File: //usr/lib/python3/dist-packages/certbot/_internal/__pycache__/account.cpython-310.pyc
o
6��a#; � @ s: d Z ddlZddlZddlZddlZddlZddlZddlmZ ddlm Z ddlm
Z
ddl m Z ddl
ZddlZddlZddlmZ ddlmZ dd lmZ dd
lmZ dd lmZ dd lmZ dd
lm Z ddl m Z ddl m Z e� e!�Z"G dd� d�Z#G dd� dej$�Z%G dd� dej&�Z'G dd� dej$�Z(dS )z!Creates ACME accounts for server.� N)�cast)�Any)�Mapping)�
serialization)�fields)�messages)�
ClientBase)�errors)�
interfaces)�util)� constants)�
filesystem)�osc @ sH e Zd ZdZG dd� dej�Zd
dd�Zedd� �Z d d
� Z
d d � Z dS )�Accountz�ACME protocol registration.
:ivar .RegistrationResource regr: Registration Resource
:ivar .JWK key: Authorized Account Key
:ivar .Meta: Account metadata
:ivar str id: Globally unique account identifier.
c @ s2 e Zd ZdZe�d�Ze�d�Z ejddd�Z
dS )z Account.Metaa� Account metadata
:ivar datetime.datetime creation_dt: Creation date and time (UTC).
:ivar str creation_host: FQDN of host, where account has been created.
:ivar str register_to_eff: If not None, Certbot will register the provided
email during the account registration.
.. note:: ``creation_dt`` and ``creation_host`` are useful in
cross-machine migration scenarios.
� creation_dt�
creation_host�register_to_effT)� omitemptyN) �__name__�
__module__� __qualname__�__doc__� acme_fields� RFC3339Fieldr �jose�Fieldr r � r r �;/usr/lib/python3/dist-packages/certbot/_internal/account.py�Meta( s
r Nc
C s� || _ || _|d u r | jtjjtjd�jdd�t� � d d�n|| _
zt � � }W n t
yA t jd i ttttf ddi���}Y nw |�| j j �� jtjjtjjd�� |�� | _ d S )
N)�tzr )� microsecond)r r r �md5�usedforsecurityF)�encoding�format)r! ) �key�regrr �datetime�now�pytz�UTC�replace�socket�getfqdn�meta�hashlibr! �
ValueError�newr r �strr �update�
public_key� public_bytesr �Encoding�PEM� PublicFormat�SubjectPublicKeyInfo� hexdigest�id)�selfr& r% r. �hasherr r r �__init__8 s( ��� &��zAccount.__init__c C s& d� t�| jj�| jj| jdd� �S )z3Short account identification string, useful for UI.z
{1}@{0} ({2})N� )r$ � pyrfc3339�generater. r r r; �r< r r r �slugV s
��z Account.slugc C s d� | jj| j| j| j�S )Nz<{0}({1}, {2}, {3})>)r$ � __class__r r& r; r. rB r r r �__repr__\ s �zAccount.__repr__c C s0 t || j�o| j|jko| j|jko| j|jkS �N)�
isinstancerD r% r& r. )r< �otherr r r �__eq__` s
�
�
�zAccount.__eq__rF ) r r r r r �JSONObjectWithFieldsr r> �propertyrC rE rI r r r r r s
r c @ s2 e Zd ZdZd dd�Zdd� Zdd� Zd d
� ZdS ) �AccountMemoryStoragezIn-memory account storage.Nc C s |d ur || _ d S i | _ d S rF )�accounts)r< �initial_accountsr r r r> i s z AccountMemoryStorage.__init__c C s t | j�� �S rF )�listrM �valuesrB r r r �find_alll � z AccountMemoryStorage.find_allc C s* |j | jv r
t�d|j � || j|j < d S )NzOverwriting account: %s)r; rM �logger�debug)r< �account�clientr r r �saveo s zAccountMemoryStorage.savec C s& z| j | W S ty t�|��w rF )rM �KeyErrorr �AccountNotFound�r< �
account_idr r r �loadt s
�zAccountMemoryStorage.loadrF )r r r r r> rQ rW r\ r r r r rL f s
rL c @ s e Zd ZdZe�d�ZdS )�$RegistrationResourceWithNewAuthzrURIaf A backwards-compatible RegistrationResource with a new-authz URI.
