shell bypass 403
3
."�d� � @ s@ d dl mZmZ ddlmZ G dd� de�ZG dd� de�ZdS ) � )� check_output�CalledProcessError� )�ConfigGeneratorc @ s� e Zd ZdZdddhZdddddddd d
d ddd d
ddd�Zdddddddd�Zdddddddd d d d �
Zd d!d"�Zd#d$d%d&d'd(�Z e
d)d*� �Z e
d+d,� �Z e
d-d.� �Z
e
d/d0� �Zd1S )2�OpenSSLGenerator�opensslZtlsZssl� z-AES256z-AES128z-SHA256z -CHACHA20z-SEEDz!IDEAz!DESz-3DESz!RC4z!RC2z
!eNULL:!aNULL)z AES-256-CTRz AES-128-CTRz AES-256-GCMz AES-128-GCMz AES-256-CBCz AES-128-CBCzCHACHA20-POLY1305zSEED-CBCzIDEA-CBCzDES-CBCzRC4-40z DES40-CBCz3DES-CBCzRC4-128zRC2-CBCZNULLZkRSAZkEECDHZkPSKZkDHEPSKZkEDHZ kECDHEPSK)�RSA�ECDHE�PSKzDHE-PSKzDHE-RSAzDHE-DSSz ECDHE-PSKz-kRSAz-kEECDHz-aRSAz-aDSSz-kPSKz-kDHEPSKz
-kECDHEPSK)
ZANONZDHZECDHr r
zDHE-RSAzDHE-DSSr zDHE-PSKz ECDHE-PSKz!MD5z-SHA1)zHMAC-MD5z HMAC-SHA1ZTLS_AES_256_GCM_SHA384ZTLS_AES_128_GCM_SHA256Z TLS_CHACHA20_POLY1305_SHA256ZTLS_AES_128_CCM_SHA256ZTLS_AES_128_CCM_8_SHA256)z AES-256-GCMz AES-128-GCMzCHACHA20-POLY1305z AES-128-CCMz AES-128-CCM8c C s� d}|j }|j}|jd }|jd }|dk s4|dk rB| j|d�}nH|dk sR|dk r`| j|d�}n*|dk sp|dk r~| j|d �}n | j|d
�}x<|d D ]0}y| j|| j| �}W q� tk
r� Y q�X q�W x>|d D ]2}y| j|| j| �}W q� tk
�r Y q�X q�W x@|d D ]4}y| j|| j| �}W n tk
�rB Y nX �qW d
|d k�rrd|d k�rr| j|d�}x@|d D ]4}y| j|| j| �}W n tk
�r� Y nX �q|W | j|d�}| j|d�}| j|d�}| j|d�}|S )Nr � min_dh_size� min_rsa_sizei� z @SECLEVEL=0i z @SECLEVEL=1i z @SECLEVEL=2z @SECLEVEL=3Z key_exchange�cipherz AES-128-CCMz AES-256-CCMz-AESCCMZmacz-SHA384z -CAMELLIAz-ARIAz-AESCCM8) �enabledZdisabledZintegers�append�key_exchange_map�KeyError�key_exchange_not_map�cipher_not_map� mac_not_map)�cls�policy�s�pZipr r
�i� r �>./usr/share/crypto-policies/python/policygenerators/openssl.py�generate_ciphersF sN
z!OpenSSLGenerator.generate_ciphersc C sL d}|j }x<|d D ]0}y| j|| j| �}W q tk
rB Y qX qW |S )Nr r )r r �ciphersuite_mapr )r r r r r r r r �generate_ciphersuites{ s
z&OpenSSLGenerator.generate_ciphersuitesc C s
| j |�S )N)r )r r r r r �generate_config� s z OpenSSLGenerator.generate_configc C s� d}yt dd|g�}W n> tk
rB | jd� | jd| � dS tk
rT dS X d|ksfd |kr�| jd
� | jd | � dS dS ) N� r Zciphersz-There is an error in openssl generated policyz
policy: %sFTs NULLs ADHz0There is NULL or ADH in openssl generated policyz
Policy:
%s)r r Zeprint�OSError)r �config�outputr r r � test_config� s
z OpenSSLGenerator.test_configN)�__name__�
__module__� __qualname__� CONFIG_NAMEZSCOPESr r r r r � classmethodr r r r% r r r r r s\
5 r c @ sl e Zd ZdZdddddddd d
�Zd d d
ddddddddddddddd d d d �Zed d!� �Zed"d#� �Zd$S )%�OpenSSLConfigGeneratorZ
opensslcnfr ZSSLv3ZTLSv1zTLSv1.1zTLSv1.2zTLSv1.3ZDTLSv1zDTLSv1.2)NzSSL3.0zTLS1.0zTLS1.1zTLS1.2zTLS1.3zDTLS1.0zDTLS1.2zRSA+SHA1zDSA+SHA1z
ECDSA+SHA1z
RSA+SHA224z
DSA+SHA224z ECDSA+SHA224z
RSA+SHA256z
DSA+SHA256z ECDSA+SHA256z
RSA+SHA384z
DSA+SHA384z ECDSA+SHA384z
RSA+SHA512z
DSA+SHA512z ECDSA+SHA512z&rsa_pss_pss_sha256:rsa_pss_rsae_sha256z&rsa_pss_pss_sha384:rsa_pss_rsae_sha384z&rsa_pss_pss_sha512:rsa_pss_rsae_sha512Zed25519Zed448)zRSA-SHA1zDSA-SHA1z
ECDSA-SHA1z RSA-SHA2-224z DSA-SHA2-224zECDSA-SHA2-224z RSA-SHA2-256z DSA-SHA2-256zECDSA-SHA2-256z RSA-SHA2-384z DSA-SHA2-384zECDSA-SHA2-384z RSA-SHA2-512z DSA-SHA2-512zECDSA-SHA2-512zRSA-PSS-SHA2-256zRSA-PSS-SHA2-384zRSA-PSS-SHA2-512z
EDDSA-ED25519z EDDSA-ED448c s |j }d}|� j|�7 }|d7 }|d7 }|� j|�7 }|d7 }|jrd|d7 }|d� j|j � d�7 }|jr�|d7 }|d� j|j � d�7 }|jr�|d7 }|d� j|j � d�7 }|jr�|d7 }|d� j|j � d�7 }� fd d
�|d D �}|d d
j|� 7 }|S )NzCipherString = �
zCiphersuites = zTLS.MinProtocol =� zTLS.MaxProtocol =zDTLS.MinProtocol =zDTLS.MaxProtocol =c s g | ]}|� j kr� j | �qS r )�sign_map)�.0r )r r r �
<listcomp>� s z:OpenSSLConfigGenerator.generate_config.<locals>.<listcomp>ZsignzSignatureAlgorithms = �:) r r r Zmin_tls_version� protocol_mapZmax_tls_versionZmin_dtls_versionZmax_dtls_version�join)r r r r Zsig_algsr )r r r � s.
z&OpenSSLConfigGenerator.generate_configc C s dS )NTr )r r# r r r r% � s z"OpenSSLConfigGenerator.test_configN) r& r' r( r) r2 r. r* r r% r r r r r+ � s> r+ N)�
subprocessr r Zconfiggeneratorr r r+ r r r r �<module> s