⚝
One Hat Cyber Team
⚝
Your IP:
216.73.216.144
Server IP:
157.245.143.252
Server:
Linux www 6.11.0-9-generic #9-Ubuntu SMP PREEMPT_DYNAMIC Mon Oct 14 13:19:59 UTC 2024 x86_64
Server Software:
nginx/1.26.0
PHP Version:
8.3.11
Buat File
|
Buat Folder
Eksekusi
Dir :
~
/
lib
/
python3
/
dist-packages
/
acme
/
__pycache__
/
View File Name :
client.cpython-312.pyc
M/ey d d Z ddlZddlZddlmZ ddlmZ ddlZddl Z ddl Z ddl m Z ddl m Z ddl mZ ddl mZ ddl mZ dd l mZ dd l mZ dd l mZ ddlZddlZddlZdd lmZ dd lmZ ddl m Z ddl m Z ddl m Z ddl m Z ddl m!Z! ejD e# Z$dZ% G d d Z& G d d Z'y)zACME client API. N) parsedate_tz)Any)cast)List)Mapping)Optional)Set)Tuple)Union) HTTPAdapter)parse_header_links) challenges) crypto_util)errors)jws)messages- c t e Zd ZdZdej ddddfdZdej dej fd Z d ej dej fd Z d7d ej d e ej dej fd Z d8d ej dedej fdZdedej" fdZdej& deej& ej, f fdZ d7dej" de ej0 dej" fdZdej" dej0 dej" fdZdej" dej" fdZ d8dej" dej0 dedej" fdZ d8dej" dej0 dedej" fdZ d e j> d e ddfd Z!defd Z"d e#d!e#dej, fd"Z$d#ej, d$e%de&e% fd%Z'e(d&e%dddej fd' Z)e( d9d#ej, d(e e% d)e e% dej fd* Z*d ej d+ej dej fd,Z+d e#d!e#dej, fd-Z,d ej dej fd.Z-dej& dej& fd/Z. d9d#ej, d0e ej^ d(e e% dej& fd1Z0d2ejb d#e2jf dejh fd3Z5e(d#ej, d4e dej0 fd5 Z6d e j> d e d&e%ddfd6Z7y):ClientV2zuACME client for a v2 API. :ivar messages.Directory directory: :ivar .ClientNetwork net: Client network. directorynet ClientNetworkreturnNc || _ || _ y)zInitialize. :param .messages.Directory directory: Directory Resource :param .ClientNetwork net: Client network. N)r r )selfr r s -/usr/lib/python3/dist-packages/acme/client.py__init__zClientV2.__init__* s # new_accountc | j | j d | }|j dk( r0d|j v r"t j |j d | j | }|| j _ |S )zRegister. :param .NewRegistration new_account: :raises .ConflictError: in case the account already exists :returns: Registration Resource. :rtype: `.RegistrationResource` newAccount Location) _postr status_codeheadersr ConflictError_regr_from_responser account)r r responseregrs r r zClientV2.new_account3 su ::dnn\ :KH 3 &:9I9I+I&&x'7'7 'CD D''1 r r+ c p | j |d | j _ | j j S )zQuery server about registration. :param messages.RegistrationResource regr: Existing Registration Resource. T)_get_v2_accountr r) r r+ s r query_registrationzClientV2.query_registrationF s- //d;xx r updatec | j | }| |j n|}t j di t | }| j || }|| j _ |S )aK Update registration. :param messages.RegistrationResource regr: Registration Resource. :param messages.Registration update: Updated body of the resource. If not provided, body will be taken from `regr`. :returns: Updated Registration Resource. :rtype: `.RegistrationResource` body )r- r3 r UpdateRegistrationdict_send_recv_regrr r) )r r+ r0 r3 updated_regrs r update_registrationz ClientV2.update_registrationR sa ##D) $n&**:T&\:++Dt+< 'r update_bodyc v d | j _ |j j d }| j | j d | }|j d }|j |r-t j j |j n |j | }|| j _ |S )NT)only_return_existingr! r# r3 uri) r r) r3 r0 r$ r r& r Registration from_jsonjson)r r+ r: only_existing_regr* updated_urinew_regrs r r- zClientV2._get_v2_accounth s II , ,$ , G::dnn\ :<MN &&z2 ;;"- %-$9$9$C$CHMMO$T3799#. 