관리-도구
편집 파일: keymgr.cpython-36.pyc
3 ���fk � @ s� d dl mZ d dlZd dlZd dlZd dlZd dlZd dlZd dlZd dl Z d dl m Z dZ d dl mZmZmZmZmZmZ dd� Zddd �Zd d � Zd d � ZdS )� )�print_functionN)� defaultdictz dnssec-keymgr)�dnskey�keydict� keyseries�policy�parsetab�utilsc O s t | |� tjd� d S )N� )�print�sys�exit)�args�kwargs� r � /usr/lib/python3.6/keymgr.py�fatal s r c C s� |}| s(t jj|� s(t j|t j� r�t jd }|s>t jj}xB|jt j�D ]2}|t j | }t jj|�rzt j|t j�rzP d}qLW |S )a2 find the location of a specified command. If a default is supplied, exists and it's an executable, we use it; otherwise we search PATH for an alternative. :param command: command to look for :param default: default value to use :return: PATH with the location of a suitable binary �PATHN) �os�path�isfile�access�X_OK�environ�defpath�split�pathsep�sep)Zcommand�defaultZfpathr Z directoryr r r �set_path s $ r c C s� t dtjjtjd�d��} t dtjjtjd�d��}tjtd d�}|j dt ddd;d � |j d d t ddd� |j ddt ddd� |j dd| t dd d� |j ddt ddd d � |j d d |t d d d� |j d d!d"d#d$d%� |j d&d'd"d#d(d%� |j d)d*d+d"d#d<d%� |j d.d/d0d"d#d1d%� |j d2d3d4tj d5� |j � }|j �rJ|j�rJtd6� |jdk�r^td7� |jdk�rrtd8� |jdk �r�tjj|j��s�td9|j � n(tjjtjd:�|_tjj|j��s�d|_|S )=zc Read command line arguments, returns 'args' object :return: args object properly prepared z dnssec-keygenZsbinzdnssec-settimezA: schedule DNSSEC key rollovers according to a pre-defined policy)� description�zone�*Nz.Zone(s) to which the policy should be applied z%(default: all zones in the directory))�type�nargsr �helpz-Kr zDirectory containing keys�dir)�destr# r% �metavarz-c� policyfilezPolicy definition file�filez-g�keygenzPath to 'dnssec-keygen')r' r r# r% r( z-r� randomdevz@Path to a file containing random data to pass to 'dnssec-keygen')r' r# r r% r( z-s�settimezPath to 'dnssec-settime'z-k�no_zsk� store_trueFz,Only apply policy to key-signing keys (KSKs))r' �actionr r% z-z�no_kskz-Only apply policy to zone-signing keys (ZSKs)z-fz--force�forcez Force updates to key events z even if they are in the pastz-qz--quiet�quietzUpdate keys silentlyz-vz --version�version)r0 r4 z)ERROR: -z and -k cannot be used together.z ERROR: dnssec-keygen not foundz ERROR: dnssec-settime not foundz!ERROR: Policy file "%s" not foundzdnssec-policy.confzSZone(s) to which the policy should be applied (default: all zones in the directory)z8Force updates to key events even if they are in the past)r r r �joinr �prefix�argparse�ArgumentParser�prog� add_argument�strr4 � parse_argsr. r1 r r+ r- r) �existsZ sysconfdir)r+ r- �parserr r r r r< 6 sb r< c : C sH t � } | j| j| j| jd�}ytj| j�}W n2 tk r^ } zt dt |� � W Y d d }~X nX yt || j| j d�}W n2 tk r� } zt dt |� � W Y d d }~X nX yt ||d�}W n2 tk r� } zt dt |� � W Y d d }~X nX y |j|| j| j| j| jd� W n4 tk �rB } zt dt |� � W Y d d }~X nX d S ) N)Z keygen_pathZ settime_pathZ keys_pathr, z Unable to load DNSSEC policy: )r Zzonesz Unable to build key dictionary: )�contextz Unable to build key series: )ZkskZzskr2 r3 zUnable to apply policy: )r< r+ r- r r, r Z dnssec_policyr) � Exceptionr r; r r! r Zenforce_policyr. r1 r2 r3 )r r? Zdp�eZkdZksr r r �main} s, """rB )N)Z __future__r r r r7 Zglob�reZtimeZcalendar�pprint� collectionsr r9 Ziscr r r r r r r r r< rB r r r r �<module> s @ G