ó Y[c@sädZddlZddlZddlZddlZddlZddlZddlZddlZ ddl m Z ddl mZddlmZddlmZddlmZddlmZdd lmZdd lmZddlm Z dd lmZejeƒZd „Zd „ZejdƒZejdejƒZ e j!j"ej#ƒde$fd„ƒYƒZ%de%fd„ƒYZ&de$fd„ƒYZ'de$fd„ƒYZ(de(fd„ƒYZ)d„Z*d„Z+dS(sPlugin common functions.iÿÿÿÿN(tutil(tList(t achallenges(t constants(t crypto_util(terrors(t interfaces(treverter(t PluginStoragecCs|dS(s9ArgumentParser options namespace (prefix of all options).t-((tname((s:/usr/lib/python2.7/dist-packages/certbot/plugins/common.pytoption_namespacescCs|jddƒdS(s;ArgumentParser dest namespace (prefix of all destinations).R t_(treplace(R ((s:/usr/lib/python2.7/dist-packages/certbot/plugins/common.pytdest_namespace!ssX(^127\.0\.0\.1)|(^10\.)|(^172\.1[6-9]\.)|(^172\.2[0-9]\.)|(^172\.3[0-1]\.)|(^192\.168\.)s3^(([a-z0-9]|[a-z0-9][a-z0-9\-]*[a-z0-9])\.)*[a-z]+$tPlugincBsqeZdZd„Zejd„ƒZed„ƒZe d„ƒZ d„Z e d„ƒZ d„Z d„ZRS( sGeneric plugin.cCs||_||_dS(N(tconfigR (tselfRR ((s:/usr/lib/python2.7/dist-packages/certbot/plugins/common.pyt__init__2s cCsdS(s°Add plugin arguments to the CLI argument parser. NOTE: If some of your flags interact with others, you can use cli.report_config_interaction to register this to ensure values are correctly saved/overridable during renewal. :param callable add: Function that proxies calls to `argparse.ArgumentParser.add_argument` prepending options with unique plugin name prefix. N((tclstadd((s:/usr/lib/python2.7/dist-packages/certbot/plugins/common.pytadd_parser_arguments6scs‡‡fd†}|j|ƒS(sYInject parser options. See `~.IPlugin.inject_parser_options` for docs. cs%ˆjdjtˆƒ|ƒ||ŽS(Ns--{0}{1}(t add_argumenttformatR (targ_name_no_prefixtargstkwargs(R tparser(s:/usr/lib/python2.7/dist-packages/certbot/plugins/common.pyRLs(R(RRR R((R Rs:/usr/lib/python2.7/dist-packages/certbot/plugins/common.pytinject_parser_optionsDscCs t|jƒS(s9ArgumentParser options namespace (prefix of all options).(R R (R((s:/usr/lib/python2.7/dist-packages/certbot/plugins/common.pyR SscCs |j|S(s'Option name (include plugin namespace).(R (RR ((s:/usr/lib/python2.7/dist-packages/certbot/plugins/common.pyt option_nameXscCs t|jƒS(s;ArgumentParser dest namespace (prefix of all destinations).(RR (R((s:/usr/lib/python2.7/dist-packages/certbot/plugins/common.pyR\scCs|j|jddƒS(s.Find a destination for given variable ``var``.R R (RR (Rtvar((s:/usr/lib/python2.7/dist-packages/certbot/plugins/common.pytdestascCst|j|j|ƒƒS(s0Find a configuration value for variable ``var``.(tgetattrRR(RR((s:/usr/lib/python2.7/dist-packages/certbot/plugins/common.pytconfgs(t__name__t __module__t__doc__Rt jose_utiltabstractclassmethodRt classmethodRtpropertyR RRRR!