0 $r csr_pemc f t j j t j j | }t j | }t j | }g }|D ]6 }|j t j t j | 8 |D ]6 }|j t j t j | 8 t j | }| j | j d | } t j j! | j# } g } | j$ D ]3 } | j | j' | j) | | 5 t j* | | j, j/ d | | S )zRequest a new Order object from the server. :param bytes csr_pem: A CSR in PEM format. :returns: The newly created order. :rtype: OrderResource )typvalue) identifiersnewOrderr> r# )r3 r> authorizationsrE )OpenSSLcryptoload_certificate_request FILETYPE_PEMr _pyopenssl_cert_or_req_all_names _pyopenssl_cert_or_req_san_ipappendr IdentifierIDENTIFIER_FQDN IDENTIFIER_IPNewOrderr$ r Orderr@ rA rL _authzr_from_response _post_as_get OrderResourcer& get) r rE csrdnsNamesipNamesrI nameipsorderr* r3 rL urls r new_orderzClientV2.new_ordert sb nn55gnn6Q6QSZ[ ??D ;;C@ D x 2 2x7O7O C x 2 2x7M7M !!k:::dnnZ 8%@~~'' 8 &&C ! !$"<"<T=N=Ns=SY\"<"] ^ '%% $$Z0) r authzrc | j |j }| j ||j j |j }||fS )a Poll Authorization Resource for status. :param authzr: Authorization Resource :type authzr: `.AuthorizationResource` :returns: Updated Authorization Resource and HTTP response. :rtype: (`.AuthorizationResource`, `requests.Response`) )rZ r> rY r3 identifier)r re r* updated_authzrs r pollz ClientV2.poll sH $$VZZ0 33 fkk,,fjj: x''r orderrdeadlinec |5t j j t j d z }| j || }| j || S )ad Poll authorizations and finalize the order. If no deadline is provided, this method will timeout after 90 seconds. :param messages.OrderResource orderr: order to finalize :param datetime.datetime deadline: when to stop polling and timeout :returns: finalized order :rtype: messages.OrderResource Z seconds)datetimenow timedeltapoll_authorizationsfinalize_order)r rj rk s r poll_and_finalizezClientV2.poll_and_finalize sS ((,,.1C1CB1OOH))&(;""6844r c H g }|j j D ] }t j j |k s%| j | j | | }|j j t j k7 r|j | t j d t j j |k r t | t |j j k rt j g }|D ]c }|j j t j k7 s+|j j D ] }|j" |j | " e |rt j$ | |j' | S )z Poll Order Resource for status.rK )rL )r3 rL rp rq rY rZ statusr STATUS_PENDINGrS timesleeplenr TimeoutError STATUS_VALIDr errorValidationErrorr0 )r rj rk responsesrc re failedchalls r rs z ClientV2.poll_authorizations sF ;;--C##'')H4 33D4E4Ec4JPS3T;;%%)@)@@ $$V, 1 ##'')H4 . y>C : : ; ;%%' ' F{{!!X%:%:: #[[ 3 3E {{. f- 4 ((0 0}}I}66r c t j j t j j |j }t j t j | }| j |j j | }|j t j j |j }|S )a Start the process of finalizing an order. :param messages.OrderResource orderr: order to finalize :param datetime.datetime deadline: when to stop polling and timeout :returns: updated order :rtype: messages.OrderResource )r] r2 )rM rN rO rP rE r CertificateRequestjoseComparableX509r$ r3 finalizer0 rX r@ rA )r rj r] wrapped_csrress r begin_finalizationzClientV2.begin_finalization s nn55 NN ' ' 9 11d6I6I#6NO jj--{; HNN$<$<SXXZ$H I r fetch_alternative_chainsc t j j |k rt j d | j |j }t j j |j }|j t j k( r@|j t j |j t j d |j t j k( r|j" | j |j" }|j% ||j& }|rL| j) |d }|D cg c] }| j | j& } }|j% | }|S t j j |k rt j* c c}w )z Poll an order that has been finalized for its status. If it becomes valid, obtain the certificate. :returns: finalized order (with certificate) :rtype: messages.OrderResource rw zPThe certificate order failed. No further information was provided by the server.)r3 fullchain_pem alternate)alternative_fullchains_pem)rp rq rz r{ rZ r> r rX r@ rA rx STATUS_INVALIDr r IssuanceErrorErrorr~ certificater0 text _get_linksr} ) r rj rk r r* r3 certificate_responsealt_chains_urlsrc alt_chainss r poll_finalizationzClientV2.poll_finalization sh ##%0 JJqM((4H>>++HMMO<D{{h 5 55::) ..tzz:: ll%& & 5 55$:J:J:V'+'8'89I9I'J$ D@T@Y@Y Z+&*oo6JK&XOIX!Y #$"3"3C"8"="= J!Y #]]j] QF # ##%0$ !!