Tryag File Manager
Home
-
Turbo Force
Current Path :
/
usr
/
lib
/
python2.4
/
site-packages
/
rhsm
/
Upload File :
New :
File
Dir
//usr/lib/python2.4/site-packages/rhsm/certificate2.pyc
m Wx[Uc @ s d k Z d k Z d k Z d k Z d k Z d k Z e i e Z d k l Z l Z d k l Z d k l Z d k l Z l Z l Z l Z l Z l Z l Z d k l Z d k l Z d Z d Z d Z d Z d Z d Z d Z! d Z" d e# f d YZ$ d e# f d YZ% d e f d YZ& d e# f d YZ' d e' f d YZ( d e' f d YZ) d e) f d YZ* d e# f d YZ+ d e# f d YZ, d! e# f d" YZ- d# e# f d$ YZ. d S(% N( s datetimes timedelta( s _certificate( s safe_int( s Extensionss OIDs DateRanges GMTs get_datetime_from_x509s parse_tagss CertificateException( s PathTree( s ourjsons 1.3.6.1.4.1.2312.9t 4s 4.1t 6t 7i i i t _CertFactoryc B s t Z d Z d Z e d Z d Z d Z d Z d Z d Z d Z d Z d Z d Z d Z d Z d Z d Z d Z d Z d Z d Z d Z RS( s Factory for creating certificate objects. Examines the incoming file or PEM text, parses the OID structure, from the server, and returns the correct implementation class. determines the type of certificate we're dealing with (entitlement/product), as well as the version of the certificate NOTE: Please use the factory methods that leverage this class in certificate.py instead of this class. c C s1 t | d i } | i t i | | | S( sP Create appropriate certificate object from a PEM file on disk. t rN( t opent patht readt pemt selft _read_x509t _certificatet load( R R R ( ( t5 /usr/lib/python2.4/site-packages/rhsm/certificate2.pyt create_from_file= s c C s6 | p t d n | i t i d | | | S( sJ Create appropriate certificate object from a PEM string. s Empty certificateR N( R t CertificateExceptionR R R R R ( R R R ( ( R t create_from_pemD s c C s! | p t d n y t | } t t } | i t | } d } t | j o | t } n t | } | i d j o | i | | | | Sn | i d j o | i | | | | | Sn WnN t j o } | n5 t j o( } t i | t t | n Xd S( Ns Error loading certificates 1.0i i ( t x509R t _Extensions2t extensionst OIDt REDHAT_OID_NAMESPACEt redhat_oidt ltrimt lent cert_version_strt EXT_CERT_VERSIONt Versiont versiont majorR t _create_v1_certR t _create_v3_certR t et Exceptiont logt exceptiont str( R R R R R R R R R ( ( R R L s& ! c C s | i | } | t j o | i | | | | SnO | t j o | i | | | | Sn( | t j o | i | | | | Sn d S( N( R t _get_v1_cert_typeR t cert_typet IDENTITY_CERTt _create_identity_certR R R t ENTITLEMENT_CERTt _create_v1_ent_certt PRODUCT_CERTt _create_v1_prod_cert( R R R R R R& ( ( R R f s c C s | i d d S( Nt namet subjectAltName( R t get_extension( R R ( ( R t _read_alt_nameq s c C s | i S( N( R t get_issuer( R R ( ( R t _read_issuert s c C s | i S( N( R t get_subject( R R ( ( R t _read_subjectw s c C s| t d | d | d | d | i d t | i d t | i d | i | d | i | d | i | } | S( NR R R t serialt startt endt alt_namet subjectt issuer( t IdentityCertificateR R R t get_serial_numbert get_datetime_from_x509t get_not_beforet get_not_afterR R0 R4 R2 t cert( R R R R R R@ ( ( R R( z s c C s | i | } t d | d | d | d | i d t | i d t | i d | d | i | d | i | } | S( NR R R R5 R6 R7 t productsR9 R: ( R t _parse_v1_productsR RA t ProductCertificateR R R R< R= R> R? R4 R2 R@ ( R R R R R RA R@ ( ( R R, s c C s | i | } | i | } | i | } t d | d | d | d | i d t | i d t | i d | i | d | d | d | d | d | i | } | S( NR R R R5 R6 R7 R9 t ordert contentRA R R: ( R t _parse_v1_orderR RD t _parse_v1_contentRE RB RA t EntitlementCertificateR R R R< R= R> R? R4 R2 R@ ( R R R R R RA RE R@ RD ( ( R R* s c C s g } x | i d D] } | d } | i d } | d } | i | } | i t d | d | i d d | i d d | i d d t | i d d | i d d | i d q W| S( s] Returns an ordered list of all the product data in the certificate. s 1.