⚝
One Hat Cyber Team
⚝
Your IP:
216.73.216.144
Server IP:
157.245.143.252
Server:
Linux www 6.11.0-9-generic #9-Ubuntu SMP PREEMPT_DYNAMIC Mon Oct 14 13:19:59 UTC 2024 x86_64
Server Software:
nginx/1.26.0
PHP Version:
8.3.11
Buat File
|
Buat Folder
Eksekusi
Dir :
~
/
usr
/
lib
/
python3
/
dist-packages
/
acme
/
__pycache__
/
View File Name :
challenges.cpython-312.pyc
M/eW d Z ddlZddlZddlZddlZddlZddlZddlmZ ddlm Z ddlm Z ddlm Z ddlm Z ddlm Z dd lmZ dd lmZ dd lmZ dd lmZ ddlZdd lmZ ddlmZ ddlZddlmZ ddlmZ ej8 e Z edd Z G d dej@ Z! G d dej@ Z" G d de! Z# G d de! Z$ G d d e" Z% G d d e$ejL Z'e"jP G d d!e% Z)e!jP G d" d#e' Z*e"jP G d$ d%e% Z+e!jP G d& d'e' Z,e"jP G d( d)e% Z-e!jP G d* d+e' Z.e!jP G d, d-e$ Z/e"jP G d. d/e" Z0y)0z&ACME Identifier Validation Challenges. N)Any)cast)Dict)Mapping)Optional)Tuple)Type)TypeVar)Union)hashes)crypto)SSL) crypto_util)errorsGenericChallenge Challenge)boundc t e Zd ZU dZi Zeeed f ed< e dee de ee f de e df f fd Z xZS )r zACME challenge.TYPESclsjobjreturnUnrecognizedChallengec t t t | | S # t j $ r4}t j | t j | cY d }~S d }~ww xY wN) r r super from_jsonjoseUnrecognizedTypeErrorloggerdebugr )r r error __class__s 1/usr/lib/python3/dist-packages/acme/challenges.pyr zChallenge.from_json% sS 9(%'*;D*AB B)) 9 LL (2248 8 9s A')A" A'"A')__name__ __module__ __qualname____doc__r r strr __annotations__ classmethodr r r r r __classcell__r# s @r$ r r sc *,E4T+&& ',9t ,- 9 S)9.34DF]4].^9 9 c R e Zd ZU dZi Zeeed f ed< deee f f fd Z xZ S )ChallengeResponsezACME challenge response.r r c \ t | }|j | j d |S r )r to_partial_jsonpoptype_field_nameselfr r# s r$ r2 z!ChallengeResponse.to_partial_json4 s+ w&( %%t, r. ) r% r& r' r( r r r) r r* r r2 r, r- s @r$ r0 r0 / s9 "24E4T-.. /4c3h r. r0 c e Zd ZU dZeeef ed< deeef ddf fd Z deeef fdZ e deeef dd fd Z xZ S )r al Unrecognized challenge. ACME specification defines a generic framework for challenges and defines some standard challenges that are implemented in this module. However, other implementations (including peers) might define additional challenge types, which should be ignored if unrecognized. :ivar jobj: Original JSON decoded object. r r Nc P t | t j | d| y )Nr )r __init__object __setattr__r5 s r$ r9 z UnrecognizedChallenge.__init__J s 4.r. c | j S r )r r6 s r$ r2 z%UnrecognizedChallenge.to_partial_jsonN s yyr. c | | S r )r r s r$ r z UnrecognizedChallenge.from_jsonQ s 4yr. )r% r& r' r( r r) r r* r r9 r2 r+ r r, r- s @r$ r r < st sCx./WS#X . /4 /c3h WS#X . 3J r. r c e Zd ZU dZdZ ej dej ej ej ed Z e e d< edefd Zy ) _TokenChallengez3Challenge with token. :ivar bytes token: g 0@tokenT)sizeminimum)encoderdecoderr c > d| j vxr d| j vS )zIs `token` good? .. todo:: acme-spec wants "It MUST NOT contain any non-ASCII characters", but it should also warrant that it doesn't contain ".." or "/"... s .. /)rB r= s r$ good_tokenz_TokenChallenge.good_tokene s! DJJ&A4tzz+AAr. N)r% r& r' r( TOKEN_SIZEr fieldencode_b64jose functoolspartialdecode_b64joserB bytesr* propertyboolrI r? r. r$ rA rA V ss J5 4::,,6Gi6G6G j$7@AE5 A BD B Br. rA c e Zd ZU dZ ej d Zeed< e j Z dddej de fdZdeeef f fd Z xZS ) !KeyAuthorizationChallengeResponsez[Response to