U 2ܟj0 @sdZddlmZddlZddlZddlZddlZddlZddlm Z ddl m Z ddl m Z ddlmZmZmZddlmZdd lmZmZmZmZejejkrzddlZejejfWn*eefk rdejd <e eYnXe Z!d d Z"Gd ddej#Z$ddZ%ddZ&ddZ'e"dddZ(e"dddZ)e"dddZ*e"ddd Z+d!d"Z,d9d#d$d%d%d&d'd(Z-d#d)d*d+d,Z.d-d.Z/d/d0Z0d%d%d1d2d3Z1d:d4d#d$d)d5d6d7Z2e3d8kre%dS);z2 Implementation module for the `ckeygen` command. ) annotationsN)Callable)wraps)reload)AnyDictOptional)keys)failurefilepathlogusagetermioscsfdd}|S)Ncs tfdd}|t<|S)Ncs ||SN)argskwargs keygeneratorrA/tmp/pip-unpacked-wheel-4b529toj/twisted/conch/scripts/ckeygen.pywrapper%sz:_keyGenerator..assignkeygenerator..wrapper)rsupportedKeyTypes)rrkeyTyperrassignkeygenerator$sz)_keyGenerator..assignkeygeneratorr)rrrrr _keyGenerator#s rc @seZdZdZdZddddgdddd gd d dd gd dddgddddgddddgddddgddddggZdddgdd d!gd"d#d$gd%dd&gd'd(d)ggZeje e e e d*d+gd,d-Z dS).GeneralOptionszUsage: ckeygen [options] z8ckeygen manipulates public/private keys in various ways.bitsbNz$Number of bits in the key to create.filenamefzFilename of the key file.typetzSpecify type of key to create.commentCzProvide new comment.newpassNzProvide new passphrase.passPzProvide old passphrase.formato sha256-base64zFingerprint format of key file.private-key-subtypez5OpenSSH private key subtype to write ("PEM" or "v1"). fingerprintlzShow fingerprint of key file. changepasspz&Change passphrase of private key file.quietqzQuiet. no-passphrasez"Create the key with no passphrase.showpubyz+Read private key file and print public key.PEMv1)r!r,)Z optActions)__name__ __module__ __qualname__ZsynopsisZlongdescZ optParametersZoptFlagsr Z CompletionsZ CompleteListlistrr ZcompDatarrrrr/s4        rc Cst}z|tjddWnBtjk r`}z"td||tdW5d}~XYnXt t t _ |dr|d tkrtd|dt|d |n td|ddtfnJ|drt|n8|drt|n&|d rt|n|tddS) Nz ERROR: %sr!z&Generating public/private %s key pair.z"Key type was %s, must be one of %sz, r-r/r4)rZ parseOptionssysargvr Z UsageErrorprintZopt_helpexitr Z discardLogs handleErrorZdeferrlowerrjoinr printFingerprintchangePassPhrasedisplayPublicKey)optionsurrrrunUs4     rIcCsP|ddkrtjj|d<|S|ddkr8tjj|d<|Std|ddS)Nr)zmd5-hexr+z Unsupported fingerprint format: )r ZFingerprintFormatsZMD5_HEXZ SHA256_BASE64ZBadFingerPrintFormat)rGrrrenumrepresentationss     rJcCsdattdS)N)Z exitStatusr errr ZFailurerrrrrAsrArsacCsZddlm}ddlm}|ds(d|d<|jt|dd|d}t|}t||dS)Nrdefault_backend)rMrii)key_sizeZpublic_exponentbackend) cryptography.hazmat.backendsrO)cryptography.hazmat.primitives.asymmetricrMgenerate_private_keyintr Key_saveKey)rGrOrM keyPrimitivekeyrrrgenerateRSAkeys    rZdsacCsXddlm}ddlm}|ds(d|d<|jt|d|d}t|}t||dS)NrrN)r[ri)rPrQ) rRrOrSr[rTrUr rVrW)rGrOr[rXrYrrrgenerateDSAkeys    r\ecdsacCslddlm}ddlm}|ds(d|d<dt|dd}|jtj||d}t |}t ||dS) NrrN)ecrsecdsa-sha2-nistpascii)curverQ) rRrOrSr^strencoderTr Z _curveTablerVrW)rGrOr^rarXrYrrrgenerateECDSAkeys   rded25519cCs"tj}t|}t||dSr)r ZEd25519PrivateKeygeneraterVrW)rGrXrYrrrgenerateEd25519keys  rgcCs|dkr dSdSdS)a Return a reasonable default private key subtype for a given key type. @type keyType: L{str} @param keyType: A key