OXIESEC PANEL
- Current Dir:
/
/
opt
/
gsutil
/
gslib
/
__pycache__
Server IP: 2a02:4780:11:1594:0:ef5:22d7:a
Upload:
Create Dir:
Name
Size
Modified
Perms
📁
..
-
02/11/2025 08:19:48 AM
rwxr-xr-x
📄
__init__.cpython-39.pyc
2.94 KB
02/11/2025 08:19:48 AM
rw-r--r--
📄
__main__.cpython-39.pyc
20.78 KB
02/11/2025 08:19:48 AM
rw-r--r--
📄
boto_resumable_upload.cpython-39.pyc
14.86 KB
02/11/2025 08:19:48 AM
rw-r--r--
📄
boto_translation.cpython-39.pyc
47.41 KB
02/11/2025 08:19:48 AM
rw-r--r--
📄
bucket_listing_ref.cpython-39.pyc
4.23 KB
02/11/2025 08:19:48 AM
rw-r--r--
📄
cloud_api.cpython-39.pyc
41.26 KB
02/11/2025 08:19:48 AM
rw-r--r--
📄
cloud_api_delegator.cpython-39.pyc
21.69 KB
02/11/2025 08:19:48 AM
rw-r--r--
📄
command.cpython-39.pyc
63.61 KB
02/11/2025 08:19:49 AM
rw-r--r--
📄
command_argument.cpython-39.pyc
4.25 KB
02/11/2025 08:19:49 AM
rw-r--r--
📄
command_runner.cpython-39.pyc
15.75 KB
02/11/2025 08:19:48 AM
rw-r--r--
📄
context_config.cpython-39.pyc
6.98 KB
02/11/2025 08:19:48 AM
rw-r--r--
📄
cred_types.cpython-39.pyc
851 bytes
02/11/2025 08:19:49 AM
rw-r--r--
📄
cs_api_map.cpython-39.pyc
3.25 KB
02/11/2025 08:19:48 AM
rw-r--r--
📄
daisy_chain_wrapper.cpython-39.pyc
8.35 KB
02/11/2025 08:19:49 AM
rw-r--r--
📄
devshell_auth_plugin.cpython-39.pyc
1.24 KB
02/11/2025 08:19:48 AM
rw-r--r--
📄
discard_messages_queue.cpython-39.pyc
989 bytes
02/11/2025 08:19:49 AM
rw-r--r--
📄
exception.cpython-39.pyc
5.84 KB
02/11/2025 08:19:48 AM
rw-r--r--
📄
file_part.cpython-39.pyc
4.04 KB
02/11/2025 08:19:49 AM
rw-r--r--
📄
gcs_json_api.cpython-39.pyc
53.37 KB
02/11/2025 08:19:49 AM
rw-r--r--
📄
gcs_json_credentials.cpython-39.pyc
13.84 KB
02/11/2025 08:19:49 AM
rw-r--r--
📄
gcs_json_media.cpython-39.pyc
19.41 KB
02/11/2025 08:19:49 AM
rw-r--r--
📄
help_provider.cpython-39.pyc
2.36 KB
02/11/2025 08:19:49 AM
rw-r--r--
📄
iamcredentials_api.cpython-39.pyc
7.62 KB
02/11/2025 08:19:49 AM
rw-r--r--
📄
impersonation_credentials.cpython-39.pyc
1.79 KB
02/11/2025 08:19:49 AM
rw-r--r--
📄
kms_api.cpython-39.pyc
9.34 KB
02/11/2025 08:19:49 AM
rw-r--r--
📄
lazy_wrapper.cpython-39.pyc
2.27 KB
02/11/2025 08:19:48 AM
rw-r--r--
📄
metrics.cpython-39.pyc
26.95 KB
02/11/2025 08:19:48 AM
rw-r--r--
📄
metrics_tuple.cpython-39.pyc
491 bytes
02/11/2025 08:19:48 AM
rw-r--r--
📄
name_expansion.cpython-39.pyc
20.03 KB
02/11/2025 08:19:49 AM
rw-r--r--
📄
no_op_credentials.cpython-39.pyc
936 bytes
02/11/2025 08:19:49 AM
rw-r--r--
📄
parallel_tracker_file.cpython-39.pyc
8.89 KB
02/11/2025 08:19:49 AM
rw-r--r--
📄
plurality_checkable_iterator.cpython-39.pyc
3.2 KB
02/11/2025 08:19:49 AM
rw-r--r--
📄
progress_callback.cpython-39.pyc
4.35 KB
02/11/2025 08:19:49 AM
rw-r--r--
📄
project_id.cpython-39.pyc
841 bytes
02/11/2025 08:19:48 AM
rw-r--r--
📄
pubsub_api.cpython-39.pyc
7.69 KB
02/11/2025 08:19:49 AM
rw-r--r--
📄
resumable_streaming_upload.cpython-39.pyc
5.23 KB
02/11/2025 08:19:49 AM
rw-r--r--
📄
seek_ahead_thread.cpython-39.pyc
4.09 KB
02/11/2025 08:19:49 AM
rw-r--r--
📄
sig_handling.cpython-39.pyc