Challenges based on Key Authorization. :param str key_authorization: keyAuthorizationkey_authorizationchallKeyAuthorizationChallengeaccount_public_keyr c | j j d }t | dk7 r!t j d| j y|d |j d k7 r*t j d|d |j d yt j |j | j j }|d |k7 rt j d |d | yy ) a% Verify the key authorization. :param KeyAuthorization chall: Challenge that corresponds to this response. :param JWK account_public_key: :return: ``True`` iff verification of the key authorization was successful. :rtype: bool . z)Key authorization (%r) is not well formedFr rB z8Mismatching token in key authorization: %r instead of %r hash_function z=Mismatching thumbprint in key authorization: %r instead of %rT) rV splitlenr r! encoder b64encode thumbprintthumbprint_hash_functiondecode)r6 rW rY partsrd s r$ verifyz(KeyAuthorizationChallengeResponse.verify} s &&,,S1 u:? LLD // 1 8u||G, , LL ,-21Xu||G7L N^^$6$A$A 77 %B %9 ::@&( 8z ! LL ,-21Xz Cr. c H t | }|j dd |S )NrU )r r2 r3 r5 s r$ r2 z1KeyAuthorizationChallengeResponse.to_partial_json s$ w&( #T* r. )r% r& r' r( r rK rV r) r* r SHA256re JWKrR rh r r r2 r, r- s @r$ rT rT t se (TZZ(: ;s; %}} 7 TXX Z^ @c3h r. rT c e Zd ZU dZeZeed< eZe e ed< e j Z de j defdZde j de fdZej" de j dedefd Zde j d ededee ef fd Zy ) rX zChallenge based on Key Authorization. :param response_cls: Subclass of `KeyAuthorizationChallengeResponse` that will be used to generate ``response``. :param str typ: type of the challenge typ response_cls account_keyr c | j d dz t j |j | j j z S )zZGenerate Key Authorization. :param JWK account_key: :rtype str: rB r[ r] )rb r rc rd re rf r6 ro s r$ rV z+KeyAuthorizationChallenge.key_authorization sO {{7#c)DNN " " " ; ; # =->>DfhG Gr. c D | j | j | S )zGenerate response to the challenge. :param JWK account_key: :returns: Response (initialized `response_cls`) to the challenge. :rtype: KeyAuthorizationChallengeResponse rV )rn rV rq s r$ responsez"KeyAuthorizationChallenge.response s, " 4 4[ A ! C Cr. kwargsc t )a Generate validation for the challenge. Subclasses must implement this method, but they are likely to return completely different data structures, depending on what's necessary to complete the challenge. Interpretation of that return value must be known to the caller. :param JWK account_key: :returns: Challenge-specific validation. )NotImplementedErrorr6 ro ru s r$ validationz$KeyAuthorizationChallenge.validation s "##r. argsc P | j | | j |g|i |fS )zGenerate response and validation. Convenience function that return results of `response` and `validation`. :param JWK account_key: :rtype: tuple )rt ry )r6 ro rz ru s r$ response_and_validationz1KeyAuthorizationChallenge.response_and_validation s2 k* =d=f=? ?r. N)r% r& r' r( NotImplementedrm r) r* rn r rT re r rk rV rt abcabstractmethodr ry r r| r? r. r$ rX rX s C <JL$89J)BB GTXX G# G CDHH C1R C $dhh $# $# $ $ ?488 ?C ?SV ?