File: //lib/python3.6/site-packages/S3/__pycache__/Crypto.cpython-36.pyc
3
��we|2 � @ s� d dl mZ d dlZd dlZyd dlmZ W n ek
rL d dlmZ Y nX ddlm Z d dl
m Z ddl m
Z
mZmZmZmZ dd lmZmZmZ dd
lmZ d dlZd d lmZmZ g Zd/d
d�Z ej d� dd� Z ej d� d0dd�Z ej d� dd� Z ej d� dd� Z!ej d� dd� Z"dd � Z#d1d d!�Z$ej d!� d defd"d#�Z%ej d$� d2d%d&�Z&ej d&� d3d'd(�Z'ej d(� d)d*� Z(ej d*� d+d,� Z)ej d,� d-d.� Z*ej d.� dS )4� )�absolute_importN)� encodebytes)� encodestring� )�Config)�debug)� encode_to_s3�decode_from_s3�s3_quote�md5�unicode)�
time_to_epoch� deunicodise� check_bucket_name_dns_support)�
SortedDict)�sha1�sha256Fc C s� | sdS d}|rdpd}xht | j� �D ]X}|r8||kr8q&| | }|d
krb|dt|dd�|f 7 }q&|d|t| | dd�f 7 }q&W |o�d|d d� S ) a�
Format URL parameters from a params dict and returns
?parm1=val1&parm2=val2 or an empty string if there
are no parameters. Output of this function should
be appended directly to self.resource['uri']
- Set "always_have_equal" to always have the "=" char for a param even when
there is no value for it.
- Set "limited_keys" list to restrict the param string to keys that are
defined in it.
� �=Nz&%s%sT)�unicode_outputz&%s=%s�?r )Nr )�sorted�keysr
)�params�always_have_equal� limited_keysZ param_strZ equal_str�key�value� r � /usr/lib/python3.6/Crypto.py�format_param_str% s r c C s, t j � j}ttjt|�| t�j� �j� }|S )a{ Sign a string with the secret key, returning base64 encoded results.
By default the configured secret key is used, but may be overridden as
an argument.
Useful for REST authentication. See http://s3.amazonaws.com/doc/s3-developer-guide/RESTAuthentication.html
string_to_sign should be utf-8 "bytes".
and returned signature will be utf-8 encoded "bytes".
) r �
secret_keyr �hmac�newr r �digest�strip)�string_to_signr! � signaturer r r �sign_string_v2B s
r( �GET�/c C sZ ddddddddd d
d d d
ddddddg}|dkr<t dd�}tj� j}| d }||jdd�d 7 }||jdd�d 7 }||jdd�d 7 }xXt|j� �D ]H}|jd �r�||d || d 7 }|jd �r�||d || d 7 }q�W t|d dd �}t||d!�}||7 }||7 }t d"t
|� � t t t
|���} t t|j� �dd�}
d#| d | |
d$< |
S )%aA Sign a string with the secret key, returning base64 encoded results.
By default the configured secret key is used, but may be overridden as
an argument.
Useful for REST authentication. See http://s3.amazonaws.com/doc/s3-developer-guide/RESTAuthentication.html
string_to_sign should be utf-8 "bytes".
ZaclZ lifecycle�location�loggingZ notificationZ
partNumberZpolicyZrequestPaymentZtaggingZtorrentZuploadIdZuploadsZ versionIdZ
versioningZversionsZwebsite�deleteZcorsZrestoreNT)� ignore_case�
z content-md5r z content-typeZdatezx-amz-�:zx-emc-F)�quote_backslashesr )r z
SignHeaders: zAWS �
Authorization)r r �
access_key�getr r �
startswithr
r r �reprr r( r �list�items) �method�
canonical_urir � cur_headersZSUBRESOURCES_TO_INCLUDEr3 r& �header�canonical_querystringr' � new_headersr r r �sign_request_v2Q s6
r? c C s t | j� | j� |d�S )aE Sign a URL in s3://bucket/object form with the given expiry
time. The object will be accessible via the signed URL until the
AWS key and secret are revoked or the expiry time is reached, even
if the object is otherwise private.
