/usr/share/crypto-policies/python/policygenerators/__pycache__
Edit: /usr/share/crypto-policies/python/policygenerators/__pycache__/openssl.cpython-39.pyc (8923B)
a
ԏiI. @ sX d dl mZmZ ddlmZ dZdZG dd deZG dd d eZG d
d d eZ d S )
)CalledProcessError check_output )ConfigGeneratorz^
[openssl_init]
alg_section = evp_properties
[evp_properties]
rh-allow-sha1-signatures = yes
z2
[fips_sect]
tls1-prf-ems-check = {}
activate = 1
c @ s> e Zd ZdZh dZddddddddd d
ddd d d
ddZh dddhddhdZdddddddd d d Zdddd d d!d"d#d$d%d&d' Zd(d)d*Z dhd+hd,d-hd.dhd/hd,d-hd.d0hd/hd,d-hd.dhd/hd,d-hd.d1hd/hd2hd,d-hd3d1hd+hd4hd,d-hd3d5Z
e d6d7 Z e d8d9 Z
e d:d; Ze d
S )?OpenSSLGeneratoropenssl r ZsslZtls z-AES256z-AES128z-SHA256z -CHACHA20z-SEEDz!IDEAz!DESz-3DESz!RC4z!RC2z
!eNULL:!aNULL)z AES-256-CTRz AES-128-CTR AES-256-GCM AES-128-GCM AES-256-CBC AES-128-CBCCHACHA20-POLY1305SEED-CBCIDEA-CBCDES-CBCzRC4-40z DES40-CBC3DES-CBCzRC4-128RC2-CBCNULL> zCAMELLIA-128-CBCr zCAMELLIA-256-CBCr r r r r r
z AES-128-CCMz AES-256-CCMr r
)z-CBCz-AESCCMz-AESGCMZkRSAZkEECDHZkPSKZkDHEPSKZkEDHZ kECDHEPSKZkRSAPSKZkGOST) RSAECDHEPSKDHE-PSKDHE-RSADHE-DSS ECDHE-PSKRSA-PSKz
VKO-GOST-2012z-kRSAz-kEECDHz-aRSAz-aDSSz-kPSKz-kDHEPSKz
-kECDHEPSKz-kRSAPSK) ZANONZDHZECDHr r r r r r r r z!MD5z-SHA1)zHMAC-MD5z HMAC-SHA1zSHA2-384TLS1.3zDTLS1.3)cipherhashprotocolzSHA2-256r r z
HMAC-SHA2-256)r r macr z
HMAC-SHA2-384)ZTLS_AES_256_GCM_SHA384ZTLS_AES_128_GCM_SHA256Z TLS_CHACHA20_POLY1305_SHA256ZTLS_AES_128_CCM_SHA256ZTLS_SHA256_SHA256ZTLS_SHA384_SHA384c
s d}|j }|j |jd }|jd }|dk s4|dk rB| |d}nH|dk sR|dk r`| |d}n*|dk sp|dk r~| |d }n | |d
}|d D ].}z| || j| }W q ty Y q0 q d D ].}z| || j| }W q ty Y q0 qʈ d D ]2}z| || j| }W n ty0 Y n0 q| j D ].\}}t
fd
d|D r@| ||}q@ d D ]2}z| || j | }W n ty Y n0 qxdD ]} | || }q|S )Nr min_dh_size min_rsa_sizei z @SECLEVEL=0i z @SECLEVEL=1i z @SECLEVEL=2z @SECLEVEL=3Z key_exchanger c 3 s | ]}| d v V qdS )r N ).0cipr$ =/usr/share/crypto-policies/python/policygenerators/openssl.py z4OpenSSLGenerator.generate_ciphers..r! )z-SHA384z -CAMELLIAz-ARIAz-AESCCM8) enabledZdisabledZintegersappendkey_exchange_mapKeyErrorkey_exchange_not_mapcipher_not_mapcipher_notany_multimapitemsall mac_not_map)
clspolicyspr" r# ikeywordZ ciphersetr& r$ r' r) generate_ciphers sL
z!OpenSSLGenerator.generate_ciphersc sl d}|j d D ]T fdd| j D }| D ].\}}tfdd| D r6| ||}q6q|S )Nr r c s$ i | ] \}}|d hkr||qS )r r$ )r% namespec)r& r$ r)
s z:OpenSSLGenerator.generate_ciphersuites..c 3 s, | ]$\} t fd d| D V qdS )c 3 s | ]}| v V qd S )Nr$ )r% valZ algvaluesr$ r) r* r+ zCOpenSSLGenerator.generate_ciphersuites...N)any)r% Zalgclass)r9 rA r) r* s z9OpenSSLGenerator.generate_ciphersuites..)r, ciphersuite_mapr3 r4 r- )r6 r7 r8 Z
cipher_submapZciphersuite_nameZciphersuite_specr$ )r& r9 r) generate_ciphersuites s
z&OpenSSLGenerator.generate_ciphersuitesc C s | |d S )N
)r< r6 r7 r$ r$ r) generate_config s z OpenSSLGenerator.generate_configc C s d}| dsJ ztdd|d d g}W n@ tyZ | d | d| Y dS tyl Y d S 0 d
|v s~d |v r| d | d| dS d S )
Nr+ rE r Zciphersz-There is an error in openssl generated policyzPolicy:
