|
Server : Apache System : Linux cvar2.toservers.com 3.10.0-962.3.2.lve1.5.73.el7.x86_64 #1 SMP Wed Aug 24 21:31:23 UTC 2022 x86_64 User : njnconst ( 1116) PHP Version : 8.4.18 Disable Function : NONE Directory : /proc/self/root/usr/lib/python2.7/site-packages/paramiko/ |
Upload File : |
�
x�\c @ s~ d Z d d l Z d d l m Z d d l m Z m Z m Z d d l m Z d d l
m Z d d l m
Z
m Z m Z d d l m Z e d d
� \ Z Z Z Z Z e d d � \ Z Z g e d d
� D] Z e
e � ^ q� \ Z Z Z Z Z g e d d � D] Z e
e � ^ q\ Z Z! d
e" f d � � YZ# d e# f d � � YZ$ d e" f d � � YZ% d e" f d � � YZ& d S( s�
This module provides GSS-API / SSPI Key Exchange as defined in :rfc:`4462`.
.. note:: Credential delegation is not supported in server mode.
.. note::
`RFC 4462 Section 2.2
<https://tools.ietf.org/html/rfc4462.html#section-2.2>`_ says we are not
required to implement GSS-API error messages. Thus, in many methods within
this module, if an error occurs an exception will be thrown and the
connection will be terminated.
.. seealso:: :doc:`/api/ssh_gss`
.. versionadded:: 1.15
i����N( t sha1( t DEBUGt max_bytet zero_byte( t util( t Message( t byte_chrt byte_maskt byte_ord( t SSHExceptioni i# i( i* t KexGSSGroup1c B s� e Z d Z d Z d Z e d � e d Z e d Z d Z
d � Z d � Z d � Z
d
� Z d � Z d � Z d
� Z d � Z d � Z RS( s�
GSS-API / SSPI Authenticated Diffie-Hellman Key Exchange as defined in `RFC
4462 Section 2 <https://tools.ietf.org/html/rfc4462.html#section-2>`_
lE ���� 8� {3If?�E y�Z�3�V�58n�oP�e�?a-�
�tBL�
�y3W[�<�p�6m5� �P��&a�F! �33*�w& �AR�M;L}.�c|&A�@�h \�&&# -D�v�d���� i i i i s( gss-group1-sha1-toWM5Slw5Ew8Mqkay+al2g==c C s@ | | _ | j j | _ d | _ d | _ d | _ d | _ d S( Ni ( t transportt kexgss_ctxtt kexgsst Nonet gss_hostt xt et f( t selfR ( ( s4 /tmp/pip-install-A1qMVe/paramiko/paramiko/kex_gss.pyt __init__S s c C s� | j � | j j rH t | j | j | j � | _ | j j t � d St | j | j | j � | _
| j j | _ t � } | j
t � | j | j j d | j � � | j | j
� | j j | � | j j t t t t � d S( sU
Start the GSS-API / SSPI Authenticated Diffie-Hellman Key Exchange.
Nt target( t _generate_xR t server_modet powt GR t PR t _expect_packett MSG_KEXGSS_INITR R R t add_bytet c_MSG_KEXGSS_INITt
add_stringR
t ssh_init_sec_contextt add_mpintt
_send_messaget MSG_KEXGSS_HOSTKEYt MSG_KEXGSS_CONTINUEt MSG_KEXGSS_COMPLETEt MSG_KEXGSS_ERROR( R t m( ( s4 /tmp/pip-install-A1qMVe/paramiko/paramiko/kex_gss.pyt start_kex[ s"
c C s� | j j r% | t k r% | j | � S| j j rK | t k rK | j | � S| j j rp | t k rp | j | � S| j j r� | t k r� | j | � S| t
k r� | j | � Sd } t | j
| � � � d S( s�
Parse the next packet.
