| Server IP : 162.19.112.25 / Your IP : 216.73.216.88 Web Server : LiteSpeed System : Linux qamar.tasjeel.ae 5.14.0-611.55.1.el9_7.x86_64 #1 SMP PREEMPT_DYNAMIC Tue May 19 15:19:29 EDT 2026 x86_64 User : archiart ( 1428) PHP Version : 8.2.33 Disable Function : NONE MySQL : OFF | cURL : ON | WGET : ON | Perl : ON | Python : OFF | Sudo : OFF | Pkexec : OFF Directory : /lib/python3.9/site-packages/ipaclient/plugins/__pycache__/ |
Upload File : |
a
�jio� � @ s� d dl mZ d dlZd dlZd dlZd dlZd dlZd dlZd dlZd dl Z d dl
m Z m Z d dl
mZ d dlmZ d dlmZ d dlmZ d dlmZmZmZ zd d lmZ W n ey� d d l mZ Y n0 d d
l m Z d d l m Z m!Z! d d l"m#Z$ d d
l%m&Z& d dl'm(Z( d dl'm)Z) d dl*m+Z+m,Z,m-Z- d dl.m/Z/ d dl'm0Z0m1Z1 d dl'm2Z2m3Z3m4Z4 d dl5m6Z6 d dl'm7Z7 d dl8m9Z9 d dl:m;Z; e�<e=�Z>d=dd�Z?e6� Z@dZAd d � ZBd>d d �ZCd?d d!�ZDe@d"d#�G d$d%� d%e-��ZEe@d"d#�G d&d'� d'e,��ZFe@� G d(d)� d)e+��ZGe@d"d#�G d*d+� d+e,��ZHe@� G d,d-� d-e+��ZIG d.d/� d/�ZJeJe0�ZKe@d"d"d0�G d1d2� d2e&��ZLG d3d4� d4e+�ZMe@d"d#�G d5d6� d6e,��ZNe@� G d7d8� d8eM��ZOe@d"d#�G d9d:� d:e,��ZPe@� G d;d<� d<eM��ZQdS )@� )�print_functionN)�Fernet� InvalidToken)�default_backend)�hashes)�
PBKDF2HMAC)�padding)�Cipher�
algorithms�modes)� TripleDES)�PKCS7)�load_pem_public_key�load_pem_private_key)�
InternalError)�MethodOverride)�x509)� constants)�Local�Method�Object)�
classproperty)�api�errors)�Bytes�Flag�Str)�Registry)�_)�ipautil)�DNSName�rc
C s� z<t j|||d��}|�� }W d � n1 s00 Y W n� ty� } z.tj| td�||jd d� d��W Y d}~nHd}~0 ty� } z(tj| td�||d� d��W Y d}~n
d}~0 0 |S )ztRead file and catch errors
IOError and UnicodeError (for text files) are turned into a
ValidationError
)�mode�encodingN�(Cannot read file '%(filename)s': %(exc)s� ��filename�exc��name�errorz*Cannot decode file '%(filename)s': %(exc)s) �io�open�read�IOErrorr �ValidationErrorr �args� UnicodeError)�argnamer' r" r# �f�datar( � r6 �;/usr/lib/python3.9/site-packages/ipaclient/plugins/vault.py�validated_read? s$ *
���� r8 i c C s. t t�� d|dt� d�}t�|�| �d���S )z9
Generates symmetric key from password and salt.
� i�� )� algorithm�length�saltZ
iterations�backend�utf-8)r r �SHA256r �base64� b64encodeZderive�encode)�passwordr< Zkdfr6 r6 r7 �generate_symmetric_key^ s �rD c C st |dur*|durt d��t|�}|�| �S |durht|t� d�}|�| tjtjt� � d�t� � dd��S t d��dS )z9
Encrypts data with symmetric key or public key.
Nz9Either a symmetric or a public key is required, not both.�r5 r= �r: �Zmgfr: �labelz/Either a symmetric or a public key is required.)
