Файловый менеджер - Редактировать - /opt/imh-python/lib/python3.9/site-packages/paramiko/__pycache__/kex_gss.cpython-39.pyc
Ðазад
a s�h�_ � @ s� d Z ddlZddlmZ ddlmZmZmZmZm Z m Z ddl m Z ddl mZ ddlmZ edd �\ZZZZZed d �\ZZd d � edd �D �\ZZZZ Z dd � ed d �D �\Z Z G dd� d�Z G dd� de �Z!G dd� d�Z"G dd� d�Z#dS )a� This module provides GSS-API / SSPI Key Exchange as defined in :rfc:`4462`. .. note:: Credential delegation is not supported in server mode. .. note:: `RFC 4462 Section 2.2 <https://tools.ietf.org/html/rfc4462.html#section-2.2>`_ says we are not required to implement GSS-API error messages. Thus, in many methods within this module, if an error occurs an exception will be thrown and the connection will be terminated. .. seealso:: :doc:`/api/ssh_gss` .. versionadded:: 1.15 � N)�sha1)�DEBUG�max_byte� zero_byte�byte_chr� byte_mask�byte_ord)�util)�Message)� SSHException� �# �( �* c C s g | ] }t |��qS � �r ��.0�cr r ��/root/rpmbuild/BUILDROOT/imh-python39-modules-3.9.7-92.el8.x86_64/opt/imh-python/lib/python3.9/site-packages/paramiko/kex_gss.py� <listcomp>F � r c C s g | ] }t |��qS r r r r r r r G s c @ s| e Zd ZdZdZdZed�ed Ze d Z dZ dd � Z d d � Z d d � Zdd� Zdd� Zdd� Zdd� Zdd� Zdd� ZdS )� KexGSSGroup1z� GSS-API / SSPI Authenticated Diffie-Hellman Key Exchange as defined in `RFC 4462 Section 2 <https://tools.ietf.org/html/rfc4462.html#section-2>`_ lE ���� 8� {3If?�E y�Z�3�V�58n�oP�e�?a-� �tBL� �y3W[�<�p�6m5� �P��&a�F! �33*�w& �AR�M;L}.�c|&A�@�h \�&&# -D�v�d���� � � � � z(gss-group1-sha1-toWM5Slw5Ew8Mqkay+al2g==c C s, || _ | j j| _d | _d| _d| _d| _d S )Nr )� transport� kexgss_ctxt�kexgss�gss_host�x�e�f��selfr r r r �__init__Y s zKexGSSGroup1.__init__c C s� | � � | jjr4t| j| j| j�| _| j�t � dS t| j| j| j�| _ | jj | _ t � }|� t� |�| jj| j d�� |�| j � | j�|� | j�tttt� dS )zU Start the GSS-API / SSPI Authenticated Diffie-Hellman Key Exchange. N��target)� _generate_xr � server_mode�pow�Gr! �Pr# �_expect_packet�MSG_KEXGSS_INITr" r r �add_byte�c_MSG_KEXGSS_INIT� add_stringr �ssh_init_sec_context� add_mpint� _send_message�MSG_KEXGSS_HOSTKEY�MSG_KEXGSS_CONTINUE�MSG_KEXGSS_COMPLETE�MSG_KEXGSS_ERROR�r% �mr r r � start_kexa s$ �zKexGSSGroup1.start_kexc C s� | j jr|tkr| �|�S | j js4|tkr4| �|�S | j jrN|tkrN| �|�S | j jsh|tkrh| � |�S |t krz| � |�S d}t |� |���dS )�� Parse the next packet. :param ptype: The (string) type of the incoming packet :param `.Message` m: The packet content z.GSS KexGroup1 asked to handle packet type {:d}N)r r* r/ �_parse_kexgss_initr6 �_parse_kexgss_hostkeyr7 �_parse_kexgss_continuer8 �_parse_kexgss_completer9 �_parse_kexgss_errorr �format�r% �ptyper; �msgr r r � parse_next{ s zKexGSSGroup1.parse_nextc C sT t �d�}t|d d�|dd� }|dd� }|| j| jfvr qDq t�|�| _dS )ap generate an "x" (1 < x < q), where q is (p-1)/2. p is a 128-byte (1024-bit) number, where the first 64 bits are 1. therefore q can be approximated as a 2^1023. we drop the subset of potential x where the first 63 bits are 1, because some of those will