a
}|g2 @ sp d Z ddlZddlZddlmZ ddlmZ ddl Z ddl
Z
ddl Z ddl Z ddl
mZ ddl
mZ ddl
mZ ddl
mZ ddl
mZ ddl
mZ dd l
mZ dd
l
mZ dd lmZ dd lmZ dd
lmZ ddlmZ e e Z G dd de j Z G dd dZ!G dd dZ"G dd de e!Z#G dd dej$Z$G dd de$e!Z%G dd d e"Z&G d d d ej'Z(dS ) z1Support for standalone client challenge solvers. N)Any)cast)List)Mapping)Optional)Set)Tuple)Type)crypto)SSL)
challenges) crypto_utilc sh e Zd ZdZeedd fdd ZddddZeje e
e j e j
f d d
d Zddd d
Z ZS ) TLSServerzGeneric TLS Server.Nargskwargsreturnc sh | dd| _| jr tj| _ntj| _| di | _| dtj| _ | dd| _
t j |i | d S )Nipv6Fcertsmethodallow_reuse_addressT)
popr socketAF_INET6address_familyAF_INETr r
Z_DEFAULT_SSL_METHODr r super__init__selfr r __class__ 3/usr/lib/python3.9/site-packages/acme/standalone.pyr s
zTLSServer.__init__r c C s. t tjtj| j| jt| dd | jd| _d S )N_alpn_selection)Zcert_selectionZalpn_selectionr )r r r
Z SSLSocket_cert_selectiongetattrr r r" r" r#
_wrap_sock* s
zTLSServer._wrap_sock
connectionr c C s | }|r| j|dS dS )z.Callback selecting certificate for connection.N)get_servernamer getr r+ Z server_namer" r" r# r& 0 s zTLSServer._cert_selectionc C s | tj| S N)r) socketserver TCPServer server_bindr( r" r" r# r2 8 s zTLSServer.server_bind)__name__
__module__ __qualname____doc__r r r) r
Connectionr r r
PKeyX509r& r2
__classcell__r" r" r r# r s r c @ s e Zd ZdZdZdZdS )ACMEServerMixinz"ACME server common settings mixin.z'ACME client standalone challenge solverTN)r3 r4 r5 r6 server_versionr r" r" r" r# r; = s r; c @ sj e Zd ZdZeej eee f e
e
ddddZ ddddZ e
eee f dd d
Zddd d ZdS )
BaseDualNetworkedServersa Base class for a pair of IPv6 and IPv4 servers that tries to do everything
it's asked for both servers, but where failures in one server don't
affect the other.
If two servers are instantiated, they will serve on the same port.
N) ServerClassserver_addressremaining_argsr r c O s. |d }g | _ g | _d }dD ]}z`||d< |d f|f |dd }|f| } || i |}
td|d |d |rxdnd W np ty } zX| }| jrtd |d |d |rdnd n td
|d |d |rdnd W Y d } ~ q d } ~ 0 0 | j|
|
j d }q | js*|r"|ntd d S ) N )TFr r z$Successfully bound to %s:%s using %sZIPv6ZIPv4zCertbot wasn't able to bind to %s:%s using %s, this is often expected due to the dual stack nature of IPv6 socket implementations.z Failed to bind to %s:%s using %sz Could not bind to IPv4 or IPv6.)threadsserversloggerdebugOSErrorappendr getsockname) r r> r? r@ r portZlast_socket_errZ
ip_versionZ new_addressnew_argsserverer" r" r# r L s@
z!BaseDualNetworkedServers.__init__r$ c C s2 | j D ]&}tj|jd}| | j| qdS )z*Wraps socketserver.TCPServer.serve_forever)targetN)rD threadingThread
serve_foreverstartrC rH r rL threadr" r" r# rQ ~ s
z&BaseDualNetworkedServers.serve_foreverc C s dd | j D S )z/Wraps socketserver.TCPServer.socket.getsocknamec S s g | ]}|j qS r" )r rI ).0rL r" r" r#
z9BaseDualNetworkedServers.getsocknames..)rD r( r" r" r# getsocknames s z%BaseDualNetworkedServers.getsocknamesc C s: | j D ]}| | q| jD ] }| q"g | _dS )zpWraps socketserver.TCPServer.shutdown, socketserver.TCPServer.server_close, and
threading.Thread.joinN)rD ZshutdownZ server_closerC joinrS r" r" r# shutdown_and_server_close s
z2BaseDualNetworkedServers.shutdown_and_server_close)r3 r4 r5 r6 r r0 r1 r strintr r rQ r rX rZ r" r" r" r# r= D s 2r= c @ s e Zd ZdZdZdeeef eee j
e j f e e
ee j
e j f f eddddZejeee j
e j f dd d
Zejee
e
d d d
ZdS )TLSALPN01ServerzTLSALPN01 Server.s
acme-tls/1FN)r? r challenge_certsr r c C s t j| |tj||d || _d S )N)r r )r r r0 ZBaseRequestHandlerr^ )r r? r r^ r r" r" r# r s
zTLSALPN01Server.__init__r* c C s& | }|r"td| | j| S d S )Nz)Serving challenge cert for server name %s)r, rE rF r^ r. r" r" r# r& s
