/usr/lib/python3/dist-packages/acme/__pycache__
Edit: /usr/lib/python3/dist-packages/acme/__pycache__/messages.cpython-310.pyc (26835B)
o
6ab @ s d Z ddlmZ ddlZddlmZ ddlmZ ddlmZ ddlmZ ddlm Z dd lm
Z
dd
lm Z dd lm Z dd lm
Z
ddlZdd
lmZ ddlmZ ddlmZ ddlmZ ddlmZ ddlmZ dZdZi dddddddd d d d d d!d"d#d$d%d&d'd(d)d*d+d,d-d.d/d0d1d2d3d4d5d6d7d8d9d:d;d
d?d@ ZedAdB e D Z e edCdB e D dDe dEe fdFdGZ!G dHdI dIej"ej#Z#G dJdK dKej$eZ%G dLdM dMe%Z&e&dNZ'e&dOZ(e&dPZ)e&dQZ*e&dRZ+e&dSZ,e&dTZ-e&dUZ.G dVdW dWe%Z/e/d)Z0e/dXZ1G dYdZ dZej"Z2G d[d\ d\ej$Z3G d]d^ d^ej"Z4G d_d` d`e4Z5G dadb dbej"Z6G dcdd ddZ7G dedf dfe6Z8e3j9G dgdh dhee8Z:G didj djee8Z;G dkdl dle5ZG dqdr dre6Z?e3j9G dsdt dtee?Z@G dudv dvee?ZAG dwdx dxe5ZBe3j9G dydz dzeej"ZCG d{d| d|e5ZDe3j9G d}d~ d~eej"ZEG dd de6ZFG dd de5ZGe3j9G dd deFZHdS )zACME protocol messages. )HashableN)Any)Dict)Iterator)List)Mapping)MutableMapping)Tuple)Type)Optional
challenges)errors)fields)jws)util)
ResourceMixinzurn:acme:error:zurn:ietf:params:acme:error:accountDoesNotExistz4The request specified an account that does not existalreadyRevokedzOThe request specified a certificate to be revoked that has already been revokedbadCSRz2The CSR is unacceptable (e.g., due to a short key)badNoncez1The client sent an unacceptable anti-replay nonce badPublicKeyz>The JWS was signed by a public key the server does not supportbadRevocationReasonz;The revocation reason provided is not allowed by the serverbadSignatureAlgorithmz@The JWS was signed with an algorithm the server does not supportcaaz\Certification Authority Authorization (CAA) records forbid the CA from issuing a certificatecompoundzBSpecific error conditions are indicated in the "subproblems" array
connectionz?The server could not connect to the client to verify the domaindnszAThere was a problem with a DNS query during identifier validationdnssecz4The server could not validate a DNSSEC signed domainincorrectResponsez;Response received didn't match the challenge's requirements invalidEmailz1The provided email for a registration was invalidinvalidContactz$The provided contact URI was invalid malformedz!The request message was malformedrejectedIdentifierz9The server will not issue certificates for the identifierzLThe request attempted to finalize an order that is not ready to be finalizedz,There were too many requests of a given typez(The server experienced an internal errorz=The server experienced a TLS error during domain verificationz)The client lacks sufficient authorizationz@A contact URL for an account used an unsupported protocol schemez*The server could not resolve a domain namez'An identifier is of an unsupported typez,The server requires external account binding)
orderNotReady rateLimitedserverInternaltls unauthorizedunsupportedContact unknownHostunsupportedIdentifierexternalAccountRequiredc c | ] \}}t | |fV qd S N) ERROR_PREFIX.0namedesc r4 //usr/lib/python3/dist-packages/acme/messages.py ;
r6 c c r- r. )OLD_ERROR_PREFIXr0 r4 r4 r5 r6 > r7 errreturnc C s, t | tr| jdurt| jv pt| jv S dS )z#Check if argument is an ACME error.NF)
isinstanceErrortypr/ r8 )r9 r4 r4 r5
is_acme_errorB s r> c @ s e Zd ZdZejddddZejdddZejdddZe d e
d
e d d fd d
Z e
d ee
fddZe
d ee
fddZd e
fddZdS )r< zACME error.
https://tools.ietf.org/html/draft-ietf-appsawg-http-problem-00
:ivar unicode typ:
:ivar unicode title:
:ivar unicode detail:
typeTz about:blank omitemptydefaulttitlerA detailcodekwargsr: c K s. |t vr
td| t| }| dd|i|S )zCreate an Error instance with an ACME Error code.
