a
}|g29 @ sd d Z ddlZddlZddlZddlZddlZddlZddlmZ ddlm Z ddlm
Z
ddlm Z ddlm Z ddlm
Z
dd lmZ dd
lmZ ddlZddlZddlZdd lmZ dd lmZ dd
lmZ ddlm Z ddlm Z ddlm Z ddlm Z ddl m!Z! ddl"m#Z# ddl"m$Z$ e%e&Z'G dd dZ(G dd de j)Z*G dd de j)Z+dS )z!Creates ACME accounts for server. N)Any)Callable)cast)Dict)List)Mapping)Optional)
serialization)fields)messages)ClientV2)
configuration)errors)
interfaces)util) constants)
filesystem)osc @ sp e Zd ZdZG dd dejZdejej e
d ddddZ e e
dd d
Ze
dd d Zeed
ddZdS )AccountzACME protocol registration.
:ivar .RegistrationResource regr: Registration Resource
:ivar .JWK key: Authorized Account Key
:ivar .Meta: Account metadata
:ivar str id: Globally unique account identifier.
c @ sN e Zd ZU dZedZejed< e
dZ e ed< e j
dddZ
e ed< dS )z Account.Metaa Account metadata
:ivar datetime.datetime creation_dt: Creation date and time (UTC).
:ivar str creation_host: FQDN of host, where account has been created.
:ivar str register_to_eff: If not None, Certbot will register the provided
email during the account registration.
.. note:: ``creation_dt`` and ``creation_host`` are useful in
cross-machine migration scenarios.
creation_dt
creation_hostregister_to_effT)Z omitemptyN)__name__
__module__ __qualname____doc__ acme_fieldsZrfc3339r datetime__annotations__joseZfieldr strr r! r! =/usr/lib/python3.9/site-packages/certbot/_internal/account.pyMeta- s
r# N)regrkeymetareturnc
C s || _ || _|d u r<| jtjjtjdjddt d dn|| _
z t }W n4 t
y t jd i ttttf ddi}Y n0 || j j jtjjtjjd | | _ d S )
N)Ztzr )Z microsecond)r r r md5ZusedforsecurityF)encodingformat)r( ) r% r$ r# r ZnowpytzZUTCreplacesocketZgetfqdnr& hashlibr(
ValueErrornewr r r r updateZ
public_keyZ public_bytesr ZEncodingZPEMZ PublicFormatZSubjectPublicKeyInfoZ hexdigestid)selfr$ r% r& Zhasherr! r! r" __init__= s& (zAccount.__init__r' c C s& d t| jj| jj| jdd S )z3Short account identification string, useful for UI.z
{1}@{0} ({2})N )r* pyrfc3339Zgenerater& r r r2 r3 r! r! r" slug\ s
z Account.slugc C s d | jj| j| j| jS )Nz<{0}({1}, {2}, {3})>)r* __class__r r$ r2 r& r8 r! r! r" __repr__b s zAccount.__repr__)otherr' c C s0 t || jo.| j|jko.| j|jko.| j|jkS N)
isinstancer: r% r$ r& )r3 r< r! r! r" __eq__f s
zAccount.__eq__)N)r r r r r ZJSONObjectWithFieldsr# r RegistrationResourceJWKr r4 propertyr r9 r; r boolr? r! r! r! r" r # s
r c @ sb e Zd ZdZdeeeef ddddZe e dddZ
ee dd d
d Z eed d
dZ
dS )AccountMemoryStoragezIn-memory account storage.N)initial_accountsr' c C s |d ur |ni | _ d S r= )accounts)r3 rE r! r! r" r4 o s z AccountMemoryStorage.__init__r5 c C s t | j S r= )listrF valuesr8 r! r! r" find_allr s z AccountMemoryStorage.find_allaccountclientr' c C s* |j | jv rtd|j || j|j < d S )NzOverwriting account: %s)r2 rF loggerdebug)r3 rK rL r! r! r" saveu s zAccountMemoryStorage.save
account_idr' c C s. z | j | W S ty( t|Y n0 d S r= )rF KeyErrorr AccountNotFoundr3 rQ r! r! r" loadz s zAccountMemoryStorage.load)N)r r r r r r r r r4 r rI r rO rU r! r! r! r" rD l s
rD c @ s e Zd ZdZejddddZeedddZeeed d
d Z e
eed d
dZ e
eed ddZ e
eed ddZ
eee dddZee dddZeeeddddZeedd d d Zeeed d d Zeedd!d"Zeedd#d$d%Zedd&d'd(Zedd&d)d*Zeddd+d,Zeedd d-d.Zeddd/d0Z ee egef ed1d2d3Z eed&d4d5Z eedd6d7d8Z eedd6d9d:Z!eedd6d;d<Z"dS )=AccountFileStoragezjAccounts file storage.
