a
Me, @ s d Z ddlZddlZddlZddlZddlZddlZddlZddl ZG dd dej
j Z G dd dej
j Z
G dd dej
j ZG d d
d
ej
j ZG d d d ej
j ZG d
d deZG dd deZG dd deZG dd deZejdZejdZejdZejdZejdZejdZ ejdZ ejd Z ejd Z ejd Z eZ!ed ed ed!ed"e d#e d$e d%e d!ed"e d&i
Z"G d'd( d(Z#G d)d* d*Z$G d+d, d,Z%d:d-d.Z&d/d0 Z'd;d2d3Z(d| j | }t|tr:|jtkr:|r:t||| |S d S d S r" )r*
isinstanceKey algorithmGSS_TSIGr) parse_tkey_and_step)r messagekeynamekeyr r r __call__ s
zGSSTSigAdapter.__call__c C sV z>| |j|tjjtjj}|r<|d j}|j}| |W S W n t
yP Y n0 d S )Nr ) Z
find_rrsetZanswerdns
rdataclassANYZ rdatatypeZTKEYr2 secretstepKeyError)clsr2 r0 r1 Zrrsettokenr r r r r/ s
z"GSSTSigAdapter.parse_tkey_and_stepN)r r r r! r3 classmethodr/ r r r r r) s
r) c @ sv e Zd ZdZeejeeje ej
e ej
dfe ej
eej
dfeejeejdfeeji Zdd Zdd Zd d
Zd d Zd
S )HMACTSigzo
HMAC TSIG implementation. This uses the HMAC python module to handle the
sign/verify operations.
r c C s z| j | }W n" ty0 td| dY n0 t|tr\tj||d d| _|d | _ntj||d| _d | _| jj | _ | jr| j d| j 7 _ d S )NzTSIG algorithm z is not supportedr )Z digestmod -)
_hashesr9 NotImplementedErrorr+ tuplehmacnew hmac_contextsizer )r r2 r- Zhashinfor r r r! s
zHMACTSig.__init__c C s | j |S r" )rG r$ r# r r r r$ s zHMACTSig.updatec C s& | j }| jr"|d | jd }|S )N )rG digestrH )r rJ r r r r% s
z
HMACTSig.signc C s | }t||std S r" )r% rE Zcompare_digestr
)r r' macr r r r( s zHMACTSig.verifyN)r r r r HMAC_SHA1hashlibZsha1 HMAC_SHA224Zsha224 HMAC_SHA256Zsha256HMAC_SHA256_128 HMAC_SHA384Zsha384HMAC_SHA384_192 HMAC_SHA512Zsha512HMAC_SHA512_256HMAC_MD5Zmd5rB r! r$ r% r( r r r r r= s
r= c C s0 |o| }|r:t |}|r:|tdt| || |td|j || dd |r||j |tdtj j
|tdd |du r|j }|d? d@ }|d@ } td || |j }
t|j
} | dkrtd
|r"||j |
|td |j| |j
n
||
|S ) zReturn a context containing the TSIG rdata for the input parameters
@rtype: dns.tsig.HMACTSig or dns.tsig.GSSTSig object
@raises ValueError: I{other_data} is too long
@raises NotImplementedError: I{algorithm} is not supported
!H Nz!Ir r i l z!HIHz TSIG Other Data is > 65535 bytesz!HH) get_contextr$ structpacklenZ original_idr Z
to_digestabler4 r5 r6 time_signedfudgeother
ValueErrorr- error) wirer2 rdatatime request_macctxmultifirstZ
upper_timeZ
lower_timeZ time_encodedZ other_lenr r r _digest s2
rh c C s8 |r0t | }|tdt| || |S dS dS )zIf this is the first message in a multi-message sequence,
start a new context.
@rtype: dns.tsig.HMACTSig or dns.tsig.GSSTSig object
rV N)rX r$ rY rZ r[ )r2 rK rf re r r r _maybe_start_digest s
ri Fc C s: t | ||||||}| }|j||d}|t|||fS )a~ Return a (tsig_rdata, mac, ctx) tuple containing the HMAC TSIG rdata
for the input parameters, the HMAC MAC calculated by applying the
TSIG signature algorithm, and the TSIG digest context.
@rtype: (string, dns.tsig.HMACTSig or dns.tsig.GSSTSig object)
@raises ValueError: I{other_data} is too long
@raises NotImplementedError: I{algorithm} is not supported
)r\ rK )rh r% replaceri ) ra r2 rb rc rd re rf rK Ztsigr r r r% s r% c C s t d| dd \} | dkr&tjj| d8 } | dd t d| | d| }
|jdkr|jtjjkrpt nJ|jtjj
krt n6|jtjj krt
n"|jtjjkrtntd|j t|j| |jkrt|j|krt|j|jkrtt|
||d|||}||j t ||j|S )aF Validate the specified TSIG rdata against the other input parameters.
@raises FormError: The TSIG is badly formed.
@raises BadTime: There is too much time skew between the client and the
server.
@raises BadSignature: The TSIG signature did not validate
@rtype: dns.tsig.HMACTSig or dns.tsig.GSSTSig objectrV
r r@ zunknown TSIG error code %dN) rY unpackr4 exceptionZ FormErrorrZ r` ZrcodeZBADSIGr ZBADKEYr ZBADTIMEr ZBADTRUNCr r
absr\ r] r r r r- r rh r( rK ri ) ra r2 ownerrb Znowrd Z
tsig_startre rf ZadcountZnew_wirer r r validate s0 $
rq c C s& | j tkrt| jS t| j| j S dS )zReturns an HMAC context for the specified key.
@rtype: HMAC context
@raises NotImplementedError: I{algorithm} is not supported
N)r- r. r r7 r= )r2 r r r rX : s
rX c @ s( e Zd ZefddZdd Zdd ZdS )r, c C sZ t |trtj|}|| _t |tr4t| }|| _t |trPtj|}|| _ d S r" )
r+ strr4 r from_textbase64Z decodebytesencoder7 r- )r r r7 r- r r r r! H s
z Key.__init__c C s. t |to,| j|jko,| j|jko,| j|jkS r" )r+ r, r r7 r- )r r^ r r r __eq__S s
z
Key.__eq__c C sN d| j dd| j d }| jtkrB|dt| j d7 }|d7 }|S )Nz