a
}|g2 @ s d Z ddlZddlZddlZddlmZ ddlmZ ddlmZ ddlm Z ddlm
Z
ddlm Z dd lm Z dd
lm
Z
dd lmZ ddlZdd lmZ dd
lmZ ddlmZ ddlmZ ddlmZ z(ddlmZ ddlmZ ddl m Z W n e y dZdZdZ Y n0 e e Z!G dd dZ"e#e e#ef e e#ef eee e#ef f dddZ$G dd dej%Z&G dd d Z'eee'ej(e ej(e < dS ) z;Common code for DNS Authenticator Plugins built on Lexicon. N)
ModuleType)Any)cast)Dict)List)Mapping)Optional)Tuple)Union) HTTPError)RequestException)
configuration)errors)
dns_common)Client)ConfigResolver)Providerc @ s e Zd ZdZddddZeeeddddZeeeddd d
Zedd d d
Ze ee
e j dddZ
eee
e j dddZdS )
LexiconClientz
Encapsulates all communication with a DNS provider via Lexicon.
.. deprecated:: 2.7.0
Please use certbot.plugins.dns_common_lexicon.LexiconDNSAuthenticator instead.
Nreturnc C s | d S N selfr r F/usr/lib/python3.9/site-packages/certbot/plugins/dns_common_lexicon.py__init__0 s zLexiconClient.__init__)domain record_namerecord_contentr c
C sj | | z| jjd||d W nD tyd } z,tjd|dd td|W Y d}~n
d}~0 0 dS )a
Add a TXT record using the supplied information.
:param str domain: The domain to use to look up the managed zone.
:param str record_name: The record name (typically beginning with '_acme-challenge.').
:param str record_content: The record content (typically the challenge validation).
:raises errors.PluginError: if an error occurs communicating with the DNS Provider API
TXTZrtypenameZcontent'Encountered error adding TXT record: %sTexc_info Error adding TXT record: {0}N) _find_domain_idprovider
create_recordr loggerdebugr PluginErrorformatr r r r er r r add_txt_record3 s
z LexiconClient.add_txt_recordc
C s z| | W n8 tjyF } z tjd|dd W Y d}~dS d}~0 0 z| jjd||d W n4 ty } z tjd|dd W Y d}~n
d}~0 0 dS )a
Delete a TXT record using the supplied information.
:param str domain: The domain to use to look up the managed zone.
:param str record_name: The record name (typically beginning with '_acme-challenge.').
:param str record_content: The record content (typically the challenge validation).
:raises errors.PluginError: if an error occurs communicating with the DNS Provider API
7Encountered error finding domain_id during deletion: %sTr# Nr r )Encountered error deleting TXT record: %s)r& r r+ r) r* r'
delete_recordr r- r r r del_txt_recordD s z LexiconClient.del_txt_recordr r c C s t |}|D ]}z4t| jdr.|| jjd< n|| j_| j W dS ty~ } z | ||}|rj|W Y d}~qd}~0 t y } z |
||}|r|W Y d}~qd}~0 0 qt d
||dS )z
Find the domain_id for a given domain.
:param str domain: The domain for which to find the domain_id.
:raises errors.PluginError: if the domain_id cannot be found.
optionsr NAUnable to determine zone identifier for {0} using zone names: {1})r base_domain_name_guesseshasattrr' r5 r Z authenticater _handle_http_error Exception_handle_general_errorr r+ r, r r Zdomain_name_guesses domain_namer. Zresult1Zresult2r r r r& Y s&
z LexiconClient._find_domain_idr. r= r c C s t d||S Nz/Error determining zone identifier for {0}: {1}.r r+ r, r r. r= r r r r9 } s z LexiconClient._handle_http_errorc C s$ t |ds td||S d S NzNo domain foundz9Unexpected error determining zone identifier for {0}: {1}str
startswithr r+ r, rA r r r r; s
z#LexiconClient._handle_general_error)__name__
__module__ __qualname____doc__r rD r/ r3 r& r r r r+ r9 r: r; r r r r r ( s $r )lexicon_provider_namelexicon_optionsprovider_optionsr c C sR d| i}| | tdu r(| | |S i }| | ||| < t | S dS )a
Convenient function to build a Lexicon 2.x/3.x config object.