�
ValueErrorr �encryptr r r �OAEP�MGF1r r? )r5 �
symmetric_key�
public_key�fernetZpublic_key_objr6 r6 r7 rJ m s* �
��� rJ c C s� |durR|durt d��zt|�}|�| �W S tyN tjtd�d��Y q�0 np|dur�z:t|dt� d�}|�| t j
t j t �
� d�t �
� dd��W S t y� tjtd�d��Y q�0 nt d��dS ) z9
Decrypts data with symmetric key or public key.
Nz:Either a symmetric or a private key is required, not both.zInvalid credentials)�message)r5 rC r= rF rG z0Either a symmetric or a private key is required.)rI r �decryptr r ZAuthenticationErrorr r r r rK rL r r? )r5 rM � private_keyrO Zprivate_key_objr6 r6 r7 rQ � s@ � ���� �rQ T)�no_failc @ s e Zd ZdZdS )� _fake_vault�vaultN)�__name__�
__module__� __qualname__r* r6 r6 r6 r7 rT � s rT c @ s e Zd ZdZdZdS )�_fake_vault_add_internal�vault_add_internalTN�rV rW rX r* �NO_CLIr6 r6 r6 r7 rY � s rY c s� e Zd Zed�Zedded�d�edded�d�ed d
ed �d�fZed d
� �Ze e�Z
e dd� �Z � fdd�Z
� fdd�Z� fdd�Zdd� Zdd� Z� ZS )� vault_addzCreate a new vault.� password?rC �Vault password�Zcli_name�doc�password_file?�
password_file�"File containing the vault password�public_key_file?�public_key_filez$File containing the vault public keyc C s t j�d�tu S )NrZ )r �Command�
get_pluginrY ��clsr6 r6 r7 �__NO_CLI_getter� s
�zvault_add.__NO_CLI_getterc C s | j jjjS �N)r rg rZ � api_version��selfr6 r6 r7 rm � s zvault_add.api_versionc # s8 | j jj�� D ]
}|V qtt| ��� D ]
}|V q(d S rl )r rg rZ r1 �superr] �get_args�ro �arg�� __class__r6 r7 rq � s zvault_add.get_argsc # sB | j jj�� D ]}|jdvr|V qtt| ��� D ]
}|V q2d S )N)� ipavaultsalt�version)r rg rZ �optionsr* rp r] � get_options�ro �optionrt r6 r7 ry � s
zvault_add.get_optionsc # s8 | j jj�� D ]
}|V qtt| ��� D ]
}|V q(d S rl )r rg rZ �
output_paramsrp r] �get_output_params�ro Zparamrt r6 r7 r} � s zvault_add.get_output_paramsc C s | j jj�� S rl )r rg rZ �outputrn r6 r6 r7 � _iter_output� s zvault_add._iter_outputc
O s� |� d�}|d u r&| jjj}|jjj}|� d�}|� d�}|� d�}|� d�}d|v r\|d= d|v rj|d= d|v rx|d= |dkr�|s�|r�tjt d�d��|d kr�|s�|r�tjt d
�d��| jj
j r�| jj j
} n
| jj j} | �� s�| �� |d kr�n |dk�rd|�r |�r tjt d �d��n8|�r$n0|�rDtd
|dd�}|�d�}n| jj j�d�}t�d�|d< n�|d k�r|�r�|�r�tjt d�d��n8|�r�n0|�r�td|dd�}||d< ntjdt d�d��zt|t� d� W n< t�y }
z"tjdt d�|
d��W Y d }
~
n
d }
~
0 0 | jjj|i |��} |�� } d | v �r@| d = d| v �rP| d= |dk�rj|| d< | d= n|d k�rz| d= | jjj |i | �� | S ) N� ipavaulttyperC rc �ipavaultpublickeyrf � symmetricz2Password can be specified only for symmetric vault��reason�
asymmetricz5Public key can be specified only for asymmetric vault�standard�!Password specified multiple times�
password-filer> �r# �
� New password� rv z#Public key specified multiple timeszpublic-key-file�rb�r" zMissing vault public keyr) rE z+Invalid or unsupported vault public key: %s� description) �getr rg rZ �paramsr� �defaultr �MutuallyExclusiveErrorr �env� in_server�Backend�ldap2� rpcclient� isconnected�connectr8 �rstrip�textui�prompt_password�os�urandomr0 r r rI �copy�
vault_archive)
ro r1 rx �
vault_typeZ internal_cmdrC rc rN rf r= �e�response�optsr6 r6 r7 �forward� s�
��
��
�
��
��
�
zvault_add.forward)rV rW rX r �__doc__r �
takes_options� classmethodZ_vault_add__NO_CLI_getterr r\ �propertyrm rq ry r} r� r� �
__classcell__r6 r6 rt r7 r] � s6 ����
r] c @ s e Zd ZdZdZdS )�_fake_vault_mod_internal�vault_mod_internalTNr[ r6 r6 r6 r7 r� p s r� c s� e Zd Zed�Zeded�d�edded�d�ed d
ed �d�ed d
ed�d�edded�d�edded�d�edded�d�edded�d�fZe dd � �Z
e e
�Z e
d d � �Z� fd d �Z� fd!d"�Z� fd#d$�Zd%d&� Zd'd(� Z� ZS ))� vault_modzModify a vault.zchange_password?zChange password�ra z
old_password?� old_passwordzOld vault passwordr` zold_password_file?�old_password_filez&File containing the old vault passwordz
new_password?� new_passwordzNew vault passwordznew_password_file?�new_password_filez&File containing the new vault password� private_key?rR zOld vault private key�private_key_file?�private_key_filez)File containing the old vault private keyre rf z(File containing the new vault public keyc C s t j�d�tu S )Nr� )r rg rh r� ri r6 r6 r7 rk � s
�zvault_mod.__NO_CLI_getterc C s | j jjjS rl )r rg r� rm rn r6 r6 r7 rm � s zvault_mod.api_versionc # s8 | j jj�� D ]
}|V qtt| ��� D ]
}|V q(d S rl )r rg r� r1 rp r� rq rr rt r6 r7 rq � s zvault_mod.get_argsc # sB | j jj�� D ]}|jdkr|V qtt| ��� D ]
}|V q2d S )Nrw )r rg r� rx r* rp r� ry rz rt r6 r7 ry � s
zvault_mod.get_optionsc # s8 | j jj�� D ]
}|V qtt| ��� D ]
}|V q(d S rl )r rg r� r| rp r� r} r~ rt r6 r7 r} � s zvault_mod.get_output_paramsc C s | j jj�� S rl )r rg r� r rn r6 r6 r7 r� � s zvault_mod._iter_outputc O sh |� dd�}|� dd�}|� dd�}|� dd �}|� dd �}|� dd �}|� dd �} |� d d �}
|� d
d �} |� d d �} |� d d �}
| jjjr�| jjj}n
| jjj}|�� s�|�� |r�n"|s�|s�| s�|r�d
}n | s�|
r�d}|�r6|� � }|� dd � ||d< ||d< |
|d < | |d
< | jj
j |i |��}|d d }|� � }|�r||d< |dk�rhd |d< d |d < n�|d
k�r�|�r�||d< nt �
d�|d< d |d < nh|dk�r| �r�|
�r�tjtd�d��n0| �r�n(|
�r�td |
dd�} ntjd td�d��d |d< | |d < | jj
j|i |��}|�rd|� � }|� dd � ||d< ||d< | |d< d |d < | jj
j|i |�� |S ) Nr� Frv �change_passwordr� r� r� r� rR r� r� rf r� r� r� rC rc �resultr5 r� r� z'New public key specified multiple timesr� r� r� z Missing new vault public keyr) T�override_password)�popr r� r� r� r� r� r� r� r� rg �vault_retriever� r� r r� r r8 r0 r� r� )ro r1 rx r� r< r� r� r� r� r� Zold_private_keyZold_private_key_fileZnew_public_keyZnew_public_key_filer= r� r� r5 r6 r6 r7 r� � s�
��� zvault_mod.forward)rV rW rX r r� r r r r� r� Z_vault_mod__NO_CLI_getterr r\ r� rm rq ry r} r� r� r� r6 r6 rt r7 r� v sf ���������*
r� c @ s8 e Zd ZdZdd� Zdd� Zdd� Zdd � Zd
d � Zd S )
�_KraConfigCachez9The KRA config cache stores vaultconfig-show result.
