mirror of
https://github.com/ansible-collections/community.crypto.git
synced 2026-03-31 15:53:24 +00:00
9a096dd146
* Refactor module_utils/crypto.py: split up into multiple smaller modules * Remove superfluous files. * Fix sanity errors. * Move CRL entry dumping code to module_utils. * Move obj2txt usage from CRL modules to module_utils/crpyto/cryptography_crl. * Move generic I/O functions to plugins/module_utils/io.py. * Add helper method for retrieving serial number of certificate. * Add compatibility code into __init__.py. * Fix syntax error, and add ignore.txt entries for non-empty __init__.
46 lines
1.8 KiB
Python
46 lines
1.8 KiB
Python
# -*- coding: utf-8 -*-
|
|
#
|
|
# (c) 2019, Felix Fontein <felix@fontein.de>
|
|
#
|
|
# Ansible is free software: you can redistribute it and/or modify
|
|
# it under the terms of the GNU General Public License as published by
|
|
# the Free Software Foundation, either version 3 of the License, or
|
|
# (at your option) any later version.
|
|
#
|
|
# Ansible is distributed in the hope that it will be useful,
|
|
# but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
# GNU General Public License for more details.
|
|
#
|
|
# You should have received a copy of the GNU General Public License
|
|
# along with Ansible. If not, see <http://www.gnu.org/licenses/>.
|
|
|
|
from __future__ import absolute_import, division, print_function
|
|
__metaclass__ = type
|
|
|
|
|
|
PEM_START = '-----BEGIN '
|
|
PEM_END = '-----'
|
|
PKCS8_PRIVATEKEY_NAMES = ('PRIVATE KEY', 'ENCRYPTED PRIVATE KEY')
|
|
PKCS1_PRIVATEKEY_SUFFIX = ' PRIVATE KEY'
|
|
|
|
|
|
def identify_private_key_format(content):
|
|
'''Given the contents of a private key file, identifies its format.'''
|
|
# See https://github.com/openssl/openssl/blob/master/crypto/pem/pem_pkey.c#L40-L85
|
|
# (PEM_read_bio_PrivateKey)
|
|
# and https://github.com/openssl/openssl/blob/master/include/openssl/pem.h#L46-L47
|
|
# (PEM_STRING_PKCS8, PEM_STRING_PKCS8INF)
|
|
try:
|
|
lines = content.decode('utf-8').splitlines(False)
|
|
if lines[0].startswith(PEM_START) and lines[0].endswith(PEM_END) and len(lines[0]) > len(PEM_START) + len(PEM_END):
|
|
name = lines[0][len(PEM_START):-len(PEM_END)]
|
|
if name in PKCS8_PRIVATEKEY_NAMES:
|
|
return 'pkcs8'
|
|
if len(name) > len(PKCS1_PRIVATEKEY_SUFFIX) and name.endswith(PKCS1_PRIVATEKEY_SUFFIX):
|
|
return 'pkcs1'
|
|
return 'unknown-pem'
|
|
except UnicodeDecodeError:
|
|
pass
|
|
return 'raw'
|