:param ptype: The (string) type of the incoming packet
:param `.Message` m: The paket content
s. GSS KexGroup1 asked to handle packet type {:d}N( R R R t _parse_kexgss_initR# t _parse_kexgss_hostkeyR$ t _parse_kexgss_continueR% t _parse_kexgss_completeR& t _parse_kexgss_errorR t format( R t ptypeR' t msg( ( s4 /tmp/pip-install-A1qMVe/paramiko/paramiko/kex_gss.pyt
parse_nextu s
c C sl xS t j d � } t | d d � | d } | d } | | j | j f k r Pq q t j | � | _ d S( sp
generate an "x" (1 < x < q), where q is (p-1)/2.
p is a 128-byte (1024-bit) number, where the first 64 bits are 1.
therefore q can be approximated as a 2^1023. we drop the subset of
potential x where the first 63 bits are 1, because some of those will
be larger than q (but this is a tiny tiny subset of potential x).
i� i i i i N( t ost urandomR t b7ffffffffffffffft b0000000000000000R t inflate_longR ( R t x_bytest first( ( s4 /tmp/pip-install-A1qMVe/paramiko/paramiko/kex_gss.pyR � s
c C sN | j � } | | j _ | j � } | j j | | � | j j t t � d S( s�
Parse the SSH2_MSG_KEXGSS_HOSTKEY message (client mode).
:param `.Message` m: The content of the SSH2_MSG_KEXGSS_HOSTKEY message
N( t
get_stringR t host_keyt _verify_keyR R$ R% ( R R' R: t sig( ( s4 /tmp/pip-install-A1qMVe/paramiko/paramiko/kex_gss.pyR* � s
c C s� | j j s| | j � } t � } | j t � | j | j j d | j d | � � | j j
| � | j j t t
t � n d S( s�
Parse the SSH2_MSG_KEXGSS_CONTINUE message.
:param `.Message` m: The content of the SSH2_MSG_KEXGSS_CONTINUE
message
R t
recv_tokenN( R R R9 R R t c_MSG_KEXGSS_CONTINUER R
R R t send_messageR R$ R% R& ( R R' t srv_token( ( s4 /tmp/pip-install-A1qMVe/paramiko/paramiko/kex_gss.pyR+ � s
c C s� | j j d k r$ t � | j _ n | j � | _ | j d k sX | j | j d k rg t d � � n | j � } | j � } d } | r� | j � } n t
| j | j | j � } t � } | j
| j j | j j | j j | j j � | j | j j j � � | j | j � | j | j � | j | � t t | � � j � } | j j | | � | d k r�| j j d | j d | � | j j | | � n | j j | | � t | j _ | j j � d S( s�
Parse the SSH2_MSG_KEXGSS_COMPLETE message (client mode).
:param `.Message` m: The content of the
SSH2_MSG_KEXGSS_COMPLETE message
i s Server kex "f" is out of rangeR R= N(! R R: R t NullHostKeyt get_mpintR R R R9 t get_booleanR R R t addt
local_versiont remote_versiont local_kex_initt remote_kex_initR t __str__R! R R t strt digestt _set_K_HR
R R t
ssh_check_mict Truet gss_kex_usedt _activate_outbound( R R' t mic_tokent boolR@ t Kt hmt H( ( s4 /tmp/pip-install-A1qMVe/paramiko/paramiko/kex_gss.pyR, � s< %
c C sB | j � } | j � | _ | j d k s@ | j | j d k rO t d � � n t | j | j | j � } t � | j _ | j j j
� } t � } | j | j j
| j j | j j | j j � | j | � | j | j � | j | j � | j | � t | j � � j � } | j j | | � | j j | j | � } t � } | j j r�| j j | j j d t �} | j t � | j | j � | j | � | d k r�| j" t � | j | � n
| j" t# � | j j$ | � t | j _% | j j& � n@ | j t' � | j | � | j j$ | � | j j( t) t* t+ � d S( s�
Parse the SSH2_MSG_KEXGSS_INIT message (server mode).
:param `.Message` m: The content of the SSH2_MSG_KEXGSS_INIT message
i s Client kex "e" is out of ranget gss_kexN(, R9 RB R R R R R RA R R: RI R RD RF RE RH RG R R! R R t asbytesRK RL R
t ssh_accept_sec_contextR t _gss_srv_ctxt_statust ssh_get_mict
session_idRN R t c_MSG_KEXGSS_COMPLETER t add_booleant FalseR" RO RP R> R R$ R% R& ( R R' t client_tokenRS t keyRT RU R@ RQ ( ( s4 /tmp/pip-install-A1qMVe/paramiko/paramiko/kex_gss.pyR) � sP %
c C sM | j � } | j � } | j � } | j � t d j | | | � � � d S( s�
Parse the SSH2_MSG_KEXGSS_ERROR message (client mode).
