Gecko [ goons4good.org ]

Name	Size	Permission	Date
install	[ DIR ]	drwxr-xr-x	2023-06-15 03:41
__init__.py	0 B	-rw-r--r--	2020-04-02 03:45
__init__.pyc	141 B	-rw-r--r--	2023-06-13 03:24
__init__.pyo	141 B	-rw-r--r--	2023-06-13 03:24
admintool.py	11.4 KB	-rw-r--r--	2020-04-02 03:45
admintool.pyc	11.68 KB	-rw-r--r--	2023-06-13 03:24
admintool.pyo	11.68 KB	-rw-r--r--	2023-06-13 03:24
certdb.py	30.33 KB	-rw-r--r--	2020-04-02 03:45
certdb.pyc	24.24 KB	-rw-r--r--	2023-06-13 03:24
certdb.pyo	24.24 KB	-rw-r--r--	2023-06-13 03:24
config.py	9.13 KB	-rw-r--r--	2020-04-02 03:45
config.pyc	9.6 KB	-rw-r--r--	2023-06-13 03:24
config.pyo	9.5 KB	-rw-r--r--	2023-06-13 03:24
cookie.py	24.26 KB	-rw-r--r--	2020-04-02 03:45
cookie.pyc	18.57 KB	-rw-r--r--	2023-06-13 03:24
cookie.pyo	18.57 KB	-rw-r--r--	2023-06-13 03:24
dn.py	48.4 KB	-rw-r--r--	2020-04-02 03:45
dn.pyc	50.83 KB	-rw-r--r--	2023-06-13 03:24
dn.pyo	50.83 KB	-rw-r--r--	2023-06-13 03:24
dnsutil.py	16.11 KB	-rw-r--r--	2020-04-02 03:45
dnsutil.pyc	17.54 KB	-rw-r--r--	2023-06-13 03:24
dnsutil.pyo	17.29 KB	-rw-r--r--	2023-06-13 03:24
dogtag.py	7.51 KB	-rw-r--r--	2020-04-02 03:45
dogtag.pyc	7.12 KB	-rw-r--r--	2023-06-13 03:24
dogtag.pyo	7.12 KB	-rw-r--r--	2023-06-13 03:24
errors.py	1.94 KB	-rw-r--r--	2020-04-02 03:45
errors.pyc	1.85 KB	-rw-r--r--	2023-06-13 03:24
errors.pyo	1.85 KB	-rw-r--r--	2023-06-13 03:24
graph.py	2.44 KB	-rw-r--r--	2020-04-02 03:45
graph.pyc	3.37 KB	-rw-r--r--	2023-06-13 03:24
graph.pyo	3.37 KB	-rw-r--r--	2023-06-13 03:24
ipa_log_manager.py	6.33 KB	-rw-r--r--	2020-04-02 03:45
ipa_log_manager.pyc	6.62 KB	-rw-r--r--	2023-06-13 03:24
ipa_log_manager.pyo	6.62 KB	-rw-r--r--	2023-06-13 03:24
ipaldap.py	58.15 KB	-rw-r--r--	2020-04-02 03:45
ipaldap.pyc	52.44 KB	-rw-r--r--	2023-06-13 03:24
ipaldap.pyo	51.66 KB	-rw-r--r--	2023-06-13 03:24
ipautil.py	49.64 KB	-rw-r--r--	2020-04-02 03:45
ipautil.pyc	47.54 KB	-rw-r--r--	2023-06-13 03:24
ipautil.pyo	47.37 KB	-rw-r--r--	2023-06-13 03:24
ipavalidate.py	3.55 KB	-rw-r--r--	2020-04-02 03:45
ipavalidate.pyc	3.1 KB	-rw-r--r--	2023-06-13 03:24
ipavalidate.pyo	3.1 KB	-rw-r--r--	2023-06-13 03:24
kerberos.py	6.18 KB	-rw-r--r--	2020-04-02 03:45
kerberos.pyc	8.04 KB	-rw-r--r--	2023-06-13 03:24
kerberos.pyo	8.04 KB	-rw-r--r--	2023-06-13 03:24
kernel_keyring.py	4.73 KB	-rw-r--r--	2020-04-02 03:45
kernel_keyring.pyc	4.78 KB	-rw-r--r--	2023-06-13 03:24
kernel_keyring.pyo	4.37 KB	-rw-r--r--	2023-06-13 03:24
nsslib.py	0 B	-rw-r--r--	2020-04-02 03:45
nsslib.pyc	139 B	-rw-r--r--	2023-06-13 03:24
nsslib.pyo	139 B	-rw-r--r--	2023-06-13 03:24
session_storage.py	12.91 KB	-rw-r--r--	2020-04-02 03:45
session_storage.pyc	9.13 KB	-rw-r--r--	2023-06-13 03:24
session_storage.pyo	9.13 KB	-rw-r--r--	2023-06-13 03:24
ssh.py	6.09 KB	-rw-r--r--	2020-04-02 03:45
ssh.pyc	6.04 KB	-rw-r--r--	2023-06-13 03:24
ssh.pyo	6.04 KB	-rw-r--r--	2023-06-13 03:24
version.py	11.89 KB	-rw-r--r--	2023-06-13 03:23
version.pyc	10.6 KB	-rw-r--r--	2023-06-13 03:24
version.pyo	10.6 KB	-rw-r--r--	2023-06-13 03:24

