�
�Udac @` s d d l m Z m Z m Z e Z d d l Z d d l Z d d l Z d d l Z d d l
Z
d d l Z d d l Z d d l
Z
d d l Z d d l Z d d l Z d d l Z d d l m Z m Z m Z d d l m Z d d l m Z d d l m Z y� d d l Z d d l Z d d l Z d d l Z d d l! Z d d l" Z d d l# Z d d l$ Z d d l% Z d d l& Z d d l' m( Z( e j) Z* e( e* � e( d � k a+ t+ r�e j, j- j. � Z/ n Wn e0 k
r�Z1 e2 a+ n Xd e0 f d
� � YZ3 d � Z4 d d
� Z5 d � Z6 d � Z7 e8 e8 d � Z9 d � Z: e j; d d k rhd � Z< d � Z= d � Z> n d � Z< d � Z= d � Z> e8 e8 d � Z? d � Z@ e2 eA eA d � ZB d eC f d � � YZD d eC f d � � YZE d � ZF d! � ZG d" � ZH e8 d# � ZI d$ � ZJ d% � ZK d S(& i ( t absolute_importt divisiont print_functionN( t to_nativet to_textt to_bytes( t fetch_url( t ipaddress( t unquote( t LooseVersions 1.5t ModuleFailExceptionc B` s e Z d Z d � Z d � Z RS( s_
If raised, module.fail_json() will be called with the given parameters after cleanup.
c K` s/ t t | � j | | � | | _ | | _ d S( N( t superR
t __init__t msgt module_fail_args( t selfR
t args( ( s= /usr/lib/python2.7/site-packages/ansible/module_utils/acme.pyR ; s c K` s# | j d | j d | j | � d S( NR
t other( t fail_jsonR
R ( R t modulet arguments( ( s= /usr/lib/python2.7/site-packages/ansible/module_utils/acme.pyt do_fail@ s ( t __name__t
__module__t __doc__R R ( ( ( s= /usr/lib/python2.7/site-packages/ansible/module_utils/acme.pyR
7 s c C` s" t j | � j d � j d d � S( Nt utf8t =t ( t base64t urlsafe_b64encodet decodet replace( t data( ( s= /usr/lib/python2.7/site-packages/ansible/module_utils/acme.pyt nopad_b64D s t bc C` s\ y* t | d | � � } | j � SWd QXWn+ t k
rW } t d j | | � � � n Xd S( Nt rs# Error while reading file "{0}": {1}( t opent readt ExceptionR
t format( t fnt modet ft e( ( s= /usr/lib/python2.7/site-packages/ansible/module_utils/acme.pyt read_fileH s
c C` s� t } t j d t � \ } } t j | d � } y | j | � Wnf t k
r� } y | j � Wn t k
rv } n Xt j | � t d t
| � d t j � �� n X| j � d } d }
t j j | � s y t j | � Wn t k
r� } n Xt d | � � n t j | t j � sAt j | � t d | � � n | j | � } t j j | � r�t j | t j � s�t j | � t d | � � n t j | t j � s�t j | � t d | � � n | j | � }
nM t j j | � p�d } t j | t j � s+t j | � t d
| � � n | |
k r�y t j | | � t } Wq�t k
r�} t j | � t d | | t
| � f d t j � �� q�Xn t j | � | S(
sV
Write content to destination file dest, only if the content
has changed.
t textt wbs+ failed to create temporary content file: %st exceptions Source %s does not exists Source %s not readables Destination %s not writables Destination %s not readablet .s Destination dir %s not writables failed to copy %s to %s: %sN( t Falset tempfilet mkstempt ost fdopent writeR& t closet removeR
R t tracebackt
format_exct Nonet patht existst accesst R_OKt sha1t W_OKt dirnamet shutilt copyfilet True( R t destt contentt changedt fdt tmpsrcR* t errt dummyt checksum_srct
checksum_destRB ( ( s= /usr/lib/python2.7/site-packages/ansible/module_utils/acme.pyt
write_fileQ s\
&
2
c C` s� g } yu t | d � �` } d } xP | D]H } | j d � r] | d 7} | d k r( Pq( q( n | j | j � � q( WWd QXWn= t k
r� } t d j | t | � � d t j � �� n Xt
j d j | � � S(
ss
Load PEM file, and convert to DER.