:unicode code: An ACME error code, like 'dnssec'.
:kwargs: kwargs to pass to Error.
z4The supplied code: %s is not a known ACME error coder= Nr4 ) ERROR_CODES
ValueErrorr/ )clsrF rG r= r4 r4 r5 with_codeW s zError.with_codec C s t | jS )zHardcoded error description based on its type.
:returns: Description if standard ACME error or ``None``.
:rtype: unicode
)ERROR_TYPE_DESCRIPTIONSgetr= selfr4 r4 r5 descriptiong s zError.descriptionc C s( t | jjdddd }|tv r|S dS )zACME error code.
Basically self.typ without the ERROR_PREFIX.
:returns: error code if standard ACME code or ``None``.
:rtype: unicode
: )maxsplitN)strr= rsplitrH )rO rF r4 r4 r5 rF q s
z
Error.codec C s( d dd | j| j| j| jfD S )Ns :: c s s$ | ]
}|d ur| ddV qd S )Nasciibackslashreplace)encode)r1 partr4 r4 r5 r6 s
z Error.__str__..)joinr= rP rE rC decoderN r4 r4 r5 __str__ s
z
Error.__str__N)__name__
__module__ __qualname____doc__joseFieldr= rC rE classmethodrU r rK propertyr rP rF r] r4 r4 r4 r5 r< I s r< c s e Zd ZU dZdZeZeed f e d< deddf fdd Z
defd d
Z e d edd fd d
Z
defddZdedefddZdefddZ ZS ) _ConstantzACME constant.r2 POSSIBLE_NAMESr2 r: Nc s t | | j|< || _d S r. )super__init__rh r2 rO r2 __class__r4 r5 rj s
z_Constant.__init__c C | j S r. rg rN r4 r4 r5 to_partial_json z_Constant.to_partial_jsonjobjc C s& || j vrtd| j| j | S )Nz{0} not recognized)rh rb DeserializationErrorformatr^ rJ rq r4 r4 r5 from_json s
z_Constant.from_jsonc C s d | jj| jS )Nz{0}({1}))rs rm r^ r2 rN r4 r4 r5 __repr__ z_Constant.__repr__otherc C s t |t| o |j| jkS r. )r; r? r2 )rO rx r4 r4 r5 __eq__ s z_Constant.__eq__c C s t | j| jfS r. )hashrm r2 rN r4 r4 r5 __hash__ s z_Constant.__hash__)r^ r_ r` ra __slots__NotImplementedrh r rU __annotations__rj ro rd ru rv r boolry intr{
__classcell__r4 r4 rl r5 rf s
rf c @ & e Zd ZU dZi Zeed f ed< dS )StatuszACME "status" field.rh Nr^ r_ r` ra rh r rU r~ r4 r4 r4 r5 r
r unknownpending
processingvalidinvalidrevokedready deactivatedc @ r )IdentifierTypezACME identifier type.rh Nr r4 r4 r4 r5 r r r ipc @ s* e Zd ZdZejdejdZedZ dS )
IdentifierzNACME identifier.
