MOON
Server: Apache
System: Linux s5.yayogua.com.py 6.12.0-124.55.3.el10_1.x86_64 #1 SMP PREEMPT_DYNAMIC Thu May 7 16:54:02 EDT 2026 x86_64
User: sanbercountryclu (1012)
PHP: 8.2.32
Disabled: NONE
Upload Files
File: //usr/share/crypto-policies/python/policygenerators/__pycache__/openssl.cpython-312.pyc
�

��i�:��\�ddlZddlmZmZddlmZdZdZGd�de�ZGd	�d
e�Z	y)�N)�CalledProcessError�check_output�)�ConfigGeneratorz^
[openssl_init]
alg_section = evp_properties

[evp_properties]
rh-allow-sha1-signatures = yes
z2
[fips_sect]
tls1-prf-ems-check = {}
activate = 1
c�z�eZdZdZidd�dd�dd�dd�d	d
�dd�dd
�dd�dd�dd�dd�dd�dd�dd�dd�dd�Zhd�dd hddhd!�Zd"d#d$d%d&dd'd(d)d*�	Zdddd+d,d-d.d/d0d1d2d3�Zd4d5d6�Zdhd7hd8d9hd:�dhd;hd8d9hd:�dhd;hd8d9hd:�dhd;hd8d9hd:�dhd;hd<hd8d9hd=�dhd7hd>hd8d9hd=�d?�Z	d@dAdBdCdDdEdFdGdH�Z
idIdJ�dKdL�dMdN�dOdP�dQdR�dSdT�dUdV�dWdX�dYdZ�d[d\�d]d^�d_d`�dadb�dcdd�dedf�dgdh�didj�idkdl�dmdn�dodp�dqdr�dsdt�dudv�dwdx�dydz�d{d|�d}d~�dd��d�d��d�d��d�d��d�d��d�d��d�d���id�d��d�d��d�d��d�d��d�d��d�d��d�d��d�d��d�d��d�d��d�d��d�d��d�d��d�d��d�d��d�d��d�d���id�d��d�d��d�d��d�d��d�d��d�d��d�d��d�d��d�d��d�d“d�dēd�dƓd�dȓd�dʓd�d̓d�dΓ�Zd�d�d�d�d�d�d�d�d�d�d�dڜZd�d�d�d�d�d�d�d�d�d�d�d�d�d�d�Z
ed��Zed��Zed��Zed��Zy�)��OpenSSLGenerator�
opensslcnfzAES-256-CTR�zAES-128-CTRzAES-256-GCMz-AES256zAES-128-GCMz-AES128�AES-256-CBCz-SHA256�AES-128-CBCzCHACHA20-POLY1305z	-CHACHA20�SEED-CBCz-SEED�IDEA-CBCz!IDEA�DES-CBCz!DESzRC4-40z	DES40-CBC�3DES-CBCz-3DESzRC4-128z!RC4�RC2-CBCz!RC2�NULLz
!eNULL:!aNULL>	�CAMELLIA-128-CBC�CAMELLIA-256-CBCrrrrr
rrzAES-128-CCMzAES-256-CCM)z-CBCz-AESCCMz-AESGCM�kRSA�kEECDH�kPSK�kDHEPSK�kEDH�	kECDHEPSK�kRSAPSK�kGOST)	�RSA�ECDHE�PSK�DHE-PSK�DHE-RSA�DHE-DSS�	ECDHE-PSK�RSA-PSKz
VKO-GOST-2012z-kRSAz-kEECDHz-aRSAz-aDSSz-kPSKz-kDHEPSKz
-kECDHEPSKz-kRSAPSK)�ANON�DH�ECDHrrr!r"rr r#r$z!MD5z-SHA1)zHMAC-MD5z	HMAC-SHA1zSHA2-384�TLS1.3zDTLS1.3)�cipher�hash�protocolzSHA2-256z
HMAC-SHA2-256)r)r*�macr+z
HMAC-SHA2-384)�TLS_AES_256_GCM_SHA384�TLS_AES_128_GCM_SHA256�TLS_CHACHA20_POLY1305_SHA256�TLS_AES_128_CCM_SHA256�TLS_SHA256_SHA256�TLS_SHA384_SHA384�SSLv3�TLSv1zTLSv1.1zTLSv1.2zTLSv1.3zDTLSv0.9�DTLSv1zDTLSv1.2)zSSL3.0zTLS1.0zTLS1.1zTLS1.2r(zDTLS0.9zDTLS1.0zDTLS1.2zRSA-SHA1zRSA+SHA1zDSA-SHA1zDSA+SHA1z
