Tryag File Manager
Home
-
Turbo Force
Current Path :
/
usr
/
share
/
rhsm
/
subscription_manager
/
Upload File :
New :
File
Dir
//usr/share/rhsm/subscription_manager/certlib.pyo
mς x^Sc @ sε d k l Z l Z d k Z d k Z d k Z d k Z d k l Z d k l Z l Z l Z d k l Z d k l Z d k l Z d k l Z l Z l Z d k i Z d k l Z e i d e Z e i Z e Z e i d Z d e f d YZ! d e" f d YZ# d e# f d YZ$ d e# f d YZ% d e# f d YZ& d f d YZ' d e' f d YZ( d e' f d YZ) d e* f d YZ+ d f d YZ, d Z- e d j o e- n d S(! ( s datetimes timedeltaN( s initConfig( s Keys create_from_pems GMT( s Writer( s rhelentbranding( s ConsumerIdentity( s CERT_SORTERs PLUGIN_MANAGERs require( s Locks rhsm-app.c C s* t i d t i | | i d d S( Ns subscription-managers utf-8( t syslogt openlogt priorityt messaget encode( R R ( ( t/ /usr/share/rhsm/subscription_manager/certlib.pyt system_log) s t ActionLockc B s t Z d Z d Z RS( Ns /var/run/rhsm/cert.pidc C s t i | | i d S( N( t Lockt __init__t selft PATH( R ( ( R R 2 s ( t __name__t __module__R R ( ( ( R R . s t DataLibc B s) t Z d d d Z d Z d Z RS( Nc C s0 | | _ | i p t | _ n | | _ d S( N( t lockR R t uep( R R R ( ( R R 8 s c C s0 | i i z | i SWd | i i Xd S( N( R R t acquiret _do_updatet release( R ( ( R t updateB s c C s d S( N( ( R ( ( R R I s ( R R t NoneR R R ( ( ( R R 6 s t CertLibc B s5 t Z e d d Z d Z d Z d Z RS( Nc C s t i | | | d S( N( R R R R R ( R R R ( ( R R O s c C s6 | i } | i z | i | SWd | i Xd S( N( R R R t _do_deletet serial_numbersR ( R R R ( ( R t deleteR s c C s% t d | i } | i d | i S( NR R ( t UpdateActionR R t actiont performR ( R R ( ( R R Z s c C s t } | i | S( N( t DeleteActionR R R ( R R R ( ( R R ^ s ( R R R R R R R R ( ( ( R R M s t HealingLibc B s, t Z d Z e e e d Z d Z RS( sη An object used to run healing nightly. Checks cert validity for today, heals if necessary, then checks for 24 hours from now, so we theoretically will never have invalid certificats if subscriptions are available. c C sB t i | | | | p t i t i | _ t t | _ d S( N( R R R R R t product_dirt injt requiret PROD_DIRt _product_dirt PLUGIN_MANAGERt plugin_manager( R R R R ( ( R R j s c C s% t i i } | i i | } d | j oί| d oΤyt i d t i t } | t d d } t t } t d | i d | i } | i pf t i d | | i i d d | | i i | | } | i i d d | d | | i nΊ t i d | | i d j o t i d n | | i j of t i d | | i i d d | | i i | | } | i i d d | d | | i n t i d | Wn3 t j o' } t i! d t i" | d Sq!Xt i d d Sn t i d d Sd S( Nt autoheals$ Checking if system requires healing.t daysi R R s( Found invalid entitlements for today: %st pre_auto_attacht consumer_uuidt post_auto_attacht entitlement_datas$ Entitlements are valid for today: %ss5 Got valid status from server but no valid until date.s, Entitlements will be invalid by tomorrow: %ss' Entitlements are valid for tomorrow: %ss Error attempting to auto-heal:i s Auto-heal check complete.s' Auto-heal disabled on server, skipping.