@wj dZddlZddlZddlZddlZddlmZddlmZddl m Z ddl Z ejeZ ddededeed ej"fd Zd Zd Z dd ZddZy)z< Helper functions for mTLS in async for discovery of certs. N)Optional) exceptions)secure_cert_key_paths cert_bytes key_bytes passphrasereturncx t|||5\}}}tjtjj}|r|}|j ||||cdddS#1swYyxYw#tj tttttf$r}tjd|d}~wwxYw)aCreates an SSLContext with the given client certificate and key. This function writes the certificate and key to temporary files so that ssl.create_default_context can load them, as the ssl module requires file paths for client certificates. These temporary files are deleted immediately after the SSL context is created. Args: cert_bytes (bytes): The client certificate content in PEM format. key_bytes (bytes): The client private key content in PEM format. passphrase (Optional[bytes]): The passphrase for the private key, if any. Returns: ssl.SSLContext: The configured SSL context with client certificate. Raises: google.auth.exceptions.TransportError: If there is an error loading the certificate. )r)certfilekeyfilepasswordNz3Failed to load client certificate and key for mTLS.)rsslcreate_default_contextPurpose SERVER_AUTHload_cert_chainSSLErrorOSErrorIOError ValueError RuntimeError TypeErrorrTransportError) rrr cert_pathkey_pathpassphrase_valcontextr excs \/root/dashboard-youtube/.venv/lib/python3.12/site-packages/google/auth/aio/transport/mtls.pymake_client_cert_ssl_contextr s$ ":yZ P U   001H1HIG)''&$%(     LL'7J i P'' A  s5A1A A% A1%A.*A1.A11-B9B44B9cK tj|g|d{S7#t$r4tj}|jd|g|d{7cYSwxYww)zRun a blocking function in an executor to avoid blocking the event loop. This implements the non-blocking execution strategy for disk I/O operations. N)asyncio to_threadAttributeErrorget_running_looprun_in_executor)funcargsloops r_run_in_executorr*Gsc =&&t3d3333 =''))T))$.callbackgs^ *-D-F'F $Az9 9$$ (Gz2 * 66zBGz ) *s0A  A AA  AA)googleauth transportmtlshas_default_client_cert_sourcerr0)r4s rdefault_client_cert_sourcer:UsO ;; % % D D# E .. 6  % OcKttjjjj |dd{\}}|r|rd||dfSy7w)aReturns the client side certificate, private key and passphrase. We look for certificates and keys with the following order of priority: 1. Certificate and key specified by certificate_config.json. Currently, only X.509 workload certificates are supported. Args: certificate_config_path (str): The certificate_config.json file path. Returns: Tuple[bool, bytes, bytes, bytes]: A boolean indicating if cert, key and passphrase are obtained, the cert bytes and key bytes both in PEM format, and passphrase bytes. Raises: google.auth.exceptions.ClientCertError: if problems occurs when getting the cert, key and passphrase. FNT)FNNN)r*r5r6r7 _mtls_helper_get_workload_cert_and_key)certificate_config_pathcertkeys rget_client_ssl_credentialsrBssX.' **EE ID#  T3$$ "s=AAAcK|r4|}tj|r|d{\}}n|\}}d||fStd{\}}}}|||fS7.7w)aReturns the client side certificate and private key. The function first tries to get certificate and key from client_cert_callback; if the callback is None or doesn't provide certificate and key, the function tries application default SSL credentials. Args: client_cert_callback (Optional[Callable[[], (bytes, bytes)]]): An optional callback which returns client certificate bytes and private key bytes both in PEM format. Returns: Tuple[bool, bytes, bytes]: A boolean indicating if cert and key are obtained, the cert bytes and key bytes both in PEM format. Raises: google.auth.exceptions.ClientCertError: if problems occurs when getting the cert and key. NT)inspect isawaitablerB)client_cert_callbackresultr@rAhas_certr1s rr/r/sn(%'   v &$ ID#ID#T3#=#??HdC T3  % @s!$AAAAAAr.)__doc__r"rDloggingrtypingr google.authr"google.auth.transport._mtls_helperrgoogle.auth.transport.mtlsr5 getLogger__name___LOGGERbytes SSLContextr r*r:rBr/r;rrUs "D! '  H %HL$$"'$5=e_$^^$N =>! #Fr;