4.62 KB
02/11/2025 08:19:49 AM
rw-r--r--
📄
storage_url.cpython-39.pyc
16.48 KB
02/11/2025 08:19:48 AM
rw-r--r--
📄
tab_complete.cpython-39.pyc
10.35 KB
02/11/2025 08:19:49 AM
rw-r--r--
📄
thread_message.cpython-39.pyc
12.17 KB
02/11/2025 08:19:49 AM
rw-r--r--
📄
tracker_file.cpython-39.pyc
17.01 KB
02/11/2025 08:19:49 AM
rw-r--r--
📄
tz_utc.cpython-39.pyc
2.05 KB
02/11/2025 08:19:49 AM
rw-r--r--
📄
ui_controller.cpython-39.pyc
30.35 KB
02/11/2025 08:19:49 AM
rw-r--r--
📄
wildcard_iterator.cpython-39.pyc
23.94 KB
02/11/2025 08:19:48 AM
rw-r--r--
Editing: context_config.cpython-39.pyc
Close
a +(Wgp! � @ s d Z ddlmZ ddlmZ ddlmZ ddlmZ ddlZddlZddlZddl m Z ddl Z ddl m Z dd l mZ dd l mZ daej�ej�d d d ��ZdZdZG dd� de�ZG dd� de�Zdd� Zdd� Zdd� Z dd� Z d d � Z G d d � d e �Z d d!� Z!d"d#� Z"dS )$z)Manages device context mTLS certificates.� )�absolute_import)�print_function)�division)�unicode_literalsN)�config)� exception)� boto_util)�execution_util�~z.secureConnectzcontext_aware_metadata.json�cert_provider_commandz--with_passphrasec @ s e Zd ZdZdS )�CertProvisionErrorz9Represents errors when provisioning a client certificate.N��__name__� __module__� __qualname__�__doc__� r r �#/opt/gsutil/gslib/context_config.pyr + s r c @ s e Zd ZdZdS )�(ContextConfigSingletonAlreadyExistsErrorz>Error for when create_context_config is called multiple times.Nr r r r r r 0 s r c C sT | � d�r&| �d�r&dd| dd� fS | � d�rL| �d�rLdd| dd� fS d S d S ) z)Returns (begin:bool, end:bool, name:str).z -----BEGIN z-----TF� ���z -----END � )FF� N)� startswith�endswith)�liner r r �_is_pem_section_marker5 s r c C s� i }g }d}| � � D ]�}|�� }|s&qt|�\}}}|rn|rJ|�d| � ||�� v rd|�d| � |}g }n6|r�|s�|�d| � n ||kr�|�d||f � d}|r|�|� |rd�|�d ||< d}q|r�|�d| � |S )a Returns dict with {name: section} by parsing contents in PEM format. A simple parser for PEM file. Please see RFC 7468 for the format of PEM file. Not using regex to improve performance catching nested matches. Note: This parser requires the post-encapsulation label of a section to match its pre-encapsulation label. It ignores a section without a matching label. Args: contents (str): Contents of a PEM file. logger (logging.logger): gsutil logger. Returns: A dict of the PEM file sections. Nz0Section %s missing end line and will be ignored.zASection %s already exists, and the older section will be ignored.z8Section %s missing a beginning line and will be ignored.z1Section %s missing a matching end line. Found: %s� z Section %s missing an end line.)� splitlines�stripr �warning�keys�append�join) �contents�logger�result� pem_linesZpem_section_namer �begin�end�namer r r �_split_pem_into_sections? sJ � ��� r+ c C s t j�t�} t j�| �s dS | S )z�Checks for content aware metadata. If content aware metadata exists, return its absolute path; otherwise, returns None. Returns: str: Absolute path if exists. Otherwise, None. N)�os�path� expanduser�_DEFAULT_METADATA_PATH�exists)� metadata_pathr r r � _check_pathw s r2 c C