type, as returned by L{twisted.conch.ssh.keys.Key.type}. @rtype: L{str} @return: A private OpenSSH key subtype (C{'PEM'} or C{'v1'}). Ed25519r7r6Nrrrrr_defaultPrivateKeySubtypes rizDict[Any, Any]zOptional[Callable[[str], str]]rb)rGinputCollector keyTypeNamereturncCs`|dkr t}|d}|sXtjd|}tdkrHtjd|}|d|pV|}t|S)a If C{options["filename"]} is None, prompt the user to enter a path or attempt to set it to .ssh/id_rsa @param options: command line options @param inputCollector: dependency injection for testing @param keyTypeName: key type or "rsa" Nrz ~/.ssh/id_Windowsz%HOMEPATH %\.ssh\id_z%Enter file in which the key is (%s): )inputospath expanduserplatformsystemrb)rGrjrkrrrr_getKeyOrDefaults   rtNone)rGrlcCst|}tj|dr |d7}t|}z8tj|}td| | |dtj |fWnBtj k rt dYn$tk rt |dYnXdS)N.pubz%s %s %sr)zbad key, could not be opened, please specify a file.)rtrorpexistsrJr rVfromFiler?sizer-basename BadKeyErrorr=r@FileNotFoundError)rGrrYrrrrDs$   rDc Cs@t|}ztj|}Wntjk r|dsBtd|d<ztjj||dd}WnRtjk rzt dYn4tjk r}zt d|W5d}~XYnXYnXtjk r}zt d|W5d}~XYn&t k rt |dYnX|dsLtd}td }||kr8qDt d q||d<|d dkrlt | |d <z|jd |d |dd }Wn4tk r}zt d|W5d}~XYnXztjj||ddWn<tjtjfk r}zt d|W5d}~XYnXt|d}||W5QRXt ddS)Nr'zEnter old passphrase:  passphrasez1Could not change passphrase: old passphrase errorzCould not change passphrase: rwr%z0Enter new passphrase (empty for no passphrase): Enter same passphrase again: %Passphrases do not match. Try again.r,opensshsubtyperwbz;Your identification has been saved with the new passphrase.)rtr rVryEncryptedKeyErrorgetgetpassr|r=r@r}r?rir!toString ExceptionZ fromStringopenwrite)rGrrYep1p2Z newkeydatafdrrrrEsP &       "" rEcCst|}ztj|}Wndtk r<t|dYnBtjk r||dsdt d|d<tjj||dd}YnX| d d}t |dS)Nrwr'zEnter passphrase: r~rr`)rtr rVryr}r=r@rrrpublicrdecoder?)rGrrYZ displayKeyrrrrF2s rF)promptrlcCst|S)zv Ask the user where to save the key. This needs to be a separate function so the unit test can patch it. )rn)rrrr_inputSaveFile@srzkeys.Key)rYrGrjrlc Cs|dkr t}ddddd}||}|d}|sZt|||}td|d }|pX|}tj|rt|d |d }|d  d krt | drd|d<n8|dst d} t d} | | krqtdq| |d<| ddkrt||d<t dt} t|} | |jd|d|dd| dt|d|jd| dt|}td|td|dtd|ddt||ddS) z Persist a SSH key on local filesystem. @param key: Key which is persisted on local filesystem. @param options: @param inputCollector: Dependency injection for testing. Nr]rerMr[)ZECrhZRSAZDSArz%Enter file in which to save the key (z): z already exists.zOverwrite (y/n)? rr5r3r'z,Enter passphrase (empty for no passphrase): rrr,@rrirv)r#z&Your identification has been saved in z"Your public key has been saved in zThe key fingerprint in r)z is:)rnr!rtrstriprorprxr?rBr=r@rrrigetusersocket gethostnamer ZFilePathZ setContentrchmodrrJr-) rYrGrjZKeyTypeMappingrkrZ defaultPathZnewPathZynrrr#fprrrrWIsZ            rW__main__)NrM)N)4__doc__ __future__rrrorrrr=collections.abcr functoolsr importlibrtypingrrrZtwisted.conch.sshr Ztwisted.pythonr r r r unix_getpassr tcgetattr tcsetattr ImportErrorAttributeErrormodulesdictrrOptionsrrIrJrArZr\rdrgrirtrDrErFrrWr8rrrrsZ        &     3 F