o g>@sdZddlZddlZddlZddlZddlZddlZddlZddlZddl m Z ddl m Z ddl m Z mZddlmZmZddlmZddlmZmZdd lmZmZed Zd Zed Zd ZdZdZeedZ e!e "D] \Z#Z$e$e e#d<qoGdddZ%Gdddej&Z'Gddde'Z(Gddde'Z)ddZ*GdddZ+Gddde%Z,Gd d!d!Z-Gd"d#d#e%Z.Gd$d%d%eZ/dS)&z SSH Agent interface N)DEBUG)select)io_sleepbyte_chr) SSHExceptionAuthenticationException)Message)PKeyUnknownKeyType)asbytes get_logger )z rsa-sha2-256z rsa-sha2-512z-cert-v01@openssh.comc@s<eZdZddZddZddZddZd d Zd d Zd S)AgentSSHcCsd|_d|_dSN)_conn_keysselfrrH/var/www/html/api-tag/env/lib/python3.10/site-packages/paramiko/agent.py__init__>s zAgentSSH.__init__cC|jS)a Return the list of keys available through the SSH agent, if any. If no SSH agent was running (or it couldn't be contacted), an empty list will be returned. This method performs no IO, just returns the list of keys retrieved when the connection was made. :return: a tuple of `.AgentKey` objects representing keys available on the SSH agent )rrrrrget_keysBs zAgentSSH.get_keyscCsd||_|t\}}|tkrtdg}t|D]}|t|| | dqt ||_ dS)Nz!could not get keys from ssh-agent)agentblobcomment) r _send_messagecSSH2_AGENTC_REQUEST_IDENTITIESSSH2_AGENT_IDENTITIES_ANSWERrrangeget_intappendAgentKey get_binaryget_texttupler)rconnptyperesultkeysirrr_connectQszAgentSSH._connectcCs$|jdur |jd|_d|_dSr)rcloserrrrr_closeas   zAgentSSH._closecCsXt|}|jtdt|||d}t|td|d}t | |fS)Nz>Irr) r rsendstructpacklen _read_allrunpackordget_byte)rmsgdatarrrr!gs  zAgentSSH._send_messagecCsl|j|}t||kr4t|dkrtd|j|t|}t|dkr*td||7}t||ks |S)Nrlost ssh-agent)rrecvr6r)rwantedr-extrarrrr7ns     zAgentSSH._read_allN) __name__ __module__ __qualname__rrr0r2r!r7rrrrr=s rc@0eZdZdZddZddZddZdd Zd S) AgentProxyThreadz@ Class in charge of communication between two channels. cCs"tjj||jd||_d|_dS)N)targetF) threadingThreadrrun_agent_exitrrrrrrs zAgentProxyThread.__init__cCshz/|\}}||_||_|jt|jts)|jjdus%t|jjds)t d| WdS)NfilenozUnable to connect to SSH agent) get_connection_AgentProxyThread__inr_AgentProxyThread__addrrJconnect isinstanceintrhasattrr _communicate)rraddrrrrrIs     zAgentProxyThread.runcCsddl}||j|j}||j|j|tjB|jswt|jj |jgggd}|dD]A}|jj |krM|jj d}t |dkrG|j |q+| n |j|krl|j d}t |dkrf|jj |q+| nq+tt|jrdSdS)Nrg?i)fcntlrOF_GETFLF_SETFLos O_NONBLOCKrKrrJrr>r6r3r2timesleepr)rrXoldflagseventsfdr<rrrrUs*       zAgentProxyThread._communicatecCs d|_|j|jjdS)NT)rKrOr1rJrrrrrr2s zAgentProxyThread._closeN)rArBrC__doc__rrIrUr2rrrrrEzs  rEc@ eZdZdZddZddZdS)AgentLocalProxyz Class to be used when wanting to ask a local SSH Agent being asked from a remote fake agent (so use a unix socket for ex.) cCst||dSN)rErrLrrrrszAgentLocalProxy.__init__cCsJttjtj}z||j|d|\}}||fWS)zX Return a pair of socket object and string address. May block! )socketAF_UNIX SOCK_STREAMbindrJ _get_filenamelistenaccept)rr+rVrWrrrrNs   zAgentLocalProxy.get_connectionNrArBrCrbrrNrrrrrds rdc@rc)AgentRemoteProxyzA Class to be used when wanting to ask a remote SSH Agent cCst||||_dSre)rEr_AgentRemoteProxy__chan)rrchanrrrrs  zAgentRemoteProxy.