| Server IP : 127.0.0.1 / Your IP : 216.73.216.109 Web Server : Apache/2.4.54 (Win64) OpenSSL/1.1.1q PHP/8.1.10 System : Windows NT DESKTOP-E5T4RUN 10.0 build 19045 (Windows 10) AMD64 User : SERVERWEB ( 0) PHP Version : 8.1.10 Disable Function : NONE MySQL : OFF | cURL : ON | WGET : OFF | Perl : OFF | Python : OFF | Sudo : OFF | Pkexec : OFF Directory : C:/cygwin64/lib/python3.7/site-packages/isc/__pycache__/ |
Upload File : |
B
��e]1g �
@ s> d dl Z d dlmZ d dlmZ d dlT d dlmZ G dd� d�ZG dd� d�ZG dd � d e �Z
G d
d � d �Z e d k�r:d dl
Z
e
jd
dkr�ee
jd �Ze�� Ze�� ed
d�Ze�e� nxe
jd
dk�r:y4e e
jd ddd�Zeejd � ee�d�� W n2 e k
�r8 Z zeejd � W ddZ[X Y nX dS )� N)�*)�copyc @ s� e Zd ZdZed Zi ZdZdZdZdZ dZ
dd � Z d
d � Z d d
� Z
dd� Zdd� Zdd� Zdd� Zdd� Zdd� Zdd� Zd d � Zd S ) � PolicyLex)
ZPOLICYZALGORITHM_POLICYZZONEZ ALGORITHMZ DIRECTORYZKEYTTLZKEY_SIZEZ ROLL_PERIODZ PRE_PUBLISHZ POST_PUBLISHZCOVERAGEZSTANDBYZNONE) Z
DATESUFFIXZKEYTYPEZALGNAME�STR�QSTRING�NUMBER�LBRACE�RBRACE�SEMIz z (//|\#).*z\{z\}�;c C s |j j|j�d�7 _dS )z\n+�
N)�lexer�lineno�value�count)�self�t� r � /usr/lib/python3.7/policy.py� t_newline7 s zPolicyLex.t_newlinec C s |j j|j�d�7 _dS )z/\*(.|\n)*?\*/r N)r
r r r )r r r r r � t_comment; s zPolicyLex.t_commentc C s t �d|j��d��� |_|S )z�(?i)(?<=[0-9 \t])(y(?:ears|ear|ea|e)?|mo(?:nths|nth|nt|n)?|w(?:eeks|eek|ee|e)?|d(?:ays|ay|a)?|h(?:ours|our|ou|o)?|mi(?:nutes|nute|nut|nu|n)?|s(?:econds|econd|econ|eco|ec|e)?)\bz (?i)(y|mo|w|d|h|mi|s)([a-z]*)� )�re�matchr �group�lower)r r r r r � t_DATESUFFIX? s zPolicyLex.t_DATESUFFIXc C s |j �� |_ |S )z(?i)\b(KSK|ZSK)\b)r �upper)r r r r r � t_KEYTYPED s zPolicyLex.t_KEYTYPEc C s |j �� |_ |S )z�(?i)\b(RSAMD5|DH|DSA|NSEC3DSA|ECC|RSASHA1|NSEC3RSASHA1|RSASHA256|RSASHA512|ECCGOST|ECDSAP256SHA256|ECDSAP384SHA384|ED25519|ED448)\b)r r )r r r r r � t_ALGNAMEI s zPolicyLex.t_ALGNAMEc C s | j �|jd�|_|S )z[A-Za-z._-][\w._-]*r )� reserved_map�getr �type)r r r r r �t_STRN s zPolicyLex.t_STRc C s& | j �|jd�|_|jdd� |_|S )z"([^"\n]|(\\"))*"r r ���)r r! r r" )r r r r r � t_QSTRINGS s zPolicyLex.t_QSTRINGc C s t |j�|_|S )z\d+)�intr )r r r r r �t_NUMBERY s zPolicyLex.t_NUMBERc C s" t d|jd � |j�d� d S )NzIllegal character '%s'r r )�printr r
�skip)r r r r r �t_error^ s zPolicyLex.t_errorc K sb dt t�krt�dd�}n
tdd�}x"| jD ]}|| j|�� �|�< q,W tjf d| i|��| _d S )N� maketrans�_�-�object) �dir�strr+ �reservedr r � translate�lexr
)r �kwargsZtrans�rr r r �__init__b s
zPolicyLex.__init__c C s. | j �|� x | j �� }|s P t|� qW d S )N)r
�input�tokenr( )r �textr r r r �testk s
zPolicyLex.testN)�__name__�
