File: //usr/lib/python3.9/site-packages/ipaclient/plugins/__pycache__/vault.cpython-39.pyc
a
�N(i� � @ s� d dl mZ d dlZd dlZd dlZd dlZd dlZd dlZd dlZd dl Z d dl
m Z m Z d dl
mZ d dlmZ d dlmZ d dlmZ d dlmZmZmZ zd d lmZ W n ey� d d l mZ Y n0 d d
l m Z d d l m Z m!Z! d d l"m#Z# d d
l$m%Z% d dl$m&Z& d dl'm(Z(m)Z)m*Z* d dl+m,Z, d dl$m-Z-m.Z. d dl$m/Z/m0Z0m1Z1 d dl2m3Z3 d dl$m4Z4 d dl5m6Z6 d dl7m8Z8 e�9e:�Z;d<dd�Z<e3� Z=dZ>dd � Z?d=d d �Z@d>d d �ZAe=d!d"�G d#d$� d$e*��ZBe=d!d"�G d%d&� d&e)��ZCe=� G d'd(� d(e(��ZDe=d!d"�G d)d*� d*e)��ZEe=� G d+d,� d,e(��ZFG d-d.� d.�ZGeGe-�ZHe=d!d!d/�G d0d1� d1e#��ZIG d2d3� d3e(�ZJe=d!d"�G d4d5� d5e)��ZKe=� G d6d7� d7eJ��ZLe=d!d"�G d8d9� d9e)��ZMe=� G d:d;� d;eJ��ZNdS )?� )�print_functionN)�Fernet� InvalidToken)�default_backend)�hashes)�
PBKDF2HMAC)�padding)�Cipher�
algorithms�modes)� TripleDES)�PKCS7)�load_pem_public_key�load_pem_private_key)�MethodOverride)�x509)� constants)�Local�Method�Object)�
classproperty)�api�errors)�Bytes�Flag�Str)�Registry)�_)�ipautil)�DNSName�rc
C s� z<t j|||d��}|�� }W d � n1 s00 Y W n� ty� } z.tj| td�||jd d� d��W Y d}~nHd}~0 ty� } z(tj| td�||d� d��W Y d}~n
d}~0 0 |S )ztRead file and catch errors
IOError and UnicodeError (for text files) are turned into a
ValidationError
)�mode�encodingN�(Cannot read file '%(filename)s': %(exc)s� ��filename�exc��name�errorz*Cannot decode file '%(filename)s': %(exc)s) �io�open�read�IOErrorr �ValidationErrorr �args� UnicodeError)�argnamer& r! r" �f�datar' � r5 �;/usr/lib/python3.9/site-packages/ipaclient/plugins/vault.py�validated_read> s$ *
���� r7 i c C s. t t�� d|dt� d�}t�|�| �d���S )z9
Generates symmetric key from password and salt.
� i�� )� algorithm�length�saltZ
iterations�backend�utf-8)r r �SHA256r �base64� b64encodeZderive�encode)�passwordr; Zkdfr5 r5 r6 �generate_symmetric_key] s �rC c C st |dur*|durt d��t|�}|�| �S |durht|t� d�}|�| tjtjt� � d�t� � dd��S t d��dS )z9
Encrypts data with symmetric key or public key.
Nz9Either a symmetric or a public key is required, not both.�r4 r< �r9 �Zmgfr9 �labelz/Either a symmetric or a public key is required.)
�
ValueErrorr �encryptr r r �OAEP�MGF1r r> )r4 �
symmetric_key�
public_key�fernetZpublic_key_objr5 r5 r6 rI l s* �
��� rI c C s� |durR|durt d��zt|�}|�| �W S tyN tjtd�d��Y q�0 np|dur�z:t|dt� d�}|�| t j
t j t �
� d�t �
� dd��W S t y� tjtd�d��Y q�0 nt d��dS ) z9
Decrypts data with symmetric key or public key.
