ó Y[c@sEdZddlZddlZddlZddlZddlmZddlZddlZ ddl m Z ddl m Z ddl mZddlmZddlmZdd lmZejeƒZe jjejƒe jjejƒd ejfd „ƒYƒƒZd efd „ƒYZ d„Z!d„Z"d„Z#dS(s*Common code for DNS Authenticator Plugins.iÿÿÿÿN(tsleep(t challenges(terrors(t interfaces(tops(tutil(tcommontDNSAuthenticatorcBsÈeZdZd„Zedd„ƒZd„Zd„Zd„Zd„Z e j d„ƒZ e j d „ƒZ e j d „ƒZd „Zdd „Zddd „Zed„ƒZedd„ƒZRS(s"Base class for DNS AuthenticatorscCs&tt|ƒj||ƒt|_dS(N(tsuperRt__init__tFalset_attempt_cleanup(tselftconfigtname((s>/usr/lib/python2.7/dist-packages/certbot/plugins/dns_common.pyR si cCs |dd|dtddƒdS(Nspropagation-secondstdefaultttypethelpsjThe number of seconds to wait for DNS to propagate before asking the ACME server to verify the DNS record.(tint(tclstaddtdefault_propagation_seconds((s>/usr/lib/python2.7/dist-packages/certbot/plugins/dns_common.pytadd_parser_arguments s cCs tjgS(N(RtDNS01(R t unused_domain((s>/usr/lib/python2.7/dist-packages/certbot/plugins/dns_common.pytget_chall_pref(scCsdS(N((R ((s>/usr/lib/python2.7/dist-packages/certbot/plugins/dns_common.pytprepare+scCs°|jƒt|_g}xd|D]\}|j}|j|ƒ}|j|jƒ}|j|||ƒ|j|j |jƒƒq Wt j d|j dƒƒt |j dƒƒ|S(Ns/Waiting %d seconds for DNS changes to propagatespropagation-seconds(t_setup_credentialstTrueR tdomaintvalidation_domain_namet validationt account_keyt_performtappendtresponsetloggertinfotconfR(R tachallst responsestachallRRR((s>/usr/lib/python2.7/dist-packages/certbot/plugins/dns_common.pytperform.s     cCs^|jrZxN|D]C}|j}|j|ƒ}|j|jƒ}|j|||ƒqWndS(N(R RRRR t_cleanup(R R'R)RRR((s>/usr/lib/python2.7/dist-packages/certbot/plugins/dns_common.pytcleanupEs    cCs tƒ‚dS(s@ Establish credentials, prompting if necessary. N(tNotImplementedError(R ((s>/usr/lib/python2.7/dist-packages/certbot/plugins/dns_common.pyRNscCs tƒ‚dS(sX Performs a dns-01 challenge by creating a DNS TXT record. :param str domain: The domain being validated. :param str validation_domain_name: The validation record domain name. :param str validation: The validation record content. :raises errors.PluginError: If the challenge cannot be performed N(R-(R RRR((s>/usr/lib/python2.7/dist-packages/certbot/plugins/dns_common.pyR!Us cCs tƒ‚dS(sX Deletes the DNS TXT record which would have been created by `_perform_achall`. Fails gracefully if no such record exists. :param str domain: The domain being validated. :param str validation_domain_name: The validation record domain name. :param str validation: The validation record content. N(R-(R RRR((s>/usr/lib/python2.7/dist-packages/certbot/plugins/dns_common.pyR+as cCsG|j|ƒ}|sC|j|ƒ}t|j|j|ƒ|ƒndS(s Ensure that a configuration value is available. If necessary, prompts the user and stores the result. :param str key: The configuration key. :param str label: The user-friendly label for this piece of information. N(R&t_prompt_for_datatsetattrR tdest(R tkeytlabeltconfigured_valuet new_value((s>/usr/lib/python2.7/dist-packages/certbot/plugins/dns_common.pyt _configurens cCsb|j|ƒ}|s^|j||ƒ}t|j|j|ƒtjjtjj|ƒƒƒndS(s  Ensure that a configuration value is available for a path. If necessary, prompts the user and stores