/$ZB & d Z ddlmZ ddlZddlZddlZddlmZ ddlm Z m
Z
m Z m Z m
Z
ddlZn
# e$ r dZY nw xY wdZdZdZd Zd
Zd Zd"d
Zd Zddd eefdZd"dZd Zd#dZ d#dZ d#dZ e dk rdZ ee Z! e"e! ee ddd Z# e"ee#z dZ ee d z d dded Z# e"e ee#z z e e$d % Z& ee#d e#d e&d! sJ dS dS )$z,Pythonic XML Security Library implementation )print_functionN)StringIO)BIOEVPRSAX509m2a
%(digest_value)s
z
%(signed_info)s
%(signature_value)s
%(key_info)s
%(ref_xml)s
aO
%(digest_value)s
z
%(signed_info)s
%(signature_value)s
%(key_info)s
z
%(modulus)s%(exponent)s
z
%(issuer_name)s%(serial_number)s
Tc ( t }t Dt j t | }| || n&ddlm} || || | S )z@Return the canonical (c14n) form of the xml document for hashingN) exclusive )SimpleXMLElement)r lxmletreeparse
write_c14n simplexmlr
getvalue)xmlc14n_excoutputetr
s 5/usr/lib/python3/dist-packages/pysimplesoap/xmlsec.py canonicalizer b s ZZF
Z
hsmm
,
,
f
1111 0///// ((8(DDD ?? c r t j t j | S )z/Create a SHA1 hash and return the base64 string)base64 b64encodehashlibsha1digest)payloads r sha1_hash_digestr" q s) GL 1 1 8 8 : : ; ;;r c b t | | }||t | dz } t | | } t j |fd }
|
t j | } ||| t j | t |
|| dS )zISign an XML document usign RSA (templates: enveloped -ref- or enveloping))ref_uri digest_valuec S )N )argskwargspasswords r zrsa_sign.. s X r )ref_xmlr$ signed_infosignature_valuekey_info) r r" r load_keysignr r r r r r/ ) r r$ private_keyr* certr
sign_templatekey_info_templater, r- pkey signatures ` r rsa_signr8 v s
3))G g3CG3L3L#N #N NK {H55K < %E%E%E%E F FD ',{33::<<==I 7& % / : : t->?? r c | d r)t j | }t j | }nt j t }t j }| | |
d | | t | | | t j | }|dk S )zDVerify a XML document signature usign RSA-SHA1, return True if validz-----BEGIN PUBLIC KEY-----r )mdr )
startswithr MemoryBufferr load_pub_key_bio load_pub_key certificater PKey
assign_rsa
reset_context verify_init
verify_updater verify_finalr b64decode)r r7 keyr biorsapubkeyrets r
rsa_verifyrL s ~~233 , s##"3'' {++
XZZF
c
F###
c844555
f .y 9 9
:
:C !8Or c t j | j dd }t j t j | j d d }|rt | nd}||||r&|
nd|r| nddz S )zHConvert private key (PEM) to XML Signature format (RSAKeyValue/X509Data) Nhexr )modulusexponent issuer_name
serial_number)
r r er bn_to_hex mpi_to_bnndecodeencodex509_parse_cert
get_issueras_textget_serial_number)r6 r3 r5 rR rQ x509s r r/ r/ s qrr
++Hl2<//0077>>EEhOOG$( 2?4 dD 6:Bt((0022259A//111r
r Fc . |r4t j | }t j |t j }n^| d r4t j | }t j |t j }nt j | d }|S )zECreate a X509 certificate from binary DER, plain text PEM or filenamez-----BEGIN CERTIFICATE-----r )r r< r
load_cert_bio
FORMAT_DERr;
FORMAT_PEM load_cert)r3 binaryrH r_ s r r[ r[ s
' t$$!#t77
6 7 7 ' t$$!#t77~dA&& Kr c t | | }| S )z:Return the public key (PEM format) from a X509 certificate)r[
get_pubkeyget_rsaas_pem)r3 re r_ s r x509_extract_rsa_public_keyrj s9 4 ( (D ?? $ $ & & - - / //r c t | }t || }| | S )zGValidate the certificate's authenticity using a certification authority)r[ verifyrg )cacertr3 re cacrts r x509_verifyrp s8 B
$
'
'C ::bmmoo & &&r __main__zLz#objectzno_encriptada.keyr* z=rP )r4 r zzunimercado.crtr- r. )r )T)F)'__doc__
__future__r r r os cStringIOr M2Cryptor r r r r
lxml.etreer ImportError
SIGN_REF_TMPL SIGNED_TMPL
SIGN_ENV_TMPLSIGNATURE_TMPLKEY_INFO_RSA_TMPLKEY_INFO_X509_TMPLr r" r8 rL r/ r[ rj rp __name__
sample_xmlr printvarsopenread
public_keyr' r r r s 3 2 % % % % % %
, , , , , , , , , , , , , , DDD
< < <
26D4(
K KD E; UJ 8JOR)