o
c @ s d Z ddlZddlZddlmZ ddlmZ ddlmZ ddlmZ ddl m
Z
ddl m Z dd l
mZ dd
l
mZ dd lmZ dd lmZ dd
lmZ erTddlmZ eeZG dd dejZ dS )z3A class that performs HTTP-01 challenges for Apache N)List)Set)
TYPE_CHECKING)!KeyAuthorizationChallengeResponse)errors)"KeyAuthorizationAnnotatedChallenge)
filesystem)os)common) VirtualHost) get_aug_path)ApacheConfiguratorc s e Zd ZdZdZdZd fdd Zdee fd
d Z d d d
Z
d ddZ de dee
fddZdee
fddZdee
fddZdee fddZdedefddZd e
ddfd d Z ZS )! ApacheHttp01zFClass that performs HTTP-01 challenges within the Apache configurator.zo RewriteEngine on
RewriteRule ^/\.well-known/acme-challenge/([A-Za-z0-9-_=]+)$ {0}/$1 [END]
z
Require all granted
Require all granted
configuratorr
returnNc sb t | | tj| jdd| _tj| jdd| _tj| jj j
d| _ t | _
d S )Nzchallenge-locationz le_http_01_challenge_pre.confz le_http_01_challenge_post.confhttp_challenges)super__init__r pathjoinr confchallenge_conf_prechallenge_conf_postconfigwork_dir
challenge_dirset moded_vhosts)selfr __class__ M/opt/certbot/lib/python3.10/site-packages/certbot_apache/_internal/http_01.pyr ' s
zApacheHttp01.__init__c C sX | j sg S | jdd | jt| jjj | | }| | jdd |S )z Perform all HTTP-01 challenges.z Changes before challenge setupTzHTTP Challenge)
achallsr save
ensure_listenstrr http01_portprepare_http01_modules_set_up_challenges _mod_config)r responsesr! r! r" perform5 s zApacheHttp01.performc C sH | j dr ddg}|D ]}|d | j jjvr | j j|dd q dS dS )z>Make sure that we have the needed modules available for http01zhandle-modulesrewrite
authz_core_moduleT)tempN)r r parsermodules
enable_mod)r needed_modulesmodr! r! r" r( H s z#ApacheHttp01.prepare_http01_modulesc sT g }t | jjj | jD ]
}|| |j7 }q d}|D ]}t fdd|jD r+d}q|r5|| 7 }n||
7 }|D ]}| | q=| jj
d| j | jj
d| j | j| j}| j| j}td| t| jd
}|| W d n1 sw Y td| t| jd}|| W d d S 1 sw Y d S )NFc 3 $ | ]
}| p
| kV qd S N is_wildcardget_port.0a http_portr! r" ] " z+ApacheHttp01._mod_config..Tz(writing a pre config file with text:
%swz)writing a post config file with text:
%s)r& r r r' r# _matching_vhostsdomainanyaddrs_unnamed_vhosts_relevant_vhosts_set_up_include_directivesreverterregister_file_creationr r CONFIG_TEMPLATE24_PREformatr CONFIG_TEMPLATE24_POSTloggerdebugopenwrite) r selected_vhostschallfoundvhostvhconfig_text_preconfig_text_postnew_confr! r> r" r* Q s<
"zApacheHttp01._mod_configrD c C s2 g }| j jD ]}| j | |r|| q|S )zReturn all VirtualHost objects that have the requested domain name or
a wildcard name that would match the domain in ServerName or ServerAlias
directive.
)r vhostsdomain_in_names get_namesappend)r rD matching_vhostsrV r! r! r" rC { s
z ApacheHttp01._matching_vhostsc s` t | jjj g }| jjD ]}t fdd|jD r#|js#|| q
|s.t
d |S )Nc 3 r6 r7 r8 r; r' r! r" r@ rA z0ApacheHttp01._relevant_vhosts..zUnable to find a virtual host listening on port {0} which is currently needed for Certbot to prove to the CA that you control your domain. Please add a virtual host for port {0}.) r& r r r' r[ rE rF sslr^ r PluginErrorrM )r relevant_vhostsrV r! r` r" rH s
z ApacheHttp01._relevant_vhostsc C s dd | j jD S )z1Return all VirtualHost objects with no ServerNamec S s g | ] }|j d u r|qS r7 )name)r< rW r! r! r"
s z0ApacheHttp01._unnamed_vhosts..)r r[ )r r! r! r" rG s z ApacheHttp01._unnamed_vhostsc C s t j| jsFtd2 z t| jd W n ty6 } z|jtj tj
fvr,t dW Y d }~nd }~ww W d n1 sAw Y g }| j
D ]
}|| | qK|S )N i z*Couldn't create root for http-01 challenge)r r isdirr r
temp_umaskmakedirsOSErrorerrnoEEXISTEISDIRr rb r# r^ _set_up_challenge)r exceptionr+ achallr! r! r" r) s$
z ApacheHttp01._set_up_challengesrp c C s| | \}}tj| j|jd}| jj d| t
|d}| | W d n1 s1w Y t
|d |S )NtokenTwbi )response_and_validationr r r r rT encoder rJ rK rQ rR r chmod)r rp response
validationrd fr! r! r" rn s z ApacheHttp01._set_up_challengerV c C s || j vr@td|j|j | jj|jd| j | jj
|jd| j |j s8| jj
t
| jjjd d|j | j | dS dS )zIncludes override configuration to the beginning and to the end of
VirtualHost. Note that this include isn't added to Augeas search treezCAdding a temporary challenge validation Include for name: %s in: %sIncludedefaultN)r rO rP rd filepr r1 add_dir_beginningr r add_dirr enabledr locadd)r rV r! r! r" rI s$
z'ApacheHttp01._set_up_include_directives)r r
r N)r N)__name__
__module__ __qualname____doc__rL rN r r r r, r( r* r& r rC rH rG r) r rn rI
__classcell__r! r! r r" r s
*
r ) r rk loggingtypingr r r acme.challengesr certbotr certbot.achallengesr certbot.compatr r certbot.pluginsr
certbot_apache._internal.objr certbot_apache._internal.parserr %certbot_apache._internal.configuratorr
getLoggerr rO ChallengePerformerr r! r! r! r" s$