:ivar IdentifierType typ:
:ivar unicode value:
r? decodervalueN)
r^ r_ r` ra rb rc r ru r= r r4 r4 r4 r5 r s r c @ s e Zd ZU dZi Zeeed f ed< G dd de j
Z e dedefddZ
e d ed ded fd
d Zd eeef dd
fddZdedefddZdedefddZdeeef fddZe d eeef dd fddZd
S ) Directoryz
Directory._REGISTERED_TYPESc s e Zd ZdZejdddZejdddZejdddZejdddZ ejdddZ
d e d
d f fd d
Z e
d
efddZd
ee f fdd Zded
efddZ ZS )zDirectory.MetazDirectory Meta.zterms-of-serviceTrD termsOfServicewebsite
caaIdentitiesr, rG r: Nc , fdd| D }t jdi | d S )Nc i | ]
\}} ||qS r4 _internal_namer1 kvrN r4 r5
z+Directory.Meta.__init__..r4 itemsri rj rO rG rl rN r5 rj zDirectory.Meta.__init__c C | j p| jS )zURL for the CA TOS)_terms_of_service_terms_of_service_v2rN r4 r4 r5 terms_of_service z Directory.Meta.terms_of_servicec # 0 t D ]}|dkr|dd n|V qd S )Nr rR ri __iter__rk rl r4 r5 r zDirectory.Meta.__iter__r2 c C |dkrd| S |S )Nr _r4 rk r4 r4 r5 r z Directory.Meta._internal_name)r^ r_ r` ra rb rc r r r caa_identitiesexternal_account_requiredr rj re rU r r r r r r4 r4 rl r5 Meta s r keyr: c C s t |d|S )N
resource_type)getattr)rJ r r4 r4 r5
_canon_key s zDirectory._canon_keyresource_body_clsc C s" |j }|| jvs
J || j|< |S )zRegister resource.)r r )rJ r r r4 r4 r5 register s
zDirectory.registerrq Nc C s t || j}|| _d S r. )r map_keysr _jobj)rO rq
canon_jobjr4 r4 r5 rj s
zDirectory.__init__r2 c
C s8 z | | dd W S ty } ztt|d }~ww )Nr -)replaceKeyErrorAttributeErrorrU )rO r2 errorr4 r4 r5 __getattr__ s zDirectory.__getattr__c C s8 z | j | | W S ty td| | d w )NzDirectory field "z " not found)r r r rk r4 r4 r5 __getitem__ s
zDirectory.__getitem__c C rn r. )r rN r4 r4 r5 ro rp zDirectory.to_partial_jsonc C s | j |di |d< | |S )Nmeta)r ru poprt r4 r4 r5 ru s zDirectory.from_json)r^ r_ r` ra r r rU r
r~ rb JSONObjectWithFieldsr rd r r r r rj r r ro r ru r4 r4 r4 r5 r s
r c @ e Zd ZdZedZdS )ResourcezOACME Resource.
:ivar acme.messages.ResourceBody body: Resource body.
bodyN)r^ r_ r` ra rb rc r r4 r4 r4 r5 r r c @ r )ResourceWithURIzQACME Resource with URI.
:ivar unicode ~.uri: Location of the resource.
uriN)r^ r_ r` ra rb rc r r4 r4 r4 r5 r r r c @ s e Zd ZdZdS ) ResourceBodyzACME Resource Body.N)r^ r_ r` ra r4 r4 r4 r5 r s r c
@ s< e Zd ZdZedejdededede ee
f f
ddZ d S )
ExternalAccountBindingz ACME External Account Bindingaccount_public_keykidhmac_key directoryr: c C sR t | }tj|}|d }tj |tj
j |dtj j
d||}| S )zLCreate External Account Binding Resource from contact details, kid and hmac.
newAccount)r N)jsondumpsro rY rb b64 b64decoder JWSsignjwkJWKOctjwaHS256) rJ r r r r key_jsondecoded_hmac_keyurleabr4 r4 r5 from_data' s z ExternalAccountBinding.from_dataN) r^ r_ r` ra rd rb JWKrU r r r r r4 r4 r4 r5 r $ s
r c st e Zd ZdZejddejjdZejddddZ ejddd Z
ejd
dd Z ejd dd Z ejd dd Z
ejd
dd ZdZdZe d)dee dee dee dedd f
ddZdeddf fdd Zdedeedf fd d Zd eeef deeef fd d Zdeeef f fd!d" Z deeef f fd#d$ Z e deedf fd%d&Z e deedf fd'd(Z Z!S )* RegistrationzRegistration Resource Body.
:ivar josepy.jwk.JWK key: Public key.
:ivar tuple contact: Contact information following ACME spec,
`tuple` of `unicode`.