The server may send a GSS-API error message. if it does, we display
the error by throwing an exception (client mode).
:param `.Message` m: The content of the SSH2_MSG_KEXGSS_ERROR message
:raise SSHException: Contains GSS-API major and minor status as well as
the error message and the language tag of the
message
sC GSS-API Error:
Major Status: {}
Minor Status: {}
Error Message: {}
N( t get_intR9 R R. ( R R' t
maj_statust
min_statust err_msg( ( s4 /tmp/pip-install-A1qMVe/paramiko/paramiko/kex_gss.pyR- $ s
( t __name__t
__module__t __doc__R R R R R4 R R5 t NAMER R( R1 R R* R+ R, R) R- ( ( ( s4 /tmp/pip-install-A1qMVe/paramiko/paramiko/kex_gss.pyR
F s
- 8t
KexGSSGroup14c B s e Z d Z d Z d Z d Z RS( s�
GSS-API / SSPI Authenticated Diffie-Hellman Group14 Key Exchange as defined
in `RFC 4462 Section 2
<https://tools.ietf.org/html/rfc4462.html#section-2>`_
l� �����&�U�G9
tcb0]Q\-�:�$�90.`U�_�b;YS7x]Ek � `:xds�! ,w<G�8�qbd R _ ��h��d�d��Y6K�pRT{�U�j�K�#�Gt|�L� ��4�S�8� �FYpw,(.> �=�H�G2C�d�c_�.K?&j�_�c�}�z[\V�_1M.D�^� /1v5 I �j�V&|�
�/�mV�lR�<6#�{n4�(EY91�T�:�g8 H �Ap�cb4B�B�j~H����� i s) gss-group14-sha1-toWM5Slw5Ew8Mqkay+al2g==( Re Rf Rg R R Rh ( ( ( s4 /tmp/pip-install-A1qMVe/paramiko/paramiko/kex_gss.pyRi > s t KexGSSGexc B s� e Z d Z d Z d Z d Z d Z d � Z d � Z d � Z d � Z
d � Z d
� Z d � Z
d � Z d
� Z d � Z d � Z RS( s�
GSS-API / SSPI Authenticated Diffie-Hellman Group Exchange as defined in
`RFC 4462 Section 2 <https://tools.ietf.org/html/rfc4462.html#section-2>`_
s% gss-gex-sha1-toWM5Slw5Ew8Mqkay+al2g==i i i c C sd | | _ | j j | _ d | _ d | _ d | _ d | _ d | _ d | _ d | _
t | _ d S( N(
R R R
R R t pt qt gR R R R^ t old_style( R R ( ( s4 /tmp/pip-install-A1qMVe/paramiko/paramiko/kex_gss.pyR U s c C s� | j j r | j j t � d S| j j | _ t � } | j t � | j | j � | j | j
� | j | j � | j j | � | j j t
� d S( sV
Start the GSS-API / SSPI Authenticated Diffie-Hellman Group Exchange
N( R R R t MSG_KEXGSS_GROUPREQR R R t c_MSG_KEXGSS_GROUPREQt add_intt min_bitst preferred_bitst max_bitsR" t MSG_KEXGSS_GROUP( R R' ( ( s4 /tmp/pip-install-A1qMVe/paramiko/paramiko/kex_gss.pyR( a s
c C s� | t k r | j | � S| t k r2 | j | � S| t k rK | j | � S| t k rd | j | � S| t k r} | j | � S| t
k r� | j | � S| t k r� | j
| � Sd } t | j | � � � d S( s�
Parse the next packet.
