| Server IP : 172.24.0.40 / Your IP : 216.73.216.10 Web Server : Apache System : Linux dbweb26.ust.edu.ph 4.18.0-513.5.1.el8_9.x86_64 #1 SMP Fri Sep 29 05:21:10 EDT 2023 x86_64 User : apache ( 48) PHP Version : 8.2.18 Disable Function : NONE MySQL : OFF | cURL : ON | WGET : ON | Perl : ON | Python : OFF | Sudo : ON | Pkexec : ON Directory : /lib64/python3.6/site-packages/rhsm/__pycache__/ |
Upload File : |
3
a�e�w � @ s� d dl mZmZmZ d dlZd dlZd dlZd dlZd dlZd dl Z d dl
Z
ej e �Z
d dlmZmZ d dlmZ d dlmZ d dlmZ d dlmZmZmZmZmZm Z m Z d dl m Z d d lm Z! d
Z"d Z#d Z$d
Z%dZ&dZ'dZ(dZ)dZ*dZ+G dd� de,�Z-G dd� de.�Z/G dd� de.�Z0G dd� de�Z1G d d � d e.�Z2G d d � d e2�Z3G d d!� d!e2�Z4G d"d#� d#e4�Z5G d$d%� d%e.�Z6G d&d'� d'e.�Z7G d(d)� d)e.�Z8G d*d+� d+e.�Z9dS ),� )�print_function�division�absolute_importN)�datetime� timedelta)�Optional)� _certificate)�safe_int)�
Extensions�OID� DateRange�GMT�get_datetime_from_x509�
parse_tags�CertificateException)�PathTree)�ourjsonz1.3.6.1.4.1.2312.9�4z4.1�6�7�8� � � ZOrgLevelc @ s< e Zd ZdZd eeee ee d�dd�Zed�dd�ZdS )
�CertificateLoadingErrorz5
A certificate loading failure from OpenSSL.
N)�liberr� reasonerr�path�pemc C s || _ || _|| _|| _dS )a<
:param liberr: string representing the OpenSSL library where the failure
occurred
:param reasonerr: string representing the OpenSSL failure string
:param path: string representing the file being loaded
:param pem: string representing the PEM data being loaded
N)r r r r )�selfr r r r � r �$/usr/lib64/python3.6/certificate2.py�__init__; s z CertificateLoadingError.__init__)�returnc C sD | j � d| j� �}| jr*|d| j� �7 }n| jr@|d| j� �7 }|S )Nz: )r r r r )r �errr r r! �__str__H s z CertificateLoadingError.__str__)NN)�__name__�
__module__� __qualname__�__doc__�strr r" r% r r r r! r 6 s
r c @ s� e Zd ZdZdd� Zd+dd�Zdd� Zd d
� Zd d � Zd
d� Z dd� Z
dd� Z dd� Z dd� Z
dd� Zdd� Zdd � Zd d � Zd d � Zd!d"� Zd#d$� Zd%d&� Zd'd(� Zd)d*� ZdS ),� _CertFactorya�
Factory for creating certificate objects.
Examines the incoming file or PEM text, parses the OID structure,
from the server, and returns the correct implementation class.
determines the type of certificate we're dealing with
(entitlement/product), as well as the version of the certificate
NOTE: Please use the factory methods that leverage this class in
certificate.py instead of this class.
c C s� yt |d�j� }W n. tk
r@ } ztd| ��W Y dd}~X nX ytj|�}W n> tjk
r� } z t|jd |jd |d��W Y dd}~X nX | j |||�S dS )zP
Create appropriate certificate object from a PEM file on disk.
