paramiko-cloud 1.3.1__tar.gz → 1.3.2__tar.gz

{paramiko_cloud-1.3.1 → paramiko_cloud-1.3.2}/PKG-INFO

@@ -1,11 +1,11 @@
 Metadata-Version: 2.4
 Name: paramiko-cloud
-Version: 1.3.1
+Version: 1.3.2
 Summary: Use cloud-managed keys to sign SSH certificates
 Author-email: Jason Rigby <hello@jasonrig.by>
 License-Expression: MIT
 Project-URL: Homepage, https://github.com/jasonrig/paramiko-cloud/
-Requires-Python: >=3.9
+Requires-Python: >=3.10
 Description-Content-Type: text/markdown
 Requires-Dist: paramiko
 Requires-Dist: cryptography

{paramiko_cloud-1.3.1 → paramiko_cloud-1.3.2}/paramiko_cloud/pki.py

@@ -14,7 +14,7 @@ try:
 except ImportError:  # pragma: no cover - only reached on newer Paramiko versions
     DSSKey = None
 
-from paramiko_cloud.protobuf.csr_pb2 import CSR  # type: ignore[attr-defined]
+from paramiko_cloud.protobuf.csr_pb2 import CSR
 
 
 class CertificateBlob(PublicBlob):
@@ -167,7 +167,7 @@ class CertificateExtensions(enum.Enum):
             The serialized enum value
         """
 
-        return getattr(CSR.Extensions, self.name)
+        return getattr(CSR.Extension, self.name)
 
     @classmethod
     def from_pb_enum(cls, value: int) -> "CertificateExtensions":
@@ -303,12 +303,12 @@ class CertificateSigningRequest:
         csr.validBefore = self.cert_params.valid_before
         for opt, val in self.cert_params.critical_opts:
             option_value = CSR.CriticalOptionValue()
-            option_value.type = opt.pb_enum()
+            option_value.type = cast(CSR.CriticalOption, opt.pb_enum())
             option_value.value = val
             csr.criticalOptions.append(option_value)
         for ext, val in self.cert_params.extensions:
             extension_value = CSR.ExtensionValue()
-            extension_value.type = ext.pb_enum()
+            extension_value.type = cast(CSR.Extension, ext.pb_enum())
             extension_value.value = val
             csr.extensions.append(extension_value)
         csr.publicKeyType = self.public_key.get_name()

paramiko_cloud-1.3.2/paramiko_cloud/protobuf/csr_pb2.pyi

@@ -0,0 +1,72 @@
+from google.protobuf.internal import containers as _containers
+from google.protobuf.internal import enum_type_wrapper as _enum_type_wrapper
+from google.protobuf import descriptor as _descriptor
+from google.protobuf import message as _message
+from collections.abc import Iterable as _Iterable, Mapping as _Mapping
+from typing import ClassVar as _ClassVar, Optional as _Optional, Union as _Union
+
+DESCRIPTOR: _descriptor.FileDescriptor
+
+class CSR(_message.Message):
+    __slots__ = ("type", "criticalOptions", "extensions", "keyId", "serial", "principals", "validAfter", "validBefore", "publicKeyType", "publicKey")
+    class Type(int, metaclass=_enum_type_wrapper.EnumTypeWrapper):
+        __slots__ = ()
+        USER: _ClassVar[CSR.Type]
+        HOST: _ClassVar[CSR.Type]
+    USER: CSR.Type
+    HOST: CSR.Type
+    class CriticalOption(int, metaclass=_enum_type_wrapper.EnumTypeWrapper):
+        __slots__ = ()
+        FORCE_COMMAND: _ClassVar[CSR.CriticalOption]
+        SOURCE_ADDRESS: _ClassVar[CSR.CriticalOption]
+    FORCE_COMMAND: CSR.CriticalOption
+    SOURCE_ADDRESS: CSR.CriticalOption
+    class Extension(int, metaclass=_enum_type_wrapper.EnumTypeWrapper):
+        __slots__ = ()
+        NO_TOUCH_REQUIRED: _ClassVar[CSR.Extension]
+        PERMIT_X11_FORWARDING: _ClassVar[CSR.Extension]
+        PERMIT_AGENT_FORWARDING: _ClassVar[CSR.Extension]
+        PERMIT_PORT_FORWARDING: _ClassVar[CSR.Extension]
+        PERMIT_PTY: _ClassVar[CSR.Extension]
+        PERMIT_USER_RC: _ClassVar[CSR.Extension]
+    NO_TOUCH_REQUIRED: CSR.Extension
+    PERMIT_X11_FORWARDING: CSR.Extension
+    PERMIT_AGENT_FORWARDING: CSR.Extension
+    PERMIT_PORT_FORWARDING: CSR.Extension
+    PERMIT_PTY: CSR.Extension
+    PERMIT_USER_RC: CSR.Extension
+    class CriticalOptionValue(_message.Message):
+        __slots__ = ("type", "value")
+        TYPE_FIELD_NUMBER: _ClassVar[int]
+        VALUE_FIELD_NUMBER: _ClassVar[int]
+        type: CSR.CriticalOption
+        value: str
+        def __init__(self, type: _Optional[_Union[CSR.CriticalOption, str]] = ..., value: _Optional[str] = ...) -> None: ...
+    class ExtensionValue(_message.Message):
+        __slots__ = ("type", "value")
+        TYPE_FIELD_NUMBER: _ClassVar[int]
+        VALUE_FIELD_NUMBER: _ClassVar[int]
+        type: CSR.Extension
+        value: str
+        def __init__(self, type: _Optional[_Union[CSR.Extension, str]] = ..., value: _Optional[str] = ...) -> None: ...
+    TYPE_FIELD_NUMBER: _ClassVar[int]
+    CRITICALOPTIONS_FIELD_NUMBER: _ClassVar[int]
+    EXTENSIONS_FIELD_NUMBER: _ClassVar[int]
+    KEYID_FIELD_NUMBER: _ClassVar[int]
+    SERIAL_FIELD_NUMBER: _ClassVar[int]
+    PRINCIPALS_FIELD_NUMBER: _ClassVar[int]
+    VALIDAFTER_FIELD_NUMBER: _ClassVar[int]
+    VALIDBEFORE_FIELD_NUMBER: _ClassVar[int]
+    PUBLICKEYTYPE_FIELD_NUMBER: _ClassVar[int]
+    PUBLICKEY_FIELD_NUMBER: _ClassVar[int]
+    type: CSR.Type
+    criticalOptions: _containers.RepeatedCompositeFieldContainer[CSR.CriticalOptionValue]
+    extensions: _containers.RepeatedCompositeFieldContainer[CSR.ExtensionValue]
+    keyId: str
+    serial: int
+    principals: _containers.RepeatedScalarFieldContainer[str]
+    validAfter: int
+    validBefore: int
+    publicKeyType: str
+    publicKey: bytes
+    def __init__(self, type: _Optional[_Union[CSR.Type, str]] = ..., criticalOptions: _Optional[_Iterable[_Union[CSR.CriticalOptionValue, _Mapping]]] = ..., extensions: _Optional[_Iterable[_Union[CSR.ExtensionValue, _Mapping]]] = ..., keyId: _Optional[str] = ..., serial: _Optional[int] = ..., principals: _Optional[_Iterable[str]] = ..., validAfter: _Optional[int] = ..., validBefore: _Optional[int] = ..., publicKeyType: _Optional[str] = ..., publicKey: _Optional[bytes] = ...) -> None: ...

