Your IP : 216.73.216.224
U
�]�6 � @ s d Z ddlZddlZddlZddlZddlZddlZddlZddl Z ddl
Z
ddl Z ddl Z
ddlmZ ddlmZ ddlmZ ddlmZ ddlmZ ddlmZ dd lmZ dd
lmZ e�e �Z G d d � d e �Z d
d� Z G dd� dej!�Z"G dd� dej#�Z$G dd� dej!�Z%dS )z!Creates ACME accounts for server.� N)�
serialization)�fields)�messages)� constants)�errors)�
interfaces)�util)�osc @ sH e Zd ZdZG dd� dej�Zd
dd�Zedd� �Z d d
� Z
d d � Z dS )�Accountz�ACME protocol registration.
:ivar .RegistrationResource regr: Registration Resource
:ivar .JWK key: Authorized Account Key
:ivar .Meta: Account metadata
:ivar str id: Globally unique account identifier.
c @ s$ e Zd ZdZe�d�Ze�d�Z dS )z Account.Metaa+ Account metadata
:ivar datetime.datetime creation_dt: Creation date and time (UTC).
:ivar str creation_host: FQDN of host, where account has been created.
.. note:: ``creation_dt`` and ``creation_host`` are useful in
cross-machine migration scenarios.
� creation_dt�
creation_hostN)
�__name__�
__module__� __qualname__�__doc__� acme_fieldsZ RFC3339Fieldr �jose�Fieldr � r r �1/usr/lib/python3/dist-packages/certbot/account.py�Meta& s
r Nc C sn || _ || _|d kr:| jtjjtjd�jdd�t� � d�n|| _
t � | j j �
� jtjjtjjd���� | _d S )N)Ztzr )Z microsecond)r r )�encoding�format)�key�regrr �datetimeZnow�pytzZUTC�replace�socketZgetfqdn�meta�hashlibZmd5Z
public_keyZ public_bytesr ZEncodingZPEMZ PublicFormatZSubjectPublicKeyInfoZ hexdigest�id)�selfr r r r r r �__init__3 s& ����� ��zAccount.__init__c C s& d� t�| jj�| jj| jdd� �S )z3Short account identification string, useful for UI.z
{1}@{0} ({2})N� )r � pyrfc3339Zgenerater r r r! �r" r r r �slugG s � �z Account.slugc C s d� | jj| j| j| j�S )Nz<{0}({1}, {2}, {3})>)r � __class__r
r r! r r& r r r �__repr__M s �zAccount.__repr__c C s0 t || j�o.| j|jko.| j|jko.| j|jkS �N)�
isinstancer( r r r )r" �otherr r r �__eq__Q s
�
�
�zAccount.__eq__)N) r
r r r r ZJSONObjectWithFieldsr r# �propertyr' r) r- r r r r r
s
r
c C s4 t j�tj�}|dkrdS |�d�| j�|j� dS )z.Informs the user about their new ACME account.Na Your account credentials have been saved in your Certbot configuration directory at {0}. You should make a secure backup of this folder now. This configuration directory will also contain certificates and private keys obtained by Certbot so making regular backups of this folder is ideal.) �zopeZ componentZ queryUtilityr Z IReporterZ add_messager Z
config_dirZMEDIUM_PRIORITY)�configZreporterr r r �report_new_accountW s ��r1 c @ s2 e Zd ZdZd dd�Zdd� Zdd� Zd d
� ZdS ) �AccountMemoryStoragezIn-memory account storage.Nc C s |d k r |ni | _ d S r* )�accounts)r" Zinitial_accountsr r r r# i s z AccountMemoryStorage.__init__c C s t t�| j��S r* )�list�sixZ
itervaluesr3 r& r r r �find_alll s z AccountMemoryStorage.find_allc C s* |j | jkrt�d|j � || j|j < d S )NzOverwriting account: %s)r! r3 �logger�debug�r" �accountZclientr r r �saveo s zAccountMemoryStorage.savec C s0 z | j | W S tk
r* t�|��Y nX d S r* )r3 �KeyErrorr �AccountNotFound�r" �
account_idr r r �loadt s zAccountMemoryStorage.load)N)r
r r r r# r6 r; r@ r r r r r2 f s
r2 c @ s e Zd ZdZe�d�ZdS )�$RegistrationResourceWithNewAuthzrURIaf A backwards-compatible RegistrationResource with a new-authz URI.
Hack: Certbot versions pre-0.11.1 expect to load
new_authzr_uri as part of the account. Because people
sometimes switch between old and new versions, we will
continue to write out this field for some time so older
clients don't crash in that scenario.
�new_authzr_uriN)r
r r r r r rB r r r r rA z s rA c @ s� e Zd ZdZdd� Zdd� Zdd� Zedd � �Zed
d � �Z ed d
� �Z
dd� Z dd� Z dd� Z
dd� Zdd� Zdd� Zdd� Zd d � Zd d � Zd d!� Zd"d#� Zd$d%� Zd&d'� Zd(S ))�AccountFileStoragezMAccounts file storage.
