Ñò
Ã#xPc
@ s d d k l Z d d k l Z d d k l Z d d k Z d d k l Z d d k Z d d k Z d Z
e
d „ Z d e f d „ ƒ YZ
d S(
iÿÿÿÿ( t ipautil( t nsslib( t pkcs10N( t sha1s %s IPA CAc C s | | S( N( ( t realmt format( ( s4 /usr/lib/python2.6/site-packages/ipapython/certdb.pyt get_ca_nickname s t CertDBc B sq e Z d Z d e d „ Z d „ Z d d „ Z d „ Z d „ Z d d d „ Z
d e d
„ Z d d d „ Z RS(
s
To be used for temporary NSS databases only. If temporary is set then
this willcompletely remove the database it is working on when the
class is destroyed.
c C sã | d j o t i d d ƒ } n | d j o | i ƒ } n | | _ | | _ | | _ | d | _ | d | _ | d | _ t
| i d ƒ } | i | i ƒ | i ƒ t
i | d ƒ p | i d d | i g ƒ n d S(
Nt prefixs certdb-s /noises /pwds /csr.txtt ws
/secmod.dbs -Ns -f( t Nonet tempfilet mkdtempt generate_randomt secdirt passwordt temporaryt
noise_filet pwd_filet csr_filet opent writet closeR t file_existst run_certutil( t selfR R R t f( ( s4 /usr/lib/python2.6/site-packages/ipapython/certdb.pyt __init__& s
c C sI | i o t i | i ƒ n( t i | i ƒ o t i | i ƒ n d S( N( R t shutilt rmtreeR R R R t ost remove( R ( ( s4 /usr/lib/python2.6/site-packages/ipapython/certdb.pyt __del__9 s
c C s, d d | i g } | | } t i | | ƒ S( Ns /usr/bin/certutils -d( R R t run( R t argst stdint new_args( ( s4 /usr/lib/python2.6/site-packages/ipapython/certdb.pyR A s
c C s t t i ƒ ƒ i ƒ S( N( R R t ipa_generate_passwordt hexdigest( R ( ( s4 /usr/lib/python2.6/site-packages/ipapython/certdb.pyR
F s c C sZ t i | i ƒ o t i | i ƒ n t | i d ƒ } | i | i ƒ ƒ | i ƒ d S( sF
Generate a noise file to be used when creating a key
R N( R R R R R R R R
R ( R R ( ( s4 /usr/lib/python2.6/site-packages/ipapython/certdb.pyt create_noise_fileI s
i t rsac C s | i ƒ d d | d | i d | d t | ƒ d | i d | i d g } | i | ƒ t | i d ƒ } | i ƒ } | i ƒ d
i | ƒ } t
i | ƒ } | S( sŠ
Generate a Certificate Signing Request (CSR) and return as a
string the base-64 result with the BEGIN/END block.
s -Rs -ss -os -ks -gs -zs -fs -at rt ( R' R t strR R R R t readlinesR t joinR t strip_header( R t subjectt keysizet keytypeR" R t csr( ( s4 /usr/lib/python2.6/site-packages/ipapython/certdb.pyt generate_csrV s
s Server-Certc
C sO | o
d } n d } d d | d | d | d | i d g
} | i | ƒ d S(
s}
Add a certificate to our NSS database.
Only supports base64-encoded certificates, not DER-encoded.
s CT,C,Cs u,u,us -As -ns -ts -is -fs -aN( R R ( R t cert_filet nicknamet is_cat
trust_flagR" ( ( s4 /usr/lib/python2.6/site-packages/ipapython/certdb.pyt add_certificateo s
c C s‹ | d j o
| i } n | i d } t | d ƒ } | i | ƒ | i ƒ d d | i d | d | d | i d | g } t i | ƒ | S( Ns /pkcs12_pwdR s /usr/bin/pk12utils -ds -os -ns -ks -w( R
R R R R R R R R! ( R t pkcs12_fileR5 R t p12pwd_fileR R" ( ( s4 /usr/lib/python2.6/site-packages/ipapython/certdb.pyt
create_pkcs12„ s
N(
t __name__t
__module__t __doc__R
t FalseR R R R
R' R3 R8 R; ( ( ( s4 /usr/lib/python2.6/site-packages/ipapython/certdb.pyR s
( t ipapythonR R t ipalibR R t ipapython.compatR R R t CA_NICKNAME_FMTR t objectR ( ( ( s4 /usr/lib/python2.6/site-packages/ipapython/certdb.pyt s