tf0xdZddlmZddlZddlZddlZddlZddlZddlm Z ddl m Z ddl m Z ddlmZmZmZddlmZdd lmZmZmZmZejejkr6 ddlZejejfn"#eef$rdejd <e eYnwxYwe Z!d Z"Gd d ej#Z$dZ%dZ&dZ'e"ddZ(e"ddZ)e"ddZ*e"ddZ+dZ, d,d-d!Z-d.d#Z.d$Z/d%Z0d/d'Z1 d0d1d*Z2e3d+kr e%dSdS)2z2 Implementation module for the `ckeygen` command. ) annotationsN)Callable)wraps)reload)AnyDictOptional)keys)failurefilepathlogusagetermioscfd}|S)NcRtfd}|t<|S)Nc|i|SN)argskwargs keygenerators \/var/www/surfInsights/venv3-11/lib/python3.11/site-packages/twisted/conch/scripts/ckeygen.pywrapperz:_keyGenerator..assignkeygenerator..wrapper%s<000 0)rsupportedKeyTypes)rrkeyTypes` rassignkeygeneratorz)_keyGenerator..assignkeygenerator$sB |   1 1 1 1   1&-'"rr)rrs` r _keyGeneratorr#s$ rc eZdZdZdZgdgdgdgdgdgdgd gd gZgd gd gd gdgdgZejej e e ej ddgdZ dS)GeneralOptionszUsage: ckeygen [options] z8ckeygen manipulates public/private keys in various ways.)bitsbNz$Number of bits in the key to create.)filenamefNzFilename of the key file.)typetNzSpecify type of key to create.)commentCNzProvide new comment.)newpassNNzProvide new passphrase.)passPNzProvide old passphrase.)formato sha256-base64zFingerprint format of key file.)private-key-subtypeNNz5OpenSSH private key subtype to write ("PEM" or "v1").) fingerprintlzShow fingerprint of key file.) changepasspz&Change passphrase of private key file.)quietqzQuiet.) no-passphraseNz"Create the key with no passphrase.)showpubyz+Read private key file and print public key.PEMv1)r%r0) optActionsN)__name__ __module__ __qualname__synopsislongdesc optParametersoptFlagsr Completions CompleteListlistrr compDatarrrr r /s HJH DCC<<<===666999666KKK   M" >==EEE   EEEGGG H!u &E&tt,=,B,B,D,D'E'EFF#55#5udm#D#D  HHHrr c t} |tjddnV#tj$rD}t d|z|tjdYd}~nd}~wwxYwtj tt_ |dr|d tvrGt d|dzt|d |dStjd|dddtdS|drt#|dS|d rt%|dS|d rt'|dS|tjddS) Nz ERROR: %sr%z&Generating public/private %s key pair.z Key type was z, must be one of z, r1r3r8)r parseOptionssysargvr UsageErrorprintopt_helpexitr discardLogs handleErrordeferrlowerrjoinr printFingerprintchangePassPhrasedisplayPublicKey)optionsus rrunr[UsGSXabb\****   kAo  OCJv 6? " "&7 7 7 :gfoN O O O gfo3355 6w ? ? ? ? ? HH6???DII.?.D.D.F.F$G$G$GI       !!!!!  !!!!!  !!!!!  s'8B :BB c|ddkrtjj|d<|S|ddkrtjj|d<|Stjd|d)Nr-zmd5-hexr/z Unsupported fingerprint format: )r FingerprintFormatsMD5_HEX SHA256_BASE64BadFingerPrintFormat)rYs renumrepresentationrassqxI%% 3;  o - - 3A' Bwx/@ B B   rcRdatjtj)N) exitStatusr errr FailurerrrrRrRs"JGGO   rrsacddlm}ddlm}|dsd|d<|t |dd|}t j|}t||dS)Nrdefault_backend)rgr!ii)key_sizepublic_exponentbackend) cryptography.hazmat.backendsrj)cryptography.hazmat.primitives.asymmetricrggenerate_private_keyintr Key_saveKey)rYrjrg keyPrimitivekeys rgenerateRSAkeyrvs<<<<<<====== 6?++WV_%%!!,L (< C S'rdsacddlm}ddlm}|dsd|d<|t |d|}t j|}t||dS)Nrri)rwr!i)rkrm) rnrjrorwrprqr rrrs)rYrjrwrtrus rgenerateDSAkeyrys<<<<<<====== 6?++WV_%%!!,L (< C S'recdsac4ddlm}ddlm}|dsd|d<dt |ddz}|tj||}tj |}t||dS) Nrri)ecr!secdsa-sha2-nistpascii)curverm) rnrjror|strencoderpr _curveTablerrrs)rYrjr|rrtrus rgenerateECDSAkeyrs<<<<<<<<<<<< 6? #gfo"6"6"="=g"F"F FE**u%/@/@+L (< C S'red25519ctj}tj|}t ||dSr)r Ed25519PrivateKeygeneraterrrs)rYrtrus rgenerateEd25519keyrs;)2244L (< C S'rc|dkrdSdS)a Return a reasonable default private key subtype for a given key type. @type keyType: L{str} @param keyType: A key type, as returned by L{twisted.conch.ssh.keys.Key.type}. @rtype: L{str} @return: A private OpenSSH key subtype (C{'PEM'} or C{'v1'}). Ed25519r;r:r)rs r_defaultPrivateKeySubtypers)turrYDict[Any, Any]inputCollectorOptional[Callable[[str], str]] keyTypeNamerreturnc|t}|d}|sktjd|}t jdkr"tjd|}|d|zp|}t |S)a If C{options["filename"]} is None, prompt the user to enter a path or attempt to set it to .ssh/id_rsa @param options: command line options @param inputCollector: dependency injection for testing @param keyTypeName: key type or "rsa" Nr#z ~/.ssh/id_Windowsz%HOMEPATH %\.ssh\id_z%Enter file in which the key is (%s): )inputospath expanduserplatformsystemr)rYrrr#s r_getKeyOrDefaultrsz"H  7%%&@;&@&@AA ?   ) )w))*O+*O*OPPH NBXM N N   x==rNonec (t|}tj|dzr|dz }t |} t j|}t| d| |ddtj |dS#t j $rtjdYdSt$rtj|dYdSwxYw)N.pub r-zbad key, could not be opened, please specify a file.)rrrexistsrar rrfromFilerNsizer1basename BadKeyErrorrKrPFileNotFoundError)rYr#rus rrVrVs/((H w~~h'((F ))G Lh))   12222  ***           LLL HJJJKKKKKKLsA>C#D- DDct|} tj|}n#tj$r|dst jd|d< tj||d}nW#tj$rtj dYn2tj$r!}tj d|Yd}~nd}~wwxYwYnTtj$r!}tj d|Yd}~n*d}~wt$rtj |dYnwxYw|dsE t jd }t jd }||krntd ?||d<|d $t| |d < |d |d |d}n.#t$r!}tj d|Yd}~nd}~wwxYw tj||dn?#tjtjf$r!}tj d|Yd}~nd}~wwxYwt#|d5}||dddn #1swxYwYtddS)Nr+zEnter old passphrase:  passphrasez1Could not change passphrase: old passphrase errorzCould not change passphrase: rr)rIz0Enter new passphrase (empty for no passphrase): Enter same passphrase again: %Passphrases do not match. Try again.r0opensshsubtyperwbz;Your identification has been saved with the new passphrase.)rr rrrEncryptedKeyErrorgetgetpassrrKrPrrNrr%toString Exception fromStringopenwrite)rYr#ruep1p2 newkeydatafds rrWrWs((HLh))  ! : : :{{6"" H%o.FGGGFO :(##H#IICC J J J HH I I I I I% : : : H8Q88 9 9 9 9 9 9 9 9 :  666 44455555555 LLL HJJJKKKKKL ;;y ! !  ;!STTB!@AABRxx 9 : : :  ;   {{())1)B388::)N)N%&6\\ 12y)"  666 4445555555566 J793EFFFF  "D$4 5666 444555555556 h    GHHHHHs2;E.'BE#C*9E;C* C% E%C**E/E=D$E?E$G<< H'H""H'+'IJ.J  J"KK Kc t|} tj|}n#t$rt j|dYngtj$rV|dstj d|d<tj||d}YnwxYw| d d}t|dS)Nrr+zEnter passphrase: rrr~)rr rrrrrKrPrrrpublicrdecoderN)rYr#ru displayKeys rrXrX2s ((HFh)) LLL HJJJKKKKK  !FFF{{6"" D%o.BCCGFOhWV_EEF&&y1188AAJ *s1!B8A!B87B8promptc t|S)zv Ask the user where to save the key. This needs to be a separate function so the unit test can patch it. )r)rs r_inputSaveFiler@s ==rrukeys.Keyc|t}ddddd}||}|d}|s:t|||}td|d }|p|}t j|rNt|d |d }|d  d krtj | drd|d<nM|dsE tj d} tj d} | | krntd?| |d<| d$t||d<tjdt!j} t%j|} | |d|d|d| dt%j|dz|d| t1|}td|td|dtd|dd t||ddS)!z Persist a SSH key on local filesystem. @param key: Key which is persisted on local filesystem. @param options: @param inputCollector: Dependency injection for testing. Nrzrrgrw)ECrRSADSAr#z%Enter file in which to save the key (z): z already exists.zOverwrite (y/n)? rr9r7rr+rIz,Enter passphrase (empty for no passphrase): rrr0@rrir)r'z&Your identification has been saved in z"Your public key has been saved in zThe key fingerprint in r-z is:)rr%rrstriprrrrNrTrKrPrrrgetusersocket gethostnamer FilePath setContentrchmodrrar1) rurYrKeyTypeMappingrr# defaultPathnewPathynrrr'fps rrsrsIs# %PUVVN ,Kz"H 2&w LL  DK D D D  ==??1k w~~h +++,,, ^/ 0 0 a5;;==C   HJJJ{{?##  V_ ;!OPPB!@AABRxx 9 : : :  ; {{())1)B388::)N)N%&"";;V%7%9%9;;G  8 $ $BMM 12v   HHX h'((33 i99!))G =8 = =>>> =x = = =>>> ;GH$5 ; ; ;<<< #//'(+ , ,-----r__main__)Nrg)rYrrrrrrr)rYrrr)rrrrr)rurrYrrrrr)4__doc__ __future__rrrrrrKcollections.abcr functoolsr importlibrtypingrrr twisted.conch.sshr twisted.pythonr r r r unix_getpassr tcgetattr tcsetattr ImportErrorAttributeErrormodulesdictrrOptionsr r[rarRrvryrrrrrVrWrXrrsr=rrrrs #"""""  $$$$$$&&&&&&&&&&""""""888888888888 ?g***7,,,,  (!% IwDFF   #####U]###L<       u   u   w    y (6:4LLLL*0I0I0If   6:C.C.C.C.C.L zCEEEEEsA//B B