c C s t j�|jjd�| _d S )Nz
kra-config)r� �path�joinr� Z cache_dir�_dirname)ro r r6 r6 r7 �__init__0 s z_KraConfigCache.__init__c C s t |��� d }tj�| j|�S )Nz.json)r ZToASCIIr� r� r� r� )ro �domain�basenamer6 r6 r7 �
_get_filename3 s z _KraConfigCache._get_filenamec
C s� | � |�}zrz:t|�� }t�|�W d � W W S 1 s:0 Y W n2 tyx } z|jtjkrd� W Y d}~n
d}~0 0 W n" ty� tj d|dd� Y n0 dS )z`Load config from cache
:param domain: IPA domain
:return: dict or None
NzFailed to load %sT��exc_info)
r� r- �json�load�OSError�errno�ENOENT� Exception�logger�warning)ro r� r' r4 r� r6 r6 r7 r� 7 s
0 z_KraConfigCache.loadc
C s$ |d � � }t�|d �|d< | �|�}z�zt�| j� W n2 tyl } z|jtj krX� W Y d}~n
d}~0 0 t
j | jddd��b}z0t �
||� t�|� |�� t�|j|� W n ty� t�|j� � Y n0 W d � n1 s�0 Y W n& t�y tjd|dd � Y dS 0 dS dS )
z�Store config in cache
:param domain: IPA domain
:param config: ipa vaultconfig-show response
:return: True if config was stored successfully
r� �transport_certNF�w)�dir�deleter" zFailed to save %sTr� )r� �sslZDER_cert_to_PEM_certr� r� �makedirsr� �EnvironmentErrorr� ZEEXIST�tempfileZNamedTemporaryFiler� �dumpr Z
flush_sync�close�renamer* r� �unlinkr� r� )ro r� r� �configr' r� r4 r6 r6 r7 �storeI s6 �
�
*z_KraConfigCache.storec
C sd | � |�}zt�|� W nB tyZ } z*|jtjkrDtjd|dd� W Y d}~dS d}~0 0 dS dS )z�Remove a config from cache, ignores errors
:param domain: IPA domain
:return: True if cert was found and removed
zFailed to remove %sTr� NF)r� r� r� r� r� r� r� r� )ro r� r' r� r6 r6 r7 �removel s
z_KraConfigCache.removeN) rV rW rX r� r� r� r� r� r� r6 r6 r6 r7 r� - s #r� )�overriderS c s e Zd Z� fdd�Z� ZS )�vaultconfig_showc s� |� d�}d|v r|d= tt| �j|i |��}t�| jjj|� |r�t |d��"}|�
|d d � W d � n1 sv0 Y |S )NZ
transport_out�wbr� r� ) r� rp r� r� �_kra_config_cacher� r r� r� r- �write)ro r1 rx �filer� r4 rt r6 r7 r� � s
0zvaultconfig_show.forward)rV rW rX r� r� r6 r6 rt r7 r� � s r� c @ s0 e Zd Zdd� Zd dd�Zd dd�Zdd � Zd
S )
� ModVaultDatac C sf |t jvr(td�}t�|jt|�d���|t jkrBt� t
� d��S |t j krZt
t
� d��S t|��d S )Nz2{algo} is not a supported vault wrapping algorithm)�algor� � )r � VAULT_WRAPPING_SUPPORTED_ALGOSr r r0 �format�reprZVAULT_WRAPPING_AES128_CBCr
ZAESr� r� �VAULT_WRAPPING_3DESr rI )ro r* �msgr6 r6 r7 �_generate_session_key� s
z"ModVaultData._generate_session_keyFc C s� d }|st �| jjj�}|d u rD| jj�� }|d }t�|d �}nt� |d �
d��}|� d�}|d u rrt j
