| Current File : //proc/self/root/lib/python3.6/site-packages/acme/__pycache__/standalone.cpython-36.pyc |
3
گaV3 � @ sr d Z ddlZddlZddljZddljZddl Z ddl
Z
ddl Z ddl Z ddl
mZ ddl
mZ ddl
mZ ddl
mZ ddl
mZ ddl
mZ dd l
mZ dd
lmZ dd lmZ dd lmZ dd
lmZ e je �Z G dd� de j �Z G dd� d�Z G dd� d�Z!G dd� de e �Z"G dd� dej#�Z#G dd� de#e �Z$G dd� de!�Z%G d d � d ej&�Z'G d d � d e j(�Z)dS ) z1Support for standalone client challenge solvers. � N)�Any)�List)�Mapping)�Optional)�Set)�Tuple)�Type)�crypto)�SSL)�
challenges)� crypto_utilc @ s\ e Zd ZdZeedd�dd�Zdd�dd�Zeje e
j e
j f d �d
d �Z
dd�d d
�ZdS )� TLSServerzGeneric TLS Server.N)�args�kwargs�returnc O sj |j dd�| _| jr tj| _ntj| _|j di �| _|j dtj�| _ |j dd�| _
t j j
| f|�|� d S )N�ipv6F�certs�method�allow_reuse_addressT)�popr �socket�AF_INET6�address_family�AF_INETr r Z_DEFAULT_SSL_METHODr r � socketserver� TCPServer�__init__)�selfr r � r � /usr/lib/python3.6/standalone.pyr s
zTLSServer.__init__)r c C s& t j| j| jt| dd �| jd�| _d S )N�_alpn_selection)Zcert_selectionZalpn_selectionr )r Z SSLSocketr �_cert_selection�getattrr )r r r r �
_wrap_sock* s
zTLSServer._wrap_sock)�
connectionr c C s |j � }| jj|d�S )z.Callback selecting certificate for connection.N)�get_servernamer �get)r r$ � server_namer r r r! 0 s zTLSServer._cert_selectionc C s | j � tjj| �S )N)r# r r � server_bind)r r r r r( 6 s zTLSServer.server_bind)�__name__�
__module__� __qualname__�__doc__r r r# r
�
Connectionr r �PKey�X509r! r( r r r r r
s r
c @ s e Zd ZdZdZdZdS )�ACMEServerMixinz"ACME server common settings mixin.z'ACME client standalone challenge solverTN)r) r* r+ r, �server_versionr r r r r r0 ; s r0 c @ sj e Zd ZdZeej eee f e
e
dd�dd�Z dd�dd�Z e
eee f d�d d
�Zdd�d d �ZdS )
�BaseDualNetworkedServersa Base class for a pair of IPv6 and IPv4 servers that tries to do everything
it's asked for both servers, but where failures in one server don't
affect the other.
If two servers are instantiated, they will serve on the same port.
