+ DfjORt^RIHt^RIt^RIt^RIHtHtH t ^RI H t ^RI H t ^RIHtHtHtHt^RIHt^RIHtHtHt^R IHt^R IHtHtHt^R IH t ^R I!H"t"^R I#H$t$^RI%H&t&^RI'H(t(^RI)H*t*^RI+H,t,]$!4t-RRlt.RRlt/!RR4t0]!]4!RR]044t1]!]4!RR44t2RRlt3]!]4!RR]0],44t4!R R!4t5!R"R#4t6R#)$zE An implementation of the OpenSSH known_hosts database. @since: 8.2 ) annotationsN)Error a2b_base64 b2a_base64)closing)sha1)IOCallableIterableLiteral) implementer)HostKeyChanged InvalidEntryUserRejectedKey)IKnownHostEntry) BadKeyErrorFingerprintFormatsKey)defer)Deferred)Logger) nativeString)FilePath) secureRandom) FancyEqMixinc V^8dQhRRRR/#)sbytesreturn)formats"A/usr/lib/python3/dist-packages/twisted/conch/client/knownhosts.py __annotate__r#$s!!%!E!c4\V4P4#)z Encode a binary string as base64 with no trailing newline. @param s: The string to encode. @return: The base64-encoded string. )rstrip)rs&r" _b64encoder'$s a=    r$c V^8dQhRRRR/#)rstringrrz&tuple[bytes, bytes, Key, bytes | None]r )r!s"r"r#r#/s,,5,%K,r$c0VPR^4p\V4^8wd \4hVwr#pVPR^4p\V4^8XdVwrgVPR4pM V^,pRp\P !\ V44pW#W3#)ai Extract common elements of base64 keys from an entry in a hosts file. @param string: A known hosts file entry (a single line). @return: a 4-tuple of hostname data (L{bytes}), ssh key type (L{bytes}), key (L{Key}), and comment (L{bytes} or L{None}). The hostname data is simply the beginning of the line up to the first occurrence of whitespace. N )splitlenrrstripr fromStringr) r)elements hostnameskeyType keyAndCommentsplitkey keyStringcommentkeys & r"_extractCommonr8/s||D!$H 8}n(0%I ""4+H 8}% ..'QK  ..I. /C s ++r$c2]tRt^ItRtRRltRRltRtR#) _BaseEntrya Abstract base of both hashed and non-hashed entry objects, since they represent keys and key types the same way. @ivar keyType: The type of the key; either ssh-dss or ssh-rsa. @type keyType: L{bytes} @ivar publicKey: The server public key indicated by this line. @type publicKey: L{twisted.conch.ssh.keys.Key} @ivar comment: Trailing garbage after the key line. @type comment: L{bytes} or C{None} c(V^8dQhRRRRRRRR/#) rr2r publicKeyrr6 bytes | NonerNoner )r!s"r"r#_BaseEntry.__annotate__Xs)# QUr$c *WnW nW0nR#N)r2r<r6)selfr2r<r6s&&&&r"__init___BaseEntry.__init__Xs " r$c V^8dQhRRRR/#)r keyObjectrrboolr )r!s"r"r#r?]s  C D r$c $VPV8HpV#)z Check to see if this entry matches a given key object. @param keyObject: A public key object to check. @return: C{True} if this entry's key matches C{keyObject}, C{False} otherwise. )r<)rBrFresults&& r" matchesKey_BaseEntry.matchesKey]s9, r$)r6r2r<N)__name__ __module__ __qualname____firstlineno____doc__rCrJ__static_attributes__r r$r"r:r:Is   r$r:c`a]tRt^jtRtRV3Rllt]RRl4tRRltRR lt R t V;t #) PlainEntryz A L{PlainEntry} is a representation of a plain-text entry in a known_hosts file. @ivar _hostnames: the list of all host-names associated with this entry. c(V^8dQhRRRRRRRR/#) rr1z list[bytes]r2rr<rr6r=r )r!s"r"r#PlainEntry.__annotate__ss26666 6  6r$c 4<Wn\SV` W#V4R#rA) _hostnamessuperrC)rBr1r2r<r6 __class__s&&&&&r"rCPlainEntry.