}n:|t jv r�|}n*|d D ]}|t jv r�|} q�q�t�d��||fS )Nr� r� �asciiZwrapping_default_algorithmZ wrapping_supported_algorithmsz<No overlapping wrapping algorithm between server and client.)r� r� r r� r� rg r� r Zload_der_x509_certificateZload_pem_x509_certificaterB r� r r� r� r r0 )ro �
force_refreshr� r� r� Z default_algo�
wrapping_algor� r6 r6 r7 �_get_vaultconfig� s2 � �
�z ModVaultData._get_vaultconfigc
O s� |� � }|sfz|�|jt�� �}W q� ttfyb |�|jtjtjt �
� d�t �
� d d��}Y q�0 n*|�|jtjtjt �
� d�t �
� d d��}||d< | j d } z| j j
| |i |��W S tjtjtjfy� t�| j jj� |r�|r� Y n0 d S )NrF rG � session_keyZ _internal)rN rJ �keyr ZPKCS1v15rI �CryptographyInternalErrorrK rL r r? r* r rg r r ZExecutionErrorZ GenericErrorr� r� r� r� )
ro r� r� Zraise_unexpectedZuse_oaepr1 rx rN Zwrapped_session_keyr* r6 r6 r7 � _do_internal� sH ��� ��
�
zModVaultData._do_internalc O s� z"| j ||ddg|�R i |��}W n2 tjyT | j ||ddg|�R i |��}Y n0 |durb|S | jdd�d }| j ||ddg|�R i |��}|dur�|S | j ||ddg|�R i |��S )z@
Calls the internal counterpart of the command.
FTN)r� r )r� r Z
EncodingErrorr� )ro r� r� r1 rx r� r6 r6 r7 �internal� sF
���
���
���
���zModVaultData.internalN)F)F)rV rW rX r� r� r� r� r6 r6 r6 r7 r� � s
& �
0r� c @ s e Zd ZdZdZdS )� _fake_vault_archive_internal�vault_archive_internalTNr[ r6 r6 r6 r7 r� s r� c s� e Zd Zed�Zeded�d�eded�d�edded �d
�ed d ed
�d
�eded�d�fZe dd� �Z
e e
�Z e
dd� �Z� fdd�Z� fdd�Z� fdd�Zdd� Zd d � Zd d � Z� ZS ) r� zArchive data into a vault.zdata?zBinary data to archiver� zin?z File containing data to archiver^ rC r_ r` rb rc rd zoverride_password?zOverride existing passwordc C s t j�d�tu S )Nr� )r rg rh r� ri r6 r6 r7 rk 8 s
�z vault_archive.__NO_CLI_getterc C s | j jjjS rl )r rg r� rm rn r6 r6 r7 rm ? s zvault_archive.api_versionc # s8 | j jj�� D ]
}|V qtt| ��� D ]
}|V q(d S rl )r rg r� r1 rp r� rq rr rt r6 r7 rq C s zvault_archive.get_argsc # sB | j jj�� D ]}|jdvr|V qtt| ��� D ]
}|V q2d S )N)�noncer� �
vault_datarw r� )r rg r� rx r* rp r� ry rz rt r6 r7 ry I s
zvault_archive.get_optionsc # s8 | j jj�� D ]
}|V qtt| ��� D ]
}|V q(d S rl )r rg r� r| rp r� r} r~ rt r6 r7 r} T s z vault_archive.get_output_paramsc C s | j jj�� S rl )r rg r� r rn r6 r6 r7 r� Z s zvault_archive._iter_outputc C sl t �|jd �}t|j��� }|�|�}||�� 7 }t|t� |�t
� d�}|� � }|�|�|�� }||fS )z�Encrypt data with wrapped session key and transport cert
