M/e d Z ddlZddlZddlmZ ddlmZ ddlmZ ddlmZ ddl m
Z
ddl m Z dd l
mZ dd
l
mZ dd lmZ dd lmZ dd
lmZ erddlmZ ej0 e Z G d dej6 Z y)z3A class that performs HTTP-01 challenges for Apache N)List)Set)
TYPE_CHECKING)!KeyAuthorizationChallengeResponse)errors)"KeyAuthorizationAnnotatedChallenge)
filesystem)os)common) VirtualHost) get_aug_path)ApacheConfiguratorc e Zd ZdZdZdZd fd Zdee fdZ ddZ
dd Z d
e dee
fd Zdee
fd Zdee
fd
Zdee fdZdedefdZde
ddfdZ xZS ) ApacheHttp01zFClass that performs HTTP-01 challenges within the Apache configurator.zo RewriteEngine on
RewriteRule ^/\.well-known/acme-challenge/([A-Za-z0-9-_=]+)$ {0}/$1 [END]
z
Require all granted
Require all granted
returnNc t | | | t j j | j
j
d d | _ t j j | j
j
d d | _ t j j | j
j j d | _ t | _
y )Nzchallenge-locationz le_http_01_challenge_pre.confz le_http_01_challenge_post.confhttp_challenges)super__init__r
pathjoin configuratorconfchallenge_conf_prechallenge_conf_postconfigwork_dir
challenge_dirset moded_vhosts)selfr __class__s B/usr/lib/python3/dist-packages/certbot_apache/_internal/http_01.pyr zApacheHttp01.__init__' s
& "$'',, " "#7 8 +#- $&77<< " "#7 8 ,$. WW\\ $ $ - - /2e c v | j sg S | j j dd | j j t | j j
j | j | j }| j | j j dd |S )z Perform all HTTP-01 challenges.z Changes before challenge setupTzHTTP Challenge)
achallsr save
ensure_listenstrr http01_portprepare_http01_modules_set_up_challenges _mod_config)r! responsess r# performzApacheHttp01.perform5 s ||I
?F ''D,=,=,D,D,P,P(QR ##%++- /6r$ c | j j d rOddg}|D ]E }|dz | j j j vs)| j j |d G yy)z>Make sure that we have the needed modules available for http01zhandle-modulesrewrite
authz_core_moduleT)tempN)r r parsermodules
enable_mod)r! needed_modulesmods r# r+ z#ApacheHttp01.prepare_http01_modulesH sp ! !"2 3 ' 6N%
A?$*;*;*B*B*J*JJ%%0040@
A 4r$ c , g }t | j j j | j D ] }|| j |j z
}" d}|D ]# }t fd|j D s"d}% |r|| j z
}n|| j z
}|D ] }| j | | j j j d| j | j j j d| j | j j# | j$ }| j& j# | j$ }t( j+ d| t- | j d 5 }|j/ | d d d t( j+ d| t- | j d 5 }|j/ | d d d y # 1 sw Y PxY w# 1 sw Y y xY w)NFc 3 h K | ]) }|j xs |j k( + y wN is_wildcardget_port).0a http_ports r# z+ApacheHttp01._mod_config..] s* UA1==??ajjli&??U /2Tz(writing a pre config file with text:
%swz)writing a post config file with text:
%s)r) r r r* r& _matching_vhostsdomainanyaddrs_unnamed_vhosts_relevant_vhosts_set_up_include_directivesreverterregister_file_creationr r CONFIG_TEMPLATE24_PREformatr CONFIG_TEMPLATE24_POSTloggerdebugopenwrite)
r! selected_vhostschallfoundvhostvhconfig_text_preconfig_text_postnew_confrB s
@r# r- zApacheHttp01._mod_configQ s -/))00<<= \\ CE t 4 4U\\ B BO C
$ EUUU t 3 3 5 5O
t 4 4 6 6O " 0B + +B / 0
""99 $)) + ""99 $** , 44;;DP>PQ @/R
$))3
/ ,8 NN? + , ACST
$**C
0 -H NN+ , - - , , - -s G>#H
>H
HrG c g }| j j D ]> }| j j |j | s.|j | @ |S )zReturn all VirtualHost objects that have the requested domain name or
a wildcard name that would match the domain in ServerName or ServerAlias
directive.
