File: //usr/local/lib/python3.10/test/__pycache__/make_ssl_certs.cpython-310.opt-1.pyc
o
�i�$ � @ s d Z ddlZddlZddlZddlZddlT dZdZdZej �
ej � e ��Z
d8d d �Zd
Zdd� Zdd� Zdd� Zedk�re�e
� eddd�\ZZedd��
Ze�e� W d � n1 sbw Y edd��
Ze�e� W d � n1 s|w Y ed� eg d �� eg d �� ed d��Ze�e� e�e� W d � n1 s�w Y ed d ��
Ze�e� W d � n1 s�w Y e� ed!dd�\ZZed"d��Ze�e� e�e� W d � n1 s�w Y edd#d$�\ZZed%d��Ze�e� e�e� W d � n 1 �sw Y ed!d#d$�\ZZed&d��Ze�e� e�e� W d � n 1 �s?w Y ed'd#d(d)�\ZZed*d��Ze�e� e�e� W d � n 1 �shw Y g d+�Z ed,d#d-� e �d.�\ZZed/d��Ze�e� e�e� W d � n 1 �s�w Y g d0�Z ed1d#d-� e �d.�\ZZed2d��Ze�e� e�e� W d � n 1 �s�w Y ed3d#d4d5�\ZZed6d��Ze�e� e�e� W d � n 1 �s�w Y e� ed7� ed � ed%� dS dS )9zOMake the custom certificate and private key files used by test_ssl
and friends.� N)�*Z20180829142316ZZ20371028142316Za�
[ default ]
base_url = http://testca.pythontest.net/testca
[req]
distinguished_name = req_distinguished_name
prompt = no
[req_distinguished_name]
C = XY
L = Castle Anthrax
O = Python Software Foundation
CN = {hostname}
[req_x509_extensions_nosan]
[req_x509_extensions_simple]
subjectAltName = @san
[req_x509_extensions_full]
subjectAltName = @san
keyUsage = critical,keyEncipherment,digitalSignature
extendedKeyUsage = serverAuth,clientAuth
basicConstraints = critical,CA:false
subjectKeyIdentifier = hash
authorityKeyIdentifier = keyid:always,issuer:always
authorityInfoAccess = @issuer_ocsp_info
crlDistributionPoints = @crl_info
[ issuer_ocsp_info ]
caIssuers;URI.0 = $base_url/pycacert.cer
OCSP;URI.0 = $base_url/ocsp/
[ crl_info ]
URI.0 = $base_url/revocation.crl
[san]
DNS.1 = {hostname}
{extra_san}
[dir_sect]
C = XY
L = Castle Anthrax
O = Python Software Foundation
CN = dirname example
[princ_name]
realm = EXP:0, GeneralString:KERBEROS.REALM
principal_name = EXP:1, SEQUENCE:principal_seq
[principal_seq]
name_type = EXP:0, INTEGER:1
name_string = EXP:1, SEQUENCE:principals
[principals]
princ1 = GeneralString:username
[ ca ]
default_ca = CA_default
[ CA_default ]
dir = cadir
database = $dir/index.txt
crlnumber = $dir/crl.txt
default_md = sha256
startdate = {startdate}
default_startdate = {startdate}
enddate = {enddate}
default_enddate = {enddate}
default_days = 7000
default_crl_days = 7000
certificate = pycacert.pem
private_key = pycakey.pem
serial = $dir/serial
RANDFILE = $dir/.rand
policy = policy_match
[ policy_match ]
countryName = match
stateOrProvinceName = optional
organizationName = match
organizationalUnitName = optional
commonName = supplied
emailAddress = optional
[ policy_anything ]
countryName = optional
stateOrProvinceName = optional
localityName = optional
organizationName = optional
organizationalUnitName = optional
commonName = supplied
emailAddress = optional
[ v3_ca ]
subjectKeyIdentifier=hash
authorityKeyIdentifier=keyid:always,issuer
basicConstraints = CA:true
F� �req_x509_extensions_full�rsa:3072c C s� t d| � g }td�D ] }tjdd��}|�|j� W d � n1 s%w Y q |\}} }
z�tj| |tt d�} t
