| Server IP : 35.236.43.222 / Your IP : 216.73.216.143 Web Server : Apache System : Linux order-form-vm-001 5.10.0-37-cloud-amd64 #1 SMP Debian 5.10.247-1 (2025-12-11) x86_64 User : deploy ( 1002) PHP Version : 8.1.31 Disable Function : NONE MySQL : OFF | cURL : ON | WGET : ON | Perl : ON | Python : OFF | Sudo : ON | Pkexec : OFF Directory : /lib/python3/dist-packages/certbot/plugins/__pycache__/ |
Upload File : |
a
�`~8 � @ sL d Z ddlZddlZddlZddlZddlmZ ddlZddl Z
ddl m Z ddl
mZ ddl
mZ ddl
mZ ddl
mZ dd l
mZ dd
lmZ dd lmZ dd lmZ dd
lmZ e�e�Z dd� Z dd� Z e� d�Z e� dej!�Z"e
j#�$ej%�G dd� de&��Z'G dd� de'�Z(G dd� de&�Z)G dd� de&�Z*d d � Z+d d � Z,dS ) zPlugin common functions.� N)�util)�List)� achallenges)� crypto_util)�errors)�
interfaces)�reverter)� constants)�
filesystem)�os)�
PluginStoragec C s | d S )�9ArgumentParser options namespace (prefix of all options).�-� ��namer r �8/usr/lib/python3/dist-packages/certbot/plugins/common.py�option_namespace s r c C s | � dd�d S )�;ArgumentParser dest namespace (prefix of all destinations).r �_)�replacer r r r �dest_namespace s r zX(^127\.0\.0\.1)|(^10\.)|(^172\.1[6-9]\.)|(^172\.2[0-9]\.)|(^172\.3[0-1]\.)|(^192\.168\.)z3^(([a-z0-9]|[a-z0-9][a-z0-9\-]*[a-z0-9])\.)*[a-z]+$c @ sb e Zd ZdZdd� Zejdd� �Zedd� �Z e
dd � �Z d
d � Z e
d d
� �Z
dd� Zdd� ZdS )�PluginzGeneric plugin.c C s || _ || _d S �N)�configr )�selfr r r r r �__init__0 s zPlugin.__init__c C s dS )z�Add plugin arguments to the CLI argument parser.
:param callable add: Function that proxies calls to
`argparse.ArgumentParser.add_argument` prepending options
with unique plugin name prefix.
Nr )�cls�addr r r �add_parser_arguments4 s zPlugin.add_parser_argumentsc s � �fdd�}| � |�S )zYInject parser options.
See `~.IPlugin.inject_parser_options` for docs.
c s$ �j d�t� �| �g|�R i |��S )Nz--{0}{1})� add_argument�formatr )Zarg_name_no_prefix�args�kwargs�r �parserr r r F s ���z)Plugin.inject_parser_options.<locals>.add)r )r r% r r r r$ r �inject_parser_options> s z Plugin.inject_parser_optionsc C s
t | j�S )r
)r r �r r r r r L s zPlugin.option_namespacec C s
| j | S )z'Option name (include plugin namespace).)r )r r r r r � option_nameQ s zPlugin.option_namec C s
t | j�S )r )r r r' r r r r U s zPlugin.dest_namespacec C s | j |�dd� S )z.Find a destination for given variable ``var``.r r )r r �r �varr r r �destZ s z Plugin.destc C s t | j| �|��S )z0Find a configuration value for variable ``var``.)�getattrr r+ r) r r r �conf` s z Plugin.confN)�__name__�
__module__� __qualname__�__doc__r � jose_util�abstractclassmethodr � classmethodr& �propertyr r( r r+ r- r r r r r * s
r c sl e Zd ZdZ� fdd�Zddd�Zdd� Zd d
� Zd d � Zddd�Z e
dd� �Z e
dd� �Z dd� Z
� ZS )� Installerz�An installer base class with reverter and ssl_dhparam methods defined.
Installer plugins do not have to inherit from this class.
c s8 t t| �j|i |�� t| j| j�| _t�| j�| _d S r ) �superr6 r r r r Zstorager ZReverter)r r" r# �� __class__r r r k s zInstaller.__init__Fc
C s^ |r| j j}n| j j}z|||� W n4 tjyX } zt�t|���W Y d}~n
d}~0 0 dS )a� Add files to a checkpoint.
:param set save_files: set of filepaths to save
:param str save_notes: notes about changes during the save
:param bool temporary: True if the files should be added to a
temporary checkpoint rather than a permanent one. This is
usually used for changes that will soon be reverted.
