← Back
Editing: standalone.cpython-38.pyc
U �]� � @ s d Z ddlZddlZddlZddlmZ ddlZddlZddlZ ddl m Z ddl m Z ddlmZmZmZmZmZmZmZ ddlmZ ddlmZ dd lmZ dd lmZ e� e �Z er�ee j eej f Z!G d d � d e"�Z#e j$�%ej&�e j$�'ej(�G d d� dej)���Z*dd� Z+dS )zStandalone Authenticator.� N)�errno)� challenges)� standalone)� DefaultDict�Dict�Set�Tuple�List�Type� TYPE_CHECKING)� achallenges)�errors)� interfaces)�commonc @ s2 e Zd ZdZdd� Zd dd�Zdd� Zd d � Zd S ) � ServerManagera� Standalone servers manager. Manager for `ACMEServer` and `ACMETLSServer` instances. `certs` and `http_01_resources` correspond to `acme.crypto_util.SSLSocket.certs` and `acme.crypto_util.SSLSocket.http_01_resources` respectively. All created servers share the same certificates and resources, so if you're running both TLS and non-TLS instances, HTTP01 handlers will serve the same URLs! c C s i | _ || _|| _d S �N)� _instances�certs�http_01_resources)�selfr r � r �</usr/lib/python3/dist-packages/certbot/plugins/standalone.py�__init__, s zServerManager.__init__� c C s� |t jkst�|| jkr"| j| S ||f}zt�|| j�}W n0 tjk rl } zt � ||��W 5 d}~X Y nX |� � |� � d d }|| j|< |S )a Run ACME server on specified ``port``. This method is idempotent, i.e. all calls with the same pair of ``(port, challenge_type)`` will reuse the same server. :param int port: Port to run the server on. :param challenge_type: Subclass of `acme.challenges.Challenge`, currently only `acme.challenge.HTTP01`. :param str listenaddr: (optional) The address to listen on. Defaults to all addrs. :returns: DualNetworkedServers instance. :rtype: ACMEServerMixin Nr � ) r �HTTP01�AssertionErrorr �acme_standaloneZHTTP01DualNetworkedServersr �socket�errorr �StandaloneBindErrorZ serve_forever� getsocknames)r �portZchallenge_type� listenaddrZaddress�serversr Z real_portr r r �run1 s � zServerManager.runc C sB | j | }|�� D ]}tjd|dd� �� q|�� | j |= dS )zWStop ACME server running on the specified ``port``. :param int port: �Stopping server at %s:%d...N� )r& )r r! �logger�debugZshutdown_and_server_close)r r" �instanceZsocknamer r r �stopT s �zServerManager.stopc C s | j �� S )z�Return all running instances. Once the server is stopped using `stop`, it will not be returned. :returns: Mapping from ``port`` to ``servers``. :rtype: tuple )r �copy�r r r r �runninga s zServerManager.runningN)r )�__name__� __module__� __qualname__�__doc__r r% r+ r. r r r r r s # r c sp e Zd ZdZdZ� fdd�Zedd� �Zdd� Zd d � Z d d � Z d d� Z dd� Z dd� Z dd� Zdd� Z� ZS )� Authenticatora Standalone Authenticator. This authenticator creates its own ephemeral TCP listener on the necessary port in order to respond to incoming http-01 challenges from the certificate authority. Therefore, it does not rely on any existing server program. z Spin up a temporary webserverc s@ t t| �j||� t�t�| _i | _t� | _t | j| j�| _ d S r ) �superr3 r � collections� defaultdict�set�servedr r r r$ )r �args�kwargs�� __class__r r r { s zAuthenticator.__init__c C s d S r r )�cls�addr r r �add_parser_arguments� s z"Authenticator.add_parser_argumentsc C s dS )Nz�This authenticator creates its own ephemeral TCP listener on the necessary port in order to respond to incoming http-01 challenges from the certificate authority. Therefore, it does not rely on any existing server program.r r- r r r � more_info� s zAuthenticator.more_infoc C s d S r r r- r r r �prepare� s zAuthenticator.preparec C s t jgS r )r r )r Zdomainr r r �get_chall_pref� s z Authenticator.get_chall_prefc s � fdd�|D �S )Nc s g | ]}� � |��qS r )�_try_perform_single)�.0�achallr- r r � <listcomp>� s z)Authenticator.perform.<locals>.<listcomp>r )r �achallsr r- r �perform� s zAuthenticator.performc C s@ z | � |�W S tjk r8 } z t|� W 5 d }~X Y q X q d S r )�_perform_singler r �_handle_perform_error)r rE r r r r rC � s z!Authenticator._try_perform_singlec C s" | � |�\}}| j| �|� |S r )�_perform_http_01r8 r> )r rE r$ �responser r r rI � s z Authenticator._perform_singlec C sX | j j}| j j}| jj|tj|d�}|�� \}}tj j |j ||d�}| j � |� ||fS )N)r# )�challrL � validation)ZconfigZ http01_portZhttp01_addressr$ r% r r Zresponse_and_validationr ZHTTP01RequestHandlerZHTTP01ResourcerM r r> )r rE r" Zaddrr$ rL rN �resourcer r r rK � s � z Authenticator._perform_http_01c C sd | j �� D ]$\}}|D ]}||kr|�|� qq t�| j�� �D ] \}}| j | s@| j�|� q@d S r )r8 �items�remove�sixZ iteritemsr$ r. r+ )r rG Zunused_serversZserver_achallsrE r" r$ r r r �cleanup� s zAuthenticator.cleanup)r/ r0 r1 r2 Z descriptionr � classmethodr? r@ rA rB rH rC rI rK rS � __classcell__r r r; r r3 n s r3 c C st | j jtjkr"t�d�| j���nN| j jtjkrlt j � t j �}d�| j�}|j|dddd�}|spt�|��n| �d S )Nz�Could not bind TCP port {0} because you don't have the appropriate permissions (for example, you aren't running this program as root).z�Could not bind TCP port {0} because it is already in use by another process on this system (such as a web server). Please stop the program in question and then try again.ZRetryZCancelF)�default)Z socket_errorr � socket_errorsZEACCESr Z PluginError�formatr" Z EADDRINUSE�zopeZ componentZ getUtilityr ZIDisplayZyesno)r Zdisplay�msgZ should_retryr r r rJ � s& ���� � rJ ),r2 r5 Zloggingr r rW ZOpenSSLrR Zzope.interfacerY Zacmer r r Zacme.magic_typingr r r r r r r Zcertbotr r r Zcertbot.pluginsr Z getLoggerr/ r( ZBaseDualNetworkedServersZ"KeyAuthorizationAnnotatedChallengeZ ServedType�objectr Z interfaceZ implementerZIAuthenticatorZproviderZIPluginFactoryZPluginr3 rJ r r r r �<module> s4 $ ��O O
Save File
Cancel