*.1i i t idR- t 1R t 2t architecturest 3t provided_tagsR t brand_typet 5t brand_nameR N( RA R t findt prod_namespacet oidt rtrimt roott product_idt brancht extt appendt Productt gett parse_tags( R R RW RT RY RA RS RV ( ( R RB s c " C s | i t } t d | i d d | i d d | i d d | i d d | i d d | i d d | i d d | i d d | i d d | i d d | i d d | i d d | i d d | i d d | i d d | i d } | S(! NR- RJ t numberRK t skuRM t subscriptionR t quantityRP t virt_limitt 8t socket_limitt 9t contractt 10t quantity_usedt 11t warning_periodt 12t accountt 13t provides_managementt 14t service_levelt 15t service_typet 16t stacking_idt 17t virt_onlyt 18( R RX t ORDER_NAMESPACEt order_extensionst OrderR\ RD ( R R Ry RD ( ( R RF s$ c C s g } | i d } x | D] } | d i d } | i | } | i t d | i | d | i d d | i d d | i d d | i d d | i d d | i d d | i d d t | i d q W| S( Ns 2.*.*.1i i t content_typeR- RJ t labelRK t vendorRP t urlR t gpgR t enabledRc t metadata_expireRe t required_tagsRg ( RE R RR t entst entRU RT RX t content_extRZ t ContentR\ R] ( R R RT RE R R R ( ( R RG s c C sG t | j o t Sn/ t | i d d t d j o t Sn t Sd S( Ns 1.*.1i i ( t EXT_ORDER_NAMER R) R RR t TrueR+ R' ( R R ( ( R R% s "c C sT y0 | i d d } | i d d i } Wn t j o d } n X| oX | i t i | } | i | } | i | } | i | } | i | } n d } d } d } d } t d | d | d | d | d | i d t | i d t | i d | i | d | d | d | d | d | d | i | } | S( Ns -----BEGIN ENTITLEMENT DATA-----i s -----END ENTITLEMENT DATA-----i R R R R R5 R6 R7 R9 RD RE RA t poolR R: ( R t splitt entitlement_datat stript IndexErrort NoneR t _decompress_payloadt base64t b64decodet payloadt _parse_v3_orderRD t _parse_v3_contentRE t _parse_v3_productsRA t _parse_v3_poolR RH R R R R R< R= R> R? R4 R2 R@ ( R R R R R R R RA RD RE R@ R R ( ( R R s< c # C sd | d } | d } d } d } d | j o0 | d i d d } | d i d d } n t d | d d | i d d d | i d d d | i d d d | i d d d | i d d d | i d d d | i d d d | i d d d | i d t d | d | d | i d d d | i d t d | i d d d | i d d S( NR` RD t servicet levelt typeR- R^ R_ Ra Rd t socketsRf Rh i Rj t warningi Rl Rn t managementRp Rr Rt Rv t ram_limitt ramt core_limitt cores( R t subRD R Rp Rr R\ Rz t False( R R Rp R Rr RD ( ( R R s. c C s | d } g } xz | D]r } | i t d | d d | d d | i d d d | i d g d | i d d d | i d d q W| S( s] Returns an ordered list of all the product data in the certificate. RA RI R- R RL RO RQ N( R t product_payloadRA t productRZ R[ R\ R ( R R R R RA ( ( R R < s c C s g } x | d D] } x | d D] } | i t d | d d | d d | d d | i d d d | i d d d | i d d d | i d t d | i d d d | i d g d | i d g q" Wq W| S( NRA RE R{ R R- R| R} R~ R R t gpg_urlR R R t arches( RE R R t cRZ R R\ R R ( R R R R RE ( ( R R R s !c C s2 | i d d } | o t d | d Sn d S( NR RI ( R R\ R R t Pool( R R R ( ( R R d s c C sU y t i | } t i | SWn. t j o" } t i | t d n Xd S( s Certificate payloads arrive in zlib compressed strings of JSON. This method de-compresses and parses the JSON and returns the resulting dict. s0 Error decompressing/parsing certificate payload.N( t zlibt decompressR t decompressedt jsont loadsR! R R" R# R ( R R R R ( ( R R j s ( t __name__t __module__t __doc__R R R R R R0 R2 R4 R( R, R* RB RF RG R% R R R R R R ( ( ( R R 0 s* ' R c B s t Z d Z d Z d Z RS( s/ Small