o @sHdZddlmZddlmZGdddeZGdddeZdd Zd S) z1OpenSSL Crypto-related routines for oauth2client.)crypto)_helpersc@s,eZdZdZddZddZeddZdS) OpenSSLVerifierz$Verifies the signature on a message.cC ||_dS)zlConstructor. Args: pubkey: OpenSSL.crypto.PKey, The public key to verify with. N)_pubkey)selfpubkeyr D/tmp/google-cloud-sdk/lib/third_party/oauth2client/_openssl_crypt.py__init__ zOpenSSLVerifier.__init__cCsLtj|dd}tj|dd}z t|j||dWdStjy%YdSw)aVerifies a message against a signature. Args: message: string or bytes, The message to verify. If string, will be encoded to bytes as utf-8. signature: string or bytes, The signature on the message. If string, will be encoded to bytes as utf-8. Returns: True if message was signed by the private key associated with the public key that this object was constructed with. utf-8encodingsha256TF)r _to_bytesrverifyrError)rmessage signaturer r r r s zOpenSSLVerifier.verifycCs:t|}|rttj|}t|Sttj|}t|S)aConstruct a Verified instance from a string. Args: key_pem: string, public key in PEM format. is_x509_cert: bool, True if key_pem is an X509 cert, otherwise it is expected to be an RSA key in PEM format. Returns: Verifier instance. Raises: OpenSSL.crypto.Error: if the key_pem can't be parsed. )rrrload_certificate FILETYPE_PEMload_privatekeyr)key_pem is_x509_certrr r r from_string5s zOpenSSLVerifier.from_stringN)__name__ __module__ __qualname____doc__r r staticmethodrr r r r rs rc@s.eZdZdZddZddZed ddZd S) OpenSSLSignerz"Signs messages with a private key.cCr)ztConstructor. Args: pkey: OpenSSL.crypto.PKey (or equiv), The private key to sign with. N)_key)rpkeyr r r r Or zOpenSSLSigner.__init__cCstj|dd}t|j|dS)zSigns a message. Args: message: bytes, Message to be signed. Returns: string, The signature of the message for the given key. r rr)rrrsignr")rrr r r r$Ws zOpenSSLSigner.sign notasecretcCsTt|}t|}|rttj|}t|Stj|dd}t||}t|S)a>Construct a Signer instance from a string. Args: key: string, private key in PKCS12 or PEM format. password: string, password for the private key file. Returns: Signer instance. Raises: OpenSSL.crypto.Error if the key can't be parsed. r r) rr_parse_pem_keyrrr load_pkcs12get_privatekeyr!)keypasswordparsed_pem_keyr#r r r rcs  zOpenSSLSigner.from_stringN)r%)rrrrr r$r rr r r r r!Ls  r!cCs(t|}t||}ttj|S)aConvert the contents of a PKCS#12 key to PEM using pyOpenSSL. Args: private_key_bytes: Bytes. PKCS#12 key in DER format. private_key_password: String. Password for PKCS#12 key. Returns: String. PEM contents of ``private_key_bytes``. )rrrr'dump_privatekeyrr()private_key_bytesprivate_key_passwordpkcs12r r r pkcs12_key_as_pem{s r0N) rOpenSSLr oauth2clientrobjectrr!r0r r r r s   7 /