�rz Error loading certificate: %sNr r )r )
�open�read�IOErrorr r �load� OpenSSLCertificateLoadingErrorr �args�
_read_x509)r r r r$ �cert�excr r r! �create_from_file^ s ,z _CertFactory.create_from_fileNc C sn |s t d��ytj|d�}W n> tjk
rZ } z t|jd |jd |d��W Y dd}~X nX | j|||�S dS )zJ
Create appropriate certificate object from a PEM string.
zEmpty certificate)r r r N)r r r0 r1 r r2 r3 )r r r r4 r5 r r r! �create_from_pemm s ,z _CertFactory.create_from_pemc C s� yvt |�}tt�}|j|�}d}t|kr6|t jd�}t|�}|jdkrX| j||||�S |jdkrt| j |||||�S W n\ t
k
r� } z
|�W Y d d }~X n8 t k
r� } z t j
|� t
t|���W Y d d }~X nX d S )Nz1.0zutf-8r r )� _Extensions2r �REDHAT_OID_NAMESPACE�branch�EXT_CERT_VERSION�decode�Version�major�_create_v1_cert�_create_v3_certr � Exception�log� exceptionr* ) r �x509r r �
extensionsZ
redhat_oidZcert_version_str�version�er r r! r3 z s"
z_CertFactory._read_x509c C sV | j |�}|tkr"| j||||�S |tkr:| j||||�S |tkrR| j||||�S d S )N)�_get_v1_cert_type�
IDENTITY_CERT�_create_identity_cert�ENTITLEMENT_CERT�_create_v1_ent_cert� PRODUCT_CERT�_create_v1_prod_cert)r rF rE rD r Z cert_typer r r! r? � s
z _CertFactory._create_v1_certc C s& |j dd�}|dkrdS |jd�S dS )z+Try to read subjectAltName from certificateZsubjectAltName)�nameN� zutf-8)Z
get_extensionr< )r rD �alt_namer r r! �_read_alt_name� s z_CertFactory._read_alt_namec C s |j � S )N)Z
get_issuer)r rD r r r! � _read_issuer� s z_CertFactory._read_issuerc C s |j � S )N)Z get_subject)r rD r r r! �
_read_subject� s z_CertFactory._read_subjectc C sD t ||||j� t|j� �t|j� �| j|�| j|�| j|�d� }|S )N) rD r rF �serial�start�endrQ �subject�issuer)�IdentityCertificate�get_serial_numberr �get_not_before�
get_not_afterrR rT rS )r rF rE rD r r4 r r r! rJ � s
z"_CertFactory._create_identity_certc C sH | j |�}t||||j� t|j� �t|j� �|| j|�| j|�d� }|S )N) rD r rF rU rV rW �productsrX rY )�_parse_v1_products�ProductCertificater[ r r\ r] rT rS )r rF rE rD r r^ r4 r r r! rN � s
z!_CertFactory._create_v1_prod_certc C sb | j |�}| j|�}| j|�}t||||j� t|j� �t|j� �| j|�||||| j |�d� }|S )N) rD r rF rU rV rW rX �order�contentr^ rE rY )
�_parse_v1_order�_parse_v1_contentr_ �EntitlementCertificater[ r r\ r] rT rS ) r rF rE rD r ra rb r^ r4 r r r! rL � s"
z _CertFactory._create_v1_ent_certc C s� g }x�|j d�D ]�}|d }|jd�}|d }|j|�}|jd�|jd�|jd�|jd�|jd�|jd �d
�}x.t|j� �D ] \} }
|
d k r||
jd �|| < q|W t|d
�|d
< |jt f d|i|��� qW |S )z]
Returns an ordered list of all the product data in the
certificate.