Hack: Certbot versions pre-0.11.1 expect to load
new_authzr_uri as part of the account. Because people
sometimes switch between old and new versions, we will
continue to write out this field for some time so older
clients don't crash in that scenario.
�new_authzr_uriN)r r r r r r r^ r r r r r] z s r] c @ s$ e Zd ZdZdd� Zdd� Zdd� Zedd � �Zed
d � �Z ed d
� �Z
dd� Z dd� Z dd� Z
dd� Zdd� Zdd� Zdeded d fd d �Zdeded d fd d!�Zded d fd"d#�Zd$d%� Zd&d'� Zd(d)� Zd*d+� Zded efd,d-�Zded.ed d fd/d0�Z ded1ed.ed d fd2d3�Z d4d5� Z d S )6�AccountFileStoragezjAccounts file storage.
:ivar certbot.configuration.NamespaceConfig config: Client configuration
c C s || _ t�|jd| j j� d S �Ni� )�configr �make_or_verify_dir� accounts_dir�strict_permissions)r< ra r r r r> � s zAccountFileStorage.__init__c C � | � || jj�S rF )�!_account_dir_path_for_server_pathra � server_pathrZ r r r �_account_dir_path� � z$AccountFileStorage._account_dir_pathc C s | j �|�}tj�||�S rF )ra � accounts_dir_for_server_pathr �path�join)r< r[ rg rc r r r rf � s z4AccountFileStorage._account_dir_path_for_server_pathc C � t j�|d�S )Nz regr.json�r rk rl ��cls�account_dir_pathr r r �
_regr_path� � z AccountFileStorage._regr_pathc C rm )Nzprivate_key.jsonrn ro r r r � _key_path� rs z AccountFileStorage._key_pathc C rm )Nz meta.jsonrn ro r r r �_metadata_path� rs z!AccountFileStorage._metadata_pathc C s� | j �|�}zt�|�}W n ty g Y S w g }|D ] }z |�| �||�� W q tjy; t j
ddd� Y q w |se|t j v ret j | }| �
|�}|rcz| �||� W n tyb g Y S w |}|S )NzAccount loading problemT)�exc_info)ra rj r �listdir�OSError�append�_load_for_server_pathr �AccountStorageErrorrS rT r �LE_REUSE_SERVERS�_find_all_for_server_path�_symlink_to_accounts_dir)r< rg rc �
candidatesrM r[ �prev_server_path�
prev_accountsr r r r} � s0 ��
�z,AccountFileStorage._find_all_for_server_pathc C s | � | jj�S rF )r} ra rg rB r r r rQ � rR zAccountFileStorage.find_allc C s( | � ||�}| � ||�}t�||� d S rF )rf r �symlink)r< r� rg r[ �prev_account_dir�new_account_dirr r r �_symlink_to_account_dir� s z*AccountFileStorage._symlink_to_account_dirc C sJ | j �|�}tj�|�rt�|� nt�|� | j �|�}t�||� d S rF )ra rj r rk �islink�unlink�rmdirr� )r< r� rg rc r� r r r r~ � s
z+AccountFileStorage._symlink_to_accounts_dirc
C sl | � ||�}tj�|�s?|tjv r8tj| }| �||�}| j�|�}t� |�r0| �
|||� |S | � ||� |S t �
d| ��z_t| �|���}tj�|�� �}W d � n1 sZw Y t| �|���} tj�| �� �}
W d � n1 syw Y t| �|���} tj�| �� �} W d � n1 s�w Y W n ty� }
zt �|
��d }
~
ww t||
| �S )N� Account at %s does not exist) rf r rk �isdirr r| rz ra rj rw r� r~ r rY �openrr r �RegistrationResource�
json_loads�readrt r �JWKru r r �IOErrorr{ )r< r[ rg rq r� �prev_loaded_accountrc � regr_filer& �key_filer% �
metadata_filer. �errorr r r rz � s<
�� � � ��
�� z(AccountFileStorage._load_for_server_pathc C re rF )rz ra rg rZ r r r r\ � ri zAccountFileStorage.loadrU rV �returnNc
C sZ z| � |�}| �||� | �||� | �|||� W dS ty, } zt�|��d}~ww )z�Create a new account.
