o

�N�g)�@s@dZd
dl
Z
d
dlZd
dlZdZe�e�
Zdd�Zddd�
Z	dS)	z6
Enforce state for SSL/TLS
=========================

�NZtlscCsd
tv
rdSt
S)N�
tls.cert_info)Fztls module could not be loaded)�__salt__�__virtualname__�rr�C/opt/saltstack/salt/lib/python3.10/site-packages/salt/states/tls.py�__virtual__s

rc

Cs

|id
dd�}t��}zt
d|�
}Wn$ty7
}	
z|	�|d<d
|d<t�|d�

|WYd}	~	Sd}	~	w
w||dkrDd	|d<|S||d
krPd|d<|Stj|d
|d�
}
|
||||d
�}tjdi|�
�
}|
|krxd�|
|�|d<|Sd|d<d|
��|d<|S)z�
    Verify that a TLS certificate is valid now and (optionally) will be valid
    for the time specified through weeks, days, hours, minutes, and seconds.
    F�)�nameZchanges�result�commentrrr
NZ
not_beforezCertificate is not yet validZ	not_afterzCertificate is expired)
�seconds)�weeks�days�hours�minutesrz4Certificate will expire in {}, which is less than {}TzCertificate is valid for r)�timer�OSError�log�error�datetime�	timedelta�format)
r	r
rrrr�ret�nowZ	cert_info�excZdelta_remainingZdelta_kind_mapZ	delta_minrrr�valid_certificatesB







��








�

�

r)r
r
r
r
r
)
�__doc__r�loggingrr�	getLogger�__name__rrrrrrr�<module>
s