z1.*.1r r �1�2�3r �5r )rO rF �
architectures�
provided_tags�
brand_type�
brand_nameNzutf-8rk �id)
�find�rtrimr: �get�list�itemsr< r �append�Product) r rE r^ Zprod_namespace�oid�rootZ
product_idZextZ product_data�key�valuer r r! r_ � s$
z _CertFactory._parse_v1_productsc C s� |j t�}|jd�|jd�|jd�|jd�|jd�|jd�|jd�|jd�|jd �|jd
�|jd �|jd �|jd
�|jd�|jd�|jd�d�}x.t|j� �D ] \}}|d k r�|jd�||< q�W tf |�}|S )Nrf rg rh r ri r �9�10Z11Z12Z13Z14Z15Z16Z17Z18)rO �number�sku� subscription�quantity�
virt_limit� socket_limit�contract�
quantity_used�warning_period�account�provides_management�
service_level� service_type� stacking_id� virt_onlyzutf-8)r: �ORDER_NAMESPACErq rr rs r< �Order)r rE Zorder_extensionsZ
order_datarx ry ra r r r! rc � s,
z _CertFactory._parse_v1_orderc
C s� g }|j d�}x�|D ]�}|d jd�}|j|�}|j|�|jd�|jd�|jd�|jd�|jd�|jd �|jd
�|jd �d � }x.t|j� �D ] \}} | d k r�| jd
�||< q�W t|d �|d< |jt f |�� qW |S )Nz2.*.*.1r r rf rg ri r r r rz r{ ) � content_typerO �label�vendor�url�gpg�enabled�metadata_expire�
required_tagszutf-8r� )
ro rp r: rq rr rs r< r rt �Content)
r rE rb ZentsZentrv Z content_extZ content_datarx ry r r r! rd s(
z _CertFactory._parse_v1_contentc C s. t |kr tS t|jddd��dkr&tS tS d S )Nz1.*.1r Tr )�EXT_ORDER_NAMErK �lenro rM rI )r rE r r r! rH . s
z _CertFactory._get_v1_cert_typec
C s� y$|j d�d }|j d�d j� }W n tk
r< d }Y nX |r|| jtj|��}| j|�}| j|�} | j|�}
| j |�} nd }d } d }
d } t
|||||j � t |j
� �t |j� �| j|�|| |
| || j|�d�} | S )Nz -----BEGIN ENTITLEMENT DATA-----r z -----END ENTITLEMENT DATA-----r )rD r rF rE rU rV rW rX ra rb r^ �poolr rY )�split�strip�
IndexError�_decompress_payload�base64Z b64decode�_parse_v3_order�_parse_v3_content�_parse_v3_products�_parse_v3_poolre r[ r r\ r] rT rS )
r rF rE rD r r Zentitlement_data�payloadra rb r^ r� r4 r r r! r@ 9 s>
z _CertFactory._create_v3_certc C s� |d }|d }d }d }d|kr@|d j dd �}|d j dd �}t|d |j dd �|j dd �|j d d �|j d
d �|j d d �|j d d �|j d
d�|j dd �|j dd�|||j dd �|j dd�|j dd �|j dd �|j dd �|j dd �|j dd �d�S )Nr~ ra Zservice�level�typerO r| r} r Zsocketsr� r Zwarningr r� Z
managementFr� r� ZramZcores�roles�usage�addons)rO r| r} r r� r� r� r� r� r� r� r� r� r� � ram_limit�
core_limitr� r� r� )rq r� )r r� �subra r� r� r r r! r� ` s6
z _CertFactory._parse_v3_orderc C s` |d }g }xN|D ]F}|j t|d |d |jdd�|jdg �|jdd�|jdd�d �� qW |S )
z]
Returns an ordered list of all the product data in the
certificate.
r^ rn rO rF Nrj rl rm )rn rO rF rj rl rm )rt ru rq )r r� Zproduct_payloadr^ �productr r r! r� � s
z _CertFactory._parse_v3_productsc C s� g }x�|d D ]|}xv|d D ]j}|j t|d |d |d |jdd �|jdd �|jdd �|jd d
�|jd d �|jd g �|jd
g �d�
� q W qW |S )Nr^ rb r� rO r� r� r Zgpg_urlr� Tr� r� �arches)
r� rO r� r� r� r� r� r� r� r� )rt r� rq )r r� rb r� �cr r r! r� � s
z _CertFactory._parse_v3_contentc C s" |j dd �}|r t|d d�S d S )Nr� rn )rn )rq �Pool)r r� r� r r r! r� � s z_CertFactory._parse_v3_poolc C sT yt j|�jd�}tj|�S tk
rN } ztj|� td��W Y dd}~X nX dS )z�
Certificate payloads arrive in zlib compressed strings
of JSON.
