a
{)j @ @ sJ d dl Z d dlZd dlZd dlmZmZ G dd deZG dd dZdS ) N)PopenPIPEc s e Zd Z fddZ ZS )TimePastc s t t| d|||f d S )Nz'%s time for key %s (%d) is already past)superr __init__)selfkeypropvalue __class__ ./usr/lib/python3.9/site-packages/isc/dnskey.pyr s zTimePast.__init__)__name__
__module__ __qualname__r
__classcell__r
r
r r r s r c @ s e Zd ZdZdZdZdZdVddZdd Zd
d Z e
dWd d
Z dd Z e
dd Ze
dd ZdXddZe
dd Ze
dd Ze
dd Ze
d d Zd d Zd d! Zd"d# Zd$d% Zd&d' Zd(d) Ze fd*d+Z d,d- Z e fd.d/Z d0d1 Z e fd2d3Z d4d5 Z!e fd6d7Z"d8d9 Z#e fd:d;Z$dd?Z&d@dA Z'e fdBdCZ(dDdE Z)dFdG Z*dHdI Z+dJdK Z,dLdM Z-dNdO Z.dYdPdQZ/dZdRdSZ0e
dTdU Z1dS )[dnskeyztAn individual DNSSEC key. Identified by path, name, algorithm, keyid.
Contains a dictionary of metadata events.) CreatedPublishActivateInactiveDeleteRevokeZ DSPublish SyncPublish
SyncDelete) N-P-Az-Iz-Dz-RNz-Psyncz-Dsync)NZRSAMD5ZDHZDSANZRSASHA1ZNSEC3DSAZ NSEC3RSASHA1Z RSASHA256NZ RSASHA512NZECCGOSTZECDSAP256SHA256ZECDSAP384SHA384ZED25519ZED448Nc C s t |tr:t|dkr:|p d| _|\}}}| |||| |pLtj|pLd| _tj|}| d\}}}|dd }t
|}t
| dd }| |||| d S )N .+ r )
isinstancetuplelen_dir fromtupleospathdirnamebasenamesplitint)r r Z directorykeyttlnamealgkeyidr
r
r r & s
zdnskey.__init__c s | dr|}|d}n|d }d|||f }| j| jr@tjpBd | d }| j| jr^tjp`d | d }|| _|| _t|| _t|| _ || _
t |d} | D ]z d dkrq }
|
sq|
d
d
v rd } || _nd } |st|
d n|| _t|
| d @ d krd
| _qd| _q| t |d} t | _t | _t | _t | _t | _t | _t | _d | _| D ] rp d dv rqp fdddD t g }
tdd |
D } d | } |d d }|| j|< qpt j D ]}d| j|< || jv rb| | j| }|| j|< | || j|< | !|| j|< | j| | j|< n(d | j|< d | j|< d | j|< d | j|< q| d S )Nr z
K%s+%03d+%05d z.keyz.privaterr ;r! )inZchZhsr TFZrUz!#c s g | ]} |qS r
)find).0cliner
r
l z$dnskey.fromtuple..z:= c S s g | ]}|d kr|qS )r" r
)r8 posr
r
r r< m r= )"endswithrstripr& r( sepkeystrr/ r- r0 r1 fullnameopenr, lowerttlclosedictmetadata_changed_delete_times_fmttime _timestamps _original_origttlstripr% minlstripr _PROPS parsetime
formattime
epochfromtime)r r/ r0 r1 r. rC rB Zkey_fileZ private_fileZkfptokensZseptokenZpfpZ punctuationfoundr
r tr
r: r r' 5 s~
zdnskey.fromtuplec
K sf | dd}g }d}| jd ur0|dt| jg7 }ttjtjD ]V\}}|r>| j| sVq>d}|| j v rr| j | rrd}|rzdn| j
| } ||| g7 }d}q>|rb|d| j g| | j g }
|st
dd|
z.t|
ttd } | \} }
|
rtt|
W n: ty2 } z td
|t|f W Y d }~n
d }~0 0 d | _tjD ] }| j| | j|< d| j|< q@d S ) NquietFT-LZnone-K# stdoutstderrzunable to run %s: %s)getrP strrF zipr rT _OPTSrJ rK rM r& rB printjoinr r communicate ExceptionrN rO )r Z settime_binkwargsr[ cmdfirstr optdeleteZwhenZfullcmdpra rb er
r
r commit s>
z
dnskey.commitc
K sP | dd} |dd|dt|g}