z TLSALPN01Server._cert_selection) _connection alpn_protosr c C sB t |dkr.|d | jkr.td| j | jS tdt| dS )z!Callback to select alpn protocol.rA r zAgreed on %s ALPNz#Cannot agree on ALPN proto. Got: %srW )lenACME_TLS_1_PROTOCOLrE rF r[ )r r_ r` r" r" r# r% s
z TLSALPN01Server._alpn_selection)F)r3 r4 r5 r6 rb r r[ r\ r r
r8 r9 r bytesboolr r r7 r r& r% r" r" r" r# r] s r] c s* e Zd ZdZeedd fdd Z ZS )
HTTPServerzGeneric HTTP Server.Nr c s< | dd| _| jr tj| _ntj| _t j|i | d S )Nr F)r r r r r r r r r r r" r# r s
zHTTPServer.__init__r3 r4 r5 r6 r r r: r" r" r r# re s re c s> e Zd ZdZdeeef eej e
edd fdd
Z Z S ) HTTP01ServerzHTTP01 Server.F N)r? resourcesr timeoutr c s t j|tj||d|d d S )Nsimple_http_resourcesrj )r )r r HTTP01RequestHandler partial_init)r r? ri r rj r r" r# r s zHTTP01Server.__init__)Frh )
r3 r4 r5 r6 r r[ r\ r r HTTP01rd r r: r" r" r r# rg s
rg c s* e Zd ZdZeedd fdd Z ZS )HTTP01DualNetworkedServersz`HTTP01Server Wrapper. Tries everything for both. Failures for one don't
affect the other.Nr c s t jtg|R i | d S r/ )r r rg r r r" r# r s z#HTTP01DualNetworkedServers.__init__rf r" r" r r# rp s rp c s e Zd ZdZeddZeedd fdd Ze e
dd d
Z e edd d d
Z
ddddZddddZddddZddddZddddZeeej e
ddddZ ZS ) rm zHTTP01 challenge handler.
Adheres to the stdlib's `socketserver.BaseRequestHandler` interface.
:ivar set simple_http_resources: A set of `HTTP01Resource`
objects. TODO: better name?
HTTP01Resourcezchall response validationNr c s8 | dt | _| dd| _t j|i | | d S )Nrl rj rh )r setrl _timeoutr r r r r" r# r s z HTTP01RequestHandler.__init__r$ c C s | j S )z
The default timeout this server should apply to requests.
:return: timeout to apply
:rtype: int
)rs r( r" r" r# rj s z HTTP01RequestHandler.timeout)formatr r c G s t d| jd || dS )zLog arbitrary message.z %s - - %sr N)rE rF Zclient_address)r rt r r" r" r# log_message s z HTTP01RequestHandler.log_messagec C s | d tj| dS )zHandle request.zIncoming requestN)ru BaseHTTPServerBaseHTTPRequestHandlerhandler( r" r" r# rx s
zHTTP01RequestHandler.handlec C s> | j dkr| n&| j dtjj r2| n| d S )N/)path handle_index
startswithr ro Z
URI_ROOT_PATHhandle_simple_http_resource
handle_404r( r" r" r# do_GET s
zHTTP01RequestHandler.do_GETc C s6 | d | dd | | j| jj dS )zHandle index page. z Content-Type text/htmlN)
send_response send_header end_headerswfilewriterL r< encoder( r" r" r# r{ s
z!HTTP01RequestHandler.handle_indexc C s4 | j tjdd | dd | | jd dS )z Handler 404 Not Found errors.z Not Found)messagez Content-typer s 404N)r http_clientZ NOT_FOUNDr r r r r( r" r" r# r~ s z HTTP01RequestHandler.handle_404c C sv | j D ]R}|jj| jkr| d|jd | tj | | j
|j dS q| d | d| j dS )z$Handle HTTP01 provisioned resources.z Serving HTTP01 with token %rtokenNzNo resources to servez0%s does not correspond to any resource. ignoring) rl Zchallrz ru r r r ZOKr r r Z
validation)r resourcer" r" r# r} s
z0HTTP01RequestHandler.handle_simple_http_resourcez'functools.partial[HTTP01RequestHandler])rl rj r c C s t j| ||dS )zPartially initialize this handler.
This is useful because `socketserver.BaseServer` takes
uninitialized handler and initializes it with the current
request.
rk ) functoolspartial)clsrl rj r" r" r# rn - s
z!HTTP01RequestHandler.partial_init)r3 r4 r5 r6 collections
namedtuplerq r r propertyr\ rj r[ ru rx r r{ r~ r} classmethodr r ro rn r: r" r" r r# rm s" rm ))r6 r r Z http.clientZclientr Z http.serverrL rv Zloggingr r0 rO typingr r r r r r r r ZOpenSSLr
r Zacmer r
Z getLoggerr3 rE r1 r r; r= r] re rg rp rw rm r" r" r" r# s:
!Q+