�
�Udac @` s� d d l m Z m Z m Z e Z i d d 6d g d 6d d 6Z d Z d Z d
Z d d l
Z
d d l Z d d l Z d d l
m Z d d
l m Z d d l m Z m Z d d l m Z m Z d Z d Z d Z y/ d d l Z d d
l m Z e e j � Z Wn# e k
r(e j � Z e! Z" n Xe# Z" d Z$ y� d d l% Z% d d l& m' Z' e e% j � Z( y d d l) Z% e# Z* Wn e k
r�e! Z* n Xy d d l+ Z% e# Z, Wn e k
r�e! Z, n Xy d d l- Z% e# Z. Wn e k
r�e! Z. n Xy d d l/ Z% e# Z0 Wn e k
r"e! Z0 n XWn# e k
rIe j � Z$ e! Z1 n Xe# Z1 d Z2 d � Z3 d � Z4 d � Z5 d e j6 f d � � YZ7 d e7 f d � � YZ8 d e7 f d � � YZ9 d � Z: e; d k r�e: � n d S( i ( t absolute_importt divisiont print_functions 1.1t metadata_versiont previewt statust communityt supported_bys�
---
module: openssl_privatekey_info
version_added: '2.8'
short_description: Provide information for OpenSSL private keys
description:
- This module allows one to query information on OpenSSL private keys.
- In case the key consistency checks fail, the module will fail as this indicates a faked
private key. In this case, all return variables are still returned. Note that key consistency
checks are not available all key types; if none is available, C(none) is returned for
C(key_is_consistent).
- It uses the pyOpenSSL or cryptography python library to interact with OpenSSL. If both the
cryptography and PyOpenSSL libraries are available (and meet the minimum version requirements)
cryptography will be preferred as a backend over PyOpenSSL (unless the backend is forced with
C(select_crypto_backend)). Please note that the PyOpenSSL backend was deprecated in Ansible 2.9
and will be removed in Ansible 2.13.
requirements:
- PyOpenSSL >= 0.15 or cryptography >= 1.2.3
author:
- Felix Fontein (@felixfontein)
- Yanis Guenane (@Spredzy)
options:
path:
description:
- Remote absolute path where the private key file is loaded from.
type: path
required: true
passphrase:
description:
- The passphrase for the private key.
type: str
return_private_key_data:
description:
- Whether to return private key data.
- Only set this to C(yes) when you want private information about this key to
leave the remote machine.
- "WARNING: you have to make sure that private key data isn't accidentally logged!"
type: bool
default: no
select_crypto_backend:
description:
- Determines which crypto backend to use.
- The default choice is C(auto), which tries to use C(cryptography) if available, and falls back to C(pyopenssl).
- If set to C(pyopenssl), will try to use the L(pyOpenSSL,https://pypi.org/project/pyOpenSSL/) library.
- If set to C(cryptography), will try to use the L(cryptography,https://cryptography.io/) library.
- Please note that the C(pyopenssl) backend has been deprecated in Ansible 2.9, and will be removed in Ansible 2.13.
From that point on, only the C(cryptography) backend will be available.
type: str
default: auto
choices: [ auto, cryptography, pyopenssl ]
seealso:
- module: openssl_privatekey
sI
- name: Generate an OpenSSL private key with the default values (4096 bits, RSA)
openssl_privatekey:
path: /etc/ssl/private/ansible.com.pem
- name: Get information on generated key
openssl_privatekey_info:
path: /etc/ssl/private/ansible.com.pem
register: result
- name: Dump information
debug:
var: result
s�
can_load_key:
description: Whether the module was able to load the private key from disk
returned: always
type: bool
can_parse_key:
description: Whether the module was able to parse the private key
returned: always
type: bool
key_is_consistent:
description:
- Whether the key is consistent. Can also return C(none) next to C(yes) and
C(no), to indicate that consistency couldn't be checked.
- In case the check returns C(no), the module will fail.
returned: always
type: bool
public_key:
description: Private key's public key in PEM format
returned: success
type: str
sample: "-----BEGIN PUBLIC KEY-----\nMIICIjANBgkqhkiG9w0BAQEFAAOCAg8A..."
public_key_fingerprints:
description:
- Fingerprints of private key's public key.