__init__ss(1 W5r$c V^8dQhRRRR/#)rr)rrrSr )r!s"r"r#rU~s*r$c T\V4wr#rEV!VPR4W4V4pV#)a> Parse a plain-text entry in a known_hosts file, and return a corresponding L{PlainEntry}. @param string: a space-separated string formatted like "hostname key-type base64-key-data comment". @raise DecodeError: if the key is not valid encoded as valid base64. @raise InvalidEntry: if the entry does not have the right number of elements and is therefore invalid. @raise BadKeyError: if the key, once decoded from base64, is not actually an SSH key. @return: an IKnownHostEntry representing the hostname and key in the input line. @rtype: L{PlainEntry} ,)r8r,)clsr)r1r2r7r6rBs&& r"r/PlainEntry.fromString}s/,,:&+A( C9??4('@ r$c V^8dQhRRRR/#)rhostname bytes | strrrGr )r!s"r"r#rUs + +K +D +r$c l\V\4'dVPR4pWP9#)z Check to see if this entry matches a given hostname. @param hostname: A hostname or IP address literal to check against this entry. @return: C{True} if this entry is for the given hostname or IP address, C{False} otherwise. utf-8) isinstancestrencoderWrBras&&r" matchesHostPlainEntry.matchesHosts, h $ $w/H??**r$cV^8dQhRR/#rrrr )r!s"r"r#rUs!!%!r$c RPVP4VP\VPP 44.pVP eVPVP 4RPV4#)z Implement L{IKnownHostEntry.toString} by recording the comma-separated hostnames, key type, and base-64 encoded key. @return: The string representation of this entry, with unhashed hostname information. r] )joinrWr2r'r<blobr6appendrBfieldss& r"toStringPlainEntry.toStringsb IIdoo & LL t~~**, -  << # MM$,, 'yy  r$)rW) rLrMrNrOrPrC classmethodr/rirtrQ __classcell__rYs@r"rSrSjs5662 +!!r$rScZ]tRt^t$RtRtR]R&RRltRRltR R lt R R lt R t R#) UnparsedEntryz L{UnparsedEntry} is an entry in a L{KnownHostsFile} which can't actually be parsed; therefore it matches no keys and no hosts. Nr>r2c V^8dQhRRRR/#)rr)rrr>r )r!s"r"r#UnparsedEntry.__annotate__sur$c WnR#)z^ Create an unparsed entry from a line in a known_hosts file which cannot otherwise be parsed. N_string)rBr)s&&r"rCUnparsedEntry.__init__s  r$c V^8dQhRRRR/#rrarrrGr )r!s"r"r#r|sEdr$c R#z Always returns False. Fr rhs&&r"riUnparsedEntry.matchesHostr$c V^8dQhRRRR/#)rr7rrrGr )r!s"r"r#r|scdr$c R#rr )rBr7s&&r"rJUnparsedEntry.matchesKeyrr$cV^8dQhRR/#rlr )r!s"r"r#r|s**%*r$c 8VPPR4#)z Returns the input line, without its newline if one was given. @return: The string representation of this entry, almost exactly as was used to initialize this entry but without a trailing newline. @rtype: L{bytes} r+)rr.rBs&r"rtUnparsedEntry.toStrings||""5))r$r~) rLrMrNrOrPr2__annotations__rCrirJrtrQr r$r"rzrzs, GT  **r$rzc$V^8dQhRRRRRR/#)rr7rr)rbrr )r!s"r"r#r#s!uker$c\P!V\R7p\V\4'dVP R4pVP V4VP4#)z Return the SHA-1 HMAC hash of the given key and string. @param key: The HMAC key. @param string: The string to be hashed. @return: The keyed hash value. ) digestmodrd)hmacHMACrrerfrgupdatedigest)r7r)hashs&& r" _hmacedStringrsG 99SD )D&#w'KK ;;=r$cha]tRt^tRtRtR tRV3Rllt]RRl4t RRlt R R lt R t V;t #) HashedEntryaq A L{HashedEntry} is a representation of an entry in a known_hosts file where the hostname has been hashed and salted. @ivar _hostSalt: the salt to combine with a hostname for hashing. @ivar _hostHash: the hashed representation of the hostname. @cvar MAGIC: the 'hash magic' string used to identify a hashed line in a known_hosts file as opposed to a plaintext one. s|1|c 0V^8dQhRRRRRRRRRRR R /#) rhostSaltrhostHashr2r<rr6r=rr>r )r!s"r"r#HashedEntry.