U
˜“]D ã @ s„ d Z ddlZddlmZmZ ddlmZ ddlmZ ddlm Z ddl
m Z ddl m
Z
dd lmZ e e¡ZG d
d „ d e jƒZdS ) z3A class that performs HTTP-01 challenges for Apacheé N)ÚListÚSet)Úerrors)Úos)Ú
filesystem)Úcommon)Ú VirtualHost)Ú get_aug_pathc sp e Zd ZdZdZdZdZdZ‡ fdd„Zdd „ Z d
d „ Z
d d
„ Z dd„ Z dd„ Z
dd„ Zdd„ Zdd„ Z‡ ZS )Ú ApacheHttp01zFClass that performs HTTP-01 challenges within the Apache configurator.zn RewriteEngine on
RewriteRule ^/\.well-known/acme-challenge/([A-Za-z0-9-_=]+)$ {0}/$1 [L]
zä
Order Allow,Deny
Allow from all
Order Allow,Deny
Allow from all
zo RewriteEngine on
RewriteRule ^/\.well-known/acme-challenge/([A-Za-z0-9-_=]+)$ {0}/$1 [END]
z´
Require all granted
Require all granted
c sd t t| ƒj||Ž tj | j d¡d¡| _tj | j d¡d¡| _ tj | jj
j d¡| _ t
ƒ | _d S )Nzchallenge-locationz le_http_01_challenge_pre.confz le_http_01_challenge_post.confZhttp_challenges)Úsuperr
Ú__init__r ÚpathÚjoinÚ configuratorÚconfÚchallenge_conf_preÚchallenge_conf_postÚconfigZwork_dirÚ
challenge_dirÚsetÚ moded_vhosts)ÚselfÚargsÚkwargs©Ú __class__© ú8/usr/lib/python3/dist-packages/certbot_apache/http_01.pyr 1 s
þ
þþzApacheHttp01.__init__c C sX | j s
g S | j dd¡ | j t| jjjƒ¡ | ¡ | ¡ }| ¡ | j dd¡ |S )z Perform all HTTP-01 challenges.z Changes before challenge setupTzHTTP Challenge)
Úachallsr ZsaveZ
ensure_listenÚstrr Ú http01_portÚprepare_http01_modulesÚ_set_up_challengesÚ _mod_config)r Ú responsesr r r Úperform> s ÿzApacheHttp01.performc C sd | j d¡r`dg}| j jdk r*| d¡ n
| d¡ |D ]&}|d | j jjkr8| j j|dd q8d S )
z>Make sure that we have the needed modules available for http01zhandle-modulesZrewrite©é é Z
authz_hostZ
authz_coreÚ_moduleT)ZtempN)r r ÚversionÚappendÚparserÚmodulesZ
enable_mod)r Zneeded_modulesÚmodr r r r! R s
z#ApacheHttp01.prepare_http01_modulesc sV g }t | jjjƒ‰ | jD ] }| |j¡D ]}| |¡ q(qd}|D ] }t‡ fdd„|j D ƒƒrBd}qB|s€|
¡ D ]}| |¡ qp|D ]}| |¡ q„| jj
d| j¡ | jj
d| j¡ | jjdk rÒ| j}| j}n | j}| j}| | j¡}| | j¡} t d|¡ t| jdƒ}
|
|¡ W 5 Q R X t d| ¡ t| jdƒ}
|
| ¡ W 5 Q R X d S ) NFc 3 s" | ]}| ¡ p| ¡ ˆ kV qd S ©N©Z is_wildcardZget_port©Ú.0Úa©Z http_portr r Ú k s z+ApacheHttp01._mod_config..Tr& z(writing a pre config file with text:
%sÚwz)writing a post config file with text:
%s)r r r r r Ú_matching_vhostsÚdomainr+ ÚanyÚaddrsÚ_relevant_vhostsÚ_set_up_include_directivesÚreverterÚregister_file_creationr r r* ÚCONFIG_TEMPLATE22_PREÚCONFIG_TEMPLATE22_POSTÚCONFIG_TEMPLATE24_PREÚCONFIG_TEMPLATE24_POSTÚformatr ÚloggerÚdebugÚopenÚwrite) r Zselected_vhostsÚchallZvhÚfoundÚvhostZconfig_template_preZconfig_template_postZconfig_text_preZconfig_text_postZnew_confr r4 r r# _ sF
ÿ ÿ zApacheHttp01._mod_configc C s2 g }| j jD ] }| j | ¡ |¡r | |¡ q |S )z²Return all VirtualHost objects that have the requested domain name or
a wildcard name that would match the domain in ServerName or ServerAlias
directive.
)r ÚvhostsZdomain_in_namesZ get_namesr+ )r r8 Zmatching_vhostsrJ r r r r7 Œ s
z ApacheHttp01._matching_vhostsc s` t | jjjƒ‰ g }| jjD ],}t‡ fdd„|jD ƒƒr|js| |¡ q|s\t
d ˆ ¡¡‚|S )Nc 3 s" | ]}| ¡ p| ¡ ˆ kV qd S r/ r0 r1 ©r r r r5 ž s z0ApacheHttp01._relevant_vhosts..z²Unable to find a virtual host listening on port {0} which is currently needed for Certbot to prove to the CA that you control your domain. Please add a virtual host for port {0}.) r r r r rK r9 r: Zsslr+ r Z PluginErrorrC )r Zrelevant_vhostsrJ r rL r r; š s ýÿz ApacheHttp01._relevant_vhostsc C s@ t j | j¡s t | jd¡ g }| jD ]}| | |¡¡ q&|S )Nií ) r r
Úisdirr r Úmakedirsr r+ Ú_set_up_challenge)r r$ Úachallr r r r" ª s
z ApacheHttp01._set_up_challengesc C sh | ¡ \}}tj | j|j d¡¡}| jj d|¡ t
|dƒ}| | ¡ ¡ W 5 Q R X t
|d¡ |S )NÚtokenTÚwbi¤ )Zresponse_and_validationr r
r r rH Úencoder r= r> rF rG r Úchmod)r rP ZresponseZ
validationÚnameÚfr r r rO ´ s z ApacheHttp01._set_up_challengec C s€ || j kr|t d|j|j¡ | jj |jd| j ¡ | jj
|jd| j ¡ |j sp| jj
t
| jjjd ƒd|j¡ | j |¡ dS )zIncludes override configuration to the beginning and to the end of
VirtualHost. Note that this include isn't added to Augeas search treezCAdding a temporary challenge validation Include for name: %s in: %sZIncludeÚdefaultN)r rD rE rU Zfilepr r, Zadd_dir_beginningr
r Zadd_dirr Úenabledr ZlocÚadd)r rJ r r r r< À s.
þ ÿ ÿ þz'ApacheHttp01._set_up_include_directives)Ú__name__Ú
__module__Ú __qualname__Ú__doc__r? r@ rA rB r r% r! r# r7 r; r" rO r< Ú
__classcell__r r r r r
s
-
r
)r] ZloggingZacme.magic_typingr r Zcertbotr Zcertbot.compatr r Zcertbot.pluginsr Zcertbot_apache.objr Zcertbot_apache.parserr Z getLoggerrZ rD ZTLSSNI01r
r r r r Ú s