If PEM contains multiple entities, the first entity will be used.
t rti s -----i i Ns cannot load PEM file {0}: {1}R/ R (
R$ t
startswitht appendt stripR& R
R' R R9 R: R t b64decodet join( t pem_filenamet certificate_linesR* t header_line_countt lineRK ( ( s= /usr/lib/python2.7/site-packages/ansible/module_utils/acme.pyt
pem_to_der� s
!.c
C` s� | d k r� t j � \ } } | j | � t j | d � } y | j | j d � � | } WnY t k
r� } y | j � Wn t k
r� } n Xt
d t | � d t j
� �� n X| j � n d } t | d � �O } xE | D]= }
t j d |
� } | d k r� | j d � j � } Pq� q� WWd QX| d k rAd } n | dC k r[d | i f S| | d | d
d g } | j | d t �\ } }
} | d k r�t j d t |
d d �t j t j B� j � \ } } d j t | � � } t | � d r d j | � } n d i | d 6d d 6d d 6i d d 6t t j | j d � � � d 6t t j t j d d | � j d � � � d 6d 6d! d" 6f S| d
k r�t j d# t |
d d �t j t j B� } | d k r�d$ i f St j t j d d | j d � � j d � � } | j d � j � } | j d% � rB| j d% � j � n d } | d& k s`| d' k r�d( } d) } d! } d* } d+ } n� | d, k s�| d- k r�d. } d/ } d0 } d1 } d2 } nM | d3 k s�| d4 k r�d5 } d6 } d7 } d8 } d9 } n d: | | f i f S| d; d< } t | � d | k r?d= | | f i f Sd i | d 6d
d 6| d 6i d> d 6| d? 6t | | � d@ 6t | | � dA 6d 6| d" 6| dB 6f Sd S(D sj
Parses an RSA or Elliptic Curve key file in PEM format and returns a pair
(error, key_data).
R. s utf-8s+ failed to create temporary content file: %sR/ RP s2 ^\s*-{5,}BEGIN\s+(EC|RSA)\s+PRIVATE\s+KEY-{5,}\s*$i Nt rsat ecs unknown key type "%s"s -ins -noouts -textt check_rcs: modulus:\n\s+00:([a-f0-9\:\s]+?)\npublicExponent: ([0-9]+)t errorst surrogate_or_stricts {0:x}i s 0{0}t key_filet typet RS256t algt RSAt ktyR+ s (\s|:)R t nt jwkt sha256t hashsH pub:\s*\n\s+04:([a-f0-9\:\s]+?)\nASN1 OID: (\S+)(?:\nNIST CURVE: (\S+))?s cannot parse elliptic curve keyi t
prime256v1s p-256i t ES256i s P-256t secp384r1s p-384i� t ES384t sha384i0 s P-384t secp521r1s p-521i t ES512t sha512iB s P-521s unknown elliptic curve: %s / %si i s" bad elliptic curve point (%s / %s)t ECt crvt xt yt
point_size( s rsas ec(! R; R2 R3 t add_cleanup_fileR4 R5 R6 t encodeR& R7 R
R R9 R: R$ t ret matcht groupt lowert run_commandRE t searchR t MULTILINEt DOTALLt groupsR' t intt lenR! t binasciit unhexlifyt sub( t openssl_binaryR R` t key_contentRI RJ R* RK RL t account_key_typeRY t mt openssl_keydump_cmdt outt pub_hext pub_expt pub_datat asn1_oid_curvet
nist_curvet bitsRc t hashalgRv t curvet num_bytes( ( s= /usr/lib/python2.7/site-packages/ansible/module_utils/acme.pyt _parse_key_openssl� s�
&
. 2 "
0* c C` s� | d d j | d � d | d g } d j | | � j d � } | j | d | d t d
t �\ } } } | d d k r�| j | d
d d g d | d
t �\ } } } d | d }
t j d |
t | d d �� } t | � d k rt d j t | d d �� � � n |
t | d � d | d | d <|
t | d � d | d | d <t j
| d � t j
| d � } n i | d 6| d 6t t | � � d 6S( Nt dgsts -{0}Ri s -signR` s {0}.{1}R R R] t binary_dataRa R\ t asn1parses -informt DERi Rv s% prim:\s+INTEGER\s+:([0-9A-F]{1,%s})\nR^ R_ sI failed to generate Elliptic Curve signature; cannot parse DER output: {0}i t 0i t protectedt payloadt signature(
R' Rx R} RE Ry t findallR R� R
R� R� R! R ( R� R t payload64t protected64t key_datat openssl_sign_cmdt sign_payloadRL R� t der_outt expected_lent sig( ( s= /usr/lib/python2.7/site-packages/ansible/module_utils/acme.pyt _sign_request_openssl s, &*$$'i c C` s" | d k r | j � d d Sd S( Ni i i ( t
bit_length( Rf ( ( s= /usr/lib/python2.7/site-packages/ansible/module_utils/acme.pyt _count_bytes- s c C` s | j | d d �S( Nt byteordert big( R ( t countt no( ( s= /usr/lib/python2.7/site-packages/ansible/module_utils/acme.pyt _convert_int_to_bytes0 s c C` sA t | � d } t | � | k r= d | t | � | } n | S( Ni R� ( t hexR� ( Rf t digitst res( ( s= /usr/lib/python2.7/site-packages/ansible/module_utils/acme.pyt _pad_hex3 s c C` s, | d k r d Sd | } t | � d d S( Ni s %xi i ( R� ( Rf t h( ( s= /usr/lib/python2.7/site-packages/ansible/module_utils/acme.pyR� : s
c C` s^ d | } t | � d | k r; t d j | | � � � n d d | t | � | j d � S( Ns %xi s% Number {1} needs more than {0} bytes!R� R� ( R� R& R' R ( R� Rf R� ( ( s= /usr/lib/python2.7/site-packages/ansible/module_utils/acme.pyR� @ s
c C` s; d | } t | � | k r7 d | t | � | } n | S( Ns %xR� ( R� ( Rf R� R� ( ( s= /usr/lib/python2.7/site-packages/ansible/module_utils/acme.pyR� F s
c C` s� | d+ k r t | � } n t | � } y( t j j j j | d d+ d t �} Wn# t k
rt } d j
| � d+ f SXt | t j j j j
j � r | j � j � } d+ i | d 6d d 6d d 6i d d
6t t t | j � | j � � d 6t t t | j � | j � � d 6d
6d d 6f St | t j j j j j � r�| j � j � } | j j d k r�d } d } d } d } d }
n | j j d k r�d } d } d } d } d }
nL | j j d k r�d } d } d } d } d }
n d! j
| j j � i f S| d" d# } d+ i | d 6d$ d 6| d 6i d% d
6|
d& 6t t | | j � � d' 6t t | | j � � d( 6d
6| d 6| d) 6f Sd* j
t | � � i f Sd+ S(, sj
Parses an RSA or Elliptic Curve key file in PEM format and returns a pair
(error, key_data).