Nz:Either a symmetric or a private key is required, not both.zInvalid credentials)�message)r4 rB r< rE rF z0Either a symmetric or a private key is required.)rH r �decryptr r ZAuthenticationErrorr r r r rJ rK r r> )r4 rL � private_keyrN Zprivate_key_objr5 r5 r6 rP � s@ � ���� �rP T)�no_failc @ s e Zd ZdZdS )� _fake_vault�vaultN)�__name__�
__module__� __qualname__r) r5 r5 r5 r6 rS � s rS c @ s e Zd ZdZdZdS )�_fake_vault_add_internal�vault_add_internalTN�rU rV rW r) �NO_CLIr5 r5 r5 r6 rX � s rX c s� e Zd Zed�Zedded�d�edded�d�ed d
ed �d�fZed d
� �Ze e�Z
e dd� �Z � fdd�Z
� fdd�Z� fdd�Zdd� Zdd� Z� ZS )� vault_addzCreate a new vault.� password?rB �Vault password�Zcli_name�doc�password_file?�
password_file�"File containing the vault password�public_key_file?�public_key_filez$File containing the vault public keyc C s t j�d�tu S )NrY )r �Command�
get_pluginrX ��clsr5 r5 r6 �__NO_CLI_getter� s
�zvault_add.__NO_CLI_getterc C s | j jjjS �N)r rf rY � api_version��selfr5 r5 r6 rl � s zvault_add.api_versionc # s8 | j jj�� D ]
}|V qtt| ��� D ]
}|V q(d S rk )r rf rY r0 �superr\ �get_args�rn �arg�� __class__r5 r6 rp � s zvault_add.get_argsc # sB | j jj�� D ]}|jdvr|V qtt| ��� D ]
}|V q2d S )N)� ipavaultsalt�version)r rf rY �optionsr) ro r\ � get_options�rn �optionrs r5 r6 rx � s
zvault_add.get_optionsc # s8 | j jj�� D ]
}|V qtt| ��� D ]
}|V q(d S rk )r rf rY �
output_paramsro r\ �get_output_params�rn Zparamrs r5 r6 r| � s zvault_add.get_output_paramsc C s | j jj�� S rk )r rf rY �outputrm r5 r5 r6 � _iter_output� s zvault_add._iter_outputc
O s� |� d�}|d u r&| jjj}|jjj}|� d�}|� d�}|� d�}|� d�}d|v r\|d= d|v rj|d= d|v rx|d= |dkr�|s�|r�tjt d�d��|d kr�|s�|r�tjt d
�d��| jj
j r�| jj j
} n
| jj j} | �� s�| �� |d kr�n |dk�rd|�r |�r tjt d �d��n8|�r$n0|�rDtd
|dd�}|�d�}n| jj j�d�}t�d�|d< n�|d k�r|�r�|�r�tjt d�d��n8|�r�n0|�r�td|dd�}||d< ntjdt d�d��zt|t� d� W n< t�y }
z"tjdt d�|
d��W Y d }
~
n
d }
~
0 0 | jjj|i |��} |�� } d | v �r@| d = d| v �rP| d= |dk�rj|| d< | d= n|d k�rz| d= | jjj |i | �� | S ) N� ipavaulttyperB rb �ipavaultpublickeyre � symmetricz2Password can be specified only for symmetric vault��reason�
asymmetricz5Public key can be specified only for asymmetric vault�standard�!Password specified multiple times�
password-filer= �r" �
� New password� ru z#Public key specified multiple timeszpublic-key-file�rb�r! zMissing vault public keyr( rD z+Invalid or unsupported vault public key: %s� description) �getr rf rY �paramsr� �defaultr �MutuallyExclusiveErrorr �env� in_server�Backend�ldap2� rpcclient� isconnected�connectr7 �rstrip�textui�prompt_password�os�urandomr/ r r rH �copy�
vault_archive)
rn r0 rw �
vault_typeZ internal_cmdrB rb rM re r< �e�response�optsr5 r5 r6 �forward� s�
��
��
�
��
��
�
zvault_add.forward)rU rV rW r �__doc__r �
takes_options� classmethodZ_vault_add__NO_CLI_getterr r[ �propertyrl rp rx r| r r� �
__classcell__r5 r5 rs r6 r\ � s6 ����
r\ c @ s e Zd ZdZdZdS )�_fake_vault_mod_internal�vault_mod_internalTNrZ r5 r5 r5 r6 r� o s r� c s� e Zd Zed�Zeded�d�edded�d�ed d
ed �d�ed d
ed�d�edded�d�edded�d�edded�d�edded�d�fZe dd � �Z
e e
�Z e
d d � �Z� fd d �Z� fd!d"�Z� fd#d$�Zd%d&� Zd'd(� Z� ZS ))� vault_modzModify a vault.zchange_password?zChange password�r` z
old_password?� old_passwordzOld vault passwordr_ zold_password_file?�old_password_filez&File containing the old vault passwordz
new_password?� new_passwordzNew vault passwordznew_password_file?�new_password_filez&File containing the new vault password� private_key?rQ zOld vault private key�private_key_file?�private_key_filez)File containing the old vault private keyrd re z(File containing the new vault public keyc C s t j�d�tu S )Nr� )r rf rg r� rh r5 r5 r6 rj � s
�zvault_mod.__NO_CLI_getterc C s | j jjjS rk )r rf r� rl rm r5 r5 r6 rl � s zvault_mod.api_versionc # s8 | j jj�� D ]
}|V qtt| ��� D ]
}|V q(d S rk )r rf r� r0 ro r� rp rq rs r5 r6 rp � s zvault_mod.get_argsc # sB | j jj�� D ]}|jdkr|V qtt| ��� D ]
}|V q2d S )Nrv )r rf r� rw r) ro r� rx ry rs r5 r6 rx � s
zvault_mod.get_optionsc # s8 | j jj�� D ]
}|V qtt| ��� D ]
}|V q(d S rk )r rf r� r{ ro r� r| r} rs r5 r6 r| � s zvault_mod.get_output_paramsc C s | j jj�� S rk )r rf r� r~ rm r5 r5 r6 r � s zvault_mod._iter_outputc O sh |� dd�}|� dd�}|� dd�}|� dd �}|� dd �}|� dd �}|� dd �} |� d d �}
|� d
d �} |� d d �} |� d d �}
| jjjr�| jjj}n
| jjj}|�� s�|�� |r�n"|s�|s�| s�|r�d
}n | s�|
r�d}|�r6|� � }|� dd � ||d< ||d< |
|d < | |d
< | jj
j |i |��}|d d }|� � }|�r||d< |dk�rhd |d< d |d < n�|d
k�r�|�r�||d< nt �
d�|d< d |d < nh|dk�r| �r�|
�r�tjtd�d��n0| �r�n(|
�r�td |
dd�} ntjd td�d��d |d< | |d < | jj
j|i |��}|�rd|� � }|� dd � ||d< ||d< | |d< d |d < | jj
j|i |�� |S ) Nr� Fru �change_passwordr� r� r� r� rQ r� r� re r� r� r� rB rb �resultr4 r� r� z'New public key specified multiple timesr� r� r� z Missing new vault public keyr( T�override_password)�popr r� r� r� r� r� r� r� r� rf �vault_retriever� r� r r� r r7 r/ r� r� )rn r0 rw r� r; r� r� r� r� r� Zold_private_keyZold_private_key_fileZnew_public_keyZnew_public_key_filer< r� r� r4 r5 r5 r6 r� � s�
��� zvault_mod.forward)rU rV rW r r� r r r r� r� Z_vault_mod__NO_CLI_getterr r[ r� rl rp rx r| r r� r� r5 r5 rs r6 r� u sf ���������*
r� c @ s8 e Zd ZdZdd� Zdd� Zdd� Zdd � Zd
d � Zd S )
�_KraConfigCachez9The KRA config cache stores vaultconfig-show result.