be larger than q (but this is a tiny tiny subset of potential x). � r r � Nr )�os�urandomr �b7fffffffffffffff�b0000000000000000r � inflate_longr! )r% �x_bytes�firstr r r r) � s zKexGSSGroup1._generate_xc C s8 |� � }|| j_|� � }| j�||� | j�tt� dS )z� Parse the SSH2_MSG_KEXGSS_HOSTKEY message (client mode). :param `.Message` m: The content of the SSH2_MSG_KEXGSS_HOSTKEY message N�� get_stringr �host_keyZ _verify_keyr. r7 r8 �r% r; rS �sigr r r r? � s z"KexGSSGroup1._parse_kexgss_hostkeyc C sZ | j jsV|�� }t� }|�t� |�| jj| j |d�� | j � |� | j � t t t� n dS )z� Parse the SSH2_MSG_KEXGSS_CONTINUE message. :param `.Message` m: The content of the SSH2_MSG_KEXGSS_CONTINUE message �r( Z recv_tokenN�r r* rR r r0 �c_MSG_KEXGSS_CONTINUEr2 r r3 r � send_messager. r7 r8 r9 �r% r; � srv_tokenr r r r@ � s �� �z#KexGSSGroup1._parse_kexgss_continuec C s< | j jdu rt� | j _|�� | _| jdk s:| j| jd krBtd��|�� }|�� }d}|rb|�� }t | j| j | j�}t � }|� | j j | j j| j j| j j� |�| j j�� � |�| j� |�| j� |�|� tt|���� }| j �||� |du�r| jj| j|d� | j� ||� n| j� ||� d| j _ | j � � dS )z� Parse the SSH2_MSG_KEXGSS_COMPLETE message (client mode). :param `.Message` m: The content of the SSH2_MSG_KEXGSS_COMPLETE message NrI � Server kex "f" is out of rangerV T) r rS � NullHostKey� get_mpintr# r- r rR � get_booleanr+ r! r �add� local_version�remote_version�local_kex_init�remote_kex_initr2 �__str__r4 r" r �str�digest�_set_K_Hr r3 r � ssh_check_mic� gss_kex_used�_activate_outbound�r% r; � mic_token�boolr[ �K�hm�Hr r r rA � s@ � �z#KexGSSGroup1._parse_kexgss_completec C s� |� � }|�� | _| jdk s,| j| jd kr4td��t| j| j| j�}t� | j_ | jj � � }t � }|� | jj | jj| jj| jj� |�|� |�| j� |�| j� |�|� t|�� ��� }| j�||� | j�| j|�}t � }| jj�rj| jj | jj dd�}|� t � |�| j� |�|� |du�r@|� d� |�|� n |� d� | j�!|� d| j_"| j�#� n0|� t$� |�|� | j�!|� | j�%t&t't(� dS )z� Parse the SSH2_MSG_KEXGSS_INIT message (server mode). :param `.Message` m: The content of the SSH2_MSG_KEXGSS_INIT message rI � Client kex "e" is out of rangeT�Zgss_kexNF))rR r^ r" r- r r+ r! r] r rS re r r` rb ra rd rc r2 r4 r# r �asbytesrg rh r �ssh_accept_sec_contextr �_gss_srv_ctxt_status� ssh_get_mic� session_idr0 �c_MSG_KEXGSS_COMPLETE� add_booleanr5 rj rk rX r. r7 r8 r9 � r% r; Z client_tokenro �keyrp rq r[ rm r r r r> � sX � � � �z KexGSSGroup1._parse_kexgss_initc C s6 |� � }|� � }|�� }|�� td�|||���dS )a� Parse the SSH2_MSG_KEXGSS_ERROR message (client mode). The server may send a GSS-API error message. if it does, we display the error by throwing an exception (client mode). :param `.Message` m: The content of the SSH2_MSG_KEXGSS_ERROR message :raise SSHException: Contains GSS-API major and minor status as well as the error message and the language tag of the message �CGSS-API Error: Major Status: {} Minor Status: {} Error Message: {} N��get_intrR r rC �r% r; Z maj_statusZ min_status�err_msgr r r rB * s ��z KexGSSGroup1._parse_kexgss_errorN)�__name__� __module__� __qualname__�__doc__r- r, r r rL r rM �NAMEr& r< rG r) r? r@ rA r> rB r r r r r L s -8r c @ s e Zd ZdZdZdZdZdS )� KexGSSGroup14z� GSS-API / SSPI Authenticated Diffie-Hellman Group14 Key Exchange as defined in `RFC 4462 Section 2 <https://tools.ietf.org/html/rfc4462.html#section-2>`_ l� �����&�U�G9 tcb0]Q\-�:�$�90.