U
vf> @ s d Z ddlZddlZddlZddlZddlZddlZddlZddlZddl m
Z
ddl m Z ddl m
Z
mZ ddlmZmZ ddlmZ ddlmZmZ dd lmZmZ ed
Zd Zed Z d
Z dZ dZ e e dZ e!e " D ]\Z#Z$e$e e# d< qG dd dZ%G dd dej&Z'G dd de'Z(G dd de'Z)dd Z*G d d d Z+G d d d e%Z,G d d! d!Z-G d"d# d#e%Z.G d$d% d%eZ/dS )&z
SSH Agent interface
N)DEBUG)select)io_sleepbyte_chr) SSHExceptionAuthenticationException)Message)PKeyUnknownKeyType)asbytes
get_logger
)z rsa-sha2-256z rsa-sha2-512z-cert-v01@openssh.comc @ s< e Zd Zdd Zdd Zdd Zdd Zd d
Zd d Zd
S )AgentSSHc C s d | _ d| _d S N )_conn_keysselfr r ?/opt/alt/python38/lib/python3.8/site-packages/paramiko/agent.py__init__> s zAgentSSH.__init__c C s | j S )a
Return the list of keys available through the SSH agent, if any. If
no SSH agent was running (or it couldn't be contacted), an empty list
will be returned.
This method performs no IO, just returns the list of keys retrieved
when the connection was made.
:return:
a tuple of `.AgentKey` objects representing keys available on the
SSH agent
)r r r r r get_keysB s
zAgentSSH.get_keysc C sd || _ | t\}}|tkr$tdg }t| D ] }|t| | |
d q4t || _ d S )Nz!could not get keys from ssh-agent)agentblobcomment)
r
_send_message cSSH2_AGENTC_REQUEST_IDENTITIES SSH2_AGENT_IDENTITIES_ANSWERr rangeZget_intappendAgentKey
get_binaryget_texttupler )r connptyperesultkeysir r r _connectQ s zAgentSSH._connectc C s$ | j d k r| j d | _ d| _d S r )r closer r r r r _closea s
zAgentSSH._closec C sX t |}| jtdt|| | d}t| td|d }t |
|fS )Nz>Ir r ) r r sendstructpacklen _read_allr unpackordZget_byte)r msgdatar r r r g s
zAgentSSH._send_messagec C sb | j |}t||k r^t|dkr,td| j |t| }t|dkrTtd||7 }q |S )Nr lost ssh-agent)r recvr4 r )r wantedr+ extrar r r r5 n s
zAgentSSH._read_allN) __name__
__module__ __qualname__r r r. r0 r r5 r r r r r = s r c @ s0 e Zd ZdZdd Zdd Zdd Zdd Zd
S ) AgentProxyThreadz@
Class in charge of communication between two channels.
c C s" t jj| | jd || _d| _d S )N)targetF) threadingThreadr run_agent_exitr r r r r r s zAgentProxyThread.__init__c C sp z\| \}}|| _|| _| j t| jtsR| jjd ksJt| jjdsRt d|
W n Y nX d S )Nfilenoz Unable to connect to SSH agent) get_connection_AgentProxyThread__inrZ_AgentProxyThread__addrrF connect
isinstanceintr hasattrr _communicate)r raddrr r r rE s
zAgentProxyThread.runc C s dd l }| | j|j}| | j|j|tjB | jst| jj | jgg g d}|d D ]}| jj |kr| jj
d}t |dkr| j | q|
qqV| j|krV| j
d}t |dkr| jj | qV|
qqVtt q0d S )Nr g ?i )fcntlrK ZF_GETFLZF_SETFLos
O_NONBLOCKrG r rF r r; r4 r1 r0 timesleepr )r rS Zoldflagseventsfdr9 r r r rP s&
z AgentProxyThread._communicatec C s d| _ | j | jj d S )NT)rG rK r/ rF r r r r r r0 s
zAgentProxyThread._closeN)r> r? r@ __doc__r rE rP r0 r r r r rA z s
rA c @ s e Zd ZdZdd Zdd ZdS )AgentLocalProxyz
Class to be used when wanting to ask a local SSH Agent being
asked from a remote fake agent (so use a unix socket for ex.)
c C s t | | d S N)rA r rH r r r r s zAgentLocalProxy.__init__c C sT t t jt j}z0|| j |d | \}}||fW S Y nX dS )zX
Return a pair of socket object and string address.
May block!