c C s t j�|jjd�| _d S )Nz
kra-config)r� �path�joinr� Z cache_dir�_dirname)rn r r5 r5 r6 �__init__/ s z_KraConfigCache.__init__c C s t |��� d }tj�| j|�S )Nz.json)r ZToASCIIr� r� r� r� )rn �domain�basenamer5 r5 r6 �
_get_filename2 s z _KraConfigCache._get_filenamec
C s� | � |�}zrz:t|�� }t�|�W d � W W S 1 s:0 Y W n2 tyx } z|jtjkrd� W Y d}~n
d}~0 0 W n" ty� tj d|dd� Y n0 dS )z`Load config from cache
:param domain: IPA domain
:return: dict or None
NzFailed to load %sT��exc_info)
r� r, �json�load�OSError�errno�ENOENT� Exception�logger�warning)rn r� r& r3 r� r5 r5 r6 r� 6 s
0 z_KraConfigCache.loadc
C s$ |d � � }t�|d �|d< | �|�}z�zt�| j� W n2 tyl } z|jtj krX� W Y d}~n
d}~0 0 t
j | jddd��b}z0t �
||� t�|� |�� t�|j|� W n ty� t�|j� � Y n0 W d � n1 s�0 Y W n& t�y tjd|dd � Y dS 0 dS dS )
z�Store config in cache
:param domain: IPA domain
:param config: ipa vaultconfig-show response
:return: True if config was stored successfully
r� �transport_certNF�w)�dir�deleter! zFailed to save %sTr� )r� �sslZDER_cert_to_PEM_certr� r� �makedirsr� �EnvironmentErrorr� ZEEXIST�tempfileZNamedTemporaryFiler� �dumpr Z
flush_sync�close�renamer) r� �unlinkr� r� )rn r� r� �configr& r� r3 r5 r5 r6 �storeH s6 �
�
*z_KraConfigCache.storec
C sd | � |�}zt�|� W nB tyZ } z*|jtjkrDtjd|dd� W Y d}~dS d}~0 0 dS dS )z�Remove a config from cache, ignores errors
:param domain: IPA domain
:return: True if cert was found and removed
zFailed to remove %sTr� NF)r� r� r� r� r� r� r� r� )rn r� r& r� r5 r5 r6 �removek s
z_KraConfigCache.removeN) rU rV rW r� r� r� r� r� r� r5 r5 r5 r6 r� , s #r� )�overriderR c s e Zd Z� fdd�Z� ZS )�vaultconfig_showc s� |� d�}d|v r|d= tt| �j|i |��}t�| jjj|� |r�t |d��"}|�
|d d � W d � n1 sv0 Y |S )NZ
transport_out�wbr� r� ) r� ro r� r� �_kra_config_cacher� r r� r� r, �write)rn r0 rw �filer� r3 rs r5 r6 r� � s
0zvaultconfig_show.forward)rU rV rW r� r� r5 r5 rs r6 r� s r� c @ s0 e Zd Zdd� Zd dd�Zd dd�Zdd � Zd
S )
� ModVaultDatac C sf |t jvr(td�}t�|jt|�d���|t jkrBt� t
� d��S |t j krZt
t
� d��S t|��d S )Nz2{algo} is not a supported vault wrapping algorithm)�algor� � )r � VAULT_WRAPPING_SUPPORTED_ALGOSr r r/ �format�reprZVAULT_WRAPPING_AES128_CBCr
ZAESr� r� �VAULT_WRAPPING_3DESr rH )rn r) �msgr5 r5 r6 �_generate_session_key� s
z"ModVaultData._generate_session_keyFc C s� d }|st �| jjj�}|d u rD| jj�� }|d }t�|d �}nt� |d �
d��}|� d�}|d u rrt j
}n:|t jv r�|}n*|d D ]}|t jv r�|} q�q�t�d��||fS )Nr� r� �asciiZwrapping_default_algorithmZ wrapping_supported_algorithmsz<No overlapping wrapping algorithm between server and client.)r� r� r r� r� rf r� r Zload_der_x509_certificateZload_pem_x509_certificaterA r� r r� r� r r/ )rn �
force_refreshr� r� r� Z default_algo�
wrapping_algor� r5 r5 r6 �_get_vaultconfig� s2 � �
�z ModVaultData._get_vaultconfigc
O s� |� � }|sbz|�|jt�� �}W q� ty^ |�|jtjtjt� � d�t� � d d��}Y q�0 n*|�|jtjtjt� � d�t� � d d��}||d< | j
d } z| j j | |i |��W S t
jt
jt
jfy� t�| j jj� |r�|r� Y n0 d S )NrE rF � session_keyZ _internal)rM rI �keyr ZPKCS1v15rH rJ rK r r> r) r rf r Z
InternalErrorZExecutionErrorZ GenericErrorr� r� r� r� )
rn r� r� Zraise_unexpectedZuse_oaepr0 rw rM Zwrapped_session_keyr) r5 r5 r6 � _do_internal� sH � �� ��
�
zModVaultData._do_internalc O s� z"| j ||ddg|�R i |��}W n2 tjyT | j ||ddg|�R i |��}Y n0 |durb|S | jdd�d }| j ||ddg|�R i |��}|dur�|S | j ||ddg|�R i |��S )z@
Calls the internal counterpart of the command.
FTN)r� r )r� r Z
EncodingErrorr� )rn r� r� r0 rw r� r5 r5 r6 �internal� sF
���
���
���
���zModVaultData.internalN)F)F)rU rV rW r� r� r� r� r5 r5 r5 r6 r� � s
& �
0r� c @ s e Zd ZdZdZdS )� _fake_vault_archive_internal�vault_archive_internalTNrZ r5 r5 r5 r6 r� s r� c s� e Zd Zed�Zeded�d�eded�d�edded �d
�ed d ed
�d
�eded�d�fZe dd� �Z
e e
�Z e
dd� �Z� fdd�Z� fdd�Z� fdd�Zdd� Zd d � Zd d � Z� ZS ) r� zArchive data into a vault.zdata?zBinary data to archiver� zin?z File containing data to archiver] rB r^ r_ ra rb rc zoverride_password?zOverride existing passwordc C s t j�d�tu S )Nr� )r rf rg r� rh r5 r5 r6 rj 7 s
�z vault_archive.__NO_CLI_getterc C s | j jjjS rk )r rf r� rl rm r5 r5 r6 rl > s zvault_archive.api_versionc # s8 | j jj�� D ]
}|V qtt| ��� D ]
}|V q(d S rk )r rf r� r0 ro r� rp rq rs r5 r6 rp B s zvault_archive.get_argsc # sB | j jj�� D ]}|jdvr|V qtt| ��� D ]
}|V q2d S )N)�noncer� �
vault_datarv r� )r rf r� rw r) ro r� rx ry rs r5 r6 rx H s
zvault_archive.get_optionsc # s8 | j jj�� D ]
}|V qtt| ��� D ]
}|V q(d S rk )r rf r� r{ ro r� r| r} rs r5 r6 r| S s z vault_archive.get_output_paramsc C s | j jj�� S rk )r rf r� r~ rm r5 r5 r6 r Y s zvault_archive._iter_outputc C sl t �|jd �}t|j��� }|�|�}||�� 7 }t|t� |�t
� d�}|� � }|�|�|�� }||fS )z�Encrypt data with wrapped session key and transport cert
