ó Y[c@s dZddlZddlZddlZddlmZddlmZddl m Z ddl m Z ddl m Z ddl m Z dd l mZdd lmZd ejfd „ƒYZejje jƒejje jƒd ejfd„ƒYƒƒZdS(sManual authenticator pluginiÿÿÿÿN(t challenges(tDict(t achallenges(t interfaces(terrors(thooks(treverter(tcommontManualTlsSni01cBseZdZd„ZRS(s3TLS-SNI-01 authenticator for the Manual plugin :ivar configurator: Authenticator object :type configurator: :class:`~certbot.plugins.manual.Authenticator` :ivar list achalls: Annotated class:`~certbot.achallenges.KeyAuthorizationAnnotatedChallenge` challenges :param list indices: Meant to hold indices of challenges in a larger array. NginxTlsSni01 is capable of solving many challenges at once which causes an indexing issue within NginxConfigurator who must return all responses in order. Imagine NginxConfigurator maintaining state about where all of the http-01 Challenges, TLS-SNI-01 Challenges belong in the response array. This is an optional utility. :param str challenge_conf: location of the challenge config file cCs%x|jD]}|j|ƒq WdS(s,Create the SSL certificates and private keysN(tachallst_setup_challenge_cert(tselftachall((s:/usr/lib/python2.7/dist-packages/certbot/plugins/manual.pytperform's(t__name__t __module__t__doc__R (((s:/usr/lib/python2.7/dist-packages/certbot/plugins/manual.pyRst AuthenticatorcBs›eZdZdZeZdZdZdZdZ d„Z e d„ƒZ d„Z d „Zd „Zd „Zd „Zd „Zd„Zd„Zd„ZRS(sÔManual authenticator This plugin allows the user to perform the domain validation challenge(s) themselves. This either be done manually by the user or through shell scripts provided to Certbot. s2Manual configuration or run your own shell scriptss†Authenticate through manual configuration or custom shell scripts. When using shell scripts, an authenticator script must be provided. The environment variables available to this script depend on the type of challenge. $CERTBOT_DOMAIN will always contain the domain being authenticated. For HTTP-01 and DNS-01, $CERTBOT_VALIDATION is the validation string, and $CERTBOT_TOKEN is the filename of the resource requested when performing an HTTP-01 challenge. When performing a TLS-SNI-01 challenge, $CERTBOT_SNI_DOMAIN will contain the SNI name for which the ACME server expects to be presented with the self-signed certificate located at $CERTBOT_CERT_PATH. The secret key needed to complete the TLS handshake is located at $CERTBOT_KEY_PATH. An additional cleanup script can also be provided and can use the additional variable $CERTBOT_AUTH_OUTPUT which contains the stdout output from the auth script.s‘Please deploy a DNS TXT record under the name {domain} with the following value: {validation} Before continuing, verify the record is deployed.suCreate a file containing just this data: {validation} And make it available on your web server at this URL: {uri} sºConfigure the service listening on port {port} to present the certificate {cert} using the secret key {key} when it receives a TLS ClientHello with the SNI extension set to {sni_domain} cOsTtt|ƒj||Žtj|jƒ|_|jjƒtƒ|_d|_ dS(N( tsuperRt__init__RtRevertertconfigtrecovery_routinetdicttenvtNonet tls_sni_01(R targstkwargs((s:/usr/lib/python2.7/dist-packages/certbot/plugins/manual.pyRcs   cCs:|dddƒ|dddƒ|ddddd ƒdS( Ns auth-hookthelps8Path or command to execute for the authentication scripts cleanup-hooks1Path or command to execute for the cleanup scriptspublic-ip-logging-oktactiont store_trues5Automatically allows public IP logging (default: Ask)((tclstadd((s:/usr/lib/python2.7/dist-packages/certbot/plugins/manual.pytadd_parser_argumentsks   cCsN|jjr@|jdƒ r@tjdj|jdƒƒƒ‚n|jƒdS(Ns auth-hooksdAn authentication script must be provided with --{0} when using the manual plugin non-interactively.