ECDSA-SHA1z
ECDSA+SHA1zRSA-SHA2-224z
RSA+SHA224zDSA-SHA2-224z
DSA+SHA224zECDSA-SHA2-224zECDSA+SHA224zRSA-SHA2-256z
RSA+SHA256zDSA-SHA2-256z
DSA+SHA256zECDSA-SHA2-256zECDSA+SHA256zRSA-SHA2-384z
RSA+SHA384zDSA-SHA2-384z
DSA+SHA384zECDSA-SHA2-384zECDSA+SHA384zRSA-SHA2-512z
RSA+SHA512zDSA-SHA2-512z
DSA+SHA512zECDSA-SHA2-512zECDSA+SHA512zRSA-PSS-SHA2-256�rsa_pss_pss_sha256zRSA-PSS-SHA2-384�rsa_pss_pss_sha384zRSA-PSS-SHA2-512�rsa_pss_pss_sha512zRSA-PSS-RSAE-SHA2-256�rsa_pss_rsae_sha256zRSA-PSS-RSAE-SHA2-384�rsa_pss_rsae_sha384zRSA-PSS-RSAE-SHA2-512�rsa_pss_rsae_sha512z
EDDSA-ED25519�ed25519zEDDSA-ED448�ed448zECDSA-BRAINPOOLP256-SHA2-256z?ecdsa_brainpoolP256r1_sha256zECDSA-BRAINPOOLP384-SHA2-384z?ecdsa_brainpoolP384r1_sha384zECDSA-BRAINPOOLP512-SHA2-512z?ecdsa_brainpoolP512r1_sha512�MLDSA44z?mldsa44zP256-MLDSA44z
?p256_mldsa44zRSA3072-MLDSA44z?rsa3072_mldsa44zMLDSA44-PSS2048z?mldsa44_pss2048zMLDSA44-RSA2048z?mldsa44_rsa2048zMLDSA44-ED25519z?mldsa44_ed25519zMLDSA44-P256z
?mldsa44_p256z
MLDSA44-BP256z?mldsa44_bp256�MLDSA65z?mldsa65zP384-MLDSA65z
?p384_mldsa65zMLDSA65-PSS3072z?mldsa65_pss3072zMLDSA65-RSA3072z?mldsa65_rsa3072zMLDSA65-P256z
?mldsa65_p256z
MLDSA65-BP256z?mldsa65_bp256zMLDSA65-ED25519z?mldsa65_ed25519�MLDSA87z?mldsa87zP521-MLDSA87z
?p521_mldsa87zMLDSA87-P384z
?mldsa87_p384z
MLDSA87-BP384z?mldsa87_bp384z
MLDSA87-ED448z?mldsa87_ed448�	FALCON512z
?falcon512zP256-FALCON512z?p256_falcon512zRSA3072-FALCON512z?rsa3072_falcon512�FALCONPADDED512z?falconpadded512zP256-FALCONPADDED512z?p256_falconpadded512zRSA3072-FALCONPADDED512z?rsa3072_falconpadded512�
FALCON1024z?falcon1024zP521-FALCON1024z?p521_falcon1024�FALCONPADDED1024z?falconpadded1024zP521-FALCONPADDED1024z?p521_falconpadded1024�SPHINCSSHA2128FSIMPLEz?sphincssha2128fsimplezP256-SPHINCSSHA2128FSIMPLEz?p256_sphincssha2128fsimplezRSA3072-SPHINCSSHA2128FSIMPLEz?rsa3072_sphincssha2128fsimple�SPHINCSSHA2128SSIMPLEz?sphincssha2128ssimplezP256-SPHINCSSHA2128SSIMPLEz?p256_sphincssha2128ssimplezRSA3072-SPHINCSSHA2128SSIMPLEz?rsa3072_sphincssha2128ssimple�SPHINCSSHA2192FSIMPLEz?sphincssha2192fsimplezP384-SPHINCSSHA2192FSIMPLEz?p384_sphincssha2192fsimple�SPHINCSSHAKE128FSIMPLEz?sphincsshake128fsimplezP256-SPHINCSSHAKE128FSIMPLEz?p256_sphincsshake128fsimplezRSA3072-SPHINCSSHAKE128FSIMPLEz?rsa3072_sphincsshake128fsimplez	