See: http://s3.amazonaws.com/doc/s3-developer-guide/RESTAuthentication.html
)�bucket�object�expiry)�sign_url_base_v2r@ rA )Z url_to_signrB r r r � sign_url_v2� s rD c K sR t j � j}t j � j}t| d �| d< t j � j| d< t j � j| d< t| d ddd�| d< d| d < t j � jrpd
| d < td | d � d | }d
}|r�||d | 7 }d}|r�||d | 7 }d}td|� tt t
|��dd�| d< td| d � t t j � j | d ��rd}nd}|d7 }|| }|�r4|dt|dd� 7 }|�rN|dt|dd� 7 }|S )zcShared implementation of sign_url methods. Takes a hash of 'bucket', 'object' and 'expiry' as args.rB r3 � host_baserA FT)r1 r Zhttp�protoZhttpsz#Expiry interpreted as epoch time %sz'GET
%(expiry)d
/%(bucket)s/%(object)sr z response-content-disposition=�&zresponse-content-type=zSigning plaintext: %r)r ZsigzUrlencoded signature: %sr@ z/%(proto)s://%(bucket)s.%(host_base)s/%(object)sz/%(proto)s://%(host_base)s/%(bucket)s/%(object)szC?AWSAccessKeyId=%(access_key)s&Expires=%(expiry)d&Signature=%(sig)sz &response-content-disposition=z&response-content-type=)
r �content_disposition� content_typer
r3 rE r
Zsignurl_use_httpsr r( r r Z host_bucket)ZparmsrH rI ZsigntextZparam_separatorZurlr r r rC � s>
rC c C s t j| t|�t�j� S )N)r" r# r r r$ )r �msgr r r �sign� s rK c C s4 t td| �|�}t ||�}t ||�}t |d�}|S )z1
Input: unicode params
Output: bytes
ZAWS4� aws4_request)rK r )r Z dateStampZ
regionNameZ serviceNameZkDateZkRegionZkServiceZkSigningr r r �getSignatureKey� s
rM r � us-east-1� c C s^ d}|d krt dd�}tj� }|j} |j}
tjj� } | jd�} | jd�}
t|
|
||�}t|ddd�}t |dd�j
d �}t |�t t d
��kr�t
|j� �}nt
t t|��j� �}||| d �}d }xL|j� D ]@}|d
ks�||jd�kr�q�|| j� ||j� < |d|j� 7 }q�W d}x.t|j� �D ] \}}||d | d 7 }�q W |}td| � djt|jd���}| d | d | d | d | d | }td| � d}|
d | d | d d }|d | d | d t
t t|��j� � }t
tj|t|�t �j� �}|d d | d | d d | d d | } t |j� �} | j| | |d �� td | � | S ) NZs3T)r. z%Y%m%dT%H%M%SZz%Y%m%dF)r1 r )r r rO )�hostzx-amz-content-sha256z
x-amz-datez$host;x-amz-content-sha256;x-amz-dater2 �;r r0 r/ zcanonical_headers = %sz,Canonical Request:
%s
----------------------zAWS4-HMAC-SHA256r* rL � z Credential=�,zSignedHeaders=z
Signature=)z
x-amz-dater2 zx-amz-content-sha256zsignature-v4 headers: %s)r r r3 r! �datetimeZutcnowZstrftimerM r
r �lstrip�typer r � hexdigestr r �splitr% r r8 r �joinr" r# �update) r9 rP r: r Zregionr; �bodyZserviceZcfgr3 r! �tZamzdateZ datestampZ signing_keyr= Z payload_hashZcanonical_headersZsigned_headersr< Zcanonical_headers_str�k�vZcanonical_request� algorithmZcredential_scoper& r' Zauthorization_headerr> r r r �sign_request_v4� sV
, ,0
r` c s� |� }|d kr6xnt � fdd�d�D ]}|j|� q"W nH� j|� |}x8|dkr|� jtd|��}|sdP |t|�8 }|j|� qFW |S )Nc s
� j d�S )Ni )�readr )� file_descr r �<lambda> s z*checksum_file_descriptor.<locals>.<lambda>rO r i )�iterrZ �seekra �min�len)rb �offset�sizeZ hash_func�hash�chunk� size_leftr )rb r �checksum_file_descriptor s
rm Zchecksum_file_streamc C s@ t | t�st| ||t�S tt| �d��}t|||t�S Q R X d S )N�rb)�
isinstancer rm r �openr )�filerh ri �fpr r r �checksum_sha256_file s
rs c C s4 t � }|d kr|j| � n|j| ||| � � |S )N)r rZ )�bufferrh ri rj r r r �checksum_sha256_buffer, s
ru c C s@ t t| ��}t|j� �}t|�}|d dkr8|dd� }t|�S )Nr r/ r ���rv )r r r r$ r )r[ �mZ base64md5r r r �generate_content_md56 s rx c
C sH t � }tt| �d��&}x |jd�}|s(P |j|� qW W d Q R X |j� S )Nrn � i i � )r rp r ra rZ rW )�filename�hrr �datar r r �
hash_file_md5@ s
r} c C sj t � }|}| dkrX|j|� xD|dkrT|jt||��}|s<P |j|� |t|�8 }q W n
|j| � |j� S )Nr r )r re ra rf rZ rg rW )rt Zmfilerh Z
chunk_sizeZ
send_chunkZmd5_hashrl r| r r r �calculateChecksumM s
r~ )FN)r) r* NN)r) r r* NrN NrO )r N)r N)+Z
__future__r �sysr" �base64r r � ImportErrorr r r, r Z BaseUtilsr r r
r r ZUtilsr
r r r rT Zhashlibr r �__all__r �appendr( r? rD rC rK rM r` rm rs ru rx r} r~ r r r r �<module>
sR
1
"
>