Current File : //proc/self/root/opt/plesk/python/2.7/lib/python2.7/site-packages/dns/dnssec.pyo
�
�ac @ s� d d l m Z d d l Z d d l Z d d l Z d d l Z d d l Z d d l Z d d l Z d d l
Z d d l Z d d l m
Z
d e j j f d � � YZ d e j j f d � � YZ d Z d Z d
Z d Z d Z d
Z d Z d Z d Z d Z d Z d Z d Z d Z i e d 6e d 6e d 6e d 6e d 6e d 6e d 6e d 6e d 6e d 6e d 6e d! 6e d" 6e d# 6Z d$ � e j! � D� Z" d% � Z# d& � Z$ d' � Z% d d( � Z' d d) � Z( d* � Z) d+ � Z* d, � Z+ d- � Z, d. � Z- d/ � Z. d0 � Z/ d1 � Z0 d2 � Z1 d3 � Z2 d4 � Z3 d d d5 � Z4 d d d6 � Z5 d7 � Z6 y� yh d d8 l7 m8 Z8 m9 Z9 m: Z: m; Z; m< Z< d d9 l= m> Z? m Z@ d d: lA mB ZB mC ZC d d; lD mE ZE Wnu eF k
r5d d8 lG m8 Z8 m9 Z9 m: Z: m; Z; m< Z< d d9 lH m> Z? m Z@ d d: lI mB ZB mC ZC d d; lJ mE ZE n XWn) eF k
rbe6 ZK e6 ZL eM ZN eM ZO n} Xe5 ZK e4 ZL eP ZN y4 d d lQ ZQ d d lR ZQ d d lS ZQ d d lT ZQ Wn eF k
r�eM ZO n XeP ZO d< eU f d= � � YZV d S(> i����( t BytesIONi ( t string_typest UnsupportedAlgorithmc B s e Z RS( ( t __name__t
__module__( ( ( s? /opt/plesk/python/2.7/lib/python2.7/site-packages/dns/dnssec.pyR " s t ValidationFailurec B s e Z RS( ( R R ( ( ( s? /opt/plesk/python/2.7/lib/python2.7/site-packages/dns/dnssec.pyR & s i i i i i i i i
i
i i� i� i� t RSAMD5t DHt DSAt ECCt RSASHA1t DSANSEC3SHA1t RSASHA1NSEC3SHA1t RSASHA256t RSASHA512t INDIRECTt ECDSAP256SHA256t ECDSAP384SHA384t
PRIVATEDNSt
PRIVATEOIDc C s i | ] \ } } | | � q S( ( ( t .0t xt y( ( s? /opt/plesk/python/2.7/lib/python2.7/site-packages/dns/dnssec.pys
<dictcomp>\ s c C s4 t j | j � � } | d k r0 t | � } n | S( N( t _algorithm_by_textt gett uppert Nonet int( t textt value( ( s? /opt/plesk/python/2.7/lib/python2.7/site-packages/dns/dnssec.pyt algorithm_from_text_ s c C s. t j | � } | d k r* t | � } n | S( N( t _algorithm_by_valueR R t str( R R ( ( s? /opt/plesk/python/2.7/lib/python2.7/site-packages/dns/dnssec.pyt algorithm_to_textk s c C s& t � } | j | d | �| j � S( Nt origin( R t to_wiret getvalue( t recordR" t s( ( s? /opt/plesk/python/2.7/lib/python2.7/site-packages/dns/dnssec.pyt _to_rdataw s c C s� t | | � } t | � } | j t k r> | d d >| d Sd } xD t t | � d � D], } | | d | d >| d | d 7} q[ Wt | � d d k r� | | t | � d d >7} n | | d ?d @7} | d @Sd S( Ni����i i����i i i i i�� ( R' t bytearrayt algorithmR t ranget len( t keyR" t rdatat totalt i( ( s? /opt/plesk/python/2.7/lib/python2.7/site-packages/dns/dnssec.pyt key_id} s c C s | j � d k r' d } t j � } n7 | j � d k rN d } t j � } n t d | � � t | t � r� t j j | | � } n | j
| j � j � � | j
t
| | � � | j � } t j d t | � | j | � | } t j j t j j t j j | d t | � � S( Nt SHA1i t SHA256i s unsupported algorithm "%s"s !HBBi ( R R1 t newR2 R t
isinstanceR t dnst namet from_textt updatet canonicalizeR# R' t digestt structt packR0 R) R- t from_wiret
rdataclasst INt rdatatypet DSR+ ( R6 R, R) R" t dsalgt hashR: t dsrdata( ( s? /opt/plesk/python/2.7/lib/python2.7/site-packages/dns/dnssec.pyt make_ds� s %!c C s� g } | j | j � } | d k r( d St | t j j � rw y" | j t j j t j
