�
�Udac @` sM d d l m Z m Z m Z e Z i d d 6d g d 6d d 6Z d Z d Z d
Z d d l
Z
d d l Z d d l Z d Z y d d l m Z Wn# e k
r� e j � Z e Z n Xe Z d d
l m Z m Z d d l m Z d d l m Z m Z d e j f d � � YZ d e j f d � � YZ! d � Z" e# d k rIe" � n d S( i ( t absolute_importt divisiont print_functions 1.1t metadata_versiont previewt statust communityt supported_bysK
---
module: openssl_pkcs12
author:
- Guillaume Delpierre (@gdelpierre)
version_added: "2.7"
short_description: Generate OpenSSL PKCS#12 archive
description:
- This module allows one to (re-)generate PKCS#12.
requirements:
- python-pyOpenSSL
options:
action:
description:
- C(export) or C(parse) a PKCS#12.
type: str
default: export
choices: [ export, parse ]
other_certificates:
description:
- List of other certificates to include. Pre 2.8 this parameter was called C(ca_certificates)
type: list
elements: path
aliases: [ ca_certificates ]
certificate_path:
description:
- The path to read certificates and private keys from.
- Must be in PEM format.
type: path
force:
description:
- Should the file be regenerated even if it already exists.
type: bool
default: no
friendly_name:
description:
- Specifies the friendly name for the certificate and private key.
type: str
aliases: [ name ]
iter_size:
description:
- Number of times to repeat the encryption step.
type: int
default: 2048
maciter_size:
description:
- Number of times to repeat the MAC step.
type: int
default: 1
passphrase:
description:
- The PKCS#12 password.
type: str
path:
description:
- Filename to write the PKCS#12 file to.
type: path
required: true
privatekey_passphrase:
description:
- Passphrase source to decrypt any input private keys with.
type: str
privatekey_path:
description:
- File to read private key from.
type: path
state:
description:
- Whether the file should exist or not.
All parameters except C(path) are ignored when state is C(absent).
choices: [ absent, present ]
default: present
type: str
src:
description:
- PKCS#12 file path to parse.
type: path
backup:
description:
- Create a backup file including a timestamp so you can get the original
output file back if you overwrote it with a new one by accident.
type: bool
default: no
version_added: "2.8"
extends_documentation_fragment:
- files
seealso:
- module: openssl_certificate
- module: openssl_csr
- module: openssl_dhparam
- module: openssl_privatekey
- module: openssl_publickey
s�
- name: Generate PKCS#12 file
openssl_pkcs12:
action: export
path: /opt/certs/ansible.p12
friendly_name: raclette
privatekey_path: /opt/certs/keys/key.pem
certificate_path: /opt/certs/cert.pem
other_certificates: /opt/certs/ca.pem
state: present
- name: Change PKCS#12 file permission
openssl_pkcs12:
action: export
path: /opt/certs/ansible.p12
friendly_name: raclette
privatekey_path: /opt/certs/keys/key.pem
certificate_path: /opt/certs/cert.pem
other_certificates: /opt/certs/ca.pem
state: present
mode: '0600'
- name: Regen PKCS#12 file
openssl_pkcs12:
action: export
src: /opt/certs/ansible.p12
path: /opt/certs/ansible.p12
friendly_name: raclette
privatekey_path: /opt/certs/keys/key.pem
certificate_path: /opt/certs/cert.pem
other_certificates: /opt/certs/ca.pem
state: present
mode: '0600'
force: yes
- name: Dump/Parse PKCS#12 file
openssl_pkcs12:
action: parse
src: /opt/certs/ansible.p12
path: /opt/certs/ansible.pem
state: present
- name: Remove PKCS#12 file
openssl_pkcs12:
path: /opt/certs/ansible.p12
state: absent
s�
filename:
description: Path to the generate PKCS#12 file.
returned: changed or success
type: str
sample: /opt/certs/ansible.p12
privatekey:
description: Path to the TLS/SSL private key the public key was generated from.
returned: changed or success
type: str
sample: /etc/ssl/private/ansible.com.pem
backup_file:
description: Name of backup file created.
