File: //usr/local/CyberPanel/lib/python3.10/site-packages/asyncssh/__pycache__/auth_keys.cpython-310.pyc
o
�h6. � @ s d Z ddlmZmZmZmZmZ ddlmZmZm Z m
Z
z ddl m Z m
Z
dZW n ey3 dZY nw ddlmZmZ dd lmZmZ dd
lmZmZ dd lmZmZ dd lmZm Z dd
lm Z ee e f Z G dd� d�Z!G dd� d�Z"de de"fdd�Z#de e ee f de"fdd�Z$dS )z$Parser for SSH authorized_keys files� )�Dict�List�Mapping�Optional�Sequence)�Set�Tuple�Union�cast� )�X509Name�X509NamePatternTF)�
ip_address� read_file)�HostPatternList�WildcardPatternList)�KeyImportError�SSHKey)�SSHX509Certificate�SSHX509CertificateChain)�import_public_key�import_certificate)�import_certificate_subjectc @ s e Zd ZdZdefdd�Zdeddfdd�Zd ed
eddfd d �Zd ed
eddfd
d�Zd ed
eddfdd�Z d ed
eddfdd�Z
d ed
eddfdd�Z d ed
eddfdd�Z eee e
e e d�Z
d#dd�Zdedefdd�Z d$d ed ed eee d ed def
d!d"�ZdS )%�_SSHAuthorizedKeyEntryz'An entry in an SSH authorized_keys list�linec C sN d | _ d | _i | _z| �|� W d S ty Y nw | �|�}| �|� d S �N)�key�cert�options�_import_key_or_certr �_parse_options��selfr � r# �H/usr/local/CyberPanel/lib/python3.10/site-packages/asyncssh/auth_keys.py�__init__. s
�
z _SSHAuthorizedKeyEntry.__init__�returnNc C s� zt |�| _W dS ty Y nw z ttt|��| _d| jv r,| jj| jj kr,t
d��W dS ty7 Y nw d| jvr[zd| _d| _| � dt |�� W dS tyZ Y td��w td��)z'Import key or certificate in this entryN�cert-authorityz?X.509 cert-authority entries must contain a root CA certificate�subjectz)Unrecognized key, certificate, or subject)
r r r r
r r r r r( �issuer�
ValueError� _add_subjectr r! r# r# r$ r < s4
�
�
�z*_SSHAuthorizedKeyEntry._import_key_or_cert�option�valuec C s || j |< dS )z!Set an option with a string valueN)r )r" r, r- r# r# r$ � _set_string\ s z"_SSHAuthorizedKeyEntry._set_stringc C sN |� d�s d|vr
td��|�dd�\}}|ttttf | j�|i ��|< dS )z!Add an environment key/value pair�=z,Invalid environment entry in authorized_keysr N)�
startswithr* �splitr
r �strr �
setdefault)r" r, r- �namer# r# r$ �_add_environmenta s $z'_SSHAuthorizedKeyEntry._add_environmentc C �* t tt | j�|g ��}|�t|�� dS )zAdd a from host patternN)r
r r r r3 �append)r" r, r- �
from_patternsr# r# r$ � _add_fromj � �z _SSHAuthorizedKeyEntry._add_fromc C s� z$|� dd�\}}|�d�r|�d�r|dd� }|dkr dnt|�}W n ty3 td|� ��d�w ttttt t f | j
� |t � ��}|�
||f� dS ) z Add a permitopen host/port pair�:r �[�]����*NzIllegal permitopen value: )�rsplitr0 �endswith�intr* r
r r r2 r r r3 �set�add)r" r, r- �host�port_str�port�permitted_opensr# r# r$ �_add_permitopenq s ��z&_SSHAuthorizedKeyEntry._add_permitopenc C r6 )z&Add a principals wildcard pattern listN)r
r r r r3 r7 )r" r, r- �principal_patternsr# r# r$ �_add_principals� r: z&_SSHAuthorizedKeyEntry._add_principalsc C s2 t rttt | j�|g ��}|�t|�� dS dS )z Add an X.509 subject patternN)�_x509_availabler
r r
r r3 r7 )r" r, r- �subject_patternsr# r# r$ r+ � s ��z#_SSHAuthorizedKeyEntry._add_subject)�command� environment�from�
permitopen�
principalsr( c C s� | j �d�r
td��d| j v r;| j �dd�\}}| j�|�}|r(|| ||� dS ttt | j �
|g ��}|� |� dS d| j | j < dS )zAdd an option valuer/ z&Missing option name in authorized_keysr TN) �_optionr0 r* r1 � _handlers�getr
r r2 r r3 r7 )r" r, r- �handler�valuesr# r# r$ � _add_option� s
z"_SSHAuthorizedKeyEntry._add_optionc C s� d| _ d}d}d}t|�D ]B\}}|r | j |7 _ d}q
|dkr$d}q
|dkr,| }q
|r6| j |7 _ q
|dv r< n|dkrH| �� d| _ q
