3
گa�? � @ sv d Z ddlZddlZddlZddlZddlZddlZddlmZ ddlm Z ddlm
Z
ddlm Z ddlm Z ddlm
Z
dd lmZ dd
lmZ ddlZddlZddlZdd lmZ dd lmZ dd
lmZ ddlm Z ddlm Z ddlm Z ddlm Z ddl m!Z! ddl"m#Z# ddl"m$Z$ ej%e&�Z'G dd� d�Z(G dd� de j)�Z*G dd� dej+�Z,G dd � d e j)�Z-dS ) z!Creates ACME accounts for server.� N)�Any)�Callable)�cast)�Dict)�List)�Mapping)�Optional)�
serialization)�fields)�messages)�
ClientBase)�
configuration)�errors)�
interfaces)�util)� constants)�
filesystem)�osc @ sp e Zd ZdZG dd� dej�Zdejej e
d dd�dd�Z e e
d�d d
��Ze
d�d d �Zeed
�dd�ZdS )�Accountz�ACME protocol registration.
:ivar .RegistrationResource regr: Registration Resource
:ivar .JWK key: Authorized Account Key
:ivar .Meta: Account metadata
:ivar str id: Globally unique account identifier.
c @ s2 e Zd ZdZejd�Zejd�Z ejddd�Z
dS )z Account.Metaa� Account metadata
:ivar datetime.datetime creation_dt: Creation date and time (UTC).
:ivar str creation_host: FQDN of host, where account has been created.
:ivar str register_to_eff: If not None, Certbot will register the provided
email during the account registration.
.. note:: ``creation_dt`` and ``creation_host`` are useful in
cross-machine migration scenarios.
� creation_dt�
creation_host�register_to_effT)Z omitemptyN) �__name__�
__module__� __qualname__�__doc__� acme_fieldsZ RFC3339Fieldr �jose�Fieldr r � r r � /usr/lib/python3.6/account.py�Meta- s
r! N)�regr�key�meta�returnc
C s� || _ || _|d kr<| jtjjtjd�jdd�tj � d d�n|| _
y t j � }W n2 t
k
r� t jd ttttf ddi��}Y nX |j| j j j� jtjjtjjd�� |j� | _ d S )
N)Ztzr )Z microsecond)r r r �md5ZusedforsecurityF)�encoding�format)r& ) r# r" r! �datetimeZnow�pytzZUTC�replace�socketZgetfqdnr$ �hashlibr& �
ValueError�newr r �strr �updateZ
public_keyZ public_bytesr ZEncodingZPEMZ PublicFormatZSubjectPublicKeyInfoZ hexdigest�id)�selfr" r# r$ Zhasherr r r �__init__= s 6 $zAccount.__init__)r% c C s& dj tj| jj�| jj| jdd� �S )z3Short account identification string, useful for UI.z
{1}@{0} ({2})N� )r( � pyrfc3339Zgenerater$ r r r2 )r3 r r r �slug\ s z Account.slugc C s dj | jj| j| j| j�S )Nz<{0}({1}, {2}, {3})>)r( � __class__r r" r2 r$ )r3 r r r �__repr__b s zAccount.__repr__)�otherr% c C s0 t || j�o.| j|jko.| j|jko.| j|jkS )N)�
isinstancer8 r# r" r$ )r3 r: r r r �__eq__f s zAccount.__eq__)N)r r r r r ZJSONObjectWithFieldsr! r �RegistrationResource�JWKr r4 �propertyr0 r7 r9 r �boolr< r r r r r # s r c @ s^ e Zd ZdZdeeef dd�dd�Zee d�dd�Z ee
dd �d
d �Z eed �d
d�Z dS )�AccountMemoryStoragezIn-memory account storage.N)�initial_accountsr% c C s |d k r |ni | _ d S )N)�accounts)r3 rB r r r r4 o s z AccountMemoryStorage.__init__)r% c C s t | jj� �S )N)�listrC �values)r3 r r r �find_allr s z AccountMemoryStorage.find_all)�account�clientr% c C s* |j | jkrtjd|j � || j|j < d S )NzOverwriting account: %s)r2 rC �logger�debug)r3 rG rH r r r �saveu s zAccountMemoryStorage.save)�
account_idr% c C s. y
| j | S tk
r( tj|��Y nX d S )N)rC �KeyErrorr �AccountNotFound)r3 rL r r r �loadz s
zAccountMemoryStorage.load)N)
r r r r r r0 r r4 r rF r rK rO r r r r rA l s
rA c @ s e Zd ZdZejd�ZdS )�$RegistrationResourceWithNewAuthzrURIaf A backwards-compatible RegistrationResource with a new-authz URI.