t passwordt backends error while loading key: {0}t key_objR[ Ra Rb Rc Rd Re R+ Rf Rg Rh Ri t secp256r1i Rk i s P-256Rl i� Rm Rn i0 s P-384Ro i Rp Rq iB s P-521s unknown elliptic curve: {0}i i R\ Rr Rs Rt Ru Rv s unknown key type "{0}"N( R; R, R t cryptographyt hazmatt
primitivest
serializationt load_pem_private_keyt _cryptography_backendR& R' t
isinstancet
asymmetricR[ t
RSAPrivateKeyt
public_keyt public_numbersR! R� R� R+ Rf R\ t EllipticCurvePrivateKeyR� t nameRt Ru Ra ( R R` R� t keyR+ t pkR� Rc R� Rv R� R� ( ( s= /usr/lib/python2.7/site-packages/ansible/module_utils/acme.pyt _parse_key_cryptographyM sh ( "& c
C` s� d j | | � j d � } t | d t j j j j j � r� t j j j j j
� } t j j j j } | d j
| | | � � } n-t | d t j j j j j � r�| d d k r� t j j j j } nJ | d d k r� t j j j j } n% | d d k rt j j j j } n t j j j j j | � � } t j j j j j | d j
| | � � \ } }
t | d | d � } t |
d | d � } t j | � t j | � } n i | d
6| d 6t | � d 6S(
Ns {0}.{1}R R� Ri Rh Rn Rq i Rv R� R� R� ( R' Rx R� R� R� R� R� R[ R� t paddingt PKCS1v15t hashest SHA256t signR\ R� t SHA384t SHA512t ECDSAt utilst decode_dss_signatureR� R� R� R! (
R R� R� R� R� R� R� R� t ecdsaR# t st rrt ss( ( s= /usr/lib/python2.7/site-packages/ansible/module_utils/acme.pyt _sign_request_cryptography� s* " " 1 c C` s� | d d k r4 t d d | d | d f � � n d | d k oO d k n r[ | s� d | d k ov d k n r� | s� | d d k r� | r� t d j | d | d | � � � n d S(
Nt statusi R
s Failure downloading %s, %st urli, i� i� s3 ACME request failed: CODE: {0} MGS: {1} RESULT: {2}( R
R' ( t responset infot allow_redirectt allow_client_errort allow_server_error( ( s= /usr/lib/python2.7/site-packages/ansible/module_utils/acme.pyt _assert_fetch_url_success� s $''t
ACMEDirectoryc B` s, e Z d Z d � Z d � Z d d � Z RS( s5
The ACME server directory. Gives access to the available resources,
and allows to obtain a Replay-Nonce. The acme_directory URL
needs to support unauthenticated GET requests; ACME endpoints
requiring authentication are not supported.
https://tools.ietf.org/html/rfc8555#section-7.1.1
c C` s� | | _ | j d | _ | j d | _ | j | j d t �\ | _ } | j d k r� x/ d D]$ } | | j k r` t d � � q` q` Wn | j d k r� x/ d D]$ } | | j k r� t d
� � q� q� Wn d S( Nt acme_directoryt acme_versiont get_onlyi s new-regs new-authzs new-certs7 ACME directory does not seem to follow protocol ACME v1i t newNoncet
newAccountt newOrders7 ACME directory does not seem to follow protocol ACME v2( s new-regs new-authzs new-cert( R� R� R� ( R t paramst directory_roott versiont get_requestRE t directoryR
( R R t accountRL R� ( ( s= /usr/lib/python2.7/site-packages/ansible/module_utils/acme.pyR � s !
c C` s | j | S( N( R� ( R R� ( ( s= /usr/lib/python2.7/site-packages/ansible/module_utils/acme.pyt __getitem__� s c C` s� | j d k r | j n
| j d } | d k r: | } n t | j | d d �\ } } | d d
k r� t d j | d � � � n | d S( Ni R� t methodt HEADR� i� i� s* Failed to get replay-nonce, got status {0}s replay-nonce( i� i� ( R� R� R� R; R R R
R' ( R t resourceR� RL R� ( ( s= /usr/lib/python2.7/site-packages/ansible/module_utils/acme.pyt get_nonce� s % N( R R R R R� R; R� ( ( ( s= /usr/lib/python2.7/site-packages/ansible/module_utils/acme.pyR� � s t ACMEAccountc B` s� e Z d Z d � Z d � Z d