__module__� __qualname__r1 �tokensr Zt_ignoreZt_ignore_olcommentZt_LBRACEZt_RBRACEZt_SEMIr r r r r r# r% r' r* r6 r: r r r r r s& r c
@ s� e Zd ZdZdZdZdZdZdZdZ dZ
dZ dZ dZ
dZdZdZdZdZddgddgddgddgddgddgddgdddddd� Zddd�Zd d
� Zd d � Zd
d� Zdd� Zdd� ZdS )�PolicyFNi i i ) �DSA�NSEC3DSA�RSAMD5�RSASHA1� NSEC3RSASHA1� RSASHA256� RSASHA512�ECCGOST�ECDSAP256SHA256�ECDSAP384SHA384�ED25519�ED448c C s || _ || _|| _d S )N)�name� algorithm�parent)r rL rM rN r r r r6 � s zPolicy.__init__c C sF d| j r dp"| jrdp"| jr dp"d| jp*d| jr8| jjp:d| jrRdt| j� d pTd| jp\d| jrlt| j�pnd| j r~t| j �p�d| j
r�t| j
�p�d| j r�t| j �p�d| j r�t| j �p�d| j
r�t| j
�p�d| jr�t| j�p�d| jr�t| j�p�d| jr�t| j�p�d| j�rt| j��pd| j�r(t| j��p*d| j�r>t| j��p@df S ) Na %spolicy %s:
inherits %s
directory %s
algorithm %s
coverage %s
ksk_keysize %s
zsk_keysize %s
ksk_rollperiod %s
zsk_rollperiod %s
ksk_prepublish %s
ksk_postpublish %s
zsk_prepublish %s
zsk_postpublish %s
ksk_standby %s
zsk_standby %s
keyttl %s
z constructed zzone z
algorithm � ZUNKNOWN�None�")�is_constructed�is_zone�is_algrL rN � directoryr0 rM �coverage� ksk_keysize� zsk_keysize�ksk_rollperiod�zsk_rollperiod�ksk_prepublish�ksk_postpublish�zsk_prepublish�zsk_postpublish� ksk_standby� zsk_standby�keyttl)r r r r �__repr__� s(
zPolicy.__repr__c C s |d | ko|d kS S )Nr r r )r Zkey_sizeZ
size_ranger r r Z
__verify_size� s zPolicy.__verify_sizec C s | j S )N)rL )r r r r �get_name� s zPolicy.get_namec C s | j S )N)rR )r r r r � constructed� s zPolicy.constructedc C s* | j r:| jdk r:| j| j kr:t| j � dd| j| j f fS | j rj| jdk rj| j| j krjdd| j| j f fS | jr�| jdk r�| j| jkr�dd| j| jf fS | jr�| jdk r�| j| jkr�dd| j| jf fS | j �r| j�r| j�r| j| j | j k�rdd| j| j| j f fS | j�rR| j�rR| j�rR| j| j | jk�rRdd| j| j| jf fS | jdk �r&| j� | j�}|dk �r�| �
| j |��s�dd | j |f fS | �
| j |��s�dd
| j |f fS | jd k�r�| j d d
k�r�dd| j fS | jd k�r| j d d
k�rdd| j fS | jdk�r&d| _ d| _ dS )zr Check if the values in the policy make sense
:return: True/False if the policy passes validation
NFz6KSK pre-publish period (%d) exceeds rollover period %dz7KSK post-publish period (%d) exceeds rollover period %dz6ZSK pre-publish period (%d) exceeds rollover period %dz7ZSK post-publish period (%d) exceeds rollover period %dzGKSK pre/post-publish periods (%d/%d) combined exceed rollover period %dzGZSK pre/post-publish periods (%d/%d) combined exceed rollover period %dz&KSK key size %d outside valid range %sz&ZSK key size %d outside valid range %s)r@ rA �@ r z7KSK key size %d not divisible by 64 as required for DSAz7ZSK key size %d not divisible by 64 as required for DSA)rG rH rI rJ rK )TrO )
