JFIF $
d d 7
Viewing File: /usr/lib/python3.9/site-packages/certbot/plugins/__pycache__/dns_common.cpython-39.pyc
a
}|�g 8 � @ sT d Z ddlZddlZddlmZ ddlmZ ddlmZ ddlmZ ddlm Z ddlm
Z
dd lm Z ddl Z dd
l
mZ dd lmZ dd lmZ dd
lmZ ddlmZ ddlmZ ddlmZ ddlmZ ddlmZ ddlm Z e� e �Z G dd� de j ej!ej"d�Z#G dd� d�Z$e%dd�dd�Z&e%dd�d d �Z'e%ee% d �d d �Z(dS )!z*Common code for DNS Authenticator Plugins.� N)�sleep)�Callable)�Iterable)�List)�Mapping)�Optional)�Type)�
challenges)� achallenges)�
configuration)�errors)�
interfaces)�
filesystem)�os)�ops)�util)�commonc s� e Zd ZdZejedd�� fdd� Zed2e d e
dd�d d
��Z e e
j ed �d d
�Zeeeej d�dd�Zdd�dd�Zed�dd�Ze e
j e ej d�dd�Ze e
j dd�dd�Zejdd�dd ��Z ejeeedd �d d ��Z ejeeedd �d d!��Z eedd"�d#d$�Z d3eee e egdf dd%�d&d'�Z!d4eee e"eef e e d(gdf d(d)�d*d+�Z#e$eed,�d-d.��Z%e$d5ee e egdf ed/�d0d1��Z&� Z'S )6�DNSAuthenticatorz!Base class for DNS AuthenticatorsN)�config�name�returnc s t � �||� d| _d S )NF)�super�__init__�_attempt_cleanup)�selfr r �� __class__� �>/usr/lib/python3.9/site-packages/certbot/plugins/dns_common.pyr # s zDNSAuthenticator.__init__�
).N)�add�default_propagation_secondsr c C s |d|t dd� d S )N�propagation-secondszjThe number of seconds to wait for DNS to propagate before asking the ACME server to verify the DNS record.)�default�type�help)�int)�clsr r! r r r �add_parser_arguments( s
�z%DNSAuthenticator.add_parser_arguments)�failed_achallsr c C s( | � d�}dj| j||dkr dndd�S )z,See certbot.plugins.common.Plugin.auth_hint.r" z�The Certificate Authority failed to verify the DNS TXT records created by --{name}. Ensure the above domains are hosted by this DNS provider, or try increasing --{name}-propagation-seconds (currently {secs} second{suffix}).� �s� )r Zsecs�suffix)�conf�formatr )r r) Zdelayr r r � auth_hint1 s
��zDNSAuthenticator.auth_hint)�
unused_domainr c C s t jgS �N)r ZDNS01)r r1 r r r �get_chall_pref; s z DNSAuthenticator.get_chall_pref)r c C s d S r2 r �r r r r �prepare> s zDNSAuthenticator.preparec C s
t � �d S r2 ��NotImplementedErrorr4 r r r � more_infoA s zDNSAuthenticator.more_info)�achallsr c C s~ | � � d| _g }|D ]@}|j}|�|�}|�|j�}| �|||� |�|�|j�� qt �
d| � d� � t | � d�� |S )NTz/Waiting %d seconds for DNS changes to propagater" )
�_setup_credentialsr �domain�validation_domain_name�
validation� account_key�_perform�append�response� display_util�notifyr. r )r r9 Z responses�achallr; r< r= r r r �performD s
�zDNSAuthenticator.performc C s> | j r:|D ].}|j}|�|�}|�|j�}| �|||� q
d S r2 )r r; r< r= r> �_cleanup)r r9 rD r; r< r= r r r �cleanup\ s
zDNSAuthenticator.cleanupc C s
t � �dS )z@
Establish credentials, prompting if necessary.
Nr6 r4 r r r r: e s z#DNSAuthenticator._setup_credentials)r; �validation_namer= r c C s
t � �dS )aX
Performs a dns-01 challenge by creating a DNS TXT record.