`U�_�b;YS7x]Ek � `:xds�! ,w<G�8�qbd R _ ��h��d�d��Y6K�pRT{�U�j�K�#�Gt|�L� ��4�S�8� �FYpw,(.> �=�H�G2C�d�c_�.K?&j�_�c�}�z[\V�_1M.D�^� /1v5 I �j�V&|� �/�mV�lR�<6#�{n4�(EY91�T�:�g8 H �Ap�cb4B�B�j~H����� r z)gss-group14-sha1-toWM5Slw5Ew8Mqkay+al2g==N)r� r� r� r� r- r, r� r r r r r� D s r� c @ sx e Zd ZdZdZdZdZdZdd� Zdd � Z d d � Z d d � Z dd� Z dd� Z dd� Zdd� Zdd� Zdd� Zdd� Zd S ) � KexGSSGexz� GSS-API / SSPI Authenticated Diffie-Hellman Group Exchange as defined in `RFC 4462 Section 2 <https://tools.ietf.org/html/rfc4462.html#section-2>`_ z%gss-gex-sha1-toWM5Slw5Ew8Mqkay+al2g==� � i c C sD || _ | j j| _d | _d | _d | _d | _d | _d | _d | _ d| _ d S )NF) r r r r �p�q�gr! r" r# � old_styler$ r r r r& [ s zKexGSSGex.__init__c C sr | j jr| j �t� dS | j j| _t� }|�t� |�| j � |�| j � |�| j � | j � |� | j �t � dS )zV Start the GSS-API / SSPI Authenticated Diffie-Hellman Group Exchange N)r r* r. �MSG_KEXGSS_GROUPREQr r r0 �c_MSG_KEXGSS_GROUPREQ�add_int�min_bits�preferred_bits�max_bitsr5 �MSG_KEXGSS_GROUPr: r r r r< g s zKexGSSGex.start_kexc C s� |t kr| �|�S |tkr$| �|�S |tkr6| �|�S |tkrH| �|�S |tkrZ| � |�S |t krl| � |�S |t kr~| � |�S d}t|�|���dS )r= z'KexGex asked to handle packet type {:d}N)r� �_parse_kexgss_groupreqr� �_parse_kexgss_groupr/ �_parse_kexgss_gex_initr6 r? r7 r@ r8 rA r9 rB r rC rD r r r rG z s zKexGSSGex.parse_nextc C s� | j d d }t�|d�}t|d �}t|�}d}|d@ sL|dK }|dL }q2t�|�}t|d |�|dd � }t�|d�}|dkrL||k rLq�qL|| _ d S )NrI r r � rH ) r� r Z deflate_longr �lenrJ rK r rN r! )r% r� ZqnormZqhbyteZ byte_countZqmaskrO r! r r r r) � s zKexGSSGex._generate_xc C s� |� � }|� � }|� � }|| jkr(| j}|| jk r8| j}||krD|}||k rP|}|| _|| _|| _| j�� }|du r|td��| j�td� |||�� |� |||�\| _ | _ t � }|�t� |�| j � |�| j � | j�|� | j�t� dS )z� Parse the SSH2_MSG_KEXGSS_GROUPREQ message (server mode). :param `.Message` m: The content of the SSH2_MSG_KEXGSS_GROUPREQ message Nz-Can't do server-side gex with no modulus packz Picking p ({} <= {} <= {} bits))r r� r� r� r Z_get_modulus_packr �_logr rC Z get_modulusr� r� r r0 �c_MSG_KEXGSS_GROUPr4 r5 r. r/ )r% r; ZminbitsZ preferredbitsZmaxbits�packr r r r� � s< �� z KexGSSGex._parse_kexgss_groupreqc C s� |� � | _|� � | _t�| j�}|dk s0|dkr>td�|���| j�t d�|�� | � � t | j| j | j�| _ t� }|�t� |�| jj| jd�� |�| j � | j�|� | j�tttt� dS )z� Parse the SSH2_MSG_KEXGSS_GROUP message (client mode). :param `Message` m: The content of the SSH2_MSG_KEXGSS_GROUP message r� r� z<Server-generated gex p (don't ask) is out of range ({} bits)zGot server p ({} bits)r' N) r^ r� r� r � bit_lengthr rC r r� r r) r+ r! r" r r0 r1 r2 r r3 r r4 r5 r. r6 r7 r8 r9 )r% r; Zbitlenr r r r� � s2 �� � �z KexGSSGex._parse_kexgss_groupc C s� |� � }|�� | _| jdk s,| j| jd kr4td��| �� t| j| j| j�| _ t| j| j| j�}t � | j _ | j j � � }t� }|�| j j| j j| j j| j j|� |�| j� |�| j� |�| j� |�| j� |�| j� |�| j� |�| j � |�|� t|�� ��� }| j � ||� | j � | j |�}t� }| j j �r�| j j!