the result. :param str key: The configuration key. :param str label: The user-friendly label for this piece of information. N( R&t_prompt_for_fileR/R R0tostpathtabspatht expanduser(R R1R2t validatorR3R4((s>/usr/lib/python2.7/dist-packages/certbot/plugins/dns_common.pyt_configure_file~s csp‡‡‡fd†}ˆj|||ƒtˆj|ƒˆjƒ}ˆrY|jˆƒnˆrlˆ|ƒn|S(sð As `_configure_file`, but for a credential configuration file. If necessary, prompts the user and stores the result. Always stores absolute paths to avoid issues during renewal. :param str key: The configuration key. :param str label: The user-friendly label for this piece of information. :param dict required_variables: Map of variable which must be present to error to display. :param callable validator: A method which will be called to validate the `CredentialsConfiguration` resulting from the supplied input after it has been validated to contain the `required_variables`. Should throw a `~certbot.errors.PluginError` to indicate any issue. cs?t|ˆjƒ}ˆr(|jˆƒnˆr;ˆ|ƒndS(N(tCredentialsConfigurationR0trequire(tfilenamet configuration(trequired_variablesR R;(s>/usr/lib/python2.7/dist-packages/certbot/plugins/dns_common.pyt __validatorŸs (R<R=R&R0R>(R R1R2RAR;t_DNSAuthenticator__validatortcredentials_configuration((RAR R;s>/usr/lib/python2.7/dist-packages/certbot/plugins/dns_common.pyt_configure_credentialsŽs  cse‡fd†}tj|djˆƒdtƒ\}}|tjkrI|Stjdjˆƒƒ‚dS(sá Prompt the user for a piece of information. :param str label: The user-friendly label for this piece of information. :returns: The user's response (guaranteed non-empty). :rtype: str cs%|s!tjdjˆƒƒ‚ndS(NsPlease enter your {0}.(Rt PluginErrortformat(ti(R2(s>/usr/lib/python2.7/dist-packages/certbot/plugins/dns_common.pyRB½ssInput your {0}tforce_interactives{0} required to proceed.N(Rtvalidated_inputRGRt display_utiltOKRRF(R2RCtcodeR#((R2s>/usr/lib/python2.7/dist-packages/certbot/plugins/dns_common.pyR.³s csh‡‡fd†}tj|djˆƒdtƒ\}}|tjkrL|Stjdjˆƒƒ‚dS(sà Prompt the user for a path. :param str label: The user-friendly label for the file. :param callable validator: A method which will be called to validate the supplied input after it has been validated to be a non-empty path to an existing file. Should throw a `~certbot.errors.PluginError` to indicate any issue. :returns: The user's response (guaranteed to exist). :rtype: str csT|s!tjdjˆƒƒ‚ntjj|ƒ}t|ƒˆrPˆ|ƒndS(Ns&Please enter a valid path to your {0}.(RRFRGR7R8R:t validate_file(R?(R2R;(s>/usr/lib/python2.7/dist-packages/certbot/plugins/dns_common.pyRBØs  sInput the path to your {0}RIs{0} required to proceed.N(Rtvalidated_directoryRGRRKRLRRF(R2R;RCRMR#((R2R;s>/usr/lib/python2.7/dist-packages/certbot/plugins/dns_common.pyR6Ës  N(t__name__t __module__t__doc__R t classmethodRRRR*R,tabctabstractmethodRR!R+R5tNoneR<REt staticmethodR.R6(((s>/usr/lib/python2.7/dist-packages/certbot/plugins/dns_common.pyRs"        %R=cBsAeZdZd„d„Zd„Zd„Zd„Zd„ZRS(s>Represents a user-supplied filed which stores API credentials.cCs|S(N((tx((s>/usr/lib/python2.7/dist-packages/certbot/plugins/dns_common.pytñscCstt|ƒytj|ƒ|_WnDtjk