|d��
}|� | � W d � n1 sOw Y ddd d
d d |d
|
d|d|g
} |r�tjdd��}|�|j� |j}
W d � n1 sw Y | d|
g7 } n| dd| g7 } t dg| � |r�dd|d|d| dddddd|
g} t dg| � t
| d�� }|�
� }W d � n1 s�w Y t
|
d�� }|�
� }W d � n1 s�w Y ||fW |D ]}t�|� q�S |D ]}t�|� q�w )Nzcreating cert for � F)�delete��hostname� extra_san� startdate�enddate�w�req�-new�-nodesz-daysZ7000�-newkey�-keyout� -extensions�-config�-outz-x509�openssl�ca�-outdir�cadirz-policyZpolicy_anything�-batch�-infiles�r)�print�range�tempfile�NamedTemporaryFile�append�name� req_template�formatr r �open�write�
check_call�read�os�remove)r �signr
�ext�keyZ tempnames�i�fZreq_fileZ cert_fileZkey_filer �argsZreqfile�certr" � r2 �0/usr/local/lib/python3.10/test/make_ssl_certs.py�
make_cert_keyw sj ��
� �
� ��
�
�
� �r4 r c C s t �t� d S )N)�shutil�rmtree� TMP_CADIRr2 r2 r2 r3 � unmake_ca� s r8 c C s t �t� tt j�dd�d��} W d � n1 sw Y tt j�dd�d��
} | �d� W d � n1 s9w Y tt j�dd�d��
} | �d� W d � n1 sXw Y tt j�dd �d
��
} | �d � W d � n1 sww Y t�d
��p}t j
d d
t t d�}|�|� |�
� t�� �J} dd|jddddddd| jddg
}tdg| � dd|jdd d d td dd d!d"d#| jg}tdg| � dd|jd$dd%g}tdg| � W d � n1 s�w Y W d � n1 s�w Y tg d&�� t�d'd(� d S ))Nr z index.txt�a+zcrl.txtZ00zindex.txt.attrzw+zunique_subject = no�serialr
zCB2D80995A69525B
z
our-ca-serverr r r r r r r r r z pycakey.pemr z-subjzG/C=XY/L=Castle Anthrax/O=Python Software Foundation CA/CN=our-ca-serverr r � pycacert.pemr r z-keyfilez -selfsignr Zv3_car z-gencrlzrevocation.crl)r Zx509�-inr; r �capath/ceff1710.0r= zcapath/b1930218.0)r) �mkdirr7 r% �path�joinr& r r r# r$ r r �flushr" r' r5 �copy)r/ �tr r0 r2 r2 r3 �make_ca� sX
� � � � �
�
� �� � rD c C s dd l }t�|�| �� d S )Nr )�_ssl�pprintZ_test_decode_cert)r? rE r2 r2 r3 �
print_cert� s rG �__main__� localhostZreq_x509_extensions_simple)r, z ssl_cert.pemr
� ssl_key.pemz5password protecting ssl_key.pem in ssl_key.passwd.pem) r �pkeyr< rJ r zssl_key.passwd.pem�-aes256�-passout�
pass:somepass) r rK r< rJ r �keycert.passwd.pemrL rM rN z keycert.pemrO r9 Z fakehostnamez keycert2.pemT)r+ z keycert3.pemz keycert4.pemz
localhost-ecczparam:secp384r1.pem)r+ r- zkeycertecc.pem) z0otherName.1 = 1.2.3.4;UTF8:some other identifierz/otherName.2 = 1.3.6.1.5.2.2;SEQUENCE:princ_namezemail.1 = user@example.orgzDNS.2 = www.example.orgzdirName.1 = dir_sectz URI.1 = https://www.python.org/zIP.1 = 127.0.0.1z
IP.2 = ::1zRID.1 = 1.2.3.4.5Zallsans�
)r+ r
z allsans.pem)z'DNS.2 = xn--knig-5qa.idn.pythontest.netz6DNS.3 = xn--knigsgsschen-lcb0w.idna2003.pythontest.netz6DNS.4 = xn--knigsgchen-b4a3dun.idna2008.pythontest.netz,DNS.5 = xn--nxasmq6b.idna2003.pythontest.netz,DNS.6 = xn--nxasmm1c.idna2008.pythontest.netZidnsansz idnsans.pemZnosanZreq_x509_extensions_nosan)r+ r, z nosan.pemz>update Lib/test/test_ssl.py and Lib/test/test_asyncio/utils.py)Fr r r ) �__doc__r) rF r5 r �
subprocessr r r# r? �abspath�dirname�__file__�herer4 r7 r8 rD rG �__name__�chdirr1 r- r% r/ r& r r' r
r@ r2 r2 r2 r3 �<module> s� g
�5,
� �
� �
�
�
�
�
�
�
�
� �