:param str domain: The domain being validated.
:param str validation_domain_name: The validation record domain name.
:param str validation: The validation record content.
:raises errors.PluginError: If the challenge cannot be performed
Nr6 �r r; rH r= r r r r? l s zDNSAuthenticator._performc C s
t � �dS )aX
Deletes the DNS TXT record which would have been created by `_perform_achall`.
Fails gracefully if no such record exists.
:param str domain: The domain being validated.
:param str validation_domain_name: The validation record domain name.
:param str validation: The validation record content.
Nr6 rI r r r rF y s zDNSAuthenticator._cleanup)�key�labelr c C s0 | � |�}|s,| �|�}t| j| �|�|� dS )a
Ensure that a configuration value is available.
If necessary, prompts the user and stores the result.
:param str key: The configuration key.
:param str label: The user-friendly label for this piece of information.
N)r. �_prompt_for_data�setattrr �dest)r rJ rK �configured_value� new_valuer r r �
_configure� s
zDNSAuthenticator._configure)rJ rK � validatorr c C sB | � |�}|s>| �||�}t| j| �|�tj�tj�|��� dS )a
Ensure that a configuration value is available for a path.
If necessary, prompts the user and stores the result.
:param str key: The configuration key.
:param str label: The user-friendly label for this piece of information.
N) r. �_prompt_for_filerM r rN r �path�abspath�
expanduser)r rJ rK rR rO rP r r r �_configure_file� s
z DNSAuthenticator._configure_file�CredentialsConfiguration)rJ rK �required_variablesrR r c sV t dd�� ��fdd� }��|||� t��|��j�}� rF|�� � �rR�|� |S )a�
As `_configure_file`, but for a credential configuration file.
If necessary, prompts the user and stores the result.
Always stores absolute paths to avoid issues during renewal.
:param str key: The configuration key.
:param str label: The user-friendly label for this piece of information.
:param dict required_variables: Map of variable which must be present to error to display.
:param callable validator: A method which will be called to validate the
`CredentialsConfiguration` resulting from the supplied input after it has been validated
to contain the `required_variables`. Should throw a `~certbot.errors.PluginError` to
indicate any issue.
N��filenamer c s* t | �j�}� r|�� � �r&�|� d S r2 )rX rN �require)r[ Zapplied_configuration�rY r rR r r � __validator� s
z<DNSAuthenticator._configure_credentials.<locals>.__validator)�strrW rX r. rN r\ )r rJ rK rY rR � _DNSAuthenticator__validatorZcredentials_configurationr r] r �_configure_credentials� s
z'DNSAuthenticator._configure_credentials)rK r c sP t dd�� fdd� }tj|d�� �dd�\}}|tjkr<|S t�d�� ���dS ) z�
Prompt the user for a piece of information.
:param str label: The user-friendly label for this piece of information.
:returns: The user's response (guaranteed non-empty).
:rtype: str
N)�ir c s | st �d�� ���d S )NzPlease enter your {0}.)r � PluginErrorr/ )rb �rK r r r^ � s z6DNSAuthenticator._prompt_for_data.<locals>.__validatorzInput your {0}T�Zforce_interactive�{0} required to proceed.)r_ r Zvalidated_inputr/ rB �OKr rc )rK r` �coderA r rd r rL � s
�
z!DNSAuthenticator._prompt_for_data)rK rR r c sR t dd�� �fdd� }tj|d�� �dd�\}}|tjkr>|S t�d�� ���dS ) a�
Prompt the user for a path.
:param str label: The user-friendly label for the file.
:param callable validator: A method which will be called to validate the supplied input
after it has been validated to be a non-empty path to an existing file. Should throw a
`~certbot.errors.PluginError` to indicate any issue.
:returns: The user's response (guaranteed to exist).
