Google
Edit File: encrypt.cpython-39.pyc
a �)g ) � @ s� d dl mZmZmZ eZd dlZd dlZd dlZd dl Z d dl Z d dl m Z d dl mZ d dlmZmZ d dlmZ d dlmZmZ d dlmZ d ZZd Z Z zXd dl Z d dl Z d d l m!Z!m"Z" zd d l#m$Z$ W n e%y� d d l&m$Z$ Y n0 d Z W n* e'�y" Z( ze(ZW Y dZ([(n dZ([(0 0 zd dl)Z)d Z W n* e'�y^ Z( ze(ZW Y dZ([(n dZ([(0 0 e� Z*d gZ+e�,� Z-dZ.e.ej/dfdd�Z0d dd�Z1G dd� de2�Z3G dd� de3�Z4G dd� de3�Z5d dd�Z6d d d �Z7dS ) � )�absolute_import�division�print_functionN)� namedtuple)� constants)� AnsibleError�AnsibleAssertionError)� text_type)�to_text�to_bytes)�DisplayF)� HasRawSalt� PrefixWrapper)�bcrypt64T� do_encrypt� c sX t � t�s td� t� �f ��|du r0t�� �n t�|��d�� �fdd�t| �D ��S )a Return a random password string of length containing only chars :kwarg length: The number of characters in the new password. Defaults to 20. :kwarg chars: The characters to choose from. The default is all ascii letters, ascii digits, and these symbols ``.,:-_`` z%s (%s) is not a text_typeN� c 3 s | ]}�� � �V qd S �N)�choice)�.0Zdummy��charsZrandom_generator� �9/usr/lib/python3.9/site-packages/ansible/utils/encrypt.py� <genexpr>A � z"random_password.<locals>.<genexpr>) � isinstancer r �type�randomZ SystemRandomZRandom�join�range)�lengthr Zseedr r r �random_password3 s r" � c C s t jt j d }t| |d�S )zhReturn a text string suitable for use as a salt for the hash functions we use to encrypt passwords. z./)r! r )�stringZ ascii_letters�digitsr" )r! Z salt_charsr r r � random_saltD s r& c @ sh e Zd Zedg d��Zedddddd�eddd d dd�ed d d ddd�edd dddd�d�Zdd� ZdS )�BaseHash�algo)�crypt_id� salt_size�implicit_rounds� salt_exact�implicit_ident�1r# NFZ2b� � T�5� i�) �6i� )Z md5_crypt�bcryptZ sha256_cryptZ sha512_cryptc C s || _ d S r )� algorithm��selfr5 r r r �__init__V s zBaseHash.__init__)�__name__� __module__� __qualname__r r( � algorithmsr8 r r r r r' M s �r' c sF e Zd Z� fdd�Zddd�Zdd� Zdd � Zd d � Zd d � Z� Z S )� CryptHashc sj t t| ��|� ts tdtd��tj�d�r4td��|| j vrLtd| j ��t j ddd� | j | | _ d S ) NzYcrypt.crypt cannot be used as the 'crypt' python library is not installed or is unusable.��orig_exc�darwinzKcrypt.crypt not supported on Mac OS X/Darwin, install passlib python module�+crypt.crypt does not support '%s' algorithmz�Encryption using the Python crypt module is deprecated. The Python crypt module is deprecated and will be removed from Python 3.13. Install the passlib library for continued encryption functionality.g\��(\@)�version)�superr= r8 � HAS_CRYPTr �CRYPT_E�sys�platform� startswithr< r5 �displayZ deprecated� algo_datar6 �� __class__r r r8 [ s �zCryptHash.