3
گa# @ sf d Z ddlZddlZddlZddlZddlmZ ddlmZ ddlmZ ddlm Z ddlm
Z
ddlm Z dd lm Z dd
lm
Z
dd lmZ dd lmZ dd
lmZ ddlmZ ddlmZ ddlmZ ddlmZ ddlmZ ddlmZ ddlm Z ddl m Z ej e!Z"er,eej#e
ej$ f Z%G dd dZ&G dd de j'ej(Z(ej)dddd Z*dS ) zStandalone Authenticator. N)Any)Callable) DefaultDict)Dict)Iterable)List)Mapping)Set)Tuple)Type)
TYPE_CHECKING)crypto)
challenges)
standalone) achallenges)errors)
interfaces)util)commonc @ s e Zd ZdZeeeejej f f e
e j j
ddddZdeeej ee jddd Zedd
d d Zeee jf d
ddZdS )
ServerManagera Standalone servers manager.
Manager for `ACMEServer` and `ACMETLSServer` instances.
`certs` and `http_01_resources` correspond to
`acme.crypto_util.SSLSocket.certs` and
`acme.crypto_util.SSLSocket.http_01_resources` respectively. All
created servers share the same certificates and resources, so if
you're running both TLS and non-TLS instances, HTTP01 handlers
will serve the same URLs!
N)certshttp_01_resourcesreturnc C s i | _ || _|| _d S )N)
_instancesr r )selfr r r /usr/lib/python3.6/standalone.py__init__2 s zServerManager.__init__ )portchallenge_type
listenaddrr c C s || j kr| j | S ||f}ytj|| j}W n0 tjk
r^ } ztj||W Y dd}~X nX |j |j d d }|| j |< |S )a Run ACME server on specified ``port``.
This method is idempotent, i.e. all calls with the same pair of
``(port, challenge_type)`` will reuse the same server.
:param int port: Port to run the server on.
:param challenge_type: Subclass of `acme.challenges.Challenge`,
currently only `acme.challenge.HTTP01`.
:param str listenaddr: (optional) The address to listen on. Defaults to all addrs.
:returns: DualNetworkedServers instance.
:rtype: ACMEServerMixin
Nr )
r acme_standaloneHTTP01DualNetworkedServersr socketerrorr StandaloneBindErrorZ
serve_forever getsocknames)r r r r! Zaddressserversr& Z real_portr r r run9 s
zServerManager.run)r r c C sF | j | }x&|j D ]}tjd|dd qW |j | j |= dS )zWStop ACME server running on the specified ``port``.
:param int port:
Stopping server at %s:%d...N )r+ )r r( loggerdebugZshutdown_and_server_close)r r instanceZsocknamer r r stop\ s
zServerManager.stop)r c C s
| j j S )zReturn all running instances.
Once the server is stopped using `stop`, it will not be
returned.
:returns: Mapping from ``port`` to ``servers``.
:rtype: tuple
)r copy)r r r r runningi s
zServerManager.running)r )__name__
__module__ __qualname____doc__r bytesr
r
ZPKeyZX509r r# HTTP01RequestHandlerHTTP01Resourcer intr r Challengestrr$ r* r0 r r2 r r r r r % s
"
r c s
e Zd ZdZdZeedd fdd Zeed" ddd d
Z e
d d d
Z dd ddZ e
e
eej dddZe
ej eej dddZejejdddZejejdddZejeejejf ddd Z e
ej ddd d Z eej e
d d d!Z Z S )#
Authenticatora Standalone Authenticator.
This authenticator creates its own ephemeral TCP listener on the
necessary port in order to respond to incoming http-01
challenges from the certificate authority. Therefore, it does not
rely on any existing server program.
z Spin up a temporary webserverN)argskwargsr c s< t j|| tjt| _i | _t | _t| j| j| _ d S )N)
superr collections defaultdictsetservedr r r r) )r r> r? ) __class__r r r s
zAuthenticator.__init__.)addr c C s d S )Nr )clsrF r r r add_parser_arguments s z"Authenticator.add_parser_arguments)r c C s dS )NzThis authenticator creates its own ephemeral TCP listener on the necessary port in order to respond to incoming http-01 challenges from the certificate authority. Therefore, it does not rely on any existing server program.r )r r r r more_info s zAuthenticator.more_infoc C s d S )Nr )r r r r prepare s zAuthenticator.prepare)domainr c C s t jgS )N)r HTTP01)r rK r r r get_chall_pref s z Authenticator.get_chall_pref)achallsr c s fdd|D S )Nc s g | ]} j |qS r )_try_perform_single).0achall)r r r
s z)Authenticator.perform..r )r rN r )r r perform s zAuthenticator.perform)rQ r c C sB x s>
Q[