U Zj <@s:dZddlZddlZddlZddlZddlZddlZddlm Z ddl m Z ddl m Z ddl m Z ddl mZddl mZdd l mZdd lmZdd lmZeeZd d Zd dZddZddZddZddZddZddZddZ ddZ!dd Z"d.d"d#Z#d/d$d%Z$d&d'Z%d(d)Z&d*d+Z'd,d-Z(dS)0z Tools for managing certificates.N)List) crypto_util)errors) interfaces)ocsp)storage)util)oscCs$t|D]}tj||ddq dS)a`Update the certificate file family symlinks to use archive_dir. Use the information in the config file to make symlinks point to the correct archive directory. .. note:: This assumes that the installation is using a Reverter object. :param config: Configuration. :type config: :class:`certbot.configuration.NamespaceConfig` T)Zupdate_symlinksN)rrenewal_conf_files RenewableCert)config renewal_filerW/var/www/html/TRUCKING_PROJECT/venv/lib/python3.8/site-packages/certbot/cert_manager.pyupdate_live_symlinkss rcCstjtj}t|dd}|j}|sX|jd|ddd\}}|t j ksN|sXt dt ||}|svt d|t||||jd ||d d d S) zRename the specified lineage to the new name. :param config: Configuration. :type config: :class:`certbot.configuration.NamespaceConfig` renamerz&Enter the new name for certificate {0}z--updated-cert-nameT)flagforce_interactiveUser ended interaction.z,No existing certificate with name {0} found.z Successfully renamed {0} to {1}.FpauseN)zope component getUtilityrIDisplay get_certnames new_certnameinputformat display_utilOKrErrorlineage_for_certnameConfigurationErrorrZrename_renewal_config notification)r dispcertnamercodelineagerrrrename_lineage*s.   r)c Csg}g}t|D]t}z$t||}t|||Wqtk r}z,td||t dt ||W5d}~XYqXqt |||dS)zDisplay information about certs configured with Certbot :param config: Configuration. :type config: :class:`certbot.configuration.NamespaceConfig` zIRenewal configuration file %s produced an unexpected error: %s. Skipping.Traceback was: %sN) rr r rZverify_renewable_certappend Exceptionloggerwarningdebug traceback format_exc_describe_certs)r parsed_certsparse_failuresr Zrenewal_candidateerrr certificatesEs  r6cCsJt|ddd}|D]2}t||tjtj}|jd |ddqdS)z;Delete Certbot files associated with a certificate lineage.deleteT)allow_multiplez.Deleted all files relating to certificate {0}.FrN) rrZ delete_filesrrrrrr$r)r certnamesr&r%rrrr7[s r7c Cs|j}tj|ddzt||}Wntjk r<YdSXzt||WStjtfk rt d|t dt YdSXdS)z)Find a lineage object with name certname.modeNzRenewal conf file %s is broken.r*) renewal_configs_dirrmake_or_verify_dirrZrenewal_file_for_certnamerCertStorageErrorr IOErrorr-r/r0r1) cli_configr& configs_dirr rrrr"hs r"cCst||}|r|SdS)z0Find the domains in the cert with name certname.N)r"names)r r&r(rrrdomains_for_certnamexs rDcsfdd}t||dS)a~Find existing certs that match the given domain names. This function searches for certificates whose domains are equal to the `domains` parameter and certificates whose domains are a subset of the domains in the `domains` parameter. If multiple certificates are found whose names are a subset of `domains`, the one whose names are the largest subset of `domains` is returned. If multiple certificates' domains are an exact match or equally sized subsets, which matching certificates are returned is undefined. :param config: Configuration. :type config: :class:`certbot.configuration.NamespaceConfig` :param domains: List of domain names :type domains: `list` of `str` :returns: lineages representing the identically matching cert and the largest subset if they exist :rtype: `tuple` of `storage.RenewableCert` or `None` csb|\}}t|}|tkr&|}n4|trZ|dkrB|}nt|t|krZ|}||fS)zsReturn cert as identical_names_cert if it matches, or subset_names_cert if it matches as subset N)setrCissubsetlen)candidate_lineagervZidentical_names_certZsubset_names_certZcandidate_namesdomainsrrupdate_certs_for_domain_matchess  z?find_duplicative_certs..update_certs_for_domain_matches)NN)_search_lineages)r rKrLrrJrfind_duplicative_certs}s rNcs,|jfddtD}|r(|SdS)aJ In order to match things like: /etc/letsencrypt/archive/example.com/chain1.pem. Anonymous functions which call this function are eventually passed (in a list) to `match_and_check_overlaps` to help specify the acceptable_matches. :param `.storage.RenewableCert` candidate_lineage: Lineage whose archive dir is to be searched. :param str filetype: main file name prefix e.g. "fullchain" or "chain". :returns: Files in candidate_lineage's archive dir that match the provided filetype. :rtype: list of str or None cs,g|]$}td|rtj|qS)z {0}[0-9]*.pem)rematchrr pathjoin).0f archive_dirfiletyperr sz"_archive_files..N)rVr