RAHHH

backend/lib/python3.12/site-packages/twisted/conch/openssh_compat/__init__.py

@@ -0,0 +1,10 @@
+# Copyright (c) Twisted Matrix Laboratories.
+# See LICENSE for details.
+
+#
+
+"""
+Support for OpenSSH configuration files.
+
+Maintainer: Paul Swartz
+"""

backend/lib/python3.12/site-packages/twisted/conch/openssh_compat/factory.py

@@ -0,0 +1,74 @@
+# -*- test-case-name: twisted.conch.test.test_openssh_compat -*-
+# Copyright (c) Twisted Matrix Laboratories.
+# See LICENSE for details.
+
+"""
+Factory for reading openssh configuration files: public keys, private keys, and
+moduli file.
+"""
+
+import errno
+import os
+from typing import Dict, List, Optional, Tuple
+
+from twisted.conch.openssh_compat import primes
+from twisted.conch.ssh import common, factory, keys
+from twisted.python.util import runAsEffectiveUser
+
+
+class OpenSSHFactory(factory.SSHFactory):
+    dataRoot = "/usr/local/etc"
+    # For openbsd which puts moduli in a different directory from keys.
+    moduliRoot = "/usr/local/etc"
+
+    def getPublicKeys(self):
+        """
+        Return the server public keys.
+        """
+        ks = {}
+        for filename in os.listdir(self.dataRoot):
+            if filename[:9] == "ssh_host_" and filename[-8:] == "_key.pub":
+                try:
+                    k = keys.Key.fromFile(os.path.join(self.dataRoot, filename))
+                    t = common.getNS(k.blob())[0]
+                    ks[t] = k
+                except Exception as e:
+                    self._log.error(
+                        "bad public key file {filename}: {error}",
+                        filename=filename,
+                        error=e,
+                    )
+        return ks
+
+    def getPrivateKeys(self):
+        """
+        Return the server private keys.
+        """
+        privateKeys = {}
+        for filename in os.listdir(self.dataRoot):
+            if filename[:9] == "ssh_host_" and filename[-4:] == "_key":
+                fullPath = os.path.join(self.dataRoot, filename)
+                try:
+                    key = keys.Key.fromFile(fullPath)
+                except OSError as e:
+                    if e.errno == errno.EACCES:
+                        # Not allowed, let's switch to root
+                        key = runAsEffectiveUser(0, 0, keys.Key.fromFile, fullPath)
+                        privateKeys[key.sshType()] = key
+                    else:
+                        raise
+                except Exception as e:
+                    self._log.error(
+                        "bad public key file {filename}: {error}",
+                        filename=filename,
+                        error=e,
+                    )
+                else:
+                    privateKeys[key.sshType()] = key
+        return privateKeys
+
+    def getPrimes(self) -> Optional[Dict[int, List[Tuple[int, int]]]]:
+        try:
+            return primes.parseModuliFile(self.moduliRoot + "/moduli")
+        except OSError:
+            return None

backend/lib/python3.12/site-packages/twisted/conch/openssh_compat/primes.py

@@ -0,0 +1,31 @@
+# Copyright (c) Twisted Matrix Laboratories.
+# See LICENSE for details.
+
+#
+
+"""
+Parsing for the moduli file, which contains Diffie-Hellman prime groups.
+
+Maintainer: Paul Swartz
+"""
+
+
+from typing import Dict, List, Tuple
+
+
+def parseModuliFile(filename: str) -> Dict[int, List[Tuple[int, int]]]:
+    with open(filename) as f:
+        lines = f.readlines()
+    primes: Dict[int, List[Tuple[int, int]]] = {}
+    for l in lines:
+        l = l.strip()
+        if not l or l[0] == "#":
+            continue
+        tim, typ, tst, tri, sizestr, genstr, modstr = l.split()
+        size = int(sizestr) + 1
+        gen = int(genstr)
+        mod = int(modstr, 16)
+        if size not in primes:
+            primes[size] = []
+        primes[size].append((gen, mod))
+    return primes