j � } Wq} t k
rs d SXn | } xE | D]= } | j
| j
k r� t | � | j k r� | j | � q� q� W| S( N( R t signerR R4 R5 t nodet Nodet
find_rdatasetR> R? R@ t DNSKEYt KeyErrorR) R0 t key_tagt append( t keyst rrsigt candidate_keysR t rdatasetR- ( ( s? /opt/plesk/python/2.7/lib/python2.7/site-packages/dns/dnssec.pyt _find_candidate_keys� s
c C s | t t t t t f k S( N( R R
R R
R ( R) ( ( s? /opt/plesk/python/2.7/lib/python2.7/site-packages/dns/dnssec.pyt _is_rsa� s c C s | t t f k S( N( R R ( R) ( ( s? /opt/plesk/python/2.7/lib/python2.7/site-packages/dns/dnssec.pyt _is_dsa� s c C s t o | t t f k S( N( t _have_ecdsaR R ( R) ( ( s? /opt/plesk/python/2.7/lib/python2.7/site-packages/dns/dnssec.pyt _is_ecdsa� s c C s
| t k S( N( R ( R) ( ( s? /opt/plesk/python/2.7/lib/python2.7/site-packages/dns/dnssec.pyt _is_md5� s c C s | t t t t f k S( N( R R
R R ( R) ( ( s? /opt/plesk/python/2.7/lib/python2.7/site-packages/dns/dnssec.pyt _is_sha1� s c C s | t t f k S( N( R
R ( R) ( ( s? /opt/plesk/python/2.7/lib/python2.7/site-packages/dns/dnssec.pyt
_is_sha256� s c C s
| t k S( N( R ( R) ( ( s? /opt/plesk/python/2.7/lib/python2.7/site-packages/dns/dnssec.pyt
_is_sha384� s c C s
| t k S( N( R ( R) ( ( s? /opt/plesk/python/2.7/lib/python2.7/site-packages/dns/dnssec.pyt
_is_sha512� s c C s� t | � r t j � St | � r, t j � St | � rB t j � St | � rX t j � St | � rn t
j � St d | � � d S( Ns unknown hash for algorithm %u( RW t MD5R3 RX R1 RY R2 RZ t SHA384R[ t SHA512R ( R) ( ( s? /opt/plesk/python/2.7/lib/python2.7/site-packages/dns/dnssec.pyt
_make_hash� s
c C s> t | � r- d d d d d d d d g } n� t | � rQ d d d
d d g } np t | � r� d d d d
d d
d d d
g } n@ t | � r� d d d d
d d
d d d
g } n t d | � � t | � } t | � j } d g d | | g d | d g d | g | d d g d | g } t j d t | � | � S( Ni* i� iH i� i
i i i+ i i i i` i ie i s unknown algorithm %ui0 i i i s !%dB(
RW RX RY R[ R R+ R_ t digest_sizeR; R< ( R) t oidt olent dlent idbytes( ( s? /opt/plesk/python/2.7/lib/python2.7/site-packages/dns/dnssec.pyt _make_algorithm_id� s ! $ $ Hc ' C s0 t | t � r- t j j | t j j � } n t | | � } | d k rW t d � � n x�| D]�} t | t � r� | d } | d } n | j } | } | d k r� t
j
� } n | j | k r� t d � � n | j | k r� t d � � n t
| j � } t | j � r�| j }
t j d |
d d !� \ } |
d }
| d k rrt j d |
d d !� \ } |
d }
n |
d | !} |
| }
y+ t j t j |
� t j | � f � } Wn t k
r�t d � � n X| j } nFt | j � r�| j }
t j d |
d d !� \ } |
d }
d
| d } |
d d !} |
d }
|
d | !} |
| }
|
d | !} |
| }
|
d | !} t j t j | � t j | � t j | � t j | � f � } | j d } nYt | j � r| j }
| j t k r t j j } d
} n$ | j t k r-t j j! } d } n t j |
d | !� } t j |
| | d !� } t j j" | j# | | � s�t d � � n t j$ j% | j& | | | j' � } t j( j) j* | | � } t+ | | � } | j | } | j | } t j j, t j | � t j | � � } n t d | j � � | j- t. | | � d � | j- | j/ j0 | � � | j1 t2 | � d k r�| j3 | j1 d � d } t j j d | � } n | j0 | � } t j4 d | j5 | j6 | j7 � } t8 | � }! xi |! D]a }" | j- | � | j- | � |" j0 | � }# t j4 d t2 |# � � }$ | j- |$ � | j- |# � q�Wy� t | j � r�t9 j: | � }% |% j; | | � n� t | j � r�t< j: | d � }% |% j; | | � nL t | j � r�| j= � }& | j; |& | � s t � q n t d | j � � d SWq^ t k