:ivar .IConfig config: Client configuration
c C s || _ t�|jd| j j� d S )N� )r0 r �make_or_verify_dir� accounts_dir�strict_permissions)r" r0 r r r r# � s zAccountFileStorage.__init__c C s | � || jj�S r* )�!_account_dir_path_for_server_pathr0 � server_pathr> r r r �_account_dir_path� s z$AccountFileStorage._account_dir_pathc C s | j �|�}tj�||�S r* )r0 � accounts_dir_for_server_pathr �path�join)r" r? rI rF r r r rH � s z4AccountFileStorage._account_dir_path_for_server_pathc C s t j�|d�S )Nz regr.json�r rL rM ��cls�account_dir_pathr r r �
_regr_path� s z AccountFileStorage._regr_pathc C s t j�|d�S )Nzprivate_key.jsonrN rO r r r � _key_path� s z AccountFileStorage._key_pathc C s t j�|d�S )Nz meta.jsonrN rO r r r �_metadata_path� s z!AccountFileStorage._metadata_pathc C s� | j �|�}zt�|�}W n tk
r2 g Y S X g }|D ]@}z|�| �||�� W q< tjk
rz t j
ddd� Y q<X q<|s�|t j kr�t j | }| �
|�}|r�z| �||� W n tk
r� g Y S X |}|S )NzAccount loading problemT)�exc_info)r0 rK r �listdir�OSError�append�_load_for_server_pathr �AccountStorageErrorr7 r8 r �LE_REUSE_SERVERS�_find_all_for_server_path�_symlink_to_accounts_dir)r" rI rF Z
candidatesr3 r? �prev_server_pathZ
prev_accountsr r r r\ � s*
z,AccountFileStorage._find_all_for_server_pathc C s | � | jj�S r* )r\ r0 rI r& r r r r6 � s zAccountFileStorage.find_allc C s( | � ||�}| � ||�}t�||� d S r* )rH r �symlink)r" r^ rI r? �prev_account_dirZnew_account_dirr r r �_symlink_to_account_dir� s z*AccountFileStorage._symlink_to_account_dirc C sJ | j �|�}tj�|�r$t�|� n
t�|� | j �|�}t�||� d S r* )r0 rK r rL �islink�unlink�rmdirr_ )r" r^ rI rF r` r r r r] � s
z+AccountFileStorage._symlink_to_accounts_dirc
C s: | � ||�}tj�|�s||tjkrntj| }| �||�}| j�|�}t� |�r^| �
|||� n | � ||� |S t �
d| ��z�t| �|���}tj�|�� �}W 5 Q R X t| �|���} tj�| �� �}
W 5 Q R X t| �|���} tj�| �� �} W 5 Q R X W n. tk
�r, }
zt �|
��W 5 d }
~
X Y nX t||
| �S )N� Account at %s does not exist) rH r rL �isdirr r[ rY r0 rK rV ra r] r r= �openrR r �RegistrationResourceZ
json_loads�readrS r ZJWKrT r
r �IOErrorrZ )r" r? rI rQ r^ Zprev_loaded_accountrF � regr_filer �key_filer �
metadata_filer �errorr r r rY � s.
� z(AccountFileStorage._load_for_server_pathc C s | � || jj�S r* )rY r0 rI r> r r r r@ � s zAccountFileStorage.loadc C s | j ||dd� d S )NF�� regr_only��_saver9 r r r r; � s zAccountFileStorage.savec C s | j ||dd� dS )zmSave the registration resource.
:param Account account: account whose regr should be saved
Tro Nrq )r" r: �acmer r r � save_regr� s z AccountFileStorage.save_regrc C sT | � |�}tj�|�s$t�d| ��| �|| jj� t� | jj
�sP| � | jj� dS )znDelete registration info from disk
:param account_id: id of account which should be deleted
re N) rJ r rL rf r r= �#_delete_account_dir_for_server_pathr0 rI rV rF �$_delete_accounts_dir_for_server_path)r" r? rQ r r r �delete� s
�zAccountFileStorage.deletec C s( t �| j|�}| �||�}t�|� d S r* )� functools�partialrH �!_delete_links_and_find_target_dir�shutilZrmtree)r" r? rI � link_func�nonsymlinked_dirr r r ru s z6AccountFileStorage._delete_account_dir_for_server_pathc C s" | j j}| �||�}t�|� d S r* )r0 rK rz r rd )r" rI r| r} r r r rv s z7AccountFileStorage._delete_accounts_dir_for_server_pathc
C s� ||�}i }t jD ]}||t j| < qd}|rrd}||kr*|| }||�}tj�|�r*t�|�|kr*d}|}|}q*tj�|�r�t�|�} t�|� | }qr|S )a/ Delete symlinks and return the nonsymlinked directory path.
:param str server_path: file path based on server
:param callable link_func: callable that returns possible links
given a server_path
:returns: the final, non-symlinked target
:rtype: str
TF)r r[ r rL rb �readlinkrc )
r" rI r| Zdir_pathZreused_servers�kZpossible_next_linkZnext_server_pathZ
next_dir_path�targetr r r rz s&
z4AccountFileStorage._delete_links_and_find_target_dirc
C s | � |j�}t�|d| jj� z�t| �|�d��L}|j}t |j
d�rZt |j
j i |j
d�}ntji |j
d�}|�|�� � W 5 Q R X |s�tj| �|�ddd��}|�|j�� � W 5 Q R X t| �|�d��}|�|j�� � W 5 Q R X W n. tk
�r } zt�| ��W 5 d } ~ X Y nX d S )NrD �wz new-authz)rB �body�uri)r� r� � )�chmod)rJ r! r rE r0 rG rg rR r �hasattrZ directoryrA Z new_authzr� r rh �writeZ
json_dumpsZ safe_openrS r rT r rj r rZ )
r" r: rs rp rQ rk r rl rm rn r r r rr < s@ �� ��� zAccountFileStorage._saveN)r
r r r r# rJ rH � classmethodrR rS rT r\ r6 ra r] rY r@ r; rt rw ru rv rz rr r r r r rC � s.
'rC )&r r rx r Zloggingr{ r Zjosepyr r% r r5 Zzope.componentr/ Z cryptography.hazmat.primitivesr rs r r r Zcertbotr r r r Zcertbot.compatr Z getLoggerr
r7 �objectr
r1 ZAccountStorager2 rh rA rC r r r r �<module> s2
;