This method de-compresses and parses the JSON and returns the
resulting dict.
zutf-8z0Error decompressing/parsing certificate payload.N) �zlibZ
decompressr< �json�loadsrA rB rC r )r r� Z decompressedrG r r r! r� � s
z _CertFactory._decompress_payload)N)r& r' r( r) r6 r7 r3 r? rR rS rT rJ rN rL r_ rc rd rH r@ r� r� r� r� r� r r r r! r+ Q s*
' r+ c @ s e Zd ZdZdd� Zdd� ZdS )r= z/ Small wrapper for version string comparisons. c C sn || _ |jd�| _x*tt| j��D ]}t| j| �| j|< q"W | jd | _d| _t| j�dkrj| jd | _d S )N�.r r )� version_strr� Zsegments�ranger� �intr> �minor)r r� �ir r r! r" � s zVersion.__init__c C s | j S )N)r� )r r r r! r% � s zVersion.__str__N)r& r' r( r) r" r% r r r r! r= � s r= c @ s e Zd Zdd� ZdS )r8 c C s6 |j � }x(t|j� �D ]\}}t|�}|| |< qW dS )zS
Override parent method for an X509 object from the new C wrapper.
N)Zget_all_extensionsrr rs r )r rD rE rx ry rv r r r! �_parse� s z_Extensions2._parseN)r& r' r( r� r r r r! r8 � s r8 c @ sv e Zd ZdZddd�Zd dd�Zd dd�Zd d
� Zd d � Zd
d� Z dd� Z
dd� Z dd� Z dd� Z
dd� Zdd� ZdS ) � Certificatez- Parent class of all x509 certificate types. Nc
C sZ || _ || _|| _|d kr"td��|| _|| _|| _t| j| j�| _|| _ || _
| | _ d S )NzCertificate has no serial) rD r rF r rU rV rW r � valid_ranger rX rY )
r rD r rF rU rV rW rX r rY r r r! r" � s zCertificate.__init__c C s* t j� }|r|}|jt� d�}| jj|�S )N)�tzinfo)r �utcnow�replacer
r� Zhas_date)r �on_date�gmtr r r! �is_valid� s
zCertificate.is_validc C s, t j� }|r|}|jt� d�}| jj� |k S )N)r� )r r� r� r
r� rW )r r� r� r r r! �
is_expired s
zCertificate.is_expiredc C s | j |j k S )N)rW )r �otherr r r! �__lt__ s zCertificate.__lt__c C s | j |j k S )N)rW )r r� r r r! �__le__ s zCertificate.__le__c C s | j |j kS )N)rW )r r� r r r! �__gt__ s zCertificate.__gt__c C s | j |j kS )N)rW )r r� r r r! �__ge__ s zCertificate.__ge__c C s t |d�o| j|jkS )NrU )�hasattrrU )r r� r r r! �__eq__ s zCertificate.__eq__c C s t |d� p| j|jkS )NrU )r� rU )r r� r r r! �__ne__ s zCertificate.__ne__c C s | j S )N)rU )r r r r! �__hash__ s zCertificate.__hash__c C sP t |d�}| jdk r"|j| j� n|j| jj� � |j� tj|d� || _dS )z0
Write the certificate to disk.
�wNi� ) r- r �writerD Zas_pem�close�os�chmodr )r r �fr r r! r� s
zCertificate.writec C s | j rtj| j � ntd��dS )zC
Delete the file associated with this certificate.