paramiko_cloud-1.3.2/paramiko_cloud/protobuf/rpc_pb2.pyi

@@ -0,0 +1,51 @@
+from paramiko_cloud.protobuf import csr_pb2 as _csr_pb2
+from google.protobuf.internal import enum_type_wrapper as _enum_type_wrapper
+from google.protobuf import descriptor as _descriptor
+from google.protobuf import message as _message
+from collections.abc import Mapping as _Mapping
+from typing import ClassVar as _ClassVar, Optional as _Optional, Union as _Union
+
+DESCRIPTOR: _descriptor.FileDescriptor
+
+class CloudProvider(int, metaclass=_enum_type_wrapper.EnumTypeWrapper):
+    __slots__ = ()
+    AWS: _ClassVar[CloudProvider]
+    AZURE: _ClassVar[CloudProvider]
+    GCP: _ClassVar[CloudProvider]
+AWS: CloudProvider
+AZURE: CloudProvider
+GCP: CloudProvider
+
+class CloudCertificateSigningRequest(_message.Message):
+    __slots__ = ("provider", "kmsKeyId", "signingRequestPayload")
+    PROVIDER_FIELD_NUMBER: _ClassVar[int]
+    KMSKEYID_FIELD_NUMBER: _ClassVar[int]
+    SIGNINGREQUESTPAYLOAD_FIELD_NUMBER: _ClassVar[int]
+    provider: CloudProvider
+    kmsKeyId: str
+    signingRequestPayload: _csr_pb2.CSR
+    def __init__(self, provider: _Optional[_Union[CloudProvider, str]] = ..., kmsKeyId: _Optional[str] = ..., signingRequestPayload: _Optional[_Union[_csr_pb2.CSR, _Mapping]] = ...) -> None: ...
+
+class CloudCertificateSigningResponse(_message.Message):
+    __slots__ = ("certificateType", "certificate")
+    CERTIFICATETYPE_FIELD_NUMBER: _ClassVar[int]
+    CERTIFICATE_FIELD_NUMBER: _ClassVar[int]
+    certificateType: str
+    certificate: bytes
+    def __init__(self, certificateType: _Optional[str] = ..., certificate: _Optional[bytes] = ...) -> None: ...
+
+class GetCertificateAuthorityRequest(_message.Message):
+    __slots__ = ("provider", "kmsKeyId")
+    PROVIDER_FIELD_NUMBER: _ClassVar[int]
+    KMSKEYID_FIELD_NUMBER: _ClassVar[int]
+    provider: CloudProvider
+    kmsKeyId: str
+    def __init__(self, provider: _Optional[_Union[CloudProvider, str]] = ..., kmsKeyId: _Optional[str] = ...) -> None: ...
+
+class GetCertificateAuthorityResponse(_message.Message):
+    __slots__ = ("keyType", "publicKey")
+    KEYTYPE_FIELD_NUMBER: _ClassVar[int]
+    PUBLICKEY_FIELD_NUMBER: _ClassVar[int]
+    keyType: str
+    publicKey: bytes
+    def __init__(self, keyType: _Optional[str] = ..., publicKey: _Optional[bytes] = ...) -> None: ...