N)socketAF_UNIX SOCK_STREAMbindrF
_get_filenamelistenaccept)r r) rQ rR r r r rJ s
z AgentLocalProxy.get_connectionNr> r? r@ rZ r rJ r r r r r[ s r[ c @ s e Zd ZdZdd Zdd ZdS )AgentRemoteProxyzA
Class to be used when wanting to ask a remote SSH Agent
c C s t | | || _d S r\ )rA r _AgentRemoteProxy__chan)r r Zchanr r r r s zAgentRemoteProxy.__init__c C s
| j d fS r\ )rg r r r r rJ s z AgentRemoteProxy.get_connectionNre r r r r rf s rf c C s dt jkrLtjdkrLttjtj} z| t jd | W S Y dS X nHtjdkrddlm }m
} d} | r|| } n| r|
} | S dS dS )zj
Returns some SSH agent object, or None if none were found/supported.
.. versionadded:: 2.10
SSH_AUTH_SOCKwin32Nr] ) win_pageant win_openssh)rT environsysplatformr^ r_ r` rL rj rk Zcan_talk_to_agentZPageantConnectionZOpenSSHAgentConnection)r) rj rk r r r get_agent_connection s
rp c @ s0 e Zd ZdZdd Zdd Zdd Zdd Zd
S ) AgentClientProxya
Class proxying request as a client:
#. client ask for a request_forward_agent()
#. server creates a proxy and a fake SSH Agent
#. server ask for establishing a connection when needed,
calling the forward_agent_handler at client side.
#. the forward_agent_handler launch a thread for connecting
the remote fake agent and the local agent
#. Communication occurs ...
c C s& d | _ || _t| || _| j d S r\ )r Z_AgentClientProxy__chanRrf threadstartr Z
chanRemoter r r r s zAgentClientProxy.__init__c C s | d S r\ r/ r r r r __del__
s zAgentClientProxy.__del__c C s t }|sdS || _dS )zJ
Method automatically called by ``AgentProxyThread.run``.
N)rp r r r) r r r rL
s zAgentClientProxy.connectc C s6 t | dr d| j_| jd | jdk r2| j dS )zh
Close the current connection and terminate the agent
Should be called manually
rr T N)rO rr rG joinr r/ r r r r r/ s
zAgentClientProxy.closeN)r> r? r@ rZ r rv rL r/ r r r r rq s
rq c @ s@ e Zd ZdZdd Zdd Zdd Zdd Zd
d Zd d
Z dS )AgentServerProxya
Allows an SSH server to access a forwarded agent.
This also creates a unix domain socket on the system to allow external
programs to also access the agent. For this reason, you probably only want
to create one of these.
:meth:`connect` must be called before it is usable. This will also load the
list of keys the agent contains. You must also call :meth:`close` in
order to clean up the unix socket and the thread that maintains it.
(:class:`contextlib.closing` might be helpful to you.)
:param .Transport t: Transport used for SSH Agent communication forwarding
:raises: `.SSHException` -- mostly if we lost the agent
c C sP t | || _td| _t| jtj | jd | _
t | | _ | j
d S )NZsshproxyz
/sshproxy.ssh)r r _AgentServerProxy__ttempfilemkdtemp_dirrT chmodstatS_IRWXU_filer[ rr rs )r tr r r r 4 s
zAgentServerProxy.__init__c C s | d S r\ ru r r r r rv = s zAgentServerProxy.__del__c C s2 | j }|d krtd|d | | d S )Nr: z
auth-agent)r{ Zopen_forward_agent_channelr set_namer. )r Z conn_sockr r r rL @ s
zAgentServerProxy.connectc C s8 t | j t | j d| j_| jd | dS )zk
Terminate the agent, clean the files, close connections
Should be called manually
Trx N) rT remover rmdirr~ rr rG ry r0 r r r r r/ G s
zAgentServerProxy.closec C s d| iS )z
Helper for the environment under unix
:return:
a dict containing the ``SSH_AUTH_SOCK`` environment variables
rh )rb r r r r get_envR s zAgentServerProxy.get_envc C s | j S r\ )r r r r r rb [ s z AgentServerProxy._get_filenameN)
r> r? r@ rZ r rv rL r/ r rb r r r r rz " s rz c @ s0 e Zd ZdZdd Zdd Zdd Zdd Zd
S ) AgentRequestHandlera
Primary/default implementation of SSH agent forwarding functionality.
Simply instantiate this class, handing it a live command-executing session
object, and it will handle forwarding any local SSH agent processes it
finds.