d
d � Z e d � Z d
d � Z d
d
e e d � Z
e d
e e d � Z d � Z
d
d
e e d � Z d
� Z d
d
e e e d � Z d
d � Z RS( s�
ACME account object. Handles the authorized communication with the
ACME server. Provides access to account bound information like
the currently active authorizations and valid certificates
c C` s0 t | _ | | _ | j d | _ | j d | _ | j d | _ | j j d � pW d | _ | j
d t � | _ | j d k s� | j d k r| j
| j | j � \ } | _ | r� t d | � � n | j d | _ i | j d d 6| j d 6| _ | j r| j | j � qn t | | � | _ d S( NR� t account_key_srct account_key_contentt account_urit openssls# error while parsing account key: %sRg Rc ( R1 t _debugR R� R� R� R� t getR; t urit get_bin_pathRE t _openssl_bint parse_keyR� R
Rg t
jws_headert set_account_uriR� R� ( R R t error( ( s= /usr/lib/python2.7/site-packages/ansible/module_utils/acme.pyR � s$ ! c C` sR t j | j d t d d �} t t j | j d � � j � � } d j | | � S( s{
Returns the key authorization for the given token
https://tools.ietf.org/html/rfc8555#section-8.1
t sort_keyst
separatorst ,t :R s {0}.{1}( R R (
t jsont dumpsRg RE R! t hashlibRh Rx t digestR' ( R t tokent accountkey_jsont
thumbprint( ( s= /usr/lib/python2.7/site-packages/ansible/module_utils/acme.pyt get_keyauthorization s $c C` s] | d k r' | d k r' t d � � n t r@ t | j | | � St | j | j | | � Sd S( sv
Parses an RSA or Elliptic Curve key file in PEM format and returns a pair
(error, key_data).
s2 One of key_file and key_content must be specified!N( R; t AssertionErrort HAS_CURRENT_CRYPTOGRAPHYR� R R� R� ( R R` R� ( ( s= /usr/lib/python2.7/site-packages/ansible/module_utils/acme.pyR�
s
c C` s� yp | d k r d } n6 | r< | j j | � j d � } n t t | � � } t | j j | � j d � � } Wn( t k
r� } t d j | � � � n Xt r� t
| j | | | � St | j | j | | | � Sd S( NR R s/ Failed to encode payload / headers as JSON: {0}(
R; R t jsonifyRx R! R R& R
R' R
R� R� R� ( R R� R� R� t encode_payloadR� R� R+ ( ( s= /usr/lib/python2.7/site-packages/ansible/module_utils/acme.pyt sign_request s %c C` s� | j r� t d d � �~ } | j d j t j j � j d � | � j d � � | d
k r� | j d j t j
| d d d t �� j d � � n Wd
QXn d
S( sF
Write arguments to acme.log when logging is enabled.
s acme.logt abs
[{0}] {1}
s %Y-%m-%d %H:%M:%S.%ss utf-8s {0}
t indenti R N( R� R$ R6 R' t datetimet nowt strftimeRx R; R R RE ( R R
R R* ( ( s= /usr/lib/python2.7/site-packages/ansible/module_utils/acme.pyt _log, s
4 c C` s� | p | j } | p | j } d } x�t r�t j | � } | j j � | d <| j d k rk | | d <n | j d | � | j d | � | j d | � | j | | | d | �} | j d k r | j � | d <x3 | j
� D]" \ }
} | d j |
d � } q� Wn | j d
| � | j
j | � } i d d 6}
t | j
| d
| d |
d d �\ } } t | | � i } y | j � } Wn# t k
r�| j d d � } n X| s�| r�| r�| d j d � s�d | d k o�d k n r�y� | j
j | j d � � } | j d | � d | d k o<d k n rr| j d � d k rr| d k rr| d 7} w' n | r�| } n | } Wq�t k
r�t d j | | � � � q�Xq�| } n | | f SWd S( s#
Sends a JWS signed HTTP POST request to the ACME server and returns
the response as dictionary
https://tools.ietf.org/html/rfc8555#section-6.2
If payload is None, a POST-as-GET is performed.
