ProPeler
Home
Console
Upload
information
Create File
Create Folder
About
Tools
:
/
opt
/
cpanel-ccs
/
txweb2
/
auth
/
Filename :
tls.pyc
back
Copy
� �t�ac @ s� d Z d d d g Z d d l m Z d d l m Z m Z m Z d d l m Z d d l m Z d e f d � � YZ d e f d � � YZ d e f d � � YZ d S( s/ TLS client certificate authentication module. t TLSCredentialst TLSCredentialsFactoryt TLSCredentialsCheckeri����( t implements( t checkerst credentialst error( t succeed( t IPrincipalCredentialsc B s< e Z d Z e e j � d Z d Z d d � Z d � Z RS( sK Credentials for TLS auth - basically just the client certificate. s X-TLS-Client-Certificates X-TLS-Client-User-Namec C se | | _ | d k rX y# | j � j j d � d | _ Wqa t k rT d | _ qa Xn | | _ d S( Nt @i ( t certificatet Nonet getSubjectt emailAddresst splitt usernamet KeyError( t selfR R ( ( s" /opt/cpanel-ccs/txweb2/auth/tls.pyt __init__, s # c C s | j j � S( N( R R ( R ( ( s" /opt/cpanel-ccs/txweb2/auth/tls.pyR 8 s N( t __name__t __module__t __doc__R R t ICredentialst CERTIFICATE_HEADERt USERNAME_HEADERR R R ( ( ( s" /opt/cpanel-ccs/txweb2/auth/tls.pyR " s c B s8 e Z d Z d Z d d d d � Z d � Z d � Z RS( sg Authorizer for TLS authentication (http://tools.ietf.org/html/draft-thomson-httpbis-cant-01). t clientcertificatec C s | | _ | | _ | | _ d S( s@ @param realm: realm for authentication, or L{None} for no realm @type realm: L{str} @param dn: list DNs for acceptable CA certs @type dn: L{list} of L{str} @param sha256: list of sha-256 fingerprint values for acceptable CA certs @type sha256: L{list} of L{str} N( t realmt dnt sha256( R R R R ( ( s" /opt/cpanel-ccs/txweb2/auth/tls.pyR C s c C s[ i } | j r | j | d <n | j r8 | j | d <n | j rQ | j | d <n t | � S( NR R s sha-256( R R R R ( R t _ignore_peert challenge( ( s" /opt/cpanel-ccs/txweb2/auth/tls.pyt getChallengeQ s c C s t | � S( N( R ( R R t request( ( s" /opt/cpanel-ccs/txweb2/auth/tls.pyt decode[ s N( R R R t schemeR R R R! ( ( ( s" /opt/cpanel-ccs/txweb2/auth/tls.pyR < s c B s' e Z e e j � e f Z d � Z RS( c C sW t | � } | j } t | t � r: t | j | j f � St j d | j f � � d S( Ns Bad credentials for: %s( R R t isinstanceR R t authnPrincipalt authzPrincipalR t UnauthorizedLogint authnURI( R R t pcredst creds( ( s" /opt/cpanel-ccs/txweb2/auth/tls.pyt requestAvatarIde s ( R R R R t ICredentialsCheckerR t credentialInterfacesR* ( ( ( s" /opt/cpanel-ccs/txweb2/auth/tls.pyR _ s N( R t __all__t zope.interfaceR t twisted.credR R R t twisted.internet.deferR t txweb2.dav.authR t objectR R R ( ( ( s" /opt/cpanel-ccs/txweb2/auth/tls.pyt <module> s #