/usr/share/crypto-policies/python/policygenerators/__pycache__
Edit: /usr/share/crypto-policies/python/policygenerators/__pycache__/openssl.cpython-36.pyc (5538B)
3
."d @ s@ d dl mZmZ ddlmZ G dd deZG dd deZdS ) ) check_outputCalledProcessError )ConfigGeneratorc @ s e Zd ZdZdddhZdddddddd d
d ddd d
dddZddddddddZdddddddd d d d
Zd d!d"Zd#d$d%d&d'd(Z e
d)d* Z e
d+d, Z e
d-d. Z
e
d/d0 Zd1S )2OpenSSLGeneratoropensslZtlsZssl z-AES256z-AES128z-SHA256z -CHACHA20z-SEEDz!IDEAz!DESz-3DESz!RC4z!RC2z
!eNULL:!aNULL)z AES-256-CTRz AES-128-CTRz AES-256-GCMz AES-128-GCMz AES-256-CBCz AES-128-CBCzCHACHA20-POLY1305zSEED-CBCzIDEA-CBCzDES-CBCzRC4-40z DES40-CBCz3DES-CBCzRC4-128zRC2-CBCZNULLZkRSAZkEECDHZkPSKZkDHEPSKZkEDHZ kECDHEPSK)RSAECDHEPSKzDHE-PSKzDHE-RSAzDHE-DSSz ECDHE-PSKz-kRSAz-kEECDHz-aRSAz-aDSSz-kPSKz-kDHEPSKz
-kECDHEPSK)
ZANONZDHZECDHr r
zDHE-RSAzDHE-DSSr zDHE-PSKz ECDHE-PSKz!MD5z-SHA1)zHMAC-MD5z HMAC-SHA1ZTLS_AES_256_GCM_SHA384ZTLS_AES_128_GCM_SHA256Z TLS_CHACHA20_POLY1305_SHA256ZTLS_AES_128_CCM_SHA256ZTLS_AES_128_CCM_8_SHA256)z AES-256-GCMz AES-128-GCMzCHACHA20-POLY1305z AES-128-CCMz AES-128-CCM8c C s d}|j }|j}|jd }|jd }|dk s4|dk rB| j|d}nH|dk sR|dk r`| j|d}n*|dk sp|dk r~| j|d }n | j|d
}x<|d D ]0}y| j|| j| }W q tk
r Y qX qW x>|d D ]2}y| j|| j| }W q tk
r Y qX qW x@|d D ]4}y| j|| j| }W n tk
rB Y nX qW d
|d krrd|d krr| j|d}x@|d D ]4}y| j|| j| }W n tk
r Y nX q|W | j|d}| j|d}| j|d}| j|d}|S )Nr min_dh_size min_rsa_sizei z @SECLEVEL=0i z @SECLEVEL=1i z @SECLEVEL=2z @SECLEVEL=3Z key_exchangecipherz AES-128-CCMz AES-256-CCMz-AESCCMZmacz-SHA384z -CAMELLIAz-ARIAz-AESCCM8) enabledZdisabledZintegersappendkey_exchange_mapKeyErrorkey_exchange_not_mapcipher_not_map mac_not_map)clspolicyspZipr r
i r >./usr/share/crypto-policies/python/policygenerators/openssl.pygenerate_ciphersF sN
z!OpenSSLGenerator.generate_ciphersc C sL d}|j }x<|d D ]0}y| j|| j| }W q tk
rB Y qX qW |S )Nr r )r r ciphersuite_mapr )r r r r r r r r generate_ciphersuites{ s
z&OpenSSLGenerator.generate_ciphersuitesc C s
| j |S )N)r )r r r r r generate_config s z OpenSSLGenerator.generate_configc C s d}yt dd|g}W n> tk
rB | jd | jd| dS tk
rT dS X d|ksfd |kr| jd
| jd | dS dS ) N r Zciphersz-There is an error in openssl generated policyz
policy: %sFTs NULLs ADHz0There is NULL or ADH in openssl generated policyz
Policy:
%s)r r ZeprintOSError)r configoutputr r r test_config s
z OpenSSLGenerator.test_configN)__name__
__module__ __qualname__ CONFIG_NAMEZSCOPESr r r r r classmethodr r r r% r r r r r s\
5 r c @ sl e Zd ZdZdddddddd d
Zd d d
ddddddddddddddd d d d Zed d! Zed"d# Zd$S )%OpenSSLConfigGeneratorZ
opensslcnfr ZSSLv3ZTLSv1zTLSv1.1zTLSv1.2zTLSv1.3ZDTLSv1zDTLSv1.2)NzSSL3.0zTLS1.0zTLS1.1zTLS1.2zTLS1.3zDTLS1.0zDTLS1.2zRSA+SHA1zDSA+SHA1z
ECDSA+SHA1z
RSA+SHA224z
DSA+SHA224z ECDSA+SHA224z
RSA+SHA256z
DSA+SHA256z ECDSA+SHA256z
RSA+SHA384z
DSA+SHA384z ECDSA+SHA384z
RSA+SHA512z
DSA+SHA512z ECDSA+SHA512z&rsa_pss_pss_sha256:rsa_pss_rsae_sha256z&rsa_pss_pss_sha384:rsa_pss_rsae_sha384z&rsa_pss_pss_sha512:rsa_pss_rsae_sha512Zed25519Zed448)zRSA-SHA1zDSA-SHA1z
ECDSA-SHA1z RSA-SHA2-224z DSA-SHA2-224zECDSA-SHA2-224z RSA-SHA2-256z DSA-SHA2-256zECDSA-SHA2-256z RSA-SHA2-384z DSA-SHA2-384zECDSA-SHA2-384z RSA-SHA2-512z DSA-SHA2-512zECDSA-SHA2-512zRSA-PSS-SHA2-256zRSA-PSS-SHA2-384zRSA-PSS-SHA2-512z
EDDSA-ED25519z EDDSA-ED448c s |j }d}| j|7 }|d7 }|d7 }| j|7 }|d7 }|jrd|d7 }|d j|j d7 }|jr|d7 }|d j|j d7 }|jr|d7 }|d j|j d7 }|jr|d7 }|d j|j d7 } fd d
|d D }|d d
j| 7 }|S )NzCipherString =
zCiphersuites = zTLS.MinProtocol = zTLS.MaxProtocol =zDTLS.MinProtocol =zDTLS.MaxProtocol =c s g | ]}| j kr j | qS r )sign_map).0r )r r r
s z:OpenSSLConfigGenerator.generate_config..ZsignzSignatureAlgorithms = :) r r r Zmin_tls_version protocol_mapZmax_tls_versionZmin_dtls_versionZmax_dtls_versionjoin)r r r r Zsig_algsr )r r r s.
z&OpenSSLConfigGenerator.generate_configc C s dS )NTr )r r# r r r r% s z"OpenSSLConfigGenerator.test_configN) r& r' r( r) r2 r. r* r r% r r r r r+ s> r+ N)
subprocessr r Zconfiggeneratorr r r+ r r r r s