Your IP : 216.73.216.52
�
q[�i, � �f � d Z ddlZddlmZ ddlmZmZ ddlmZ ddl
m Z ddl m
Z
G d� d � Z G d
� d e� Z G d � d
e� Zdee dee fd�Zdee deee ee f fd�Zdee dee dee fd�Zdee defd�Zde j0 de j2 deee ee f fd�Zy)zFTypes for representing IP addresses and DNS names internal to Certbot.� N)�abstractmethod)�Any�Iterable)� crypto_util)�x509)�enforce_domain_sanityc �& � e Zd ZdZedefd�� Zy)�SANzyA domain or IP address.
These are Certbot-internal types, independent of the acme module's messages.Identifier.
�returnc � � y)z+Return True if this is a wildcard DNS name.N� ��selfs ��/build/snapcraft-certbot-8ace4148c346cc61c23dfdbf9a13f72e/parts/certbot/install/lib/python3.12/site-packages/certbot/_internal/san.py� is_wildcardzSAN.is_wildcard s � � N)�__name__�
__module__� __qualname__�__doc__r �boolr r
r r r
r
s" � �� �:�T� :� �:r r
c �` � e Zd ZdZdeddfd�Zdefd�Zdefd�Zdefd�Z d e
de fd
�Z de fd �Z
y) �DNSNamez�An FQDN or wildcard domain name.
Raises ConfigurationError if the domain name is syntactically invalid.
Normalizes inputs by converting to lowercase and removing a trailing dot, if present.
�dns_namer Nc �Z � t |t � s t d� �t |� | _ y )Nz(tried to initialize DNSName with non-str)�
isinstance�str� TypeErrorr r )r r s r �__init__zDNSName.__init__ s$ � ��(�C�(�� F�G� G�-�h�7��
r c � � | j S �N�r r s r �__str__zDNSName.__str__ s � ��}�}� r c �, � t | j � S r! )�hashr r s r �__hash__zDNSName.__hash__# s � ��D�M�M�"�"r c � � d| j z S )NzDNS(%s)r" r s r �__repr__zDNSName.__repr__& s � ��4�=�=�(�(r �otherc � � |xt d� x� \ | j |j k( S t d� x�\ y t dt |� � �� �)Nr
Fz!DNSName SAN compared to non-SAN: )r r � IPAddressr �type�r r) s r �__eq__zDNSName.__eq__) sK � ������}�}����6�6� ��� � �� �"C�D��K�=� Q�R�Rr c �8 � | j j d� S )z+Return True if this DNS name is a wildcard.z*.)r �
startswithr s r r zDNSName.is_wildcard2 s � ��}�}�'�'��-�-r �r r r r r r r# �intr& r( r r r. r r
r r r r s` � �� 8�� 8�� 8�
�� �#�#� #�)�#� )�S�C� S�D� S�.�T� .r r c �` � e Zd ZdZdeddfd�Zdefd�Zdefd�Zdefd�Z d e
de fd
�Z de fd �Z
y) r+ zDAn IP address (IPv4 or IPv6).
Validated upon construction.
�
ip_addressr Nc �8 � t j |� | _ y r! )� ipaddressr4 )r r4 s r r zIPAddress.__init__; s � �#�.�.�z�:��r c �, � t | j � S r! )r r4 r s r r# zIPAddress.__str__> s � ��4�?�?�#�#r c �, � t | j � S r! )r% r4 r s r r& zIPAddress.__hash__A s � ��D�O�O�$�$r c � � d| j z S )NzIP(%s))r4 r s r r( zIPAddress.__repr__D s � ��$�/�/�)�)r r) c � � |xt d� x� \ | j |j k( S t d� x�\ y t dt |� � �� �)Nr
Fz#IPAddress SAN compared to non-SAN: )r+ r4 r r r, r- s r r. zIPAddress.__eq__G sM � �� ������%�*:�*:�:�:� ��� � �� �"E�d�5�k�]� S�T�Tr c � � y)z
Always False.Fr
r s r r zIPAddress.is_wildcardP s � �r r1 r
r r r+ r+ 6 s` � ��;�3� ;�4� ;�$�� $�%�#� %�*�#� *�U�C� U�D� U��T� r r+ �namesr c � � g }| D ] } |j t |� � � |S # t $ r |j t |� � Y �Gw xY w)zDTurn a list of strings in to a list of SANs based on how they parse.)�appendr+ �
ValueErrorr )r< �sans�names r �guessrB T sS � ��D�� '�� '� �K�K� �$�� (�'�
�K�� � '� �K�K���
� &� '�s �'�#A
� A
r@ c �� � g }g }| D ]X }|xt d� x�\ |j |� �# t d� x�\ |j |� �A t dt |� � �� � ||fS )zQSplit a list of SANs into a list of DNSNames and one of IPAddress, in that order.r
z SAN of type )r+ r> r r r, )r@ �domains� ip_addresses�ss r �splitrG ^ st � ��G��L�
� :��� ��� �#�#�A�&� ������q�!� �� �,�t�A�w�i� 8�9�9�:� �L� � r � dns_namesrE c �0 � t | � t |� z S )z7Combine a list of DNS names and a list of IP addresses.)�list)rH rE s r �joinrK l s � � � �?�T�,� /� /�/r c �@ � dj t t | � � S )zEReturn the list of SANs in string form, separated by comma and space.z, )rK �mapr )r@ s r �displayrN p s � � �9�9�S��d�^� $�$r �subject�extsc � � t j | |� \ }}|D �cg c]
}t |� �� c}|D �cg c]
}t |� �� c}fS c c}w c c}w )a� Get all DNS names and IP addresses, plus the first Common Name from subject.
The CN will be first in the list, if present. It will always be interpreted
as a DNS name.
:param subject: Name of the x509 object, which may include Common Name
:type subject: `cryptography.x509.Name`
:param exts: Extensions of the x509 object, which may include SANs
:type exts: `cryptography.x509.Extensions`
:returns: Tuple containing a list of DNSNames and a list of IPAddresses
)�acme_crypto_util�get_identifiers_from_x509r r+ )rO rP rH rE �d�is r � from_x509rV t sK � � /� H� H��RV� W��I�|� )� *�1�G�A�J� *�<�,P�a�Y�q�\�,P� P�P�� *��,Ps
�A �A)r r6 �abcr �typingr r �acmer rR � cryptographyr � certbot.utilr r
r r+ r rJ rB �tuplerG rK rN �Name�
ExtensionsrV r
r r �<module>r_ s� �� L� � � � 0� � .�:� :� .�c� .�D �� �<��#� � �4��9� � !���
� !�%��W�
�t�I��(F�"G� !� 0�H�W�%� 0�X�i�5H� 0�T�RU�Y� 0�%�(�3�-� %�C� %�Q�t�y�y� Q���� Q�E�$�w�-�QU�V_�Q`�B`�<a� Qr