You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
66 lines
2.4 KiB
66 lines
2.4 KiB
# Copyright (C) Dnspython Contributors, see LICENSE for text of ISC license
|
|
|
|
# Copyright (C) 2003-2007, 2009-2011 Nominum, Inc.
|
|
#
|
|
# Permission to use, copy, modify, and distribute this software and its
|
|
# documentation for any purpose with or without fee is hereby granted,
|
|
# provided that the above copyright notice and this permission notice
|
|
# appear in all copies.
|
|
#
|
|
# THE SOFTWARE IS PROVIDED "AS IS" AND NOMINUM DISCLAIMS ALL WARRANTIES
|
|
# WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
|
|
# MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL NOMINUM BE LIABLE FOR
|
|
# ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
|
|
# WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
|
|
# ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT
|
|
# OF OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
|
|
|
|
"""A place to store TSIG keys."""
|
|
|
|
import base64
|
|
|
|
import dns.name
|
|
import dns.tsig
|
|
|
|
|
|
def from_text(textring):
|
|
"""Convert a dictionary containing (textual DNS name, base64 secret)
|
|
pairs into a binary keyring which has (dns.name.Name, bytes) pairs, or
|
|
a dictionary containing (textual DNS name, (algorithm, base64 secret))
|
|
pairs into a binary keyring which has (dns.name.Name, dns.tsig.Key) pairs.
|
|
@rtype: dict"""
|
|
|
|
keyring = {}
|
|
for (name, value) in textring.items():
|
|
name = dns.name.from_text(name)
|
|
if isinstance(value, str):
|
|
keyring[name] = dns.tsig.Key(name, value).secret
|
|
else:
|
|
(algorithm, secret) = value
|
|
keyring[name] = dns.tsig.Key(name, secret, algorithm)
|
|
return keyring
|
|
|
|
|
|
def to_text(keyring):
|
|
"""Convert a dictionary containing (dns.name.Name, dns.tsig.Key) pairs
|
|
into a text keyring which has (textual DNS name, (textual algorithm,
|
|
base64 secret)) pairs, or a dictionary containing (dns.name.Name, bytes)
|
|
pairs into a text keyring which has (textual DNS name, base64 secret) pairs.
|
|
@rtype: dict"""
|
|
|
|
textring = {}
|
|
def b64encode(secret):
|
|
return base64.encodebytes(secret).decode().rstrip()
|
|
for (name, key) in keyring.items():
|
|
name = name.to_text()
|
|
if isinstance(key, bytes):
|
|
textring[name] = b64encode(key)
|
|
else:
|
|
if isinstance(key.secret, bytes):
|
|
text_secret = b64encode(key.secret)
|
|
else:
|
|
text_secret = str(key.secret)
|
|
|
|
textring[name] = (key.algorithm.to_text(), text_secret)
|
|
return textring
|