:raises .errors.PluginError: when unable to add to checkpoint
N)r Zadd_to_temp_checkpoint�add_to_checkpointr �
ReverterError� PluginError�str)r Z
save_filesZ
save_notesZ temporaryZcheckpoint_func�errr r r r: p s
zInstaller.add_to_checkpointc
C sJ z| j �|� W n4 tjyD } zt�t|���W Y d}~n
d}~0 0 dS )z�Timestamp and save changes made through the reverter.
:param str title: Title describing checkpoint
:raises .errors.PluginError: when an error occurs
N)r �finalize_checkpointr r; r< r= )r �titler> r r r r? � s z Installer.finalize_checkpointc
C sH z| j �� W n4 tjyB } zt�t|���W Y d}~n
d}~0 0 dS )z�Revert all previously modified files.
Reverts all modified files that have not been saved as a checkpoint
:raises .errors.PluginError: If unable to recover the configuration
N)r �recovery_routiner r; r< r= �r r> r r r rA � s zInstaller.recovery_routinec
C sH z| j �� W n4 tjyB } zt�t|���W Y d}~n
d}~0 0 dS )zkRollback temporary checkpoint.
:raises .errors.PluginError: when unable to revert config
N)r �revert_temporary_configr r; r< r= rB r r r rC � s z!Installer.revert_temporary_config� c
C sJ z| j �|� W n4 tjyD } zt�t|���W Y d}~n
d}~0 0 dS )z�Rollback saved checkpoints.
:param int rollback: Number of checkpoints to revert
:raises .errors.PluginError: If there is a problem with the input or
the function is unable to correctly revert the configuration
N)r �rollback_checkpointsr r; r< r= )r Zrollbackr> r r r rE � s z Installer.rollback_checkpointsc C s t j�| jjtj�S )z(Full absolute path to ssl_dhparams file.)r �path�joinr �
config_dirr ZSSL_DHPARAMS_DESTr' r r r � ssl_dhparams� s zInstaller.ssl_dhparamsc C s t j�| jjtj�S )z:Full absolute path to digest of updated ssl_dhparams file.)r rF rG r rH r ZUPDATED_SSL_DHPARAMS_DIGESTr' r r r �updated_ssl_dhparams_digest� s z%Installer.updated_ssl_dhparams_digestc C s t | j| jtjtj�S )zJCopy Certbot's ssl_dhparams file into the system's config dir if required.)� install_version_controlled_filerI rJ r ZSSL_DHPARAMS_SRCZALL_SSL_DHPARAMS_HASHESr' r r r �install_ssl_dhparams� s �z Installer.install_ssl_dhparams)F)rD )r. r/ r0 r1 r r: r? rA rC rE r5 rI rJ rL �
__classcell__r r r8 r r6 e s
r6 c @ sv e Zd ZdZd dd�Zedd� �Zdd� Zd d
� Zd d � Z d
d� Z
dd� Z dd� Z dd� Z
dd� Zdd� Zdd� ZdS ) �Addrz�Represents an virtual host address.
:param str addr: addr part of vhost address
:param str port: port number or \*, or ""
Fc C s || _ || _d S r )�tup�ipv6)r rO rP r r r r � s z
Addr.__init__c C s� |� d�rh|�d�}|d|d � }d}t|�|d krX||d dkrX||d d� }| ||fdd �S |�d�}| |d
|d f�S dS ) z Initialize Addr from string.�[�]NrD � � �:T)rP r )�
startswith�rfind�len� partition)r Zstr_addrZendIndexZhost�portrO r r r �
fromstring� s
zAddr.fromstringc C s | j d rd| j S | j d S )NrD z%s:%sr �rO r' r r r �__str__� s
z Addr.__str__c C s | j r| �� | jd fS | jS )z5Normalized representation of addr/port tuple
rD )rP �get_ipv6_explodedrO r' r r r �normalized_tuple� s zAddr.normalized_tuplec C s t || j�r | �� |�� kS dS )NF)�
isinstancer9 r_ )r �otherr r r �__eq__� s z Addr.__eq__c C s
t | j�S r )�hashrO r' r r r �__hash__� s z
Addr.__hash__c C s
| j d S )z Return addr part of Addr object.r r\ r' r r r �get_addr� s z
Addr.get_addrc C s
| j d S )z Return port.rD r\ r' r r r �get_port s z
Addr.get_portc C s | � | jd |f| j�S )z6Return new address object with same addr and new port.r )r9 rO rP )r rZ r r r � get_addr_obj s zAddr.get_addr_objc C s |� d�}|�d�}| �|�S )z7Return IPv6 address in normalized form, helper functionrQ rR )�lstrip�rstrip�
_explode_ipv6)r �addrr r r �_normalize_ipv6 s
zAddr._normalize_ipv6c C s | j r d�| �| jd ��S dS )z Return IPv6 in normalized formrU r rS )rP rG rl rO r' r r r r^ s zAddr.get_ipv6_explodedc C s� g d�}|� d�}t|�t|�kr2|dt|�� }d}t|�D ]N\}}|sPd}q>t|�dkrf|�d�}|sxt|�||< q>t|�||t|� < q>|S )z#Explode IPv6 address for comparison)�0rm rm rm rm rm rm rm rU r FTrD rm )�splitrX � enumeraterh r= )r rk �resultZ addr_listZ
append_to_end�i�blockr r r rj s
zAddr._explode_ipv6N)F)r. r/ r0 r1 r r4 r[ r] r_ rb rd re rf rg rl r^ rj r r r r rN � s
rN c @ s* e Zd ZdZdd� Zd dd�Zdd� ZdS )
�ChallengePerformerav Abstract base for challenge performers.