__init__cCs |jdfSre)rprrrrrNs zAgentRemoteProxy.get_connectionNrnrrrrros rocCsdtjvr$tjdkr$ttjtj}z |tjd|WSYdStjdkrGddlm }m }d}| r=| }|S| rE| }|SdS)zj Returns some SSH agent object, or None if none were found/supported. .. versionadded:: 2.10 SSH_AUTH_SOCKwin32Nrf) win_pageant win_openssh)r[environsysplatformrgrhrirQrtrucan_talk_to_agentPageantConnectionOpenSSHAgentConnection)r+rtrurrrget_agent_connections" r}c@rD) AgentClientProxya Class proxying request as a client: #. client ask for a request_forward_agent() #. server creates a proxy and a fake SSH Agent #. server ask for establishing a connection when needed, calling the forward_agent_handler at client side. #. the forward_agent_handler launch a thread for connecting the remote fake agent and the local agent #. Communication occurs ... cCs&d|_||_t|||_|jdSre)r_AgentClientProxy__chanRrothreadstartr chanRemoterrrrs zAgentClientProxy.__init__cC |dSrer1rrrr__del__  zAgentClientProxy.__del__cCst}|sdS||_dS)zJ Method automatically called by ``AgentProxyThread.run``. N)r}rrr+rrrrQ s zAgentClientProxy.connectcCs:t|drd|j_|jd|jdur|jdSdS)zh Close the current connection and terminate the agent Should be called manually rTN)rTrrKjoinrr1rrrrr1s   zAgentClientProxy.closeN)rArBrCrbrrrQr1rrrrr~s   r~c@s@eZdZdZddZddZddZdd Zd d Zd d Z dS)AgentServerProxya Allows an SSH server to access a forwarded agent. This also creates a unix domain socket on the system to allow external programs to also access the agent. For this reason, you probably only want to create one of these. :meth:`connect` must be called before it is usable. This will also load the list of keys the agent contains. You must also call :meth:`close` in order to clean up the unix socket and the thread that maintains it. (:class:`contextlib.closing` might be helpful to you.) :param .Transport t: Transport used for SSH Agent communication forwarding :raises: `.SSHException` -- mostly if we lost the agent cCsPt|||_td|_t|jtj |jd|_ t ||_ |j dS)Nsshproxyz /sshproxy.ssh)rr_AgentServerProxy__ttempfilemkdtemp_dirr[chmodstatS_IRWXU_filerdrr)rtrrrr4s    zAgentServerProxy.__init__cCrrerrrrrr=rzAgentServerProxy.__del__cCs2|j}|dur td|d||dS)Nr=z auth-agent)ropen_forward_agent_channelrset_namer0)r conn_sockrrrrQ@s  zAgentServerProxy.connectcCs8t|jt|jd|j_|jd|dS)zk Terminate the agent, clean the files, close connections Should be called manually TrN) r[removerrmdirrrrKrr2rrrrr1Gs    zAgentServerProxy.closecCs d|iS)z Helper for the environment under unix :return: a dict containing the ``SSH_AUTH_SOCK`` environment variables rr)rkrrrrget_envRs zAgentServerProxy.get_envcCrre)rrrrrrk[zAgentServerProxy._get_filenameN) rArBrCrbrrrQr1rrkrrrrr"s  rc@rD) AgentRequestHandlera Primary/default implementation of SSH agent forwarding functionality. Simply instantiate this class, handing it a live command-executing session object, and it will handle forwarding any local SSH agent processes it finds. For example:: # Connect client = SSHClient() client.connect(host, port, username) # Obtain session session = client.get_transport().open_session() # Forward local agent AgentRequestHandler(session) # Commands executed after this point will see the forwarded agent on # the remote end. session.exec_command("git clone https://my.git.repository/") cCs"d|_||_||jg|_dSre)r_AgentRequestHandler__chanCrequest_forward_agent_forward_agent_handler"_AgentRequestHandler__clientProxys)r chanClientrrrrus  zAgentRequestHandler.