|r0|
d|g7 }
|r>|
d |rN|
d|g7 }
|rb|
d t|g7 }
| rt| }|
d
t|g7 }
|
rt|
}|
d t|
g7 }
|
| | std d
|
t|
t t d}|
\}}|rt dt| z$| d
d}t|||}|W S t yJ } z t dt| W Y d }~n
d }~0 0 d S )Nr[ F-qr] r\ -rz-fkz-az-br r r^ r_ r` unable to generate key: r asciiz!unable to parse generated key: %s)rc rd appendr
timefromepochrV rg rh r r ri rj
splitlinesdecode)cls
keygen_bin randomdevZkeys_dirr/ r0 ZkeysizerA rF publishactivaterk r[
keygen_cmdrZ rp ra rb rB newkeyrq r
r
r generate s:
zdnskey.generatec K s | dd}| s td| |dd| jd| jg}| jrL|dt| jg7 }|r\|d|g7 }|rp|d t|g7 }|std
d | t |t
t
d }| \}} | rtd
| z(| d
d}
t|
| j| j} | W S td| Y n0 d S )Nr[ Fz'predecessor key %s has no inactive daters r] z-Sr\ rt z-ir^ r_ r` ru r rv z'unable to generate successor for key %s)rc inactiverj r& rB rF rd rg rh r r ri ry rz r ) r r| r} Z
prepublishrk r[ r rp ra rb rB r r
r
r generate_successor s, zdnskey.generate_successorc C s0 d }| t ttjv r tj| }|r(|S d| S )Nz%03d)ranger% r _ALGNAMES)r0 r/ r
r
r algstr s
z
dnskey.algstrc C s8 | sd S | } ztj| W S ty2 Y d S 0 d S N)upperr r index
ValueError)r0 r
r
r algnum s z
dnskey.algnumc C s | |p | jS r )r r0 )r r0 r
r
r algname s zdnskey.algnamec C s
t | S r )timegmtime)secsr
r
r rx s zdnskey.timefromepochc C s t | dS Nz %Y%m%d%H%M%S)r strptime)stringr
r
r rU s zdnskey.parsetimec C s
t | S r )calendarZtimegmrZ r
r
r rW s zdnskey.epochfromtimec C s t d| S r )r strftimer r
r
r rV s zdnskey.formattimec K s | dd}| j| |kr d S | j| d urP| j| |k rP|sPt| || j| |d u r| j| d u rjdnd| j|< d| j|< d | j|< d | j|< d | j|< d S | |}|| j|< || j|< | || j|< | j| | j| krdnd| j|< d S )NforceFT)
rc rN rO r rJ rK rL rM rx rV )r r r nowrk r rZ r
r
r setmeta s6
zdnskey.setmetac C s
| j | S r )rL r r r
r
r gettime2 s zdnskey.gettimec C s
| j | S r )rM r r
r
r
getfmttime5 s zdnskey.getfmttimec C s
| j | S r rN r r
r
r gettimestamp8 s zdnskey.gettimestampc C s
| j d S )Nr r r r
r
r created; s zdnskey.createdc C s
| j d S Nr r r r
r
r syncpublish> s zdnskey.syncpublishc K s | j d||fi | d S r r r r r rk r
r
r setsyncpublishA s zdnskey.setsyncpublishc C s
| j d S Nr r r r
r
r r~ D s zdnskey.publishc K s | j d||fi | d S r r r r
r
r
setpublishG s zdnskey.setpublishc C s
| j d S Nr r r r
r
r r J s zdnskey.activatec K s | j d||fi | d S r r r r
r
r setactivateM s zdnskey.setactivatec C s
| j d S Nr r r r
r
r revokeP s z
dnskey.revokec K s | j d||fi | d S r r r r
r
r setrevokeS s zdnskey.setrevokec C s
| j d S Nr r r r
r
r r V s zdnskey.inactivec K s | j d||fi | d S r r r r
r
r setinactiveY s zdnskey.setinactivec C s
| j d S Nr r r r
r
r ro \ s z
