\\c@sHdZddlZddlZyddlmZWn!ek rUddlmZnXddlZddl m Z ddl m Z ddl m Z ddl m Z ddl mZd Zd Zi d d 6d d6dd6dd6dd6dd6dd6dd6dd6dd6dd 6d!d"6d#d$6Zed%ejDZejed&ejDd'Zejd(eje jfd)YZd*ejefd+YZd,efd-YZed.Zed/Zed0Zed1Z ed2Z!ed3Z"ed4Z#d5efd6YZ$e$d7Z%d8ejfd9YZ&d:ejfd;YZ'd<ejfd=YZ(d>e(fd?YZ)d@ejfdAYZ*dBe+fdCYZ,dDe*fdEYZ-e'j.dFe-fdGYZ/dHe-fdIYZ0dJe)fdKYZ1dLe*fdMYZ2dNe(fdOYZ3dPe*fdQYZ4e'j.dRe4fdSYZ5dTe)fdUYZ6e'j.dVejfdWYZ7dXe)fdYYZ8e'j.dZejfd[YZ9d\e*fd]YZ:d^e)fd_YZ;e'j.d`e:fdaYZ<dS(bsACME protocol messages.iN(tHashable(t challenges(terrors(tfields(tutil(tjwssurn:acme:error:surn:ietf:params:acme:error:s2The CSR is unacceptable (e.g., due to a short key)tbadCSRs1The client sent an unacceptable anti-replay noncetbadNonces?The server could not connect to the client to verify the domaint connections4The server could not validate a DNSSEC signed domaintdnssecs1The provided email for a registration was invalidt invalidEmails$The provided contact URI was invalidtinvalidContacts!The request message was malformedt malformeds,There were too many requests of a given typet rateLimiteds(The server experienced an internal errortserverInternals=The server experienced a TLS error during domain verificationttlss)The client lacks sufficient authorizationt unauthorizeds*The server could not resolve a domain namet unknownHosts,The server requires external account bindingtexternalAccountRequiredccs%|]\}}t||fVqdS(N(t ERROR_PREFIX(t.0tnametdesc((s1/usr/lib/python2.7/dist-packages/acme/messages.pys 'sccs%|]\}}t||fVqdS(N(tOLD_ERROR_PREFIX(RRR((s1/usr/lib/python2.7/dist-packages/acme/messages.pys *scCsBt|tr:|jdk r:t|jkp9t|jkStSdS(s#Check if argument is an ACME error.N(t isinstancetErrorttyptNoneRRtFalse(terr((s1/usr/lib/python2.7/dist-packages/acme/messages.pyt is_acme_error-sRcBseZdZejddeddZejddeZejddeZe dZ e dZ e d Z d ZRS( sACME error. https://tools.ietf.org/html/draft-ietf-appsawg-http-problem-00 :ivar unicode typ: :ivar unicode title: :ivar unicode detail: ttypet omitemptytdefaults about:blankttitletdetailcKs9|tkrtd|nt|}|d||S(sCreate an Error instance with an ACME Error code. :unicode code: An ACME error code, like 'dnssec'. :kwargs: kwargs to pass to Error. s4The supplied code: %s is not a known ACME error codeR(t ERROR_CODESt ValueErrorR(tclstcodetkwargsR((s1/usr/lib/python2.7/dist-packages/acme/messages.pyt with_codeDs    cCstj|jS(sHardcoded error description based on its type. :returns: Description if standard ACME error or ``None``. :rtype: unicode (tERROR_TYPE_DESCRIPTIONStgetR(tself((s1/usr/lib/python2.7/dist-packages/acme/messages.pyt descriptionRscCs0t|jjdd}|tkr,|SdS(sACME error code. Basically self.typ without the ERROR_PREFIX. :returns: error code if standard ACME code or ``None``. :rtype: unicode t:iN(tstrRtsplitR$(R,R'((s1/usr/lib/python2.7/dist-packages/acme/messages.pyR'\s  cCs5djd|j|j|j|jfDjS(Ns :: css-|]#}|dk r|jddVqdS(tasciitbackslashreplaceN(Rtencode(Rtpart((s1/usr/lib/python2.7/dist-packages/acme/messages.pys