:param ptype: The (string) type of the incoming packet
:param `.Message` m: The paket content
s' KexGex asked to handle packet type {:d}N( Ro t _parse_kexgss_groupreqRu t _parse_kexgss_groupR t _parse_kexgss_gex_initR# R* R$ R+ R% R, R& R- R R. ( R R/ R' R0 ( ( s4 /tmp/pip-install-A1qMVe/paramiko/paramiko/kex_gss.pyR1 t s
c C s� | j d d } t j | d � } t | d � } t | � } d } x" | d @si | d K} | d L} qH Wxb t r� t j | � } t | d | � | d } t j | d � } | d k rm | | k rm Pqm qm W| | _
d S( Ni i i i� i� ( Rk R t deflate_longR t lenRN R2 R3 R R6 R ( R Rl t qnormt qhbytet
byte_countt qmaskR7 R ( ( s4 /tmp/pip-install-A1qMVe/paramiko/paramiko/kex_gss.pyR � s
c C sf | j � } | j � } | j � } | | j k r? | j } n | | j k rZ | j } n | | k ro | } n | | k r� | } n | | _ | | _ | | _ | j j � } | d k r� t d � � n | j j t d j
| | | � � | j | | | � \ | _ | _
t � } | j t � | j | j
� | j | j � | j j | � | j j t � d S( s�
Parse the SSH2_MSG_KEXGSS_GROUPREQ message (server mode).
:param `.Message` m: The content of the
SSH2_MSG_KEXGSS_GROUPREQ message
s- Can't do server-side gex with no modulus packs Picking p ({} <= {} <= {} bits)N( Ra Rt Rr Rs R t _get_modulus_packR R t _logR R. t get_modulusRm Rk R R t c_MSG_KEXGSS_GROUPR! R" R R ( R R' t minbitst
preferredbitst maxbitst pack( ( s4 /tmp/pip-install-A1qMVe/paramiko/paramiko/kex_gss.pyRv � s8 !
c C s | j � | _ | j � | _ t j | j � } | d k sH | d k r` t d j | � � � n | j j t d j | � � | j
� t | j | j | j � | _
t � } | j t � | j | j j d | j � � | j | j
� | j j | � | j j t t t t � d S( s�
Parse the SSH2_MSG_KEXGSS_GROUP message (client mode).
:param `Message` m: The content of the SSH2_MSG_KEXGSS_GROUP message
i i s< Server-generated gex p (don't ask) is out of range ({} bits)s Got server p ({} bits)R N( RB Rk Rm R t
bit_lengthR R. R R� R R R R R R R R R R
R R R! R" R R# R$ R% R& ( R R' t bitlen( ( s4 /tmp/pip-install-A1qMVe/paramiko/paramiko/kex_gss.pyRw � s*
c C s� | j � } | j � | _ | j d k s@ | j | j d k rO t d � � n | j � t | j | j | j � | _ t | j | j | j � } t
� | j _ | j j j
� } t � } | j | j j | j j | j j | j j | � | j | j � | j | j � | j | j � | j | j � | j | j � | j | j � | j | j � | j | � t | j � � j � } | j j | | � | j j | j | � } t � } | j j rl| j j! | j j" d t# �} | j$ t% � | j | j � | j& | � | d k r3| j( t# � | j& | � n
| j( t) � | j j* | � t# | j _+ | j j, � n@ | j$ t- � | j& | � | j j* | � | j j. t/ t0 t1 � d S( s�
Parse the SSH2_MSG_KEXGSS_INIT message (server mode).
:param `Message` m: The content of the SSH2_MSG_KEXGSS_INIT message
i s Client kex "e" is out of rangeRV N(2 R9 RB R Rk R R R Rm R R RA R R: RI R RD RF RE RH RG Rq Rr Rs Rt R! R RW RK RL R
RX R RY RZ R[ RN R R\ R R R] R^ R" RO RP R> R R$ R% R& ( R R' R_ RS R` RT RU R@ RQ ( ( s4 /tmp/pip-install-A1qMVe/paramiko/paramiko/kex_gss.pyRx � s^ %
c C sN | j � } | | j _ | j � } | j j | | � | j j t t � d S( s�
Parse the SSH2_MSG_KEXGSS_HOSTKEY message (client mode).
