????
Your IP : 3.16.130.230
3
گa�# � @ sf d Z ddlZddlZddlZddlZddlmZ ddlmZ ddlmZ ddlm Z ddlm
Z
ddlm Z dd lm Z dd
lm
Z
dd lmZ dd lmZ dd
lmZ ddlmZ ddlmZ ddlmZ ddlmZ ddlmZ ddlmZ ddlm Z ddl m Z ej e!�Z"e�r,eej#e
ej$ f Z%G dd� d�Z&G dd� de j'ej(�Z(ej)dd�dd �Z*dS ) zStandalone Authenticator.� N)�Any)�Callable)� DefaultDict)�Dict)�Iterable)�List)�Mapping)�Set)�Tuple)�Type)�
TYPE_CHECKING)�crypto)�
challenges)�
standalone)� achallenges)�errors)�
interfaces)�util)�commonc @ s� e Zd ZdZeeeejej f f e
e j j
dd�dd�Zdeeej ee jd�dd �Zedd
�d d �Zeee jf d
�dd�ZdS )�
ServerManagera� Standalone servers manager.
Manager for `ACMEServer` and `ACMETLSServer` instances.
`certs` and `http_01_resources` correspond to
`acme.crypto_util.SSLSocket.certs` and
`acme.crypto_util.SSLSocket.http_01_resources` respectively. All
created servers share the same certificates and resources, so if
you're running both TLS and non-TLS instances, HTTP01 handlers
will serve the same URLs!
N)�certs�http_01_resources�returnc C s i | _ || _|| _d S )N)�
_instancesr r )�selfr r � r � /usr/lib/python3.6/standalone.py�__init__2 s zServerManager.__init__� )�port�challenge_type�
listenaddrr c C s� |t jkst�|| jkr"| j| S ||f}ytj|| j�}W n0 tjk
rl } zt j
||��W Y dd}~X nX |j � |j � d d }|| j|< |S )a Run ACME server on specified ``port``.
This method is idempotent, i.e. all calls with the same pair of
``(port, challenge_type)`` will reuse the same server.
:param int port: Port to run the server on.
:param challenge_type: Subclass of `acme.challenges.Challenge`,
currently only `acme.challenge.HTTP01`.
:param str listenaddr: (optional) The address to listen on. Defaults to all addrs.
:returns: DualNetworkedServers instance.
:rtype: ACMEServerMixin
Nr � )
r �HTTP01�AssertionErrorr �acme_standalone�HTTP01DualNetworkedServersr �socket�errorr �StandaloneBindErrorZ
serve_forever� getsocknames)r r r r! Zaddress�serversr( Z real_portr r r �run9 s
zServerManager.run)r r c C sF | j | }x&|j� D ]}tjd|dd� �� qW |j� | j |= dS )zWStop ACME server running on the specified ``port``.
:param int port:
�Stopping server at %s:%d...N� )r- )r r* �logger�debugZshutdown_and_server_close)r r �instanceZsocknamer r r �stop\ s
zServerManager.stop)r c C s
| j j� S )z�Return all running instances.
Once the server is stopped using `stop`, it will not be
returned.
:returns: Mapping from ``port`` to ``servers``.
:rtype: tuple
)r �copy)r r r r �runningi s
zServerManager.running)r )�__name__�
__module__� __qualname__�__doc__r �bytesr
r
ZPKeyZX509r r% �HTTP01RequestHandler�HTTP01Resourcer �intr r � Challenge�strr& r, r2 r r4 r r r r r % s
"
r c s
e Zd ZdZdZeedd�� fdd� Zeed" dd�d d
��Z e
d �d d
�Z dd �dd�Z e
e
eej d�dd�Ze
ej eej d�dd�Zejejd�dd�Zejejd�dd�Zejeejejf d�dd �Z e
ej dd�d d �Z eej e
d �d d!�Z � Z S )#�
Authenticatora Standalone Authenticator.
