Server : Apache/2.4.62 (Unix) OpenSSL/1.0.2k-fips System : Linux server1.richineiserver.com 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64 User : fdshops ( 1003) PHP Version : 8.2.21 Disable Function : NONE Directory : /lib/python2.7/site-packages/certbot/_internal/ |
�
���_c @ s� d Z d d l Z d d l Z d d l Z d d l Z d d l Z d d l Z d d l m Z d d l Z
d d l Z d d l Z d d l
Z
d d l m Z d d l m Z d d l m Z d d l m Z d d l m Z d d l m Z d d
l m Z d d l m Z e j e � Z d e f d
� � YZ d e j! f d � � YZ" d e j# f d � � YZ$ d e j! f d � � YZ% d S( s! Creates ACME accounts for server.i����N( t
serialization( t fields( t messages( t
ClientBase( t errors( t
interfaces( t util( t constants( t ost Accountc B sT e Z d Z d e j f d � � YZ d d � Z e d � � Z d � Z
d � Z RS( s� ACME protocol registration.
:ivar .RegistrationResource regr: Registration Resource
:ivar .JWK key: Authorized Account Key
:ivar .Meta: Account metadata
:ivar str id: Globally unique account identifier.
t Metac B sA e Z d Z e j d � Z e j d � Z e j d d e �Z
RS( s� Account metadata
:ivar datetime.datetime creation_dt: Creation date and time (UTC).
:ivar str creation_host: FQDN of host, where account has been created.
:ivar str register_to_eff: If not None, Certbot will register the provided
email during the account registration.
.. note:: ``creation_dt`` and ``creation_host`` are useful in
cross-machine migration scenarios.
t creation_dtt
creation_hostt register_to_efft omitempty( t __name__t
__module__t __doc__t acme_fieldst RFC3339FieldR t joset FieldR t TrueR
( ( ( s= /usr/lib/python2.7/site-packages/certbot/_internal/account.pyR
% s c C s� | | _ | | _ | d k r` | j d t j j d t j � j d d � d t j
� d d � n | | _ y t j
� } Wn& t k
r� t j d d t �} n X| j | j j j � j d t j j d
t j j � � | j � | _ d S( NR t tzt microsecondi R R
t md5t usedforsecurityt encodingt format( t keyt regrt NoneR
t datetimet nowt pytzt UTCt replacet sockett getfqdnt metat hashlibR t
ValueErrort newt Falset updatet
public_keyt public_bytesR t Encodingt PEMt PublicFormatt SubjectPublicKeyInfot hexdigestt id( t selfR R R' t hasher( ( s= /usr/lib/python2.7/site-packages/certbot/_internal/account.pyt __init__5 s W
c C s/ d j t j | j j � | j j | j d � S( s3 Short account identification string, useful for UI.s
{1}@{0} ({2})i ( R t pyrfc3339t generateR' R R R4 ( R5 ( ( s= /usr/lib/python2.7/site-packages/certbot/_internal/account.pyt slugP s c C s% d j | j j | j | j | j � S( Ns <{0}({1}, {2}, {3})>( R t __class__R R R4 R' ( R5 ( ( s= /usr/lib/python2.7/site-packages/certbot/_internal/account.pyt __repr__V s c C sF t | | j � oE | j | j k oE | j | j k oE | j | j k S( N( t
isinstanceR; R R R' ( R5 t other( ( s= /usr/lib/python2.7/site-packages/certbot/_internal/account.pyt __eq__Z s $N( R R R R t JSONObjectWithFieldsR
R R7 t propertyR: R< R? ( ( ( s= /usr/lib/python2.7/site-packages/certbot/_internal/account.pyR s t AccountMemoryStoragec B s5 e Z d Z d d � Z d � Z d � Z d � Z RS( s In-memory account storage.c C s | d k r | n i | _ d S( N( R t accounts( R5 t initial_accounts( ( s= /usr/lib/python2.7/site-packages/certbot/_internal/account.pyR7 c s c C s t t j | j � � S( N( t listt sixt
itervaluesRC ( R5 ( ( s= /usr/lib/python2.7/site-packages/certbot/_internal/account.pyt find_allf s c C s< | j | j k r( t j d | j � n | | j | j <d S( Ns Overwriting account: %s( R4 RC t loggert debug( R5 t accountt client( ( s= /usr/lib/python2.7/site-packages/certbot/_internal/account.pyt savei s c C s6 y | j | SWn t k
r1 t j | � � n Xd S( N( RC t KeyErrorR t AccountNotFound( R5 t
account_id( ( s= /usr/lib/python2.7/site-packages/certbot/_internal/account.pyt loadn s
N( R R R R R7 RH RM RQ ( ( ( s= /usr/lib/python2.7/site-packages/certbot/_internal/account.pyRB ` s
t$ RegistrationResourceWithNewAuthzrURIc B s e Z d Z e j d � Z RS( sf A backwards-compatible RegistrationResource with a new-authz URI.
