ruạṛ
a ԏ�iG" � @ s0 d dl mZ G dd� de�ZG dd� de�ZdS )� )�ConfigGeneratorc @ s8 e Zd ZdZh d�Zddddddd d d d d d d d� Zd d dd d d d ddddddddddddd d d d �Zddd �Zd �d �d!d"d �d#�d$d%d&d'd d d d(d)� Z d*d+d,d-d.d/d0d1d2d3d4d5d6d7� Z g d8�Z d9d:d;d<d=d>d?d@dAdBdCdDdEdFdGdHdIdJdKdLdMdNdOdP�Z dQdRdSdTdUdVd dW�Z d dXdYdZd[d\d]�Zed^d_� �Zed`da� �ZdbS )c� JavaGenerator�java� ZsslZtlszjava-tls�MD2�MD5�SHA1ZSHA224ZSHA256ZSHA384ZSHA512ZSHA3_256ZSHA3_384ZSHA3_512� ) r r r zSHA2-224zSHA2-256zSHA2-384zSHA2-512zSHA3-256zSHA3-384zSHA3-512z SHAKE-128z SHAKE-256ZGOSTR94zChaCha20-Poly1305Z AES_256_CBCZ AES_128_CBCZ AES_256_GCMZ AES_128_GCMZ AES_256_CCMZ AES_128_CCMZRC4_128ZRC4_40ZRC2ZDES_CBCZ DES40_CBCZ 3DES_EDE_CBCz anon, NULL)z AES-256-CTRz AES-128-CTRzCHACHA20-POLY1305zCAMELLIA-256-GCMzCAMELLIA-128-GCMzCAMELLIA-256-CBCzCAMELLIA-128-CBCz AES-256-CBCz AES-128-CBCz AES-256-GCMz AES-128-GCMz AES-256-CCMz AES-128-CCM�RC4-128zRC4-40zRC2-CBCzDES-CBCz DES40-CBC�3DES-CBCzSEED-CBCzIDEA-CBCZNULL)r r �, )Z RSA_EXPORTZDHE_DSS_EXPORTZDHE_RSA_EXPORTZ DH_DSS_EXPORTZ DH_RSA_EXPORTzDH_RSA, DH_DSSzDH_anon, ECDH_anon)Z TLS_RSA_WITH_AES_256_CBC_SHA256Z TLS_RSA_WITH_AES_256_CBC_SHAZ TLS_RSA_WITH_AES_128_CBC_SHA256Z TLS_RSA_WITH_AES_128_CBC_SHAZ TLS_RSA_WITH_AES_256_GCM_SHA384Z TLS_RSA_WITH_AES_128_GCM_SHA256ZDHE_RSAZDHE_DSS�ECDHE�ECDHZRSAPSK) ZEXPORT�DHZANON�RSAzDHE-RSAzDHE-DSSr r ZPSKzDHE-PSKz ECDHE-PSKzRSA-PSKZx25519Z secp256r1Z secp384r1Z secp521r1Zx448Z ffdhe2048Z ffdhe3072Z ffdhe4096Z ffdhe6144Z ffdhe8192ZbrainpoolP256r1ZbrainpoolP384r1ZbrainpoolP512r1) ZX25519Z SECP256R1Z SECP384R1Z SECP521R1ZX448z FFDHE-2048z FFDHE-3072z FFDHE-4096z FFDHE-6144z FFDHE-8192zBRAINPOOL-P256R1zBRAINPOOL-P384R1zBRAINPOOL-P512R1),Z secp112r1Z secp112r2Z secp128r1Z secp128r2Z secp160k1Z secp160r1Z secp160r2Z secp192k1Z secp192r1Z secp224k1Z secp224r1Z secp256k1Z sect113r1Z sect113r2Z sect131r1Z sect131r2Z sect163k1Z sect163r1Z sect163r2Z sect193r1Z sect193r2Z sect233k1Z sect233r1Z sect239k1Z sect283k1Z sect283r1Z sect409k1Z sect409r1Z sect571k1Z sect571r1Z c2tnb191v1Z c2tnb191v2Z c2tnb191v3Z c2tnb239v1Z c2tnb239v2Z c2tnb239v3Z c2tnb359v1Z c2tnb431r1Z prime192v2Z prime192v3Z prime239v1Z prime239v2Z prime239v3ZbrainpoolP320r1Z MD5withRSAZ SHA1withRSAZ SHA1withDSAZ SHA1withECDSAZ SHA224withRSAZ SHA224withDSAZSHA224withECDSAZ SHA256withRSAZ SHA256withDSAZSHA256withECDSAZ SHA384withRSAZ SHA384withDSAZSHA384withECDSAZ SHA512withRSAZ SHA512withDSAZSHA512withECDSAZEd25519ZEd448ZSHA1withRSAandMGF1ZSHA224withRSAandMGF1ZSHA256withRSAandMGF1ZSHA384withRSAandMGF1ZSHA512withRSAandMGF1)zRSA-MD5zRSA-SHA1zDSA-SHA1z