/usr/share/crypto-policies/python/policygenerators/__pycache__
Edit: /usr/share/crypto-policies/python/policygenerators/__pycache__/libreswan.cpython-36.pyc (4352B)
3
."d @ sD d dl mZmZ d dlmZ d dlZddlmZ G dd deZdS ) )callCalledProcessError)mkstempN )ConfigGeneratorc @ s e Zd ZdZdddhZdZddddddd d
d d d
d ZddddddddZdddddddddddddd
Zddddddddddddd Z d d d d d Z
d d d d d!Z e d"d# Z
e d$d% Ze d&d' Ze d(d) Zd*S )+LibreswanGeneratorZ libreswanZipsecZikez5systemctl try-restart ipsec.service 2>/dev/null || :
Zdh19Zdh20Zdh21Zdh5Zdh14Zdh15Zdh16Zdh18) ZX448ZX25519Z SECP256R1Z SECP384R1Z SECP521R1z
FFDHE-6144z
FFDHE-1536z
FFDHE-2048z
FFDHE-3072z
FFDHE-4096z
FFDHE-8192Zaes256Zaes192Zaes128Z
aes_gcm256Z
aes_gcm192Z
aes_gcm128Zchacha20_poly1305)z AES-256-CBCz AES-192-CBCz AES-128-CBCz AES-256-GCMz AES-192-GCMz AES-128-GCMzCHACHA20-POLY1305Zsha2_512Zsha2_256)
zAES-256-CBC-HMAC-SHA2-512zAES-256-CBC-HMAC-SHA2-256zAES-192-CBC-HMAC-SHA2-512zAES-192-CBC-HMAC-SHA2-256zAES-128-CBC-HMAC-SHA2-256zAES-256-GCM-HMAC-SHA2-512zAES-256-GCM-HMAC-SHA2-256zAES-192-GCM-HMAC-SHA2-512zAES-192-GCM-HMAC-SHA2-256zAES-128-GCM-HMAC-SHA2-512zAES-128-GCM-HMAC-SHA2-256z CHACHA20-POLY1305-HMAC-SHA2-512z CHACHA20-POLY1305-HMAC-SHA2-256Zsha1) zAES-256-CBC-HMAC-SHA2-512zAES-192-CBC-HMAC-SHA2-512zAES-256-CBC-HMAC-SHA2-256zAES-192-CBC-HMAC-SHA2-256zAES-128-CBC-HMAC-SHA2-256zAES-256-CBC-HMAC-SHA1zAES-192-CBC-HMAC-SHA1zAES-128-CBC-HMAC-SHA1zAES-256-GCM-AEADzAES-192-GCM-AEADzAES-128-GCM-AEADzCHACHA20-POLY1305-AEADr r )AEADz
HMAC-SHA2-512z
HMAC-SHA2-256z HMAC-SHA1)r z
HMAC-SHA2-512z HMAC-SHA1z
HMAC-SHA2-256c C s || j krdS | j | S )Nc )mac_ike_prio_map)clskey r @./usr/share/crypto-policies/python/policygenerators/libreswan.pyZ__get_ike_priob s
z!LibreswanGenerator.__get_ike_prioc C s || j krdS | j | S )Nr )mac_esp_prio_map)r r r r r Z__get_esp_prioh s
z!LibreswanGenerator.__get_esp_prioc C s d}d}|j }d}|d }d|kr(d}n d|kr4d}|rH|d | d
7 }|d 7 }t|d | jd
}d}x|d D ]} y| j| }
W n tk
r wrY nX |
d } d}xH|D ]@} y| j| d | }
W n tk
r wY nX | j||
d}qW |sqr| |7 } d}xJ|d D ]>}y| j| }W n tk
r: wY nX | j||d}qW | j| |d} | j|| |}qrW |r|d| d
7 }t|d | jd
}d}x|d D ]} y| j| }
W n tk
r wY nX |
d } d}xZ|D ]R} y| j | d | }
W n tk
r wY nX |
s(|
} P | j||
d}qW | |7 } | dd dkrZq| j|| |}qW |r|d| d
7 }|S )Nzconn %default
,r ZprotocolZIKEv2z ikev2=insistZIKEv1z ikev2=never
z pfs=yes
mac)r cipher-+groupz ike=r z esp=)
Zenabledsorted!_LibreswanGenerator__get_ike_prio
cipher_mapKeyErrorcipher_prf_mapappend group_map!_LibreswanGenerator__get_esp_priocipher_mac_map)r ZpolicyZcfgseppsprotoZ sorted_macsZtmpr cmZcombor Zmmir r r r generate_confign s
z"LibreswanGenerator.generate_configc C s t jdt jsdS t \}}d}z^t j|d}|j| W d Q R X ytd| d dd}W n tk
rz | jd Y nX W d t j | X |r| jd | jd
| d S dS ) Nz/usr/sbin/ipsecT wz'/usr/sbin/ipsec readwriteconf --config z >/dev/null)shellz!/usr/sbin/ipsec: Execution failedz/There is an error in libreswan generated policyz
Policy:
%sF)
osaccessX_OKr fdopenwriter r Zeprintunlink)r configfdpathZretfr r r test_config s&
z LibreswanGenerator.test_configN)__name__
__module__ __qualname__Z CONFIG_NAMEZSCOPESZ
RELOAD_CMDr" r r r$ r
r classmethodr r# r+ r9 r r r r r st
Pr )
subprocessr r Ztempfiler r/ Zconfiggeneratorr r r r r r
s