(Rtnoninteractive_modetconfRt PluginErrortformatt option_namet_validate_hooks(R ((s:/usr/lib/python2.7/dist-packages/certbot/plugins/manual.pytpreparets cCsl|jjrhxYdD]N}|j|ƒ}|dk r|j|ƒtdƒ }tj||ƒqqWndS(Ns auth-hooks cleanup-hooks-hook(s auth-hooks cleanup-hook(Rtvalidate_hooksR$RR'tlenRt validate_hook(R tnamethookt hook_prefix((s:/usr/lib/python2.7/dist-packages/certbot/plugins/manual.pyR(|s    cCsdS(Ns¦This plugin allows the user to customize setup for domain validation challenges either through shell scripts provided by the user or by performing the setup manually.((R ((s:/usr/lib/python2.7/dist-packages/certbot/plugins/manual.pyt more_info„scCstjtjtjgS(N(RtHTTP01tDNS01tTLSSNI01(R tdomain((s:/usr/lib/python2.7/dist-packages/certbot/plugins/manual.pytget_chall_prefŠscCs°|jƒ|jdƒr%|j}n |j}g}xu|D]m}t|jtjƒr…t|ƒ|_ |j j |ƒ|j j ƒn||ƒ|j |j |jƒƒq;W|S(Ns auth-hook(t_verify_ip_logging_okR$t_perform_achall_with_scriptt_perform_achall_manuallyt isinstancetchallRR3RRt add_challR tappendtresponset account_key(R R tperform_achallt responsesR ((s:/usr/lib/python2.7/dist-packages/certbot/plugins/manual.pyR Žs     cCs’|jdƒsŽdj|jdƒƒ}d}tjjtjƒ}|j|d|dt ƒr|t |j |j dƒt ƒqŽt jdƒ‚ndS(Nspublic-ip-logging-oks--{0}sõNOTE: The IP of this machine will be publicly logged as having requested this certificate. If you're running certbot in manual mode on a machine that is not your server, please ensure you're okay with that. Are you OK with your IP being logged?tcli_flagtforce_interactives#Must agree to IP logging to proceed(R$R&R'tzopet componentt getUtilityRtIDisplaytyesnotTruetsetattrRtdestRR%(R RAtmsgtdisplay((s:/usr/lib/python2.7/dist-packages/certbot/plugins/manual.pyR6¡scCsgtd|jd|j|jƒƒ}t|jtjƒrR|jjdƒ|dR9R:RR1tencodetostenvirontpopRR3Rt get_cert_patht get_key_patht get_z_domaintupdateRtexecuteR$tstripR(R R Rt_tout((s:/usr/lib/python2.7/dist-packages/certbot/plugins/manual.pyR7¯s$c CsU|j|jƒ}t|jtjƒrx|jjd|d|jjdƒd|j j d|jj |j ƒd|ƒ}n«t|jtj ƒr·|jjd|j|j ƒd|ƒ}nlt|jtjƒsÒt‚|jjd|jj|ƒd |jj|ƒd|j jd |jj|ƒƒ}tjjtjƒ}|j|d td tƒdS( NR t encoded_tokenROtportturiRUR4tcerttkeyt sni_domaintwrapRB( RUR>R9R:RR1t_HTTP_INSTRUCTIONSR&RVRt http01_portRdR4R2t_DNS_INSTRUCTIONStvalidation_domain_nameR3tAssertionErrort_TLSSNI_INSTRUCTIONSRRZR[ttls_sni_01_portR\RCRDRERRFt notificationtFalseRH(R R RURKRL((s:/usr/lib/python2.7/dist-packages/certbot/plugins/manual.pyR8Ås$  !    cCsŽ|jdƒr}xk|D]`}|jj|ƒ}d|krPtjjddƒntjj|ƒtj|jdƒƒqWn|j j ƒdS(Ns cleanup-hookRP( R$RRYRWRXRR]RR^RR(R R R R((s:/usr/lib/python2.7/dist-packages/certbot/plugins/manual.pytcleanupÚs  (RRRt descriptionRHthiddentlong_descriptionRkRiRnRt classmethodR"R)R(R0R5R R6R7R8Rr(((s:/usr/lib/python2.7/dist-packages/certbot/plugins/manual.pyR.s$           (RRWtzope.componentRCtzope.interfacetacmeRtacme.magic_typingRtcertbotRRRRRtcertbot.pluginsRR3Rt interfacet implementertIAuthenticatortprovidertIPluginFactorytPluginR(((s:/usr/lib/python2.7/dist-packages/certbot/plugins/manual.pyts