ls(tjoinRR-R#R"tdecode(R,((s1/usr/lib/python2.7/dist-packages/acme/messages.pyt__str__js(t__name__t __module__t__doc__tjosetFieldtTrueRR"R#t classmethodR)tpropertyR-R'R7(((s1/usr/lib/python2.7/dist-packages/acme/messages.pyR5s  t _ConstantcBs_eZdZd ZeZdZdZedZ dZ dZ dZ dZ RS( sACME constant.RcCs||j|<||_dS(N(tPOSSIBLE_NAMESR(R,R((s1/usr/lib/python2.7/dist-packages/acme/messages.pyt__init__vs cCs|jS(N(R(R,((s1/usr/lib/python2.7/dist-packages/acme/messages.pytto_partial_jsonzscCs8||jkr-tjdj|jn|j|S(Ns{0} not recognized(RAR;tDeserializationErrortformatR8(R&tvalue((s1/usr/lib/python2.7/dist-packages/acme/messages.pyt from_json}scCsdj|jj|jS(Ns{0}({1})(REt __class__R8R(R,((s1/usr/lib/python2.7/dist-packages/acme/messages.pyt__repr__scCs%t|t|o$|j|jkS(N(RRR(R,tother((s1/usr/lib/python2.7/dist-packages/acme/messages.pyt__eq__scCst|j|jfS(N(thashRHR(R,((s1/usr/lib/python2.7/dist-packages/acme/messages.pyt__hash__scCs ||k S(N((R,RJ((s1/usr/lib/python2.7/dist-packages/acme/messages.pyt__ne__s(sname(R8R9R:t __slots__tNotImplementedRARBRCR>RGRIRKRMRN(((s1/usr/lib/python2.7/dist-packages/acme/messages.pyR@qs     tStatuscBseZdZiZRS(sACME "status" field.(R8R9R:RA(((s1/usr/lib/python2.7/dist-packages/acme/messages.pyRQstunknowntpendingt processingtvalidtinvalidtrevokedtreadytIdentifierTypecBseZdZiZRS(sACME identifier type.(R8R9R:RA(((s1/usr/lib/python2.7/dist-packages/acme/messages.pyRYstdnst IdentifiercBs5eZdZejddejZejdZRS(sNACME identifier. :ivar IdentifierType typ: :ivar unicode value: RtdecoderRF( R8R9R:R;R<RYRGRRF(((s1/usr/lib/python2.7/dist-packages/acme/messages.pyR[st DirectorycBs~eZdZiZdejfdYZedZedZ dZ dZ dZ dZ ed ZRS( s Directory.tMetacBseZdZejddeZejddeZejddeZejddeZ ejddeZ dZ e dZ d Zd ZRS( sDirectory Meta.sterms-of-serviceR ttermsOfServicetwebsitet caaIdentitiesRc s?tfd|jD}ttjj|dS(Nc3s*|] \}}j||fVqdS(N(t_internal_name(Rtktv(R,(s1/usr/lib/python2.7/dist-packages/acme/messages.pys s(tdicttitemstsuperR]R^RB(R,R(((R,s1/usr/lib/python2.7/dist-packages/acme/messages.pyRBs"cCs|jp|jS(sURL for the CA TOS(t_terms_of_servicet_terms_of_service_v2(R,((s1/usr/lib/python2.7/dist-packages/acme/messages.pytterms_of_servicesccsBx;ttj|jD]!}|dkr5|dn|VqWdS(NRhi(RgR]R^t__iter__(R,R((s1/usr/lib/python2.7/dist-packages/acme/messages.pyRkscCs|dkrd|S|S(NRjt_((R,R((s1/usr/lib/python2.7/dist-packages/acme/messages.pyRbs(R8R9R:R;R<R=RhRiR`tcaa_identitiestexternal_account_requiredRBR?RjRkRb(((s1/usr/lib/python2.7/dist-packages/acme/messages.pyR^s  cCst|d|S(Nt resource_type(tgetattr(R&tkey((s1/usr/lib/python2.7/dist-packages/acme/messages.pyt _canon_keyscCs/|j}||jkst||j|<|S(sRegister resource.