관리-도구
편집 파일: tsig.cpython-36.opt-1.pyc
3 �b�W& � @ s~ d Z ddlZddlZddlZddlZddlZddlZddlm Z m Z m Z G dd� dej j �ZG dd� dej j �ZG d d � d ej j �ZG d d � d e�ZG d d� de�ZG dd� de�ZG dd� de�Zejjd�Zejjd�Zejjd�Zejjd�Zejjd�Zejjd�Z ededede d ed ed iZ eZ d Z d Z d!Z!d"Z"dd#d$e fd%d&�Z#dd#d$e fd'd(�Z$d/d)d*�Z%d+d,� Z&d-d.� Z'dS )0zDNS TSIG support.� N� )�long� string_types� text_typec @ s e Zd ZdZdS )�BadTimez8The current time is not within the TSIG's validity time.N)�__name__� __module__� __qualname__�__doc__� r r �/usr/lib/python3.6/tsig.pyr s r c @ s e Zd ZdZdS )� BadSignaturez#The TSIG signature fails to verify.N)r r r r r r r r r s r c @ s e Zd ZdZdS )� PeerErrorz;Base class for all TSIG errors generated by the remote peerN)r r r r r r r r r % s r c @ s e Zd ZdZdS )� PeerBadKeyz$The peer didn't know the key we usedN)r r r r r r r r r * s r c @ s e Zd ZdZdS )�PeerBadSignaturez*The peer didn't like the signature we sentN)r r r r r r r r r / s r c @ s e Zd ZdZdS )� PeerBadTimez%The peer didn't like the time we sentN)r r r r r r r r r 4 s r c @ s e Zd ZdZdS )�PeerBadTruncationz=The peer didn't like amount of truncation in the TSIG we sentN)r r r r r r r r r 9 s r zHMAC-MD5.SIG-ALG.REG.INTz hmac-sha1z hmac-sha224z hmac-sha256z hmac-sha384z hmac-sha512ZSHA224ZSHA256ZSHA384ZSHA512ZSHA1ZMD5� � � � FTc C s� t |t�r|j� }t| �\} }| r\tj||d�} t|�}|dkr\| jtj d|�� | j|� tj d|�}| j|� | j| dd� � | r�| j|j � � | jtj dt j j �� | jtj dd�� |td� }|d? td�@ }|td �@ }tj d |||�}| | }t|�}|dk�rtd ��tj d ||�| }| �rF| j|� | j|� n | j|� | j� }tj dt|��}|| | | | }| �r�tj||d�} t|�}| jtj d|�� | j|� nd} ||| fS ) aj Return a (tsig_rdata, mac, ctx) tuple containing the HMAC TSIG rdata for the input parameters, the HMAC MAC calculated by applying the TSIG signature algorithm, and the TSIG digest context. @rtype: (string, string, hmac.HMAC object) @raises ValueError: I{other_data} is too long @raises NotImplementedError: I{algorithm} is not supported )� digestmodr z!H� Nz!I� i�� l �� z!HIHz TSIG Other Data is > 65535 bytesz!HH)� isinstancer �encode� get_algorithm�hmac�new�len�update�struct�pack� to_digestable�dnsZ rdataclass�ANYr � ValueErrorZdigest)�wire�keyname�secret�time�fudge� original_id�error� other_data� request_mac�ctx�multi�first� algorithmZalgorithm_namer Zml�idZ long_time� upper_time� lower_timeZtime_macZpre_macZolZpost_mac�macZmpack� tsig_rdatar r r �signW sN r9 c C s t | ||||||||| | | | � S )N)r9 ) r' r( r) r* r+ r, r- r. r/ r0 r1 r2 r3 r r r �hmac_md5� s r: c C s� t jd| dd� �\} | dkr&tjj�| d8 } | dd� t jd| � | d|� } |} tjj| | �\}}| | } t jd| | | d � �\}}}}|td� d> |td� }| d7 } | | | | � }| |7 } t jd| | | d � �\}}}| d 7 } | | | | � }| |7 } | || k�r tjj�|dk�rv|t k�r:t �n<|t k�rJt �n,|t k�rZt�n |tk�rjt�n td | ��|| }|| }||k �s�||k�r�t�t| |||||||||| | |� \} } }| |k�r�t�|S ) a* Validate the specified TSIG rdata against the other input parameters. @raises FormError: The TSIG is badly formed. @raises BadTime: There is too much time skew between the client and the server. @raises BadSignature: The TSIG signature did not validate @rtype: hmac.HMAC objectz!H� � r r z!HIHHr z!HHH� zunknown TSIG error code %d)r! �unpackr$ � exception� FormErrorr" �name� from_wirer �BADSIGr �BADKEYr �BADTIMEr �BADTRUNCr r r r9 r ) r' r( r) Znowr/ Z tsig_startr8 � tsig_rdlenr0 r1 r2 ZadcountZnew_wire�current�aname�usedr5 r6 r+ �mac_sizer* r7 r, r- Z other_sizer. Ztime_lowZ time_highZjunkZour_macr r r �validate� sN $ rL c C s\ t | t�rtjj| �} y| j� tjjt| fS t k rV t dt | � d ��Y nX dS )z�Returns the wire format string and the hash module to use for the specified TSIG algorithm @rtype: (string, hash constructor) @raises NotImplementedError: I{algorithm} is not supported zTSIG algorithm z is not supportedN) r r r$ rA � from_textr# �hashZhashes�_hashes�KeyError�NotImplementedError�str)r3 r r r r � s r c C sz |}t jj| |�\}}|| }tjd| ||d � �\}}}} |d7 }| ||| � } || 7 }||| krrt jj�|| fS )zlReturn the tsig algorithm for the specified tsig_rdata @raises FormError: The TSIG is badly formed. z!HIHHr; )r$ rA rB r! r> r? r@ ) r' r8 rG rH rI rJ r5 r6 r+ rK r7 r r r �get_algorithm_and_mac� s rS )NFT)(r r r! Z dns.exceptionr$ Zdns.hashZdns.rdataclassZdns.nameZ_compatr r r r? Z DNSExceptionr r r r r r r rA rM ZHMAC_MD5Z HMAC_SHA1Z HMAC_SHA224Z HMAC_SHA256Z HMAC_SHA384Z HMAC_SHA512rO Zdefault_algorithmrC rD rE rF r9 r: rL r rS r r r r �<module> sL 5 5