⚝
One Hat Cyber Team
⚝
Your IP:
216.73.216.184
Server IP:
97.74.87.16
Server:
Linux 16.87.74.97.host.secureserver.net 5.14.0-503.38.1.el9_5.x86_64 #1 SMP PREEMPT_DYNAMIC Fri Apr 18 08:52:10 EDT 2025 x86_64
Server Software:
Apache
PHP Version:
8.2.28
Buat File
|
Buat Folder
Eksekusi
Dir :
~
/
var
/
opt
/
nydus
/
ops
/
oscrypto
/
_mac
/
__pycache__
/
View File Name :
trust_list.cpython-39.pyc
a ���gb � @ s� d dl mZmZmZmZ d dlZd dlZddlmZ ddl m Z m Z ddl m Z mZ ddlmZmZmZ ejd k rveZd d gZd d � Zddd �Zdd� Zdd� ZdS )� )�unicode_literals�division�absolute_import�print_functionN� )� Certificate)�new�unwrap� )�CoreFoundation� CFHelpers)�Security� SecurityConst�handle_sec_error)� �extract_from_system� system_pathc C s d S )N� r r r �I/opt/nydus/tmp/pip-target-mke_irhy/lib/python/oscrypto/_mac/trust_list.pyr s Fc C s� t td�}t�|�}t|� t|�}i }i }d}t� t� f}t�|�} td| �D ]$} t� || �} t | �\} } | || < qPt� |� t j t jfD �]�}t td�}t�||�}|t jkr�q�t|� t|�}t�|�} td| �D �]l} t� || �} t td�}t�| ||�}|t jk�rq�|t jk�rHt | �\} } | |v r�t| || d� || = q�t|� t|�}t� }t� }t�|�}td|�D ]j}t� ||�}t�|�}|�di ��d|�}|�dd�}|dk�o�|d k}|�r�|�|� n |�|� �qxt | �\} } ||v �r | |v �r<t| || d � || = n ||v �r0t|g�}||f|| < t� |� q�t� |� q�g } |D ]D} |�svt| || d � |�| |�} | �|| | d | d f� �q\| S ) a� Extracts trusted CA certificates from the OS X trusted root keychain. :param cert_callback: A callback that is called once for each certificate in the trust store. It should accept two parameters: an asn1crypto.x509.Certificate object, and a reason. The reason will be None if the certificate is being exported, otherwise it will be a unicode string of the reason it won't. :param callback_only_on_failure: A boolean - if the callback should only be called when a certificate is not exported. :raises: OSError - when an error is returned by the OS crypto library :return: A list of 3-element tuples: - 0: a byte string of a DER-encoded certificate - 1: a set of unicode strings that are OIDs of purposes to trust the certificate for - 2: a set of unicode strings that are OIDs of purposes to reject the certificate for z CFArrayRef *z 2.5.29.37.0r zinvalid trust settingsZkSecTrustSettingsPolicyZ SecPolicyOidZkSecTrustSettingsResultr r zexplicitly distrustedN)r r r Z SecTrustCopyAnchorCertificatesr r �setZCFArrayGetCount�rangeZCFArrayGetValueAtIndex� _cert_details� CFReleaser ZkSecTrustSettingsDomainUserZ kSecTrustSettingsDomainAdminZ SecTrustSettingsCopyCertificatesZerrSecNoTrustSettingsZ!SecTrustSettingsCopyTrustSettingsZerrSecItemNotFoundZerrSecInvalidTrustSettings�_cert_callbackr Zcf_dictionary_to_dict�get�add�append) Z cert_callbackZcallback_only_on_failureZcerts_pointer_pointer�resZ certs_pointerZ certificatesZ trust_infoZ all_purposesZ default_trust�length�index� cert_pointer�der_cert� cert_hash�domainZ#cert_trust_settings_pointer_pointerZcert_trust_settings_pointerZ trust_settings_pointer_pointerZtrust_settings_pointerZ trust_oidsZ reject_oidsZsettings_lengthZsettings_indexZsettings_dict_entryZ settings_dictZ policy_oidZ trust_resultZ should_trust�outputZcert_trust_infor r r r s� � � c C s | sdS | t �|�|� dS )aY Constructs an asn1crypto.x509.Certificate object and calls the export callback :param callback: The callback to call :param der_cert: A byte string of the DER-encoded certificate :param reason: None if cert is being exported, or a unicode string of the reason it is not being exported N)r �load)�callbackr! �reasonr r r r � s r c C s^ d}z@t �| �}t�|�}t�|��� }||fW |durBt�|� S n|durXt�|� 0 dS )a Return the certificate and a hash of it :param cert_pointer: A SecCertificateRef :return: A 2-element tuple: - [0]: A byte string of the SHA1 hash of the cert - [1]: A byte string of the DER-encoded contents of the cert N) r ZSecCertificateCopyDatar Zcf_data_to_bytes�hashlib�sha1�digestr r )r Z data_pointerr! r" r r r r � s � �r )NF)� __future__r r r r r( �sysZ_asn1r Z_ffir r Z_core_foundationr r Z _securityr r r � version_info�xranger �__all__r r r r r r r r �<module> s �