:ivar unicode agreement:
r TrA r contactr4 r@ agreementrD statustermsOfServiceAgreedonlyReturnExistingexternalAccountBindingztel:zmailto:Nphoneemailexternal_account_bindingrG r: c s d|v }t |dd}|dur| j| |dur+| fdd|dD |s/|r5t||d< |r;||d< di |S )a
Create registration resource from contact details.
The `contact` keyword being passed to a Registration object is meaningful, so
this function represents empty iterables in its kwargs by passing on an empty
`tuple`.
r r4 Nc s g | ]} j | qS r4 ) email_prefix)r1 mailrJ r4 r5
d s z*Registration.from_data..,r )listr append phone_prefixextendsplittuple)rJ r r r rG contact_provideddetailsr4 r r5 r P s
zRegistration.from_datac s8 d|v r|d durt | dd t jdi | dS )z;Note if the user provides a value for the `contact` member.r N _add_contactTr4 )object __setattr__ri rj r rl r4 r5 rj p s zRegistration.__init__prefix.c s t fdd| jD S )Nc 3 s* | ]}| r|t d V qd S r. )
startswithlen)r1 rE r r4 r5 r6 x s
z/Registration._filter_contact..)r r )rO r r4 r r5 _filter_contactw s z Registration._filter_contactrq c C s t | ddr
| d|d< |S )a
The `contact` member of Registration objects should not be required when
de-serializing (as it would be if the Fields' `omitempty` flag were `False`), but
it should be included in serializations if it was provided.
:param jobj: Dictionary containing this Registrations' data
:type jobj: dict
:returns: Dictionary containing Registrations data to transmit to the server
:rtype: dict
r Fr )r rY rO rq r4 r4 r5 _add_contact_if_appropriate| s z(Registration._add_contact_if_appropriatec t }| |S )z2Modify josepy.JSONDeserializable.to_partial_json())ri ro r r rl r4 r5 ro
z Registration.to_partial_jsonc r )z;Modify josepy.JSONObjectWithFields.fields_to_partial_json())ri fields_to_partial_jsonr r rl r4 r5 r r z#Registration.fields_to_partial_jsonc C | | jS )z*All phones found in the ``contact`` field.)r r rN r4 r4 r5 phones r zRegistration.phonesc C r
)z*All emails found in the ``contact`` field.)r r rN r4 r4 r5 emails r zRegistration.emails)NNN)"r^ r_ r` ra rb rc r ru r r r r terms_of_service_agreedonly_return_existingr r r rd r rU r r r rj r r r r ro r re r r r r4 r4 rl r5 r 7 s<
" r c @ e Zd ZdZdZeeZdS )NewRegistrationzNew registration.znew-regNr^ r_ r` ra r r r resourcer4 r4 r4 r5 r r c @ r )UpdateRegistrationzUpdate registration.regNr r4 r4 r4 r5 r r c @ s< e Zd ZdZejdejdZejdddZ ejdddZ
dS ) RegistrationResourcezRegistration Resource.
:ivar acme.messages.Registration body:
:ivar unicode new_authzr_uri: Deprecated. Do not use.
:ivar unicode terms_of_service: URL for the CA TOS.
r r new_authzr_uriTrD r N) r^ r_ r` ra rb rc r ru r r r r4 r4 r4 r5 r s
r c s* e Zd ZdZdZejddddZejddddZejde j
de d Z e
jd
dd Zejd ej
ddd Zd
eddf fdd Zdedef fdd Zdeeef f fdd Zedeeef deeef f fdd ZedefddZ dedefdd Z de e f fd d Z dedefd d Z Z!S )!
ChallengeBodya> Challenge Resource Body.
.. todo::
Confusingly, this has a similar name to `.challenges.Challenge`,
as well as `.achallenges.AnnotatedChallenge`. Please use names
such as ``challb`` to distinguish instances of this class from
``achall``.
:ivar acme.challenges.Challenge: Wrapped challenge.
Conveniently, all challenge fields are proxied, i.e. you can
call ``challb.x`` to get ``challb.chall.x`` contents.