- For every hash algorithm available, the fingerprint is computed.
returned: success
type: dict
sample: "{'sha256': 'd4:b3:aa:6d:c8:04:ce:4e:ba:f6:29:4d:92:a3:94:b0:c2:ff:bd:bf:33:63:11:43:34:0f:51:b0:95:09:2f:63',
'sha512': 'f7:07:4a:f0:b0:f0:e6:8b:95:5f:f9:e6:61:0a:32:68:f1..."
type:
description:
- The key's type.
- One of C(RSA), C(DSA), C(ECC), C(Ed25519), C(X25519), C(Ed448), or C(X448).
- Will start with C(unknown) if the key type cannot be determined.
returned: success
type: str
sample: RSA
public_data:
description:
- Public key data. Depends on key type.
returned: success
type: dict
private_data:
description:
- Private key data. Depends on key type.
returned: success and when I(return_private_key_data) is set to C(yes)
type: dict
N( t LooseVersion( t crypto( t
AnsibleModulet missing_required_lib( t to_nativet to_bytess 1.2.3s 0.15( t
serializationt 1234c C` s� t � } t � } t | t j j j j j � r� d } | j | d <| j � j
� j | d <| j � j
� j | d <| j
� j | d <| j
� j | d <| j
� j | d <n t | t j j j j j � r\d } | j | d <| j � j � j | d <| j � j � j | d <| j � j � j | d <| j � j
� j | d <| j
� j | d
<nat r�t | t j j j j j � r�d } n4t r�t | t j j j j j � r�d } nt r�t | t j j j j j � r�d
} n� t! rt | t j j j j" j# � rd } n� t | t j j j j$ j% � r�d } | j � j& j' | d <| j � j
� j | d
<| j � j
� j | d <| j � j& j | d <| j
� j( | d <n d j) t* | � � } | | | f S( Nt RSAt sizet modulust exponentt pt qt DSAt gt yt xt X25519t X448t Ed25519t Ed448t ECCt curvet
exponent_sizet
multipliers
unknown ({0})(+ t dictt
isinstancet cryptographyt hazmatt
primitivest
asymmetrict rsat
RSAPrivateKeyt key_sizet
public_keyt public_numberst nt et private_numbersR R t dt dsat
DSAPrivateKeyt
parameterst parameter_numbersR R R t CRYPTOGRAPHY_HAS_X25519t x25519t X25519PrivateKeyt CRYPTOGRAPHY_HAS_X448t x448t X448PrivateKeyt CRYPTOGRAPHY_HAS_ED25519t ed25519t Ed25519PrivateKeyt CRYPTOGRAPHY_HAS_ED448t ed448t Ed448PrivateKeyt ect EllipticCurvePrivateKeyR t namet
private_valuet formatt type( t keyt key_public_datat key_private_datat key_type( ( sR /usr/lib/python2.7/site-packages/ansible/modules/crypto/openssl_privatekey_info.pyt _get_cryptography_key_info� sF
$ $ $ $ c C` s3 | j d � } | j d � } | j d � } | j d � } | j d � } x- | | | | | f D] } | d k ra d Sqa W| d k s� | | d k r� t S| d k s� | | k r� t S| d | d k r� t St j | | | � d k r� t St j | | | � | k r
t St j | � s+t j | � r/t St S( NR R R R R i i i ( t gett Nonet Falset crypto_utilst binary_exp_modt quick_is_not_primet True( RH RI R R R R R t v( ( sR /usr/lib/python2.7/site-packages/ansible/modules/crypto/openssl_privatekey_info.pyt _check_dsa_consistency� s* c C` s� t | t j j j j j � r: t | j j j
| j � � St | t j j j j j
� r� t | | � } | d k rw | Sy% | j t t j j j j � � } Wn t k
r� d SXy0 | j � j | t t j j j j � � t SWq� t j j k
r� t SXn t | t j j j j j � r�y: | j t t j j j j j t j j j j � � � } Wn t k
rkd SXyE | j � j | t t j j j j j t j j j j � � � t SWq�t j j k
r�t SXn t } t rt | t j j j j j � rt } n t! r/t | t j j j j" j# � r/t } n | r�| j t � } y | j � j | t � t SWq�t j j k