(# t ConsumerIdentityt readt getConsumerIdt uuidR R t getConsumert consumert logt infot datetimet nowt GMTt todayt timedeltat tomorrowR! t CERT_SORTERt csR R t cert_updatert is_validt warnR% t runt bindt entsR t compliant_untilR t Exceptiont et errort exception( R R/ R< RA R; RD R1 R9 R7 ( ( R R p sF ( R R t __doc__R R R R ( ( ( R R c s t IdentityCertLibc B s) t Z d Z e e d Z d Z RS( sν An object to update the identity certificate in the event the server deems it is about to expire. This is done to prevent the identity certificate from expiring thus disallowing connection to the server for updates. c C s t t | i | | d S( N( t superRH R R R R ( R R R ( ( R R ² s c C s t i p d Sn d k l } t i } | i } | i i | } | i | d d d j o t i d | i | n d S( Ni ( s managerlibt idCertt serials- identity certificate changed, writing new onei ( R, t existsAndValidt subscription_managert managerlibR- t idcertR. R/ R R R0 R1 t getSerialNumberR2 t debugt persist_consumer_cert( R R/ RN R1 RO ( ( R R ΅ s ( R R RG R R R R ( ( ( R RH ͺ s t Actionc B s t Z d d d Z d Z RS( Nc C s) | p t i t i | _ | | _ d S( N( t entdirR R! t ENT_DIRR R ( R R RT ( ( R R Κ s c C s6 | d } | d } t | } t | } | | f S( Nt keyt cert( t bundlet keypemt crtpemt KeyRV t create_from_pemRW ( R RX RZ RW RY RV ( ( R t buildΞ s ( R R R R R] ( ( ( R RS Θ s R c B s t Z d Z RS( Nc C sE x> | D]6 } | i i | } | d j o q n | i q W| S( N( R t snR RT t findRW R R ( R R RW R^ ( ( R R Ω s ( R R R ( ( ( R R Χ s R c B s t Z d d d Z d d Z d Z d Z d Z d Z d Z d Z d Z d Z d Z d Z d Z d Z RS( Nc C s t i | d | d | d S( NR RT ( RS R R R RT ( R R RT ( ( R R δ s c C s t } | i | } y | i | } Wn; t i j o, } t i | t i d t n X| i | | } | i | | } | i | | | i | | } t i d | | i | | p | o | i d | | i n | i | f S( Ns. Cannot modify subscriptions while disconnecteds certs updated: %sR ( t UpdateReportt reportR t _get_local_serialst localt _get_expected_serialst expectedt socketRE t exR2 RF t Disconnectedt _find_missing_serialst missing_serialst _find_rogue_serialst rogue_serialsR t installt exceptionsR3 t syslog_resultst repo_hookR t branding_hookt updates( R R Rn Rj Re Rg Ra Rc Rl ( ( R R η s$ c C s6 g } | D] } | | j o | | q q ~ } | S( s6 Find serials from the server we do not have locally. N( t _[1]Re R^ Rc t missing( R Rc Re Rt Rs R^ ( ( R Ri s 2c C s: g } | D]" } | | j o | | | q q ~ } | S( s9 Find serials we have locally but are not on the server. N( Rs Rc R^ Re t rogue( R Rc Re Rs Ru R^ ( ( R Rk s 6c C sΆ xV | i D]K } t d | i i | i i f x" | i D] } t d | i q: Wq WxV | i D]K } t d | i i | i i f x" | i D] } t d | i q Wqc Wd S( Ns) Added subscription for '%s' contract '%s's# Added subscription for product '%s's+ Removed subscription for '%s' contract '%s's% Removed subscription for product '%s'( Ra t addedRW R t ordert namet contractt productst productRu ( R Ra R{ RW ( ( R Ro s c C sT h } | i i x: | i i D]) } | i } | i i | | | | <q# W| S( N( Rc R RT t refresht listt validRK R^ Ra t append( R Ra R~ Rc R^ ( ( R Rb ! s c C sL y t i } | i SWn+ t j o } t i | t n Xd S( N( R, R- t cidR. RC RD R2 RE Rh ( R RD R ( ( R t _get_consumer_id. s c C sb g } | i d j o | Sn | i i | i } x% | D] } | d } | i | q= W| S( NRK ( t resultsR R R t getCertificateSerialsR t replyt dR^ R ( R R R R^ R ( ( R t get_certificate_serials_list6 s c C s | i } | | _ | S( N( R R t expRa Re ( R Ra R ( ( R Rd A s c C sͺ x^ | D]V } y | i | i i | Wq t j o# } t i | t i d q Xq Wt | i } | d j o) t i d d | | GH| i i n d S( Ns Failed to delete certi s& %s local certificate has been deleted.s( %s local certificates have been deleted.( Ru RW R Ra R t OSErrort erR2 RF R> t lent rogue_countt gettextt ngettextR RT R| ( R Ru Ra R RW R ( ( R R F s c C sx g } | og g } | D] } | t | q ~ } | i i | i d | } x | D] } | i | qY Wn | S( Nt serials( t resultt sn_listRs R^ t strR R t getCertificatesR R RW R ( R R Rs RW R R R^ ( ( R t get_certificates_by_serial_listX s ' c C si y3 d k l } | d | d | i } | i Wn/ t j o# } t i | t i d n Xd S( sΜ Update yum repos Args: lock: an ActionLock, in this case certlib.UpdateAction lock, since repo_kook is called when UpdateAction has already acquired a lock. ( s RepoLibR R s Failed to update reposN( t subscription_manager.repolibt RepoLibR R R t rlR RC RD R2 RQ ( R R RD R R ( ( R Rp b s c C s t i } | i d S( s6 Update branding info based on entitlement cert changesN( t rhelentbrandingt RHELBrandsInstallert brands_installerRm ( R R ( ( R Rq s s c C s« t } g } x | i | D] } y9 | i | \ } } | i | | | i i | Wq t j o6 } t i | t i d | | | i | q Xq W| S( Ns Bundle not loaded: %s %s( t Writert brRn R R R RX R] RV RW t writeRa Rv R RC RD R2 RF RE ( R R Ra RD RV RX Rn RW R ( ( R Rm z s ( R R R R R Ri Rk Ro Rb R R Rd R R Rp Rq Rm ( ( ( R R β s " Rh c B s t Z RS( N( R R ( ( ( R Rh s R` c B s, t Z d Z d Z d Z d Z RS( Nc C s( g | _ g | _ g | _ g | _ d S( N( R R~ Re Rv Ru ( R ( ( R R s c C s t | i t | i S( N( R R Rv Ru ( R ( ( R Rr s c C sΈ d } | i | | o x | D]z } | i } | p- | i d | | i | i i | i f n x4 | D], } | i d | | i | i | i f qk Wq! Wn | i d | d S( Ns s %s[sn:%d (%s) @ %s]s %s[sn:%d (%s,) @ %s]s %s<NONE>( t indentt sR t titlet certificatest cRz RK Rw Rx t pathR{ ( R R R R R‘ R R{ Rz ( ( R R s - 2c C s g } | i t d | i | i t d | i | i t d | i | i | t d | i | i | t d | i d i | S( Ns Total updates: %ds Found (local) serial# %ss Expected (UEP) serial# %ss Added (new)s Deleted (rogue):s ( R R t _R Rr R~ Re R Rv Ru t join( R R ( ( R t __str__± s ( R R R Rr R R₯ ( ( ( R R` s c C s> t d GHt } | i } t d | GHt d GHd S( Ns! Updating entitlement certificatess %d updates requiredt done( R£ R t certlibR Rr ( R§ Rr ( ( R t main» s t __main__(. R4 R8 R t loggingR Rf t rhsm.configt initConfigt rhsm.certificateR[ R\ R6 t" subscription_manager.certdirectoryR RM R t subscription_manager.identityR, t subscription_manager.injectionR: R$ R! t injectionR t subscription_manager.lockR t getLoggerR R2 R£ t cfgt LOG_NOTICER R t objectR R R RH RS R R RC Rh R` R¨ (! R΄ R R4 R R R$ R R2 R: R R R R[ R` R¨ R, Rh R8 R R\ R R RH RS R£ R6 Rͺ Rf R R! R¬ R R ( ( R t ? s: G «*