Rename

# Authors: Rob Crittenden <rcritten@redhat.com>
#
# Copyright (C) 2009    Red Hat
# see file 'COPYING' for use and warranty information
#
# This program is free software; you can redistribute it and/or modify
# it under the terms of the GNU General Public License as published by
# the Free Software Foundation, either version 3 of the License, or
# (at your option) any later version.
#
# This program is distributed in the hope that it will be useful,
# but WITHOUT ANY WARRANTY; without even the implied warranty of
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.    See the
# GNU General Public License for more details.
#
# You should have received a copy of the GNU General Public License
# along with this program.  If not, see <http://www.gnu.org/licenses/>.
#

import collections
import logging
import xml.dom.minidom

import six
# pylint: disable=import-error
from six.moves.urllib.parse import urlencode
# pylint: enable=import-error

# pylint: disable=ipa-forbidden-import
from ipalib import api, errors
from ipalib.util import create_https_connection
from ipalib.errors import NetworkError
from ipalib.text import _
# pylint: enable=ipa-forbidden-import
from ipapython import ipautil

# Python 3 rename. The package is available in "six.moves.http_client", but
# pylint cannot handle classes from that alias
try:
    import httplib
except ImportError:
    # pylint: disable=import-error
    import http.client as httplib

if six.PY3:
    unicode = str

logger = logging.getLogger(__name__)

Profile = collections.namedtuple('Profile', ['profile_id', 'description', 'store_issued'])

INCLUDED_PROFILES = {
    Profile(u'caIPAserviceCert', u'Standard profile for network services', True),
    Profile(u'IECUserRoles', u'User profile that includes IECUserRoles extension from request', True),
    Profile(u'KDCs_PKINIT_Certs',
            u'Profile for PKINIT support by KDCs',
            False),
    }

DEFAULT_PROFILE = u'caIPAserviceCert'
KDC_PROFILE = u'KDCs_PKINIT_Certs'

def error_from_xml(doc, message_template):
    try:
        item_node = doc.getElementsByTagName("Error")
        reason = item_node[0].childNodes[0].data
        return errors.RemoteRetrieveError(reason=reason)
    except Exception as e:
        return errors.RemoteRetrieveError(reason=message_template % e)

def get_ca_certchain(ca_host=None):
    """
    Retrieve the CA Certificate chain from the configured Dogtag server.
    """
    if ca_host is None:
        ca_host = api.env.ca_host
    chain = None
    conn = httplib.HTTPConnection(
        ca_host,
        api.env.ca_install_port or 8080)
    conn.request("GET", "/ca/ee/ca/getCertChain")
    res = conn.getresponse()
    doc = None
    if res.status == 200:
        data = res.read()
        conn.close()
        try:
            doc = xml.dom.minidom.parseString(data)
            try:
                item_node = doc.getElementsByTagName("ChainBase64")
                chain = item_node[0].childNodes[0].data
            except IndexError:
                raise error_from_xml(
                    doc, _("Retrieving CA cert chain failed: %s"))
        finally:
            if doc:
                doc.unlink()
    else:
        raise errors.RemoteRetrieveError(
            reason=_("request failed with HTTP status %d") % res.status)

