File: //lib/python3.9/site-packages/certbot/_internal/__pycache__/account.cpython-39.pyc
a
}|�g29 � @ sd d Z ddlZddlZddlZddlZddlZddlZddlmZ ddlm Z ddlm
Z
ddlm Z ddlm Z ddlm
Z
dd lmZ dd
lmZ ddlZddlZddlZdd lmZ dd lmZ dd
lmZ ddlm Z ddlm Z ddlm Z ddlm Z ddl m!Z! ddl"m#Z# ddl"m$Z$ e�%e&�Z'G dd� d�Z(G dd� de j)�Z*G dd� de j)�Z+dS )z!Creates ACME accounts for server.� N)�Any)�Callable)�cast)�Dict)�List)�Mapping)�Optional)�
serialization)�fields)�messages)�ClientV2)�
configuration)�errors)�
interfaces)�util)� constants)�
filesystem)�osc @ sp e Zd ZdZG dd� dej�Zdejej e
d dd�dd�Z e e
d�d d
��Ze
d�d d �Zeed
�dd�ZdS )�Accountz�ACME protocol registration.
:ivar .RegistrationResource regr: Registration Resource
:ivar .JWK key: Authorized Account Key
:ivar .Meta: Account metadata
:ivar str id: Globally unique account identifier.
c @ sN e Zd ZU dZe�d�Zejed< e �
d�Z e ed< e j
ddd�Z
e ed< dS )z Account.Metaa� Account metadata
:ivar datetime.datetime creation_dt: Creation date and time (UTC).
:ivar str creation_host: FQDN of host, where account has been created.
:ivar str register_to_eff: If not None, Certbot will register the provided
email during the account registration.
.. note:: ``creation_dt`` and ``creation_host`` are useful in
cross-machine migration scenarios.
� creation_dt�
creation_host�register_to_effT)Z omitemptyN)�__name__�
__module__� __qualname__�__doc__� acme_fieldsZrfc3339r �datetime�__annotations__�joseZfieldr �strr � r! r! �=/usr/lib/python3.9/site-packages/certbot/_internal/account.py�Meta- s
r# N)�regr�key�meta�returnc
C s� || _ || _|d u r<| jtjjtjd�jdd�t� � d d�n|| _
z t � � }W n4 t
y� t jd i ttttf ddi���}Y n0 |�| j j �� jtjjtjjd�� |�� | _ d S )
N)Ztzr )Z microsecond)r r r �md5ZusedforsecurityF)�encoding�format)r( ) r% r$ r# r Znow�pytzZUTC�replace�socketZgetfqdnr& �hashlibr( �
ValueError�newr r r r �updateZ
public_keyZ public_bytesr ZEncodingZPEMZ PublicFormatZSubjectPublicKeyInfoZ hexdigest�id)�selfr$ r% r& Zhasherr! r! r" �__init__= s& ��� (�zAccount.__init__�r' c C s& d� t�| jj�| jj| jdd� �S )z3Short account identification string, useful for UI.z
{1}@{0} ({2})N� )r* � pyrfc3339Zgenerater& r r r2 �r3 r! r! r" �slug\ s
��z Account.slugc C s d� | jj| j| j| j�S )Nz<{0}({1}, {2}, {3})>)r* � __class__r r$ r2 r& r8 r! r! r" �__repr__b s �zAccount.__repr__)�otherr' c C s0 t || j�o.| j|jko.| j|jko.| j|jkS �N)�
isinstancer: r% r$ r& )r3 r< r! r! r" �__eq__f s
�
�
�zAccount.__eq__)N)r r r r r ZJSONObjectWithFieldsr# r �RegistrationResource�JWKr r4 �propertyr r9 r; r �boolr? r! r! r! r" r # s �
� r c @ sb e Zd ZdZdeeeef dd�dd�Ze e d�dd�Z
ee dd �d
d �Z eed �d
d�Z
dS )�AccountMemoryStoragezIn-memory account storage.N)�initial_accountsr' c C s |d ur |ni | _ d S r= )�accounts)r3 rE r! r! r" r4 o s z AccountMemoryStorage.__init__r5 c C s t | j�� �S r= )�listrF �valuesr8 r! r! r" �find_allr s z AccountMemoryStorage.find_all��account�clientr' c C s* |j | jv rt�d|j � || j|j < d S )NzOverwriting account: %s)r2 rF �logger�debug)r3 rK rL r! r! r" �saveu s zAccountMemoryStorage.save��
account_idr' c C s. z | j | W S ty( t�|��Y n0 d S r= )rF �KeyErrorr �AccountNotFound�r3 rQ r! r! r" �loadz s zAccountMemoryStorage.load)N)r r r r r r r r r4 r rI r rO rU r! r! r! r" rD l s
rD c @ s� e Zd ZdZejdd�dd�Zeed�dd�Zeeed �d
d �Z e
eed �d
d��Z e
eed �dd��Z e
eed �dd��Z
eee d�dd�Zee d�dd�Zeeedd�dd�Zeedd �d d �Zeeed �d d �Zeed�d!d"�Zeedd#�d$d%�Zedd&�d'd(�Zedd&�d)d*�Zedd�d+d,�Zeedd �d-d.�Zedd�d/d0�Z ee egef ed1�d2d3�Z eed&�d4d5�Z eedd6�d7d8�Z eedd6�d9d:�Z!eedd6�d;d<�Z"dS )=�AccountFileStoragezjAccounts file storage.