(https://tools.ietf.org/html/rfc8555#section-6.3)
i t noncei R� t URLR� R� R t headers signed requests application/jose+jsons Content-TypeR t headersR� t POSTt bodys content-types application/jsoni� R� iX R s
parsed resultRa s# urn:ietf:params:acme:error:badNoncei s* Failed to parse the ACME response: {0} {1}N( R� R� RE t copyt deepcopyR� R� R� R R t itemst popR; R R R R� R% t AttributeErrorRQ t from_jsonR R� t
ValueErrorR
R' ( R R� R� R� R� t parse_json_resultR t failed_triesR� R t kt vt hvR t respR� t resultRG t decoded_result( ( s= /usr/lib/python2.7/site-packages/ansible/module_utils/acme.pyt send_signed_request6 sX
*
9
c
C` s� | rP | j d k rP | j | d d t �\ } } | d d k rV t } qV n t } | r� t | j | d d d | �\ } } t | | � y | j � } Wq� t k
r� | j
d d � } q� Xn | rEi } | rK| d j d
� r9y | j j | j
d � � } Wq?t k
r5t d j | | � � � q?XqB| } qKn | } | r�| d d
k sq| d d k r�t d j | d | � � � n | | f S( s�
Perform a GET-like request. Will try POST-as-GET for ACMEv2, with fallback
to GET if server replies with a status code of 405.
i R$ R� i� R� t GETR R s content-types application/jsonR s* Failed to parse the ACME response: {0} {1}i� i� s* ACME request failed: CODE: {0} RESULT: {1}N( R� R, R; R1 RE R R R� R% R! R RQ R" R R# R
R' (
R R� R$ R R� t
fail_on_errorRG R� R) R* ( ( s= /usr/lib/python2.7/site-packages/ansible/module_utils/acme.pyR� u s2 $
& c C` s? | | _ | j d k r; | j j d � | j | j d <n d S( sg
Set account URI. For ACME v2, it needs to be used to sending signed
requests.
i Rg t kidN( R� R� R� R ( R R� ( ( s= /usr/lib/python2.7/site-packages/ansible/module_utils/acme.pyR� � s c
C` sE | p g } | j d k rg i d d 6| d 6} | rB | | d <n | j d d | d <| j d } n@ i | d 6} | s� t | d <n | r� t | d <n | j d
} | j | | � \ } } | d | j d k r� d d
g n d
g k rd | k r
| j | d � n t | f S| d | j d k r3d n d k r�| j d � d k rp| sat d f St d � � n d | k r�| j | d � n t | f S| d d k r�| d d k r�| r�t d f S| d d k r%| d d k r%d | j d � p d k r%| st d f St d � � n t d j | d | � � � d S( s�
Registers a new ACME account. Returns a pair ``(created, data)``.
Here, ``created`` is ``True`` if the account was created and
``False`` if it already existed (e.g. it was not newly created),
or does not exist. In case the account was created or exists,
``data`` contains the account data; otherwise, it is ``None``.
https://tools.ietf.org/html/rfc8555#section-7.3
i s new-regR� t contactt agreementt metas terms-of-servicet onlyReturnExistingt termsOfServiceAgreedR� R� i� i� t locationi� t deactivateds Account is deactivatedi� Ra s. urn:ietf:params:acme:error:accountDoesNotExisti� s' urn:ietf:params:acme:error:unauthorizedt detailR s Error registering: {0} {1}N(
R� R� RE R, R� R� R1 R; R
R' ( R R0 R1 t terms_agreedt allow_creationt new_regR� R* R� ( ( s= /usr/lib/python2.7/site-packages/ansible/module_utils/acme.pyt _new_reg� sH
.
%
'
;
c C` s` | j d k r t d � � n | j d k r[ i } d | d <| j | j | � \ } } nj d } | j | j | � \ } } | d d k r� | j d � d k r� i } | j | j | � \ } } n | d d k r� | j d � d
k r� d S| d d k r| j d � d k rd S| d d
k s7| d d k r\t d j | d | | j � � � n | S( s�
Retrieve account information. Can only be called when the account
URI is already known (such as after calling setup_account).