N)� ServerClass�server_address�remaining_argsr r c O s0 |d }g | _ g | _d }x�d
D ]�}y\||d< |d f|f |dd � }|f| } || |�}
tjd|d |d |rvdnd � W np tjk
r� } zR| }| jr�tjd
|d |d |r�dnd � n tjd |d |d |r�dnd � W Y d d } ~ X q X | jj|
� |
jj� d }q W | j�s,|�r"|�n
tjd ��d S )N� TFr r � z$Successfully bound to %s:%s using %sZIPv6ZIPv4z�Certbot wasn't able to bind to %s:%s using %s, this is often expected due to the dual stack nature of IPv6 socket implementations.z Failed to bind to %s:%s using %sz Could not bind to IPv4 or IPv6.)TF)�threads�servers�logger�debugr �error�append� getsockname) r r3 r4 r5 r ZportZlast_socket_errZ
ip_versionZ new_addressZnew_args�server�er r r r J s:
& z!BaseDualNetworkedServers.__init__)r c C s6 x0| j D ]&}tj|jd�}|j� | jj|� qW dS )z*Wraps socketserver.TCPServer.serve_forever)�targetN)r9 � threadingZThread�
serve_forever�startr8 r= )r r? �threadr r r rC | s
z&BaseDualNetworkedServers.serve_foreverc C s dd� | j D �S )z/Wraps socketserver.TCPServer.socket.getsocknamec S s g | ]}|j j� �qS r )r r> )�.0r? r r r �
<listcomp>� s z9BaseDualNetworkedServers.getsocknames.<locals>.<listcomp>)r9 )r r r r � getsocknames� s z%BaseDualNetworkedServers.getsocknamesc C sB x | j D ]}|j� |j� qW x| jD ] }|j� q(W g | _dS )zpWraps socketserver.TCPServer.shutdown, socketserver.TCPServer.server_close, and
threading.Thread.joinN)r9 ZshutdownZ server_closer8 �join)r r? rE r r r �shutdown_and_server_close� s z2BaseDualNetworkedServers.shutdown_and_server_close)r) r* r+ r, r r r r �str�intr r rC r rH rJ r r r r r2 B s 1r2 c @ s� e Zd ZdZdZdeeef eee j
e j f e eee j
e j f f e
dd�dd�Zejee j
e j f d�d d
�Zejee ed �d d
�ZdS )�TLSALPN01ServerzTLSALPN01 Server.s
acme-tls/1FN)r4 r �challenge_certsr r c C s t j| |t||d� || _d S )N)r r )r
r � _BaseRequestHandlerWithLoggingrN )r r4 r rN r r r r r � s zTLSALPN01Server.__init__)r$ r c C s |j � }tjd|� | j| S )Nz)Serving challenge cert for server name %s)r% r: r; rN )r r$ r' r r r r! � s z TLSALPN01Server._cert_selection)� _connection� alpn_protosr c C sB t |�dkr.|d | jkr.tjd| j� | jS tjdt|�� dS )z!Callback to select alpn protocol.r6 r zAgreed on %s ALPNz#Cannot agree on ALPN proto. Got: %s� )�len�ACME_TLS_1_PROTOCOLr: r; rK )r rP rQ r r r r � s
z TLSALPN01Server._alpn_selection)F)r) r* r+ r, rT r rK rL r r r. r/ r �boolr r
r- r! �bytesr r r r r rM � s
D rM c @ s" e Zd ZdZeedd�dd�ZdS )�
HTTPServerzGeneric HTTP Server.N)r r r c O s> |j dd�| _| jr tj| _ntj| _tjj| f|�|� d S )Nr F) r r r r r r �BaseHTTPServerrW r )r r r r r r r � s
zHTTPServer.__init__)r) r* r+ r, r r r r r r rW � s rW c @ s6 e Zd ZdZdeeef eej e
edd�dd�Z dS ) � HTTP01ServerzHTTP01 Server.F� N)r4 � resourcesr �timeoutr c C s t j| |tj||d�|d� d S )N)�simple_http_resourcesr\ )r )rW r �HTTP01RequestHandler� partial_init)r r4 r[ r r\ r r r r � s zHTTP01Server.__init__)FrZ ) r) r* r+ r, r rK rL r r �HTTP01rU r r r r r rY � s rY c @ s" e Zd ZdZeedd�dd�ZdS )�HTTP01DualNetworkedServersz`HTTP01Server Wrapper. Tries everything for both. Failures for one don't
affect the other.N)r r r c O s t j| tf|�|� d S )N)r2 r rY )r r r r r r r � s z#HTTP01DualNetworkedServers.__init__)r) r* r+ r, r r r r r r ra � s ra c @ s� e Zd ZdZejdd�Zeedd�dd�Ze e
d�d d
��Z e edd �d d
�Z
dd�dd�Zdd�dd�Zdd�dd�Zdd�dd�Zdd�dd�Zeeej e
dd�dd��ZdS ) r^ z�HTTP01 challenge handler.