?mlkem512z?p256_mlkem512z?x25519_mlkem512z	?mlkem768z?p384_mlkem768z?x448_mlkem768z ?X25519MLKEM768:?x25519_mlkem768z!?SecP256r1MLKEM768:?p256_mlkem768z
?mlkem1024z?p521_mlkem1024z#?SecP384r1MLKEM1024:?p384_mlkem1024)�MLKEM512z
P256-MLKEM512zX25519-MLKEM512�MLKEM768z
P384-MLKEM768z
X448-MLKEM768zMLKEM768-X25519z
P256-MLKEM768�	MLKEM1024zP521-MLKEM1024zP384-MLKEM1024�	secp224r1�	secp256r1�	secp384r1�	secp521r1�X25519�X448�	ffdhe2048�	ffdhe3072�	ffdhe4096�	ffdhe6144�	ffdhe8192z%?brainpoolP256r1tls13:brainpoolP256r1z%?brainpoolP384r1tls13:brainpoolP384r1z%?brainpoolP512r1tls13:brainpoolP512r1)�	SECP224R1�	SECP256R1�	SECP384R1�	SECP521R1rPrQz
FFDHE-2048z
FFDHE-3072z
FFDHE-4096z
FFDHE-6144z
FFDHE-8192zBRAINPOOL-P256R1zBRAINPOOL-P384R1zBRAINPOOL-P512R1c���
�d}|j}|j�
|jd}|jd}|dks|dkr|j|d�}nL|dks|dkr|j|d�}n/|dks|dkr|j|d	�}n|j|d
�}|dD]"}	|j||j|�}�$�
dD]"}	|j||j|�}�$�
dD]"}	|j||j|�}�$|jj�D],\}}t�
fd
�|D��s�|j||�}�.�
dD]"}	|j||j|�}�$dD]}	|j||	�}�|S#t
$rY��wxYw#t
$rY��wxYw#t
$rY��wxYw#t
$rY�ywxYw)Nr
�min_dh_size�min_rsa_sizei�z@SECLEVEL=0�z@SECLEVEL=1iz@SECLEVEL=2z@SECLEVEL=3�key_exchanger)c3�,�K�|]}|�dv���
y�w)r)N�)�.0�c�ips  ��=/usr/share/crypto-policies/python/policygenerators/openssl.py�	<genexpr>z4OpenSSLGenerator.generate_ciphers.<locals>.<genexpr>s�����8�i��1��8��$�i�s�r,)z-SHA384z	-CAMELLIAz-ARIAz-AESCCM8)�enabled�disabled�integers�append�key_exchange_map�KeyError�key_exchange_not_map�cipher_not_map�cipher_notany_multimap�items�all�mac_not_map)�cls�policy�s�pr\r]�i�keyword�	ciphersetrcrds          @re�generate_ciphersz!OpenSSLGenerator.generate_ciphers�s������N�N��
�_�_���o�o�m�4�����~�6�������!4��
�
�1�m�,�A�
�4�
�<�$�#6��
�
�1�m�,�A�
�4�
�<�$�#6��
�
�1�m�,�A��
�
�1�m�,�A��>�"�A�
��J�J�q�#�"6�"6�q�"9�:��#��N�#�A�
��J�J�q�#�":�":�1�"=�>��$��H��A�
��J�J�q�#�"4�"4�Q�"7�8���
#&�"<�"<�"B�"B�"D��G�Y��8�i�8�8��J�J�q�'�*��#E��E��A�
��J�J�q�#�/�/�!�"4�5���?�A��
�
