|
Server : LiteSpeed System : Linux server51.dnsbootclub.com 4.18.0-553.62.1.lve.el8.x86_64 #1 SMP Mon Jul 21 17:50:35 UTC 2025 x86_64 User : nandedex ( 1060) PHP Version : 8.1.33 Disable Function : NONE Directory : /opt/cppython/lib/python3.8/test/__pycache__/ |
U
>��g�$ �
@ sR d Z ddlZddlZddlZddlZddlT dZdZdZej �
ej � e ��Z
dJd d �Zd
Zdd� Zdd� Zdd� Zedk�rNe�e
� eddd�\ZZedd��Ze�e� W 5 Q R X edd��Ze�e� W 5 Q R X ed� ed d d dd d d!d"d#g � ed d d dd d$d!d"d#g � ed%d��Ze�e� e�e� W 5 Q R X ed$d&��Ze�e� W 5 Q R X e� ed'dd�\ZZed(d��Ze�e� e�e� W 5 Q R X edd)d*�\ZZed+d��Ze�e� e�e� W 5 Q R X ed'd)d*�\ZZed,d��Ze�e� e�e� W 5 Q R X ed-d)d.d/�\ZZed0d��Ze�e� e�e� W 5 Q R X d1d2d3d4d5d6d7d8d9g Z ed:d)d;� e �d<�\ZZed=d��Ze�e� e�e� W 5 Q R X d>d?d@dAdBgZ edCd)d;� e �d<�\ZZedDd��Ze�e� e�e� W 5 Q R X edEd)dFdG�\ZZedHd��Ze�e� e�e� W 5 Q R X e� edI� ed%� ed+� dS )KzOMake the custom certificate and private key files used by test_ssl
and friends.� N)�*Z20180829142316ZZ20371028142316Za�
[ default ]
base_url = http://testca.pythontest.net/testca
[req]
distinguished_name = req_distinguished_name
prompt = no
[req_distinguished_name]
C = XY
L = Castle Anthrax
O = Python Software Foundation
CN = {hostname}
[req_x509_extensions_nosan]
[req_x509_extensions_simple]
subjectAltName = @san
[req_x509_extensions_full]
subjectAltName = @san
keyUsage = critical,keyEncipherment,digitalSignature
extendedKeyUsage = serverAuth,clientAuth
basicConstraints = critical,CA:false
subjectKeyIdentifier = hash
authorityKeyIdentifier = keyid:always,issuer:always
authorityInfoAccess = @issuer_ocsp_info
crlDistributionPoints = @crl_info
[ issuer_ocsp_info ]
caIssuers;URI.0 = $base_url/pycacert.cer
OCSP;URI.0 = $base_url/ocsp/
[ crl_info ]
URI.0 = $base_url/revocation.crl
[san]
DNS.1 = {hostname}
{extra_san}
[dir_sect]
C = XY
L = Castle Anthrax
O = Python Software Foundation
CN = dirname example
[princ_name]
realm = EXP:0, GeneralString:KERBEROS.REALM
principal_name = EXP:1, SEQUENCE:principal_seq
[principal_seq]
name_type = EXP:0, INTEGER:1
name_string = EXP:1, SEQUENCE:principals
[principals]
princ1 = GeneralString:username
[ ca ]
default_ca = CA_default
[ CA_default ]
dir = cadir
database = $dir/index.txt
crlnumber = $dir/crl.txt
default_md = sha256
startdate = {startdate}
default_startdate = {startdate}
enddate = {enddate}
default_enddate = {enddate}
default_days = 7000
default_crl_days = 7000
certificate = pycacert.pem
private_key = pycakey.pem
serial = $dir/serial
RANDFILE = $dir/.rand
policy = policy_match
[ policy_match ]
countryName = match
stateOrProvinceName = optional
organizationName = match
organizationalUnitName = optional
commonName = supplied
emailAddress = optional
[ policy_anything ]
countryName = optional
stateOrProvinceName = optional
localityName = optional
organizationName = optional
organizationalUnitName = optional
commonName = supplied
emailAddress = optional
[ v3_ca ]
subjectKeyIdentifier=hash
authorityKeyIdentifier=keyid:always,issuer