(Rot_REGISTERED_TYPEStAssertionError(R&tresource_body_clsRo((s1/usr/lib/python2.7/dist-packages/acme/messages.pytregisters  cCs"tj||j}||_dS(N(Rtmap_keysRrt_jobj(R,tjobjt canon_jobj((s1/usr/lib/python2.7/dist-packages/acme/messages.pyRBscCsLy||jddSWn-tk rG}tt|d|nXdS(NRlt-s: (treplacetKeyErrortAttributeErrorR/(R,Rterror((s1/usr/lib/python2.7/dist-packages/acme/messages.pyt __getattr__scCs<y|j|j|SWntk r7tdnXdS(NsDirectory field not found(RxRrR}(R,R((s1/usr/lib/python2.7/dist-packages/acme/messages.pyt __getitem__s cCs|jS(N(Rx(R,((s1/usr/lib/python2.7/dist-packages/acme/messages.pyRCscCs,|jj|jdi|d<||S(Ntmeta(R^RGtpop(R&Ry((s1/usr/lib/python2.7/dist-packages/acme/messages.pyRGs"(R8R9R:RsR;tJSONObjectWithFieldsR^R>RrRvRBRRRCRG(((s1/usr/lib/python2.7/dist-packages/acme/messages.pyR]s    tResourcecBseZdZejdZRS(sOACME Resource. :ivar acme.messages.ResourceBody body: Resource body. tbody(R8R9R:R;R<R(((s1/usr/lib/python2.7/dist-packages/acme/messages.pyRstResourceWithURIcBseZdZejdZRS(sOACME Resource with URI. :ivar unicode uri: Location of the resource. turi(R8R9R:R;R<R(((s1/usr/lib/python2.7/dist-packages/acme/messages.pyRst ResourceBodycBseZdZRS(sACME Resource Body.(R8R9R:(((s1/usr/lib/python2.7/dist-packages/acme/messages.pyRstExternalAccountBindingcBseZdZedZRS(sACME External Account Bindingc Cswtj|jj}tjj|}|d}tjj |tj j d|tj j d||}|jS(sLCreate External Account Binding Resource from contact details, kid and hmac.t newAccountRqN(tjsontdumpsRCR3R;tb64t b64decodeRtJWStsigntjwktJWKOcttjwatHS256R( R&taccount_public_keytkidthmac_keyt directorytkey_jsontdecoded_hmac_keyturlteab((s1/usr/lib/python2.7/dist-packages/acme/messages.pyt from_datas   (R8R9R:R>R(((s1/usr/lib/python2.7/dist-packages/acme/messages.pyR st RegistrationcBseZdZejddedejjZejddeddZ ejddeZ ejddeZ ejddeZ ejd deZ ejd deZd Zd Zedddd ZdZedZedZRS(sRegistration Resource Body. :ivar josepy.jwk.JWK key: Public key. :ivar tuple contact: Contact information following ACME spec, `tuple` of `unicode`. :ivar unicode agreement: RqR R\tcontactR!t agreementtstatusttermsOfServiceAgreedtonlyReturnExistingtexternalAccountBindingstel:smailto:cKst|jdd}|dk r;|j|j|n|dk rz|jg|jdD]}|j|^q]nt||d<|r||dEs(RR(R,R((Rs1/usr/lib/python2.7/dist-packages/acme/messages.pyt_filter_contactCscCs|j|jS(s*All phones found in the ``contact`` field.(RR(R,((s1/usr/lib/python2.7/dist-packages/acme/messages.pytphonesHscCs|j|jS(s*All emails found in the ``contact`` field.(RR(R,((s1/usr/lib/python2.7/dist-packages/acme/messages.pytemailsMs(N(R8R9R:R;R<R=tJWKRGRqRRRtterms_of_service_agreedtonly_return_existingRRRR>RRRR?RR(((s1/usr/lib/python2.7/dist-packages/acme/messages.pyRs! tNewRegistrationcBs#eZdZdZejeZRS(sNew registration.snew-reg(R8R9R:RoRRtresource(((s1/usr/lib/python2.7/dist-packages/acme/messages.pyRSstUpdateRegistrationcBs#eZdZdZejeZRS(sUpdate registration.treg(R8R9R:RoRRR(((s1/usr/lib/python2.7/dist-packages/acme/messages.pyRZstRegistrationResourcecBsPeZdZejddejZejddeZ ejddeZ RS(sRegistration Resource. :ivar acme.messages.Registration body: :ivar unicode new_authzr_uri: Deprecated. Do not use. :ivar unicode terms_of_service: URL for the CA TOS. RR\tnew_authzr_uriR Rj( R8R9R:R;R<RRGRR=RRj(((s1/usr/lib/python2.7/dist-packages/acme/messages.pyR`st ChallengeBodycBseZdZdZejddeddZejddeddZ ejdde j dede Z ejddeZejd dej deddZd Zd Zd Zed ZedZdZdZdZRS(s>Challenge Resource Body. .. todo:: Confusingly, this has a similar name to `.challenges.Challenge`, as well as `.achallenges.AnnotatedChallenge`. Please use names such as ``challb`` to distinguish instances of this class from ``achall``. :ivar acme.challenges.Challenge: Wrapped challenge. Conveniently, all challenge fields are proxied, i.e. you can call ``challb.x`` to get ``challb.chall.x`` contents. :ivar acme.messages.Status status: :ivar datetime.datetime validated: :ivar messages.Error error: tchallRR R!RRR\t validatedRc s<tfd|jD}ttj|dS(Nc3s*|] \}}j||fVqdS(N(Rb(RRcRd(R,(s1/usr/lib/python2.7/dist-packages/acme/messages.pys s(ReRfRgRRB(R,R(((R,s1/usr/lib/python2.7/dist-packages/acme/messages.pyRBs"cCstt|j|j|S(N(RgRR3Rb(R,R((s1/usr/lib/python2.7/dist-packages/acme/messages.pyR3scCs/tt|j}|j|jj|S(N(RgRRCtupdateR(R,Ry((s1/usr/lib/python2.7/dist-packages/acme/messages.pyRCscCs2tt|j|}tjj||d<|S(NR(RgRtfields_from_jsonRt ChallengeRG(R&Ryt jobj_fields((s1/usr/lib/python2.7/dist-packages/acme/messages.pyRscCs|jp|jS(sThe URL of this challenge.(t_urlt_uri(R,((s1/usr/lib/python2.7/dist-packages/acme/messages.pyRscCst|j|S(N(RpR(R,R((s1/usr/lib/python2.7/dist-packages/acme/messages.pyRsccs?x8tt|jD]!}|dkr2|dn|VqWdS(NRi(RgRRk(R,R((s1/usr/lib/python2.7/dist-packages/acme/messages.pyRkscCs|dkrd|S|S(NRRl((R,R((s1/usr/lib/python2.7/dist-packages/acme/messages.pyRbs(schallN(R8R9R:ROR;R<R=RRRRQRGtSTATUS_PENDINGRRt RFC3339FieldRRRRBR3RCR>RR?RRRkRb(((s1/usr/lib/python2.7/dist-packages/acme/messages.pyRms"     tChallengeResourcecBsDeZdZejddejZejdZe dZ RS(sChallenge Resource. :ivar acme.messages.ChallengeBody body: :ivar unicode authzr_uri: URI found in the 'up' ``Link`` header. RR\t authzr_uricCs |jjS(sThe URL of the challenge body.(RR(R,((s1/usr/lib/python2.7/dist-packages/acme/messages.pyRs( R8R9R:R;R<RRGRRR?R(((s1/usr/lib/python2.7/dist-packages/acme/messages.pyRst AuthorizationcBseZdZejddejZejddeZ ejddeZ ejddede jZ e jddeZejddeZe jd Z ed ZRS( s^Authorization Resource Body. :ivar acme.messages.Identifier identifier: :ivar list challenges: `list` of `.ChallengeBody` :ivar tuple combinations: Challenge combinations (`tuple` of `tuple` of `int`, as opposed to `list` of `list` from the spec). :ivar acme.messages.Status status: :ivar datetime.datetime expires: t identifierR\RR t combinationsRtexpirestwildcardcCstd|DS(Ncss|]}tj|VqdS(N(RRG(RR((s1/usr/lib/python2.7/dist-packages/acme/messages.pys s(R(RF((s1/usr/lib/python2.7/dist-packages/acme/messages.pyRscstfdjDS(s0Combinations with challenges instead of indices.c3s+|]!}tfd|DVqdS(c3s|]}j|VqdS(N(R(Rtidx(R,(s1/usr/lib/python2.7/dist-packages/acme/messages.pys sN(R(Rtcombo(R,(s1/usr/lib/python2.7/dist-packages/acme/messages.pys s(RR(R,((R,s1/usr/lib/python2.7/dist-packages/acme/messages.pytresolved_combinationss(R8R9R:R;R<R[RGRR=RRRQRRRRRR\R?R(((s1/usr/lib/python2.7/dist-packages/acme/messages.pyRs tNewAuthorizationcBs#eZdZdZejeZRS(sNew authorization.s new-authz(R8R9R:RoRRR(((s1/usr/lib/python2.7/dist-packages/acme/messages.pyRstAuthorizationResourcecBs;eZdZejddejZejddeZ RS(sAuthorization