wrapper for version string comparisons. c C s | | _ | i d | _ x7 t t | i D] } t | i | | i | <q1 W| i d | _ d | _ t | i d j o | i d | _ n d S( Nt .i i ( t version_strR R t segmentst rangeR t it intR t minor( R R R ( ( R t __init__| s c C s | i S( N( R R ( R ( ( R t __str__ s ( R R R R R ( ( ( R R z s R c B s t Z d Z RS( Nc C sC | i } x0 | i D]" \ } } t | } | | | <q Wd S( sS Override parent method for an X509 object from the new C wrapper. N( R t get_all_extensionsR t itemst keyt valueR RT R ( R R RT R R R ( ( R t _parse s ( R R R ( ( ( R R s t Certificatec B se t Z d Z e e e e e e e e e d Z e d Z e d Z d Z d Z d Z RS( s- Parent class of all x509 certificate types. c C s | | _ | | _ | | _ | d j o t d n | | _ | | _ | | _ t | i | i | _ | | _ | | _ | | _ d S( Ns Certificate has no serial( R R R R R5 R R R6 R7 t DateRanget valid_rangeR R9 R: ( R R R R R5 R6 R7 R9 R R: ( ( R R s c C sB t i } | o | } n | i d t } | i i | S( Nt tzinfo( t datetimet utcnowt gmtt on_datet replacet GMTR R t has_date( R R R ( ( R t is_valid s c C sE t i } | o | } n | i d t } | i i | j S( NR ( R R R R R R R R R7 ( R R R ( ( R t is_expired s c C s: | i | i j o d Sn | i | i j o d Sn d S( Nii i ( R R7 t other( R R ( ( R t __cmp__ s c C s` t | d } | i d j o | i | i n | i | i i | i | | _ d S( s0 Write the certificate to disk. t wN( R R t fR R R t writeR t as_pemt close( R R R ( ( R R s c C s. | i o t i | i n t d d S( sC Delete the file associated with this certificate. s' Certificate has no path, cannot delete.N( R R t ost unlinkR ( R ( ( R t delete s ( R R R R R R R R R R ( ( ( R R s $ R; c B s t Z d d Z RS( Nc K s t i | | | | _ d S( N( R R R t kwargsR8 ( R R8 R ( ( R R s ( R R R R ( ( ( R R; s RC c B s t Z d d Z RS( Nc K s4 t i | | | d j o g } n | | _ d S( N( R R R R RA R ( R RA R ( ( R R s ( R R R R ( ( ( R RC s RH c B sk t Z d d d d d Z e d Z d d Z d Z d Z e d Z d Z d Z RS( Nc K sA t i | | | | _ | | _ | | _ | | _ d | _ d S( N( RC R R R RD RE R R R t _path_tree_object( R RD RE R R R ( ( R R s c C s^ | i i d j o t d | i i n | i p | i t } t | | _ n | i S( s :return: PathTree object built from this cert's extensions :rtype: rhsm.pathtree.PathTree :raise: AttributeError if self.version.major < 3 i s path tree not used for v%d certsN( R R R t AttributeErrorR R t EXT_ENT_PAYLOADt datat PathTree( R R ( ( R t _path_tree s c C sd t i } | o | } n | i d t } t d t | i i } | i i | | j S( NR t days( R R R R R R t timedeltaR R RD Rj t warning_timeR R7 ( R R R R ( ( R t is_expiring s c C sG t i | } | i i d j o | i | Sn | i i | Sd S( s Checks the given path against the list of entitled paths as encoded in extensions. See PathTree for more detailed docs. :param path: path to which access is being requested :type path: basestring :return: True iff the path matches, else False :rtype: bool :raise: ValueError when self.version.major < 3 i N( t posixpatht normpathR R R R t _check_v1_pathR t match_path( R R ( ( R t check_path s c C s | i d } t } xk | i i D]Z \ } } | i t d o8 | i t d o" | i | | o t } Pq q% q% W| S( s Check the requested path against a v1 certificate :param path: requested path :type path: basestring :return: True iff the path matches, else False :rtype: bool t /s 2.s .1.6N( R R R t validR R t iteritemst ext_oidt oid_urlt matchR t _validate_v1_urlR ( R R R R R ( ( R R 0 s , c C s4 t i d d | i d } t i | | d j S( s Determines if the destination URL matches the OID's URL. Swaps out all $ variables (e.g. $basearch, $version) for a reg ex wildcard in that location. For example, the following entitlement: content/dist/rhel/server/$version/$basearch/os Should allow any value for the variables: content/dist/rhel/server/.