return chain

def _parse_ca_status(body):
    doc = xml.dom.minidom.parseString(body)
    try:
        item_node = doc.getElementsByTagName("XMLResponse")[0]
        item_node = item_node.getElementsByTagName("Status")[0]
        return item_node.childNodes[0].data
    except IndexError:
        raise error_from_xml(doc, _("Retrieving CA status failed: %s"))

def ca_status(ca_host=None):
    """Return the status of the CA, and the httpd proxy in front of it

The returned status can be:
    - running
    - starting
    - Service Temporarily Unavailable
    """
    if ca_host is None:
        ca_host = api.env.ca_host
    status, _headers, body = http_request(
        ca_host, 8080, '/ca/admin/ca/getStatus',
        # timeout: CA sometimes forgot to answer, we have to try again
        timeout=api.env.http_timeout)
    if status == 503:
        # Service temporarily unavailable
        return status
    elif status != 200:
        raise errors.RemoteRetrieveError(
            reason=_("Retrieving CA status failed with status %d") % status)
    return _parse_ca_status(body)

def https_request(
        host, port, url, cafile, client_certfile, client_keyfile,
        method='POST', headers=None, body=None, **kw):
    """
    :param method: HTTP request method (defalut: 'POST')
    :param url: The path (not complete URL!) to post to.
    :param body: The request body (encodes kw if None)
    :param kw:  Keyword arguments to encode into POST body.
    :return:   (http_status, http_headers, http_body)
               as (integer, dict, str)

Perform a client authenticated HTTPS request
    """

def connection_factory(host, port):
        return create_https_connection(
            host, port,
            cafile=cafile,
            client_certfile=client_certfile,
            client_keyfile=client_keyfile,
            tls_version_min=api.env.tls_version_min,
            tls_version_max=api.env.tls_version_max)

if body is None:
        body = urlencode(kw)
    return _httplib_request(
        'https', host, port, url, connection_factory, body,
        method=method, headers=headers)

def http_request(host, port, url, timeout=None, **kw):
    """
    :param url: The path (not complete URL!) to post to.
    :param timeout: Timeout in seconds for waiting for reply.
    :param kw: Keyword arguments to encode into POST body.
    :return:   (http_status, http_headers, http_body)
                as (integer, dict, str)

Perform an HTTP request.
    """
    body = urlencode(kw)
    if timeout is None:
        conn_opt = {}
    else:
        conn_opt = {"timeout": timeout}

return _httplib_request(
        'http', host, port, url, httplib.HTTPConnection, body,
        connection_options=conn_opt)

def _httplib_request(
        protocol, host, port, path, connection_factory, request_body,
        method='POST', headers=None, connection_options=None):
    """
    :param request_body: Request body
    :param connection_factory: Connection class to use. Will be called
        with the host and port arguments.
    :param method: HTTP request method (default: 'POST')
    :param connection_options: a dictionary that will be passed to
        connection_factory as keyword arguments.

Perform a HTTP(s) request.
    """
    if connection_options is None:
        connection_options = {}

uri = u'%s://%s%s' % (protocol, ipautil.format_netloc(host, port), path)
    logger.debug('request %s %s', method, uri)
    logger.debug('request body %r', request_body)

headers = headers or {}
    if (
        method == 'POST'
        and 'content-type' not in (str(k).lower() for k in headers)
    ):
        headers['content-type'] = 'application/x-www-form-urlencoded'

try:
        conn = connection_factory(host, port, **connection_options)
        conn.request(method, path, body=request_body, headers=headers)
        res = conn.getresponse()

http_status = res.status
        http_headers = res.msg
        http_body = res.read()
        conn.close()
    except Exception as e:
        logger.debug("httplib request failed:", exc_info=True)
        raise NetworkError(uri=uri, error=str(e))

logger.debug('response status %d',    http_status)
    logger.debug('response headers %s',   http_headers)
    logger.debug('response body %r',      http_body)

return http_status, http_headers, http_body