Resource. :ivar acme.messages.Authorization body: :ivar unicode new_cert_uri: Deprecated. Do not use. RR\t new_cert_uriR ( R8R9R:R;R<RRGRR=R(((s1/usr/lib/python2.7/dist-packages/acme/messages.pyRstCertificateRequestcBsDeZdZdZejeZejddej dej Z RS(sACME new-cert request. :ivar josepy.util.ComparableX509 csr: `OpenSSL.crypto.X509Req` wrapped in `.ComparableX509` snew-certtcsrR\tencoder( R8R9R:RoRRRR;R<t decode_csrt encode_csrR(((s1/usr/lib/python2.7/dist-packages/acme/messages.pyRstCertificateResourcecBs,eZdZejdZejdZRS(sCertificate Resource. :ivar josepy.util.ComparableX509 body: `OpenSSL.crypto.X509` wrapped in `.ComparableX509` :ivar unicode cert_chain_uri: URI found in the 'up' ``Link`` header :ivar tuple authzrs: `tuple` of `AuthorizationResource`. tcert_chain_uritauthzrs(R8R9R:R;R<RR(((s1/usr/lib/python2.7/dist-packages/acme/messages.pyRst RevocationcBsSeZdZdZejeZejddej dej Z ejdZ RS(s|Revocation message. :ivar .ComparableX509 certificate: `OpenSSL.crypto.X509` wrapped in `.ComparableX509` s revoke-certt certificateR\Rtreason( R8R9R:RoRRRR;R<t decode_certt encode_certRR(((s1/usr/lib/python2.7/dist-packages/acme/messages.pyRs tOrdercBseZdZejddeZejddejdeZ ejddeZ ejddeZ ejddeZ e jddeZejd dedejZejd ZRS( sOrder Resource Body. :ivar list of .Identifier: List of identifiers for the certificate. :ivar acme.messages.Status status: :ivar list of str authorizations: URLs of authorizations. :ivar str certificate: URL to download certificate as a fullchain PEM. :ivar str finalize: URL to POST to to request issuance once all authorizations have "valid" status. :ivar datetime.datetime expires: When the order expires. :ivar .Error error: Any error that occurred during finalization, if applicable. t identifiersR RR\tauthorizationsRtfinalizeRRcCstd|DS(Ncss|]}tj|VqdS(N(R[RG(RR((s1/usr/lib/python2.7/dist-packages/acme/messages.pys 5s(R(RF((s1/usr/lib/python2.7/dist-packages/acme/messages.pyR3s(R8R9R:R;R<R=RRQRGRRRRRRRRRR\(((s1/usr/lib/python2.7/dist-packages/acme/messages.pyRs  t OrderResourcecBs_eZdZejddejZejddeZ ejdZ ejddeZ RS(sOrder Resource. :ivar acme.messages.Order body: :ivar str csr_pem: The CSR this Order will be finalized with. :ivar list of acme.messages.AuthorizationResource authorizations: Fully-fetched AuthorizationResource objects. :ivar str fullchain_pem: The fetched contents of the certificate URL produced once the order was finalized, if it's present. RR\tcsr_pemR Rt fullchain_pem( R8R9R:R;R<RRGRR=RRR(((s1/usr/lib/python2.7/dist-packages/acme/messages.pyR7s  tNewOrdercBseZdZdZRS(s New order.s new-order(R8R9R:Ro(((s1/usr/lib/python2.7/dist-packages/acme/messages.pyRFs(=R:tsixRtcollections.abcRt ImportErrort collectionstjosepyR;tacmeRRRRRRRR$ReRfR*RRtpython_2_unicode_compatibleRRtJSONDeSerializableR@RQtSTATUS_UNKNOWNRtSTATUS_PROCESSINGt STATUS_VALIDtSTATUS_INVALIDtSTATUS_REVOKEDt STATUS_READYRYtIDENTIFIER_FQDNR[R]RRRtobjectRRRvRRRRRRRRRRRRRR(((s1/usr/lib/python2.7/dist-packages/acme/messages.pyts        ;          H  5  C"