:ivar acme.messages.Status status:
:ivar datetime.datetime validated:
:ivar messages.Error error:
)challr TNr@ r r )r rA rB validatedrD r rG r: c r )Nc r r4 r r rN r4 r5 r r z*ChallengeBody.__init__..r4 r r rl rN r5 rj r zChallengeBody.__init__r2 c s t | |S r. )ri rY r rk rl r4 r5 rY rw zChallengeBody.encodec s t }|| j |S r. )ri ro updater r rl r4 r5 ro s
z ChallengeBody.to_partial_jsonrq c s t |}tj||d< |S )Nr )ri fields_from_jsonr
Challengeru )rJ rq jobj_fieldsrl r4 r5 r s z ChallengeBody.fields_from_jsonc C r )zThe URL of this challenge.)_url_urirN r4 r4 r5 r r zChallengeBody.uric C s t | j|S r. )r r rk r4 r4 r5 r s zChallengeBody.__getattr__c # r )Nr! rR r rk rl r4 r5 r r zChallengeBody.__iter__c C r )Nr r r4 rk r4 r4 r5 r r z ChallengeBody._internal_name)"r^ r_ r` ra r| rb rc r! r r ru STATUS_PENDINGr r RFC3339Fieldr r< r r rj rU rY r ro rd r r re r r r r r r r4 r4 rl r5 r s,
(r c @ s< e Zd ZdZejdejdZedZ e
de fddZ dS ) ChallengeResourcezChallenge Resource.
:ivar acme.messages.ChallengeBody body:
:ivar unicode authzr_uri: URI found in the 'up' ``Link`` header.
r r
authzr_urir: c C s | j jS )z The URL of the challenge body.)r r rN r4 r4 r5 r s zChallengeResource.uriN)
r^ r_ r` ra rb rc r ru r r% re rU r r4 r4 r4 r5 r$ s
r$ c @ s e Zd ZdZejdejddZejdddZ ejdddZ
ejdde jd Z e
jd
ddZejd ddZe jd eeeef d
eedf fddZ ed
eeeeef df df fddZdS )
Authorizationa^ Authorization Resource Body.
:ivar acme.messages.Identifier identifier:
:ivar list challenges: `list` of `.ChallengeBody`
:ivar tuple combinations: Challenge combinations (`tuple` of `tuple`
of `int`, as opposed to `list` of `list` from the spec).
:ivar acme.messages.Status status:
:ivar datetime.datetime expires:
identifierTr rA r
rD combinationsr r expireswildcardr r: .c C t dd | D S )Nc s | ]}t |V qd S r. )r ru )r1 r r4 r4 r5 r6 ) z+Authorization.challenges..r r r4 r4 r5 r
' zAuthorization.challengesc s t fdd jD S )z0Combinations with challenges instead of indices.c 3 s& | ]}t fd d|D V qdS )c 3 s | ]} j | V qd S r. r )r1 idxrN r4 r5 r6 . r. z@Authorization.resolved_combinations...Nr/ )r1 comborN r4 r5 r6 . s z6Authorization.resolved_combinations..)r r) rN r4 rN r5 resolved_combinations+ s z#Authorization.resolved_combinationsN)r^ r_ r` ra rb rc r ru r' r
r) r r r r# r* r+ r r r rU r r r re r r4 r4 r4 r4 r5 r& s
(,r& c @ r )NewAuthorizationzNew authorization.z new-authzNr r4 r4 r4 r5 r5 2 r r5 c @ r )UpdateAuthorizationzUpdate authorization.authzNr r4 r4 r4 r5 r6 9 r r6 c @ s. e Zd ZdZejdejdZejdddZ dS )AuthorizationResourcezAuthorization Resource.
:ivar acme.messages.Authorization body:
:ivar unicode new_cert_uri: Deprecated. Do not use.
r r new_cert_uriTrD N)
r^ r_ r` ra rb rc r& ru r r9 r4 r4 r4 r5 r8 ? s r8 c @ s2 e Zd ZdZdZeeZej dej
ej dZ dS )CertificateRequestzACME new-cert request.