paramiko_cloud-1.3.2/paramiko_cloud/py.typed

@@ -0,0 +1 @@
+

{paramiko_cloud-1.3.1 → paramiko_cloud-1.3.2}/paramiko_cloud/test_pki.py

@@ -3,7 +3,13 @@ from unittest import TestCase
 from cryptography.hazmat.primitives.asymmetric.ec import SECP256R1
 from paramiko import ECDSAKey, RSAKey
 
-from paramiko_cloud.pki import CertificateSigningRequest, CertificateParameters, DSSKey
+from paramiko_cloud.pki import (
+    CertificateExtensions,
+    CertificateParameters,
+    CertificateSigningRequest,
+    DSSKey,
+)
+from paramiko_cloud.protobuf.csr_pb2 import CSR
 
 rsa_key = RSAKey.generate(1024)
 ecdsa_key = ECDSAKey.generate(SECP256R1())
@@ -43,3 +49,13 @@ class PKITest(TestCase):
                 CertificateSigningRequest.from_proto(csr)
         else:
             CertificateSigningRequest.from_proto(csr)
+
+    def test_certificate_extensions_serialize_to_proto(self):
+        csr = CertificateSigningRequest(
+            rsa_key,
+            CertificateParameters(
+                extensions={CertificateExtensions.NO_TOUCH_REQUIRED: ""}
+            ),
+        ).to_proto()
+
+        self.assertEqual(CSR.Extension.NO_TOUCH_REQUIRED, csr.extensions[0].type)

{paramiko_cloud-1.3.1 → paramiko_cloud-1.3.2}/paramiko_cloud.egg-info/PKG-INFO

@@ -1,11 +1,11 @@
 Metadata-Version: 2.4
 Name: paramiko-cloud
-Version: 1.3.1
+Version: 1.3.2
 Summary: Use cloud-managed keys to sign SSH certificates
 Author-email: Jason Rigby <hello@jasonrig.by>
 License-Expression: MIT
 Project-URL: Homepage, https://github.com/jasonrig/paramiko-cloud/
-Requires-Python: >=3.9
+Requires-Python: >=3.10
 Description-Content-Type: text/markdown
 Requires-Dist: paramiko
 Requires-Dist: cryptography

{paramiko_cloud-1.3.1 → paramiko_cloud-1.3.2}/paramiko_cloud.egg-info/SOURCES.txt

@@ -4,6 +4,7 @@ paramiko_cloud/__init__.py
 paramiko_cloud/base.py
 paramiko_cloud/grpc_server.py
 paramiko_cloud/pki.py
+paramiko_cloud/py.typed
 paramiko_cloud/test_grpc_server.py
 paramiko_cloud/test_helpers.py
 paramiko_cloud/test_pki.py
@@ -26,5 +27,7 @@ paramiko_cloud/gcp/keys.py
 paramiko_cloud/gcp/test_keys.py
 paramiko_cloud/protobuf/__init__.py
 paramiko_cloud/protobuf/csr_pb2.py
+paramiko_cloud/protobuf/csr_pb2.pyi
 paramiko_cloud/protobuf/rpc_pb2.py
+paramiko_cloud/protobuf/rpc_pb2.pyi
 paramiko_cloud/protobuf/rpc_pb2_grpc.py

{paramiko_cloud-1.3.1 → paramiko_cloud-1.3.2}/pyproject.toml

@@ -4,10 +4,10 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "paramiko-cloud"
-version = "1.3.1"
+version = "1.3.2"
 description = "Use cloud-managed keys to sign SSH certificates"
 readme = "README.md"
-requires-python = ">=3.9"
+requires-python = ">=3.10"
 license = "MIT"
 authors = [
   { name = "Jason Rigby", email = "hello@jasonrig.by" },
@@ -44,6 +44,10 @@ packages = [
   "paramiko_cloud.protobuf",
 ]
 
+[tool.setuptools.package-data]
+paramiko_cloud = ["py.typed"]
+"paramiko_cloud.protobuf" = ["*.pyi"]
+
 [dependency-groups]
 dev = ["pytest", "pytest-cov", "ruff", "mypy"]
 build = ["build"]
@@ -60,7 +64,7 @@ docs = [
 ]
 
 [tool.mypy]
-python_version = "3.9"
+python_version = "3.10"
 ignore_missing_imports = true
 exclude = "(^|/)test_.*\\.py$|(^|/)paramiko_cloud/protobuf/.*_pb2.*\\.py$"
 disable_error_code = ["import-untyped"]
@@ -70,4 +74,4 @@ module = ["paramiko_cloud.protobuf.*"]
 ignore_errors = true
 
 [tool.ruff]
-target-version = "py39"
+target-version = "py310"