z'Certificate has no path, cannot delete.N)r r� �unlinkr )r r r r! �delete- s zCertificate.delete) NNNNNNNNN)N)N)r& r' r( r) r" r� r� r� r� r� r� r� r� r� r� r� r r r r! r� � s
r� c @ s e Zd Zddd�ZdS )rZ Nc K s t j| f|� || _d S )N)r� r" rQ )r rQ �kwargsr r r! r" 8 s z IdentityCertificate.__init__)N)r& r' r( r" r r r r! rZ 7 s rZ c @ s e Zd Zddd�ZdS )r` Nc K s$ t j| f|� |d krg }|| _d S )N)r� r" r^ )r r^ r� r r r! r" > s zProductCertificate.__init__)N)r& r' r( r" r r r r! r` = s r` c @ sp e Zd Zddd�Zedd� �Zedd� �Zedd � �Zdd
d �Zd d
� Z dd� Z
e dd� �Z dd� Z
dd� ZdS )re Nc K s0 t j| f|� || _|| _|| _|| _d | _d S )N)r` r" ra rb r� rE �_path_tree_object)r ra rb r� rE r� r r r! r" J s z EntitlementCertificate.__init__c C s& | j jt�r | j jt�jd�S dS d S )Nzutf-8ZBasic)rE rq � EXT_ENT_TYPEr< )r r r r! �entitlement_typeR s z'EntitlementCertificate.entitlement_typec C sH | j jdk r td| j j ��| jsB| jt }|s8td��t|�| _| jS )z�
:return: PathTree object built from this cert's extensions
:rtype: rhsm.pathtree.PathTree
:raise: AttributeError if self.version.major < 3
r z path tree not used for v%d certsz0Certificate has empty entitlement data extension)rF r> �AttributeErrorr� rE �EXT_ENT_PAYLOADr )r �datar r r! �
_path_treeY s
z!EntitlementCertificate._path_treec C s g }| j j|� |S )N)r� Zbuild_path_list)r �pathsr r r! �provided_pathsm s z%EntitlementCertificate.provided_pathsc C sB t j� }|r|}|jt� d�}tt| jj�d�}| jj � | |k S )N)r� )Zdays)
r r� r� r
r r� ra r� r� rW )r r� r� Z warning_timer r r! � is_expirings s z"EntitlementCertificate.is_expiringc C s0 t j|�}| jjdk r | j|�S | jj|�S dS )a�
Checks the given path against the list of entitled paths as encoded in
extensions. See PathTree for more detailed docs.
:param path: path to which access is being requested
:type path: basestring
:return: True iff the path matches, else False
:rtype: bool
:raise: ValueError when self.version.major < 3
r N)� posixpath�normpathrF r> �_check_v1_pathr� Z
match_path)r r r r r! �
check_path{ s
z!EntitlementCertificate.check_pathc C sf |j d�}d}xRt| jj� �D ]@\}}|jd�}|jtd��r |jtd��r | j||�r d}P q W |S )z�
Check the requested path against a v1 certificate
:param path: requested path
:type path: basestring
:return: True iff the path matches, else False
:rtype: bool
�/Fzutf-8z2.z.1.6T)r� rr rE rs r< �matchr �_validate_v1_url)r r ZvalidZext_oid�oid_urlr r r! r� � s
z%EntitlementCertificate._check_v1_pathc C s$ t jdd| jd��}t j||�dk S )a�
Determines if the destination URL matches the OID's URL.
Swaps out all $ variables (e.g. $basearch, $version) for a reg ex
wildcard in that location. For example, the following entitlement:
content/dist/rhel/server/$version/$basearch/os
Should allow any value for the variables:
content/dist/rhel/server/.+?/.+?/os
:param oid_url: path associated with an entitlement OID, as pulled from
the cert's extensions.
:type oid_url: basestring
:param dest: path requested by a client
:type dest: basestring
:return: True iff the OID permits the destination else False
:rtype: bool
z \$[^/]+(/|$)z[^/]+/r� N)�rer� r� r� )r� �destZoid_rer r r! r� � s z'EntitlementCertificate._validate_v1_urlc C s t j| � | j� }tj|� dS )zA
Override parent to also delete certificate key.