Hack: Certbot versions pre-0.11.1 expect to load
new_authzr_uri as part of the account. Because people
sometimes switch between old and new versions, we will
continue to write out this field for some time so older
clients don't crash in that scenario.
�new_authzr_uriN)r r r r r r rQ r r r r rP � s rP c @ s� e Zd ZdZejdd�dd�Zeed�dd�Zeeed �d
d �Z e
eed �d
d��Z e
eed �dd��Z e
eed �dd��Z
eee d�dd�Zee d�dd�Zeeedd�dd�Zeedd �d d �Zeeed �d d �Zeed�d!d"�Zeedd#�d$d%�Zeedd#�d&d'�Zedd(�d)d*�Zedd�d+d,�Zeedd �d-d.�Zedd�d/d0�Z ee egef ed1�d2d3�Z eed(�d4d5�Z eedd6�d7d8�Z eeedd9�d:d;�Z!eedd6�d<d=�Z"dS )>�AccountFileStoragezjAccounts file storage.
:ivar certbot.configuration.NamespaceConfig config: Client configuration
N)�configr% c C s || _ tj|jd| j j� d S )Ni� )rS r �make_or_verify_dir� accounts_dir�strict_permissions)r3 rS r r r r4 � s zAccountFileStorage.__init__)rL r% c C s | j || jj�S )N)�!_account_dir_path_for_server_pathrS � server_path)r3 rL r r r �_account_dir_path� s z$AccountFileStorage._account_dir_path)rL rX r% c C s | j j|�}tjj||�S )N)rS � accounts_dir_for_server_pathr �path�join)r3 rL rX rU r r r rW � s z4AccountFileStorage._account_dir_path_for_server_path)�account_dir_pathr% c C s t jj|d�S )Nz regr.json)r r[ r\ )�clsr] r r r �
_regr_path� s z AccountFileStorage._regr_pathc C s t jj|d�S )Nzprivate_key.json)r r[ r\ )r^ r] r r r � _key_path� s z AccountFileStorage._key_pathc C s t jj|d�S )Nz meta.json)r r[ r\ )r^ r] r r r �_metadata_path� s z!AccountFileStorage._metadata_path)rX r% c C s� | j j|�}ytj|�}W n tk
r. g S X g }xH|D ]@}y|j| j||�� W q: tjk
rx t j
ddd� Y q:X q:W | r�|t j kr�t j | }| j
|�}|r�y| j||� W n tk
r� g S X |}|S )NzAccount loading problemT)�exc_info)rS rZ r �listdir�OSError�append�_load_for_server_pathr �AccountStorageErrorrI rJ r �LE_REUSE_SERVERS�_find_all_for_server_path�_symlink_to_accounts_dir)r3 rX rU Z
candidatesrC rL �prev_server_pathZ
prev_accountsr r r ri � s*
z,AccountFileStorage._find_all_for_server_path)r% c C s | j | jj�S )N)ri rS rX )r3 r r r rF � s zAccountFileStorage.find_all)rk rX rL r% c C s( | j ||�}| j ||�}tj||� d S )N)rW r �symlink)r3 rk rX rL �prev_account_dirZnew_account_dirr r r �_symlink_to_account_dir� s z*AccountFileStorage._symlink_to_account_dir)rk rX r% c C sJ | j j|�}tjj|�r$tj|� n
tj|� | j j|�}tj||� d S )N)rS rZ r r[ �islink�unlink�rmdirrl )r3 rk rX rU rm r r r rj � s
z+AccountFileStorage._symlink_to_accounts_dirc C sR | j ||�}tjj|�s||tjkrntj| }| j||�}| jj|�}tj |�r^| j
|||� n | j ||� |S t j
d| ��y�t| j|��� }ttjtjj|j� ��}W d Q R X t| j|��� } ttjtjj| j� ��}
W d Q R X t| j|��� } ttjtjj| j� ��} W d Q R X W n. tk
�rD }
zt j |
��W Y d d }
~
X nX t||
| �S )Nz Account at %s does not exist) rW r r[ �isdirr rh rf rS rZ rc rn rj r rN �openr_ r r r= Z
json_loads�readr` r r> ra r r! �IOErrorrg )r3 rL rX r] rk Zprev_loaded_accountrU � regr_filer" �key_filer# �
metadata_filer$ �errorr r r rf � s.