:param algo: wrapping algorithm instance
:param bytes json_vault_data: dumped vault data
:return:
� �r< ) r� r� �
block_sizer
�padder�update�finalizer r �CBCr � encryptor) rn r� �json_vault_datar� r� � padded_data�cipherr� �wrapped_vault_datar5 r5 r6 �
_wrap_data\ s
zvault_archive._wrap_datac
O s� |� d�}|� d�}|� d�}|� d�}|�dd�}d|v rB|d= d|v rP|d= d|v r^|d= d|v rl|d= |r�|r�tjtd�d��n�|r�t|�tkr�tjdtd �d
ti d ��n�|�rFzt� |�}W nH t
�y } z.tjdtd �|| j d
d� d ��W Y d } ~ n
d } ~ 0 0 |j tk�r6tjdtd �d
ti d ��t
d|dd�}nd}| jjj�rb| jjj}
n
| jjj}
|
�� �s~|
�� | jjj|i |��d } | d d } | dk�r�d }
�n<| dk�r�|�r�|�r�tjtd�d��nT|�r�nL|�rt
d|dd�}|�d�}n,|�r | jjj�d �}n| jjjjd dd �}|�sv|�� }||d< z| jjj |i |�� W n tj �yt Y n0 | d d }t ||�}t ||d �}d }
nR| d!k�r�| d" d }t �!t�"d#��}t ||d �}t ||d$�}
ntjd%td&�d ��dt �!|��#d�i}|
�r t �!|
��#d�|d'< t$�%|��&d�}| �'� \}}|�d(|�}|t(j)k�rZ||d(< | �*|�}| �+||�\}}|j,||d)� | j-||g|�R i |��S )*Nr4 �inrB rb r� Fz#Input data specified multiple timesr� zLSize of data exceeds the limit. Current vault data size limit is %(limit)d B�limitr( r# r$ r% r� r� � r� r� r r� r� r� r� r= r� r� r� �Password�Zconfirmru �rL r� r� r8 )rM r� �Invalid vault type�
encrypted_keyr� )r� r� ).r� r� r r� r �len�MAX_VAULT_DATA_SIZEr/ r� �statr� r0 �st_sizer7 r r� r� r� r� r� r� r� rf �
vault_showr� r� r� r� r� ZNotFoundrC rI r? r@ r� �decoder� �dumpsrA r� r r� r� r r� r� )rn r0 rw r4 Z
input_filerB rb r� r r' r< rT r� r r� r; �encryption_keyrM r� r r� r� r� r� r r5 r5 r6 r� p s�
� ��
�� ��
��
�
�
��
�
�zvault_archive.forward)rU rV rW r r� r r r r� r� Z _vault_archive__NO_CLI_getterr r[ r� rl rp rx r| r r r� r� r5 r5 rs r6 r� sF ������
r� c @ s e Zd ZdZdZdS )� _fake_vault_retrieve_internal�vault_retrieve_internalTNrZ r5 r5 r5 r6 r s r c s� e Zd Zed�Zeded�d�edded�d�ed d
ed �d�ed d
ed�d�edded�d�fZeded�d�fZe dd� �Z
e e
�Z e
dd� �Z� fdd�Z� fdd �Z� fd d �Zd d � Zd!d"� Zd#d$� Z� ZS )%r� z Retrieve a data from a vault.zout?z File to store retrieved datar� r] rB r^ r_ ra rb rc r� rQ zVault private keyr� r� z%File containing the vault private keyr4 ZData)rG c C s t j�d�tu S )Nr )r rf rg r rh r5 r5 r6 rj 7 s
�z vault_retrieve.__NO_CLI_getterc C s | j jjjS rk )r rf r rl rm r5 r5 r6 rl > s zvault_retrieve.api_versionc # s8 | j jj�� D ]
}|V qtt| ��� D ]