| j |7 _ q
| �� |rZtd ��|r`td
��||d � �� S ) zParse options in this entry� r F�\T�"z �,z#Unbalanced quote in authorized_keysz'Unbalanced backslash in authorized_keysN)rS � enumeraterX r* �strip)r" r �idx�quoted�escaped�chr# r# r$ r � s4 z%_SSHAuthorizedKeyEntry._parse_options� client_host� client_addr�cert_principals� cert_subjectr c s� t tt | j�d��}|r t���t���fdd�|D ��s dS t tt | j�d��}� dur@|dur@t� fdd�|D ��s@dS t td | j�d ��}�dur`|dur`t�fd
d�|D ��s`dS d S ) z9Match "from", "principals" and "subject" options in entryrP c 3 s � | ]
}|� �� ��V qd S r ��matches��.0�pattern)rd rc � client_ipr# r$ � <genexpr>� s � �z7_SSHAuthorizedKeyEntry.match_options.<locals>.<genexpr>FrR Nc 3 s& � | ]� t � fd d��D ��V qdS )c 3 s � | ]}� � |�V qd S r rg )rj � principal�rk r# r$ rm � � � �zA_SSHAuthorizedKeyEntry.match_options.<locals>.<genexpr>.<genexpr>N)�any)rj )re ro r$ rm � s � ��r
r( c 3 s � | ]}|� � �V qd S r rg ri )rf r# r$ rm � rp T)r
r r r rU r �allr )r" rc rd re rf r8 rJ rM r# )re rf rd rc rl r$ �
match_options� s0 �
� �
� �z$_SSHAuthorizedKeyEntry.match_options)r& Nr )�__name__�
__module__� __qualname__�__doc__r2 r% r r. r5 r9 rI rK r+ rT rX r r r �boolrs r# r# r# r$ r + s6 �
& �
���r c @ s� e Zd ZdZddee fdd�Zdeddfdd�Z dd
ed ed ed
ee e de
dee ee f f dd�Z
ded ed edeee ee f fdd�ZdS )�SSHAuthorizedKeyszAn SSH authorized keys listN�authorized_keysc C s( g | _ g | _g | _|r| �|� d S d S r )�
_user_entries� _ca_entries�
_x509_entries�load)r" rz r# r# r$ r% � s �zSSHAuthorizedKeys.__init__r& c C s� |� � D ]:}|�� }|r|�d�rqzt|�}W n ty! Y qw |jr8d|jv r1| j�|� q| j �|� q| j
�|� q| j sL| jsN| j
sPt d��dS dS dS )z*Load authorized keys data into this object�#r' zNo valid entries foundN) �
splitlinesr^ r0 r r r r r| r7 r{ r} r* )r" rz r �entryr# r# r$ r~ � s& �
� �zSSHAuthorizedKeys.loadFr rc rd re �cac C s< |r| j n| jD ]}|j|kr|�|||�r|j S qdS )z=Return whether a public key or CA is valid for authenticationN)r| r{ r rs r )r" r rc rd re r� r� r# r# r$ �validate s
��
�zSSHAuthorizedKeys.validater c C sb | j D ]+}|jr d|jvr |j|jjks|j|jjkr q|�|||j|j�r.|j|jf S qdS )z?Return whether an X.509 certificate is valid for authenticationr' )NN)r} r r r r( rs �user_principals)r" r rc rd r� r# r# r$ �
validate_x509# s
��z SSHAuthorizedKeys.validate_x509r )NF)rt ru rv rw r r2 r% r~ r r rx r �objectr� r r �
_EntryOptionsr r� r# r# r# r$ ry � s( �
��
�
���ry �datar& c C s t | �S )a Import SSH authorized keys
This function imports public keys and associated options in
OpenSSH authorized keys format.
:param data:
The key data to import.
:type data: `str`
:returns: An :class:`SSHAuthorizedKeys` object
)ry )r� r# r# r$ �import_authorized_keys4 s r� �filelistc C s: t � }t| t�r | g}n| }|D ]
}|�t|d�� q|S )a~ Read SSH authorized keys from a file or list of files
This function reads public keys and associated options in
OpenSSH authorized_keys format from a file or list of files.
:param filelist:
The file or list of files to read the keys from.
:type filenlist: `str` or `list` of `str`
:returns: An :class:`SSHAuthorizedKeys` object
�r)ry �
isinstancer2 r~ r )r� rz �files�filenamer# r# r$ �read_authorized_keysE s
r� N)%rw �typingr r r r r r r r r
�cryptor r
rL � ImportError�miscr r rk r r �
public_keyr r r r r r r r2 r� r� r ry r� r� r# r# r# r$ �<module> s. � HB