returned: changed and if I(backup) is C(yes)
type: str
sample: /path/to/ansible.com.pem.2019-03-09@11:22~
N( t crypto( t
AnsibleModulet missing_required_lib( t to_bytest to_nativet PkcsErrorc B` s e Z RS( ( t __name__t
__module__( ( ( sI /usr/lib/python2.7/site-packages/ansible/modules/crypto/openssl_pkcs12.pyR
� s t Pkcsc B` sM e Z d � Z e d � Z d � Z d � Z d � Z d � Z d d � Z
RS( c C` s t t | � j | j d | j d | j d | j � | j d | _ | j d | _ | j d | _ | j d | _ | j d | _ | j d | _
| j d
| _ d | _
| j d | _ | j d | _ | j d
| _ | j d d k rd | j d <n | j d | _ d | _ d S( Nt patht statet forcet actiont other_certificatest certificate_patht
friendly_namet iter_sizet maciter_sizet
passphraset privatekey_passphraset privatekey_patht srct modet 0400t backup( t superR t __init__t paramst
check_modeR R R R R R R t Nonet pkcs12R R R R t backup_file( t selft module( ( sI /usr/lib/python2.7/site-packages/ansible/modules/crypto/openssl_pkcs12.pyR" � s(
c ` s� t t � � j | | � } � f d � } | s4 | St j j � j � ry| j d d k ry� j | � } � j � _ y � j � \ } } } } Wn t
j k
r� t SX| d k r� � j d k r� t
j t
j � j j � � }
| |
k rt Sn t | � t � j � k rt S| d k rb� j d k rbt
j t
j � j j � � } | | k r�t Sn t | � t � j � k r�t S| d k r�� j d k r�g � j j � D] } t
j t
j | � ^ q�}
t | � t |
� k r t Sn t | � t � j � k r t S| r}� j j � d k rN| d k rN� j j � | k rst Sqvt � j j � � t | � k rvt Sq}n t S| � S( s, Ensure the resource is in its desired state.c ` sV � j rR y t j � j � j � WqR t j k
r: t St j k
rN t SXn t S( N( R t crypto_utilst load_privatekeyR R t Errort Falset OpenSSLBadPassphraseErrort True( ( R( ( sI /usr/lib/python2.7/site-packages/ansible/modules/crypto/openssl_pkcs12.pyt _check_pkey_passphrase� s R t exportN( R! R t checkt osR t existsR# t generateR t parseR R, R- R% R t dump_privatekeyt FILETYPE_PEMR& t get_privatekeyt boolR t dump_certificatet get_certificateR t get_ca_certificatest sett get_friendlyname( R( R) t perms_requiredt state_and_permsR0 t dummyt pkcs12_privatekeyt pkcs12_certificatet pkcs12_other_certificatest pkcs12_friendly_namet
expected_pkeyt
expected_certt
other_certt expected_other_certs( ( R( sI /usr/lib/python2.7/site-packages/ansible/modules/crypto/openssl_pkcs12.pyR2 � sP ( .!!