Hack: Certbot versions pre-0.11.1 expect to load
new_authzr_uri as part of the account. Because people
sometimes switch between old and new versions, we will
continue to write out this field for some time so older
clients don't crash in that scenario.
t new_authzr_uri( R R R R R RS ( ( ( s= /usr/lib/python2.7/site-packages/certbot/_internal/account.pyRR t s t AccountFileStoragec B s� e Z d Z d � Z d � Z d � Z e d � � Z e d � � Z e d � � Z d � Z
d � Z d � Z d
� Z
d � Z d � Z d
� Z d � Z d � Z d � Z d � Z d � Z d � Z d � Z d � Z d � Z d � Z RS( sM Accounts file storage.
:ivar .IConfig config: Client configuration
c C s) | | _ t j | j d | j j � d S( Ni� ( t configR t make_or_verify_dirt accounts_dirt strict_permissions( R5 RU ( ( s= /usr/lib/python2.7/site-packages/certbot/_internal/account.pyR7 � s c C s | j | | j j � S( N( t! _account_dir_path_for_server_pathRU t server_path( R5 RP ( ( s= /usr/lib/python2.7/site-packages/certbot/_internal/account.pyt _account_dir_path� s c C s% | j j | � } t j j | | � S( N( RU t accounts_dir_for_server_pathR t patht join( R5 RP RZ RW ( ( s= /usr/lib/python2.7/site-packages/certbot/_internal/account.pyRY � s c C s t j j | d � S( Ns regr.json( R R] R^ ( t clst account_dir_path( ( s= /usr/lib/python2.7/site-packages/certbot/_internal/account.pyt
_regr_path� s c C s t j j | d � S( Ns private_key.json( R R] R^ ( R_ R` ( ( s= /usr/lib/python2.7/site-packages/certbot/_internal/account.pyt _key_path� s c C s t j j | d � S( Ns meta.json( R R] R^ ( R_ R` ( ( s= /usr/lib/python2.7/site-packages/certbot/_internal/account.pyt _metadata_path� s c C s | j j | � } y t j | � } Wn t k
r9 g SXg } xU | D]M } y | j | j | | � � WqG t j k
r� t j
d d t �qG XqG W| r| t j
k rt j
| } | j | � } | r� y | j | | � Wq� t k
r� g SXn | } n | S( Ns Account loading problemt exc_info( RU R\ R t listdirt OSErrort appendt _load_for_server_pathR t AccountStorageErrorRI RJ R R t LE_REUSE_SERVERSt _find_all_for_server_patht _symlink_to_accounts_dir( R5 RZ RW t
candidatesRC RP t prev_server_patht
prev_accounts( ( s= /usr/lib/python2.7/site-packages/certbot/_internal/account.pyRk � s*
c C s | j | j j � S( N( Rk RU RZ ( R5 ( ( s= /usr/lib/python2.7/site-packages/certbot/_internal/account.pyRH � s c C s8 | j | | � } | j | | � } t j | | � d S( N( RY R t symlink( R5 Rn RZ RP t prev_account_dirt new_account_dir( ( s= /usr/lib/python2.7/site-packages/certbot/_internal/account.pyt _symlink_to_account_dir� s c C sg | j j | � } t j j | � r4 t j | � n
t j | � | j j | � } t j | | � d S( N( RU R\ R R] t islinkt unlinkt rmdirRp ( R5 Rn RZ RW Rq ( ( s= /usr/lib/python2.7/site-packages/certbot/_internal/account.pyRl � s
c C s� | j | | � } t j j | � s� | t j k r� t j | } | j | | � } | j j | � } t j | � r� | j
| | | � n | j | | � | St j
d | � � n y� t | j | � � � } t j j | j � � } Wd QXt | j | � � � } t j j | j � � }
Wd QXt | j | � � � } t j j | j � � } Wd QXWn" t k
r}}
t j |
� � n Xt | |
| � S( Ns Account at %s does not exist( RY R R] t isdirR Rj Rh RU R\ Re Rs Rl R RO t openRa R t RegistrationResourcet
json_loadst readRb R t JWKRc R R
t IOErrorRi ( R5 RP RZ R` Rn t prev_loaded_accountRW t regr_fileR t key_fileR t
metadata_fileR' t error( ( s= /usr/lib/python2.7/site-packages/certbot/_internal/account.pyRh � s,
"c C s | j | | j j � S( N( Rh RU RZ ( R5 RP ( ( s= /usr/lib/python2.7/site-packages/certbot/_internal/account.pyRQ � s c C so yF | j | � } | j | | � | j | | � | j | | | � Wn" t k
rj } t j | � � n Xd S( s� Create a new account.
