3
گa? @ sv d Z ddlZddlZddlZddlZddlZddlZddlmZ ddlm Z ddlm
Z
ddlm Z ddlm Z ddlm
Z
dd lmZ dd
lmZ ddlZddlZddlZdd lmZ dd lmZ dd
lmZ ddlm Z ddlm Z ddlm Z ddlm Z ddl m!Z! ddl"m#Z# ddl"m$Z$ ej%e&Z'G dd dZ(G dd de j)Z*G dd dej+Z,G dd d e j)Z-dS ) z!Creates ACME accounts for server. N)Any)Callable)cast)Dict)List)Mapping)Optional)
serialization)fields)messages)
ClientBase)
configuration)errors)
interfaces)util) constants)
filesystem)osc @ sp e Zd ZdZG dd dejZdejej e
d ddddZ e e
dd d
Ze
dd d Zeed
ddZdS )AccountzACME protocol registration.
:ivar .RegistrationResource regr: Registration Resource
:ivar .JWK key: Authorized Account Key
:ivar .Meta: Account metadata
:ivar str id: Globally unique account identifier.
c @ s2 e Zd ZdZejdZejdZ ejdddZ
dS )z Account.Metaa Account metadata
:ivar datetime.datetime creation_dt: Creation date and time (UTC).
:ivar str creation_host: FQDN of host, where account has been created.
:ivar str register_to_eff: If not None, Certbot will register the provided
email during the account registration.
.. note:: ``creation_dt`` and ``creation_host`` are useful in
cross-machine migration scenarios.
creation_dt
creation_hostregister_to_effT)Z omitemptyN) __name__
__module__ __qualname____doc__ acme_fieldsZ RFC3339Fieldr joseFieldr r r r /usr/lib/python3.6/account.pyMeta- s
r! N)regrkeymetareturnc
C s || _ || _|d kr<| jtjjtjdjddtj d dn|| _
y t j }W n2 t
k
r t jd ttttf ddi}Y nX |j| j j j jtjjtjjd |j | _ d S )
N)Ztzr )Z microsecond)r r r md5ZusedforsecurityF)encodingformat)r& ) r# r" r! datetimeZnowpytzZUTCreplacesocketZgetfqdnr$ hashlibr&
ValueErrornewr r strr updateZ
public_keyZ public_bytesr ZEncodingZPEMZ PublicFormatZSubjectPublicKeyInfoZ hexdigestid)selfr" r# r$ Zhasherr r r __init__= s 6 $zAccount.__init__)r% c C s& dj tj| jj| jj| jdd S )z3Short account identification string, useful for UI.z
{1}@{0} ({2})N )r( pyrfc3339Zgenerater$ r r r2 )r3 r r r slug\ s z Account.slugc C s dj | jj| j| j| jS )Nz<{0}({1}, {2}, {3})>)r( __class__r r" r2 r$ )r3 r r r __repr__b s zAccount.__repr__)otherr% c C s0 t || jo.| j|jko.| j|jko.| j|jkS )N)
isinstancer8 r# r" r$ )r3 r: r r r __eq__f s zAccount.__eq__)N)r r r r r ZJSONObjectWithFieldsr! r RegistrationResourceJWKr r4 propertyr0 r7 r9 r boolr< r r r r r # s r c @ s^ e Zd ZdZdeeef ddddZee dddZ ee
dd d
d Z eed d
dZ dS )AccountMemoryStoragezIn-memory account storage.N)initial_accountsr% c C s |d k r |ni | _ d S )N)accounts)r3 rB r r r r4 o s z AccountMemoryStorage.__init__)r% c C s t | jj S )N)listrC values)r3 r r r find_allr s z AccountMemoryStorage.find_all)accountclientr% c C s* |j | jkrtjd|j || j|j < d S )NzOverwriting account: %s)r2 rC loggerdebug)r3 rG rH r r r saveu s zAccountMemoryStorage.save)
account_idr% c C s. y
| j | S tk
r( tj|Y nX d S )N)rC KeyErrorr AccountNotFound)r3 rL r r r loadz s
zAccountMemoryStorage.load)N)
r r r r r r0 r r4 r rF r rK rO r r r r rA l s
rA c @ s e Zd ZdZejdZdS )$RegistrationResourceWithNewAuthzrURIaf A backwards-compatible RegistrationResource with a new-authz URI.
