+ i#aR0t0tRt^RIt^RIt^RIHtHtHt^RIH t ^RI H t ^RI H t ^RIHt]P !]4tRRRR R R R R RR./tRRRRRR RR RRR./RRRRRR RR RRR./RRRRRR RR RRR./RRRRRR RR RRR./RRRRRR RR RRR .//tR1Ft]R,]]&K R2Ft]R,]]&K .R3OtR!R"R#]R$]R%R&R'./t]^kR(tR)tR*tR+tR,tR-tR.R/ltR#)4zCA Certs: Add ca certificates.N) lifecyclesubputil)Cloud)Config) MetaSchema) PER_INSTANCE ca_cert_pathca_cert_local_pathz!/usr/local/share/ca-certificates/ca_cert_filenamez#cloud-init-ca-cert-{cert_index}.crtca_cert_configz/etc/ca-certificates.confca_cert_update_cmdzupdate-ca-certificatesaoscz/etc/ssl/certs/z#cloud-init-ca-cert-{cert_index}.pemz+/etc/ca-certificates/conf.d/cloud-init.confzupdate-ca-bundlefedoraz/etc/pki/ca-trust/z/usr/share/pki/ca-trust-source/z+anchors/cloud-init-ca-cert-{cert_index}.crtzupdate-ca-trustrhelopensusez/etc/pki/trust/z/usr/share/pki/trust/photonz/etc/pki/tls/certs/zrehash_ca_certificates.shid cc_ca_certsdistros frequencyactivate_by_schema_keysca_certsca-certsc\PV\4p\PP VR,VR,4VR&V#)zReturn a distro-specific ca_certs config dictionary @param distro_name: String providing the distro class name. @returns: Dict of distro configurations for ca_cert. r r ca_cert_full_path)DISTRO_OVERRIDESgetDEFAULT_CONFIGospathjoin) distro_namecfgs& >/usr/lib/python3/dist-packages/cloudinit/config/cc_ca_certs.py_distro_ca_certs_configsr%osF   {N ;C!ww|| !3'9#: C JcD\P!VR,RR7R#)z Updates the CA certificate cache on the current machine. @param distro_cfg: A hash providing _distro_ca_certs_configs function. r F)captureN)r distro_cfgs&r$update_ca_certsr+|s  IIj-.>r&cV'gR#\V^4FAwr#\V4pVR,PVR7p\P!WTRR7KC R#)a Adds certificates to the system. To actually apply the new certificates you must also call the appropriate distro-specific utility such as L{update_ca_certs}. @param distro_cfg: A hash providing _distro_ca_certs_configs function. @param certs: A list of certificate strings. Nr) cert_indexi)mode) enumeratestrformatr write_file)r*certsr-ccert_file_contentscert_file_names&& r$ add_ca_certsr7sV "5!,  V#$78??!@  G -r&cVR9d\V4R#VR9d1\V4VR9dRp\P!RVR7R#R#R#)a Disables all default trusted CA certificates. For Alpine, Debian and Ubuntu to actually apply the changes you must also call L{update_ca_certs}. @param distro_name: String providing the distro class name. @param distro_cfg: A hash providing _distro_ca_certs_configs function. )dataN)rr)alpinerdebianraspberry-pi-osubuntu)r;r<r=z8ca-certificates ca-certificates/trust_new_crts select no)zdebconf-set-selections-)remove_default_ca_certsdisable_system_ca_certsr)r"r* debconf_sels&& r$disable_default_ca_certsrBsY(( +   + A AO  II5K H B r&cvVR,pV'd&\PPV4'gR#RpRp\P!V4P'd\ P !V4p.pVP4FypWb8XdRpVPV4KVR8XgV^,R 9dVPV4KFV'gVPV4RpVPRV,4K{ \ P!VRPV4R,R R 7R#R#) z For every entry in the CA_CERT_CONFIG file prefix the entry with a "!" in order to disable it. @param distro_cfg: A hash providing _distro_ca_certs_configs function. r Nz;# Modified by cloud-init to deselect certs due to user-dataFT! wb)omode)#rE) rr existsstatst_sizerload_text_file splitlinesappendr2r!)r*ca_cert_cfg_fnheader_comment added_headerorig out_lineslines& r$r@r@s 01N !?!? FL ww~&&&"">2 OO%D%#   &tAw*4  &#$$^4#'L  t,&  DIIi047t 'r&cVR,fR#\PR4\P!VR,4\P!VR,4R#)z Removes all default trusted CA certificates from the system. @param distro_cfg: A hash providing _distro_ca_certs_configs function. r NzDeleting system CA certificatesr )LOGdebugrdelete_dir_contentsr)s&r$r?r?sF .!)II/0Z78Z(<=>r&c LV^8dQhR\R\R\R\RR/#)namer#cloudargsreturnN)r0rrlist)r1s"r$ __annotate__ras/8 8 8 68 %8 t8 8 r&chRV9d\P!RRRR7MRV9d\PRV4R#RV9dRV9d\P R 4VP RVP R44p\ V\4'g \R 4h\VPP4pR V9d\P!R RR R7VP RVP R R44'd6\PR4\VPPV4RV9dJ\P!VR4pV'd+\PR\V44\!WV4\PR4\#V4R#)aY Call to handle ca_cert sections in cloud-config file. @param name: The module name "ca_cert" from cloud.cfg @param cfg: A nested dict containing the entire cloud config contents. @param cloud: The L{CloudInit} object in use. @param log: Pre-initialized Python logger object to use for logging. @param args: Any module arguments from cloud.cfg rzKey 'ca-certs'z22.1zUse 'ca_certs' instead.) deprecateddeprecated_version extra_messagerzrs % ++!#.+ !D==134  )/AG12   ,?I$01  ,?I$01  )5I$78  -/A$:; ;$LF 0 ;VF 07V  . - w J7  ?H*I6$ N ?8 r&