Adheres to the stdlib's `socketserver.BaseRequestHandler` interface.
:ivar set simple_http_resources: A set of `HTTP01Resource`
objects. TODO: better name?
�HTTP01Resourcezchall response validationN)r r r c O s: |j dt� �| _|j dd�| _tjj| f|�|� | d S )Nr] r\ rZ )r �setr] �_timeoutrX �BaseHTTPRequestHandlerr )r r r r r r r � s z HTTP01RequestHandler.__init__)r c C s | j S )z�
The default timeout this server should apply to requests.
:return: timeout to apply
:rtype: int
)rd )r r r r r\ � s z HTTP01RequestHandler.timeout)�formatr r c G s t jd| jd || � dS )zLog arbitrary message.z %s - - %sr N)r: r; �client_address)r rf r r r r � log_message� s z HTTP01RequestHandler.log_messagec C s | j d� tjj| � dS )zHandle request.zIncoming requestN)rh rX re �handle)r r r r ri � s
zHTTP01RequestHandler.handlec C s> | j dkr| j� n&| j jdtjj �r2| j� n| j� d S )N�/)�path� handle_index�
startswithr r` Z
URI_ROOT_PATH�handle_simple_http_resource�
handle_404)r r r r �do_GET s
zHTTP01RequestHandler.do_GETc C s6 | j d� | jdd� | j� | jj| jjj� � dS )zHandle index page.�� z Content-Typez text/htmlN)�
send_response� send_header� end_headers�wfile�writer? r1 �encode)r r r r rl s
z!HTTP01RequestHandler.handle_indexc C s4 | j tjdd� | jdd� | j� | jjd� dS )z Handler 404 Not Found errors.z Not Found)�messagez Content-typez text/htmls 404N)rr � http_clientZ NOT_FOUNDrs rt ru rv )r r r r ro s z HTTP01RequestHandler.handle_404c C sx xd| j D ]P}|jj| jkr| jd|jjd�� | jtj� | j� | j j
|j j� � dS qW | jd� | jd| j� dS )z$Handle HTTP01 provisioned resources.z Serving HTTP01 with token %r�tokenNzNo resources to servez0%s does not correspond to any resource. ignoring) r] Zchallrk rh rw rr ry ZOKrt ru rv Z
validation)r Zresourcer r r rn s
z0HTTP01RequestHandler.handle_simple_http_resourcez'functools.partial[HTTP01RequestHandler])r] r\ r c C s t j| ||d�S )z�Partially initialize this handler.
This is useful because `socketserver.BaseServer` takes
uninitialized handler and initializes it with the current
request.
)r] r\ )� functools�partial)�clsr] r\ r r r r_ % s
z!HTTP01RequestHandler.partial_init)r) r* r+ r, � collections�
namedtuplerb r r �propertyrL r\ rK rh ri rp rl ro rn � classmethodr r r` r_ r r r r r^ � s r^ c @ s0 e Zd ZdZeedd�dd�Zdd�dd�ZdS ) rO z BaseRequestHandler with logging.N)rf r r c G s t jd| jd || � dS )zLog arbitrary message.z %s - - %sr N)r: r; rg )r rf r r r r rh 7 s z*_BaseRequestHandlerWithLogging.log_message)r c C s | j d� tjj| � dS )zHandle request.zIncoming requestN)rh r �BaseRequestHandlerri )r r r r ri ; s
z%_BaseRequestHandlerWithLogging.handle)r) r* r+ r, rK r rh ri r r r r rO 4 s rO )*r, r~ r{ Z http.clientZclientry Z http.serverr? rX Zloggingr r rB Ztypingr r r r r r r ZOpenSSLr r
Zacmer r Z getLoggerr) r: r r
r0 r2 rM rW rY ra re r^ r� rO r r r r �<module> s:
Q%
^