python (3.12.0)
͑e$ d dl Z d dlZd dlZd dlZd dl dZdZdZe j j e j j e Z d/dZ
dZd Zd Zd
Zed k( r e j& e e
d d
\ ZZ edd 5 Zej1 e ddd edd 5 Zej1 e ddd ed eg d eg d edd 5 Zej1 e ej1 e ddd edd 5 Zej1 e ddd e e
dd
\ ZZ edd 5 Zej1 e ej1 e ddd e
d d \ ZZ ed d 5 Zej1 e ej1 e ddd e
dd \ ZZ ed d 5 Zej1 e ej1 e ddd e
d dd \ ZZ ed!d 5 Zej1 e ej1 e ddd g d"Z e
d#dd$j9 e % \ ZZ ed&d 5 Zej1 e ej1 e ddd g d'Z e
d(dd$j9 e % \ ZZ ed)d 5 Zej1 e ej1 e ddd e
d*dd+, \ ZZ ed-d 5 Zej1 e ej1 e ddd e ed. ed ed yy# 1 sw Y xY w# 1 sw Y xY w# 1 sw Y `xY w# 1 sw Y JxY w# 1 sw Y xY w# 1 sw Y xY w# 1 sw Y xY w# 1 sw Y rxY w# 1 sw Y *xY w# 1 sw Y xY w# 1 sw Y xY w)0 N)*20180829142316Z20371028142316Za
[ default ]
base_url = http://testca.pythontest.net/testca
[req]
distinguished_name = req_distinguished_name
prompt = no
[req_distinguished_name]
C = XY
L = Castle Anthrax
O = Python Software Foundation
CN = {hostname}
[req_x509_extensions_nosan]
[req_x509_extensions_simple]
subjectAltName = @san
[req_x509_extensions_full]
subjectAltName = @san
keyUsage = critical,keyEncipherment,digitalSignature
extendedKeyUsage = serverAuth,clientAuth
basicConstraints = critical,CA:false
subjectKeyIdentifier = hash
authorityKeyIdentifier = keyid:always,issuer:always
authorityInfoAccess = @issuer_ocsp_info
crlDistributionPoints = @crl_info
[ issuer_ocsp_info ]
caIssuers;URI.0 = $base_url/pycacert.cer
OCSP;URI.0 = $base_url/ocsp/
[ crl_info ]
URI.0 = $base_url/revocation.crl
[san]
DNS.1 = {hostname}
{extra_san}
[dir_sect]
C = XY
L = Castle Anthrax
O = Python Software Foundation
CN = dirname example
[princ_name]
realm = EXP:0, GeneralString:KERBEROS.REALM
principal_name = EXP:1, SEQUENCE:principal_seq
[principal_seq]
name_type = EXP:0, INTEGER:1
name_string = EXP:1, SEQUENCE:principals
[principals]
princ1 = GeneralString:username
[ ca ]
default_ca = CA_default
[ CA_default ]
dir = cadir
database = $dir/index.txt
crlnumber = $dir/crl.txt
default_md = sha256
startdate = {startdate}
default_startdate = {startdate}
enddate = {enddate}
default_enddate = {enddate}
default_days = 7000
default_crl_days = 7000
certificate = pycacert.pem
private_key = pycakey.pem
serial = $dir/serial
RANDFILE = $dir/.rand
policy = policy_match
[ policy_match ]
countryName = match
stateOrProvinceName = optional
organizationName = match
organizationalUnitName = optional
commonName = supplied
emailAddress = optional
[ policy_anything ]
countryName = optional
stateOrProvinceName = optional
localityName = optional
organizationName = optional
organizationalUnitName = optional
commonName = supplied
emailAddress = optional
[ v3_ca ]
subjectKeyIdentifier=hash
authorityKeyIdentifier=keyid:always,issuer
basicConstraints = CA:true
c t d| z g }t d D ]< }t j d 5 }|j |j
d d d > |\ }} }
t j | |t t } t |d 5 }|j | d d d ddd d
d d |d
|
d|d|g
} |rNt j d 5 }|j |j
|j
}
d d d | d
gz
} n| dd| gz
} t dg| z |r dd|d|d| dddddd
g} t dg| z t | d 5 }|j }d d d t |
d 5 }|j }d d d |f|D ] }t j | S # 1 sw Y xY w# 1 sw Y xY w# 1 sw Y xY w# 1 sw Y txY w# 1 sw Y [xY w# |D ] }t j | w xY w)Nzcreating cert for F)deletehostname extra_san startdateenddatewreq-new-nodesz-days7000-newkey-keyout -extensions-config-outz-x509opensslca-outdircadirz-policypolicy_anything-batch-infilesr)printrangetempfileNamedTemporaryFileappendname req_templateformatr r
openwrite
check_callreadosremove)r
signr extkey tempnamesifreq_file cert_filekey_filer argsreqfilecertr% s G/BuggyBox/python/3.12.0/bootstrap/lib/python3.12/test/make_ssl_certs.py
make_cert_keyr; w s;
)*I
1X %
(
(
6 %! QVV $ % %% %.!Hi+ !! "
(C
A
GGCL vx&3 8 s8% ,,E:
!a (&&
!