For example::
# Connect
client = SSHClient()
client.connect(host, port, username)
# Obtain session
session = client.get_transport().open_session()
# Forward local agent
AgentRequestHandler(session)
# Commands executed after this point will see the forwarded agent on
# the remote end.
session.exec_command("git clone https://my.git.repository/")
c C s" d | _ || _|| j g | _d S r\ )r Z_AgentRequestHandler__chanCZrequest_forward_agent_forward_agent_handler"_AgentRequestHandler__clientProxys)r Z
chanClientr r r r u s z AgentRequestHandler.__init__c C s | j t| d S r\ )r r$ rq rt r r r r { s z*AgentRequestHandler._forward_agent_handlerc C s | d S r\ ru r r r r rv ~ s zAgentRequestHandler.__del__c C s | j D ] }| qd S r\ )r r/ )r pr r r r/ s
zAgentRequestHandler.closeN)r> r? r@ rZ r r rv r/ r r r r r _ s
r c @ s e Zd ZdZdd Zdd ZdS )Agenta
Client interface for using private keys from an SSH agent running on the
local machine. If an SSH agent is running, this class can be used to
connect to it and retrieve `.PKey` objects which can be used when
attempting to authenticate to remote SSH servers.
Upon initialization, a session with the local machine's SSH agent is
opened, if one is running. If no agent is running, initialization will
succeed, but `get_keys` will return an empty tuple.
:raises: `.SSHException` --
if an SSH agent is found, but speaks an incompatible protocol
.. versionchanged:: 2.10
Added support for native openssh agent on windows (extending previous
putty pageant support)
c C s& t | t }|sd S | | d S r\ )r r rp r. rw r r r r s
zAgent.__init__c C s | dS )z1
Close the SSH agent connection.
N)r0 r r r r r/ s z Agent.closeN)r> r? r@ rZ r r/ r r r r r s r c s` e Zd ZdZdddZdd Zdd Zd d
Z fd d Zd
d Z e
dd Z dddZ Z
S )r% a
Private key held in a local SSH agent. This type of key can be used for
authenticating to a remote server (signing). Most other key operations
work as expected.
.. versionchanged:: 3.2
Added the ``comment`` kwarg and attribute.
.. versionchanged:: 3.2
Added the ``.inner_key`` attribute holding a reference to the 'real'
key instance this key is a proxy for, if one was obtainable, else None.
ro c C s| || _ || _|| _t|}| | _tt| _d | _ zt
j | j|d| _ W n, t k
rv d}|
t|| j Y nX d S )N)Zkey_type key_bytesz5Unable to derive inner_key for agent key of type {!r})r r r r r' namer __file___logger inner_keyr Zfrom_type_stringr
logr format)r r r r r8 errr r r r s
zAgentKey.__init__c O s | j j||S r\ )r r )r argskwargsr r r r s z AgentKey.logc C s | j r| j S | jS r\ )r r r r r r r r s zAgentKey.asbytesc C s | j S r\ )r r r r r get_name s zAgentKey.get_namec s | j d k r| j S t S r\ )r get_bitssuperr __class__r r r s
zAgentKey.get_bitsc C s | j dkrt|t| j |S )zO
Proxy any un-implemented methods/properties to the inner_key.
N)r AttributeErrorgetattr)r r r r r __getattr__ s
zAgentKey.__getattr__c C s | | jg}| jr | jjS |S r\ )r r r _fields)r fallbackr r r r s zAgentKey._fieldsNc C sb t }|t || || |t|d | j |\}}|t
krZt d| S )Nr z key cannot be used for signing)
r Zadd_bytecSSH2_AGENTC_SIGN_REQUESTZ
add_stringr Zadd_intALGORITHM_FLAG_MAPgetr r SSH2_AGENT_SIGN_RESPONSEr r& )r r9 algorithmr8 r* r+ r r r
sign_ssh_data s
zAgentKey.sign_ssh_data)ro )N)r> r? r@ rZ r r r r r r propertyr r
__classcell__r r r r r% s
r% )0rZ rT r^ r2 rm rC rV r| r loggingr r Zparamiko.commonr r Zparamiko.ssh_exceptionr r Zparamiko.messager Z
paramiko.pkeyr r
Z
paramiko.utilr r r! r" r r ZSSH_AGENT_RSA_SHA2_256ZSSH_AGENT_RSA_SHA2_512r listitemskeyvaluer rD rA r[ rf rp rq rz r r r% r r r r sH =;
+='"