:param algo: wrapping algorithm instance
:param bytes json_vault_data: dumped vault data
:return:
� �r= ) r� r� �
block_sizer
�padder�update�finalizer r �CBCr � encryptor) ro r� �json_vault_datar� r� � padded_data�cipherr �wrapped_vault_datar6 r6 r7 �
_wrap_data] s
zvault_archive._wrap_datac
O s� |� d�}|� d�}|� d�}|� d�}|�dd�}d|v rB|d= d|v rP|d= d|v r^|d= d|v rl|d= |r�|r�tjtd�d��n�|r�t|�tkr�tjdtd �d
ti d ��n�|�rFzt� |�}W nH t
�y } z.tjdtd �|| j d
d� d ��W Y d } ~ n
d } ~ 0 0 |j tk�r6tjdtd �d
ti d ��t
d|dd�}nd}| jjj�rb| jjj}
n
| jjj}
|
�� �s~|
�� | jjj|i |��d } | d d } | dk�r�d }
�n<| dk�r�|�r�|�r�tjtd�d��nT|�r�nL|�rt
d|dd�}|�d�}n,|�r | jjj�d �}n| jjjjd dd �}|�sv|�� }||d< z| jjj |i |�� W n tj �yt Y n0 | d d }t ||�}t ||d �}d }
nR| d!k�r�| d" d }t �!t�"d#��}t ||d �}t ||d$�}
ntjd%td&�d ��dt �!|��#d�i}|
�r t �!|
��#d�|d'< t$�%|��&d�}| �'� \}}|�d(|�}|t(j)k�rZ||d(< | �*|�}| �+||�\}}|j,||d)� | j-||g|�R i |��S )*Nr5 �inrC rc r� Fz#Input data specified multiple timesr� zLSize of data exceeds the limit. Current vault data size limit is %(limit)d B�limitr) r$ r% r& r� r� � r� r� r r� r� r� r� r> r� r� r� �Password�Zconfirmrv �rM r� r� r9 )rN r� �Invalid vault type�
encrypted_keyr� )r� r� ).r� r� r r� r �len�MAX_VAULT_DATA_SIZEr0 r� �statr� r1 �st_sizer8 r r� r� r� r� r� r� r� rg �
vault_showr� r� r� r� r� ZNotFoundrD rJ r@ rA r� �decoder� �dumpsrB r� r r� r� r r� r� )ro r1 rx r5 Z
input_filerC rc r� r r( r= rU r� r r� r< �encryption_keyrN r� r r� r� r� r� r r6 r6 r7 r� q s�
� ��
�� ��
��
�
�
��
�
�zvault_archive.forward)rV rW rX r r� r r r r� r� Z _vault_archive__NO_CLI_getterr r\ r� rm rq ry r} r� r r� r� r6 r6 rt r7 r� sF ������
r� c @ s e Zd ZdZdZdS )� _fake_vault_retrieve_internal�vault_retrieve_internalTNr[ r6 r6 r6 r7 r s r c s� e Zd Zed�Zeded�d�edded�d�ed d
ed �d�ed d
ed�d�edded�d�fZeded�d�fZe dd� �Z
e e
�Z e
dd� �Z� fdd�Z� fdd �Z� fd d �Zd d � Zd!d"� Zd#d$� Z� ZS )%r� z Retrieve a data from a vault.zout?z File to store retrieved datar� r^ rC r_ r` rb rc rd r� rR zVault private keyr� r� z%File containing the vault private keyr5 ZData)rH c C s t j�d�tu S )Nr )r rg rh r ri r6 r6 r7 rk 8 s
�z vault_retrieve.__NO_CLI_getterc C s | j jjjS rl )r rg r rm rn r6 r6 r7 rm ? s zvault_retrieve.api_versionc # s8 | j jj�� D ]
}|V qtt| ��� D ]
}|V q(d S rl )r rg r r1 rp r� rq rr rt r6 r7 rq C s zvault_retrieve.get_argsc # sB | j jj�� D ]}|jdvr|V qtt| ��� D ]
