents.
You can provide an optional output file using `out`
`name` can be a local file or when not using `salt-run` can be a url like `salt://`, `https://` etc.
CLI Examples:
.. code-block:: bash
salt-run nacl.dec_file name=/tmp/id_rsa.nacl
salt-call nacl.dec_file name=salt://crt/mycert.nacl out=/tmp/id_rsa
salt-run nacl.dec_file name=/tmp/id_rsa.nacl box_type=secretbox sk_file=/etc/salt/pki/master/nacl.pub
u cp.get_file_stru rbNu file:{0} already exist.u wbu
Wrote: {0}( R R% R R R R R R R! RU R R R: R R; RM ( RN RO R RJ R RP RQ ( ( s3 /usr/lib/python2.7/site-packages/salt/utils/nacl.pyt dec_file s %"
c K@ sI t j j j | � } t | � } t j j | � } t j | j
| � � S( u�
Encrypt data using a public key generated from `nacl.keygen`.
The encryptd data can be decrypted using `nacl.sealedbox_decrypt` only with the secret key.
CLI Examples:
.. code-block:: bash
salt-run nacl.sealedbox_encrypt datatoenc
salt-call --local nacl.sealedbox_encrypt datatoenc pk_file=/etc/salt/pki/master/nacl.pub
salt-call --local nacl.sealedbox_encrypt datatoenc pk='vrwQF7cNiNAVQVAiS3bvcbJUnF0cN6fU9YTZD9mBfzQ='
( R R R RM R/ R4 t sealedt SealedBoxR& R7 t encrypt( RJ R R9 t b( ( s3 /usr/lib/python2.7/site-packages/salt/utils/nacl.pyRI < s c K@ sk | d k r d St j j j | � } t | � } t j j | � } t j j
| � } | j t j
| � � S( u�
Decrypt data using a secret key that was encrypted using a public key with `nacl.sealedbox_encrypt`.
CLI Examples:
.. code-block:: bash
salt-call nacl.sealedbox_decrypt pEXHQM6cuaF7A=
salt-call --local nacl.sealedbox_decrypt data='pEXHQM6cuaF7A=' sk_file=/etc/salt/pki/master/nacl
salt-call --local nacl.sealedbox_decrypt data='pEXHQM6cuaF7A=' sk='YmFkcGFzcwo='
N( R R R R RM R+ R4 R5 R6 RW RX t decryptR& R' ( RJ R R8 t keypairRZ ( ( s3 /usr/lib/python2.7/site-packages/salt/utils/nacl.pyRT Q s c K@ sI t j j j | � } t | � } t j j | � } t j | j
| � � S( u�
Encrypt data using a secret key generated from `nacl.keygen`.
The same secret key can be used to decrypt the data using `nacl.secretbox_decrypt`.
CLI Examples:
.. code-block:: bash
salt-run nacl.secretbox_encrypt datatoenc
salt-call --local nacl.secretbox_encrypt datatoenc sk_file=/etc/salt/pki/master/nacl
salt-call --local nacl.secretbox_encrypt datatoenc sk='YmFkcGFzcwo='
( R R R RM R+ R4 t secrett SecretBoxR& R7 RY ( RJ R R8 RZ ( ( s3 /usr/lib/python2.7/site-packages/salt/utils/nacl.pyRH i s c K@ s\ | d k r d St j j j | � } t | � } t j j d | � } | j t
j | � � S( u�
Decrypt data that was encrypted using `nacl.secretbox_encrypt` using the secret key
that was generated from `nacl.keygen`.
CLI Examples:
.. code-block:: bash
salt-call nacl.secretbox_decrypt pEXHQM6cuaF7A=
salt-call --local nacl.secretbox_decrypt data='pEXHQM6cuaF7A=' sk_file=/etc/salt/pki/master/nacl
salt-call --local nacl.secretbox_decrypt data='pEXHQM6cuaF7A=' sk='YmFkcGFzcwo='
R( N( R R R R RM R+ R4 R] R^ R[ R& R' ( RJ R R( RZ ( ( s3 /usr/lib/python2.7/site-packages/salt/utils/nacl.pyRS ~ s
(, t __doc__t
__future__R R R R& t loggingR t salt.extR t
salt.syspathsR t salt.utils.filest salt.utils.platformt salt.utils.stringutilst salt.utils.versionst salt.utils.win_functionst salt.utils.win_daclt getLoggert __name__t logR R t libnacl.secretR4 t libnacl.sealedt ImportErrorR$ R R
R R R R+ R/ RG RL RR RU RV RI RT RH RS ( ( ( s3 /usr/lib/python2.7/site-packages/salt/utils/nacl.pyt <module> sD
R ! " !
Mini Shell