CURRENT PATH:
/
opt
/
gsutil
/
gslib
/
__pycache__
/
[ ⬅ KEMBALI ]
|
[ HOME ]
Upload File:
Upload Ke Sini
Dir Baru
File Baru
Editing:
context_config.cpython-39.pyc
a +(Wgp! � @ s d Z ddlmZ ddlmZ ddlmZ ddlmZ ddlZddlZddlZddl m Z ddl Z ddl m Z dd l mZ dd l mZ daej�ej�d d d ��ZdZdZG dd� de�ZG dd� de�Zdd� Zdd� Zdd� Z dd� Z d d � Z G d d � d e �Z d d!� Z!d"d#� Z"dS )$z)Manages device context mTLS certificates.� )�absolute_import)�print_function)�division)�unicode_literalsN)�config)� exception)� boto_util)�execution_util�~z.secureConnectzcontext_aware_metadata.json�cert_provider_commandz--with_passphrasec @ s e Zd ZdZdS )�CertProvisionErrorz9Represents errors when provisioning a client certificate.N��__name__� __module__� __qualname__�__doc__� r r �#/opt/gsutil/gslib/context_config.pyr + s r c @ s e Zd ZdZdS )�(ContextConfigSingletonAlreadyExistsErrorz>Error for when create_context_config is called multiple times.Nr r r r r r 0 s r c C sT | � d�r&| �d�r&dd| dd� fS | � d�rL| �d�rLdd| dd� fS d S d S ) z)Returns (begin:bool, end:bool, name:str).z -----BEGIN z-----TF� ���z -----END � )FF� N)� startswith�endswith)�liner r r �_is_pem_section_marker5 s r c C s� i }g }d}| � � D ]�}|�� }|s&qt|�\}}}|rn|rJ|�d| � ||�� v rd|�d| � |}g }n6|r�|s�|�d| � n ||kr�|�d||f � d}|r|�|� |rd�|�d ||< d}q|r�|�d| � |S )a Returns dict with {name: section} by parsing contents in PEM format. A simple parser for PEM file. Please see RFC 7468 for the format of PEM file. Not using regex to improve performance catching nested matches. Note: This parser requires the post-encapsulation label of a section to match its pre-encapsulation label. It ignores a section without a matching label. Args: contents (str): Contents of a PEM file. logger (logging.logger): gsutil logger. Returns: A dict of the PEM file sections. Nz0Section %s missing end line and will be ignored.zASection %s already exists, and the older section will be ignored.z8Section %s missing a beginning line and will be ignored.z1Section %s missing a matching end line. Found: %s� z Section %s missing an end line.)� splitlines�stripr �warning�keys�append�join) �contents�logger�result� pem_linesZpem_section_namer �begin�end�namer r r �_split_pem_into_sections? sJ � ��� r+ c C s t j�t�} t j�| �s dS | S )z�Checks for content aware metadata. If content aware metadata exists, return its absolute path; otherwise, returns None. Returns: str: Absolute path if exists. Otherwise, None. N)�os�path� expanduser�_DEFAULT_METADATA_PATH�exists)� metadata_pathr r r � _check_pathw s r2 c C sj z8t | �� }t�|�W d � W S 1 s,0 Y W n, tyd } zt|��W Y d}~n d}~0 0 dS )z�Loads context aware metadata from the given path. Returns: dict: The metadata JSON. Raises: CertProvisionError: If failed to parse metadata as JSON. N)�open�json�load� ValueErrorr )r1 �f�er r r �_read_metadata_file� s .r9 c C sH t � } | std��t| �}t|vr*td��|t }t|vrD|�t� |S )z�Loads default cert provider command. Returns: str: The default command. Raises: CertProvisionError: If command cannot be found. z+Client certificate provider file not found.z.Client certificate provider command not found.)r2 r r9 �_CERT_PROVIDER_COMMAND�(_CERT_PROVIDER_COMMAND_PASSPHRASE_OPTIONr" )r1 Z metadata_json�commandr r r �_default_command� s r= c @ s( e Zd ZdZdd� Zdd� Zdd� ZdS ) �_ContextConfigz�Represents the configurations associated with context aware access. Only one instance of Config can be created for the program. c C s� || _ t�dd�| _d| _| js$dS t�| j� tj � t � � d�| _z| � | j� W n4 ty� } z | j �d| � W Y d}~n d}~0 0 dS )zQInitializes config. Args: logger (logging.logger): gsutil logger. � Credentials�use_client_certificateNz caa_cert.pemz*Failed to provision client certificate: %s)r% r �getboolr@ �client_cert_path�atexit�register�_unprovision_client_certr, r- r# r ZGetGsutilStateDir�_provision_client_certr �error)�selfr% r8 r r r �__init__� s � �z_ContextConfig.__init__c C s t �ddd�}|r |�d�}nt� }z�t�|�\}}t|| j�}t|d��\}|� |d � d|v r�|� |d � |d � � d | _ n|� |d � d| _ W d � n1 s�0 Y W nb t j tfy� } zt|��W Y d}~n:d}~0 t�y } ztd | ��W Y d}~n d}~0 0 dS ) zDExecutes certificate provider to obtain client certificate and keys.r? r N� zw+� CERTIFICATEzENCRYPTED PRIVATE KEYZ PASSPHRASE� z PRIVATE KEYz6Invalid output format from certificate provider, no %s)r �get�splitr= r ZExecuteExternalCommandr+ r% r3 �writer Zclient_cert_passwordr �ExternalBinaryError�OSErrorr �KeyError) rH Z cert_pathZcert_command_stringZ cert_commandZcommand_stdout_string�_�sectionsr7 r8 r r r rF � s0 � � ( �z%_ContextConfig._provision_client_certc C sf | j durbz"t�| j � | j�d| j � W n4 ty` } z | j�d| � W Y d}~n d}~0 0 dS )z@Cleans up any files or resources provisioned during config init.Nz Unprovisioned client cert: %sz'Failed to remove client certificate: %s)rB r, �remover% �debugrQ rG )rH r8 r r r rE � s � z'_ContextConfig._unprovision_client_certN)r r r r rI rF rE r r r r r> � s r> c C s t st| �a t S t�dS )z�Should be run once at gsutil startup. Creates global singleton. Args: logger (logging.logger): For logging during config functions. Returns: New ContextConfig singleton. Raises: Exception if singleton already exists. N)�_singleton_configr> r )r% r r r �create_context_config� s rX c C s t S )zuRetrieves ContextConfig global singleton. Returns: ContextConfig or None if global singleton doesn't exist. )rW r r r r �get_context_config s rY )#r � __future__r r r r rC r4 r, �botor �gslibr � gslib.utilsr r rW r- r. r# r/ r: r; � Exceptionr r r r+ r2 r9 r= �objectr> rX rY r r r r �<module> s8 � 8H
SIMPAN
[ BATAL ]