ECDSA-SHA1z RSA-SHA2-224z DSA-SHA2-224zECDSA-SHA2-224z RSA-SHA2-256z DSA-SHA2-256zECDSA-SHA2-256z RSA-SHA2-384z DSA-SHA2-384zECDSA-SHA2-384z RSA-SHA2-512z DSA-SHA2-512zECDSA-SHA2-512z EDDSA-ED25519z EDDSA-ED448z RSA-PSS-SHA1zRSA-PSS-SHA2-224zRSA-PSS-SHA2-256zRSA-PSS-SHA2-384zRSA-PSS-SHA2-512ZSSLv2ZSSLv3ZTLSv1zTLSv1.1zTLSv1.2zDTLSv1.0)zSSL2.0zSSL3.0zTLS1.0zTLS1.1zTLS1.2zDTLS1.0zDTLS1.2ZHmacMD5ZHmacSHA1Z HmacSHA256Z HmacSHA384Z HmacSHA512)ZAEADzHMAC-MD5z HMAC-SHA1z HMAC-SHA2-256z HMAC-SHA2-384z HMAC-SHA2-512c C s� |j }|j}d}g d�}|d D ],}z|�| j| � W q tyJ Y q 0 q dd� }|�|d|jd �� |�|d|jd �� |�|d |jd �� |�|d |jd �� dd�|�� �}|d D ]0}z| �|| j| |�}W q� ty� Y q�0 q�|dd�|�� �7 }| �|d|�}|d D ]4}z| �|| j| |�}W n t�yR Y n0 �q"|d D ]4}z| �|| j | |�}W n t�y� Y n0 �q`|d D ]4}z| �|| j | |�}W n t�y� Y n0 �q�|d D ]4}z| �|| j | |�}W n t�y Y n0 �q�|d7 }d} |d D ]4}z| �| | j | |�} W n t�yV Y n0 �q&| j D ]} | �| | |�} �qb|d| � d�7 }d} |d D ]4}z| �| | j| |�} W n t�y� Y n0 �q�|d| � d�7 }|S )Nr )r Z MD5withDSAZ MD5withECDSARIPEMD160withRSAZRIPEMD160withECDSAZRIPEMD160withRSAandMGF1�signc S s |r| � d|� �S | S )Nz keySize < � )�keyword�sizer r �:/usr/share/crypto-policies/python/policygenerators/java.py�keysize� s z.JavaGenerator.generate_config.<locals>.keysizer Z min_rsa_sizeZDSAZ min_dsa_sizer � min_dh_sizeZECZ min_ec_sizez jdk.certpath.disabledAlgorithms=�hashz jdk.tls.disabledAlgorithms=z include jdk.disabled.namedCurvesZprotocolZ key_exchangeZcipherZmac� r �groupzjdk.disabled.namedCurves=zjdk.tls.legacyAlgorithms=)�enabledZdisabled�append� sign_not_map�KeyError�integers�join� hash_not_map�protocol_not_map�key_exchange_not_map�cipher_not_map� mac_not_map� group_not_map�group_always_disabled�cipher_legacy_map) �cls�policy�p�ip�sepZshared�ir �cfg�s�gr r r �generate_config� sx z JavaGenerator.generate_configc C s dS �NTr �r) Zconfigr r r � test_config s zJavaGenerator.test_configN)�__name__� __module__� __qualname__� CONFIG_NAME�SCOPESr! r$ r( r r# r& r' r r" r% � classmethodr2 r5 r r r r r s� ���� ��� � Tr c @ s6 e Zd ZdZh d�ZejZedd� �Z edd� �Z dS )�JavaSystemGeneratorZ javasystemr c C sv |j }d}d}|d|jd � d�7 }d}|d D ]0}z| �|| j| |�}W q0 ty^ Y q00 q0|d|� d�7 }|S )Nr r zjdk.tls.ephemeralDHKeySize=r r r zjdk.tls.namedGroups=)r r r � group_mapr )r) r* r+ r- r/ r0 r. r r r r2 s z#JavaSystemGenerator.generate_configc C s dS r3 r r4 r r r r5 s z JavaSystemGenerator.test_configN) r6 r7 r8 r9 r: r r& r= r; r2 r5 r r r r r< s r< N)Zconfiggeneratorr r r< r r r r �<module> s
cải xoăn