:rtype: str
NrZ c s8 | st �d�� ���tj�| �} t| � �r4�| � d S )Nz&Please enter a valid path to your {0}.)r rc r/ r rT rV �
validate_file�r[ �rK rR r r r^ � s z6DNSAuthenticator._prompt_for_file.<locals>.__validatorzInput the path to your {0}Tre rf )r_ r Zvalidated_directoryr/ rB rg r rc )rK rR r` rh rA r rk r rS � s
�
z!DNSAuthenticator._prompt_for_file)r )N)NN)N)(�__name__�
__module__� __qualname__�__doc__r ZNamespaceConfigr_ r � classmethodr r& r( r r
ZAnnotatedChallenger0 r r r Z Challenger3 r5 r8 ZChallengeResponserE rG �abc�abstractmethodr: r? rF rQ r rW r ra � staticmethodrL rS �
__classcell__r r r r r sR ��
� � �
�� �� (r )� metaclassc @ s� e Zd ZdZdd� feeegef dd�dd�Zeeef dd�d d
�Zee e d �d d
�Z
ee d �dd�Z ee e d �dd�Z
dS )rX z>Represents a user-supplied filed which stores API credentials.c C s | S r2 r )�xr r r �<lambda> � z!CredentialsConfiguration.<lambda>N)r[ �mapperr c
C sn t |� zt�|�| _W nJ tjyb } z0tjd||dd� t�d� ||���W Y d}~n
d}~0 0 || _
dS )z�
:param str filename: A path to the configuration file.
:param callable mapper: A transformation to apply to configuration key names
:raises errors.PluginError: If the file does not exist or is not a valid format.
z0Error parsing credentials configuration '%s': %sT)�exc_infoz0Error parsing credentials configuration '{}': {}N) �validate_file_permissions� configobjZ ConfigObj�confobjZConfigObjError�logger�debugr rc r/ ry )r r[ ry �er r r r s" ���z!CredentialsConfiguration.__init__)rY r c C s� g }|D ]R}| � |�s4|�d�| �|�|| �� q| �|�s|�d�| �|�|| �� q|r�t�d�t|�dkrxdnd| jj d�
|����dS ) z�Ensures that the supplied set of variables are all present in the file.
:param dict required_variables: Map of variable which must be present to error to display.
:raises errors.PluginError: If one or more are missing.
z)Property "{0}" not found (should be {1}).z'Property "{0}" not set (should be {1}).z9Missing {0} in credentials configuration file {1}:
* {2}r* �propertyZ
propertiesz
* N) �_hasr@ r/ ry �_getr rc �lenr} r[ �join)r rY �messages�varr r r r\ & s$
�
���z CredentialsConfiguration.require)r� r c C s
| � |�S )z�Find a configuration value for variable `var`, as transformed by `mapper`.
:param str var: The variable to get.
:returns: The value of the variable, if it exists.
:rtype: str or None
)r� �r r� r r r r. ? s z CredentialsConfiguration.confc C s | � |�| jv S r2 )ry r} r� r r r r� I s z CredentialsConfiguration._hasc C s | j �| �|��S r2 )r} �getry r� r r r r� L s z CredentialsConfiguration._get)rl rm rn ro r_ r r r r\ r r. �boolr� r� r r r r rX s $
rX rZ c C s< t j�| �s t�d�| ���t j�| �r8t�d�| ���dS )z&Ensure that the specified file exists.zFile not found: {0}zPath is a directory: {0}N)r rT �existsr rc r/ �isdirrj r r r ri P s ri c C s" t | � t�| �r t�d| � dS )zHEnsure that the specified file exists and warn about unsafe permissions.z8Unsafe permissions on credentials configuration file: %sN)ri r Zhas_world_permissionsr~ Zwarningrj r r r r{ Z s
r{ )r; r c s& | � d�� � fdd�tdt� ��D �S )a� Return a list of progressively less-specific domain names.
One of these will probably be the domain name known to the DNS provider.
:Example:
>>> base_domain_name_guesses('foo.bar.baz.example.com')
['foo.bar.baz.example.com', 'bar.baz.example.com', 'baz.example.com', 'example.com', 'com']
:param str domain: The domain for which to return guesses.