+?/.+?/os :param oid_url: path associated with an entitlement OID, as pulled from the cert's extensions. :type oid_url: basestring :param dest: path requested by a client :type dest: basestring :return: True iff the OID permits the destination else False :rtype: bool s \$[^/]+(/|$)s [^/]+/R N( t reR R R t oid_reR t destR ( R R R ( ( R R C s c C s* t i | | i } t i | d S( sA Override parent to also delete certificate key. N( R R R t key_pathR R ( R R ( ( R R ] s c C s t i i | i \ } } y d t | i d d } Wn5 t j o) } t i | t d | i n Xt i i | | } | S( s> Returns the full path to the cert key's pem. s %s-key.%sR i sq Entitlement certificate path "%s" is not in in the expected format so the key file path could not be based on it.N( R R R R t dir_patht cert_filenamet tuplet rsplitt key_filenamet TypeErrorR R" R# R t joinR ( R R R R R R ( ( R R h s ( R R R R t propertyR R R R t staticmethodR R R ( ( ( R RH s R[ c B s5 t Z d Z e e e e e e e d Z d Z RS( s@ Represents the product information from a certificate. c C s | d j o t d n | d j o t d n | | _ | | _ | | _ | | _ t | i t o t | i | _ n | i d j o g | _ n | | _ | i d j o g | _ n | | _ | | _ d S( Ns Product missing names Product missing ID( R- R R RI R R RL t isinstanceR$ R] RN RO RQ ( R RI R- R RL RN RO RQ ( ( R R | s" c C s | i | i j S( N( R RI R ( R R ( ( R t __eq__ s ( R R R R R R ( ( ( R R[ x s Rz c B sV t Z d Z e e e e e e e e e e e e e e e e e e d Z d Z RS( sc Represents the order information for the subscription an entitlement originated from. c C s | | _ | | _ | | _ | | _ t | d | _ t | d | _ | | _ | | _ t | d | _ t | d | _ | | _ | | _ | p t | _ | | _ | | _ | p t | _ t | d | _ t | d | _ d S( Ni i ( R- R R^ R_ R` t safe_intRa R Rh Rb Rt Rd Rj Rf Rl Rn R Rp Rr Rv R R ( R R- R^ R_ R` Ra Rb Rd Rf Rh Rj Rl Rn Rp Rr Rt Rv R R ( ( R R s$ c C s d | i | i | i f S( Ns! <Order: name=%s number=%s sku=%s>( R R- R^ R_ ( R ( ( R R s ( R R R R R R ( ( ( R Rz s ?'R c B sJ t Z d d d d d d d d d d d Z d Z d Z d Z RS( Nc C s | d j p | d j o t d n | | _ | | _ | | _ | | _ | | _ | | _ | p t d n | d j o t d | n t | _ | d j p | d j p | t j o t | _ n | | _ | p g | _ | p g | _ d S( Ns Content missing name/labels! Content does not have a type set.i i t 0RJ s# Invalid content enabled setting: %s( Ni i R RJ ( R- R R| R R{ R R} R~ R R R R R R R ( R R{ R- R| R} R~ R R R R R ( ( R R s$ ' c C s# t | | i o | i | i j S( N( R R R t __class__R| ( R R ( ( R R s c C s d | i | i | i | i f S( Ns6 <Content: content_type=%s name=%s label=%s enabled=%s>( R R{ R- R| R ( R ( ( R R s c C s t | i S( N( t hashR R| ( R ( ( R t __hash__ s ( R R R R R R R ( ( ( R R s ' R c B s# t Z d Z e d Z d Z RS( s= Represents the pool an entitlement originates from. c C s* | d j o t d n | | _ d S( Ns Pool is missing ID( RI R R R ( R RI ( ( R R s c C s | i | i j S( N( R RI R ( R R ( ( R R s ( R R R R R R ( ( ( R R s (/ R t loggingR R R R t getLoggerR R" R R t rhsmR t rhsm.connectionR t rhsm.certificatet ExtensionsR R R R= R] R t rhsm.pathtreeR t ourjsonR R Rx R R R R+ R) R' t objectR R R R R; RC RH R[ Rz R R (' R R R R R R R R R R[ R R R R+ R R R R Rx R R R; R R" RC Rz R) R RH R R] R R= R R R' R R R ( ( R t ? s@ 1 K L #2,