| j j"dd�}|�#t$� |�| j � |�%|� |du�r�|�&d� |�%|� n |�&d� | j �'|� d| j _(| j �)� n0|�#t*� |�%|� | j �'|� | j �+t,t-t.� dS )z� Parse the SSH2_MSG_KEXGSS_INIT message (server mode). :param `Message` m: The content of the SSH2_MSG_KEXGSS_INIT message rI rr Trs NF)/rR r^ r" r� r r) r+ r� r! r# r] r rS re r r` rb ra rd rc r� r� r� r� r4 r rt rg rh r ru r rv rw rx r0 ry r2 rz r5 rj rk rX r. r7 r8 r9 r{ r r r r� � sf � � � �z KexGSSGex._parse_kexgss_gex_initc C s8 |� � }|| j_|� � }| j�||� | j�tt� dS )z� Parse the SSH2_MSG_KEXGSS_HOSTKEY message (client mode). :param `Message` m: The content of the SSH2_MSG_KEXGSS_HOSTKEY message NrQ rT r r r r? 1 s z KexGSSGex._parse_kexgss_hostkeyc C sZ | j jsV|�� }t� }|�t� |�| jj| j |d�� | j � |� | j � t t t� n dS )z� Parse the SSH2_MSG_KEXGSS_CONTINUE message. :param `Message` m: The content of the SSH2_MSG_KEXGSS_CONTINUE message rV NrW rZ r r r r@ > s �� �z KexGSSGex._parse_kexgss_continuec C s| | j jdu rt� | j _|�� | _|�� }|�� }d}|r@|�� }| jdk sZ| j| jd krbtd��t | j| j | j�}t � }|� | j j | j j| j j| j j| j j�� � | js�|�| j� |�| j� | js�|�| j� |�| j� |�| j� |�| j� |�| j� |�|� t|�� �� � }| j � ||� |du�rX| j j | j |d� | j �!||� n| j �!||� d| j _"| j �#� dS )z� Parse the SSH2_MSG_KEXGSS_COMPLETE message (client mode). :param `Message` m: The content of the SSH2_MSG_KEXGSS_COMPLETE message NrI r\ rV T)$r rS r] r^ r# rR r_ r� r r+ r! r r` ra rb rc rd re r� r� r� r� r� r4 r� r" r rt rg rh r r3 r ri rj rk rl r r r rA T sN � �z KexGSSGex._parse_kexgss_completec C s6 |� � }|� � }|�� }|�� td�|||���dS )a� Parse the SSH2_MSG_KEXGSS_ERROR message (client mode). The server may send a GSS-API error message. if it does, we display the error by throwing an exception (client mode). :param `Message` m: The content of the SSH2_MSG_KEXGSS_ERROR message :raise SSHException: Contains GSS-API major and minor status as well as the error message and the language tag of the message r} Nr~ r� r r r rB � s ��z KexGSSGex._parse_kexgss_errorN)r� r� r� r� r� r� r� r� r& r< rG r) r� r� r� r? r@ rA rB r r r r r� P s ,!> 2r� c @ s( e Zd ZdZdd� Zdd� Zdd� ZdS ) r] z� This class represents the Null Host Key for GSS-API Key Exchange as defined in `RFC 4462 Section 5 <https://tools.ietf.org/html/rfc4462.html#section-5>`_ c C s d| _ d S )N� �r| �r% r r r r& � s zNullHostKey.__init__c C s | j S �Nr� r� r r r re � s zNullHostKey.__str__c C s | j S r� r� r� r r r �get_name� s zNullHostKey.get_nameN)r� r� r� r� r& re r� r r r r r] � s r] )$r� rJ �hashlibr Zparamiko.commonr r r r r r Zparamikor Zparamiko.messager Zparamiko.ssh_exceptionr �ranger/ r7 r8 r6 r9 r� r� r1 rX ry Zc_MSG_KEXGSS_HOSTKEYZc_MSG_KEXGSS_ERRORr� r� r r� r� r] r r r r �<module> s> ��� y R
| ver. 1.1 | |
.
| PHP 8.3.30 | Ð“ÐµÐ½ÐµÑ€Ð°Ñ†Ð¸Ñ Ñтраницы: 0 |
proxy
|
phpinfo
|
ÐаÑтройка