## "Zs "Gc J | j | | j ||| S )a{ Finalize an order and obtain a certificate. :param messages.OrderResource orderr: order to finalize :param datetime.datetime deadline: when to stop polling and timeout :param bool fetch_alternative_chains: whether to also fetch alternative certificate chains :returns: finalized order :rtype: messages.OrderResource )r r )r rj rk r s r rt zClientV2.finalize_order s( '%%fh8PQQr certrsnc D | j ||| j d y)a Revoke certificate. :param .ComparableX509 cert: `OpenSSL.crypto.X509` wrapped in `.ComparableX509` :param int rsn: Reason code for certificate revocation. :raises .ClientError: If revocation is unsuccessful. revokeCertN)_revoker )r r r s r revokezClientV2.revoke s T3| <=r c t | j d xrB t | j j d xr | j j j S )zGChecks if ACME server requires External Account Binding authentication.metaexternal_account_required)hasattrr r r r s r r z"ClientV2.external_account_required" sG t~~v. =t~~**,GH=~~""<< =r argskwargsc B |dd dz |dd z } | j |i |S )z Send GET request using the POST-as-GET protocol. :param args: :param kwargs: :return: Nrw N)r$ )r r r new_argss r rZ zClientV2._post_as_get( s5 8g%QR0tzz8.v..r r* relation_typec d|j vrg S t |j d }|D cg c] }d|v rd|v r |d |k( r|d c}S c c}w )z Retrieves all Link URIs of relation_type from the response. :param requests.Response response: The requests HTTP response. :param str relation_type: The relation type to filter by. Linkrelrc )r& r )r r* r linksls r r zClientV2._get_links2 so )) )I"8#3#3F#;<"' L%QA:%1*5]1J %% L L Ls A rc c z t j j |j | j S )aB Retrieves the ACME directory (RFC 8555 section 7.1.1) from the ACME server. :param str url: the URL where the ACME directory is available :param ClientNetwork net: the ClientNetwork to use to make the request :returns: the ACME directory object :rtype: messages.Directory )r Directoryr@ r\ rA )clsrc r s r get_directoryzClientV2.get_directory@ s, !!++CGGCL,=,=,?@@r r> terms_of_servicec d|j v r|j d d }t j t j j |j |j j d| | S )Nzterms-of-servicerc r# )r3 r> r )r r RegistrationResourcer? r@ rA r& r\ )r r* r> r s r r( z ClientV2._regr_from_responseL sk / '~~.@ A% H ,,&&00 A $$Z5 -/ /r r3 c | j |j | }| j ||j |j S )N)r> r )r$ r> r( r )r r+ r3 r* s r r7 zClientV2._send_recv_regrX sB ::dhh- '' $(( ! 2 2 ( 4 4r c |j dt | j d | j j |i |S )zWrapper around self.net.post that adds the newNonce URL. This is used to retry the request in case of a badNonce error. new_nonce_urlnewNonce) setdefaultgetattrr r postr r r s r r$ zClientV2._postf s9 /74>>:+NO txx}}d-f--r c f | j |t j j ddd S )zDeactivate registration. :param messages.RegistrationResource regr: The Registration Resource to be deactivated. :returns: The Registration resource that was deactivated. :rtype: `.RegistrationResource` deactivatedN)rx