}|V q(d S rk )r rf r r0 ro r� rp rq rs r5 r6 rp B s zvault_retrieve.get_argsc # sB | j jj�� D ]}|jdvr|V qtt| ��� D ]
}|V q2d S )N)r� rv r� )r rf r rw r) ro r� rx ry rs r5 r6 rx H s
zvault_retrieve.get_optionsc # s8 | j jj�� D ]
}|V qtt| ��� D ]
}|V q(d S rk )r rf r r{ ro r� r| r} rs r5 r6 r| O s z vault_retrieve.get_output_paramsc C s | j jj�� S rk )r rf r r~ rm r5 r5 r6 r U s zvault_retrieve._iter_outputc C sh t |t�|�t� d�}|�� }|�|�}||�� 7 }t|j�� � }|�|�}||�� 7 }t
� |� d��S )Nr� r= )
r r r� r � decryptorr� r� r
r� �unpadderr� �loadsr ) rn r� r� r� r r r r r r5 r5 r6 �_unwrap_responseX s
z vault_retrieve._unwrap_responsec O s� |� d�}|� d�}|� d�}|� d�}|� d�}d|v r@|d= d|v rN|d= d|v r\|d= d|v rj|d= d|v rx|d= | jjjr�| jjj}n
| jjj}|�� s�|�� | jj j
|i |��d } | d d }
| � � \} } |� d | �} | t
jkr�| |d < | �| �}
| j|
| g|�R i |��}| �|
|d d
|d d �}~
t�|d �d
��}d }d|v �rpt�|d �d
��}|
dk�r~�n |
dk�r| d d }|�r�|�r�tjtd�d��n<|�r�n4|�r�td|d
d�}|�d�}n| jjjjddd�}t ||�}t ||d�}n�|
dk�rx|�r.|�r.tjtd �d��n0|�r6n(|�rLtd |d d �}ntj dtd �d!��t ||d"�}t ||d�}ntj d#td$�d!��|�r�t |d%��}|� |� W d � n1 �s�0 Y n d |i|d< |S )&N�outrB rb rQ r� r� r� r r� r� r� r4 r= r r� r� ru r� r� r� r� r� r Fr r
r� z$Private key specified multiple timeszprivate-key-filer� r� zMissing vault private keyr( )rQ r� r r� )!r� r r� r� r� r� r� r� r� rf r r� r� r r� r� r� r r? Z b64decoderA r r� r r7 r� r� r� rC rP r/ r, r� )rn r0 rw Z output_filerB rb rQ r� r< rT r� r� r� r� r� r� r4 r r; r r3 r5 r5 r6 r� e s�
�
�
��
�
��� � , zvault_retrieve.forward)rU rV rW r r� r r r� Zhas_output_paramsr� Z _vault_retrieve__NO_CLI_getterr r[ r� rl rp rx r| r r r� r� r5 r5 rs r6 r� sT ������ ��
r� )r N)NN)NN)OZ
__future__r r? r� r+ r� Zloggingr� r� r� Zcryptography.fernetr r Z cryptography.hazmat.backendsr Z cryptography.hazmat.primitivesr Z)cryptography.hazmat.primitives.kdf.pbkdf2r Z)cryptography.hazmat.primitives.asymmetricr Z&cryptography.hazmat.primitives.ciphersr r
r Z/cryptography.hazmat.decrepit.ciphers.algorithmsr � ImportErrorZ1cryptography.hazmat.primitives.ciphers.algorithmsZ&cryptography.hazmat.primitives.paddingr
Z,cryptography.hazmat.primitives.serializationr r Zipaclient.frontendr Zipalibr r Zipalib.frontendr r r Z ipalib.utilr r r r r r Zipalib.plugabler r Z ipapythonr Zipapython.dnsutilr Z getLoggerrU r� r7 �registerr rC rI rP rS rX r\ r� r� r� r� r� r� r� r� r r� r5 r5 r5 r6 �<module> s�
& 5 7P
q