Linux garfield.o2switch.net 4.18.0-553.62.1.lve.el8.x86_64 #1 SMP Mon Jul 21 17:50:35 UTC 2025 x86_64
/
lib64
/
python2.7
/
test
/
//lib64/python2.7/test/make_ssl_certs.pyo
� z fc @ s+ d Z d d l Z d d l Z d d l Z d d l Z d d l Td Z e j j e j j e � � Z e d d d d � Z d Z d � Z d � Z e d k r'e j e � e d � \ Z Z e d d � � Z e j e � Wd QXe d d � � Z e j e � Wd QXd GHe d d d d d d d d d g � e d d d d d d d d d g � e d d � �! Z e j e � e j e � Wd QXe d d � � Z e j e � Wd QXe � e d � \ Z Z e d d � �! Z e j e � e j e � Wd QXe d e � \ Z Z e d d � �! Z e j e � e j e � Wd QXe d e � \ Z Z e d d � �! Z e j e � e j e � Wd QXd! d" d# d$ d% d& d' d( d) g Z e d* d+ d, j e � �\ Z Z e d- d � �! Z e j e � e j e � Wd QXe � d. GHe d d/ d d d0 d1 d2 g � n d S(3 sO Make the custom certificate and private key files used by test_ssl and friends.i����N( t *s� [req] distinguished_name = req_distinguished_name x509_extensions = req_x509_extensions prompt = no [req_distinguished_name] C = XY L = Castle Anthrax O = Python Software Foundation CN = {hostname} [req_x509_extensions] subjectAltName = @san [san] DNS.1 = {hostname} {extra_san} [dir_sect] C = XY L = Castle Anthrax O = Python Software Foundation CN = dirname example [princ_name] realm = EXP:0, GeneralString:KERBEROS.REALM principal_name = EXP:1, SEQUENCE:principal_seq [principal_seq] name_type = EXP:0, INTEGER:1 name_string = EXP:1, SEQUENCE:principals [principals] princ1 = GeneralString:username [ ca ] default_ca = CA_default [ CA_default ] dir = cadir database = $dir/index.txt crlnumber = $dir/crl.txt default_md = sha256 default_days = 3600 default_crl_days = 3600 certificate = pycacert.pem private_key = pycakey.pem serial = $dir/serial RANDFILE = $dir/.rand policy = policy_match [ policy_match ] countryName = match stateOrProvinceName = optional organizationName = match organizationalUnitName = optional commonName = supplied emailAddress = optional [ policy_anything ] countryName = optional stateOrProvinceName = optional localityName = optional organizationName = optional organizationalUnitName = optional commonName = supplied emailAddress = optional [ v3_ca ] subjectKeyIdentifier=hash authorityKeyIdentifier=keyid:always,issuer basicConstraints = CA:true t t req_x509_extensions_fulls rsa:3072c C s� d | GHg } x? t d � D]1 } t j d t � � } | j | j � Wd QXq W| \ } } } zot j d | d | � } t | d � � } | j | � Wd QXd d d d d d d d | d | g } | rt j d t � � } | j | j � | j } Wd QX| d | g 7} n | d d | g 7} t d g | � | r|d d | d | d d d d d d | g } t d g | � n t | d � � } | j � } Wd QXt | d � � } | j � } Wd QX| | f SWd x | D] } t j | � q�WXd S( Ns creating cert for i t deletet hostnamet extra_sant wt reqs -news -dayst 3650s -nodess -newkeys rsa:1024s -keyouts -configs -outs -x509t opensslt cas -outdirt cadirs -policyt policy_anythings -batchs -infilest r( t ranget tempfilet NamedTemporaryFilet Falset appendt namet req_templatet formatt opent writet check_callt readt ost remove( R t signR t extt keyt tempnamest it ft req_filet cert_filet key_fileR t argst reqfilet certR ( ( s+ /usr/lib64/python2.7/test/make_ssl_certs.pyt make_cert_key\ s> R c C s t j t � d S( N( t shutilt rmtreet TMP_CADIR( ( ( s+ /usr/lib64/python2.7/test/make_ssl_certs.pyt unmake_ca� s c C s� t j t � t t j j d d � d � � } Wd QXt t j j d d � d � � } | j d � Wd QXt t j j d d � d � � } | j d � Wd QXt j d � � } | j t j d d d d � � | j � t j � �� } d d d d d d d d d d d d | j d d g } t d g | � d d | j d d d d! d" t d# d d d d$ d d d% | j g } t d g | � d d | j d& d d' g } t d g | � Wd QXWd QXd S(( NR s index.txts a+s crl.txtt 00s index.txt.attrs w+s unique_subject = noR R s our-ca-serverR R R s -news -daysR s -extensionst v3_cas -nodess -newkeys rsa:3072s -keyouts pycakey.pems -outs -subjsG /C=XY/L=Castle Anthrax/O=Python Software Foundation CA/CN=our-ca-serverR R s -configs -create_serials pycacert.pems -batchs -outdirs -keyfiles -selfsigns -infiless -gencrls revocation.crl( R t mkdirR+ R t patht joinR R R R R t flushR R ( R! t tR% ( ( s+ /usr/lib64/python2.7/test/make_ssl_certs.pyt make_ca� s. !!! t __main__t localhosts ssl_cert.pemR s ssl_key.pems5 password protecting ssl_key.pem in ssl_key.passwd.pemR t rsas -ins -outs ssl_key.passwd.pems -des3s -passouts pass:somepasss keycert.passwd.pems keycert.pems a+t fakehostnames keycert2.pems keycert3.pems keycert4.pems0 otherName.1 = 1.2.3.4;UTF8:some other identifiers/ otherName.2 = 1.3.6.1.5.2.2;SEQUENCE:princ_names email.1 = user@example.orgs DNS.2 = www.example.orgs dirName.1 = dir_sects URI.1 = https://www.python.org/s IP.1 = 127.0.0.1s IP.2 = ::1s RID.1 = 1.2.3.4.5t allsansR s s allsans.pemsr Please change the values in test_ssl.py, test_parse_cert function related to notAfter,notBefore and serialNumbert x509s -datess -serials -noout( t __doc__R R) t sysR t subprocessR R0 t abspatht dirnamet __file__t hereR R( R+ R, R4 t __name__t chdirR' R R R! R R t TrueR R1 ( ( ( s+ /usr/lib64/python2.7/test/make_ssl_certs.pyt <module> sp O ' %% !