rY r[ r( r\ rZ r] r^ rM �valid_key_sz_per_algor! �_Policy__verify_sizerW rX )r Z key_sz_ranger r r �validate� s�
zPolicy.validate)NNN)r; r< r= rS rT rR rY rZ r[ r] r\ r^ rW rX r_ r` ra rV rU rf r6 rb rg rc rd rh r r r r r? v sD
&r? c @ s e Zd ZdS )�PolicyExceptionN)r; r< r= r r r r ri ) s ri c @ s. e Zd Zi Zi Zi ZdZdZdZdEdd�Z dd� Z
dd� Z d d
� Z d d � Z
d
d� Zdd� Zdd� Zdd� Zdd� Zdd� Zdd� Zdd � Zd d � Zd d � Zd!d"� Zd#d$� Zd%d&� Zd'd(� Zd)d*� Z d+d,� Z d-d.� Z d/d0� Z d1d2� Z d3d4� Z!d5d6� Z"d7d8� Z#d9d:� Z$d;d<� Z%d=d>� Z&d?d@� Z'dAdB� Z(dCdD� Z)dS )F�
dnssec_policyNTc K s� t � | _| jj| _d|kr"d|d< d|kr2d|d< tjf d| i|��| _| �d� t� }d |_d|_d|_ d|_
t |�| j d< d| j d _d| j d _
d | j d _ t |�| j d
< d
| j d
_d
| j d
_
d | j d
_ t |�| j d < d | j d _d | j d _
t |�| j d < d | j d _d | j d _
t |�| j d
< d
| j d
_d
| j d
_
t |�| j d< d| j d _d| j d _
t |�| j d< d| j d _d| j d _
t |�| j d< d| j d _d| j d _
t |�| j d< d| j d _d| j d _
d | j d _ d | j d _
t |�| j d< d| j d _d| j d _
d | j d _ d | j d _
t |�| j d< d| j d _d| j d _
d | j d _ d | j d _
t |�| j d< d| j d _d| j d _
d | j d _ d | j d _
|�r�| �|� d S )N�debugF� write_tables�modulea policy global { algorithm rsasha256;
key-size ksk 2048;
key-size zsk 2048;
roll-period ksk 0;
roll-period zsk 1y;
pre-publish ksk 1mo;
pre-publish zsk 1mo;
post-publish ksk 1mo;
post-publish zsk 1mo;
standby ksk 0;
standby zsk 0;
keyttl 1h;
coverage 6mo; };
policy default { policy global; };Ti r@ i rA rB rC rD rE rF rG rH rI rJ rK )r �plexr> �yacc�parser�setupr? rM rT rW rX r �
alg_policyrL �load)r �filenamer4 �pr r r r6 4 s|
zdnssec_policy.__init__c C sH || _ d| _t|��$}|�� }d| jj_| j�|� W d Q R X d | _ d S )NTr ) rt �initial�open�readrn r
r rp �parse)r rt �fr9 r r r rs � s
zdnssec_policy.loadc C s d| _ d| jj_| j�|� d S )NTr )rv rn r
r rp ry )r r9 r r r rq � s
zdnssec_policy.setupc K sD |� � }d }|| jkr | j| }|d krBt| jd �}||_d|_|jd kr�|jpZ| jd }x|rp|jsp|j}q^W |r||jp~d |_|j| jkr�| j|j }nt d��|j
d kr�|jp�| jd }x|d k r�|j
s�|j}q�W |o�|j
|_
|j d k�r2|jp�| jd }x|�r|j �s|j}�qW |�r*|j �p.|j |_ |j d k�r�|j�pN| jd }x |j�rl|j �sl|j}�qRW |�r||j �p�|j |_ |j
d k�r�|j�p�| jd }x |j�r�|j
�s�|j}�q�W |�r�|j
�p�|j
|_
|jd k�r(|j�p�| jd }x |j�r|j�s|j}�q�W |�r |j�p$|j|_|jd k�rz|j�pD| jd }x |j�rb|j�sb|j}�qHW |�rr|j�pv|j|_|jd k�r�|j�p�| jd }x |j�r�|j�s�|j}�q�W |�r�|j�p�|j|_|jd k�r |j�p�| jd }x |j�r|j�s|j}�q�W |�r|j�p|j|_|jd k�rp|j�p:| jd }x |j�rX|j�sX|j}�q>W |�rh|j�pl|j|_|jd k�r�|j�p�| jd }x |j�r�|j�s�|j}�q�W |�r�|j�p�|j|_|jd k�r|j�p�| jd }x |d k �r�|j�s�|j}�q�W |�o