__annotate__sF 6 6 6 6 6  6  6  6r$c @<WnW n\SV` W4V4R#rA) _hostSalt _hostHashrXrC)rBrrr2r<r6rYs&&&&&&r"rCHashedEntry.__init__s"! W5r$c V^8dQhRRRR/#)rr)rrrr )r!s"r"r#rs+r$c \V4wr#rEV\VP4RPR4p\V4^8wd \ 4hVwrxV!\ V4\ V4W4V4p V #)a Load a hashed entry from a string representing a line in a known_hosts file. @param string: A complete single line from a I{known_hosts} file, formatted as defined by OpenSSH. @raise DecodeError: if the key, the hostname, or the is not valid encoded as valid base64 @raise InvalidEntry: if the entry does not have the right number of elements and is therefore invalid, or the host/hash portion contains more items than just the host and hash. @raise BadKeyError: if the key, once decoded from base64, is not actually an SSH key. @return: The newly created L{HashedEntry} instance, initialized with the information from C{string}. N|)r8r-MAGICr,rr) r^r)stuffr2r7r6 saltAndHashrrrBs && r"r/HashedEntry.fromString so,(6f'=$C N,-33D9 { q . (:h'H)=wWU r$c V^8dQhRRRR/#rr )r!s"r"r#r+s  E d r$c l\P!\VPV4VP4#)a= Implement L{IKnownHostEntry.matchesHost} to compare the hash of the input to the stored hash. @param hostname: A hostname or IP address literal to check against this entry. @type hostname: L{bytes} @return: C{True} if this entry is for the given hostname or IP address, C{False} otherwise. @rtype: L{bool} )rcompare_digestrrrrhs&&r"riHashedEntry.matchesHost+s+"" $..( 3T^^  r$cV^8dQhRR/#rlr )r!s"r"r#r<s!!%!r$c fVPRP\VP4\VP4.4,VP \VP P44.pVPeVPVP4RPV4#)z Implement L{IKnownHostEntry.toString} by base64-encoding the salt, host hash, and key. @return: The string representation of this entry, with the hostname part hashed. @rtype: L{bytes} rrn) rror'rrr2r<rpr6rqrrs& r"rtHashedEntry.toString<s JJiiDNN3Z5OPQ R LL t~~**, -   << # MM$,, 'yy  r$)rr)rrr2r<r6)rLrMrNrOrPrcompareAttributesrCrvr/rirtrQrwrxs@r"rrsB  EU 6 6: "!!r$rc]tRtRtRtRRlt]RRl4tRRltR R lt R R lt R Rlt RRlt ] RRl4tRtR#)KnownHostsFileiPaN A structured representation of an OpenSSH-format ~/.ssh/known_hosts file. @ivar _added: A list of L{IKnownHostEntry} providers which have been added to this instance in memory but not yet saved. @ivar _clobber: A flag indicating whether the current contents of the save path will be disregarded and potentially overwritten or not. If C{True}, this will be done. If C{False}, entries in the save path will be read and new entries will be saved by appending rather than overwriting. @type _clobber: L{bool} @ivar _savePath: See C{savePath} parameter of L{__init__}. c V^8dQhRRRR/#)rsavePath FilePath[str]rr>r )r!s"r"r#KnownHostsFile.__annotate__as   4 r$c ..VnWnRVnR#)z Create a new, empty KnownHostsFile. Unless you want to erase the current contents of C{savePath}, you want to use L{KnownHostsFile.fromPath} instead. @param savePath: The L{FilePath} to which to save new entries. @type savePath: L{FilePath} TN)_added _savePath_clobber)rBrs&&r"rCKnownHostsFile.