This authenticator creates its own ephemeral TCP listener on the
necessary port in order to respond to incoming http-01
challenges from the certificate authority. Therefore, it does not
rely on any existing server program.
z Spin up a temporary webserverN)�args�kwargsr c s< t � j||� tjt�| _i | _t� | _t| j| j�| _ d S )N)
�superr � collections� defaultdict�set�servedr r r r+ )r r@ rA )� __class__r r r � s
zAuthenticator.__init__.)�addr c C s d S )Nr )�clsrH r r r �add_parser_arguments� s z"Authenticator.add_parser_arguments)r c C s dS )Nz�This authenticator creates its own ephemeral TCP listener on the necessary port in order to respond to incoming http-01 challenges from the certificate authority. Therefore, it does not rely on any existing server program.r )r r r r � more_info� s zAuthenticator.more_infoc C s d S )Nr )r r r r �prepare� s zAuthenticator.prepare)�domainr c C s t jgS )N)r r# )r rM r r r �get_chall_pref� s z Authenticator.get_chall_pref)�achallsr c s � fdd�|D �S )Nc s g | ]}� j |��qS r )�_try_perform_single)�.0�achall)r r r �
<listcomp>� s z)Authenticator.perform.<locals>.<listcomp>r )r rO r )r r �perform� s zAuthenticator.perform)rR r c C sB x<y
| j |�S tjk
r8 } zt|� W Y d d }~X qX qW d S )N)�_perform_singler r) �_handle_perform_error)r rR r( r r r rP � s
z!Authenticator._try_perform_singlec C s" | j |�\}}| j| j|� |S )N)�_perform_http_01rF rH )r rR r+ �responser r r rU � s z Authenticator._perform_singlec C sX | j j}| j j}| jj|tj|d�}|j� \}}tj j
|j ||d�}| j j
|� ||fS )N)r! )�challrX �
validation)�config� http01_port�http01_addressr+ r, r r# Zresponse_and_validationr% r: r; rY r rH )r rR r �addrr+ rX rZ Zresourcer r r rW � s z Authenticator._perform_http_01c C sn x6| j j� D ](\}}x |D ]}||kr|j|� qW q W x0| jj� j� D ] \}}| j | sH| jj|� qHW d S )N)rF �items�remover+ r4 r2 )r rO Zunused_serversZserver_achallsrR r r+ r r r �cleanup� s
zAuthenticator.cleanup)�failed_achallsr c C s: | j j| j j }}|r$|� d|� �nd|� �}d|� d�S )N�:zport zThe Certificate Authority failed to download the challenge files from the temporary standalone webserver started by Certbot on zt. Ensure that the listed domains point to this machine and that it can accept inbound connections from the internet.)r[ r\ r] )r rb r r^ Z neat_addrr r r � auth_hint� s zAuthenticator.auth_hint).N) r5 r6 r7 r8 � descriptionr r � classmethodr rJ r> rK rL r r r r= rN r ZAnnotatedChallenger ZChallengeResponserT rP rU r
r% r& rW ra rd �
__classcell__r r )rG r r? v s"
r? )r( r c C sd | j jtjkr tjdj| j���| j jtjkr\dj| j�}tj |dddd�}|s`tj|��n| �d S )Nz�Could not bind TCP port {0} because you don't have the appropriate permissions (for example, you aren't running this program as root).z�Could not bind TCP port {0} because it is already in use by another process on this system (such as a web server). Please stop the program in question and then try again.ZRetryZCancelF)�default)
Z socket_error�errnoZEACCESr Z PluginError�formatr Z
EADDRINUSE� display_utilZyesno)r( �msgZ should_retryr r r rV � s
rV )+r8 rC ri Zloggingr' Ztypingr r r r r r r r r
r r ZOpenSSLr
Zacmer r r% Zcertbotr r r Zcertbot.displayr rk Zcertbot.pluginsr Z getLoggerr5 r/ ZBaseDualNetworkedServersZ"KeyAuthorizationAnnotatedChallengeZ
ServedTyper ZPluginr? r) rV r r r r �<module> s>
Q[