:ivar certbot.configuration.NamespaceConfig config: Client configuration
N)�configr' c C s || _ t�|jd| j j� d S �Ni� )rW r �make_or_verify_dir� accounts_dir�strict_permissions)r3 rW r! r! r" r4 � s zAccountFileStorage.__init__rP c C s | � || jj�S r= )�!_account_dir_path_for_server_pathrW � server_pathrT r! r! r" �_account_dir_path� s z$AccountFileStorage._account_dir_path)rQ r] r' c C s | j �|�}tj�||�S r= )rW � accounts_dir_for_server_pathr �path�join)r3 rQ r] rZ r! r! r" r\ � s z4AccountFileStorage._account_dir_path_for_server_path)�account_dir_pathr' c C s t j�|d�S )Nz regr.json�r r` ra ��clsrb r! r! r" �
_regr_path� s z AccountFileStorage._regr_pathc C s t j�|d�S )Nzprivate_key.jsonrc rd r! r! r" � _key_path� s z AccountFileStorage._key_pathc C s t j�|d�S )Nz meta.jsonrc rd r! r! r" �_metadata_path� s z!AccountFileStorage._metadata_path)r] r' c C s� | j �|�}zt�|�}W n ty0 g Y S 0 g }|D ]>}z|�| �||�� W q: tjyv t j
ddd� Y q:0 q:|s�|t j v r�t j | }| �
|�}|r�z| �||� W n ty� g Y S 0 |}|S )NzAccount loading problemT)�exc_info)rW r_ r �listdir�OSError�append�_load_for_server_pathr �AccountStorageErrorrM rN r �LE_REUSE_SERVERS�_find_all_for_server_path�_symlink_to_accounts_dir)r3 r] rZ Z
candidatesrF rQ �prev_server_pathZ
prev_accountsr! r! r" rp � s*
z,AccountFileStorage._find_all_for_server_pathr5 c C s | � | jj�S r= )rp rW r] r8 r! r! r" rI � s zAccountFileStorage.find_all)rr r] rQ r' c C s( | � ||�}| � ||�}t�||� d S r= )r\ r �symlink)r3 rr r] rQ �prev_account_dirZnew_account_dirr! r! r" �_symlink_to_account_dir� s z*AccountFileStorage._symlink_to_account_dir)rr r] r' c C sJ | j �|�}tj�|�r$t�|� n
t�|� | j �|�}t�||� d S r= )rW r_ r r` �islink�unlink�rmdirrs )r3 rr r] rZ rt r! r! r" rq � s
z+AccountFileStorage._symlink_to_accounts_dirc
C s~ | � ||�}tj�|�s�|tjv rntj| }| �||�}| j�|�}t� |�r^| �
|||� n | � ||� |S t �
d|� d���z�t| �|��� }tj�|�� �}W d � n1 s�0 Y t| �|��� } tj�| �� �}
W d � n1 s�0 Y t| �|��� } tj�| �� �} W d � n1 �s40 Y W n0 t�yp }
zt �|
��W Y d }
~
n
d }
~
0 0 t||
| �S )N� Account at � does not exist) r\ r r` �isdirr ro rm rW r_ rj ru rq r rS �openrf r r@ Z
json_loads�readrg r rA rh r r# rk rn )r3 rQ r] rb rr Zprev_loaded_accountrZ � regr_filer$ �key_filer% �
metadata_filer& �errorr! r! r" rm � s*
..4 z(AccountFileStorage._load_for_server_pathc C s | � || jj�S r= )rm rW r] rT r! r! r" rU � s zAccountFileStorage.loadrJ c
C sf z2| � |�}| �||� | �||� | �||� W n. ty` } zt�|��W Y d}~n
d}~0 0 dS )z�Create a new account.