__init__as.0 ! r$cV^8dQhRR/#)rrrr )r!s"r"r#rps-r$c VP#)z, @see: C{savePath} parameter of L{__init__} )rrs&r"rKnownHostsFile.savePathos ~~r$cV^8dQhRR/#)rrzIterable[IKnownHostEntry]r )r!s"r"r#rvs6r$c# "VPFpVxK VP'dR#VPP4pT;_uu_4TFYpTP \ P4'd\ PT4pM\PT4pTxK[ RRR4R# \dR#i;i \\\3d\T4pLGi;i +'giR#;i5i)a Iterate over the host entries in this file. @return: An iterable the elements of which provide L{IKnownHostEntry}. There is an element for each entry in the file as well as an element for each added but not yet saved entry. @rtype: iterable of L{IKnownHostEntry} providers N)rrropenOSError startswithrrr/rS DecodeErrorrrrz)rBentryfplines& r" iterentriesKnownHostsFile.iterentriesvs[[EK! ===  $$&BR0{'8'899 + 6 6t < * 5 5d ; R   $\;?0)$/E0RRsu)D D B= D C6:CC6C* C63 D = C D  C  D !C3 0C62C3 3C66 D  D c$V^8dQhRRRRRR/#)rrarr7rrrGr )r!s"r"r#rs!5str$c r\VP4\VP4)4Fwr4VPVP 48XgK&VP V4'gK?VPV4'dR#V^8dRpRpMV^,pVPp\WFV4h R#)an Check for an entry with matching hostname and key. @param hostname: A hostname or IP address literal to check for. @param key: The public key to check for. @return: C{True} if the given hostname and key are present in this file, C{False} if they are not. @raise HostKeyChanged: if the host key found for the given hostname does not match the given key. TNF) enumeraterr-rr2sshTyperirJrr )rBrar7lineidxrrpaths&&& r" hasHostKeyKnownHostsFile.hasHostKeys((8(8(:S=MAC* C*r$c aaaaa\P!SPSS4pRVVVVV3RllpVPV4#)aQ Verify the given host key for the given IP and host, asking for confirmation from, and notifying, the given UI about changes to this file. @param ui: The user interface to request an IP address from. @param hostname: The hostname that the user requested to connect to. @param ip: The string representation of the IP address that is actually being connected to. @param key: The public key of the server. @return: a L{Deferred} that fires with True when the key has been verified, or fires with an errback when the key either cannot be verified or has changed. @rtype: L{Deferred} c V^8dQhRRRR/#)rrIrGrzbool | Deferred[bool]r )r!s"r"r#2KnownHostsFile.verifyHostKey..__annotate__s) ;) ;d) ;'<) ;r$c n<V'dS PSS4'ghRSP4 RSP4 R2pS PVP R44S P SS4S P 4V#RVVVV 3RllpSP4pVR8XdRpR\S4: R \S4: R V: R SP\PR 7: R 2 pS PVP \P!444pVPV4#)zWarning: Permanently added the z host key for IP address 'z' to the list of known hosts. rdc V^8dQhRRRR/#)rresponserGrr )r!s"r"r#EKnownHostsFile.verifyHostKey..gotHasKey..__annotate__s00T0d0r$c<V'd7SPSS4SPSS4SP4V#\4hrA) addHostKeysaver)rrarr7rBs&r"promptResponseGKnownHostsFile.verifyHostKey..gotHasKey..promptResponses9#6C0 '-//r$ECECDSAzThe authenticity of host 'z (z)' can't be established. z key fingerprint is SHA256:)r!z9. Are you sure you want to continue connecting (yes/no)? )rtypedecodewarnrgrrr fingerprintr SHA256_BASE64promptsysgetdefaultencoding addCallback) rI addMessagerkeytyperproceedrarr7rBrs & r" gotHasKey/KnownHostsFile.verifyHostKey..gotHasKeysr3//9#((*F,,.IIK=9$$ GGJ--g67OOB,IIK 00 #xxzd?%G%X.