1#@!#!123s

: / proc / thread-self / root / usr / share / crypto-policies / python / policygenerators /

Filename : krb5.py

back

# SPDX-License-Identifier: LGPL-2.1-or-later

# Copyright (c) 2019 Red Hat, Inc.
# Copyright (c) 2019 Tomáš Mráz <tmraz@fedoraproject.org>

from .configgenerator import ConfigGenerator


class KRB5Generator(ConfigGenerator):
	CONFIG_NAME = 'krb5'
	SCOPES = {'kerberos', 'krb5'}

	cipher_map = {
		'CAMELLIA-256-CBC':'camellia256-cts-cmac',
		'CAMELLIA-128-CBC':'camellia128-cts-cmac',
		'CAMELLIA-128-CTS':'camellia128-cts-cmac'
	}

	cipher_mac_map = {
		'AES-256-CBC-HMAC-SHA1':'aes256-cts-hmac-sha1-96',
		'AES-256-CBC-HMAC-SHA2-384':'aes256-cts-hmac-sha384-192',
		'AES-128-CBC-HMAC-SHA1':'aes128-cts-hmac-sha1-96',
		'AES-128-CBC-HMAC-SHA2-256':'aes128-cts-hmac-sha256-128',
		# 'RC4-128-HMAC-MD5':'arcfour-hmac-md5'  # forced last, see below
	}

	@classmethod
	def generate_config(cls, policy):
		p = policy.enabled
		sep = ' '

		cfg = '[libdefaults]\n'
		cfg += 'permitted_enctypes = '
		s = ''
		for j in p['mac']:
			for i in p['cipher']:
				try:
					s = cls.append(s, cls.cipher_mac_map[i + '-' + j], sep)
				except KeyError:
					pass
		for i in p['cipher']:
			try:
				s = cls.append(s, cls.cipher_map[i], sep)
			except KeyError:
				pass
		if 'RC4-128' in p['cipher'] and 'HMAC-MD5' in p['mac']:
			s = cls.append(s, 'arcfour-hmac-md5', sep)

		cfg += s + '\n'

		# By default libkrb5 sets the min_bits to 2048, don't
		# go lower than that.
		if policy.integers['min_dh_size'] > 2048:
			# $string .= "pkinit_dh_min_bits=$min_dh_size\n";
			# krb5.conf only accepts 2048 or 4096
			cfg += 'pkinit_dh_min_bits=4096\n'

		return cfg

	@classmethod
	def test_config(cls, config):  # pylint: disable=unused-argument
		return True

Name	Size	Last Modified	Owner	Permissions
__pycache__	Dir	December 10 2023 3:44:18	root	0755
__init__.py	0.817 KB	August 01 2023 3:18:06	root	0644
bind.py	2.226 KB	August 01 2023 3:18:06	root	0644
configgenerator.py	0.392 KB	August 01 2023 3:18:06	root	0644
gnutls.py	5.474 KB	August 01 2023 3:18:06	root	0644
java.py	3.581 KB	August 01 2023 3:18:06	root	0644
krb5.py	1.609 KB	August 01 2023 3:18:06	root	0644
libreswan.py	4.714 KB	August 01 2023 3:18:06	root	0644
libssh.py	4.015 KB	August 01 2023 3:18:06	root	0644
nss.py	4.785 KB	August 01 2023 3:18:06	root	0644
openssh.py	8.184 KB	August 01 2023 3:18:06	root	0644
openssl.py	5.455 KB	August 01 2023 3:18:06	root	0644

2017 © D7net \| D704T team