File: //usr/lib/python2.7/site-packages/dns/tsig.pyo
�
�b�Wc @ s" d Z d d l Z d d l Z d d l Z d d l Z d d l Z d d l Z d d l m Z m
Z
m Z d e j j
f d � � YZ d e j j
f d � � YZ d e j j
f d
� � YZ d e f d � � YZ d
e f d � � YZ d e f d � � YZ d e f d � � YZ e j j d � Z e j j d � Z e j j d � Z e j j d � Z e j j d � Z e j j d � Z i d e 6d e 6d e 6d e 6d e 6d e 6Z e Z d Z d Z d! Z! d" Z" d e$ e% e d# � Z& d e$ e% e d$ � Z' d e$ e% d% � Z( d& � Z) d' � Z* d S(( s DNS TSIG support.i����Ni ( t longt string_typest text_typet BadTimec B s e Z d Z RS( s8 The current time is not within the TSIG's validity time.( t __name__t
__module__t __doc__( ( ( s, /usr/lib/python2.7/site-packages/dns/tsig.pyR s t BadSignaturec B s e Z d Z RS( s# The TSIG signature fails to verify.( R R R ( ( ( s, /usr/lib/python2.7/site-packages/dns/tsig.pyR s t PeerErrorc B s e Z d Z RS( s; Base class for all TSIG errors generated by the remote peer( R R R ( ( ( s, /usr/lib/python2.7/site-packages/dns/tsig.pyR % s t
PeerBadKeyc B s e Z d Z RS( s$ The peer didn't know the key we used( R R R ( ( ( s, /usr/lib/python2.7/site-packages/dns/tsig.pyR * s t PeerBadSignaturec B s e Z d Z RS( s* The peer didn't like the signature we sent( R R R ( ( ( s, /usr/lib/python2.7/site-packages/dns/tsig.pyR
/ s t PeerBadTimec B s e Z d Z RS( s% The peer didn't like the time we sent( R R R ( ( ( s, /usr/lib/python2.7/site-packages/dns/tsig.pyR 4 s t PeerBadTruncationc B s e Z d Z RS( s= The peer didn't like amount of truncation in the TSIG we sent( R R R ( ( ( s, /usr/lib/python2.7/site-packages/dns/tsig.pyR 9 s s HMAC-MD5.SIG-ALG.REG.INTs hmac-sha1s hmac-sha224s hmac-sha256s hmac-sha384s hmac-sha512t SHA224t SHA256t SHA384t SHA512t SHA1t MD5i i i i c
C sv t | t � r | j � } n t | � \ }
} | r� t j | d | �} t | � } | d k r� | j t j d | � � | j | � q� n t j d | � } | j | � | j | d � | r| j | j
� � | j t j d t j j
� � | j t j d d � � n | t d � } | d ?t d � @} | t d � @} t j d | | | � } |
| } t | � } | d k r�t d
� � n t j d | | � | } | r�| j | � | j | � n
| j | � | j � } t j d t | � � } | | | | | } |
rct j | d | �} t | � } | j t j d | � � | j | � n d } | | | f S(
sj Return a (tsig_rdata, mac, ctx) tuple containing the HMAC TSIG rdata
for the input parameters, the HMAC MAC calculated by applying the
TSIG signature algorithm, and the TSIG digest context.
@rtype: (string, string, hmac.HMAC object)
@raises ValueError: I{other_data} is too long
@raises NotImplementedError: I{algorithm} is not supported
t digestmodi s !Hi s !Ii i�� I���� s !HIHs TSIG Other Data is > 65535 bytess !HHN( t
isinstanceR t encodet
get_algorithmt hmact newt lent updatet structt packt
to_digestablet dnst
rdataclasst ANYR t
ValueErrort digestt None( t wiret keynamet secrett timet fudget original_idt errort
other_datat request_mact ctxt multit firstt algorithmt algorithm_nameR t mlt idt long_timet
upper_timet
lower_timet time_mact pre_mact olt post_mact mact mpackt
tsig_rdata( ( s, /usr/lib/python2.7/site-packages/dns/tsig.pyt signW sN
c
C s. t | | | | | | | | | | |
| | �
S( N( R> (
R$ R% R& R' R( R) R* R+ R, R- R. R/ R0 ( ( s, /usr/lib/python2.7/site-packages/dns/tsig.pyt hmac_md5� s c C sh t j d | d d !� \ } | d k r7 t j j � n | d 8} | d d !t j d | � | d | !} | }
t j j | |
� \ } } |
| }
t j d | |
|
d !� \ } } } } | t d � d >| t d � } |
d 7}
| |
|
| !} |
| 7}
t j d | |
|
d !� \ } } } |
d 7}
| |
|
| !} |
| 7}
|
| | k rnt j j � n | d k r�| t k r�t
� q�| t k r�t � q�| t
k r�t � q�| t k r�t � q�t d
| � � n | | } | | } | | k s
| | k rt � n t | | | | | | | | | | | |
| �
\ } } } | | k rdt � n | S( s* Validate the specified TSIG rdata against the other input parameters.
@raises FormError: The TSIG is badly formed.
@raises BadTime: There is too much time skew between the client and the
server.
@raises BadSignature: The TSIG signature did not validate
@rtype: hmac.HMAC objects !Hi
i i i s !HIHHi s !HHHi s unknown TSIG error code %d( R t unpackR t exceptiont FormErrorR t namet from_wireR t BADSIGR
t BADKEYR t BADTIMER t BADTRUNCR R R R> R ( R$ R% R& t nowR, t
tsig_startR= t
tsig_rdlenR- R. R/ t adcountt new_wiret currentt anamet usedR5 R6 R( t mac_sizeR' R; R) R* t
other_sizeR+ t time_lowt time_hight junkt our_mac( ( s, /usr/lib/python2.7/site-packages/dns/tsig.pyt validate� sN
(
)"
&
c C sx t | t � r$ t j j | � } n y" | j � t j j t | f SWn+ t k
rs t
d t | � d � � n Xd S( s� Returns the wire format string and the hash module to use for the
specified TSIG algorithm
@rtype: (string, hash constructor)
@raises NotImplementedError: I{algorithm} is not supported
s TSIG algorithm s is not supportedN( R R R RC t from_textR t hasht hashest _hashest KeyErrort NotImplementedErrort str( R0 ( ( s, /usr/lib/python2.7/site-packages/dns/tsig.pyR � s "
c C s� | } t j j | | � \ } } | | } t j d | | | d !� \ } } } } | d 7} | | | | !}
| | 7} | | | k r� t j j � n | |
f S( sl Return the tsig algorithm for the specified tsig_rdata
@raises FormError: The TSIG is badly formed.
s !HIHHi
( R RC RD R R@ RA RB ( R$ R= RK RN RO RP R5 R6 R( RQ R; ( ( s, /usr/lib/python2.7/site-packages/dns/tsig.pyt get_algorithm_and_mac� s
)
(+ R R R t
dns.exceptionR t dns.hasht dns.rdataclasst dns.namet _compatR R R RA t DNSExceptionR R R R R
R R RC RX t HMAC_MD5t HMAC_SHA1t HMAC_SHA224t HMAC_SHA256t HMAC_SHA384t HMAC_SHA512R[ t default_algorithmRE RF RG RH R# t Falset TrueR> R? RW R R_ ( ( ( s, /usr/lib/python2.7/site-packages/dns/tsig.pyt <module> sN
5 5