a
/$ZB @ sx d Z ddlmZ ddlZddlZddlZddlmZ ddlm Z m
Z
m Z m Z m
Z
z ddlZW n eyr dZY n0 dZdZdZd Zd
Zd Zd*d
dZdd Zddd eefddZd+ddZdd Zd,ddZ d-ddZ d.d d Z e d krtd Z ee Z!e"e! ee d d!d"Z#e"ee# d#Z ee d$ d$d!d"edd%Z#e"e ee# e e$d&% Z&ee#d' e#d( e&dd)stJ dS )/z,Pythonic XML Security Library implementation )print_functionN)StringIO)BIOEVPRSAX509m2a
%(digest_value)s
z
%(signed_info)s
%(signature_value)s
%(key_info)s
%(ref_xml)s
aO
%(digest_value)s
z
%(signed_info)s
%(signature_value)s
%(key_info)s
z
%(modulus)s%(exponent)s
z
%(issuer_name)s%(serial_number)s
Tc C sT t }tdur.tjt | }|j||d n ddlm} || j||d | S )z@Return the canonical (c14n) form of the xml document for hashingN)Z exclusive )SimpleXMLElement)r lxmlZetreeparseZ
write_c14nZ simplexmlr
getvalue)xmlc14n_excoutputZetr
r 5/usr/lib/python3/dist-packages/pysimplesoap/xmlsec.py canonicalizeb s r c C s t t| S )z/Create a SHA1 hash and return the base64 string)base64 b64encodehashlibsha1digest)Zpayloadr r r sha1_hash_digestq s r c sl t | |}||t|d } t | |} t| fdd}
|
t| } ||| t | t
|
||dS )zISign an XML document usign RSA (templates: enveloped -ref- or enveloping))ref_uriZ digest_valuec s S )Nr )argskwargspasswordr r zrsa_sign..)ref_xmlr signed_infosignature_valuekey_info) r r r Zload_keyZsignr r r r r r$ ) r r Z private_keyr certr
sign_templatekey_info_templater! r" pkey signaturer r r rsa_signv s
r* c C sx | dr t|}t|}n
tt}t }| | |j
dd | | t
| | |t|}|dkS )zDVerify a XML document signature usign RSA-SHA1, return True if validz-----BEGIN PUBLIC KEY-----r )Zmdr )
startswithr MemoryBufferr Zload_pub_key_bioZ load_pub_keyZ certificater ZPKeyZ
assign_rsaZ
reset_contextZ verify_initZ
verify_updater Z verify_finalr Z b64decode)r r) keyr bioZrsaZpubkeyZretr r r
rsa_verify s
r/ c C sp t | jdd }tt| jdd}|r>t |nd}||||rX|
nd|rf| ndd S )zHConvert private key (PEM) to XML Signature format (RSAKeyValue/X509Data) Nhexr )modulusexponentZ issuer_nameZ
serial_number)
r r er Z bn_to_hexZ mpi_to_bnndecodeencodex509_parse_certZ
get_issuerZas_textZget_serial_number)r( r% r' r4 r3 x509r r r r$ s r$ Fc C sR |r t | }t|tj}n0| drBt | }t|tj}n t| d}|S )zECreate a X509 certificate from binary DER, plain text PEM or filenamez-----BEGIN CERTIFICATE-----r )r r, r Z
load_cert_bioZ
FORMAT_DERr+ Z
FORMAT_PEMZ load_cert)r% binaryr. r: r r r r9 s
r9 c C s t | |}| S )z:Return the public key (PEM format) from a X509 certificate)r9
get_pubkeyZget_rsaZas_pem)r% r; r: r r r x509_extract_rsa_public_key s
r= c C s t | }t ||}|| S )zGValidate the certificate's authenticity using a certification authority)r9 Zverifyr< )Zcacertr% r; ZcaZcrtr r r x509_verify s
r> __main__zLz#objectzno_encriptada.keyr z=r2 )r& r zzunimercado.crtr" r# )r )T)T)F)F)F)'__doc__Z
__future__r r r osZ cStringIOr ZM2Cryptor r r r r Z
lxml.etreer ImportErrorZ
SIGN_REF_TMPLZ SIGNED_TMPLZ
SIGN_ENV_TMPLZSIGNATURE_TMPLZKEY_INFO_RSA_TMPLZKEY_INFO_X509_TMPLr r r* r/ r$ r9 r= r> __name__Z
sample_xmlr printvarsopenreadZ
public_keyr r r r
sR