)r vhostsdomain_in_names get_namesappend)r! rG matching_vhostsrY s r# rF z ApacheHttp01._matching_vhosts{ sY
&&-- .E 00 1BFK &&u- . r$ c Z t | j j j g }| j j D ]? }t fd|j D s"|j r/|j | A |s$t j dj |S )Nc 3 h K | ]) }|j xs |j k( + y wr< r= )r@ rA r* s r# rC z0ApacheHttp01._relevant_vhosts.. s* Wa1==?Aajjlk&AAWrD zUnable to find a virtual host listening on port {0} which is currently needed for Certbot to prove to the CA that you control your domain. Please add a virtual host for port {0}.) r) r r r* r_ rH rI sslrb r PluginErrorrP )r! relevant_vhostsrY r* s @r# rK z ApacheHttp01._relevant_vhosts s $++22>>? -/&&-- 2EW5;;WW yy#**51 2 $$ {+ -
- r$ c n | j j D cg c] }|j | c}S c c}w )z1Return all VirtualHost objects with no ServerName)r r_ name)r! rZ s r# rJ z ApacheHttp01._unnamed_vhosts s* ! . . 5 5Ir IIIs 22c t j j | j s?t j
d 5 t j | j d d d d g }| j D ]" }|j | j | $ |S # t $ rK}|j t j t j fvrt j d Y d }~d }~ww xY w# 1 sw Y xY w)N i z*Couldn't create root for http-01 challenge)r
r isdirr r
temp_umaskmakedirsOSErrorerrnoEEXISTEISDIRr rg r& rb _set_up_challenge)r! exceptionr. achalls r# r, z ApacheHttp01._set_up_challenges s ww}}T / /0&&u-
JJ ''(:(:EB
J ll =F T 3 3F ; < = J u||U\\.JJ $ 0 0 H J J KJ
J
Js0 C5 B C2'AC-(C5-C22C55C>rv c |j \ }}t j j | j |j
j
d }| j j j d| t |d 5 }|j |j
d d d t j |d |S # 1 sw Y !xY w)NtokenTwbi )response_and_validationr
r r r rW encoder rM rN rT rU r chmod)r! rv response
validationrj fs r# rt z ApacheHttp01._set_up_challenge s % = = ? *GGLL!3!3V\\5H5H5QR ""99$E
$
)
GGJ%%' ( )u% ) )s C CrY c j || j vr$t j d|j |j | j
j j |j d| j | j
j j |j d| j |j s[| j
j j t | j
j j d d|j | j j | yy)zIncludes override configuration to the beginning and to the end of
VirtualHost. Note that this include isn't added to Augeas search treezCAdding a temporary challenge validation Include for name: %s in: %sIncludedefaultN)r rR rS rj filepr r5 add_dir_beginningr r add_dirr enabledr
locadd)r! rY s r# rL z'ApacheHttp01._set_up_include_directives s )) ) LLU
EKK
)
$ $ 6 6
It'>'>
@ $ $ , ,
It'?'?
A ==!!((00 !2!2!9!9!=!=i!HI u{{,
! !% ( *r$ )r r r N)r N)__name__
__module__ __qualname____doc__rO rQ r r r r/ r+ r- r) r rF rK rJ r, r rt rL
__classcell__)r" s @r# r r s P 4 ?@ &A(-T s tK/@ ${"3 Jk!2 JD)J$K (J @ ) ) )r$ r ) r rq loggingtypingr r r acme.challengesr certbotr certbot.achallengesr certbot.compatr r
certbot.pluginsr certbot_apache._internal.objr certbot_apache._internal.parserr
%certbot_apache._internal.configuratorr getLoggerr rR ChallengePerformerr r$ r# r s[ 9 = B % " 4 8H 8 $u)6,, u)r$