$R(/A/O/OP ))FMM#2H2H2J$KL**>::r$)rexecuterr)rBrrarr7hhkrsfffff r" verifyHostKeyKnownHostsFile.verifyHostKeys7,mmDOOXs;) ;) ;Vy))r$c$V^8dQhRRRRRR/#)rrarr7rrrr )r!s"r"r#rs!5s{r$c \^4pVP4p\V\W14WBR4pVPP V4V#)a Add a new L{HashedEntry} to the key database. Note that you still need to call L{KnownHostsFile.save} if you wish these changes to be persisted. @param hostname: A hostname or IP address literal to associate with the new entry. @type hostname: L{bytes} @param key: The public key to associate with the new entry. @type key: L{Key} @return: The L{HashedEntry} that was added. @rtype: L{HashedEntry} N)rrrrrrq)rBrar7saltr2rs&&& r"rKnownHostsFile.addHostKeysE"B++-D-"?tT 5! r$cV^8dQhRR/#)rrr>r )r!s"r"r#rsdr$c  VPP4pVP4'gVP4VP'dRMRpVPP V4;_uu_4pVP 'dVTPRPVP Uu.uFqDP4NK up4R,4.VnRRR4RVnR#uupi +'giL;i)z= Save this L{KnownHostsFile} to the path it was loaded from. war+NF) rparentisdirmakedirsrrrwriterort)rBpmode hostsFileObjrs& r"rKnownHostsFile.saves NN ! ! #wwyy JJL)-#C ^^  & &,{{{""JJdkkJkU 0kJKeS! '   K' &s:7C81C3 C83C88 D c V^8dQhRRRR/#)rrrrrr )r!s"r"r#r!s  M n r$c $V!V4pRVnV#)au Create a new L{KnownHostsFile}, potentially reading existing known hosts information from the given file. @param path: A path object to use for both reading contents from and later saving to. If no file exists at this path, it is not an error; a L{KnownHostsFile} with no entries is returned. @return: A L{KnownHostsFile} initialized with entries from C{path}. F)r)r^r knownHostss&& r"fromPathKnownHostsFile.fromPath sY # r$)rrrN)rLrMrNrOrPrCpropertyrrrrrrrvr rQr r$r"rrPsO  >]tRtRtRtRRltRRltRRltR tR #) ri1zz A UI object that can ask true/false questions and post notifications on the console, to be used during key verification. c V^8dQhRRRR/#)ropenerzCallable[[], IO[bytes]]rr>r )r!s"r"r#ConsoleUI.__annotate__7s64r$c WnR#)a @param opener: A no-argument callable which should open a console binary-mode file-like object to be used for reading and writing. This initializes the C{opener} attribute. @type opener: callable taking no arguments and returning a read/write file-like object Nr)rBrs&&r"rCConsoleUI.__init__7s  r$c V^8dQhRRRR/#)rtextrrrr )r!s"r"r#rAs##5#^#r$c baa\P!R4pVV3RlpVPV4#)aw Write the given text as a prompt to the console output, then read a result from the console input. @param text: Something to present to a user to solicit a yes or no response. @type text: L{bytes} @return: a L{Deferred} which fires with L{True} when the user answers 'yes' and L{False} when the user answers 'no'. It may errback if there were any I/O errors. NcZ<\SP44;_uu_4pVPS4VP4P 4P 4pVR8Xd RRR4R#VR9d RRR4R#VPR4Kd +'giR#;i)TsyesNFsPlease type 'yes' or 'no': >r$no)rrrreadliner&lower)ignoredfanswerrBrs& r"bodyConsoleUI.prompt..bodyPs''1 ZZ\//1779F'# ('  </$(' >?(''sAB4BB B* )rsucceedr)rBrdrsff r"rConsoleUI.promptAs* MM$  @}}T""r$c V^8dQhRRRR/#)rrrrr>r )r!s"r"r#r^s 6 6 64 6r$c \VP44;_uu_4pVPV4RRR4R# +'giR#;i \d\P R4R#i;i)z Notify the user (non-interactively) of the provided text, by writing it to the console. @param text: Some information the user is to be made aware of. NzFailed to write to console)rrr Exceptionlogfailure)rBrrs&& r"rConsoleUI.warn^sO 6''1 (''' 6 KK4 5 6s+!A?A A AA A76A7rN) rLrMrNrOrPrCrrrQr r$r"rr1s #: 6 6r$r)7rP __future__rrrbinasciirrrr contextlibrhashlibrtypingrr r r zope.interfacer twisted.conch.errorr rrtwisted.conch.interfacesrtwisted.conch.ssh.keysrrrtwisted.internetrtwisted.internet.deferrtwisted.loggerrtwisted.python.compatrtwisted.python.filepathrtwisted.python.randbytesrtwisted.python.utilrr&r'r8r:rSrzrrrrr r$r"r9s  # AA22&MM4GG"+!.,1, h!,4B _I!I!I!X _#*#*#*L" _]!*l]!]!@^^B8686r$