rq^ q^ Xq^ Wt d � � d S( Ns unknown keyi i t expireds
not yet valids !Bs !Hi s invalid public keyi@ i i i i0 s invalid ECDSA keys unknown algorithm %ui t *s !HHIs
fips-186-3s verify failure(> R4 R R5 R6 R7 t rootRR R R t tuplet timet
expirationt inceptionR_ R) RS R, R; t unpackt CryptoRSAt constructt numbert
bytes_to_longt
ValueErrort signatureRT t CryptoDSARV R t ecdsat curvest NIST256pR t NIST384pt point_is_validt generatort
ellipticcurvet Pointt curvet orderRN t VerifyingKeyt from_public_pointt ECKeyWrappert SignatureR8 R' RF t
to_digestablet labelsR+ t splitR< t rdtypet rdclasst original_ttlt sortedt pkcs1_15R3 t verifyt DSSR: (' t rrsetRO RN R" t nowRP t
candidate_keyt rrnameRQ RC t keyptrt bytes_t rsa_et rsa_nt pubkeyt sigt tt octetst dsa_qt dsa_pt dsa_gt dsa_yR} t key_lenR R t pointt
verifying_keyt rR& t suffixt rrnamebuft rrfixedt rrlistt rrt rrdatat rrlent verifierR: ( ( s? /opt/plesk/python/2.7/lib/python2.7/site-packages/dns/dnssec.pyt _validate_rrsig s�
!
c C s t | t � r- t j j | t j j � } n t | t � rI | d } n | j } t | t � rx | d } | d } n | j } | } | j | � } | j | � } | | k r� t d � � n x@ | D]8 } y t | | | | | � d SWq� t k
r� q� Xq� Wt d � � d S( Ni i s owner names do not matchs no RRSIGs validated(
R4 R R5 R6 R7 Rh Ri t choose_relativityR R� ( R� t rrsigsetRN R" R� R� t rrsignamet
rrsigrdatasetRO ( ( s? /opt/plesk/python/2.7/lib/python2.7/site-packages/dns/dnssec.pyt _validate� s*
c O s t d � � d S( Ns5 DNSSEC validation requires pycryptodome/pycryptodomex( t NotImplementedError( t argst kwargs( ( s? /opt/plesk/python/2.7/lib/python2.7/site-packages/dns/dnssec.pyt _need_pycrypto� s ( R\ R1 R2 R] R^ ( t RSAR ( R� R� ( Rp R� c B s e Z d � Z d � Z RS( c C s | | _ | | _ d S( N( R, R� ( t selfR, R� ( ( s? /opt/plesk/python/2.7/lib/python2.7/site-packages/dns/dnssec.pyt __init__ s c C s% t j | � } | j j j | | � S( N( Rp Rq R, R� t verifies( R� R: R� t diglong( ( s? /opt/plesk/python/2.7/lib/python2.7/site-packages/dns/dnssec.pyR� s ( R R R� R� ( ( ( s? /opt/plesk/python/2.7/lib/python2.7/site-packages/dns/dnssec.pyR� � s (W t ioR R; Rj t
dns.exceptionR5 t dns.namet dns.nodet dns.rdatasett dns.rdatat
dns.rdatatypet dns.rdataclasst _compatR t exceptiont DNSExceptionR R R R R R R
R R R
R R R R R R R t itemsR R R! R' R R0 RE RR RS RT RV RW RX RY RZ R[ R_ Re R� R� R� t Crypto.HashR\ R1 R2 R] R^ t Crypto.PublicKeyR� Rn Rt t Crypto.SignatureR� R� t Crypto.UtilRp t ImportErrort Cryptodome.Hasht Cryptodome.PublicKeyt Cryptodome.Signaturet Cryptodome.Utilt validatet validate_rrsigt Falset _have_pycryptoRU t TrueRu t ecdsa.ecdsat ecdsa.ellipticcurvet
ecdsa.keyst objectR� ( ( ( s? /opt/plesk/python/2.7/lib/python2.7/site-packages/dns/dnssec.pyt <module> s�
% �0 (
(
Mini Shell