Hack: Certbot versions pre-0.11.1 expect to load
new_authzr_uri as part of the account. Because people
sometimes switch between old and new versions, we will
continue to write out this field for some time so older
clients don't crash in that scenario.
new_authzr_uriN)r r r r r r rQ r r r r rP s rP c @ s e Zd ZdZejddddZeedddZeeed d
d Z e
eed d
dZ e
eed ddZ e
eed ddZ
eee dddZee dddZeeeddddZeedd d d Zeeed d d Zeedd!d"Zeedd#d$d%Zeedd#d&d'Zedd(d)d*Zeddd+d,Zeedd d-d.Zeddd/d0Z ee egef ed1d2d3Z eed(d4d5Z eedd6d7d8Z eeedd9d:d;Z!eedd6dAccountFileStoragezjAccounts file storage.
:ivar certbot.configuration.NamespaceConfig config: Client configuration
N)configr% c C s || _ tj|jd| j j d S )Ni )rS r make_or_verify_dir accounts_dirstrict_permissions)r3 rS r r r r4 s zAccountFileStorage.__init__)rL r% c C s | j || jjS )N)!_account_dir_path_for_server_pathrS server_path)r3 rL r r r _account_dir_path s z$AccountFileStorage._account_dir_path)rL rX r% c C s | j j|}tjj||S )N)rS accounts_dir_for_server_pathr pathjoin)r3 rL rX rU r r r rW s z4AccountFileStorage._account_dir_path_for_server_path)account_dir_pathr% c C s t jj|dS )Nz regr.json)r r[ r\ )clsr] r r r
_regr_path s z AccountFileStorage._regr_pathc C s t jj|dS )Nzprivate_key.json)r r[ r\ )r^ r] r r r _key_path s z AccountFileStorage._key_pathc C s t jj|dS )Nz meta.json)r r[ r\ )r^ r] r r r _metadata_path s z!AccountFileStorage._metadata_path)rX r% c C s | j j|}ytj|}W n tk
r. g S X g }xH|D ]@}y|j| j|| W q: tjk
rx t j
ddd Y q:X q:W | r|t j krt j | }| j
|}|ry| j|| W n tk
r g S X |}|S )NzAccount loading problemT)exc_info)rS rZ r listdirOSErrorappend_load_for_server_pathr AccountStorageErrorrI rJ r LE_REUSE_SERVERS_find_all_for_server_path_symlink_to_accounts_dir)r3 rX rU Z
candidatesrC rL prev_server_pathZ
prev_accountsr r r ri s*
z,AccountFileStorage._find_all_for_server_path)r% c C s | j | jjS )N)ri rS rX )r3 r r r rF s zAccountFileStorage.find_all)rk rX rL r% c C s( | j ||}| j ||}tj|| d S )N)rW r symlink)r3 rk rX rL prev_account_dirZnew_account_dirr r r _symlink_to_account_dir s z*AccountFileStorage._symlink_to_account_dir)rk rX r% c C sJ | j j|}tjj|r$tj| n
tj| | j j|}tj|| d S )N)rS rZ r r[ islinkunlinkrmdirrl )r3 rk rX rU rm r r r rj s
z+AccountFileStorage._symlink_to_accounts_dirc C sR | j ||}tjj|s||tjkrntj| }| j||}| jj|}tj |r^| j
||| n | j || |S t j
d| yt| j| }ttjtjj|j }W d Q R X t| j| } ttjtjj| j }
W d Q R X t| j| } ttjtjj| j } W d Q R X W n. tk
rD }
zt j |
W Y d d }
~
X nX t||
| S )Nz Account at %s does not exist) rW r r[ isdirr rh rf rS rZ rc rn rj r rN openr_ r r r= Z
json_loadsreadr` r r> ra r r! IOErrorrg )r3 rL rX r] rk Zprev_loaded_accountrU regr_filer" key_filer#
metadata_filer$ errorr r r rf s.