sj z8t | �� }t�|�W d � W S 1 s,0 Y W n, tyd } zt|��W Y d}~n d}~0 0 dS )z�Loads context aware metadata from the given path. Returns: dict: The metadata JSON. Raises: CertProvisionError: If failed to parse metadata as JSON. N)�open�json�load� ValueErrorr )r1 �f�er r r �_read_metadata_file� s .r9 c C sH t � } | std��t| �}t|vr*td��|t }t|vrD|�t� |S )z�Loads default cert provider command. Returns: str: The default command. Raises: CertProvisionError: If command cannot be found. z+Client certificate provider file not found.z.Client certificate provider command not found.)r2 r r9 �_CERT_PROVIDER_COMMAND�(_CERT_PROVIDER_COMMAND_PASSPHRASE_OPTIONr" )r1 Z metadata_json�commandr r r �_default_command� s r= c @ s( e Zd ZdZdd� Zdd� Zdd� ZdS ) �_ContextConfigz�Represents the configurations associated with context aware access. Only one instance of Config can be created for the program. c C s� || _ t�dd�| _d| _| js$dS t�| j� tj � t � � d�| _z| � | j� W n4 ty� } z | j �d| � W Y d}~n d}~0 0 dS )zQInitializes config. Args: logger (logging.logger): gsutil logger. � Credentials�use_client_certificateNz caa_cert.pemz*Failed to provision client certificate: %s)r% r �getboolr@ �client_cert_path�atexit�register�_unprovision_client_certr, r- r# r ZGetGsutilStateDir�_provision_client_certr �error)�selfr% r8 r r r �__init__� s � �z_ContextConfig.__init__c C s t �ddd�}|r |�d�}nt� }z�t�|�\}}t|| j�}t|d��\}|� |d � d|v r�|� |d � |d � � d | _ n|� |d � d| _ W d � n1 s�0 Y W nb t j tfy� } zt|��W Y d}~n:d}~0 t�y } ztd | ��W Y d}~n d}~0 0 dS ) zDExecutes certificate provider to obtain client certificate and keys.r? r N� zw+� CERTIFICATEzENCRYPTED PRIVATE KEYZ PASSPHRASE� z PRIVATE KEYz6Invalid output format from certificate provider, no %s)r �get�splitr= r ZExecuteExternalCommandr+ r% r3 �writer Zclient_cert_passwordr �ExternalBinaryError�OSErrorr �KeyError) rH Z cert_pathZcert_command_stringZ cert_commandZcommand_stdout_string�_�sectionsr7 r8 r r r rF � s0 � � ( �z%_ContextConfig._provision_client_certc C sf | j durbz"t�| j � | j�d| j � W n4 ty` } z | j�d| � W Y d}~n d}~0 0 dS )z@Cleans up any files or resources provisioned during config init.Nz Unprovisioned client cert: %sz'Failed to remove client certificate: %s)rB r, �remover% �debugrQ rG )rH r8 r r r rE � s � z'_ContextConfig._unprovision_client_certN)r r r r rI rF rE r r r r r> � s r> c C s t st| �a t S t�dS )z�Should be run once at gsutil startup. Creates global singleton. Args: logger (logging.logger): For logging during config functions. Returns: New ContextConfig singleton. Raises: Exception if singleton already exists. N)�_singleton_configr> r )r% r r r �create_context_config� s rX c C s t S )zuRetrieves ContextConfig global singleton. Returns: ContextConfig or None if global singleton doesn't exist. )rW r r r r �get_context_config s rY )#r � __future__r r r r rC r4 r, �botor �gslibr � gslib.utilsr r rW r- r. r# r/ r: r; � Exceptionr r r r+ r2 r9 r= �objectr> rX rY r r r r �<module> s8 � 8H