3
7&j @ @ sJ d dl Z d dlZd dlZd dlmZmZ G dd deZG dd dZdS ) N)PopenPIPEc s e Zd Z fddZ ZS )TimePastc s t t| jd|||f d S )Nz'%s time for key %s (%d) is already past)superr __init__)selfkeypropvalue) __class__ /usr/lib/python3.6/dnskey.pyr s zTimePast.__init__)__name__
__module__ __qualname__r
__classcell__r r )r r
r s r c @ s e Zd ZdZdqZdrZdsZdtd!d"Zd#d$ Zd%d& Z e
dud'd(Z d)d* Z e
d+d, Ze
d-d. Zdvd/d0Ze
d1d2 Ze
d3d4 Ze
d5d6 Ze
d7d8 Zd9d: Zd;d< Zd=d> Zd?d@ ZdAdB ZdCdD Zej fdEdFZ dGdH Z ej fdIdJZ dKdL Z ej fdMdNZ dOdP Z!ej fdQdRZ"dSdT Z#ej fdUdVZ$dWdX Z%ej fdYdZZ&d[d\ Z'ej fd]d^Z(d_d` Z)dadb Z*dcdd Z+dedf Z,dgdh Z-didj Z.dwdkdlZ/dxdmdnZ0e
dodp Z1d S )ydnskeyztAn individual DNSSEC key. Identified by path, name, algorithm, keyid.
Contains a dictionary of metadata events.CreatedPublishActivateInactiveDeleteRevoke DSPublish SyncPublish
SyncDeleteN-P-A-I-D-R-Psync-DsyncRSAMD5DHDSAECCRSASHA1NSEC3DSA NSEC3RSASHA1 RSASHA256 RSASHA512ECCGOSTECDSAP256SHA256ECDSAP384SHA384ED25519ED448c C s t |tr:t|dkr:|p d| _|\}}}| j|||| |pLtjj|pLd| _tjj|}|j d\}}}|dd }t
|}t
|j dd }| j|||| d S )N .+ r )
isinstancetuplelen_dir fromtupleospathdirnamebasenamesplitint)r r Z directorykeyttlnamealgkeyidr r r
r & s
zdnskey.__init__c s |j dr|}|jd}n|d }d|||f }| j| jr@tjpBd | d }| j| jr^tjp`d | d }|| _|| _t|| _t|| _ || _
t |d} x| D ]z d dkrq j }
|
sq|
d j
dkrd
} || _nd} |st|
d n|| _t|
| d @ d krd| _qd| _qW | j t |d} t | _t | _t | _t | _t | _t | _t | _d | _x| D ] j sv d dkrqv fdddD t g }
tdd |
D } d | j } |d j dj }|| j|< qvW xt j D ]}d| j|< || jkrn| j | j| }|| j|< | j || j|< | j!|| j|< | j| | j|< n(d | j|< d | j|< d | j|< d | j|< qW | j d S )Nr2 z
K%s+%03d+%05d z.keyz.privaterr ;r4 inchhsr1 TFZrUz!#c s g | ]} j |qS r )find).0c)liner r
l s z$dnskey.fromtuple..z:= c S s g | ]}|dkr|qS )r4 r5 r )rM posr r r
rP m s )rH rI rJ )"endswithrstripr9 r; sepkeystrrB r@ rC rD fullnameopenr? lowerttlclosedictZmetadata_changed_delete_times_fmttime _timestamps _original_origttlstripr8 minlstripr _PROPS parsetime
formattime
epochfromtime)r rB rC rD rA rV rU Zkey_fileZ private_fileZkfptokensZseptokenZpfpZ punctuationfoundr
r tr )rO r
r: 5 sv
zdnskey.fromtuplec K sr |j dd}g }d}| jd k r0|dt| jg7 }xlttjtjD ]Z\}}| s@| j| r\q@d}|| j krx| j | rxd}|rdn| j
| } ||| g7 }d}q@W |rn|d| j g| | j g }
|st
ddj|
y0t|
ttd } | j \} }
|
r tt|
W n8 tk
r: } ztd
|t|f W Y d d }~X nX d | _x*tjD ] }| j| | j|< d| j|< qJW d S ) NquietFTz-LZnonez-Kz# )stdoutstderrzunable to run %s: %s)getrb strrY zipr rf _OPTSr\ r] r_ r9 rU printjoinr r communicate Exceptionr` ra )r Z settime_binkwargsrm cmdfirstr optdeleteZwhenZfullcmdpro rp er r r
commit s<
" z
dnskey.commitc K sL | j dd} |dd|dt|g}
|r0|
d|g7 }
|r>|
jd |rN|
d|g7 }
|rb|
d t|g7 }
| rtj| }|