"& z(AccountFileStorage._load_for_server_pathc C s | j || jjS )N)rf rS rX )r3 rL r r r rO s zAccountFileStorage.load)rG rH r% c C sf y4| j |}| j|| | j|| | j||| W n, tk
r` } ztj|W Y dd}~X nX dS )zCreate a new account.
:param Account account: account to create
:param ClientBase client: ACME client associated to the account
N)_prepare_create _update_meta _update_regrru r rg )r3 rG rH dir_pathry r r r rK s
zAccountFileStorage.savec C sN y | j |}| j||| W n, tk
rH } ztj|W Y dd}~X nX dS )zUpdate the registration resource.
:param Account account: account to update
:param ClientBase client: ACME client associated to the account
N)rz r} ru r rg )r3 rG rH r~ ry r r r update_regr s
z AccountFileStorage.update_regr)rG r% c C sL y| j |}| j|| W n, tk
rF } ztj|W Y dd}~X nX dS )zVUpdate the meta resource.
:param Account account: account to update
N)rz r| ru r rg )r3 rG r~ ry r r r update_meta s
z AccountFileStorage.update_metac C sT | j |}tjj|s$tjd| | j|| jj tj | jj
sP| j | jj dS )znDelete registration info from disk
:param account_id: id of account which should be deleted
z Account at %s does not existN) rY r r[ rr r rN #_delete_account_dir_for_server_pathrS rX rc rU $_delete_accounts_dir_for_server_path)r3 rL r] r r r delete! s
zAccountFileStorage.deletec C s( t j| j|}| j||}tj| d S )N) functoolspartialrW !_delete_links_and_find_target_dirshutilZrmtree)r3 rL rX link_funcnonsymlinked_dirr r r r 2 s z6AccountFileStorage._delete_account_dir_for_server_pathc C s" | j j}| j||}tj| d S )N)rS rZ r r rq )r3 rX r r r r r r 7 s z7AccountFileStorage._delete_accounts_dir_for_server_path)rX r r% c C s ||}i }x t jj D ]\}}|||< qW d}xJ|rzd}||kr2|| }||} tjj| r2tj| |kr2d}|}| }q2W x(tjj|rtj|}
tj| |
}q~W |S )a/ Delete symlinks and return the nonsymlinked directory path.
:param str server_path: file path based on server
:param callable link_func: callable that returns possible links
given a server_path
:returns: the final, non-symlinked target
:rtype: str
TF) r rh itemsr r[ ro r readlinkrp ) r3 rX r r~ Zreused_serverskvZpossible_next_linkZnext_server_pathZ
next_dir_pathtargetr r r r < s&
z4AccountFileStorage._delete_links_and_find_target_dirc C s" | j |j}tj|d| jj |S )Ni )rY r2 r rT rS rV )r3 rG r] r r r rz d s zAccountFileStorage._prepare)rG r~ r% c C s6 t j| j|ddd}|j|jj W d Q R X d S )Nw )chmod)r Z safe_openr` writer#
json_dumps)r3 rG r~ rw r r r r{ i s zAccountFileStorage._create)rG acmer~ r% c C sf t | j|dL}|j}t|jdr:t|jji |jd}ntj i |jd}|j
|j W d Q R X d S )Nr z new-authz)rQ bodyuri)r r ) rs r_ r" hasattrZ directoryrP Z new_authzr r r= r r )r3 rG r r~ rv r" r r r r} m s
z AccountFileStorage._update_regrc C s0 t | j|d}|j|jj W d Q R X d S )Nr )rs ra r r$ r )r3 rG r~ rx r r r r| s z AccountFileStorage._update_meta)#r r r r r
ZNamespaceConfigr4 r0 rY rW classmethodr_ r` ra r r ri rF rn rj rf rO r rK r r r r r r r rz r{ r} r| r r r r rR s: !
'rR ).r r) r r- Zloggingr r, Ztypingr r r r r r r Z cryptography.hazmat.primitivesr Zjosepyr r6 r* r r
r r Z acme.clientr Zcertbotr
r r r Zcertbot._internalr Zcertbot.compatr r Z getLoggerr rI r ZAccountStoragerA r= rP rR r r r r s@
I