"& z(AccountFileStorage._load_for_server_pathc C s | j || jj�S )N)rf rS rX )r3 rL r r r rO � s zAccountFileStorage.load)rG rH r% c C sf y4| j |�}| j||� | j||� | j|||� W n, tk
r` } ztj|��W Y dd}~X nX dS )z�Create a new account.
:param Account account: account to create
:param ClientBase client: ACME client associated to the account
N)�_prepare�_create� _update_meta� _update_regrru r rg )r3 rG rH �dir_pathry r r r rK � s
zAccountFileStorage.savec C sN y | j |�}| j|||� W n, tk
rH } ztj|��W Y dd}~X nX dS )z�Update the registration resource.
:param Account account: account to update
:param ClientBase client: ACME client associated to the account
N)rz r} ru r rg )r3 rG rH r~ ry r r r � update_regr s
z AccountFileStorage.update_regr)rG r% c C sL y| j |�}| j||� W n, tk
rF } ztj|��W Y dd}~X nX dS )zVUpdate the meta resource.
:param Account account: account to update
N)rz r| ru r rg )r3 rG r~ ry r r r � update_meta s
z AccountFileStorage.update_metac C sT | j |�}tjj|�s$tjd| ��| j|| jj� tj | jj
�sP| j | jj� dS )znDelete registration info from disk
:param account_id: id of account which should be deleted
z Account at %s does not existN) rY r r[ rr r rN �#_delete_account_dir_for_server_pathrS rX rc rU �$_delete_accounts_dir_for_server_path)r3 rL r] r r r �delete! s
zAccountFileStorage.deletec C s( t j| j|�}| j||�}tj|� d S )N)� functools�partialrW �!_delete_links_and_find_target_dir�shutilZrmtree)r3 rL rX � link_func�nonsymlinked_dirr r r r� 2 s z6AccountFileStorage._delete_account_dir_for_server_pathc C s" | j j}| j||�}tj|� d S )N)rS rZ r� r rq )r3 rX r� r� r r r r� 7 s z7AccountFileStorage._delete_accounts_dir_for_server_path)rX r� r% c C s� ||�}i }x t jj� D ]\}}|||< qW d}xJ|rzd}||kr2|| }||�} tjj| �r2tj| �|kr2d}|}| }q2W x(tjj|�r�tj|�}
tj|� |
}q~W |S )a/ Delete symlinks and return the nonsymlinked directory path.
:param str server_path: file path based on server
:param callable link_func: callable that returns possible links
given a server_path
:returns: the final, non-symlinked target
:rtype: str
TF) r rh �itemsr r[ ro r �readlinkrp ) r3 rX r� r~ Zreused_servers�k�vZpossible_next_linkZnext_server_pathZ
next_dir_path�targetr r r r� < s&
z4AccountFileStorage._delete_links_and_find_target_dirc C s" | j |j�}tj|d| jj� |S )Ni� )rY r2 r rT rS rV )r3 rG r] r r r rz d s zAccountFileStorage._prepare)rG r~ r% c C s6 t j| j|�ddd��}|j|jj� � W d Q R X d S )N�w� )�chmod)r Z safe_openr` �writer# �
json_dumps)r3 rG r~ rw r r r r{ i s zAccountFileStorage._create)rG �acmer~ r% c C sf t | j|�d��L}|j}t|jd�r:t|jji |jd�}ntj i |jd�}|j
|j � � W d Q R X d S )Nr� z new-authz)rQ �body�uri)r� r� ) rs r_ r" �hasattrZ directoryrP Z new_authzr� r r= r� r� )r3 rG r� r~ rv r" r r r r} m s
z AccountFileStorage._update_regrc C s0 t | j|�d��}|j|jj� � W d Q R X d S )Nr� )rs ra r� r$ r� )r3 rG r~ rx r r r r| s z AccountFileStorage._update_meta)#r r r r r
ZNamespaceConfigr4 r0 rY rW � classmethodr_ r` ra r r ri rF rn rj rf rO r rK r r� r� r� r� r r� rz r{ r} r| r r r r rR � s: !
'rR ).r r) r� r- Zloggingr� r, Ztypingr r r r r r r Z cryptography.hazmat.primitivesr Zjosepyr r6 r* r� r
r r Z acme.clientr Zcertbotr
r r r Zcertbot._internalr Zcertbot.compatr r Z getLoggerr rI r ZAccountStoragerA r= rP rR r r r r �<module> s@
I