:param Account account: account to create
:param ClientBase client: ACME client associated to the account
N( t _preparet _createt _update_metat _update_regrR} R Ri ( R5 RK RL t dir_pathR� ( ( s= /usr/lib/python2.7/site-packages/certbot/_internal/account.pyRM � s c C sO y& | j | � } | j | | | � Wn" t k
rJ } t j | � � n Xd S( s� Update the registration resource.
:param Account account: account to update
:param ClientBase client: ACME client associated to the account
N( R� R� R} R Ri ( R5 RK RL R� R� ( ( s= /usr/lib/python2.7/site-packages/certbot/_internal/account.pyt update_regr� s
c C sL y# | j | � } | j | | � Wn" t k
rG } t j | � � n Xd S( sV Update the meta resource.
:param Account account: account to update
N( R� R� R} R Ri ( R5 RK R� R� ( ( s= /usr/lib/python2.7/site-packages/certbot/_internal/account.pyt update_meta s
c C s| | j | � } t j j | � s7 t j d | � � n | j | | j j � t j | j j
� sx | j | j j � n d S( sn Delete registration info from disk
:param account_id: id of account which should be deleted
s Account at %s does not existN( R[ R R] Rw R RO t# _delete_account_dir_for_server_pathRU RZ Re RW t$ _delete_accounts_dir_for_server_path( R5 RP R` ( ( s= /usr/lib/python2.7/site-packages/certbot/_internal/account.pyt delete s c C s8 t j | j | � } | j | | � } t j | � d S( N( t functoolst partialRY t! _delete_links_and_find_target_dirt shutilt rmtree( R5 RP RZ t link_funct nonsymlinked_dir( ( s= /usr/lib/python2.7/site-packages/certbot/_internal/account.pyR� $ s c C s/ | j j } | j | | � } t j | � d S( N( RU R\ R� R Rv ( R5 RZ R� R� ( ( s= /usr/lib/python2.7/site-packages/certbot/_internal/account.pyR� ) s c
C s� | | � } i } x" t j D] } | | t j | <q Wt } xq | r� t } | | k r@ | | } | | � } t j j | � r� t j | � | k r� t } | } | } q� q@ q@ Wx8 t j j | � r� t j | � } t j | � | } q� W| S( s/ Delete symlinks and return the nonsymlinked directory path.
:param str server_path: file path based on server
:param callable link_func: callable that returns possible links
given a server_path
:returns: the final, non-symlinked target
:rtype: str
( R Rj R R+ R R] Rt t readlinkRu (
R5 RZ R� R� t reused_serverst kt possible_next_linkt next_server_patht
next_dir_patht target( ( s= /usr/lib/python2.7/site-packages/certbot/_internal/account.pyR� . s&
'
c C s/ | j | j � } t j | d | j j � | S( Ni� ( R[ R4 R RV RU RX ( R5 RK R` ( ( s= /usr/lib/python2.7/site-packages/certbot/_internal/account.pyR� U s c C sD t j | j | � d d d �� } | j | j j � � Wd QXd S( Nt wt chmodi ( R t safe_openRb t writeR t
json_dumps( R5 RK R� R� ( ( s= /usr/lib/python2.7/site-packages/certbot/_internal/account.pyR� [ s $c C s� t | j | � d � �w } | j } t | j d � r] t d | j j d i d | j � } n t j d i d | j � } | j
| j � � Wd QXd S( NR� s new-authzRS t bodyt uri( Rx Ra R t hasattrt directoryRR t new_authzR� R Ry R� R� ( R5 RK t acmeR� R R ( ( s= /usr/lib/python2.7/site-packages/certbot/_internal/account.pyR� ` s c C s; t | j | � d � � } | j | j j � � Wd QXd S( NR� ( Rx Rc R� R' R� ( R5 RK R� R� ( ( s= /usr/lib/python2.7/site-packages/certbot/_internal/account.pyR� s s ( R R R R7 R[ RY t classmethodRa Rb Rc Rk RH Rs Rl Rh RQ RM R� R� R� R� R� R� R� R� R� R� ( ( ( s= /usr/lib/python2.7/site-packages/certbot/_internal/account.pyRT s0
' (& R R R� R( t loggingR� R% t cryptography.hazmat.primitivesR t josepyR R8 R" RF R� R R R t acme.clientR t certbotR R R t certbot._internalR t certbot.compatR t getLoggerR RI t objectR t AccountStorageRB Ry RR RT ( ( ( s= /usr/lib/python2.7/site-packages/certbot/_internal/account.pyt <module> s0 E