(((s:/usr/lib/python2.7/dist-packages/certbot/plugins/common.pyR,s   t InstallercBszeZdZd„Zed„Zd„Zd„Zd„Zdd„Z d„Z e d „ƒZ e d „ƒZ d „ZRS( s‹An installer base class with reverter and ssl_dhparam methods defined. Installer plugins do not have to inherit from this class. cOsJtt|ƒj||Žt|j|jƒ|_tj|jƒ|_dS(N( tsuperR)RRRR tstorageRtReverter(RRR((s:/usr/lib/python2.7/dist-packages/certbot/plugins/common.pyRrscCsd|r|jj}n |jj}y|||ƒWn+tjk r_}tjt|ƒƒ‚nXdS(s´Add files to a checkpoint. :param set save_files: set of filepaths to save :param str save_notes: notes about changes during the save :param bool temporary: True if the files should be added to a temporary checkpoint rather than a permanent one. This is usually used for changes that will soon be reverted. :raises .errors.PluginError: when unable to add to checkpoint N(Rtadd_to_temp_checkpointtadd_to_checkpointRt ReverterErrort PluginErrortstr(Rt save_filest save_notest temporarytcheckpoint_functerr((s:/usr/lib/python2.7/dist-packages/certbot/plugins/common.pyR.ws  cCsFy|jj|ƒWn+tjk rA}tjt|ƒƒ‚nXdS(s±Timestamp and save changes made through the reverter. :param str title: Title describing checkpoint :raises .errors.PluginError: when an error occurs N(Rtfinalize_checkpointRR/R0R1(RttitleR6((s:/usr/lib/python2.7/dist-packages/certbot/plugins/common.pyR7scCsCy|jjƒWn+tjk r>}tjt|ƒƒ‚nXdS(sÉRevert all previously modified files. Reverts all modified files that have not been saved as a checkpoint :raises .errors.PluginError: If unable to recover the configuration N(Rtrecovery_routineRR/R0R1(RR6((s:/usr/lib/python2.7/dist-packages/certbot/plugins/common.pyR9šscCsCy|jjƒWn+tjk r>}tjt|ƒƒ‚nXdS(skRollback temporary checkpoint. :raises .errors.PluginError: when unable to revert config N(Rtrevert_temporary_configRR/R0R1(RR6((s:/usr/lib/python2.7/dist-packages/certbot/plugins/common.pyR:§sicCsFy|jj|ƒWn+tjk rA}tjt|ƒƒ‚nXdS(súRollback saved checkpoints. :param int rollback: Number of checkpoints to revert :raises .errors.PluginError: If there is a problem with the input or the function is unable to correctly revert the configuration N(Rtrollback_checkpointsRR/R0R1(RtrollbackR6((s:/usr/lib/python2.7/dist-packages/certbot/plugins/common.pyR;²s cCsCy|jjƒWn+tjk r>}tjt|ƒƒ‚nXdS(s¼Show all of the configuration changes that have taken place. :raises .errors.PluginError: If there is a problem while processing the checkpoints directories. N(Rtview_config_changesRR/R0R1(RR6((s:/usr/lib/python2.7/dist-packages/certbot/plugins/common.pyR=ÀscCstjj|jjtjƒS(s(Full absolute path to ssl_dhparams file.(tostpathtjoinRt config_dirRtSSL_DHPARAMS_DEST(R((s:/usr/lib/python2.7/dist-packages/certbot/plugins/common.pyt ssl_dhparamsÌscCstjj|jjtjƒS(s:Full absolute path to digest of updated ssl_dhparams file.(R>R?R@RRARtUPDATED_SSL_DHPARAMS_DIGEST(R((s:/usr/lib/python2.7/dist-packages/certbot/plugins/common.pytupdated_ssl_dhparams_digestÑscCst|j|jtjtjƒS(sJCopy Certbot's ssl_dhparams file into the system's config dir if required.