:ivar certbot.configuration.NamespaceConfig config: Client configuration
N)configr' c C s || _ t|jd| j j d S Ni )rW r make_or_verify_dir accounts_dirstrict_permissions)r3 rW r! r! r" r4 s zAccountFileStorage.__init__rP c C s | || jjS r= )!_account_dir_path_for_server_pathrW server_pathrT r! r! r" _account_dir_path s z$AccountFileStorage._account_dir_path)rQ r] r' c C s | j |}tj||S r= )rW accounts_dir_for_server_pathr pathjoin)r3 rQ r] rZ r! r! r" r\ s z4AccountFileStorage._account_dir_path_for_server_path)account_dir_pathr' c C s t j|dS )Nz regr.jsonr r` ra clsrb r! r! r"
_regr_path s z AccountFileStorage._regr_pathc C s t j|dS )Nzprivate_key.jsonrc rd r! r! r" _key_path s z AccountFileStorage._key_pathc C s t j|dS )Nz meta.jsonrc rd r! r! r" _metadata_path s z!AccountFileStorage._metadata_path)r] r' c C s | j |}zt|}W n ty0 g Y S 0 g }|D ]>}z|| || W q: tjyv t j
ddd Y q:0 q:|s|t j v rt j | }|
|}|rz| || W n ty g Y S 0 |}|S )NzAccount loading problemT)exc_info)rW r_ r listdirOSErrorappend_load_for_server_pathr AccountStorageErrorrM rN r LE_REUSE_SERVERS_find_all_for_server_path_symlink_to_accounts_dir)r3 r] rZ Z
candidatesrF rQ prev_server_pathZ
prev_accountsr! r! r" rp s*
z,AccountFileStorage._find_all_for_server_pathr5 c C s | | jjS r= )rp rW r] r8 r! r! r" rI s zAccountFileStorage.find_all)rr r] rQ r' c C s( | ||}| ||}t|| d S r= )r\ r symlink)r3 rr r] rQ prev_account_dirZnew_account_dirr! r! r" _symlink_to_account_dir s z*AccountFileStorage._symlink_to_account_dir)rr r] r' c C sJ | j |}tj|r$t| n
t| | j |}t|| d S r= )rW r_ r r` islinkunlinkrmdirrs )r3 rr r] rZ rt r! r! r" rq s
z+AccountFileStorage._symlink_to_accounts_dirc
C s~ | ||}tj|s|tjv rntj| }| ||}| j|}t |r^|
||| n | || |S t
d| dzt| | }tj| }W d n1 s0 Y t| | } tj| }
W d n1 s0 Y t| | } tj| } W d n1 s40 Y W n0 typ }
zt |
W Y d }
~
n
d }
~
0 0 t||
| S )N Account at does not exist) r\ r r` isdirr ro rm rW r_ rj ru rq r rS openrf r r@ Z
json_loadsreadrg r rA rh r r# rk rn )r3 rQ r] rb rr Zprev_loaded_accountrZ regr_filer$ key_filer%
metadata_filer& errorr! r! r" rm s*
..4 z(AccountFileStorage._load_for_server_pathc C s | || jjS r= )rm rW r] rT r! r! r" rU s zAccountFileStorage.loadrJ c
C sf z2| |}| || | || | || W n. ty` } zt|W Y d}~n
d}~0 0 dS )zCreate a new account.