:param `Message` m: The content of the SSH2_MSG_KEXGSS_HOSTKEY message
N( R9 R R: R; R R$ R% ( R R' R: R< ( ( s4 /tmp/pip-install-A1qMVe/paramiko/paramiko/kex_gss.pyR* + s
c C s� | j j s| | j � } t � } | j t � | j | j j d | j d | � � | j j
| � | j j t t
t � n d S( s�
Parse the SSH2_MSG_KEXGSS_CONTINUE message.
:param `Message` m: The content of the SSH2_MSG_KEXGSS_CONTINUE message
R R= N( R R R9 R R R> R R
R R R? R R$ R% R& ( R R' R@ ( ( s4 /tmp/pip-install-A1qMVe/paramiko/paramiko/kex_gss.pyR+ 8 s
c C s) | j j d k r$ t � | j _ n | j � | _ | j � } | j � } d } | rf | j � } n | j d k s� | j | j d k r� t d � � n t
| j | j | j � } t � } | j
| j j | j j | j j | j j | j j j � � | j s| j | j � n | j | j � | j sC| j | j � n | j | j � | j | j � | j | j � | j | j � | j | � t | j � � j � } | j j | | � | d k r�| j j d | j! d | � | j j" | | � n | j j" | | � t# | j _$ | j j% � d S( s�
Parse the SSH2_MSG_KEXGSS_COMPLETE message (client mode).
:param `Message` m: The content of the SSH2_MSG_KEXGSS_COMPLETE message
i s Server kex "f" is out of rangeR R= N(& R R: R RA RB R R9 RC Rk R R R R RD RE RF RG RH RI Rn Rq Rr Rs Rt R! Rm R R RW RK RL R
R R RM RN RO RP ( R R' RQ RR R@ RS RT RU ( ( s4 /tmp/pip-install-A1qMVe/paramiko/paramiko/kex_gss.pyR, N sJ %
c C sM | j � } | j � } | j � } | j � t d j | | | � � � d S( s�
Parse the SSH2_MSG_KEXGSS_ERROR message (client mode).
The server may send a GSS-API error message. if it does, we display
the error by throwing an exception (client mode).
:param `Message` m: The content of the SSH2_MSG_KEXGSS_ERROR message
:raise SSHException: Contains GSS-API major and minor status as well as
the error message and the language tag of the
message
sC GSS-API Error:
Major Status: {}
Minor Status: {}
Error Message: {}
N( Ra R9 R R. ( R R' Rb Rc Rd ( ( s4 /tmp/pip-install-A1qMVe/paramiko/paramiko/kex_gss.pyR- � s
( Re Rf Rg Rh Rr Rt Rs R R( R1 R Rv Rw Rx R* R+ R, R- ( ( ( s4 /tmp/pip-install-A1qMVe/paramiko/paramiko/kex_gss.pyRj J s , ! >
2RA c B s) e Z d Z d � Z d � Z d � Z RS( s�
This class represents the Null Host Key for GSS-API Key Exchange as defined
in `RFC 4462 Section 5
<https://tools.ietf.org/html/rfc4462.html#section-5>`_
c C s
d | _ d S( Nt ( R` ( R ( ( s4 /tmp/pip-install-A1qMVe/paramiko/paramiko/kex_gss.pyR � s c C s | j S( N( R` ( R ( ( s4 /tmp/pip-install-A1qMVe/paramiko/paramiko/kex_gss.pyRI � s c C s | j S( N( R` ( R ( ( s4 /tmp/pip-install-A1qMVe/paramiko/paramiko/kex_gss.pyt get_name� s ( Re Rf Rg R RI R� ( ( ( s4 /tmp/pip-install-A1qMVe/paramiko/paramiko/kex_gss.pyRA � s (' Rg R2 t hashlibR t paramiko.commonR R R t paramikoR t paramiko.messageR t paramiko.py3compatR R R t paramiko.ssh_exceptionR t rangeR R$ R% R# R& Ro Ru t cR R> R\ t c_MSG_KEXGSS_HOSTKEYt c_MSG_KEXGSS_ERRORRp R� t objectR
Ri Rj RA ( ( ( s4 /tmp/pip-install-A1qMVe/paramiko/paramiko/kex_gss.pyt <module>& s 7.� � Q