(tinstall_version_controlled_fileRCRERtSSL_DHPARAMS_SRCtALL_SSL_DHPARAMS_HASHES(R((s:/usr/lib/python2.7/dist-packages/certbot/plugins/common.pytinstall_ssl_dhparamsÖs (R"R#R$RtFalseR.R7R9R:R;R=R(RCRERI(((s:/usr/lib/python2.7/dist-packages/certbot/plugins/common.pyR)ls    tAddrcBsƒeZdZed„Zed„ƒZd„Zd„Zd„Z d„Z d„Z d„Z d „Z d „Zd „Zd „ZRS( sˆRepresents an virtual host address. :param str addr: addr part of vhost address :param str port: port number or \*, or "" cCs||_||_dS(N(ttuptipv6(RRLRM((s:/usr/lib/python2.7/dist-packages/certbot/plugins/common.pyRæs cCs®|jdƒrƒ|jdƒ}||d }d}t|ƒ|dkrm||ddkrm||d}n|||fdtƒS|jdƒ}||d|dfƒSd S( sInitialize Addr from string.t[t]itit:RMiN(t startswithtrfindtlentTruet partition(Rtstr_addrtendIndexthosttportRL((s:/usr/lib/python2.7/dist-packages/certbot/plugins/common.pyt fromstringês*cCs#|jdrd|jS|jdS(Nis%s:%si(RL(R((s:/usr/lib/python2.7/dist-packages/certbot/plugins/common.pyt__str__ùs  cCs'|jr |jƒ|jdfS|jS(s5Normalized representation of addr/port tuple i(RMtget_ipv6_explodedRL(R((s:/usr/lib/python2.7/dist-packages/certbot/plugins/common.pytnormalized_tupleþs cCs,t||jƒr(|jƒ|jƒkStS(N(t isinstancet __class__R^RJ(Rtother((s:/usr/lib/python2.7/dist-packages/certbot/plugins/common.pyt__eq__scCs t|jƒS(N(thashRL(R((s:/usr/lib/python2.7/dist-packages/certbot/plugins/common.pyt__hash__ scCs |jdS(s Return addr part of Addr object.i(RL(R((s:/usr/lib/python2.7/dist-packages/certbot/plugins/common.pytget_addrscCs |jdS(s Return port.i(RL(R((s:/usr/lib/python2.7/dist-packages/certbot/plugins/common.pytget_portscCs |j|jd|f|jƒS(s6Return new address object with same addr and new port.i(R`RLRM(RRZ((s:/usr/lib/python2.7/dist-packages/certbot/plugins/common.pyt get_addr_objscCs+|jdƒ}|jdƒ}|j|ƒS(s7Return IPv6 address in normalized form, helper functionRNRO(tlstriptrstript _explode_ipv6(Rtaddr((s:/usr/lib/python2.7/dist-packages/certbot/plugins/common.pyt_normalize_ipv6scCs*|jr&dj|j|jdƒƒSdS(sReturn IPv6 in normalized formRQiRP(RMR@RlRL(R((s:/usr/lib/python2.7/dist-packages/certbot/plugins/common.pyR]"s cCsddddddddg}|jdƒ}t|ƒt|ƒkr[|dt|ƒ!}nt}xœtdt|ƒƒD]…}||}t|ƒdkr¥t}qwn$t|ƒdkrÉ|jdƒ}n|sât|ƒ||eZdZd„Zd„Zd„Zd„Zdd„ZRS(s1Abstract base for TLS-SNI-01 challenge performerscCs8tt|ƒj|ƒtjj|jjdƒ|_dS(Ns!le_tls_sni_01_cert_challenge.conf( R*R€RR>R?R@RRAtchallenge_conf(RRv((s:/usr/lib/python2.7/dist-packages/certbot/plugins/common.pyRns cCs,tjj|jjj|jjdƒdƒS(sãReturns standardized name for challenge certificate. :param .KeyAuthorizationAnnotatedChallenge achall: Annotated tls-sni-01 challenge. :returns: certificate file name :rtype: str ttokens.crt(R>R?R@RvRtwork_dirtchalltencode(RR{((s:/usr/lib/python2.7/dist-packages/certbot/plugins/common.pyt get_cert_pathts cCs,tjj|jjj|jjdƒdƒS(s'Get standardized path to challenge key.R‚s.pem(R>R?R@RvRRƒR„R…(RR{((s:/usr/lib/python2.7/dist-packages/certbot/plugins/common.pyt get_key_pathscCs|j|jƒjjdƒS(s.Returns z_domain (SNI) name for the challenge.sutf-8(tresponset