Your IP : 216.73.216.172
U
�]Q0 � @ sT d Z ddlZddlZddlZddlZddlZddlZddlZddl Zddl
m Z ddl m
Z
mZmZmZ ddlmZ ddlmZ ddlmZ ddlmZ dd lmZ dd
lmZ dd lmZ dd lmZ dd
l m Z dd l mZ ddl m Z e�!e"�Z#ej$�%ej&�ej$�'ej(�G dd� de j)���Z*G dd� dej+�Z,G dd� dej+�Z-dd� Z.dS )zWebroot plugin.� N)�
challenges)�Dict�Set� DefaultDict�List)� achallenges)�cli)�errors)�
interfaces)�os)�
filesystem)�ops)�util)�common)� safe_openc s� e Zd ZdZdZdZdd� Zedd� �Zdd � Z � fd
d �Z
d d
� Z dd� Z dd� Z
dd� Zdd� Zd!dd�Zdd� Zdd � Zd d � Zd d � Z� ZS )"�
AuthenticatorzWebroot Authenticator.z Place files in webroot directoryz�Authenticator plugin that performs http-01 challenge by saving
necessary validation resources to appropriate paths on the file
system. It expects that there is some other HTTP server configured
to serve all files under specified web root ({0}).c C s | j �| �d��S )N�path)� MORE_INFO�format�conf��self� r �9/usr/lib/python3/dist-packages/certbot/plugins/webroot.py� more_info- s zAuthenticator.more_infoc C s& |ddg t dd� |di tdd� d S )Nr z-wa public_html / webroot path. This can be specified multiple times to handle different domains; each domain will have the webroot path that preceded it. For instance: `-w /var/www/example -d example.com -d www.example.com -w /var/www/thing -d thing.net -d m.thing.net` (default: Ask))�default�action�help�mapa� JSON dictionary mapping domains to webroot paths; this implies -d for each entry. You may need to escape this from your shell. E.g.: --webroot-map '{"eg1.is,m.eg1.is":"/www/eg1/", "eg2.is":"/www/eg2"}' This option is merged with, but takes precedence over, -w / -d entries. At present, if you put webroot-map in a config file, it needs to be on a single line, like: webroot-map = {"example.com":"/var/www"}.)�_WebrootPathAction�_WebrootMapAction)�cls�addr r r �add_parser_arguments0 s
��z"Authenticator.add_parser_argumentsc C s t jgS �N)r �HTTP01)r �domainr r r �get_chall_prefB s z Authenticator.get_chall_prefc s. t t| �j||� i | _t�t�| _g | _d S r$ ) �superr �__init__�
full_roots� collections� defaultdict�set� performed�
_created_dirs�r �args�kwargs�� __class__r r r) F s zAuthenticator.__init__c C s d S r$ r r r r r �prepareN s zAuthenticator.preparec s$ � � |� � �� � fdd�|D �S )Nc s g | ]}� � |��qS r )�_perform_single)�.0�achallr r r �
<listcomp>V s z)Authenticator.perform.<locals>.<listcomp>)�
_set_webroots�_create_challenge_dirs)r �achallsr r r �performQ s
zAuthenticator.performc C s� | � d�rD| � d�d }t�d|� |D ]}| � d��|j|� q(n�ttt�| � d����}|D ]b}|j| � d�kr`| � |j|�}z|�
|� W n t k
r� Y nX |� d|� || � d�|j< q`d S )Nr ���z4Using the webroot path %s for all unmatched domains.r r )
r �logger�info�
setdefaultr& �listr- �sixZ
itervalues�_prompt_for_webroot�remove�
ValueError�insert)r r< � webroot_pathr8 �known_webrootsZ new_webrootr r r r: X s&
�� zAuthenticator._set_webrootsc C sB d }|d kr>|r0| � ||�}|d kr<| �|�}q| �|d�}q|S )NT)�_prompt_with_webroot_list�_prompt_for_new_webroot)r r& rI �webrootr r r rD n s z!Authenticator._prompt_for_webrootc C sr t j�tj�}d| �d� }|jd�|�dg| |dd�\}}|tj krTt
� d��q |dkr`d S ||d S q d S )
Nz--r zSelect the webroot for {0}:zEnter a new webrootT)Zcli_flag�force_interactive�IEvery requested domain must have a webroot when using the webroot plugin.r � ) �zopeZ componentZ
getUtilityr
ZIDisplayZ option_nameZmenur � display_util�CANCELr � PluginError)r r& rI ZdisplayZ path_flag�code�indexr r r rJ } s �
�z'Authenticator._prompt_with_webroot_listFc C sD t jtd�|�dd�\}}|tjkr8|s,d S t�d��nt|�S d S )NzInput the webroot for {0}:T)rM rN )r