:param Account account: account to create
:param ClientV2 client: ACME client associated to the account
N)�_prepare�_create� _update_meta� _update_regrrk r rn )r3 rK rL �dir_pathr� r! r! r" rO � s
zAccountFileStorage.save)rK r' c
C sN z| � |�}| �||� W n. tyH } zt�|��W Y d}~n
d}~0 0 dS )z^Update the registration resource.
:param Account account: account to update
N)r� r� rk r rn �r3 rK r� r� r! r! r" � update_regr� s
z AccountFileStorage.update_regrc
C sN z| � |�}| �||� W n. tyH } zt�|��W Y d}~n
d}~0 0 dS )zVUpdate the meta resource.
:param Account account: account to update
N)r� r� rk r rn r� r! r! r" � update_meta s
z AccountFileStorage.update_metac C sX | � |�}tj�|�s(t�d|� d���| �|| jj� t� | jj
�sT| � | jj� dS )znDelete registration info from disk
:param account_id: id of account which should be deleted
ry rz N) r^ r r` r{ r rS �#_delete_account_dir_for_server_pathrW r] rj rZ �$_delete_accounts_dir_for_server_path)r3 rQ rb r! r! r" �delete s
zAccountFileStorage.deletec C s( t �| j|�}| �||�}t�|� d S r= )� functools�partialr\ �!_delete_links_and_find_target_dir�shutil�rmtree)r3 rQ r] � link_func�nonsymlinked_dirr! r! r" r� ! s z6AccountFileStorage._delete_account_dir_for_server_pathc C s" | j j}| �||�}t�|� d S r= )rW r_ r� r rx )r3 r] r� r� r! r! r" r� & s z7AccountFileStorage._delete_accounts_dir_for_server_path)r] r� r' c C s� ||�}i }t j�� D ]\}}|||< qd}|rtd}||v r,|| }||�} tj�| �r,t�| �|kr,d}|}| }q,tj�|�r�t�|�}
t�|� |
}qt|S )a/ Delete symlinks and return the nonsymlinked directory path.
:param str server_path: file path based on server
:param callable link_func: callable that returns possible links
given a server_path
:returns: the final, non-symlinked target
:rtype: str
TF) r ro �itemsr r` rv r �readlinkrw ) r3 r] r� r� Zreused_servers�k�vZpossible_next_linkZnext_server_pathZ
next_dir_path�targetr! r! r" r� + s&
z4AccountFileStorage._delete_links_and_find_target_dirc C s" | � |j�}t�|d| jj� |S rX )r^ r2 r rY rW r[ )r3 rK rb r! r! r" r� S s zAccountFileStorage._prepare)rK r� r' c C sJ t j| �|�ddd�� }|�|j�� � W d � n1 s<0 Y d S )N�w� )�chmod)r Z safe_openrg �writer% �
json_dumps)r3 rK r� r r! r! r" r� X s zAccountFileStorage._createc C sT t | �|�d��0}tji |jjd�}|�|�� � W d � n1 sF0 Y d S )Nr� )�body�uri)r| rf r r@ r$ r� r� r� )r3 rK r� r~ r$ r! r! r" r� \ s �z AccountFileStorage._update_regrc C sD t | �|�d�� }|�|j�� � W d � n1 s60 Y d S )Nr� )r| rh r� r& r� )r3 rK r� r� r! r! r" r� c s z AccountFileStorage._update_meta)#r r r r r
ZNamespaceConfigr4 r r^ r\ � classmethodrf rg rh r r rp rI ru rq rm rU r rO r� r� r� r� r� r r� r� r� r� r� r! r! r! r" rV � s> � � (rV ),r r r� r. Zloggingr� r- �typingr r r r r r r Z cryptography.hazmat.primitivesr Zjosepyr r7 r+ Zacmer
r r Z acme.clientr Zcertbotr
r r r Zcertbot._internalr Zcertbot.compatr r Z getLoggerr rM r ZAccountStoragerD rV r! r! r! r" �<module> s>
I