
    z%i$                        	 d dl Z d dlZd dlZd dlZd dl dZdZdZe j                  j                  e j                  j                  e            Z	 	 d/dZdZd Zd	 Zd
 Zedk(  r e j&                  e        edd      \  ZZ edd      5 Zej1                  e       ddd        edd      5 Zej1                  e       ddd        ed        eg d        eg d        edd      5 Zej1                  e       ej1                  e       ddd        edd      5 Zej1                  e       ddd        e         edd      \  ZZ edd      5 Zej1                  e       ej1                  e       ddd        edd      \  ZZ edd      5 Zej1                  e       ej1                  e       ddd        edd      \  ZZ edd      5 Zej1                  e       ej1                  e       ddd        eddd       \  ZZ ed!d      5 Zej1                  e       ej1                  e       ddd       g d"Z ed#dd$j9                  e      %      \  ZZ ed&d      5 Zej1                  e       ej1                  e       ddd       g d'Z ed(dd$j9                  e      %      \  ZZ ed)d      5 Zej1                  e       ej1                  e       ddd        ed*dd+,      \  ZZ ed-d      5 Zej1                  e       ej1                  e       ddd        e         ed.        ed        ed       yy# 1 sw Y   xY w# 1 sw Y   xY w# 1 sw Y   `xY w# 1 sw Y   JxY w# 1 sw Y   xY w# 1 sw Y   xY w# 1 sw Y   xY w# 1 sw Y   rxY w# 1 sw Y   *xY w# 1 sw Y   xY w# 1 sw Y   xY w)0    N)*20180829142316Z20371028142316Za
  
    [ default ]
    base_url               = http://testca.pythontest.net/testca

    [req]
    distinguished_name     = req_distinguished_name
    prompt                 = no

    [req_distinguished_name]
    C                      = XY
    L                      = Castle Anthrax
    O                      = Python Software Foundation
    CN                     = {hostname}

    [req_x509_extensions_nosan]

    [req_x509_extensions_simple]
    subjectAltName         = @san

    [req_x509_extensions_full]
    subjectAltName         = @san
    keyUsage               = critical,keyEncipherment,digitalSignature
    extendedKeyUsage       = serverAuth,clientAuth
    basicConstraints       = critical,CA:false
    subjectKeyIdentifier   = hash
    authorityKeyIdentifier = keyid:always,issuer:always
    authorityInfoAccess    = @issuer_ocsp_info
    crlDistributionPoints  = @crl_info

    [ issuer_ocsp_info ]
    caIssuers;URI.0        = $base_url/pycacert.cer
    OCSP;URI.0             = $base_url/ocsp/

    [ crl_info ]
    URI.0                  = $base_url/revocation.crl

    [san]
    DNS.1 = {hostname}
    {extra_san}

    [dir_sect]
    C                      = XY
    L                      = Castle Anthrax
    O                      = Python Software Foundation
    CN                     = dirname example

    [princ_name]
    realm = EXP:0, GeneralString:KERBEROS.REALM
    principal_name = EXP:1, SEQUENCE:principal_seq

    [principal_seq]
    name_type = EXP:0, INTEGER:1
    name_string = EXP:1, SEQUENCE:principals

    [principals]
    princ1 = GeneralString:username

    [ ca ]
    default_ca      = CA_default

    [ CA_default ]
    dir = cadir
    database  = $dir/index.txt
    crlnumber = $dir/crl.txt
    default_md = sha256
    startdate = {startdate}
    default_startdate = {startdate}
    enddate = {enddate}
    default_enddate = {enddate}
    default_days = 7000
    default_crl_days = 7000
    certificate = pycacert.pem
    private_key = pycakey.pem
    serial    = $dir/serial
    RANDFILE  = $dir/.rand
    policy          = policy_match

    [ policy_match ]
    countryName             = match
    stateOrProvinceName     = optional
    organizationName        = match
    organizationalUnitName  = optional
    commonName              = supplied
    emailAddress            = optional

    [ policy_anything ]
    countryName   = optional
    stateOrProvinceName = optional
    localityName    = optional
    organizationName  = optional
    organizationalUnitName  = optional
    commonName    = supplied
    emailAddress    = optional


    [ v3_ca ]

    subjectKeyIdentifier=hash
    authorityKeyIdentifier=keyid:always,issuer
    basicConstraints = CA:true

    c                    t        d| z          g }t        d      D ]<  }t        j                  d      5 }|j	                  |j
                         d d d        > |\  }}	}
	 t        j                  | |t        t              }t        |d      5 }|j                  |       d d d        ddd	d
dd|d|
d|d|g}|rNt        j                  d      5 }|j	                  |j
                         |j
                  }d d d        |dgz  }n|dd|	gz  }t        dg|z          |rdd|d|d|	ddddddg}t        dg|z          t        |	d      5 }|j                         }d d d        t        |
d      5 }|j                         }d d d        |f|D ]  }t        j                  |        S # 1 sw Y   xY w# 1 sw Y   xY w# 1 sw Y   xY w# 1 sw Y   txY w# 1 sw Y   [xY w# |D ]  }t        j                  |        w xY w)Nzcreating cert for    F)deletehostname	extra_san	startdateenddatewreq-new-nodesz-days7000-newkey-keyout-extensions-config-outz-x509opensslca-outdircadirz-policypolicy_anything-batch-infilesr)printrangetempfileNamedTemporaryFileappendnamereq_templateformatr   r   openwrite
check_callreadosremove)r
   signr   extkey	tempnamesifreq_file	cert_filekey_filer   argsreqfilecertr%   s                   G/home/uftp/.pyenv/versions/3.12.0/lib/python3.12/test/make_ssl_certs.pymake_cert_keyr;   w   s;   	