%*+Lc+Q%R ?r. rX ) metaclassc @ e Zd ZdZdZdddedej defdZ y ) DNS01Responsez ACME dns-01 challenge response.zdns-01rW DNS01domainrY r c X | j || }|st j d |S )a Simple verify. This method no longer checks DNS records and is a simple wrapper around `KeyAuthorizationChallengeResponse.verify`. :param challenges.DNS01 chall: Corresponding challenge. :param str domain: Domain name being verified. :param JWK account_public_key: Public key for the key pair being authorized. :return: ``True`` iff verification of the key authorization was successful. :rtype: bool 4Verification of key authorization in response failed)rh r r! )r6 rW r rY verifieds r$ simple_verifyzDNS01Response.simple_verify s* ;;u&89 LLO Pr. N) r% r& r' r( rm r) r rk rR r r? r. r$ r r s0 ) C7 C TXX Z^ r. r c j e Zd ZdZeZej ZdZ dej de de fdZ de de fdZ y ) r zACME dns-01 challenge._acme-challengero unused_kwargsr c t j t j | j | j d j j S )SGenerate validation. :param JWK account_key: :rtype: str utf-8)r rc hashlibsha256rV rb digestrf r6 ro r s r$ ry zDNS01.validation sG ~~gnnT-C-C . **0&(44:FH =r. namec $ | j d| S )z{Domain name for TXT validation record. :param str name: Domain name being validated. :rtype: str r[ )LABELr6 r s r$ validation_domain_namez DNS01.validation_domain_name s ** Qtf%%r. N)r% r& r' r( r rn rm r r rk r r) ry r r? r. r$ r r sN L C EC=dhh = = =&3 &3 &r. r c ^ e Zd ZdZdZdZ dZ dddded ej d e e d e d e f d Z y)HTTP01Responsez ACME http-01 challenge response.zhttp-01P z NrW HTTP01r rY porttimeoutr c | j || st j d y|9|| j k7 r*t j d| |dj | z }|j | }t j d|j | t j |d| }d |_ t j d ||j |j |j j! | j" } | j$ | k7 r"t j d | j$ | yy # t j j $ r!}t j d|| Y d}~yd}~ww xY w) a Simple verify. :param challenges.SimpleHTTP chall: Corresponding challenge. :param str domain: Domain name being verified. :param JWK account_public_key: Public key for the key pair being authorized. :param int port: Port used in the validation. :param int timeout: Timeout in seconds. :returns: ``True`` iff validation with the files currently served by the HTTP server is successful. :rtype: bool r FNz4Using non-standard port for http-01 verification: %sz:{0}zVerifying %s at %s...)rh r zUnable to reach %s: %sasciiz Received %s: %s. Headers: %szEKey authorization from response (%r) doesn't match HTTP response (%r)T)rh r r! PORTwarningformaturirm requestsget exceptionsRequestExceptionr" encodingtextheadersrstripWHITESPACE_CUTSETrV ) r6 rW r rY r r r http_responser" challenge_responses r$ r z HTTP01Response.simple_verify/ sG {{5"45 LLO P 1 NNF N fmmD) )Fii ,eii= $LLUG LM ") 3]"'' )>)> @ + / / 6 6t7M7M N ! !%7 7 LL ./3/E/E+ - - ""33 LL13 > s D9 9 E7E22E7)N )r% r& r' r( rm r r r) r rk r intrR r r? r. r$ r r s` * C D "O BD68 6S 6dhh 6 $SM6;>6HL6r. r c e Zd ZdZeZej ZdZ ede fd Z de de fdZ de j dede fd Zy ) r zACME http-01 challenge.z.well-known/acme-challenger c J d| j z dz | j d z S )zQPath (starting with '/') for provisioned resource. :rtype: str /rB ) URI_ROOT_PATHrb r= s r$ pathz HTTP01.pathq s( T'''#- G0DDDr. r c & d|z | j z S )zCreate an URI to the provisioned resource. Forms an URI to the HTTPS server provisioned resource (containing :attr:`~SimpleHTTP.token`). :param str domain: Domain name being verified. :rtype: str zhttp://)r )r6 r s r$ r z HTTP01.uriz s 6!DII--r. ro r c $ | j | S )r rs r s r$ ry zHTTP01.validation s %%k22r. N)r% r& r' r( r rn rm r rQ r) r r r rk r ry r? r. r$ r r h sj !!L C0M< Ec E E .# .