d
tj|g7 }
|
rtj|
}|
d tj|
g7 }
|
j| | std d
j|
t|
t t d}|j
\}}|rt dt| y"|j d j
d}t|||}|S t k
rF } zt dt| W Y d d }~X nX d S )Nrm Fz-qz-Kz-Lz-rz-fkz-az-bz-Pz-Az# rn )ro rp zunable to generate key: r asciiz!unable to parse generated key: %s)rq rr appendr
timefromepochrh ru rv r r rw rx
splitlinesdecode)cls
keygen_bin randomdevZkeys_dirrB rC ZkeysizerT rY publishactivatery rm
keygen_cmdrl r~ ro rp rU newkeyr r r r
generate s:
zdnskey.generatec
K s |j dd}| j s td| |dd| jd| jg}| jrL|dt| jg7 }|r\|d|g7 }|rp|d t|g7 }|std
d j| t |t
t
d }|j \}} | rtd
| y&|j d j
d}
t|
| j| j} | S td| Y nX d S )Nrm Fz'predecessor key %s has no inactive datez-qz-Kz-Sz-Lz-rz-iz# rn )ro rp zunable to generate key: r r z'unable to generate successor for key %s)rq inactiverx r9 rU rY rr ru rv r r rw r r r ) r r r Z
prepublishry rm r r~ ro rp rU r r r r
generate_successor s, zdnskey.generate_successorc C s0 d }| t ttjkr tj| }|r(|S d| S )Nz%03d)ranger8 r _ALGNAMES)rC rB r r r
algstr s
z
dnskey.algstrc C s6 | sd S | j } y tjj| S tk
r0 d S X d S )N)upperr r index
ValueError)rC r r r
algnum s z
dnskey.algnumc C s | j |p | jS )N)r rC )r rC r r r
algname s zdnskey.algnamec C s
t j| S )N)timeZgmtime)secsr r r
r s zdnskey.timefromepochc C s t j| dS )Nz %Y%m%d%H%M%S)r Zstrptime)stringr r r
rg s zdnskey.parsetimec C s
t j| S )N)calendarZtimegm)rl r r r
ri s zdnskey.epochfromtimec C s t jd| S )Nz %Y%m%d%H%M%S)r Zstrftime)rl r r r
rh s zdnskey.formattimec K s |j dd}| j| |kr d S | j| d k rR| j| |k rR| rRt| || j| |d kr| j| d krldnd| j|< d| j|< d | j|< d | j|< d | j|< d S | j|}|| j|< || j|< | j || j|< | j| | j| krdnd| j|< d S )NforceFT)
rq r` ra r r\ r] r^ r_ r rh )r r r nowry r rl r r r
setmeta s$
zdnskey.setmetac C s
| j | S )N)r^ )r r r r r
gettime2 s zdnskey.gettimec C s
| j | S )N)r_ )r r r r r
getfmttime5 s zdnskey.getfmttimec C s
| j | S )N)r` )r r r r r
gettimestamp8 s zdnskey.gettimestampc C s
| j d S )Nr )r` )r r r r
created; s zdnskey.createdc C s
| j d S )Nr )r` )r r r r
syncpublish> s zdnskey.syncpublishc K s | j d||f| d S )Nr )r )r r r ry r r r
setsyncpublishA s zdnskey.setsyncpublishc C s
| j d S )Nr )r` )r r r r
r D s zdnskey.publishc K s | j d||f| d S )Nr )r )r r r ry r r r
setpublishG s zdnskey.setpublishc C s
| j d S )Nr )r` )r r r r
r J s zdnskey.activatec K s | j d||f| d S )Nr )r )r r r ry r r r
setactivateM s zdnskey.setactivatec C s
| j d S )Nr )r` )r r r r
revokeP s z
dnskey.revokec K s | j d||f| d S )Nr )r )r r r ry r r r
setrevokeS s zdnskey.setrevokec C s
| j d S )Nr )r` )r r r r
r V s zdnskey.inactivec K s | j d||f| d S )Nr )r )r r r ry r r r
setinactiveY s zdnskey.setinactivec C s
| j d S )Nr )r` )r r r r
r} \ s z
dnskey.deletec K s | j d||f| d S )Nr )r )r r r ry r r r
