JFIF $
d d 7
Viewing File: /usr/share/crypto-policies/python/policygenerators/__pycache__/libreswan.cpython-39.opt-1.pyc
a
C�h� � @ sD d dl Z d dlmZmZ d dlmZ ddlmZ G dd� de�ZdS )� N)�CalledProcessError�call)�mkstemp� )�ConfigGeneratorc @ s e Zd ZdZh d�ZdZddddddd d
d d d
d� Zdddddddd�Zdddddddddddddd�
Zddddddddddddd� Z d d d d d d!d"d d!d"d#�
Z
d$d%d&d'd(�Z d$d%d&d'd)�Z d$d%d*�Z
ed+d,� �Zed-d.� �Zed/d0� �Zed1d2� �Zed3d4� �Zd5S )6�LibreswanGenerator� libreswan> ZipsecZiker z5systemctl try-restart ipsec.service 2>/dev/null || :
� Zdh31Zdh19Zdh20Zdh21Zdh5Zdh14Zdh15Zdh16Zdh18) ZX448ZX25519� SECP256R1Z SECP384R1Z SECP521R1z
FFDHE-6144z
FFDHE-1536�
FFDHE-2048z
FFDHE-3072z
FFDHE-4096z
FFDHE-8192Zaes256Zaes192Zaes128Z
aes_gcm256Z
aes_gcm192Z
aes_gcm128Zchacha20_poly1305)z AES-256-CBCz AES-192-CBCz AES-128-CBCz AES-256-GCMz AES-192-GCMz AES-128-GCMzCHACHA20-POLY1305Zsha2_512Zsha2_256)
�AES-256-CBC-HMAC-SHA2-512�AES-256-CBC-HMAC-SHA2-256�AES-192-CBC-HMAC-SHA2-512�AES-192-CBC-HMAC-SHA2-256�AES-128-CBC-HMAC-SHA2-256zAES-256-GCM-HMAC-SHA2-512zAES-256-GCM-HMAC-SHA2-256zAES-192-GCM-HMAC-SHA2-512zAES-192-GCM-HMAC-SHA2-256zAES-128-GCM-HMAC-SHA2-512zAES-128-GCM-HMAC-SHA2-256z CHACHA20-POLY1305-HMAC-SHA2-512z CHACHA20-POLY1305-HMAC-SHA2-256Zsha1) r r r
r r zAES-256-CBC-HMAC-SHA1zAES-192-CBC-HMAC-SHA1zAES-128-CBC-HMAC-SHA1zAES-256-GCM-AEADzAES-192-GCM-AEADzAES-128-GCM-AEADzCHACHA20-POLY1305-AEADzrsa-sha1zecdsa-sha2_256zecdsa-sha2_384zecdsa-sha2_512z rsa-sha2_256z rsa-sha2_384z rsa-sha2_512)
zRSA-SHA1zECDSA-SHA2-256zECDSA-SHA2-384zECDSA-SHA2-512zRSA-PSS-SHA2-256zRSA-PSS-SHA2-384zRSA-PSS-SHA2-512zRSA-PSS-RSAE-SHA2-256zRSA-PSS-RSAE-SHA2-384zRSA-PSS-RSAE-SHA2-512r r � � )�AEAD�
HMAC-SHA2-512�
HMAC-SHA2-256� HMAC-SHA1)r r r r )r
r c C s || j vrdS | j | S �N�c )�mac_ike_prio_map��cls�key� r �?/usr/share/crypto-policies/python/policygenerators/libreswan.pyZ__get_ike_prios s
z!LibreswanGenerator.__get_ike_prioc C s || j vrdS | j | S r )�mac_esp_prio_mapr r r r Z__get_esp_prioz s
z!LibreswanGenerator.__get_esp_prioc C s || j vrdS | j | S r )�group_prio_mapr r r r Z__get_group_prio� s
z#LibreswanGenerator.__get_group_prioc
C s d}d}|j }d}dd� |d D �}d|v r2d}n d |v r>d
}|rR|d | d 7 }|d
7 }t|d | jd�}t|d | jd�}d} |d D ]�}
z| j|
} W n ty� Y q�Y n0 | d } d}|D ]@}
z| j|
d |
}W n ty� Y q�Y n0 | �||d�}q�|�sq�| |7 } d}|D ]>}z| j| }W n t�yJ Y �q Y n0 | �||d�}�q | �| |d�} | �| | |�} q�| �r�|d| d 7 }t|d | j d�}d} |d D ]�}
z| j|
} W n t�y� Y �q�Y n0 | d } d}|D ]V}
z| j
|
d |
}W n t�y" Y �q�Y n0 |�s4| } �qF| �||d�}�q�| |7 } | dd � dk�rd�q�| �| | |�} �q�| �r�|d| d 7 }d} t � }|d D ]R}z| j | }W n t�y� Y �q�Y n0 ||v�r�|�
|� | �| ||�} �q�| �r|d| d 7 }|S )Nzconn %default
�,r c S s g | ]}|� d �r|�qS )ZIKE)�
startswith)�.0�xr r r �
<listcomp>� � z6LibreswanGenerator.generate_config.<locals>.<listcomp>ZprotocolZIKEv2z ikev2=insistZIKEv1z ikev2=never� �
z pfs=yes
�mac)r �group�cipher�-�+z ike=���z esp=�signz authby=)Zenabled�sorted�!_LibreswanGenerator__get_ike_prio�#_LibreswanGenerator__get_group_prio�
cipher_map�KeyError�cipher_prf_map�append� group_map�!_LibreswanGenerator__get_esp_prio�cipher_mac_map�set�sign_map�add)r ZpolicyZcfg�sep�p�s�protoZ sorted_macsZ
sorted_groups�tmpr+ �cmZcombor) Zmm�ir* Zsigalgsr/ Zsmr r r �generate_config� s� ��
�
z"LibreswanGenerator.generate_configc C s� t �dt j�sdS t� \}}d}zzt �|d��}|�|� W d � n1 sN0 Y ztd|� d�dd�}W n ty� | �d� Y n0 W t � |� n t � |� 0 |r�| �d � | �d
|� �� d S dS ) Nz/usr/sbin/ipsecT� �wz'/usr/sbin/ipsec readwriteconf --config z >/dev/null)�shellz!/usr/sbin/ipsec: Execution failedz/There is an error in libreswan generated policyzPolicy:
F)
�os�access�X_OKr �fdopen�writer r Zeprint�unlink)r Zconfig�fd�path�ret�fr r r � test_config� s&
( �
z LibreswanGenerator.test_configN)�__name__�
__module__� __qualname__Z CONFIG_NAMEZSCOPESZ
RELOAD_CMDr7 r3 r5 r9 r; r r r � classmethodr1 r8 r2 rD rR r r r r r
s� ��
�����
�
_r ) rH �
subprocessr r Ztempfiler Zconfiggeneratorr r r r r r �<module> s Back to Directory
nL+D550H?Mx ,D"v]qv;6*Zqn)ZP 0 !1 A "#a$2Qr D8 a Ri[f\mIykIw0 cuFcRı?lO7к_f˓[C$殷WF<_W ԣs KcëIzyQy /_LKℂ;C",pFA: /]=H ~,ls/9ć:[=/#f;)x {ٛEQ )~ =𘙲r*2~ a _V=' kumF D}KYYC)({ *g&f`툪ry`=^cJ.I](*`wq 1dđ#̩͑0;H]u搂@:~וKL Nsh}OIR*8:2 !lDJVo( 3=M(zȰ+i*NA r6KnSl )!JJӁ* %݉?|D}d5:eP0R;{$X'xF@.ÊB {,WJuQɲRI;9QE琯62fT.DUJ;*cP A\ILNj!J۱+O\ ͔]ޒ SJȧc%ANolՎprULZԛerE2=XDXgVQeӓk yP7U*omQIs,K`)6\G3t?pgjrmۛجwluGtf h9uyP0D;Uڽ"OXlif$)&|ML0Zrm1[HXPlPR0'G=i2N +0e2]] 9VTPO7h(F*癈 '=QVZDF,d߬~TX
G[`le69CR(!S2!P
<0x < !1AQ "Raq02Br#SCTb
?Ζ"]mH5WR7k.ۛ!}Q~+yԏz|@T20S~Kek *zFf^2X*(@8r?CIuI|֓>^ExLgNUY+{.RѪ
τVYTD I62'8Y2 7'\TP.6d&˦@Vqi|8- OΕ]ʔ U=TL8=;6c| !qfF3aů&~$l}'NWUs$Uk^SV:U# 6w++s&r+nڐ{@29 gL
u"TÙM=6 (^"7r} =6YݾlCuhquympǦ
G jhsǜNlɻ}o7 #S6aw4!OSrD57%|?x>L
|/nD6?/8w#[)L7+6〼T ATg ! %5MmZ/c-{1_Je"|^$'O&ޱմ Trb$ w)R$&
N1EtdU3Uȉ1pM" N*(DN yd96.(jQ)X
5cQɎMyW? Q*!R>6=7)Xj5`J]e 8%t!+'!1Q 5 !1 AQaqё#2"0BRb ? Gt^## .llQT $v,,m 㵜5 ubV =sY+@d{N! dnO< .-B; _wJt6;QJd.Qc%p{ 1,sNDdFHI0ГoXшe黅XۢF:)[FGXƹ/w_cMeD,ʡcc. WDtA$j@:) -# u
c1<@ۗ9F)KJ-hpP]_x[qBlbp ʖw q"LFGd ƶ*s+ډ_Zc"? %t[IP 6J]#=ɺVvvCGsGh1 >)6|ey?Lӣm,4GWUi` ]uJVoV DG< SB 6ϏQ@ TiUly OU0kfV~~}SZ@*WUUi##; s/[ =!7}" WN]'(L! ~y5g9T̅JkbM' +s:S + B)v@Mj
e Cf jE 0Y\QnzG1д~Wo{T 9?`Rmyhsy3!HAD]mc1~2L Su7xT;j$`}4->L#vzŏ ILS ֭ T { rjGKC; bpU= -`BsK.SFw4Mq]ZdHS0)tLg