basicConstraints = CA:true
F� �req_x509_extensions_full�rsa:3072c C s� t d| � g }td�D ](}tjdd��}|�|j� W 5 Q R X q|\}} }
�z$tj | |t
t d�} t |d��}|�
| � W 5 Q R X ddd d
d d |d
|
d|d|g
}
|r�tjdd��}|�|j� |j}W 5 Q R X |
d|g7 }
n|
dd| g7 }
tdg|
� |�r,dd|d|d| dddddd|g}
tdg|
� t | d��}|�� }W 5 Q R X t |
d��}|�� }W 5 Q R X ||fW �S |D ]} t�| � �qxX d S )Nzcreating cert for � F)�delete��hostname� extra_san� startdate�enddate�w�req�-new�-nodesz-daysZ7000�-newkey�-keyout� -extensions�-config�-outz-x509�openssl�ca�-outdir�cadirz-policyZpolicy_anything�-batch�-infiles�r)�print�range�tempfile�NamedTemporaryFile�append�name�os�remove� req_template�formatr r �open�write�
check_call�read)r �signr
�ext�keyZ tempnames�i�fZreq_fileZ cert_fileZkey_filer" r �argsZreqfile�cert� r2 �2/opt/cppython/lib/python3.8/test/make_ssl_certs.py�
make_cert_keyw sp
�
� � r4 r c C s t �t� d S )N)�shutil�rmtree� TMP_CADIRr2 r2 r2 r3 � unmake_ca� s r8 c C s� t �t� tt j�dd�d��} W 5 Q R X tt j�dd�d��} | �d� W 5 Q R X tt j�dd�d��} | �d� W 5 Q R X tt j�dd �d
��} | �d � W 5 Q R X t�d
���}t j
d d
t t d�}|�|� |�
� t�� ��} dd|jddddddd| jddg
}tdg| � dd|jdd d d td dd d!d"d#| jg}tdg| � dd|jd$dd%g}tdg| � W 5 Q R X W 5 Q R X tdd&d'd dd(g� t�d(d)� d S )*Nr z index.txt�a+zcrl.txtZ00zindex.txt.attrzw+zunique_subject = no�serialr
zCB2D80995A69525B
z
our-ca-serverr r r r r r r r r z pycakey.pemr z-subjzG/C=XY/L=Castle Anthrax/O=Python Software Foundation CA/CN=our-ca-serverr r z pycacert.pemr r z-keyfilez -selfsignr Zv3_car z-gencrlzrevocation.crlZx509�-inzcapath/ceff1710.0zcapath/b1930218.0)r# �mkdirr7 r' �path�joinr( r r r% r& r r �flushr" r) r5 �copy)r/ �tr r0 r2 r2 r3 �make_ca� sr
�
� �" �rB c C s dd l }t�|�| �� d S )Nr )�_ssl�pprintZ_test_decode_cert)r= rC r2 r2 r3 �
print_cert� s rE �__main__� localhostZreq_x509_extensions_simple)r, z ssl_cert.pemr
z ssl_key.pemz5password protecting ssl_key.pem in ssl_key.passwd.pemr Zpkeyr; r zssl_key.passwd.pemz-aes256z-passoutz
pass:somepasszkeycert.passwd.pemz keycert.pemr9 Z fakehostnamez keycert2.pemT)r+ z keycert3.pemz keycert4.pemz
localhost-ecczparam:secp384r1.pem)r+ r- zkeycertecc.pemz0otherName.1 = 1.2.3.4;UTF8:some other identifierz/otherName.2 = 1.3.6.1.5.2.2;SEQUENCE:princ_namezemail.1 = user@example.orgzDNS.2 = www.example.orgzdirName.1 = dir_sectz URI.1 = https://www.python.org/zIP.1 = 127.0.0.1z
IP.2 = ::1zRID.1 = 1.2.3.4.5Zallsans�
)r+ r
z allsans.pemz'DNS.2 = xn--knig-5qa.idn.pythontest.netz6DNS.3 = xn--knigsgsschen-lcb0w.idna2003.pythontest.netz6DNS.4 = xn--knigsgchen-b4a3dun.idna2008.pythontest.netz,DNS.5 = xn--nxasmq6b.idna2003.pythontest.netz,DNS.6 = xn--nxasmm1c.idna2008.pythontest.netZidnsansz idnsans.pemZnosanZreq_x509_extensions_nosan)r+ r, z nosan.pemz=update Lib/test/test_ssl.py and Lib/test/test_asyncio/util.py)Fr r r ) �__doc__r# rD r5 r �
subprocessr r r% r= �abspath�dirname�__file__�herer4 r7 r8 rB rE �__name__�chdirr1 r- r' r/ r( r r) r
r> r2 r2 r2 r3 �<module> s� g �
5,
�
�
