Current File : //usr/lib/python2.7/site-packages/salt/states/acme.pyc
�
���^c @@ s� d Z d d l m Z m Z m Z d d l Z e j e � Z d � Z d d d e d d d d d d d d d d d d d d d � Z d S( u5
ACME / Let's Encrypt certificate management state
=================================================
.. versionadded: 2016.3
See also the module documentation
.. code-block:: yaml
reload-gitlab:
cmd.run:
- name: gitlab-ctl hup
dev.example.com:
acme.cert:
- aliases:
- gitlab.example.com
- email: acmemaster@example.com
- webroot: /opt/gitlab/embedded/service/gitlab-rails/public
- renew: 14
- fire_event: acme/dev.example.com
- onchanges_in:
- cmd: reload-gitlab
i ( t absolute_importt print_functiont unicode_literalsNc C@ s
d t k S( u/
Only work when the ACME module agrees
u acme.cert( t __salt__( ( ( s4 /usr/lib/python2.7/site-packages/salt/states/acme.pyt __virtual__# s u rootu 0640c & C@ s� t d r� i | d 6i d 6d" d 6} d" } y t | � } Wn t k
rN n Xd j | � } t d | � s{ | d 7} n4 t d | | � r� | d 7} n | d
7} t | d <| | d <| St d | � s� d" } n t d | � } t d
| d | d | d | d | d | d | d | d | d | d | d |
d | d |
d | d | d | d | d | �} i | d 6| d t k d 6| d d 6} | d d" k r�i | d <nA t d | � s�d" } n t d | � } i | d 6| d! 6| d <| S(# u�
Obtain/renew a certificate from an ACME CA, probably Let's Encrypt.
:param name: Common Name of the certificate (DNS name of certificate)
:param aliases: subjectAltNames (Additional DNS names on certificate)
:param email: e-mail address for interaction with ACME provider
:param webroot: True or a full path to webroot. Otherwise use standalone mode
:param test_cert: Request a certificate from the Happy Hacker Fake CA (mutually exclusive with 'server')
:param renew: True/'force' to force a renewal, or a window of renewal before expiry in days
:param keysize: RSA key bits
:param server: API endpoint to talk to
:param owner: owner of the private key file
:param group: group of the private key file
:param mode: mode of the private key file
:param certname: Name of the certificate to save
:param preferred_challenges: A sorted, comma delimited list of the preferred
challenge to use during authorization with the
most preferred challenge listed first.
:param tls_sni_01_port: Port used during tls-sni-01 challenge. This only affects
the port Certbot listens on. A conforming ACME server
will still attempt to connect on port 443.
:param tls_sni_01_address: The address the server listens to during tls-sni-01
challenge.
:param http_01_port: Port used in the http-01 challenge. This only affects
the port Certbot listens on. A conforming ACME server
will still attempt to connect on port 80.
:param https_01_address: The address the server listens to during http-01 challenge.
:param dns_plugin: Name of a DNS plugin to use (currently only 'cloudflare')
:param dns_plugin_credentials: Path to the credentials file if required by the specified DNS plugin
u testu nameu changesu resultu Certificate {0} u acme.hasu would have been obtainedu acme.needs_renewalu would have been renewedu would not have been touchedu commentu acme.infou acme.certt aliasest emailt webroott certnamet test_certt renewt keysizet servert ownert groupt modet preferred_challengest tls_sni_01_portt tls_sni_01_addresst http_01_portt http_01_addresst
dns_plugint dns_plugin_credentialsu oldu newN( t __opts__t Nonet intt Exceptiont formatR t Truet False( t nameR R R R R
R R R
R R R R R R R R R R t rett windowt commentt oldt rest new( ( s4 /usr/lib/python2.7/site-packages/salt/states/acme.pyt cert* sn 2
(
t __doc__t
__future__R R R t loggingt getLoggert __name__t logR R R R% ( ( ( s4 /usr/lib/python2.7/site-packages/salt/states/acme.pyt <module> s,
Mini Shell