dnskey.deletec K s | j d||fi | d S r r r r
r
r setdelete_ s zdnskey.setdeletec C s
| j d S Nr r r r
r
r
syncdeleteb s zdnskey.syncdeletec K s | j d||fi | d S r r r r
r
r
setsyncdeletee s zdnskey.setsyncdeletec C sR |d u s| j |krd S | jd u r0| j | _|| _ n | j|krHd | _|| _ n|| _ d S r )rF rP )r rF r
r
r setttlh s
z
dnskey.setttlc C s | j r
dS dS )NKSKZSK)rA r r
r
r keytypet s zdnskey.keytypec C s d| j | | jf S )Nz
%s/%s/%05d)r/ r r1 r r
r
r __str__w s zdnskey.__str__c C s" d| j | | j| jrdndf S )Nz%s/%s/%05d (%s)r r )r/ r r1 rA r r
r
r __repr__{ s
zdnskey.__repr__c C s | p| p| S r )r r~ r r r
r
r date s z dnskey.datec C s@ | j |j kr| j |j k S | j|jkr0| j|jk S | | k S r )r/ r0 r )r otherr
r
r __lt__ s
z
dnskey.__lt__c C s dd }|s|}t t }| }| }|s4dS |sT||krP|dt| dS ||krh||krhdS ||kr|dt| t| jpdf dS ||k r|dt| dS | jd ur|| | jk r|d t| t| jpdf dS dS )
Nc _ s d S r r
argsrk r
r
r noop r= z!dnskey.check_prepub..noopFzFWARNING: Key %s is scheduled for
activation but not for publication.TzWARNING: %s is scheduled to be
published and activated at the same time. This
could result in a coverage gap if the zone was
previously signed. Activation should be at least
%s after publication.zone DNSKEY TTLz0WARNING: Key %s is active before it is publishedzWARNING: Key %s is activated too soon
after publication; this could result in coverage
gaps due to resolver caches containing old data.
Activation should be at least %s after
publication.)r- r r r~ reprr durationrF )r outputr r arp r
r
r check_prepub sH zdnskey.check_prepubc C s dd }|d u r|}|d u r"| j }|d u r>|dt| d}t }| }| }|s^dS |s~||krz|dt| dS ||k r||k rdS ||k r|dt| dS || |k r|d t| t|f dS dS )
Nc _ s d S r r
r r
r
r r r= z"dnskey.check_postpub..noopz"WARNING: Key %s using default TTL.Q FzEWARNING: Key %s is scheduled for
deletion but not for inactivation.Tz@WARNING: Key %s is scheduled for
deletion before inactivation.zWARNING: Key %s scheduled for
deletion too soon after deactivation; this may
result in coverage gaps due to resolver caches
containing old data. Deletion should be at least
%s after inactivation.)rF r r ro r r r )r r Ztimespanr r dir
r
r
check_postpub s@ zdnskey.check_postpubc C sn | sd S g d}g }|D ]J}| |d | |d }} |dkr| d||d |dkrXdndf qd|S )N))Zyeari3)Zmonthi ' )Zdayr )Zhouri )Zminute< )secondr! r! r z%d %s%ssr2 z, )rw rh )r Zunitsr Zunitvr
r
r r s &zdnskey.duration)NN)NN)N)N)NN)2r r r __doc__rT rf r r r' rr classmethodr r staticmethodr r r rx rU rW rV r r r r r r r r r~ r r r r r r r ro r r r r r r r r r r r r r
r
r
r r sj
M% +
1
-r ) r( r r
subprocessr r rj r r r
r
r
r s