VW& &D
Wfi1 1DI;%& 8 s 7,*gD
{T) * )S
! Q668D
(C
A&&(C Sy D IIdO [ % %
!
!, D IIdO sx F*"-G( F7!/G( (G8AG( G G( 1G G( *F4 7G<G( G
G( GG( G%!G( ( Hr c 6 t j t y )N)shutilrmtree TMP_CADIR r: unmake_carB s
MM) rA c $ t j t t t j j dd d 5 } d d d t t j j dd d 5 } | j
d d d d t t j j dd d 5 } | j
d d d d t t j j dd d
5 } | j
d d d d t j d
5 }t j d d
t t }|j
| |j t j 5 } dd|j ddddddd| j ddg
}t dg|z dd|j dd d d t d dd d!d"d#| j g}t dg|z dd|j d$dd%g}t dg|z d d d d d d t g d& t! j" d'd( y # 1 sw Y xY w# 1 sw Y xY w# 1 sw Y xY w# 1 sw Y ]xY w# 1 sw Y ixY w# 1 sw Y mxY w))Nr z index.txta+zcrl.txt00zindex.txt.attrzw+zunique_subject = noserialr zCB2D80995A69525B
z
our-ca-server r r r r r r rsa:3072r z pycakey.pemr z-subjzG/C=XY/L=Castle Anthrax/O=Python Software Foundation CA/CN=our-ca-serverr r pycacert.pemr r z-keyfilez -selfsignr v3_car z-gencrlzrevocation.crl)r x509-inrI r capath/ceff1710.0rM zcapath/b1930218.0)r, mkdirr? r( pathjoinr) r" r# r& r' r r
flushr% r* r= copy)r3 tr r7 s r: make_carT sG HHY
bggll7;/ 5
bggll79-d 3 q
bggll7#34T : 'a %&'
bggll78,c 2 &a $%&
$ $S ) +Q!!$ "
(
(
* +a9afff z }AFF f hD
{T) *)QVVNHi
QVVND
{T) *)QVVY@PQD {T) * ++4 KK#%89O
' '& & + ++ +sV I8I<I I-/AJB I:JII I*-I7:J ?JJc T dd l }t j |j | y )Nr )_sslpprint_test_decode_cert)rO rV s r:
print_certrY s
MM$((./rA __main__ localhostreq_x509_extensions_simple)r/ z ssl_cert.pemr ssl_key.pemz5password protecting ssl_key.pem in ssl_key.passwd.pem) r pkeyrL r] r zssl_key.passwd.pem-aes256-passout
pass:somepass) r r^ rL r] r keycert.passwd.pemr_ r` ra z keycert.pemrb rD fakehostnamez keycert2.pemT)r. z keycert3.pemz keycert4.pemz
localhost-ecczparam:secp384r1.pem)r. r0 zkeycertecc.pem) z0otherName.1 = 1.2.3.4;UTF8:some other identifierz/otherName.2 = 1.3.6.1.5.2.2;SEQUENCE:princ_namezemail.1 = user@example.orgzDNS.2 = www.example.orgzdirName.1 = dir_sectz URI.1 = https://www.python.org/zIP.1 = 127.0.0.1z
IP.2 = ::1zRID.1 = 1.2.3.4.5allsans
)r. r z allsans.pem)z'DNS.2 = xn--knig-5qa.idn.pythontest.netz6DNS.3 = xn--knigsgsschen-lcb0w.idna2003.pythontest.netz6DNS.4 = xn--knigsgchen-b4a3dun.idna2008.pythontest.netz,DNS.5 = xn--nxasmq6b.idna2003.pythontest.netz,DNS.6 = xn--nxasmm1c.idna2008.pythontest.netidnsansz idnsans.pemnosanreq_x509_extensions_nosan)r. r/ z nosan.pemz>update Lib/test/test_ssl.py and Lib/test/test_asyncio/utils.py)FrG req_x509_extensions_fullrH ) r, rW r= r"
subprocessr r
r& rO abspathdirname__file__herer; r? rB rT rY __name__chdirr9 r0 r( r3 r) r r* r rP r@ rA r: <module>rq s
e N
wwrwwx01 356@3 j
):X0
z BHHTN k/KLID#
nc " a
mS ! Q
ABvwvw
mS ! Q
"D ) Q
I n2NOID#
nc " a
k5ID#
nc " a
n48ID#
nc " a
d(=ID#
$
I iddii >RSID#
mS ! Q
I iddii >RSID#
mS ! Q
gD6QRID#
k3 1
K
JK} ~ m
& "
s M3M&2#M3&N #N
#N #N'!#N46#O #O
#OM#&M03M= N
NN$'N14N>O OO#
Browse
Usage
Versions