:param str lexicon_provider_name: the name of the lexicon provider to use
:param dict lexicon_options: options specific to lexicon
:param dict provider_options: options specific to provider
:return: configuration to apply to the provider
:rtype: ConfigurationResolver or dict
.. deprecated:: 2.7.0
Please use certbot.plugins.dns_common_lexicon.LexiconDNSAuthenticator instead.
provider_nameN)updater with_dictwith_env)rJ rK rL Z config_dictZprovider_configr r r build_lexicon_config s
rQ c s e Zd ZdZejed fdd Zee j
edddZ ee ddd Z
eeed
d d d
ZeedddZd
dddZeeed
dddZeeed
dddZeedddZeeeej ddd Zeeeej dd d Z Z S ) LexiconDNSAuthenticatorzr
Base class for a DNS authenticator that uses Lexicon client
as backend to execute DNS record updates
)configr! c s t || g | _| d S r )superr _provider_options)r rS r! __class__r r r s z LexiconDNSAuthenticator.__init__r c C s dS )z9
The name of the Lexicon provider to use
Nr r r r r _provider_name s z&LexiconDNSAuthenticator._provider_namec C s dS )zX
Time to live to apply to the DNS records created by this Authenticator
< r r r r r _ttl s z LexiconDNSAuthenticator._ttlN)creds_var_namecreds_var_label lexicon_provider_option_namer c C s | j |||f d S r )rU append)r r[ r\ r] r r r _add_provider_option s z,LexiconDNSAuthenticator._add_provider_optionr4 c sP t ds d|d|d jd j j fdd jD i}t | S )N _credentialsr Z delegatedrM Zttlc s" i | ]}|d j |d qS ) r )r` Zconf.0itemr r r
s zALexiconDNSAuthenticator._build_lexicon_config..)r8 _setup_credentialsrX rZ rU r rO rP )r r Z dict_configr r r _build_lexicon_config s
z-LexiconDNSAuthenticator._build_lexicon_configc C s, | j dd| j ddd | jD d| _d S )NZ credentialszCredentials INI file for z DNS authenticatorc S s i | ]}|d |d qS )r r rb r r r re z>LexiconDNSAuthenticator._setup_credentials..)keyZlabelZrequired_variables)Z_configure_credentialsrX rU r` r r r r rf s
z*LexiconDNSAuthenticator._setup_credentials)r validation_name
validationr c
C s | |}zBt| | }|jd||d W d n1 s@0 Y W nD ty } z,tjd|dd td |W Y d }~n
d }~0 0 d S )Nr r r" Tr# r% )
_resolve_domainr rg r( r r) r* r r+ r, )r r rk rl resolved_domain
operationsr. r r r _perform s
2z LexiconDNSAuthenticator._performc
C s z| |}W n8 tjyF } z tjd|dd W Y d }~d S d }~0 0 zBt| | }|jd||d W d n1 s~0 Y W n4 ty } z tjd|dd W Y d }~n
d }~0 0 d S )Nr0 Tr# r r r1 ) rm r r+ r) r* r rg r2 r )r r rk rl rn r. ro r r r _cleanup s 2z LexiconDNSAuthenticator._cleanupc C s t |}|D ]}z c C s t d||S r? r@ rA r r r r9
s z*LexiconDNSAuthenticator._handle_http_errorc C s$ t |ds td||S d S rB rC rA r r r r; s
z-LexiconDNSAuthenticator._handle_general_error) rF rG rH rI r
ZNamespaceConfigrD r propertyabcabstractmethodrX intrZ r_ r rg rf rp rq rm r r r r+ r9 r: r;
__classcell__r r rV r rR s"
rR c @ sb e Zd ZdZedddZeedddZeedd d
d Z eedd d
Z
e e dddZ dS )_DeprecationModulez
Internal class delegating to a module, and displaying warnings when attributes
related to deprecated attributes in the current module.
)modulec C s || j d< d S N_module)__dict__)r rx r r r r s z_DeprecationModule.__init__)attrr c C s0 |dv r$t j| dt dtdd t| j|S )N)r rQ z attribute in z/ module is deprecated and will be removed soon.ra )
stacklevel)warningswarnrF DeprecationWarninggetattrrz r r| r r r __getattr__ s
z _DeprecationModule.__getattr__N)r| valuer c C s t | j|| d S r )setattrrz )r r| r r r r __setattr__' s z _DeprecationModule.__setattr__c C s t | j| d S r )delattrrz r r r r __delattr__* s z _DeprecationModule.__delattr__r c C s dgt | j S ry )dirrz r r r r __dir__- s z_DeprecationModule.__dir__)
rF rG rH rI r r rD r r r r r r r r r r rw s rw ))rI rs Zloggingsystypesr typingr r r r r r r r
r~ Zrequests.exceptionsr r Zcertbotr
r Zcertbot.pluginsr Zlexicon.clientr Zlexicon.configr Zlexicon.interfacesr ImportErrorZ getLoggerrF r) r rD rQ ZDNSAuthenticatorrR rw modulesr r r r sF
` s