contact)r9 r r? r@ r. s r deactivate_registrationz ClientV2.deactivate_registrationo s4 ''h.C.C.M.M$ 6/8 9 9r c t j d }| j |j | }| j ||j j |j S )a Deactivate authorization. :param messages.AuthorizationResource authzr: The Authorization resource to be deactivated. :returns: The Authorization resource that was deactivated. :rtype: `.AuthorizationResource` r )rx )r UpdateAuthorizationr$ r> rY r3 rg )r re r3 r* s r deactivate_authorizationz!ClientV2.deactivate_authorization} sP ++=A::fjj$/))( KK " "FJJ0 0r rg c t j t j j |j |j j d| }|.|j j |k7 rt j | |S )Nr# r= ) r AuthorizationResource Authorizationr@ rA r& r\ r3 rg r UnexpectedUpdate)r r* rg r> re s r rY z ClientV2._authzr_from_response ss //''11(--/B $$Z57 !fkk&<&< &J))&1 1 r challbc | j |j | } |j d d }t j |t j j |j }|j |j k7 r t j |j |S # t $ r t j d w xY w)ah Answer challenge. :param challb: Challenge Resource body. :type challb: `.ChallengeBody` :param response: Corresponding Challenge response :type response: `.challenges.ChallengeResponse` :returns: Challenge Resource with updated body. :rtype: `.ChallengeResource` :raises .UnexpectedUpdate: uprc z"up" Link header missing) authzr_urir3 ) r$ r> r KeyErrorr ClientErrorr ChallengeResource ChallengeBodyr@ rA r )r r r* respr challrs r answer_challengezClientV2.answer_challenge s zz&**h/ A D)%0J ++!''11$))+>@ :: #))&**5 5 A$$%?@ @ As B, , C defaultc |j j dt | } t | }t j j t j | z S # t $ ra t | }|O t j |d |d nd }t j |dd |z cY S # t t f$ r Y nw xY w|}Y w xY w)a Compute next `poll` time based on response ``Retry-After`` header. Handles integers and various datestring formats per https://www.w3.org/Protocols/rfc2616/rfc2616-sec14.html#sec14.37 :param requests.Response response: Response from `poll`. :param int default: Default value (in seconds), used when ``Retry-After`` header is not present or invalid. :returns: Time point when next `poll` should be performed. :rtype: `datetime.datetime` z Retry-AfterNr rn ) r& r\ strint ValueErrorr rp rr OverflowErrorrq )r r* r retry_afterro whentz_secss r r zClientV2.retry_after s &&**=#g,G +&G $$&););G)LLL ,D & 0 0T"X=QbWX YG#,,d2Ah7'AA"M2 G s5 A' 'C>6B74C7C CC CCc | j |t j || }|j t j k7 rt j d y)a. Revoke certificate. :param .ComparableX509 cert: `OpenSSL.crypto.X509` wrapped in `.ComparableX509` :param int rsn: Reason code for certificate revocation. :param str url: ACME URL to post to :raises .ClientError: If revocation is unsuccessful. )r reasonz0Successful revocation must return HTTP OK statusN)r$ r Revocationr% http_clientOKr r )r r r rc r* s r r zClientV2._revoke sY ::c & 1 1,0'* ,- ;>> 1$$BD D 2r r )F)NN)8__name__ __module__ __qualname____doc__r r r NewRegistrationr r r/ r r? r9 boolr- bytesr[ rd r r requestsResponseri rp ru rs r r rt r r r r r r rZ r r r classmethodr r( r7 r$ r r rT rY r r ChallengeResponser r r r r4 r r r r # sx ("4"4 ? t x'?'? HDaDa & x'D'D ( = = GK (E(E $,X-B-B$C !)!>!> , H$A$A PT $ 9 9 ! ! 8+A+A ! F(899 (668I8IIJ($ CG5(>(> 5$,X->->$?5KSKaKa5&7(*@*@ 7HL]L] 7!)!7!772)?)? ( 6 6& <A $(>(> $$,$5$5 $48 $ ( 5 5 $B 9>RX%;%; RxGXGX R15RBJBXBXR >4.. >S >T >=4 = /# / /9J9J / L8#4#4 LS LTRUY L A A/ Ah>P>P A A SW>B /8+<+< /8C= /.6sm /!)