__init__cCs|jt|dSre)rr&r~rrrrr{sz*AgentRequestHandler._forward_agent_handlercCrrerrrrrr~rzAgentRequestHandler.__del__cCs|jD]}|qdSre)rr1)rprrrr1s  zAgentRequestHandler.closeN)rArBrCrbrrrr1rrrrr_s  rc@rc)Agenta Client interface for using private keys from an SSH agent running on the local machine. If an SSH agent is running, this class can be used to connect to it and retrieve `.PKey` objects which can be used when attempting to authenticate to remote SSH servers. Upon initialization, a session with the local machine's SSH agent is opened, if one is running. If no agent is running, initialization will succeed, but `get_keys` will return an empty tuple. :raises: `.SSHException` -- if an SSH agent is found, but speaks an incompatible protocol .. versionchanged:: 2.10 Added support for native openssh agent on windows (extending previous putty pageant support) cCs&t|t}|s dS||dSre)rrr}r0rrrrrs zAgent.__init__cCs |dS)z1 Close the SSH agent connection. N)r2rrrrr1s z Agent.closeN)rArBrCrbrr1rrrrrs rcs`eZdZdZdddZddZddZd d Zfd d Zd dZ e ddZ dddZ Z S)r'a Private key held in a local SSH agent. This type of key can be used for authenticating to a remote server (signing). Most other key operations work as expected. .. versionchanged:: 3.2 Added the ``comment`` kwarg and attribute. .. versionchanged:: 3.2 Added the ``.inner_key`` attribute holding a reference to the 'real' key instance this key is a proxy for, if one was obtainable, else None. ryc Csz||_||_||_t|}||_tt|_d|_ z t j |j|d|_ WdSt y<d}| t||jYdSw)N)key_type key_bytesz5Unable to derive inner_key for agent key of type {!r})rrr rr)namer __file___logger inner_keyr from_type_stringr logrformat)rrrr r;errrrrrs   zAgentKey.__init__cOs|jj|i|Sre)rr)rargskwargsrrrrsz AgentKey.logcCs|jr|jS|jSre)rr rrrrrr szAgentKey.asbytescCrre)rrrrrget_namerzAgentKey.get_namecs|jdur |jStSre)rget_bitssuperr __class__rrrs   zAgentKey.get_bitscCs|jdur t|t|j|S)zO Proxy any un-implemented methods/properties to the inner_key. N)rAttributeErrorgetattr)rrrrr __getattr__s  zAgentKey.__getattr__cCs ||jg}|jr|jjS|Sre)rrr_fields)rfallbackrrrrszAgentKey._fieldsNcCsbt}|t|||||t|d|j |\}}|t kr-t d| S)Nrzkey cannot be used for signing) radd_bytecSSH2_AGENTC_SIGN_REQUEST add_stringr add_intALGORITHM_FLAG_MAPgetrr!SSH2_AGENT_SIGN_RESPONSErr()rr< algorithmr;r,r-rrr sign_ssh_datas  zAgentKey.sign_ssh_data)ryre)rArBrCrbrrr rrrpropertyrr __classcell__rrrrr's   r')0rbr[rgr4rwrGr]rrloggingrrparamiko.commonrrparamiko.ssh_exceptionrrparamiko.messager paramiko.pkeyr r paramiko.utilr r r"r#rrSSH_AGENT_RSA_SHA2_256SSH_AGENT_RSA_SHA2_512rlistitemskeyvaluerrHrErdror}r~rrrr'rrrrsJ   =; +='"