Return None if the account was deactivated, or a dict otherwise.
s Account URI unknowni t regR� R� i� Ra s$ urn:ietf:params:acme:error:malformedi� s' urn:ietf:params:acme:error:unauthorizedi� s. urn:ietf:params:acme:error:accountDoesNotExisti� i, s, Error getting account data from {2}: {0} {1}N( i� i� ( i� i� ( R� R; R
R� R, R� R' ( R R R* R� ( ( s= /usr/lib/python2.7/site-packages/ansible/module_utils/acme.pyt get_account_data� s$
% %% %c C` s� | j d k rX t } | j � } | d k r� | rF | rF d | _ qU t d � � q� nq | j | d | d | d | o� | j j �\ } } | j j r� | j d k r� | r� t } i | p� g d 6} n | | f S( s�
Detect or create an account on the ACME server. For ACME v1,
as the only way (without knowing an account URI) to test if an
account exists is to try and create one with the provided account
key, this method will always result in an account being present
(except on error situations). For ACME v2, a new account will
only be created if ``allow_creation`` is set to True.
For ACME v2, ``check_mode`` is fully respected. For ACME v1, the
account might be created if it does not yet exist.
Return a pair ``(created, account_data)``. Here, ``created`` will
be ``True`` in case the account was created or would be created
(check mode). ``account_data`` will be the current account data,
or ``None`` if the account does not exist.
The account URI will be stored in ``self.uri``; if it is ``None``,
the account does not exist.
https://tools.ietf.org/html/rfc8555#section-7.3
s) Account is deactivated or does not exist!R1 R8 R9 R0 N( R� R; R1 R= R
R; R t
check_modeRE ( R R0 R1 R8 R9 t remove_account_uri_if_not_existst createdt account_data( ( s= /usr/lib/python2.7/site-packages/ansible/module_utils/acme.pyt
setup_account s"
!c C` s� i } | d k r= | j d g � | k r= t | � | d <n | sS t t | � f S| j j r{ t | � } | j | � n7 | j d k r� d | d <n | j | j
| � \ } } t | f S( s�
Update an account on the ACME server. Check mode is fully respected.
The current account data must be provided as ``account_data``.
Return a pair ``(updated, account_data)``, where ``updated`` is
``True`` in case something changed (contact info updated) or
would be changed (check mode), and ``account_data`` the updated
account data.
https://tools.ietf.org/html/rfc8555#section-7.3.2
R0 i R< R� N( R; R� t listR1 t dictR R> t updateR� R, R� RE ( R RA R0 t update_requestRL ( ( s= /usr/lib/python2.7/site-packages/ansible/module_utils/acme.pyt update_account> s $
N( R R R R R R; R� RE R R R, R1 R� R� R; R= RB RG ( ( ( s= /usr/lib/python2.7/site-packages/ansible/module_utils/acme.pyR� � s
?,
E /c C` s9 y t t j t | � � j � SWn t k
r4 | SXd S( N( R t compat_ipaddresst
ip_addressR t
compressedR# ( t ip( ( s= /usr/lib/python2.7/site-packages/ansible/module_utils/acme.pyt
_normalize_ip_ s
c
C` s� | d d | d d g } | j | d t �\ } } } t g � } t j d t | d d �� } | d k r� | j d | j d
� f � n t j d t | d d �t j t j
B� } | d k r�x� | j d
� j d � D]� } | j � j
d
� r| j d | d f � q� | j � j
d � rE| j d t | d � f � q� | j � j
d � rz| j d t | d � f � q� t d j | � � � q� Wn | S( s�
Return a set of requested identifiers (CN and SANs) for the CSR.
Each identifier is a pair (type, identifier), where type is either
'dns' or 'ip'.
t reqs -ins -noouts -textR] s Subject:.* CN\s?=\s?([^\s,;/]+)R^ R_ t dnsi s< X509v3 Subject Alternative Name: (?:critical)?\n +([^\n]+)\ns , s dns:i s ip:RK i s ip address:i s& Found unsupported SAN identifier "{0}"N( R} RE t setRy R~ R R; t addR{ R R� t splitR| RQ RL R
R' (
R� R t csr_filenamet openssl_csr_cmdRL R� t identifierst common_namet subject_alt_namest san( ( s= /usr/lib/python2.7/site-packages/ansible/module_utils/acme.pyt openssl_get_csr_identifiersg s& " c C` s- t g � } t j j t | � t � } xE | j D]: } | j t j j j j k r1 | j
d | j f � q1 q1 Wx� | j D]� } | j t j j j
j k ry x� | j D]z } t | t j j � r� | j
d | j f � q� t | t j j � r | j
d | j j f � q� t d j | � � � q� Wqy qy W| S( s�
Return a set of requested identifiers (CN and SANs) for the CSR.