:ivar configurator: Authenticator and installer plugin
:ivar achalls: Annotated challenges
:vartype achalls: `list` of `.KeyAuthorizationAnnotatedChallenge`
:ivar indices: Holds the indices of challenges from a larger array
so the user of the class doesn't have to.
:vartype indices: `list` of `int`
c C s || _ g | _g | _d S r )� configurator�achalls�indices)r rt r r r r : s zChallengePerformer.__init__Nc C s$ | j �|� |dur | j�|� dS )z�Store challenge to be performed when perform() is called.
:param .KeyAuthorizationAnnotatedChallenge achall: Annotated
challenge.
:param int idx: index to challenge in a larger array
N)ru �appendrv )r Zachall�idxr r r � add_chall? s z ChallengePerformer.add_challc C s
t � �dS )z�Perform all added challenges.
:returns: challenge responses
:rtype: `list` of `acme.challenges.KeyAuthorizationChallengeResponse`
N)�NotImplementedErrorr' r r r �performK s zChallengePerformer.perform)N)r. r/ r0 r1 r ry r{ r r r r rs . s
rs c s� t ������fdd�� � ��fdd�}tj���s>|� dS t ���}|�krTdS ||v rd|� n`tj���r�t�d��}|�� }W d � n1 s�0 Y |�kr�dS � � t�d���� dS )a� Copy a file into an active location (likely the system's config dir) if required.
:param str dest_path: destination path for version controlled file
:param str digest_path: path to save a digest of the file in
:param str src_path: path to version controlled file found in distribution
:param list all_hashes: hashes of every released version of the file
c s8 t �d��} | �� � W d � n1 s*0 Y d S )N�w)�open�write)�f)� current_hash� digest_pathr r �_write_current_hash` s z<install_version_controlled_file.<locals>._write_current_hashc s t ���� � � d S r )�shutilZcopyfiler )r� � dest_path�src_pathr r �_install_current_filed s z>install_version_controlled_file.<locals>._install_current_fileN�rzh%s has been manually modified; updated file saved to %s. We recommend updating %s for security purposes.) r Z sha256sumr rF �isfiler} �read�loggerZwarning)r� r� r� Z
all_hashesr� Zactive_file_digestr Z saved_digestr )r� r� r� r� r� r rK V s(
&�rK c C s� dd� }|d�}|d�}|d�}t �|tj� t �|tj� t �|tj� t�|tj�d| ��}t j
|tj�|| �dd� |||fS ) z5Setup the directories necessary for the configurator.c S s t �t�| ��S )a� Return the real path of a temp directory with the specified prefix
Some plugins rely on real paths of symlinks for working correctly. For
example, certbot-apache uses real paths of configuration files to tell
a virtual host from another. On systems where TMP itself is a symbolic
link, (ex: OS X) such plugins will be confused. This function prevents
such a case.
)r
�realpath�tempfileZmkdtemp)�prefixr r r �expanded_tempdir� s z#dir_setup.<locals>.expanded_tempdirZtempr ZworkZtestdataT)Zsymlinks) r
�chmodr ZCONFIG_DIRS_MODE�
pkg_resourcesZresource_filenamer rF rG r� Zcopytree)Ztest_dir�pkgr� Ztemp_dirrH Zwork_dirZ test_configsr r r � dir_setup� s ��r� )-r1 Zlogging�rer� r� Zjosepyr r2 r� Zzope.interface�zopeZacme.magic_typingr Zcertbotr r r r r Zcertbot._internalr Zcertbot.compatr
r Zcertbot.plugins.storager Z getLoggerr. r� r r �compileZprivate_ips_regex�
IGNORECASEZhostname_regexZ interfaceZ implementerZIPlugin�objectr r6 rN rs rK r� r r r r �<module> sB
�� :gb(2