setdelete_ s zdnskey.setdeletec C s
| j d S )Nr )r` )r r r r
syncdeleteb s zdnskey.syncdeletec K s | j d||f| d S )Nr )r )r r r ry r r r
setsyncdeletee s zdnskey.setsyncdeletec C sR |d ks| j |krd S | jd kr0| j | _|| _ n | j|krHd | _|| _ n|| _ d S )N)rY rb )r rY r r r
setttlh s
z
dnskey.setttlc C s | j r
dS dS )NKSKZSK)rT )r r r r
keytypet s zdnskey.keytypec C s d| j | j | jf S )Nz
%s/%s/%05d)rB r rD )r r r r
__str__w s zdnskey.__str__c C s" d| j | j | j| jrdndf S )Nz%s/%s/%05d (%s)r r )rB r rD rT )r r r r
__repr__{ s zdnskey.__repr__c C s | j p| j p| j S )N)r r r )r r r r
date s z dnskey.datec C s@ | j |j kr| j |j k S | j|jkr0| j|jk S | j |j k S )N)rB rC r )r otherr r r
__lt__ s
z
dnskey.__lt__c C s dd }|s|}t tj }| j }| j }|s4dS |sT||krP|dt| dS ||krh||krhdS ||kr|dt| tj| jpdf dS ||k r|dt| dS | jd k r|| | jk r|d t| tj| jpdf dS dS )
Nc _ s d S )Nr )argsry r r r
noop s z!dnskey.check_prepub..noopFzFWARNING: Key %s is scheduled for
activation but not for publication.TzWARNING: %s is scheduled to be
published and activated at the same time. This
could result in a coverage gap if the zone was
previously signed. Activation should be at least
%s after publication.zone DNSKEY TTLz0WARNING: Key %s is active before it is publishedzWARNING: Key %s is activated too soon
after publication; this could result in coverage
gaps due to resolver caches containing old data.
Activation should be at least %s after
publication.)r@ r r r reprr durationrY )r outputr r ar~ r r r
check_prepub s< zdnskey.check_prepubc C s dd }|d kr|}|d kr"| j }|d kr>|dt| d }tj }| j }| j }|s^dS |s~||krz|dt| dS ||k r||k rdS ||k r|d t| dS || |k r|d
t| tj|f dS dS )
Nc _ s d S )Nr )r ry r r r
r s z"dnskey.check_postpub..noopz"WARNING: Key %s using default TTL.< FzEWARNING: Key %s is scheduled for
deletion but not for inactivation.Tz@WARNING: Key %s is scheduled for
deletion before inactivation.zWARNING: Key %s scheduled for
deletion too soon after deactivation; this may
result in coverage gaps due to resolver caches
containing old data. Deletion should be at least
%s after inactivation.i iQ )rY r r r} r r r )r r Ztimespanr r dir r r
check_postpub s: zdnskey.check_postpubc C sz | sd S dddd d d g}g }xR|D ]J}| |d | |d }} |d kr"|j d
||d |d krbdndf q"W dj|S ) Nyearr r im month dayhourminutesecondr4 r z%d %s%ssrE z, i iQ 3)r r i iQ ' )r r i Q )r r )r r )r r )r r4 )r rv )r Zunitsr Zunitvr r r
r s
(zdnskey.duration) r r r r r r r r r ) Nr r r r r Nr! r" )Nr# r$ r% r& r' r( r) r* Nr+ Nr, r- r. r/ r0 )NN)NN)N)N)NN)2r r r __doc__rf rt r r r: r classmethodr r staticmethodr r r r rg ri rh r r r r r r r r r r r r r r r r r} r r r r r r r r r r r r r r r r
r sb
M% *
1
-r ) r; r r
subprocessr r rx r r r r r r
s