__init__Nc C s0 | � ||�}| �|�}| �|�}| �||||�S r )�_salt�_rounds�_ident�_hash�r7 �secret�saltr* �rounds�identr r r �hashq s zCryptHash.hashc C sr |p | j j}|pt|�}t�d|�r,td��| j jrNt|�| j jkrNtd��n | j jsnt|�| j jkrntd��|S )Nz[^./0-9A-Za-z]zinvalid characters in saltzinvalid salt size)rJ r* r& �re�searchr r, �len)r7 rS r* �retr r r rM w s zCryptHash._saltc C s || j jkrd S |S d S r )rJ r+ )r7 rT r r r rN � s zCryptHash._roundsc C s |s | j jS | jdkr|S d S �Nr4 )rJ r) r5 )r7 rU r r r rO � s zCryptHash._identc C s� d}|rd| }|r |d| 7 }|d| 7 }zt � ||�}d }W n, tyl } zd }|}W Y d }~n d }~0 0 |s�td| j |d��|S )Nr z$%sz $rounds=%drA r> )�crypt�OSErrorr r5 ) r7 rR rS rT rU Z saltstring�resultr? �er r r rP � s$ �zCryptHash._hash)NNNN) r9 r: r; r8 rV rM rN rO rP � __classcell__r r rK r r= Z s r= c sF e Zd Z� fdd�Zddd�Zdd� Zdd � Zd d � Zd d � Z� Z S )� PasslibHashc sZ t t| ��|� ts$td| td��zttj|�| _ W n t yT td| ��Y n0 d S )Nz6passlib must be installed and usable to hash with '%s'r> z'passlib does not support '%s' algorithm) rC ra r8 �PASSLIB_AVAILABLEr � PASSLIB_E�getattr�passlibrV � crypt_algo� Exceptionr6 rK r r r8 � s zPasslibHash.__init__Nc C s2 | � |�}| �|�}| �|�}| j|||||d�S )N�rS r* rT rU )� _clean_salt� _clean_rounds� _clean_identrP rQ r r r rV � s zPasslibHash.hashc C s: d }|s(| j | jv r$| j�| j �jS |S | j dkr6|S |S r[ )r5 r< �getr- )r7 rU rZ r r r rk � s zPasslibHash._clean_identc C s^ |sd S t t| jt�r | jjn| jt�r8t|ddd�}nt|ddd�}| jdkrZt � |�}|S )N�ascii�strict)�encoding�errorsr4 ) � issubclassr rf r �wrappedr r r r5 r Z repair_unused)r7 rS rZ r r r ri � s zPasslibHash._clean_saltc C s. | j �| j�}|r|S |r&|jr&|jS d S d S r )r< rl r5 r+ )r7 rT rJ r r r rj � s zPasslibHash._clean_roundsc C s� i }|r||d< |r ||d< |r(||d< |r4||d< zZt | jd�r\| jjf i |���|�}n0t | jd�r~| jj|fi |��}ntdtj ��W n0 ty� } ztd|d ��W Y d }~n d }~0 0 |s�td | j ��t |d d �S ) NrS r* rT rU rV �encryptz*installed passlib version %s not supportedzCould not hash the secret.r> z"failed to hash with algorithm '%s'rn )rp ) �hasattrrf ZusingrV rs r re � __version__� ValueErrorr5 r ) r7 rR rS r* rT rU Zsettingsr^ r_ r r r rP � s( "zPasslibHash._hash)NNNN) r9 r: r; r8 rV rk ri rj rP r` r r rK r ra � s ra c C sH t r t|�j| ||||d�S tr8t|�j| ||||d�S tdtd��d S )Nrh zFUnable to encrypt nor hash, either crypt or passlib must be installed.r> )rb ra rV rD r= r rE )rR r5 rS r* rT rU r r r �passlib_or_crypt s rw c C s t | ||||d�S )N)r* rS rU )rw )r^ rs r* rS rU r r r r s )r# )NNNN)NNN)8Z __future__r r r r Z __metaclass__Zmultiprocessingr rW r$ rF � collectionsr Zansibler �CZansible.errorsr r Zansible.module_utils.sixr Zansible.module_utils._textr r Zansible.utils.displayr rc rE rD rb re Z passlib.hashZpasslib.utils.handlersr r Zpasslib.utils.binaryr � ImportErrorZ passlib.utilsrg r_ r\ rI �__all__�LockZ_LOCKZDEFAULT_PASSWORD_LENGTHZDEFAULT_PASSWORD_CHARSr" r& �objectr' r= ra rw r r r r r �<module> sR U[