r|t SXn d S( N($ R# R$ R% R& R' R( R) t boolt _backendt _libt
RSA_check_keyt
_rsa_cdataR1 R2 RT RM t signt SIGNATURE_TEST_DATAt hashest SHA256t AttributeErrorR+ t verifyRR t
exceptionst InvalidSignatureRN RA RB t ECDSAR; R< R= R> R? R@ ( RG RH RI t resultt signaturet has_simple_sign_function( ( sR /usr/lib/python2.7/site-packages/ansible/modules/crypto/openssl_privatekey_info.pyt _is_cryptography_key_consistent s\ %
1
+$ $ t PrivateKeyInfoc B` sb e Z d � Z d � Z d � Z e j d � � Z e j d � � Z e j d � � Z d � Z
RS( c C` s_ t t | � j | j d d t | j � | | _ | | _ | j d | _ | j d | _ d S( Nt patht presentt
passphraset return_private_key_data(
t superRg t __init__t paramsRN t
check_modet backendt moduleRj Rk ( t selfRq Rp ( ( sR /usr/lib/python2.7/site-packages/ansible/modules/crypto/openssl_privatekey_info.pyRm ? s
c C` s d S( N( ( Rr ( ( sR /usr/lib/python2.7/site-packages/ansible/modules/crypto/openssl_privatekey_info.pyt generateL s c C` s d S( N( ( Rr ( ( sR /usr/lib/python2.7/site-packages/ansible/modules/crypto/openssl_privatekey_info.pyt dumpP s c C` s d S( N( ( Rr t binary( ( sR /usr/lib/python2.7/site-packages/ansible/modules/crypto/openssl_privatekey_info.pyt _get_public_keyT s c C` s d S( N( ( Rr ( ( sR /usr/lib/python2.7/site-packages/ansible/modules/crypto/openssl_privatekey_info.pyt
_get_key_infoX s c C` s d S( N( ( Rr RH RI ( ( sR /usr/lib/python2.7/site-packages/ansible/modules/crypto/openssl_privatekey_info.pyt _is_key_consistent\ s c
C` s� t d t d t d d � } y5 t | j d � � } | j � } Wd QXt | d <Wn5 t t f k
r� } | j j
d t | � | � n XyY t j
d d d | d | j d k r� t | j � n | j d | j � | _ t | d <Wn2 t j k
r} | j j
d t | � | � n X| j d
t � | d <| j d
t � } | d k rYt j | � n t � | d <| j � \ } } } | | d
<| | d <| j r�| | d <n | j | | � | d <| d t k r�t | d <| j j
d d | � n | S( Nt can_load_keyt
can_parse_keyt key_is_consistentt rbt msgRh t contentRj Rp Ru R+ t public_key_fingerprintsRF t public_datat private_datas| Private key is not consistent! (See https://blog.hboeck.de/archives/888-How-I-tricked-Symantec-with-a-Fake-Private-Key.html)( R" RN RM t openRh t readRR t IOErrort OSErrorRq t fail_jsonR RO t load_privatekeyRj R
Rp RG t OpenSSLObjectErrorRv t get_fingerprint_of_bytesRw Rk Rx ( Rr Rc t
b_priv_key_fht priv_key_detailt exct pkRJ RH RI ( ( sR /usr/lib/python2.7/site-packages/ansible/modules/crypto/openssl_privatekey_info.pyt get_info` sD ' (
( t __name__t
__module__Rm Rs Rt t abct abstractmethodRv Rw Rx R� ( ( ( sR /usr/lib/python2.7/site-packages/ansible/modules/crypto/openssl_privatekey_info.pyRg > s
t PrivateKeyInfoCryptographyc B` s2 e Z d Z d � Z d � Z d � Z d � Z RS( sA Validate the supplied private key, using the cryptography backendc C` s t t | � j | d � d S( NR$ ( Rl R� Rm ( Rr Rq ( ( sR /usr/lib/python2.7/site-packages/ansible/modules/crypto/openssl_privatekey_info.pyRm � s c C` s7 | j j � j | r! t j j n t j j t j j � S( N( RG R+ t public_bytesR t Encodingt DERt PEMt PublicFormatt SubjectPublicKeyInfo( Rr Ru ( ( sR /usr/lib/python2.7/site-packages/ansible/modules/crypto/openssl_privatekey_info.pyRv � s c C` s
