# Buggy code
def _encrypt_private(self, ret, dictkey, target):
    """
    The server equivalent of ReqChannel.crypted_transfer_decode_dictentry
    """
    # encrypt with a specific AES key
    pubfn = os.path.join(self.opts["pki_dir"], "minions", target)
    key = salt.crypt.Crypticle.generate_key_string()
    pcrypt = salt.crypt.Crypticle(self.opts, key)
    try:
        with salt.utils.fopen(pubfn) as f:
            pub = RSA.importKey(f.read())
    except (ValueError, IndexError, TypeError):
        return self.crypticle.dumps({})

    pret = {}
    cipher = PKCS1_OAEP.new(pub)
    if six.PY2:
        pret["key"] = cipher.encrypt(key)
    else:
        pret["key"] = cipher.encrypt(salt.utils.to_bytes(key))
    pret[dictkey] = pcrypt.dumps(ret if ret is not False else {})
    return pret


# Traceback (ParserError)
li1105-12 ~ master # salt jmoney-master state.show_top
jmoney-master:
The minion function caused an exception: Traceback (most recent call last):
File "/root/salt/salt/minion.py", line 1173, in _thread_return
return_data = func(*args, **kwargs)
File "/root/salt/salt/modules/state.py", line 1045, in show_top
top_ = st_.get_top()
File "/root/salt/salt/state.py", line 2436, in get_top
tops = self.get_tops()
File "/root/salt/salt/state.py", line 2313, in get_tops
saltenv=saltenv
File "/root/salt/salt/template.py", line 79, in compile_template
ret = render(input_data, saltenv, sls, **render_kwargs)
File "/root/salt/salt/renderers/yaml.py", line 50, in render
data = load(yaml_data, Loader=get_yaml_loader(argline))
File "/usr/lib/python2.7/dist-packages/yaml/__init__.py", line 71, in load
return loader.get_single_data()
File "/usr/lib/python2.7/dist-packages/yaml/constructor.py", line 37, in get_single_data
node = self.get_single_node()
File "/usr/lib/python2.7/dist-packages/yaml/composer.py", line 36, in get_single_node
document = self.compose_document()
File "/usr/lib/python2.7/dist-packages/yaml/composer.py", line 55, in compose_document
node = self.compose_node(None, None)
File "/usr/lib/python2.7/dist-packages/yaml/composer.py", line 84, in compose_node
node = self.compose_mapping_node(anchor)
File "/usr/lib/python2.7/dist-packages/yaml/composer.py", line 127, in compose_mapping_node
while not self.check_event(MappingEndEvent):
File "/usr/lib/python2.7/dist-packages/yaml/parser.py", line 98, in check_event
self.current_event = self.state()
File "/usr/lib/python2.7/dist-packages/yaml/parser.py", line 439, in parse_block_mapping_key
"expected <block end>, but found %r" % token.id, token.start_mark)
ParserError: while parsing a block mapping
in "<unicode string>", line 1, column 1:
base:
^
expected <block end>, but found '<block sequence start>'
in "<unicode string>", line 3, column 5:
- state1
^

# Fixed code
def _encrypt_private(self, ret, dictkey, target):
    """
    The server equivalent of ReqChannel.crypted_transfer_decode_dictentry
    """
    # encrypt with a specific AES key
    pubfn = os.path.join(self.opts["pki_dir"], "minions", target)
    key = salt.crypt.Crypticle.generate_key_string()
    pcrypt = salt.crypt.Crypticle(self.opts, key)
    try:
        with salt.utils.fopen(pubfn) as f:
            pub = RSA.importKey(f.read())
    except (ValueError, IndexError, TypeError):
        return self.crypticle.dumps({})
    except IOError:
        log.error("AES key not found")
        return "AES key not found"

    pret = {}
    cipher = PKCS1_OAEP.new(pub)
    if six.PY2:
        pret["key"] = cipher.encrypt(key)
    else:
        pret["key"] = cipher.encrypt(salt.utils.to_bytes(key))
    pret[dictkey] = pcrypt.dumps(ret if ret is not False else {})
    return pret