# .3dhh 3 3 3r. r c h e Zd ZdZdZdZ dZdZede fd Z dd e d e e j d edee j" e j f fd Z dd e d e e de e de j" fdZd e de j" defdZ dddd e dej. de e j" d e e de e defdZy)TLSALPN01Responsez$ACME tls-alpn-01 challenge response.z tls-alpn-01i s 1.3.6.1.5.5.7.1.30.1s acme-tls/1r c z t j | j j d j S )z*Hash value stored in challenge certificater )r r rV rb r r= s r$ hzTLSALPN01Response.h s- ~~d 4 4 ; ;G DELLNNr. Nr keybitsc 2 |4t j }|j t j | dt j | j d z }t j | j d| }t j ||gd|g |fS )a Generate tls-alpn-01 certificate. :param str domain: Domain verified by the challenge. :param OpenSSL.crypto.PKey key: Optional private key used in certificate generation. If not provided (``None``), then fresh key will be generated. :param int bits: Number of bits for newly generated key. :rtype: `tuple` of `OpenSSL.crypto.X509` and `OpenSSL.crypto.PKey` s DER:hexT)criticalvalue) force_san extensions) r PKey generate_keyTYPE_RSAcodecsrb r X509ExtensionID_PE_ACME_IDENTIFIER_V1r gen_ss_cert)r6 r r r der_valueacme_extensions r$ gen_certzTLSALPN01Response.gen_cert s ;++-C V__d 3fmmDFFE :: --d.K.K7;9N &&sVH3A2BDEHI Ir. hostr c |,t j | }t j d|| | | j }t j |j ||j | j g S )zProbe tls-alpn-01 challenge certificate. :param str domain: domain being validated, required. :param str host: IP address used to probe the certificate. :param int port: Port used to probe the certificate. z%s resolved to %s)r r r alpn_protocols) socket gethostbynamer r! r r probe_snirb ACME_TLS_1_PROTOCOL)r6 r r r s r$ probe_certz TLSALPN01Response.probe_cert sk <''/D LL,fd ; <99D$$$++-d 595M5M4NP Pr. certc t j | }t j d|j d | t | dk7 s$|d j |j k7 ryt |j D ]G }|j | }|j dk( s(|j }|| j k( c S y)a Verify tls-alpn-01 challenge certificate. :param str domain: Domain name being validated. :param OpensSSL.crypto.X509 cert: Challenge certificate. :returns: Whether the certificate was successfully verified. :rtype: bool zCertificate %s. SANs: %sr r_ r Fs UNDEF) r _pyopenssl_cert_or_req_all_namesr r! r ra lowerrangeget_extension_count get_extensionget_short_nameget_datar )r6 r r namesiextdatas r$ verify_certz TLSALPN01Response.verify_cert s <<TB /[[*E 3 u:?eAhnn .&,,. @t//12A$$Q'C !!#x/||~tvv~% 3 r. rW TLSALPN01rY c $ | j || st j d y| | j ||| }| j || S # t j $ r*}t j t | d Y d}~yd}~ww xY w)a Simple verify. Verify ``validation`` using ``account_public_key``, optionally probe tls-alpn-01 certificate and check using `verify_cert`. :param .challenges.TLSALPN01 chall: Corresponding challenge. :param str domain: Domain name being validated. :param JWK account_public_key: :param OpenSSL.crypto.X509 cert: Optional certificate. If not provided (``None``) certificate will be retrieved using `probe_cert`. :param string host: IP address used to probe the certificate. :param int port: Port used to probe the certificate. :returns: ``True`` if and only if client's control of the domain has been verified. :rtype: bool r FN)r r r T)exc_info)rh r r! r r Errorr) r )r6 rW r rY r r r r" s r$ r z TLSALPN01Response.simple_verify s , {{5"45 LLO P < f4dK -- << SZ$ 7 s A B% B B)Ni )NN)NNN)r% r& r' r( rm r r r rQ rP r r) r r r r r X509r r rR r r rk r r? r. r$ r r s7 . C D 7 ' O5 O OIs I&++)> IS IFKK 45I0 =A)-P PHSM P!# P28++P$# V[[ T > QU,0!.; !. !.QUQYQY !. $V[[ 1!.