:param Account account: account to create
:param ClientBase client: ACME client associated to the account
N)�_prepare�_create� _update_meta� _update_regrr� r r{ �r< rU rV �dir_pathr� r r r rW � s
��zAccountFileStorage.savec
C sB z| � |�}| �|||� W dS ty } zt�|��d}~ww )z�Update the registration resource.
:param Account account: account to update
:param ClientBase client: ACME client associated to the account
N)r� r� r� r r{ r� r r r � update_regr� s
��z AccountFileStorage.update_regrc
C s@ z| � |�}| �||� W dS ty } zt�|��d}~ww )zVUpdate the meta resource.
:param Account account: account to update
N)r� r� r� r r{ )r< rU r� r� r r r � update_meta
s
��z AccountFileStorage.update_metac C sX | � |�}tj�|�st�d| ��| �|| jj� t� | jj
�s*| � | jj� dS dS )znDelete registration info from disk
:param account_id: id of account which should be deleted
r� N) rh r rk r� r rY �#_delete_account_dir_for_server_pathra rg rw rc �$_delete_accounts_dir_for_server_path)r< r[ rq r r r �delete s
��zAccountFileStorage.deletec C s( t �| j|�}| �||�}t�|� d S rF )� functools�partialrf �!_delete_links_and_find_target_dir�shutil�rmtree)r< r[ rg � link_func�nonsymlinked_dirr r r r� ' s z6AccountFileStorage._delete_account_dir_for_server_pathc C s" | j j}| �||�}t�|� d S rF )ra rj r� r r� )r< rg r� r� r r r r� , s z7AccountFileStorage._delete_accounts_dir_for_server_pathc C s� ||�}i }t j�� D ]\}}|||< q d}|r;d}||v r9|| }||�} tj�| �r9t�| �|kr9d}|}| }|stj�|�rSt�|�}
t�|� |
}tj�|�sA|S )a/ Delete symlinks and return the nonsymlinked directory path.
:param str server_path: file path based on server
:param callable link_func: callable that returns possible links
given a server_path
:returns: the final, non-symlinked target
:rtype: str
TF) r r| �itemsr rk r� r
�readlinkr� ) r< rg r� r� �reused_servers�k�v�possible_next_link�next_server_path�
next_dir_path�targetr r r r� 1 s*
�
�z4AccountFileStorage._delete_links_and_find_target_dirc C s" | � |j�}t�|d| jj� |S r` )rh r; r rb ra rd )r< rU rq r r r r� X s zAccountFileStorage._preparer� c C sL t j| �|�ddd��}|�|j�� � W d � d S 1 s w Y d S )N�w� )�chmod)r � safe_openrt �writer% �
json_dumps)r< rU r� r� r r r r� ] s "�zAccountFileStorage._create�acmec C s| t | �|�d��,}|j}t|jd�r t|jji |jd�}ntj i |jd�}|�
|� � � W d � d S 1 s7w Y d S )Nr� z new-authz)r^ �body�uri)r� r� ) r� rr r& �hasattr� directoryr] � new_authzr� r r� r� r� )r< rU r� r� r� r& r r r r� a s ��"�z AccountFileStorage._update_regrc C sF t | �|�d��}|�|j�� � W d � d S 1 s w Y d S )Nr� )r� ru r� r. r� )r< rU r� r� r r r r� s s "�z AccountFileStorage._update_meta) r r r r r> rh rf � classmethodrr rt ru r} rQ r� r~ rz r\ r r rW r� r� r� r� r� r� r2 r� r� r� r� r r r r r_ � s8
' r_ ))r r' r� r/ �loggingr� r, �typingr r r � cryptography.hazmat.primitivesr �josepyr r@ r) r� r r r � acme.clientr �certbotr r
r �certbot._internalr �certbot.compatr
r � getLoggerr rS r �AccountStoragerL r� r] r_ r r r r �<module> s8
H