}|V q2d S )N)r� rw r� )r rg r rx r* rp r� ry rz rt r6 r7 ry I s
zvault_retrieve.get_optionsc # s8 | j jj�� D ]
}|V qtt| ��� D ]
}|V q(d S rl )r rg r r| rp r� r} r~ rt r6 r7 r} P s z vault_retrieve.get_output_paramsc C s | j jj�� S rl )r rg r r rn r6 r6 r7 r� V s zvault_retrieve._iter_outputc C sh t |t�|�t� d�}|�� }|�|�}||�� 7 }t|j�� � }|�|�}||�� 7 }t
� |� d��S )Nr� r> )
r r r r � decryptorr� r� r
r� �unpadderr� �loadsr ) ro r� r� r� r r r r r r6 r6 r7 �_unwrap_responseY s
z vault_retrieve._unwrap_responsec O s� |� d�}|� d�}|� d�}|� d�}|� d�}d|v r@|d= d|v rN|d= d|v r\|d= d|v rj|d= d|v rx|d= | jjjr�| jjj}n
| jjj}|�� s�|�� | jj j
|i |��d } | d d }
| � � \} } |� d | �} | t
jkr�| |d < | �| �}
| j|
| g|�R i |��}| �|
|d d
|d d �}~
t�|d �d
��}d }d|v �rpt�|d �d
��}|
dk�r~�n |
dk�r| d d }|�r�|�r�tjtd�d��n<|�r�n4|�r�td|d
d�}|�d�}n| jjjjddd�}t ||�}t ||d�}n�|
dk�rx|�r.|�r.tjtd �d��n0|�r6n(|�rLtd |d d �}ntj dtd �d!��t ||d"�}t ||d�}ntj d#td$�d!��|�r�t |d%��}|� |� W d � n1 �s�0 Y n d |i|d< |S )&N�outrC rc rR r� r� r� r r� r� r� r5 r> r r� r� rv r� r� r� r� r� r
Fr r r� z$Private key specified multiple timeszprivate-key-filer� r� zMissing vault private keyr) )rR r� r
r� )!r� r r� r� r� r� r� r� r� rg r r� r� r r� r� r� r r@ Z b64decoderB r r� r r8 r� r� r� rD rQ r0 r- r� )ro r1 rx Z output_filerC rc rR r� r= rU r� r� r� r� r� r� r5 r r< r r4 r6 r6 r7 r� f s�
�
�
��
�
��� � , zvault_retrieve.forward)rV rW rX r r� r r r� Zhas_output_paramsr� Z _vault_retrieve__NO_CLI_getterr r\ r� rm rq ry r} r� r r� r� r6 r6 rt r7 r� sT ������ ��
r� )r! N)NN)NN)RZ
__future__r r@ r� r, r� Zloggingr� r� r� Zcryptography.fernetr r Z cryptography.hazmat.backendsr Z cryptography.hazmat.primitivesr Z)cryptography.hazmat.primitives.kdf.pbkdf2r Z)cryptography.hazmat.primitives.asymmetricr Z&cryptography.hazmat.primitives.ciphersr r
r Z/cryptography.hazmat.decrepit.ciphers.algorithmsr � ImportErrorZ1cryptography.hazmat.primitives.ciphers.algorithmsZ&cryptography.hazmat.primitives.paddingr
Z,cryptography.hazmat.primitives.serializationr r Zcryptography.exceptionsr r� Zipaclient.frontendr Zipalibr r Zipalib.frontendr r r Z ipalib.utilr r r r r r Zipalib.plugabler r Z ipapythonr Zipapython.dnsutilr Z getLoggerrV r� r8 �registerr rD rJ rQ rT rY r] r� r� r� r� r� r� r� r� r r� r6 r6 r6 r7 �<module> s�
& 5 7P
q