File: //opt/saltstack/salt/lib/python3.10/site-packages/salt/utils/__pycache__/pycrypto.cpython-310.pyc
o
�N�g� � @ sv d Z ddlZddlZddlZddlZddlZddlZddlm Z m
Z
z.zddl m Z
W n! eyL zddlm
Z
W n eyI ddlm
Z
Y nw Y nw dZW n ey[ dZY nw zddlZdZW n
eefyq dZY nw zddlZdZW n ey� dZY nw e�e�Z dd d
�Zer�d d � ej D �Z ni Z g d
�Z ddd�Z ddd�Z ddd�Z dS )z7
Use pycrypto to generate random passwords on the fly.
� N)�CommandExecutionError�SaltInvocationError)�
rand_bytes)�get_random_bytesTF� c
C sD |pd}|r t j}|s.|r|t j7 }|r|t j7 }|r |t j7 }|r'|t j7 }|r.|t j7 }z\t| �} d} t| �| k r�t ry|ryd}
t
j j �
� rId}
z
t
j jjtd�|
d�} W n ty` Y qIw | t�t
j jjdt�|�� d�|
d�d| �7 } n | t�� �|�7 } t| �| k s;| W S ty� } z t�d � tt | ���d} ~ ww )
z%
Generate a secure password.
� NzUTF-8T� )�encodingz[^�]z#Failed to generate secure passsword) �string� printable�ascii_lowercase�ascii_uppercase�digits� punctuation�
whitespace�int�len�
HAS_RANDOM�salt�utils�platformZ
is_windowsZ stringutilsZto_strr �UnicodeDecodeError�re�sub�escape�random� SystemRandom�choice� Exception�log� exceptionr �str)
�lengthZ
use_random�charsZ lowercaseZ uppercaser r r r Zpwr �char�exc� r' �G/opt/saltstack/salt/lib/python3.10/site-packages/salt/utils/pycrypto.py�secure_password+ s\
� ��� �
��r) c C s i | ]}|j �� |�qS r' )�name�lower)�.0�mr' r' r( �
<dictcomp>i s r. )�sha512�sha256Zblowfish�md5�cryptc C s� g d�}t jj|d�}||t�|� d�}| r4d| v r4| �d�\}}t|�d�d �}|�||d�� n|�| dd �� |jd i |��S ) zG
Generate a /etc/shadow-compatible hash for a non-local system
)Z sha512_cryptZ sha256_cryptZbcryptZ md5_cryptZ des_crypt)�schemes)Zsecret�scheme�$�=���)r �roundsT)r ZrelaxedNr' ) �passlib�contextZ CryptContext�
known_methods�index�splitr �update�hash) �
crypt_salt�password� algorithmr3 �ctx�kwargsZ roundsstrZ
split_saltr8 r' r' r( �_gen_hash_passlibo s rE c C s\ | du r t | } n|dkrdt | j� d| � �} z t�|| �}W |S ty- d}Y |S w )zA
Generate /etc/shadow hash using the native crypt module
Nr2 r5 )�methods�identr2 �OSError)r@ rA rB �retr' r' r( �_gen_hash_crypt� s
��rJ c C s� |du rt � }|du rtrtjd j�� ntd }|dkr*| r*t| �dkr*t� d� tr7|tv r7t
| ||d�S t rD|tv rDt | ||d�S t
d�|tt�t t���)z#
Generate /etc/shadow hash
Nr r2 � z'Hash salt is too long for 'crypt' hash.�r@ rA rB z�Cannot hash using '{}' hash algorithm. Natively supported algorithms are: {}. If passlib is installed ({}), the supported algorithms are: {}.)r) � HAS_CRYPTr2 rF r* r+ r; r r �warningrJ � HAS_PASSLIBrE r �format�listrL r' r' r( �gen_hash� s(
� � ��rR ) r TNTTTTFF)NNN)!�__doc__�loggingr r r Zsalt.utils.platformr Zsalt.utils.stringutilsZsalt.exceptionsr r Z
M2Crypto.Randr r � ImportErrorZCryptodome.RandomZ
Crypto.Randomr r2 rM �PermissionErrorZpasslib.contextr9 rO � getLogger�__name__r r) rF r; rE rJ rR r' r' r' r( �<module> sj ��� �� �
�=