N)r� r� �key_pathr� r� )r r� r r r! r� � s
z EntitlementCertificate.deletec C sx t jj| j�\}}ydt|jdd�� }W n: tk
rd } z tj|� td| j ��W Y dd}~X nX t jj ||�}|S )z>
Returns the full path to the cert key's pem.
z %s-key.%sr� r zqEntitlement certificate path "%s" is not in in the expected format so the key file path could not be based on it.N)
r� r r� �tuple�rsplit� TypeErrorrB rC r �join)r Zdir_pathZ
cert_filenameZ key_filenamerG r� r r r! r� � s
z EntitlementCertificate.key_path)NNNN)N)r& r' r( r" �propertyr� r� r� r� r� r� � staticmethodr� r� r� r r r r! re H s
re c @ s" e Zd ZdZddd�Zdd� ZdS )ru z@
Represents the product information from a certificate.
Nc C s� |d krt d��|d kr t d��|| _|| _|| _|| _t| jtj�rRt| j�| _| jd krbg | _|| _ | j d krxg | _ || _
|| _ d S )NzProduct missing namezProduct missing ID) r rn rO rF rj �
isinstance�sixZ string_typesr rk rl rm )r rn rO rF rj rk rl rm r r r! r" � s"
zProduct.__init__c C s | j |j kS )N)rn )r r� r r r! r� � s zProduct.__eq__)NNNNNNN)r& r' r( r) r" r� r r r r! ru � s
ru c @ s" e Zd ZdZddd�Zdd� ZdS )r� zc
Represents the order information for the subscription an entitlement
originated from.
Nc C s� || _ || _|| _|| _t|d �| _t| d�| _|| _|| _t|d �| _ t|
d�| _
|| _ | | _ | pfd| _
|
| _|| _|| _|| _|| _|p�d| _t|d �| _t|d �| _d S )Nr r F)rO r| r} r~ r r r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� )r rO r| r} r~ r r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r r r! r" s*
zOrder.__init__c C s d| j | j| jf S )Nz!<Order: name=%s number=%s sku=%s>)rO r| r} )r r r r! r% / s z
Order.__str__)NNNNNNNNNNNNNNNNNNNNN)r& r' r( r) r" r% r r r r! r� � s
%r� c
@ s. e Zd Zd
dd�Zdd� Zdd� Zdd � ZdS ) r� Nc C s� |d ks|d krt d��|| _|| _|| _|| _|| _|| _|sHt d��|d
kr\t d| ��d| _|d ksz|dksz|d kr�d | _|| _| p�g | _ |
p�g | _
d S ) NzContent missing name/labelz!Content does not have a type set.r r �0rf z#Invalid content enabled setting: %sFT)Nr r r� rf ) r r� rO r� r� r� r� r� r� r� r� ) r r� rO r� r� r� r� r� r� r� r� r r r! r" 6 s&
zContent.__init__c C s t || j�o| j|jkS )N)r� � __class__r� )r r� r r r! r� U s zContent.__eq__c C s d| j | j| j| jf S )Nz6<Content: content_type=%s name=%s label=%s enabled=%s>)r� rO r� r� )r r r r! r% X s zContent.__str__c C s
t | j�S )N)�hashr� )r r r r! r� \ s zContent.__hash__)
NNNNNNNNNN)r& r' r( r" r� r% r� r r r r! r� 4 s
r� c @ s" e Zd ZdZddd�Zdd� ZdS )r� z=
Represents the pool an entitlement originates from.
Nc C s |d krt d��|| _d S )NzPool is missing ID)r rn )r rn r r r! r" d s z
Pool.__init__c C s | j |j kS )N)rn )r r� r r r! r� i s z Pool.__eq__)N)r& r' r( r) r" r� r r r r! r� ` s
r� ):Z
__future__r r r r� Zloggingr� r� r� r� r� Z getLoggerr& rB r r Ztypingr Zrhsmr Zrhsm.connectionr Zrhsm.certificater
r r r
r r r Z
rhsm.pathtreer r r� r9 r� r� r; r� r� rM rK rI ZCONTENT_ACCESS_CERT_TYPErA r �objectr+ r= r8 r� rZ r` re ru r� r� r� r r r r! �<module> sP
$ o [ #6,