|j|_d|k�s"|d �s@|�� \}}|�s@t |��d S |S )N�defaultTzalgorithm not foundZ
novalidate)r � zone_policyr � named_policyrL rR rM rN rr ri rU rV rW rX rY rZ r[ r] r\ r^ ra rh ) r Zzoner4 �zru rN ZapZvalid�msgr r r �policy� s�
zdnssec_policy.policyc C s dS )zBpolicylist : init policy
| policylist policyNr )r ru r r r � p_policylist
s zdnssec_policy.p_policylistc C s
d| _ dS )zinit :FN)rv )r ru r r r �p_init s zdnssec_policy.p_initc C s dS )zTpolicy : alg_policy
| zone_policy
| named_policyNr )r ru r r r �p_policy s zdnssec_policy.p_policyc C s |d |d< dS )zAname : STR
| KEYTYPE
| DATESUFFIXr r Nr )r ru r r r �p_name s zdnssec_policy.p_namec C s, |d � � |d< t�d|d �s(td��dS )zcdomain : STR
| QSTRING
| KEYTYPE
| DATESUFFIXr r z^[\w.-][\w.-]*$zinvalid domainN)�stripr r ri )r ru r r r �p_domain s zdnssec_policy.p_domainc C s t � | _dS )z new_policy :N)r? �current)r ru r r r � p_new_policy* s zdnssec_policy.p_new_policyc C s( |d | j _d| j _| j | j|d < dS )zFalg_policy : ALGORITHM_POLICY ALGNAME new_policy alg_option_group SEMI� TN)r� rL rT rr )r ru r r r � p_alg_policy. s zdnssec_policy.p_alg_policyc C s8 |d � d�| j_d| j_| j| j|d � d��� < dS )z=zone_policy : ZONE domain new_policy policy_option_group SEMIr� �.TN)�rstripr� rL rS r| r )r ru r r r �
p_zone_policy5 s zdnssec_policy.p_zone_policyc C s$ |d | j _| j | j|d �� < dS )z>named_policy : POLICY name new_policy policy_option_group SEMIr� N)r� rL r} r )r ru r r r �p_named_policy< s z dnssec_policy.p_named_policyc C s |d |d< dS )zduration : NUMBERr r Nr )r ru r r r � p_duration_1B s zdnssec_policy.p_duration_1c C s d|d< dS )zduration : NONENr r )r ru r r r � p_duration_2G s zdnssec_policy.p_duration_2c C s� |d dkr |d d |d< n�|d dkr<|d d |d< n�|d dkrZ|d d |d< n||d d
krx|d d |d< n^|d d kr�|d d
|d< n@|d dkr�|d d |d< n"|d dkr�|d |d< nt d��dS )z duration : NUMBER DATESUFFIXr� �yr i�3�r �moi �' �wi�: �di�Q �hi �mi�< �szinvalid durationN)ri )r ru r r r � p_duration_3L s zdnssec_policy.p_duration_3c C s dS )z6policy_option_group : LBRACE policy_option_list RBRACENr )r ru r r r �p_policy_option_group_ s z#dnssec_policy.p_policy_option_groupc C s dS )zmpolicy_option_list : policy_option SEMI
| policy_option_list policy_option SEMINr )r ru r r r �p_policy_option_listc s z"dnssec_policy.p_policy_option_listc C s dS )a� policy_option : parent_option
| directory_option
| coverage_option
| rollperiod_option
| prepublish_option
| postpublish_option
| keysize_option
| algorithm_option
| keyttl_option