�1�a� �A�?����=�
��
���
��
���
��
���
��
�sH�,F/�F?�G�3G�/	F<�;F<�?	G�
G�	G�G�	G)�(G)c�J�	�d}|j�	�	dD]�}|jj�D��cic]\}}|d|hk(r||��}}}|j�D]:\}}t�	fd�|j�D��s�)|j	||�}�<��|Scc}}w)Nr
r)c3�T��K�|]\}�t�fd��|D����� y�w)c3�&�K�|]}|�v���
y�w)Nra)rb�val�	algvaluess  �rerfzCOpenSSLGenerator.generate_ciphersuites.<locals>.<genexpr>.<genexpr>5s�����C�{��3�)�+�{�s�N)�any)rb�algclassrrvs  @�rerfz9OpenSSLGenerator.generate_ciphersuites.<locals>.<genexpr>5s.�����L�2J�.�8�Y��C�q��{�C�C�2J�s�$()rg�ciphersuite_maprprqrj)
rsrtrurc�name�spec�
cipher_submap�ciphersuite_name�ciphersuite_specrvs
         @re�generate_ciphersuitesz&OpenSSLGenerator.generate_ciphersuites*s�������N�N���8��A� #� 3� 3� 9� 9� ;�7� ;�-7�D�$� $�X��1�#� 5�"�4�Z� ;�
�7�7D�6I�6I�6K�2� �"2��L�2B�2H�2H�2J�L�L��
�
�1�&6�7�A�7L�	����7s�Bc� �|jhd��}|j}d|j|��d�}|d|j|��d�z
}|jr%|dz
}|d|j
|j�d�z
}|jr%|dz
}|d|j
|j�d�z
}|j�|dz
}|d	z
}|d
z
}|jr%|dz
}|d|j
|j�d�z
}|jr%|dz
}|d|j
|j�d�z
}|j�|d
z
}|dz
}|dz
}|dD�cgc] }||jvs�|j|��"}}|ddj|�zdzz
}|dD�cgc]}||jvr|j|��!}}|dD�cgc]}||jvr|j|��!}}|rddj|�zgng|rddj|�zgngz}	|ddj|	�zdzz
}|jddk(r|dz
}t|jdd�}
|d|
�d�z
}d|dvr	|t z
}|Scc}wcc}wcc}w)N��ssl�tls�opensslzCipherString = �
zCiphersuites = zTLS.MinProtocol =� zTLS.MaxProtocol =z# Disable all TLS
zTLS.MinProtocol = DTLSv1.2
zTLS.MaxProtocol = DTLSv1.1
zDTLS.MinProtocol =zDTLS.MaxProtocol =z# Disable all DTLS
zDTLS.MinProtocol = DTLSv1.2
zDTLS.MaxProtocol = DTLSv1.1
�signzSignatureAlgorithms = �:�group�*z	Groups = �/�__ems�RELAXzOptions = RHNoEnforceEMSinFIPS
r]r^z
[req]
default_bits = �SHA1r*)�scopedrgrzr��min_tls_version�protocol_map�max_tls_version�min_dtls_version�max_dtls_version�sign_map�join�group_pq_map�group_classic_map�enums�maxri�
RH_ALLOW_SHA1)rs�unscoped_policyrtrvrurw�sig_algs�	groups_pq�groups_classic�
group_classes�default_rsa_sizes           re�generate_configz OpenSSLGenerator.generate_config:s�� �'�'�(A�B���N�N���c�2�2�6�:�;�2�>��	��s�8�8��@�A��
D�D���!�!�
�$�$�A�
�1�S�%�%�f�&<�&<�=�>�b�A�A�A��!�!�
�$�$�A�
�1�S�%�%�f�&<�&<�=�>�b�A�A�A��!�!�)�
�&�&�A�
�/�/�A�
�/�/�A��"�"�
�%�%�A�
�1�S�%�%�f�&=�&=�>�?�r�B�B�A��"�"�
�%�%�A�
�1�S�%�%�f�&=�&=�>�?�r�B�B�A��"�"�*�
�'�'�A�
�0�0�A�
�0�0�A�-.�v�Y�L�Y��!�s�|�|�:K�C�L�L��O�Y��L�	�
%�����(:�
:�T�
A�A��34�G�*�/�*�Q��S�-�-�-��%�%�a�(�*�	�/�<=�g�J�9�J�q��#�"7�"7�7��/�/��2�J��9�-6�c�C�H�H�Y�'�'�
(�2�3A��c�h�h�~�.�.�/�r�
K�	�	
�[�3�8�8�M�2�
2�T�
9�9���<�<�� �G�+�
�3�3�A��v���~�>��E��	�'�(8�'9��
<�<���Q�v�Y��
���A����;M��/��9s�J�"J�$J�$Jc�D�d}tjd|tj�\}	tdd|g�}d	|vr&|jd
�|jd|���yy#t$r(|jd�|jd|���Yyt$rYywxYw)N�z^CipherString = (.*)$r��ciphersz-There is an error in openssl generated policyzPolicy:
FTsADHz(There is ADH in openssl generated policy)�re�findall�	MULTILINErr�eprint�OSError)rs�config�outputr�s    re�test_configzOpenSSLGenerator.test_configvs������:�:�6�����M���		�!�9�#,�g�#7�8�F��V���J�J�A�B��J�J��6�(�+�,����"�	��J�J�F�G��J�J��6�(�+�,���	��	�s�A$�$.B�B�BN)�__name__�
__module__�__qualname__�CONFIG_NAMErnrorkrmrrr�r�r�r�r��classmethodrzr�r�r�rar�rerrs����K���r���r��	�y��	�y�	�
	�y��	�r�
�	�[��	�G��	�G��	�6��	�"��	�R��	�G��	�6��	�6�� 	��!�N�,E�"�=�1�!�=�1�	�������� �� �
�����������!�������K�%�o��L�!�9�-�#
�%�o��L�!�9�-�#
�+�+��L�!�9�-�)
�%�o��L�!�9�-�#
��h��L�#�$�!�9�-�	
��h��L�#�$�!�9�-�	
�C'�O�V��������	�L�F��J�F��J�F�	�l�F�	��	F�
	��F�	�.�
F�	��F�	��F�	�.�F�	��F�	��F�	�.�F�	��F�	��F�	�.�F� 	�0�!F�"	�0�#F�$	�0�%F�&	 �!6�'F�(	 �!6�)F�*	 �!6�+F�,	��-F�.	�w�/F�2	'�(G�3F�4	'�(G�5F�6	'�(G�7F�:	�:�;F�<	��=F�>	�-�?F�@	�-�AF�B	�-�CF�D	�-�EF�F	��GF�H	�)�IF�J	�:�KF�L	��MF�N	�-�OF�P	�-�QF�R	��SF�T	�)�UF�V	�-�WF�X	�:�YF�Z	��[F�\	��]F�^	�)�_F�`	�)�aF�b	�\�cF�d	�+�eF�f	�1�gF�h	�-�iF�j	� 7�kF�l	"�#=�mF�n	�m�oF�p	�-�qF�r	�/�sF�t	 �!9�uF�v	 �!9�wF�x	%�&C�yF�z	(�)I�{F�|	 �!9�}F�~	%�&C�F�@	(�)I�AF�B	 �!9�CF�D	%�&C�EF�F	!�";�GF�H	&�'E�IF�J	)�*K�KF�H�T �)�-��)�)�=�<�!�+�?�
�L� !� � � ���!�!�!�!�!�C�C�C���"�1��1�f�
��
��9��9�v���r�rc�0�eZdZdZed��Zed��Zy)�OpenSSLFIPSGenerator�openssl_fipsc��|jhd��}tjt|jddk7��S)Nr�r�r�)r��FIPS_MODULE_CONFIG�format�intr�)rsr�rts   rer�z$OpenSSLFIPSGenerator.generate_config�s9�� �'�'�(A�B��"�(�(��V�\�\�'�-B�g�-M�)N�O�Or�c��y)NTra)rsr�s  rer�z OpenSSLFIPSGenerator.test_config�s��r�N)r�r�r�r�r�r�r�rar�rer�r��s/�� �K��P��P����r�r�)
r��
subprocessrr�configgeneratorrr�r�rr�rar�re�<module>r�s:��
�7�,��
���o��o�d�?�r