!>!> / / 4H$A$A 4 & 3 3 48@8U8U 4 .3 .# .(2C2C . 9H,I,I 9%-%B%B 9 0)1)G)G0&.&D&D0$ KO37h.?.? *283F3F*G#+C=<D<Z<Zx'='= #-#?#?DLD^D^: M8#4#4 Ms MxGXGX M M>DD / / Dc D D Dr r c \ e Zd ZdZdZdZdZdZ dej dde fd ej d e e j d ej d ed ededdfdZd$dZdej* dededefdZe d%dej2 de e dej2 fd Zdededededej2 f d Z dededej2 fd Z efdedededej2 fd Z dej2 ddfd Z ded edefd!Z dededej2 fd"Z!efdedej* dededej2 f d#Z"y)&r zvWrapper around requests that signs POSTs for authentication. Also adds user agent, and handles Content-Type. zapplication/jsonzapplication/jose+jsonzapplication/problem+jsonz Replay-NonceNTz acme-pythonkeyr) alg verify_ssl user_agenttimeoutr c , || _ || _ || _ || _ t | _ || _ t j | _ || _ t }| j j d| | j j d| y )Nzhttp://zhttps://) r r) r r set_noncesr r Sessionsession_default_timeoutr mount)r r r) r r r r adapters r r zClientNetwork.__init__ sw $!$ $ '') ' - 9g. :w/r c X | j j y # t $ r Y y w xY wr )r close Exceptionr s r __del__zClientNetwork.__del__ s) LL s ))objnoncerc c |r |j d j nd}t j d| | j ||d}| j | j d |d< | j |d< t j j |fi t t t t f | j d S ) zWrap `JSONDeSerializable` object in JWS. .. todo:: Implement ``acmePath``. :param josepy.JSONDeSerializable obj: :param str url: The URL to which this object will be POSTed :param str nonce: :rtype: str )indentr zJWS payload: %s)r r rc r> kidr ) json_dumpsencodeloggerdebugr r) r r JWSsignr r r r )r r r rc jobjr s r _wrap_in_jwszClientNetwork._wrap_in_jws s 58s~~Q~'..0S '.88 << # LL /F5M u ww||DDDc):F$CDOOWXOYYr r* content_typec |j j d }|r"|j d d j } |j }|j dk( r/t j |j j dd |j s\|E|| j k7 rt j d| t j j | t j$ | |%|| j& k7 rt j d | || j& k( r|t j$ d | |S # t $ r d}Y w xY w# t j" $ r }t j$ ||f d}~ww xY w) a Check response content and its type. .. note:: Checking is not strict: wrong server response ``Content-Type`` HTTP header is ignored if response is an expected JSON object (c.f. Boulder #56). :param str content_type: Expected Content-Type response header. If JSON is expected and not present in server response, this function will raise an error. Otherwise, wrong Content-Type is ignored, but logged. :raises .messages.Error: If server response body carries HTTP Problem (https://datatracker.ietf.org/doc/html/rfc7807). :raises .ClientError: In case of other networking errors. Content-Type;r Ni r# zUNKNOWN-LOCATIONz/Ignoring wrong Content-Type (%r) for JSON Errorz<Ignoring wrong Content-Type (%r) for JSON decodable responsez"Unexpected response Content-Type: )r& r\ splitstriprA r r% r r' okJSON_ERROR_CONTENT_TYPEr r r r r@ r DeserializationErrorr JSON_CONTENT_TYPE)r r* r response_ctr r s r _check_responsez ClientNetwork._check_response1 s{ ( &&**>: %++C0399;K ==?D 3 &&&x'7'7';';JHZ'[\ \{{ #"="==LLI#%@"..22488 ((22 K33H3H$H +- s 4 44 ((+Mk])[\\; D 00 @ ,,h->??