c C` sF i | j d 6} | j r) | j | d <n | j rB | j | d <n | S( s' Serialize the object into a dictionary.t filenameR R' ( R R R' ( R( t result( ( sI /usr/lib/python2.7/site-packages/ansible/modules/crypto/openssl_pkcs12.pyt dump s
c C` s t j � | _ | j rP g | j D] } t j | � ^ q" } | j j | � n | j rx | j j t j | j � � n | j r� | j j
t | j � � n | j r� y& | j j
t j | j | j � � Wq� t j k
r� } t | � � q� Xn | j j | j | j | j � S( s Generate PKCS#12 file archive.( R t PKCS12R& R R* t load_certificatet set_ca_certificatesR t set_certificateR t set_friendlynameR R t set_privatekeyR+ R R. R
R1 R R R ( R( R) RI t other_certst exc( ( sI /usr/lib/python2.7/site-packages/ansible/modules/crypto/openssl_pkcs12.pyR5 , s$ " c C` s; | j r! | j | j � | _ n t t | � j | � d S( N( R t backup_localR R' R! R t remove( R( R) ( ( sI /usr/lib/python2.7/site-packages/ansible/modules/crypto/openssl_pkcs12.pyRW G s c
C` s y� t | j d � � } | j � } Wd QXt j | | j � } t j t j | j � � } t j t j | j
� � } g } | j � d k r� g | j � D] } t j t j | � ^ q� } n | j
� } | | | | f SWn t k
r� } t | � � n Xd S( s Read PKCS#12 file.t rbN( t openR t readR t load_pkcs12R R7 R8 R9 R; R< R= R% R? t IOErrorR
(
R( t pkcs12_fht pkcs12_contentt p12t pkeyt crtRT RI R RU ( ( sI /usr/lib/python2.7/site-packages/ansible/modules/crypto/openssl_pkcs12.pyR6 L s" . c C` s8 | j r! | j | j � | _ n t j | | | � d S( s Write the PKCS#12 file.N( R RV R R' R* t
write_file( R( R) t contentR ( ( sI /usr/lib/python2.7/site-packages/ansible/modules/crypto/openssl_pkcs12.pyt writed s N( R R R" R/ R2 RM R5 RW R6 R% Rd ( ( ( sI /usr/lib/python2.7/site-packages/ansible/modules/crypto/openssl_pkcs12.pyR � s @
c ! C` s| t d t d d d d d d d g � d t d d d
d d d
g � d t d d � d t d d d t � d t d d d d g � d t d d d d � d t d d d d � d t d d d t � d t d d d t � d t d d d t � d t d d � d t d d d d d d d g � d t d d � d! t d d d t � � } d d d g g g } t d" t d# | d$ | d% t � } t s�| j d& t d' � d( t � n t j j
| j d � p�d) } t j j | � s�| j d | d& d* | � n y_t
| � } t } | j d d k rh| j rX| j � } | j d pA| j | � | d+ <| j | � n | j | d, t � s{| j d r8| j d d k r�| j d s�| j d& d- � n | j | � } | j | | d. � t } q8| j � \ } } }
} d/ t | � t | � t d0 j |
� � f } | j | t | � � n | j | j � }
| j |
| � r�t } q�nq | j r�| j � } t j j | j d � | d+ <| j | � n t j j | j d � r�| j | � t } n | j � } | | d+ <t j j | j d � r;d1 t j t j | j d � j � } | | d2 <n | j | � Wn, t j k
rw} | j d& t | � � n Xd S(3 NR t typet strt defaultR1 t choicesR6 R t listt elementsR t aliasest ca_certificatesR R R: R t nameR t inti R i R t no_logt requiredR R R t presentt absentR R t add_file_common_argst
argument_spect required_ift supports_check_modet msgt pyOpenSSLt exceptiont .s@ The directory '%s' does not exist or the path is not a directoryt changedR@ s Friendly_name is requiredi� s %s%s%st s %04oR (! t dictR- R/ R t pyopenssl_foundt fail_jsonR
t PYOPENSSL_IMP_ERRR3 R t dirnameR# t isdirR R$ RM R2 t exit_jsonR5 Rd R6 R t joinR t load_file_common_argumentst set_fs_attributes_if_differentR4 RW t statt S_IMODEt st_modeR* t OpenSSLObjectError( Rt Ru R) t base_dirR& R{ RL R^ R` t certRT R t dump_contentt file_argst file_modeRU ( ( sI /usr/lib/python2.7/site-packages/ansible/modules/crypto/openssl_pkcs12.pyt maink s� ! ! !#
.
&
t __main__($ t
__future__R R R Re t
__metaclass__t ANSIBLE_METADATAt
DOCUMENTATIONt EXAMPLESt RETURNR� R3 t tracebackR% R� t OpenSSLR t ImportErrort
format_excR- R~ R/ t ansible.module_utils.basicR R
t ansible.module_utilsR* t ansible.module_utils._textR R R� R
t
OpenSSLObjectR R� R ( ( ( sI /usr/lib/python2.7/site-packages/ansible/modules/crypto/openssl_pkcs12.pyt <module> s2
^0
� U
Anons79 File Manager Version 1.0, Coded By Anons79
Email: [email protected]
Anons79 Mini Shell