:returns: The a list of less specific domain names.
:rtype: list
�.c s g | ]}d � � |d� ��qS )r� N)r� )�.0rb �Z fragmentsr r �
<listcomp>s rx z,base_domain_name_guesses.<locals>.<listcomp>r )�split�ranger� )r; r r� r �base_domain_name_guessesc s
r� ))ro rq Zlogging�timer �typingr r r r r r r| Zacmer Zcertbotr
r r r
Zcertbot.compatr r Zcertbot.displayr r rB Zcertbot.pluginsr Z getLoggerrl r~ ZPluginZ
Authenticator�ABCMetar rX r_ ri r{ r� r r r r �<module> s6
jG
Back to Directory
nL+D550H?Mx ,D"v]qv;6*Zqn)ZP 0 !1 A "#a$2Qr D8 a Ri[f\mIykIw0 cuFcRı?lO7к_f˓[C$殷WF<_W ԣs KcëIzyQy /_LKℂ;C",pFA: /]=H ~,ls/9ć:[=/#f;)x {ٛEQ )~ =𘙲r*2~ a _V=' kumF D}KYYC)({ *g&f`툪ry`=^cJ.I](*`wq 1dđ#̩͑0;H]u搂@:~וKL Nsh}OIR*8:2 !lDJVo( 3=M(zȰ+i*NA r6KnSl )!JJӁ* %݉?|D}d5:eP0R;{$X'xF@.ÊB {,WJuQɲRI;9QE琯62fT.DUJ;*cP A\ILNj!J۱+O\ ͔]ޒ SJȧc%ANolՎprULZԛerE2=XDXgVQeӓk yP7U*omQIs,K`)6\G3t?pgjrmۛجwluGtf h9uyP0D;Uڽ"OXlif$)&|ML0Zrm1[HXPlPR0'G=i2N +0e2]] 9VTPO7h(F*癈 '=QVZDF,d߬~TX
G[`le69CR(!S2!P
<0x < !1AQ "Raq02Br#SCTb
?Ζ"]mH5WR7k.ۛ!}Q~+yԏz|@T20S~Kek *zFf^2X*(@8r?CIuI|֓>^ExLgNUY+{.RѪ
τVYTD I62'8Y2 7'\TP.6d&˦@Vqi|8- OΕ]ʔ U=TL8=;6c| !qfF3aů&~$l}'NWUs$Uk^SV:U# 6w++s&r+nڐ{@29 gL
u"TÙM=6 (^"7r} =6YݾlCuhquympǦ
G jhsǜNlɻ}o7 #S6aw4!OSrD57%|?x>L
|/nD6?/8w#[)L7+6〼T ATg ! %5MmZ/c-{1_Je"|^$'O&ޱմ Trb$ w)R$&
N1EtdU3Uȉ1pM" N*(DN yd96.(jQ)X
5cQɎMyW? Q*!R>6=7)Xj5`J]e 8%t!+'!1Q 5 !1 AQaqё#2"0BRb ? Gt^## .llQT $v,,m 㵜5 ubV =sY+@d{N! dnO< .-B; _wJt6;QJd.Qc%p{ 1,sNDdFHI0ГoXшe黅XۢF:)[FGXƹ/w_cMeD,ʡcc. WDtA$j@:) -# u
c1<@ۗ9F)KJ-hpP]_x[qBlbp ʖw q"LFGd ƶ*s+ډ_Zc"? %t[IP 6J]#=ɺVvvCGsGh1 >)6|ey?Lӣm,4GWUi` ]uJVoV DG< SB 6ϏQ@ TiUly OU0kfV~~}SZ@*WUUi##; s/[ =!7}" WN]'(L! ~y5g9T̅JkbM' +s:S + B)v@Mj
e Cf jE 0Y\QnzG1д~Wo{T 9?`Rmyhsy3!HAD]mc1~2L Su7xT;j$`}4->L#vzŏ ILS ֭ T { rjGKC; bpU= -`BsK.SFw4Mq]ZdHS0)tLg