← Back
Editing: http_01.cpython-38.pyc
U �]V � @ s� d Z ddlZddlmZ ddlmZ ddlmZ ddlm Z ddl m Z ddl m Z dd l mZ e�e�ZG d d � d e j�ZdS ) z2A class that performs HTTP-01 challenges for Nginx� N)� challenges)�List)�errors)�os)�common)�obj)� nginxparserc sX e Zd ZdZ� fdd�Zdd� Zdd� Zdd � Zd d � Zd d � Z dd� Z dd� Z � Z S )� NginxHttp01a� HTTP-01 authenticator for Nginx :ivar configurator: NginxConfigurator object :type configurator: :class:`~nginx.configurator.NginxConfigurator` :ivar list achalls: Annotated class:`~certbot.achallenges.KeyAuthorizationAnnotatedChallenge` challenges :param list indices: Meant to hold indices of challenges in a larger array. NginxHttp01 is capable of solving many challenges at once which causes an indexing issue within NginxConfigurator who must return all responses in order. Imagine NginxConfigurator maintaining state about where all of the challenges, possibly of different types, belong in the response array. This is an optional utility. c s( t t| ��|� tj�|jjd�| _d S )Nz le_http_01_cert_challenge.conf) �superr �__init__r �path�join�configZ config_dir�challenge_conf)�self� configurator�� __class__� �7/usr/lib/python3/dist-packages/certbot_nginx/http_01.pyr ' s �zNginxHttp01.__init__c C s4 | j s g S dd� | j D �}| �� | j�dd� |S )z�Perform a challenge on Nginx. :returns: list of :class:`certbot.acme.challenges.HTTP01Response` :rtype: list c S s g | ]}|� |j��qS r )Zresponse� account_key��.0�xr r r � <listcomp>6 s z'NginxHttp01.perform.<locals>.<listcomp>zHTTP ChallengeT)�achalls� _mod_configr Zsave)r Z responsesr r r �perform, s zNginxHttp01.performc sX d}ddd� j g}� jjj}ddddg}� jjj| }|D ]�}|d dgkr:|d }d}d} |D ]@} | d |d kr�t| d �t|d �k r�||| < d }| d 7 } q`|s�|�d|� ||kr�|�d|� d } q�q:|s�t�d | ��� fd d�� j D �} dd� | D �} t � | �} t � dt| �� � jj�d � j � t� j d��} t �| | � W 5 Q R X dS )a Modifies Nginx config to include server_names_hash_bucket_size directive and server challenge blocks. :raises .MisconfigurationError: Unable to find a suitable HTTP block in which to include authenticator hosts. F� Zinclude� Z server_names_hash_bucket_sizeZ128r Zhttp� � Tz;Certbot could not find a block to include challenges in %s.c s g | ]}� � |��qS r )�_make_or_mod_server_block)r �achall�r r r r d s z+NginxHttp01._mod_config.<locals>.<listcomp>c S s g | ]}|d k r|�qS )Nr r r r r r e s zGenerated server block: %s�wN)r r �parserZ config_rootZparsed�int�insertr �MisconfigurationErrorr r Z UnspacedList�logger�debug�strZreverterZregister_file_creation�open�dump) r ZincludedZinclude_directive�rootZbucket_directive�main�lineZbodyZ found_bucketZposnZ inner_liner Znew_confr r$ r r @ sL �� �zNginxHttp01._mod_configc C s� g }d| j jj }d�| j jj�}| j jj}| j �|�\}}|rt|sL|d }tj�|�tj�|�g}t� d||� ntj�|�g}t� d|� |S )z�Finds addresses for a challenge block to listen on. :returns: list of :class:`certbot_nginx.obj.Addr` to apply :rtype: list z%sz[::]:{0}z ipv6only=onz5Using default addresses %s and %s for authentication.z,Using default address %s for authentication.) r r � http01_port�formatZ ipv6_infor ZAddrZ fromstringr* �info)r Z addressesZ default_addrZ ipv6_addrZportZipv6Zipv6onlyr r r �_default_listen_addresseso s, � ���z%NginxHttp01._default_listen_addressesc C s t jt j�tjj|j�d�� S )N�token) r �sepr r r ZHTTP01Z URI_ROOT_PATHZchall�encode)r r# r r r �_get_validation_path� s z NginxHttp01._get_validation_pathc C sX | � � }dd� |D �}tj�| jjjd�}|�dd|jgdd|g| � |�g� dg|gS )a� Creates a server block for a challenge. :param achall: Annotated HTTP-01 challenge :type achall: :class:`certbot.achallenges.KeyAuthorizationAnnotatedChallenge` :param list addrs: addresses of challenged domain :class:`list` of type :class:`~nginx.obj.Addr` :returns: server block for the challenge host :rtype: list c S s g | ]}d d|j dd�g�qS )Zlistenr F)Zinclude_default)Z to_string)r Zaddrr r r r � s z2NginxHttp01._make_server_block.<locals>.<listcomp>Zhttp_01_nonexistentZ server_namer r/ Zserver) r5 r r r r r Zwork_dir�extend�domain� _location_directive_for_achall)r r# Zaddrs�blockZ document_rootr r r �_make_server_block� s ��z NginxHttp01._make_server_blockc C s@ |� |j�}| �|�}dddd|gdddgdddd|ggg}|S )N�locationr �=Z default_typez text/plain�returnZ200)� validationr r9 )r r# rB Zvalidation_path�location_directiver r r r< � s ��z*NginxHttp01._location_directive_for_achallc C s� z"| j j|jd| j jj dd�}W n tjk rB | �|� Y S X |d }| �|�g}| j j � ||� ddddddd gg}| j j j ||dd � d S ) z�Modifies a server block to respond to a challenge. :param achall: Annotated HTTP-01 challenge :type achall: :class:`certbot.achallenges.KeyAuthorizationAnnotatedChallenge` z%iT)Zcreate_if_no_matchr Zrewriter z!^(/.well-known/acme-challenge/.*)z$1�break)Z insert_at_topN) r Zchoose_redirect_vhostsr; r r2 r r) r> r< r& Zadd_server_directives)r r# ZvhostsZvhostrC Zrewrite_directiver r r r" � s. � � � �z%NginxHttp01._make_or_mod_server_block) �__name__� __module__� __qualname__�__doc__r r r r5 r9 r> r< r" � __classcell__r r r r r s / r )rH ZloggingZacmer Zacme.magic_typingr Zcertbotr Zcertbot.compatr Zcertbot.pluginsr Z certbot_nginxr r Z getLoggerrE r* ZChallengePerformerr r r r r �<module> s
Save File
Cancel