@s* E E EEF .FF methodr r c h |dk( rt j d||d nt j d|| | j |d< |j di |d j d| j |j d| j | j j ||g|i |}d |d v r t! j" |j$ } nd|_ |j( } t j d|j* dj- d |j. j1 D | |S # t j j $ rR} d }t j |t | }| |j \ } } } } t d | | d | d }~ww xY w)a Send HTTP request. Makes sure that `verify_ssl` is respected. Logs request and response (with headers). For allowed parameters please see `requests.request`. :param str method: method for the new `requests.Request` object :param str url: URL for the new `requests.Request` object :raises requests.exceptions.RequestException: in case of any problems :returns: HTTP Response :rtype: `requests.Response` POSTz Sending POST request to %s: %sdatazSending %s request to %s.verifyr& z User-Agentr zT.*host='(\S*)'.*Max retries exceeded with url\: (\/\w*).*(\[Errno \d+\])([A-Za-z ]*)Nz Requesting :Acceptzutf-8z!Received response: HTTP %d %s %s c 3 F K | ] \ }}d j || yw)z{0}: {1}N)format).0kvs r <genexpr>z.ClientNetwork._send_request.<locals>.<genexpr> s* F,DDAq * 0 0A 6,Ds !)r r r r r r r requestr exceptionsRequestExceptionrematchr groupsr base64 b64encodecontentencodingr r% joinr& items)r r rc r r r* e err_regexmhostpath_err_noerr_msg debug_contents r _send_requestzClientNetwork._send_requestl s " V LL: vf~ / LL4fc B ??x)R(y$$\4??C)T%:%:; C+t||++FCI$I&IH8 vi( ( " , ,X-=-= >M !(H $MMM < ))YY F,4,<,<,B,B,D F F" $ S ""33 C / pICF+Ay+,88: (D$ {4&ay AB B+ Cs !E F1 A F,,F1c . | j dg|i |S )a Send HEAD request without checking the response. Note, that `_check_response` is not called, as it is expected that status code other than successfully 2xx will be returned, or messages2.Error will be raised by the server. HEAD)r@ r s r headzClientNetwork.head s! "t!!&:4:6::r c L | j | j d|fi || S )z$Send GET request and check response.GETr )r r@ )r rc r r s r r\ zClientNetwork.get s7 ## D uc 4V 4< $ Q Qr c | j |j v rx|j | j } t j j d j | }t j d| | j j | y t j | # t j $ r}t j || d }~ww xY w)Nr zStoring nonce: %s)REPLAY_NONCE_HEADERr& r Header_fieldsdecoder r r BadNoncer r r add MissingNonce)r r* r decoded_noncer s r _add_noncezClientNetwork._add_nonce s # #x'7'7 7 $$T%=%=>E 4 # 2 27 ; B B5 I LL,e 4 LL ] +%%h/ / ,, 4 ooeU33 4s ,B& &C9CCr c | j s\t j d || j | }n"| j | j | d }| j | | j j S )NzRequesting fresh noncerF )r r r rC r rP pop)r rc r r* s r _get_noncezClientNetwork._get_nonce si || LL1 2 $ 99S> // -0HW[/\ OOH %|| !!r c | j |i |S # t j $ rB}|j dk( r-t j d| | j |i |cY d}~S d}~ww xY w)zPOST object wrapped in `.JWS` and check response. If the server responded with a badNonce error, the request will be retried once. badNoncez Retrying request after error: %sN) _post_oncer r coder r )r r r r s r r zClientNetwork.post se "4??D3F3 3~~ zzZ' @%H&t777 s A)6A$ A)#A$$A)c |j dd }| j || j || | }|j dd|i | j d|fd|i|}| j || }| j | |S )Nr r& r r r! rF )rR r rS r r@ r rP )r rc r r r r r! r* s r rV zClientNetwork._post_once s ?D9 dooc=&I3O)nl%CD%4%%fcGGG''|'L !r )r Nr )#r r r r r JOSE_CONTENT_TYPEr rH r RS256DEFAULT_NETWORK_TIMEOUTJWKr r r JWASignaturer r r r r JSONDeSerializabler r r r r r r@ rC r\ rP rS r rV r4 r r r r s +/ 8( Z^*.**#0AX0DHH 0x8U8U/V 0''0BF0 0;>0]a0 Z 7 7 Z Z# ZRU Z2 6:8x'8'8 8&.sm8?G?P?P8 8tEC Ec E# E EQYQbQb EN;# ; ;1B1B ; 1B Qs Q# QQ & / /Q 08#4#4 0 0 "c "# "# " # 1B1B (9c (?(? !$DGLTL]L]r r )(r r2 rp email.utilsr http.clientclientr loggingr/ rz typingr r r r r r r r josepyr rM r requests.adaptersr requests.utilsr acmer r r r r getLoggerr r r[ r r r4 r r <module>ri s $ ! ) - 8 $ ED EDPF Fr