:ivar josepy.util.ComparableX509 csr:
`OpenSSL.crypto.X509Req` wrapped in `.ComparableX509`
znew-certcsrr encoderN)
r^ r_ r` ra r r r r rb rc
decode_csr
encode_csrr; r4 r4 r4 r5 r: J s
r: c @ s$ e Zd ZdZedZedZdS )CertificateResourcea Certificate Resource.
:ivar josepy.util.ComparableX509 body:
`OpenSSL.crypto.X509` wrapped in `.ComparableX509`
:ivar unicode cert_chain_uri: URI found in the 'up' ``Link`` header
:ivar tuple authzrs: `tuple` of `AuthorizationResource`.
cert_chain_uriauthzrsN)r^ r_ r` ra rb rc rA rB r4 r4 r4 r5 r@ W s
r@ c @ s< e Zd ZdZdZeeZej dej
ej dZ e dZ
dS )
Revocationz|Revocation message.
:ivar .ComparableX509 certificate: `OpenSSL.crypto.X509` wrapped in
`.ComparableX509`
z revoke-cert certificater< reasonN)r^ r_ r` ra r r r r rb rc decode_cert encode_certrD rE r4 r4 r4 r5 rC d s
rC c @ s e Zd ZdZejdddZejdejddZ ejdddZ
ejdddZ ejd ddZ e
jd
ddZejd dejd Zejd
eeeef deedf fddZdS )Ordera_ Order Resource Body.
:ivar identifiers: List of identifiers for the certificate.
:vartype identifiers: `list` of `.Identifier`
:ivar acme.messages.Status status:
:ivar authorizations: URLs of authorizations.
:vartype authorizations: `list` of `str`
:ivar str certificate: URL to download certificate as a fullchain PEM.
:ivar str finalize: URL to POST to to request issuance once all
authorizations have "valid" status.
:ivar datetime.datetime expires: When the order expires.
:ivar ~.Error error: Any error that occurred during finalization, if applicable.
identifiersTrD r r( authorizationsrD finalizer* r r r r: .c C r, )Nc s r- r. )r ru )r1 r' r4 r4 r5 r6 r. z$Order.identifiers..r/ r0 r4 r4 r5 rI r1 zOrder.identifiersN)r^ r_ r` ra rb rc rI r ru r rJ rD rK r r# r* r< r r r r rU r r r r4 r4 r4 r5 rH s s
,rH c @ sT e Zd ZdZejdejdZejdddZ edZ
ejdddZ ejd ddZ d
S )
OrderResourcea Order Resource.
:ivar acme.messages.Order body:
:ivar str csr_pem: The CSR this Order will be finalized with.
:ivar authorizations: Fully-fetched AuthorizationResource objects.
:vartype authorizations: `list` of `acme.messages.AuthorizationResource`
:ivar str fullchain_pem: The fetched contents of the certificate URL
produced once the order was finalized, if it's present.
:ivar alternative_fullchains_pem: The fetched contents of alternative certificate
chain URLs produced once the order was finalized, if present and requested during
finalization.
:vartype alternative_fullchains_pem: `list` of `str`
r r csr_pemTrD rJ
fullchain_pemalternative_fullchains_pemN)
r^ r_ r` ra rb rc rH ru r rM rJ rN rO r4 r4 r4 r5 rL s
rL c @ s e Zd ZdZdZdS )NewOrderz
New order.z new-orderN)r^ r_ r` ra r r4 r4 r4 r5 rP s rP )Ira collections.abcr r typingr r r r r r r r
r josepyrb acmer
r r r r acme.mixinsr r8 r/ rH dictr rL r
BaseExceptionr r> r r< JSONDeSerializablerf r STATUS_UNKNOWNr" STATUS_PROCESSING STATUS_VALIDSTATUS_INVALIDSTATUS_REVOKED STATUS_READYSTATUS_DEACTIVATEDr IDENTIFIER_FQDN
IDENTIFIER_IPr r r r r r r r r r r r r$ r& r5 r6 r8 r: r@ rC rH rL rP r4 r4 r4 r5 s !
> F k
B$