| standby_optionNr )r ru r r r �p_policy_optionh s z dnssec_policy.p_policy_optionc C s dS )z0alg_option_group : LBRACE alg_option_list RBRACENr )r ru r r r �p_alg_option_groupu s z dnssec_policy.p_alg_option_groupc C s dS )z^alg_option_list : alg_option SEMI
| alg_option_list alg_option SEMINr )r ru r r r �p_alg_option_listy s z dnssec_policy.p_alg_option_listc C s dS )a alg_option : coverage_option
| rollperiod_option
| prepublish_option
| postpublish_option
| keyttl_option
| keysize_option
| standby_optionNr )r ru r r r � p_alg_option~ s zdnssec_policy.p_alg_optionc C s | j |d �� | j_dS )zparent_option : POLICY namer� N)r} r r� rN )r ru r r r �p_parent_option� s z dnssec_policy.p_parent_optionc C s |d | j _dS )z$directory_option : DIRECTORY QSTRINGr� N)r� rU )r ru r r r �p_directory_option� s z dnssec_policy.p_directory_optionc C s |d | j _dS )z#coverage_option : COVERAGE durationr� N)r� rV )r ru r r r �p_coverage_option� s z dnssec_policy.p_coverage_optionc C s* |d dkr|d | j _n |d | j _dS )z0rollperiod_option : ROLL_PERIOD KEYTYPE durationr� �KSK� N)r� rY rZ )r ru r r r �p_rollperiod_option� s z!dnssec_policy.p_rollperiod_optionc C s* |d dkr|d | j _n |d | j _dS )z0prepublish_option : PRE_PUBLISH KEYTYPE durationr� r� r� N)r� r[ r] )r ru r r r �p_prepublish_option� s z!dnssec_policy.p_prepublish_optionc C s* |d dkr|d | j _n |d | j _dS )z2postpublish_option : POST_PUBLISH KEYTYPE durationr� r� r� N)r� r\ r^ )r ru r r r �p_postpublish_option� s z"dnssec_policy.p_postpublish_optionc C s* |d dkr|d | j _n |d | j _dS )z(keysize_option : KEY_SIZE KEYTYPE NUMBERr� r� r� N)r� rW rX )r ru r r r �p_keysize_option� s z dnssec_policy.p_keysize_optionc C s* |d dkr|d | j _n |d | j _dS )z'standby_option : STANDBY KEYTYPE NUMBERr� r� r� N)r� r_ r` )r ru r r r �p_standby_option� s z dnssec_policy.p_standby_optionc C s |d | j _dS )z keyttl_option : KEYTTL durationr� N)r� ra )r ru r r r �p_keyttl_option� s z dnssec_policy.p_keyttl_optionc C s |d | j _dS )z$algorithm_option : ALGORITHM ALGNAMEr� N)r� rM )r ru r r r �p_algorithm_option� s z dnssec_policy.p_algorithm_optionc C sd |r.t d| jpd| jrdnd|j|jf � n2| js`td| jp@d| jrJdnd|rV|jpXdf ��d S )Nz %s%s%d:syntax error near '%s'rO �:z %s%s%d:unexpected end of inputr )r( rt r r rv ri )r ru r r r �p_error� s zdnssec_policy.p_error)N)*r; r< r= rr r} r| r� rt rv r6 rs rq r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r r r r rj , sN
_
h
rj �__main__r r3 r� )rk ry T)rl rk r{ znonexistent.zone) r Zply.lexr3 Zply.yaccro �stringr r r? � Exceptionri rj r; �sys�argvrw �filerx r9 �closern r: �ppr( r} r� �e�argsr r r r �<module> s6 ` 4 !