account_keytz_domaintdecode(RR{((s:/usr/lib/python2.7/dist-packages/certbot/plugins/common.pyt get_z_domain†sc Csõ|j|ƒ}|j|ƒ}|jjjt|ƒ|jjjt|ƒ|jd|ƒ\}\}}tjj tjj |ƒ}tjj tjj |ƒ} t |dƒ} | j |ƒWdQXtj|dddƒ} | j | ƒWdQX|S(s-Generate and write out challenge certificate.tcert_keytwbNtchmodi(R†R‡RvRtregister_file_creationRUtresponse_and_validationtOpenSSLtcryptotdump_certificatet FILETYPE_PEMtdump_privatekeytopentwriteRt safe_open( RR{Rt cert_pathtkey_pathRˆtcerttkeytcert_pemtkey_pemt cert_chall_fdtkey_file((s:/usr/lib/python2.7/dist-packages/certbot/plugins/common.pyt_setup_challenge_certŠs   N( R"R#R$RR†R‡RŒRzR¢(((s:/usr/lib/python2.7/dist-packages/certbot/plugins/common.pyR€js    csòtjˆƒ‰‡‡fd†‰‡‡‡fd†}tjjˆƒsS|ƒdStjˆƒ}|ˆkrrdS||krˆ|ƒnftjjˆƒrÑtˆdƒ}|jƒ}WdQX|ˆkrÑdSnˆƒtjdˆˆˆƒdS(sƒCopy a file into an active location (likely the system's config dir) if required. :param str dest_path: destination path for version controlled file :param str digest_path: path to save a digest of the file in :param str src_path: path to version controlled file found in distribution :param list all_hashes: hashes of every released version of the file cs)tˆdƒ}|jˆƒWdQXdS(Ntw(R—R˜(tf(t current_hasht digest_path(s:/usr/lib/python2.7/dist-packages/certbot/plugins/common.pyt_write_current_hash­scstjˆˆƒˆƒdS(N(tshutiltcopyfile((R§t dest_pathtsrc_path(s:/usr/lib/python2.7/dist-packages/certbot/plugins/common.pyt_install_current_file±sNtrsh%s has been manually modified; updated file saved to %s. We recommend updating %s for security purposes.( Rt sha256sumR>R?tisfileR—treadtloggertwarning(RªR¦R«t all_hashesR¬tactive_file_digestR¤t saved_digest((R§R¥RªR¦R«s:/usr/lib/python2.7/dist-packages/certbot/plugins/common.pyRF£s&     cCs¹d„}|dƒ}|dƒ}|dƒ}tj|tjƒtj|tjƒtj|tjƒtj|tjjd|ƒƒ}tj |tjj||ƒdt ƒ|||fS(s5Setup the directories necessary for the configurator.cSstjjtj|ƒƒS(sReturn the real path of a temp directory with the specified prefix Some plugins rely on real paths of symlinks for working correctly. For example, certbot-apache uses real paths of configuration files to tell a virtual host from another. On systems where TMP itself is a symbolic link, (ex: OS X) such plugins will be confused. This function prevents such a case. (R>R?trealpathttempfiletmkdtemp(tprefix((s:/usr/lib/python2.7/dist-packages/certbot/plugins/common.pytexpanded_tempdir×s ttempRtworkttestdatatsymlinks( R>RRtCONFIG_DIRS_MODEt pkg_resourcestresource_filenameR?R@R¨tcopytreeRU(ttest_dirtpkgRºttemp_dirRARƒt test_configs((s:/usr/lib/python2.7/dist-packages/certbot/plugins/common.pyt dir_setupÕs   (,R$tloggingR>treR¨R·R’RÀtzope.interfacetzopetjosepyRR%tacme.magic_typingRtcertbotRRRRRRtcertbot.plugins.storageRt getLoggerR"R±R Rtcompiletprivate_ips_regext IGNORECASEthostname_regext interfacet implementertIPlugintobjectRR)RKRuR€RFRÇ(((s:/usr/lib/python2.7/dist-packages/certbot/plugins/common.pytsB           ?sc(9 2