t | j � S( N( RK RG ( Rr ( ( sR /usr/lib/python2.7/site-packages/ansible/modules/crypto/openssl_privatekey_info.pyRw � s c C` s t | j | | � S( N( Rf RG ( Rr RH RI ( ( sR /usr/lib/python2.7/site-packages/ansible/modules/crypto/openssl_privatekey_info.pyRx � s ( R� R� t __doc__Rm Rv Rw Rx ( ( ( sR /usr/lib/python2.7/site-packages/ansible/modules/crypto/openssl_privatekey_info.pyR� � s
t PrivateKeyInfoPyOpenSSLc B` s; e Z d Z d � Z d � Z d � Z d � Z d � Z RS( s" validate the supplied private key.c C` s t t | � j | d � d S( Nt pyopenssl( Rl R� Rm ( Rr Rq ( ( sR /usr/lib/python2.7/site-packages/ansible/modules/crypto/openssl_privatekey_info.pyRm � s c C` s� y) t j | r t j n t j | j � SWn� t k
r� yu t j � } | rl t j j | | j j � } n t j j
| | j j � } | d k r� t j � n t j | � SWq� t k
r� | j
j d � q� Xn Xd S( Ni s� Your pyOpenSSL version does not support dumping public keys. Please upgrade to version 16.0 or newer, or use the cryptography backend.( R t dump_publickeyt
FILETYPE_ASN1t FILETYPE_PEMRG R^ t _new_mem_bufRW t i2d_PUBKEY_biot _pkeyt PEM_write_bio_PUBKEYt _raise_current_errort _bio_to_stringRq t warn( Rr Ru t biot rc( ( sR /usr/lib/python2.7/site-packages/ansible/modules/crypto/openssl_privatekey_info.pyRv � s
c C` si | t j j j k r d St j j j | � } z t t j j j | � d � SWd t j j j | � Xd S( s( Convert OpenSSL BIGINT to Python integeri N(
t OpenSSLt _utilt ffit NULLRM t libt BN_bn2hext intt stringt OPENSSL_free( Rr t bnt hexstr( ( sR /usr/lib/python2.7/site-packages/ansible/modules/crypto/openssl_privatekey_info.pyt
bigint_to_int� s c C` s� t � } t � } | j j � } t } t j | k r@d } | j j � | d <y�t j j j
| j j � } t j j j
| t j j j � } t j j d k r�t j j j d � } t j j j d � } t j j j d � } t j j j | | | | � | j | d � | d <| j | d � | d <| j | d � | d <t j j j d � }
t j j j d � } t j j j | |
| � | j |
d � | d <| j | d � | d <nn | j | j � | d <| j | j � | d <| j | j � | d <| j | j � | d <| j | j � | d <t } Wqqt k
r<qqXn1t j | k rYd
} | j j � | d <y�t j j j | j j � } t j j j
| t j j j � } t j j d k r�t j j j d � }
t j j j d � } t j j j d � } t j j j | |
| | � | j |
d � | d <| j | d � | d <| j | d � | d <t j j j d � }
t j j j d � } t j j j | |
| � | j |
d � | d <| j | d � | d
<nn | j | j � | d <| j | j � | d <| j | j! � | d <| j | j" � | d <| j | j# � | d
<t } Wqqt k
rUqqXn d j$ | j j � � } | r�t% t& d � k r�t' r�t( | j j) � � S| | | f S( NR R i s BIGNUM **i R R R R R R R R s
unknown ({0})s 16.1.0(* R" RG RF RR R t TYPE_RSAt bitsR� R� R� t EVP_PKEY_get1_RSAR� R� t gct RSA_freet SSLt OPENSSL_VERSION_NUMBERt newt RSA_get0_keyR� t RSA_get0_factorsR- R. R0 R R RN R^ t TYPE_DSAt EVP_PKEY_get1_DSAt DSA_freet DSA_get0_pqgt DSA_get0_keyR t pub_keyt priv_keyRE t PYOPENSSL_VERSIONR t CRYPTOGRAPHY_FOUNDRK t to_cryptography_key( Rr RH RI t openssl_key_typet try_fallbackRJ RG R- R. R0 R R R R R ( ( sR /usr/lib/python2.7/site-packages/ansible/modules/crypto/openssl_privatekey_info.pyRw � s| !