:param Account account: account to create
:param ClientV2 client: ACME client associated to the account
N)_prepare_create _update_meta _update_regrrk r rn )r3 rK rL dir_pathr r! r! r" rO s
zAccountFileStorage.save)rK r' c
C sN z| |}| || W n. tyH } zt|W Y d}~n
d}~0 0 dS )z^Update the registration resource.
:param Account account: account to update
N)r r rk r rn r3 rK r r r! r! r" update_regr s
z AccountFileStorage.update_regrc
C sN z| |}| || W n. tyH } zt|W Y d}~n
d}~0 0 dS )zVUpdate the meta resource.
:param Account account: account to update
N)r r rk r rn r r! r! r" update_meta s
z AccountFileStorage.update_metac C sX | |}tj|s(td| d| || jj t | jj
sT| | jj dS )znDelete registration info from disk
:param account_id: id of account which should be deleted
ry rz N) r^ r r` r{ r rS #_delete_account_dir_for_server_pathrW r] rj rZ $_delete_accounts_dir_for_server_path)r3 rQ rb r! r! r" delete s
zAccountFileStorage.deletec C s( t | j|}| ||}t| d S r= ) functoolspartialr\ !_delete_links_and_find_target_dirshutilrmtree)r3 rQ r] link_funcnonsymlinked_dirr! r! r" r ! s z6AccountFileStorage._delete_account_dir_for_server_pathc C s" | j j}| ||}t| d S r= )rW r_ r r rx )r3 r] r r r! r! r" r & s z7AccountFileStorage._delete_accounts_dir_for_server_path)r] r r' c C s ||}i }t j D ]\}}|||< qd}|rtd}||v r,|| }||} tj| r,t| |kr,d}|}| }q,tj|rt|}
t| |
}qt|S )a/ Delete symlinks and return the nonsymlinked directory path.
:param str server_path: file path based on server
:param callable link_func: callable that returns possible links
given a server_path
:returns: the final, non-symlinked target
:rtype: str
TF) r ro itemsr r` rv r readlinkrw ) r3 r] r r Zreused_serverskvZpossible_next_linkZnext_server_pathZ
next_dir_pathtargetr! r! r" r + s&
z4AccountFileStorage._delete_links_and_find_target_dirc C s" | |j}t|d| jj |S rX )r^ r2 r rY rW r[ )r3 rK rb r! r! r" r S s zAccountFileStorage._prepare)rK r r' c C sJ t j| |ddd }||j W d n1 s<0 Y d S )Nw )chmod)r Z safe_openrg writer%
json_dumps)r3 rK r r r! r! r" r X s zAccountFileStorage._createc C sT t | |d0}tji |jjd}|| W d n1 sF0 Y d S )Nr )bodyuri)r| rf r r@ r$ r r r )r3 rK r r~ r$ r! r! r" r \ s z AccountFileStorage._update_regrc C sD t | |d }||j W d n1 s60 Y d S )Nr )r| rh r r& r )r3 rK r r r! r! r" r c s z AccountFileStorage._update_meta)#r r r r r
ZNamespaceConfigr4 r r^ r\ classmethodrf rg rh r r rp rI ru rq rm rU r rO r r r r r r r r r r r r! r! r! r" rV s> (rV ),r r r r. Zloggingr r- typingr r r r r r r Z cryptography.hazmat.primitivesr Zjosepyr r7 r+ Zacmer
r r Z acme.clientr Zcertbotr
r r r Zcertbot._internalr Zcertbot.compatr r Z getLoggerr rM r ZAccountStoragerD rV r! r! r! r" s>
I