Your IP : 216.73.216.190
U
�]� � @ s d Z ddlZddlZddlZddlmZ ddlZddlZddlZ ddl
m Z ddl
m Z
ddlmZmZmZmZmZmZmZ ddlmZ ddlmZ dd lmZ dd
lmZ e� e �Z er�ee
j eej f Z!G d d � d e"�Z#e j$�%ej&�e j$�'ej(�G d
d� dej)���Z*dd� Z+dS )zStandalone Authenticator.� N)�errno)�
challenges)�
standalone)� DefaultDict�Dict�Set�Tuple�List�Type�
TYPE_CHECKING)� achallenges)�errors)�
interfaces)�commonc @ s2 e Zd ZdZdd� Zd dd�Zdd� Zd d
� Zd S )
�
ServerManagera� Standalone servers manager.
Manager for `ACMEServer` and `ACMETLSServer` instances.
`certs` and `http_01_resources` correspond to
`acme.crypto_util.SSLSocket.certs` and
`acme.crypto_util.SSLSocket.http_01_resources` respectively. All
created servers share the same certificates and resources, so if
you're running both TLS and non-TLS instances, HTTP01 handlers
will serve the same URLs!
c C s i | _ || _|| _d S �N)�
_instances�certs�http_01_resources)�selfr r � r �</usr/lib/python3/dist-packages/certbot/plugins/standalone.py�__init__, s zServerManager.__init__� c
C s� |t jkst�|| jkr"| j| S ||f}zt�|| j�}W n0 tjk
rl } zt �
||��W 5 d}~X Y nX |� � |� � d d }|| j|< |S )a Run ACME server on specified ``port``.
This method is idempotent, i.e. all calls with the same pair of
``(port, challenge_type)`` will reuse the same server.
:param int port: Port to run the server on.
:param challenge_type: Subclass of `acme.challenges.Challenge`,
currently only `acme.challenge.HTTP01`.
:param str listenaddr: (optional) The address to listen on. Defaults to all addrs.
:returns: DualNetworkedServers instance.
:rtype: ACMEServerMixin
Nr � )
r �HTTP01�AssertionErrorr �acme_standaloneZHTTP01DualNetworkedServersr �socket�errorr
�StandaloneBindErrorZ
serve_forever� getsocknames)r �portZchallenge_type�
listenaddrZaddress�serversr Z real_portr r r �run1 s
�
zServerManager.runc C sB | j | }|�� D ]}tjd|dd� �� q|�� | j |= dS )zWStop ACME server running on the specified ``port``.
:param int port:
�Stopping server at %s:%d...N� )r& )r r! �logger�debugZshutdown_and_server_close)r r" �instanceZsocknamer r r �stopT s
�zServerManager.stopc C s
| j �� S )z�Return all running instances.
Once the server is stopped using `stop`, it will not be
returned.
:returns: Mapping from ``port`` to ``servers``.
:rtype: tuple
)r �copy�r r r r �runninga s
zServerManager.runningN)r )�__name__�
__module__� __qualname__�__doc__r r% r+ r. r r r r r s
#
r c sp e Zd ZdZdZ� fdd�Zedd� �Zdd� Zd d
� Z d d � Z
d
d� Z dd� Z dd� Z
dd� Zdd� Z� ZS )�
Authenticatora Standalone Authenticator.
This authenticator creates its own ephemeral TCP listener on the
necessary port in order to respond to incoming http-01
challenges from the certificate authority. Therefore, it does not
rely on any existing server program.
z Spin up a temporary webserverc s@ t t| �j||� t�t�| _i | _t� | _t | j| j�| _
d S r ) �superr3 r � collections� defaultdict�set�servedr r r r$ )r �args�kwargs�� __class__r r r { s
zAuthenticator.__init__c C s d S r r )�cls�addr r r �add_parser_arguments� s z"Authenticator.add_parser_argumentsc C s dS )Nz�This authenticator creates its own ephemeral TCP listener on the necessary port in order to respond to incoming http-01 challenges from the certificate authority. Therefore, it does not rely on any existing server program.r r- r r r � more_info� s zAuthenticator.more_infoc C s d S r r r- r r r �prepare� s zAuthenticator.preparec C s t jgS r )r r )r Zdomainr r r �get_chall_pref� s z Authenticator.get_chall_prefc s � fdd�|D �S )Nc s g | ]}� � |��qS r )�_try_perform_single)�.0�achallr- r r �
<listcomp>� s z)Authenticator.perform.<locals>.<listcomp>r )r �achallsr r- r �perform� s zAuthenticator.performc
C s@ z | � |�W S tjk
r8 } z t|� W 5 d }~X Y q X q d S r )�_perform_singler
r �_handle_perform_error)r rE r r r r rC � s z!Authenticator._try_perform_singlec C s" | � |�\}}| j| �|� |S r )�_perform_http_01r8 r> )r rE r$ �responser r r rI � s z Authenticator._perform_singlec C sX | j j}| j j}| jj|tj|d�}|�� \}}tj j
|j ||d�}| j �
|� ||fS )N)r# )�challrL �
validation)ZconfigZ http01_portZhttp01_addressr$ r% r r Zresponse_and_validationr ZHTTP01RequestHandlerZHTTP01ResourcerM r r> )r rE r" Zaddrr$ rL rN �resourcer r r rK � s � z Authenticator._perform_http_01c C sd | j �� D ]$\}}|D ]}||kr|�|� qq
t�| j�� �D ] \}}| j | s@| j�|� q@d S r )r8 �items�remove�sixZ iteritemsr$ r. r+ )r rG Zunused_serversZserver_achallsrE r" r$ r r r �cleanup� s
zAuthenticator.cleanup)r/ r0 r1 r2 Z descriptionr � classmethodr? r@ rA rB rH rC rI rK rS �
__classcell__r r r; r r3 n s
r3 c C st | j jtjkr"t�d�| j���nN| j jtjkrlt j
� t j
�}d�| j�}|j|dddd�}|spt�|��n| �d S )Nz�Could not bind TCP port {0} because you don't have the appropriate permissions (for example, you aren't running this program as root).z�Could not bind TCP port {0} because it is already in use by another process on this system (such as a web server). Please stop the program in question and then try again.ZRetryZCancelF)�default)Z socket_errorr �
socket_errorsZEACCESr
Z PluginError�formatr" Z
EADDRINUSE�zopeZ componentZ
getUtilityr ZIDisplayZyesno)r Zdisplay�msgZ should_retryr r r rJ � s& ���� � rJ ),r2 r5 Zloggingr r rW ZOpenSSLrR Zzope.interfacerY Zacmer r r Zacme.magic_typingr r r r r r
r Zcertbotr r
r Zcertbot.pluginsr Z getLoggerr/ r( ZBaseDualNetworkedServersZ"KeyAuthorizationAnnotatedChallengeZ
ServedType�objectr Z interfaceZ implementerZIAuthenticatorZproviderZIPluginFactoryZPluginr3 rJ r r r r �<module> s4 $
��O O