U Zj@sdZddlZddlZddlZddlmZddlZddlZddlZ ddl m Z ddl m Z ddlmZmZmZmZmZmZmZddlmZddlmZdd lmZdd lmZeeZeree jeej fZ!Gd d d e"Z#e j$%ej&e j$'ej(Gd ddej)Z*ddZ+dS)zStandalone Authenticator.N)errno) challenges) standalone) DefaultDictDictSetTupleListType TYPE_CHECKING) achallenges)errors) interfaces)commonc@s2eZdZdZddZd ddZddZd d Zd S) ServerManageraStandalone servers manager. Manager for `ACMEServer` and `ACMETLSServer` instances. `certs` and `http_01_resources` correspond to `acme.crypto_util.SSLSocket.certs` and `acme.crypto_util.SSLSocket.http_01_resources` respectively. All created servers share the same certificates and resources, so if you're running both TLS and non-TLS instances, HTTP01 handlers will serve the same URLs! cCsi|_||_||_dSN) _instancescertshttp_01_resources)selfrrr]/var/www/html/TRUCKING_PROJECT/venv/lib/python3.8/site-packages/certbot/plugins/standalone.py__init__,szServerManager.__init__c Cs|tjkst||jkr"|j|S||f}zt||j}Wn0tjk rl}zt ||W5d}~XYnX| | dd}||j|<|S)aRun ACME server on specified ``port``. This method is idempotent, i.e. all calls with the same pair of ``(port, challenge_type)`` will reuse the same server. :param int port: Port to run the server on. :param challenge_type: Subclass of `acme.challenges.Challenge`, currently only `acme.challenge.HTTP01`. :param str listenaddr: (optional) The address to listen on. Defaults to all addrs. :returns: DualNetworkedServers instance. :rtype: ACMEServerMixin Nr) rHTTP01AssertionErrorracme_standaloneZHTTP01DualNetworkedServersrsocketerrorr StandaloneBindError serve_forever getsocknames)rportZchallenge_type listenaddraddressserversrZ real_portrrrrun1s   zServerManager.runcCsB|j|}|D]}tjd|ddq||j|=dS)zWStop ACME server running on the specified ``port``. :param int port: Stopping server at %s:%d...N)r()rr"loggerdebugZshutdown_and_server_close)rr#instanceZsocknamerrrstopTs   zServerManager.stopcCs |jS)zReturn all running instances. Once the server is stopped using `stop`, it will not be returned. :returns: Mapping from ``port`` to ``servers``. :rtype: tuple )rcopyrrrrrunningas zServerManager.runningN)r)__name__ __module__ __qualname____doc__rr'r-r0rrrrrs   # rcspeZdZdZdZfddZeddZddZd d Z d d Z d dZ ddZ ddZ ddZddZZS) AuthenticatoraStandalone Authenticator. This authenticator creates its own ephemeral TCP listener on the necessary port in order to respond to incoming http-01 challenges from the certificate authority. Therefore, it does not rely on any existing server program. zSpin up a temporary webservercs@tt|j||tt|_i|_t|_t |j|j|_ dSr) superr5r collections defaultdictsetservedrrrr&)rargskwargs __class__rrr{s  zAuthenticator.__init__cCsdSrr)clsaddrrradd_parser_argumentssz"Authenticator.add_parser_argumentscCsdS)NzThis authenticator creates its own ephemeral TCP listener on the necessary port in order to respond to incoming http-01 challenges from the certificate authority. Therefore, it does not rely on any existing server program.rr/rrr more_infoszAuthenticator.more_infocCsdSrrr/rrrprepareszAuthenticator.preparecCstjgSr)rr)rdomainrrrget_chall_prefszAuthenticator.get_chall_prefcsfdd|DS)Ncsg|]}|qSr)_try_perform_single).0achallr/rr sz)Authenticator.perform..r)rachallsrr/rperformszAuthenticator.performc Cs@z ||WStjk r8}z t|W5d}~XYqXqdSr)_perform_singler r _handle_perform_error)rrHrrrrrFs z!Authenticator._try_perform_singlecCs"||\}}|j|||Sr)_perform_http_01r:r@)rrHr&responserrrrLszAuthenticator._perform_singlecCsX|jj}|jj}|jj|tj|d}|\}}tj j |j ||d}|j |||fS)N)r$)challrO validation)configZ http01_portZhttp01_addressr&r'rrZresponse_and_validationrZHTTP01RequestHandlerZHTTP01ResourcerPrr@)rrHr#addrr&rOrQresourcerrrrNs  zAuthenticator._perform_http_01cCsd|jD]$\}}|D]}||kr||qq t|jD]\}}|j|s@|j|q@dSr)r:itemsremovesix iteritemsr&r0r-)rrJZunused_serversZserver_achallsrHr#r&rrrcleanups zAuthenticator.cleanup)r1r2r3r4 descriptionr classmethodrArBrCrErKrFrLrNrY __classcell__rrr=rr5ns   r5cCst|jjtjkr"td|jnN|jjtjkrlt j t j }d|j}|j|dddd}|spt|n|dS)NzCould not bind TCP port {0} because you don't have the appropriate permissions (for example, you aren't running this program as root).zCould not bind TCP port {0} because it is already in use by another process on this system (such as a web server). Please stop the program in question and then try again.RetryZCancelF)default) socket_errorr socket_errorsEACCESr Z PluginErrorformatr#Z EADDRINUSEzope componentZ getUtilityrZIDisplayZyesno)rdisplaymsgZ should_retryrrrrMs& rM),r4r7loggingrrr`ZOpenSSLrWZzope.interfacercZacmerrrZacme.magic_typingrrrrr r r Zcertbotr r rZcertbot.pluginsr getLoggerr1r*ZBaseDualNetworkedServersZ"KeyAuthorizationAnnotatedChallengeZ ServedTypeobjectrZ interfaceZ implementerZIAuthenticatorproviderZIPluginFactoryZPluginr5rMrrrrs4   $     O  O