listdir)rHrWpatternrrUr_archive_filess r[cCsddddddddgS)z Generates the list that's passed to match_and_check_overlaps. Is its own function to make unit testing easier. :returns: list of functions :rtype: list cSs|jSN)Zfullchain_pathxrrrz%_acceptable_matches..cSs|jSr\ cert_pathr]rrrr_r`cSs t|dS)Ncertr[r]rrrr_r`cSs t|dS)N fullchainrdr]rrrr_r`rrrrr_acceptable_matchess rfcs(t}t|fdddd}|dS)a If config.cert_path is defined, try to find an appropriate value for config.certname. :param `configuration.NamespaceConfig` cli_config: parsed command line arguments :returns: a lineage name :rtype: str :raises `errors.Error`: If the specified cert path can't be matched to a lineage name. :raises `errors.OverlappingMatchFound`: If the matched lineage's archive is shared. cs jdS)Nrrar]rArrr_r`z&cert_path_to_lineage..cSs|jSr\) lineagenamer]rrrr_r`r)rfmatch_and_check_overlaps)rAacceptable_matchesrPrrgrcert_path_to_lineages  rkcsVfdd}t||g|}|s8td|jdnt|dkrNtn|SdS)a Searches through all lineages for a match, and checks for duplicates. If a duplicate is found, an error is raised, as performing operations on lineages that have their properties incorrectly duplicated elsewhere is probably a bad idea. :param `configuration.NamespaceConfig` cli_config: parsed command line arguments :param list acceptable_matches: a list of functions that specify acceptable matches :param function match_func: specifies what to match :param function rv_func: specifies what to return cs`fdd|D}g}|D]"}t|tr2||7}q||q}||kr\||S)z1Returns a list of matches using _search_lineages.csg|] }|qSrr)rSfuncrHrrrXszBmatch_and_check_overlaps..find_matches..) isinstancelistr+)rHZ return_valuerjZacceptable_matches_rvitemrP match_funcrv_funcrmr find_matchess   z.match_and_check_overlaps..find_matchesz!No match found for cert-path {0}!rN)rMrr!rrbrGZOverlappingMatchFound)rArjrrrsrtZmatchedrrqrris   riFc Cs*g}t}|jr&|j|jkr&|s&dS|jrDt|j|sDdStj t j }g}|j rj|d|j|kr|dn||r|d|rdd|}nB|j|}|jdkrd}n(|jdkrd |jd }n d |j}d |j|} |d |jd|| |j|jd|S)zJ Returns a human readable description of info about a RenewableCert objectZ TEST_CERTZEXPIREDZREVOKEDz INVALID: z, ruz VALID: 1 dayzVALID: {0} hour(s)izVALID: {0} daysz {0} ({1})zq Certificate Name: {0} Domains: {1} Expiry Date: {2} Certificate Path: {3} Private Key Path: {4} )rZRevocationCheckerr&rhrKrErFrCpytzUTCfromutcdatetimeutcnowZ is_test_certr+Z target_expiryZ ocsp_revokedrRdaysrsecondsreZprivkey) r rcZskip_filter_checkscertinfocheckernowreasonsstatusdiffZ valid_stringrrrhuman_readable_cert_infos>           rc Cs|j}|r|g}ntjtj}t|}dd|D}|sFt d|r|sZd |} n|} |j | |ddd\} }| t j krt dnZ|sd |} n|} |j| |ddd\} } | t j ks| td t|krt d|| g}|S) z9Get certname from flag, interactively, or error out. cSsg|]}t|qSr)rZlineagename_for_filename)rSnamerrrrX-sz!get_certnames..zNo existing certificates found.z+Which certificate(s) would you like to {0}?z --cert-nameT)Zcli_flagrrz(Which certificate would you like to {0}?r)r&rrrrrrr rr!rZ checklistrr ZmenurangerG) r Zverbr8Z custom_promptr&r9r% filenameschoicespromptr'indexrrrr$sB          rcCsdddd|DS)zFFormat a results report for a category of single-line renewal outcomesz z css|]}t|VqdSr\)str)rSmsgrrr Msz _report_lines..)rR)Zmsgsrrr _report_linesKsrcCs(g}|D]}|t||qd|S)z)Format a results report for a parsed cert )r+rrR)r r3rrcrrr_report_human_readableOsrcCsg}|j}|s|s|dnL|rP|js,|jr0dnd}|d||t|||rh|d|t|tjt j }|j d |dddd S) z/Print information about the certs we know aboutzNo certs found.z matching rvzFound the following {0}certs:z3 The following renewal configurations were invalid:rF)rwrapN) r+r&rKrrrrrrrrr$rR)r r3r4outnotifyrPr%rrrr2Vs  r2c Gs|j}tj|dd|}t|D]`}zt||}Wn:tjtfk rpt d|t dt Yq"YnX|||f|}q"|S)aIterate func over unbroken lineages, allowing custom return conditions. Allows flexible customization of return values, including multiple return values and complex checks. :param `configuration.NamespaceConfig` cli_config: parsed command line arguments :param function func: function used while searching over lineages :param initial_rv: initial return value of the function (any type) :returns: Whatever was specified by `func` if a match is found. r:r;z)Renewal conf file %s is broken. Skipping.r*) r=rr>rr r rr?r@r-r/r0r1)rArlZ initial_rvargsrBrIr rHrrrrMks   rM)F)FN))__doc__r{loggingrOr0rxZzope.componentrZacme.magic_typingrZcertbotrrrrrrZcertbot.compatr Zcertbot.displayr getLogger__name__r-rr)r6r7r"rDrNr[rfrkrirrrrr2rMrrrrsB           , ! + '