!
c C` s | j j � } t j | k rJ y | j j � SWqJ t j k
rF t SXn t j | k r� t | | � } | d k rx | St j
| j t d � } t j � } | j
| j � y t j | | t d � t SWq� t j k
r� t SXn t t d � k rt rt | j j � | | � Sd S( Nt sha256s 16.1.0( RG RF R R� t checkt ErrorRN R� RT RM RZ R[ t X509t
set_pubkeyR_ RR R� R R� Rf R� ( Rr RH RI R� Rc Rd t cert( ( sR /usr/lib/python2.7/site-packages/ansible/modules/crypto/openssl_privatekey_info.pyRx % s* ( R� R� R� Rm Rv R� Rw Rx ( ( ( sR /usr/lib/python2.7/site-packages/ansible/modules/crypto/openssl_privatekey_info.pyR� � s
ac C` sS t d t d t d d d t � d t d d d t � d t d d d
t � d t d d d
d d
d d d g � � d t � } y�t j j | j d � p� d } t j j | � s� | j d | d d | � n | j d } | d k rat
o� t t t
� k } t ot t t � k } | r$d } n | r3d } n | d k ra| j d d j t
t � � qan | d k r�t s�| j d t d j t � � d t � n | j d d d �t | � } nI | d k rt
s�| j d t d j t
� � d t � n t | � } n | j � } | j | � Wn, t j k
rN} | j d t | � � n Xd S( Nt
argument_specRh RF t requiredRj t strt no_logRk RU t defaultt select_crypto_backendt autot choicesR$ R� t supports_check_modet .RC R} s> The directory %s does not exist or the file is not a directorys] Can't detect any of the required Python libraries cryptography (>= {0}) or PyOpenSSL (>= {1})s pyOpenSSL >= {0}t exceptionsK The module is using the PyOpenSSL backend. This backend has been deprecatedt versions 2.13s cryptography >= {0}( R
R" RR RN t osRh t dirnameRn t isdirR� R� t CRYPTOGRAPHY_VERSIONR t MINIMAL_CRYPTOGRAPHY_VERSIONt PYOPENSSL_FOUNDR� t MINIMAL_PYOPENSSL_VERSIONRE R t PYOPENSSL_IMP_ERRt deprecateR� t CRYPTOGRAPHY_IMP_ERRR� R� t exit_jsonRO R� R ( Rq t base_dirRp t can_use_cryptographyt can_use_pyopensslt
privatekeyRc R� ( ( sR /usr/lib/python2.7/site-packages/ansible/modules/crypto/openssl_privatekey_info.pyt main@ sP '
t __main__(< t
__future__R R R RF t
__metaclass__t ANSIBLE_METADATAt
DOCUMENTATIONt EXAMPLESt RETURNR� R� t tracebackt distutils.versionR t ansible.module_utilsR RO t ansible.module_utils.basicR
R t ansible.module_utils._textR R
R� R� RM R� R� t __version__R� t ImportErrort
format_excRN R� RR R� R$ t cryptography.hazmat.primitivesR R� t0 cryptography.hazmat.primitives.asymmetric.x25519R5 t. cryptography.hazmat.primitives.asymmetric.x448R8 t1 cryptography.hazmat.primitives.asymmetric.ed25519R; t/ cryptography.hazmat.primitives.asymmetric.ed448R> R� R[ RK RT Rf t
OpenSSLObjectRg R� R� R� R� ( ( ( sR /usr/lib/python2.7/site-packages/ansible/modules/crypto/openssl_privatekey_info.pyt <module> s�
81
' 7O� 8
Anons79 File Manager Version 1.0, Coded By Anons79
Email: [email protected]
Anons79 Mini Shell