)*I1X %((6 	%!QVV$	% 	%% %.!Hi+!!	 " 
 (C  	AGGCL	vx&3	8s8% ,,E: !a  (&&! VW&&D Wfi11DI;%&8s	7,*gD 	{T)* )S! 	Q668D	(C  	A&&(C	Sy 	DIIdO	[	% 	%	 	! !,	 		 	  	DIIdO	sx   F*"-G( F7!/G( (G8AG( GG( 1GG( *F4	7G<G( G	G( GG( G%!G( (Hr   c                  6    t        j                  t               y )N)shutilrmtree	TMP_CADIR     r:   	unmake_carB      s    
MM)rA   c                  $   t        j                  t               t        t         j                  j                  dd      d      5 } 	 d d d        t        t         j                  j                  dd      d      5 } | j                  d       d d d        t        t         j                  j                  dd      d      5 } | j                  d       d d d        t        t         j                  j                  dd	      d
      5 } | j                  d       d d d        t        j                  d
      5 }t        j                  ddt        t              }|j                  |       |j                          t        j                         5 } dd|j                  ddddddd| j                  ddg}t        dg|z          dd|j                  ddddt        ddd d!d"d#| j                  g}t        dg|z          dd|j                  d$dd%g}t        dg|z          d d d        d d d        t        g d&       t!        j"                  d'd(       y # 1 sw Y   xY w# 1 sw Y   xY w# 1 sw Y   xY w# 1 sw Y   ]xY w# 1 sw Y   ixY w# 1 sw Y   mxY w))Nr   z	index.txta+zcrl.txt00zindex.txt.attrzw+zunique_subject = noserialr   zCB2D80995A69525B
zour-ca-server r	   r   r   r   r   r   rsa:3072r   zpycakey.pemr   z-subjzG/C=XY/L=Castle Anthrax/O=Python Software Foundation CA/CN=our-ca-serverr   r   pycacert.pemr   r   z-keyfilez	-selfsignr   v3_car   z-gencrlzrevocation.crl)r   x509-inrI   r   capath/ceff1710.0rM   zcapath/b1930218.0)r,   mkdirr?   r(   pathjoinr)   r"   r#   r&   r'   r   r   flushr%   r*   r=   copy)r3   tr   r7   s       r:   make_carT      sG   HHY	bggll7;/	5 	bggll79-d	3 q		bggll7#34T	: 'a	%&' 
bggll78,c	2 &a	$%& 
	$	$S	) +Q!!$	 " 
 	
		((* 	+a9afffz}AFFfhD 	{T)*)QVVNHiQVVND 	{T)*)QVVY@PQD	{T)*	++4    KK#%89O  ' '& &	+ 	++ +sV   I8I<I  I-/AJBI:JII I*-I7:J	?JJc                 T    dd l }t        j                  |j                  |              y )Nr   )_sslpprint_test_decode_cert)rO   rV   s     r:   
print_certrY      s    
MM$((./rA   __main__	localhostreq_x509_extensions_simple)r/   zssl_cert.pemr   ssl_key.pemz5password protecting ssl_key.pem in ssl_key.passwd.pem)	r   pkeyrL   r]   r   zssl_key.passwd.pem-aes256-passoutpass:somepass)	r   r^   rL   r]   r   keycert.passwd.pemr_   r`   ra   zkeycert.pemrb   rD   fakehostnamezkeycert2.pemT)r.   zkeycert3.pemzkeycert4.pemzlocalhost-ecczparam:secp384r1.pem)r.   r0   zkeycertecc.pem)	z0otherName.1 = 1.2.3.4;UTF8:some other identifierz/otherName.2 = 1.3.6.1.5.2.2;SEQUENCE:princ_namezemail.1 = user@example.orgzDNS.2 = www.example.orgzdirName.1 = dir_sectzURI.1 = https://www.python.org/zIP.1 = 127.0.0.1z
IP.2 = ::1zRID.1 = 1.2.3.4.5allsans
)r.   r   zallsans.pem)z'DNS.2 = xn--knig-5qa.idn.pythontest.netz6DNS.3 = xn--knigsgsschen-lcb0w.idna2003.pythontest.netz6DNS.4 = xn--knigsgchen-b4a3dun.idna2008.pythontest.netz,DNS.5 = xn--nxasmq6b.idna2003.pythontest.netz,DNS.6 = xn--nxasmm1c.idna2008.pythontest.netidnsanszidnsans.pemnosanreq_x509_extensions_nosan)r.   r/   z	nosan.pemz>update Lib/test/test_ssl.py and Lib/test/test_asyncio/utils.py)FrG   req_x509_extensions_fullrH   )r,   rW   r=   r"   
subprocessr   r   r&   rO   abspathdirname__file__herer;   r?   rB   rT   rY   __name__chdirr9   r0   r(   r3   r)   r    r*   r   rP   r@   rA   r:   <module>rq      s   
    	
eN 
wwrwwx01 356@3j 	):X0
 zBHHTNk/KLID#	nc	" a		mS	! Q		
ABvwvw	mS	! Q		 
"D	) Q	 In2NOID#	nc	" a		 k5ID#	nc	" a		 n48ID#	nc	" a		 d(=ID# 
	$ 		I iddii	>RSID#	mS	! Q			I iddii	>RSID#	mS	! Q		 gD6QRID#	k3	 1		 K	
JK}~m      
 
  & " 
 s   M3M&2#M3&N #N#N#N'!#N46#O#O#OM#&M03M= N
NN$'N14N>OOO#