FTs NULLs ADHz0There is NULL or ADH in openssl generated policy)endswithr r ZeprintOSError)r6 configoutputr$ r$ r) test_config s"
z OpenSSLGenerator.test_configN)__name__
__module__ __qualname__ CONFIG_NAMESCOPESr1 r2 r. r0 r5 rC classmethodr< rD rG rM r$ r$ r$ r) r s
)
3
r c @ s e Zd ZdZdddddddd d
Zd d d
ddddddddddddddd d d d d d!d"d#d$d%Zd&d'd(d)Zd*d+d,d-d.d/d0d1d2d3d4d5d6d7d8Zed9d: Z ed;d< Z
d=S )>OpenSSLConfigGeneratorZ
opensslcnfZSSLv3ZTLSv1zTLSv1.1zTLSv1.2zTLSv1.3zDTLSv0.9ZDTLSv1zDTLSv1.2)zSSL3.0zTLS1.0zTLS1.1zTLS1.2r zDTLS0.9zDTLS1.0zDTLS1.2zRSA+SHA1zDSA+SHA1z
ECDSA+SHA1z
RSA+SHA224z
DSA+SHA224z ECDSA+SHA224z
RSA+SHA256z
DSA+SHA256z ECDSA+SHA256z
RSA+SHA384z
DSA+SHA384z ECDSA+SHA384z
RSA+SHA512z
DSA+SHA512z ECDSA+SHA512Zrsa_pss_pss_sha256Zrsa_pss_pss_sha384Zrsa_pss_pss_sha512Zrsa_pss_rsae_sha256Zrsa_pss_rsae_sha384Zrsa_pss_rsae_sha512Zed25519Zed448z?mldsa44z?mldsa65z?mldsa87)zRSA-SHA1zDSA-SHA1z
ECDSA-SHA1z RSA-SHA2-224z DSA-SHA2-224zECDSA-SHA2-224z RSA-SHA2-256z DSA-SHA2-256zECDSA-SHA2-256z RSA-SHA2-384z DSA-SHA2-384zECDSA-SHA2-384z RSA-SHA2-512z DSA-SHA2-512zECDSA-SHA2-512zRSA-PSS-SHA2-256zRSA-PSS-SHA2-384zRSA-PSS-SHA2-512zRSA-PSS-RSAE-SHA2-256zRSA-PSS-RSAE-SHA2-384zRSA-PSS-RSAE-SHA2-512z
EDDSA-ED25519z EDDSA-ED448ZMLDSA44ZMLDSA65ZMLDSA87z ?X25519MLKEM768:?x25519_mlkem768z!?SecP256r1MLKEM768:?p256_mlkem768z#?SecP384r1MLKEM1024:?p384_mlkem1024)zMLKEM768-X25519z
P256-MLKEM768zP384-MLKEM1024Z secp224r1Z secp256r1Z secp384r1Z secp521r1X25519X448Z ffdhe2048Z ffdhe3072Z ffdhe4096Z ffdhe6144Z ffdhe8192ZbrainpoolP256r1ZbrainpoolP384r1ZbrainpoolP512r1)Z SECP224R1Z SECP256R1Z SECP384R1Z SECP521R1rU rV z
FFDHE-2048z
FFDHE-3072z
FFDHE-4096z
FFDHE-6144z
FFDHE-8192zBRAINPOOL-P256R1zBRAINPOOL-P384R1zBRAINPOOL-P512R1c s |j }d | d}|d | d7 }|jrT|d7 }|d j|j d7 }|jrz|d7 }|d j|j d7 }|jr|d7 }|d j|j d7 }|jr|d7 }|d j|j d7 } fd d
|d D }|d d
| d 7 } fdd
|d D } fdd
|d D }|r4dd
| gng |rLdd
| gng }|dd| d 7 }|j d dkr|d7 }d|d v r|t
7 }|S )NzCipherString = rE zCiphersuites = zTLS.MinProtocol = zTLS.MaxProtocol =zDTLS.MinProtocol =zDTLS.MaxProtocol =c s g | ]}| j v r j | qS r$ )sign_mapr% r: r6 r$ r)
6 r+ z:OpenSSLConfigGenerator.generate_config..signzSignatureAlgorithms = :c s g | ]}| j v r j | qS r$ ) group_pq_maprY rZ r$ r) r[ > s
groupc s g | ]}| j v r j | qS r$ )group_classic_maprY rZ r$ r) r[ @ s
*z Groups = /__emsRELAXz Options = RHNoEnforceEMSinFIPS
ZSHA1r ) r, r< rD Zmin_tls_version protocol_mapZmax_tls_versionZmin_dtls_versionZmax_dtls_versionjoinenums
RH_ALLOW_SHA1)r6 r7 r9 r8 Zsig_algsZ groups_pqZgroups_classicZ
group_classesr$ rZ r) rG " s: z&OpenSSLConfigGenerator.generate_configc C s dS NTr$ r6 rK r$ r$ r) rM P s z"OpenSSLConfigGenerator.test_configN) rN rO rP rQ re rX r^ r` rS rG rM r$ r$ r$ r) rT sx
-rT c @ s0 e Zd ZdZh dZedd Zedd ZdS )OpenSSLFIPSGeneratorZ openssl_fipsr c C s t t|jd dkS )Nrc rd )FIPS_MODULE_CONFIGformatintrg rF r$ r$ r) rG Y s z$OpenSSLFIPSGenerator.generate_configc C s dS ri r$ rj r$ r$ r) rM b s z OpenSSLFIPSGenerator.test_configN)rN rO rP rQ rR rS rG rM r$ r$ r$ r) rk U s
rk N)
subprocessr r Zconfiggeneratorr rh rl r rT rk r$ r$ r$ r) s Gv