rf}tjd|dtƒtj dj |ƒƒ‚nX||_ dS(sö :param str filename: A path to the configuration file. :param callable mapper: A transformation to apply to configuration key names :raises errors.PluginError: If the file does not exist or is not a valid format. s+Error parsing credentials configuration: %stexc_infos,Error parsing credentials configuration: {0}N( tvalidate_file_permissionst configobjt ConfigObjtconfobjtConfigObjErrorR$tdebugRRRFRGtmapper(R R?Rate((s>/usr/lib/python2.7/dist-packages/certbot/plugins/dns_common.pyR ñs cCsÙg}x~|D]v}|j|ƒsK|jdj|j|ƒ||ƒƒq |j|ƒs |jdj|j|ƒ||ƒƒq q W|rÕtjdjt|ƒdkr±dnd|jj dj |ƒƒƒ‚ndS( sôEnsures that the supplied set of variables are all present in the file. :param dict required_variables: Map of variable which must be present to error to display. :raises errors.PluginError: If one or more are missing. s)Property "{0}" not found (should be {1}).s'Property "{0}" not set (should be {1}).s9Missing {0} in credentials configuration file {1}: * {2}itpropertyt propertiess * N( t_hasR"RGRat_getRRFtlenR^R?tjoin(R RAtmessagestvar((s>/usr/lib/python2.7/dist-packages/certbot/plugins/dns_common.pyR>s   ! cCs |j|ƒS(sÂFind a configuration value for variable `var`, as transformed by `mapper`. :param str var: The variable to get. :returns: The value of the variable. :rtype: str (Rf(R Rj((s>/usr/lib/python2.7/dist-packages/certbot/plugins/dns_common.pyR&scCs|j|ƒ|jkS(N(RaR^(R Rj((s>/usr/lib/python2.7/dist-packages/certbot/plugins/dns_common.pyRe$scCs|jj|j|ƒƒS(N(R^tgetRa(R Rj((s>/usr/lib/python2.7/dist-packages/certbot/plugins/dns_common.pyRf's(RPRQRRR R>R&ReRf(((s>/usr/lib/python2.7/dist-packages/certbot/plugins/dns_common.pyR=îs   cCs^tjj|ƒs-tjdj|ƒƒ‚ntjj|ƒsZtjdj|ƒƒ‚ndS(s&Ensure that the specified file exists.sFile not found: {0}sPath is not a file: {0}N(R7R8texistsRRFRGtisfile(R?((s>/usr/lib/python2.7/dist-packages/certbot/plugins/dns_common.pyRN+scCsIt|ƒtjtj|ƒjƒ}|tj@rEtjd|ƒndS(sHEnsure that the specified file exists and warn about unsafe permissions.s8Unsafe permissions on credentials configuration file: %sN(RNtstattS_IMODER7tst_modetS_IRWXOR$twarning(R?t permissions((s>/usr/lib/python2.7/dist-packages/certbot/plugins/dns_common.pyR[5s  cCsB|jdƒ}gtdt|ƒƒD]}dj||ƒ^q%S(sÂReturn a list of progressively less-specific domain names. One of these will probably be the domain name known to the DNS provider. :Example: >>> base_domain_name_guesses('foo.bar.baz.example.com') ['foo.bar.baz.example.com', 'bar.baz.example.com', 'baz.example.com', 'example.com', 'com'] :param str domain: The domain for which to return guesses. :returns: The a list of less specific domain names. :rtype: list t.i(tsplittrangeRgRh(Rt fragmentsRH((s>/usr/lib/python2.7/dist-packages/certbot/plugins/dns_common.pytbase_domain_name_guesses?s($RRRTtloggingR7RnttimeRR\tzope.interfacetzopetacmeRtcertbotRRtcertbot.displayRRRKtcertbot.pluginsRt getLoggerRPR$t interfacet implementertIAuthenticatortprovidertIPluginFactorytPluginRtobjectR=RNR[Rx(((s>/usr/lib/python2.7/dist-packages/certbot/plugins/dns_common.pyts*      Ö=