Zvalidated_directory�_validate_webrootr rQ rR r rS )r r& Z
allowraiserT rL r r r rK � s �
�z%Authenticator._prompt_for_new_webrootc C sZ | � d�}|st�d��|�� D �]2\}}tj�|tjj �| j
|< t � d| j
| � t�
d�}z�tt�| j
| �d d� td�D ]�}zrt�|d� | j�|� ztj||dddd � W n< ttfk
r� } zt �d
� t � d |� W 5 d }~X Y nX W q� tk
�r@ } z*|jtjtj fk�r0t�d � ||���W 5 d }~X Y q�X q�W 5 t�
|� X q d S )
Nr z�Missing parts of webroot configuration; please set either --webroot-path and --domains, or --webroot-map. Run with --help webroot for examples.z-Creating root challenges validation dir at %s� r> )�keyi� T)Z copy_userZ
copy_groupz3Unable to change owner and uid of webroot directory�
Error was: %sz=Couldn't create root for {0} http-01 challenge responses: {1}) r r rS �itemsr r �joinr r% Z
URI_ROOT_PATHr* r? �debug�umask�sortedr Z get_prefixes�lenr �mkdirr/ �appendZ copy_ownership_and_apply_mode�OSError�AttributeErrorr@ �errnoZEEXISTZEISDIRr )r Zpath_map�namer � old_umask�prefixZ exceptionr r r r; � sH
��
$ �
" �� z$Authenticator._create_challenge_dirsc C s t j�||j�d��S )N�token)r r r[ Zchall�encode)r � root_pathr8 r r r �_get_validation_path� s z"Authenticator._get_validation_pathc C s� |� � \}}| j|j }| �||�}t�d|� t�d�}z,t|ddd��}|� |�
� � W 5 Q R X W 5 t�|� X | j | � |� |S )Nz#Attempting to save validation to %srW �wbi� )�mode�chmod)
Zresponse_and_validationr* r& rk r? r\ r r] r �writeri r. r" )r r8 ZresponseZ
validationrj �validation_pathrf Zvalidation_filer r r r6 � s
z Authenticator._perform_singlec
C s� |D ]N}| j �|jd �}|d k r| �||�}t�d|� t�|� | j| �|� qg }| j r�| j �
� }zt� |� W qX t k
r� } z(|�
d|� t�d|� t�d|� W 5 d }~X Y qXX qX|| _ t�d� d S )Nz Removing %sr z3Challenge directory %s was not empty, didn't removerY zAll challenges cleaned up)r* �getr& rk r? r\ r rE r. r/ �pop�rmdirrb rG r@ )r r< r8 rj rp Z not_removedr �excr r r �cleanup� s$
zAuthenticator.cleanup)F)�__name__�
__module__� __qualname__�__doc__Z descriptionr r � classmethodr# r' r) r5 r= r: rD rJ rK r; rk r6 ru �
__classcell__r r r3 r r s$
)r c @ s e Zd ZdZddd�ZdS )r z%Action class for parsing webroot_map.Nc sH t �t�|��D ]2\}� t� �� |j�� fdd�t�||�D �� qd S )Nc 3 s | ]}|� fV qd S r$ r )r7 �d�rH r r � <genexpr>� s z-_WebrootMapAction.__call__.<locals>.<genexpr>) rC Z iteritems�json�loadsrV � webroot_map�updater Z add_domains)r �parser� namespacer� �
option_string�domainsr r} r �__call__� s
�z_WebrootMapAction.__call__)N)rv rw rx ry r� r r r r r � s r c s* e Zd ZdZ� fdd�Zddd�Z� ZS )r z&Action class for parsing webroot_path.c s t t| �j||� d| _d S )NF)r( r r) �_domain_before_webrootr0 r3 r r r) � s z_WebrootPathAction.__init__Nc C s\ | j rt�d��|jr<|jd }|jD ]}|j�||� q&n |jrHd| _ |j�t|�� d S )NzPIf you specify multiple webroot paths, one of them must precede all domain flagsr> T) r� r rS rH r� r� rA ra rV )r r� r� rH r� Z prev_webrootr& r r r r� s �
z_WebrootPathAction.__call__)N)rv rw rx ry r) r� r{ r r r3 r r � s r c C s& t j�| �st�| d ��t j�| �S )z�Validates and returns the absolute path of webroot_path.
:param str webroot_path: path to the webroot directory
:returns: absolute path of webroot_path
:rtype: str
z% does not exist or is not a directory)r r �isdirr rS �abspathr} r r r rV s rV )/ry �argparser+ rd r ZloggingrC Zzope.componentrP Zzope.interfaceZacmer Zacme.magic_typingr r r r Zcertbotr r r r
Zcertbot.compatr r Zcertbot.displayr
r rQ Zcertbot.pluginsr Z certbot.utilr Z getLoggerrv r? Z interfaceZ implementerZIAuthenticatorZproviderZIPluginFactoryZPluginr ZActionr r rV r r r r �<module> s:
P