@H !. $SM!.59!.r. r c e Zd ZdZeZej Zdej de de e j e j f fdZedefd Zy)r zACME tls-alpn-01 challenge.ro ru r c t t | j | j |j d t t |j d S )a Generate validation. :param JWK account_key: :param str domain: Domain verified by the challenge. :param OpenSSL.crypto.PKey cert_key: Optional private key used in certificate generation. If not provided (``None``), then fresh key will be generated. :rtype: `tuple` of `OpenSSL.crypto.X509` and `OpenSSL.crypto.PKey` cert_keyr )r r )r r rt r r r) rx s r$ ry zTLSALPN01.validation sM %t}}['ABKK :&VZZ 12 L 4 4r. c n t t j d xr t t j d S )ai Check if TLS-ALPN-01 challenge is supported on this machine. This implies that a recent version of OpenSSL is installed (>= 1.0.2), or a recent cryptography version shipped with the OpenSSL library is installed. :returns: ``True`` if TLS-ALPN-01 is supported on this machine, ``False`` otherwise. :rtype: bool set_alpn_protosset_alpn_select_callback)hasattrr ConnectionContextr? r. r$ is_supportedzTLSALPN01.is_supported( s. (9: ECKK)CD Fr. N)r% r& r' r( r rn rm r rk r r r r r ry staticmethodrR r r? r. r$ r r sf %$L C4dhh 4# 4% U[U`U`H`Ba 4" F$ F Fr. r c e Zd ZdZdZdZ ej fdej dej de dej fdZ d ej d ej de fd Zdej de dd fd ZdedefdZy)DNSzACME "dns" challenge.dnsr ro algru r c t j j d| j d j d ||d|S )zGenerate validation. :param .JWK account_key: Private account key. :param .JWA alg: :returns: This challenge wrapped in `.JWS` :rtype: .JWS T) sort_keysr )payloadr r r? )r JWSsign json_dumpsrb )r6 ro r ru s r$ gen_validationzDNS.gen_validation? sD xx}} 0OOdO3::7C0(.0 0r. ry rY c |j | sy | | j |j j d k( S # t j $ r }t j d| Y d}~yd}~ww xY w)zwCheck validation. :param JWS validation: :param JWK account_public_key: :rtype: bool )r Fr z&Checking validation for DNS failed: %sN)rh json_loadsr rf r DeserializationErrorr r! )r6 ry rY r" s r$ check_validationzDNS.check_validationN sr %7 8 4??""))'2 4 4 4(( LLA5 I s ,A A5A00A5 DNSResponsec < t | j |fi | S )zGenerate response. :param .JWK account_key: Private account key. :param .JWA alg: :rtype: DNSResponse )ry )r r rx s r$ gen_responsezDNS.gen_response_ s" &9d&9&9+&P&PQQr. r c : dj | j | S )zgDomain name for TXT validation record. :param str name: Domain name being validated. z{0}.{1})r r r s r$ r zDNS.validation_domain_namej s D11r. N)r% r& r' r( rm r r RS256rk JWASignaturer r r rR r r r) r r? r. r$ r r 7 s C ECMQZZ 0$(( 09J9J 0!$ 0)- 0 488 VZ " R RC RM R23 23 2r. r c e Zd ZU dZdZ ej dej j Z ej e d< dddej de fd Z y ) r z@ACME "dns" challenge response. :param JWS validation: r ry )rF rW r rY r c : |j | j | S )z~Check validation. :param challenges.DNS chall: :param JWK account_public_key: :rtype: bool )r ry )r6 rW rY s r$ r z DNSResponse.check_validation~ s %%doo7IJJr. N)r% r& r' r( rm r rK r r ry r* rk rR r r? r. r$ r r s sU C%4::lDHH<N<NOJO Ke K Kd Kr. r )1r( r~ r rM r loggingr typingr r r r r r r r r cryptography.hazmat.primitivesr josepyr OpenSSLr r r acmer r getLoggerr% r r TypedJSONObjectWithFieldsr r0 r rA rT ABCMetarX registerr r r r r r r r r? r. r$ <module>r s , 1 8 $-[A 9.. 9 66 I 4Bi B<,(9 ,d>?3;; >?B 5 4 & % & &8 E6 E EP $3 & $3 $3N }.9 }. }.@ "F) "F "FJ 82/ 82 82v K# K Kr.