Each identifier is a pair (type, identifier), where type is either
'dns' or 'ip'.
RN RK s$ Found unsupported SAN identifier {0}( RO R� t x509t load_pem_x509_csrR, R� t subjectt oidt NameOIDt COMMON_NAMERP t valuet
extensionst ExtensionOIDt SUBJECT_ALTERNATIVE_NAMER� t DNSNamet IPAddressRJ R
R' ( R RR RT t csrR� t extensionR� ( ( s= /usr/lib/python2.7/site-packages/ansible/module_utils/acme.pyt cryptography_get_csr_identifiers� s c C` s� t j j | � s d Sy t j j t | � t � } Wn+ t k
rb } t d j
| | � � � n X| d k r� t j j
� } n | j | j S( s�
Return the days the certificate in cert_file remains valid and -1
if the file was not found. If cert_file contains more than one
certificate, only the first one will be considered.
i����s! Cannot parse certificate {0}: {1}N( R4 R< R= R� RY t load_pem_x509_certificateR, R� R& R
R' R; R R t not_valid_aftert days( R t cert_fileR t certR+ ( ( s= /usr/lib/python2.7/site-packages/ansible/module_utils/acme.pyt cryptography_get_cert_days� s c C` s� | j d } | d k r nt | d k r1 t a n_ | d k rw y t j Wn# t k
rm } | j d d � n Xt a n | j d d j | � � t r� | j d j t
� � n
| j d � d
S( s�
Sets which crypto backend to use (default: auto detection).
Does not care whether a new enough cryptoraphy is available or not. Must
be called before any real stuff is done which might evaluate
``HAS_CURRENT_CRYPTOGRAPHY``.
t select_crypto_backendt autoR� R� R
s Cannot find cryptography module!s Unknown crypto backend "{0}"!s0 Using cryptography backend (library version {0})s Using OpenSSL binary backendN( R� R1 R
R� t __version__R& R RE R' t debugt CRYPTOGRAPHY_VERSION( R R� RL ( ( s= /usr/lib/python2.7/site-packages/ansible/module_utils/acme.pyt set_crypto_backend� s
c C` sS d | k rO | d } x6 t j d | � D] \ } } | t | � | � q) Wn d S( si
Process link header, calls callback for every link header with the URL and relation as options.
t links <([^>]+)>;\s*rel="(\w+)"N( Ry R� R ( R� t callbackRt R� t relation( ( s= /usr/lib/python2.7/site-packages/ansible/module_utils/acme.pyt
process_links� s
(L t
__future__R R R Ra t
__metaclass__R R� R R R R R4 Ry RC t sysR2 R9 t ansible.module_utils._textR R R t ansible.module_utils.urlsR t ansible.module_utils.compatR RH t+ ansible.module_utils.six.moves.urllib.parseR R� t cryptography.hazmat.backendst, cryptography.hazmat.primitives.serializationt- cryptography.hazmat.primitives.asymmetric.rsat, cryptography.hazmat.primitives.asymmetric.ect1 cryptography.hazmat.primitives.asymmetric.paddingt% cryptography.hazmat.primitives.hashest/ cryptography.hazmat.primitives.asymmetric.utilst cryptography.x509t cryptography.x509.oidt distutils.versionR Rp Rr R
R� t backendst default_backendR� R& RL R1 R
R! R, RO RZ R; R� R� t version_infoR� R� R� R� R� RE R� t objectR� R� RL RX Rg Rm Rs Rw ( ( ( s= /usr/lib/python2.7/site-packages/ansible/module_utils/acme.pyt <module>
sz
: l F
'� �
Anons79 File Manager Version 1.0, Coded By Anons79
Email: [email protected]
Anons79 Mini Shell