| Server IP : 3.96.16.70 / Your IP : 216.73.216.15 Web Server : Apache System : Linux ip-172-31-26-103.ca-central-1.compute.internal 6.1.163-186.299.amzn2023.x86_64 #1 SMP PREEMPT_DYNAMIC Tue Feb 24 16:35:42 UTC 2026 x86_64 User : ec2-user ( 1000) PHP Version : 8.4.18 Disable Function : NONE MySQL : OFF | cURL : ON | WGET : ON | Perl : ON | Python : OFF | Sudo : ON | Pkexec : OFF Directory : /usr/lib/python3.9/site-packages/certbot/__pycache__/ |
Upload File : |
a
�]e�. � @ s� d Z ddlZddlZddlmZ ddlmZ ddlmZ ddlmZ ddl Z ddl
m Z ddl
m Z dd l
mZ dd
lmZ dd lmZ G d d
� d
�Zedd�dd�ZdS )z$Certbot user-supplied configuration.� N)�Any)�List)�Optional)�parse)�errors)�util)� constants)�misc)�osc @ s0 e Zd ZdZejdd�dd�Zeed�dd�Z eedd �d
d �Z
e ed �d
d��Z e j
edd�dd��Z e ee d �dd��Zej
edd�dd��Ze ed �dd��Zej
edd�dd��Ze ed �dd��Zej
edd�d d��Ze ed �d d ��Zej
edd �d d ��Ze ed �d!d"��Ze ed �d#d$��Ze ed �d%d&��Ze ed �d'd(��Ze ed �d)d*��Ze ed �d+d,��Ze ed �d-d.��Ze ed �d/d0��Z e ed �d1d2��Z e ed �d3d4��Z e ed �d5d6��Z e ed �d7d8��Z e ed �d9d:��Z!e e"e d �d;d<��Z#e ed �d=d>��Z$e ed �d?d@��Z%e ed �dAdB��Z&e ee d �dCdD��Z'e ed �dEdF��Z(eedG�dHdI�Z)e ed �dJdK��Z*e ed �dLdM��Z+e ed �dNdO��Z,e ed �dPdQ��Z-e ed �dRdS��Z.e ed �dTdU��Z/e ed �dVdW��Z0e ed �dXdY��Z1e ed �dZd[��Z2ed d\�d]d^�Z3dS )_�NamespaceConfiga4 Configuration wrapper around :class:`argparse.Namespace`.
Please note that the following attributes are dynamically resolved using
:attr:`~certbot.configuration.NamespaceConfig.work_dir` and relative
paths defined in :py:mod:`certbot._internal.constants`:
- `accounts_dir`
- `csr_dir`
- `in_progress_dir`
- `key_dir`
- `temp_checkpoint_dir`
And the following paths are dynamically resolved using
:attr:`~certbot.configuration.NamespaceConfig.config_dir` and relative
paths defined in :py:mod:`certbot._internal.constants`:
- `default_archive_dir`
- `live_dir`
- `renewal_configs_dir`
:ivar namespace: Namespace typically produced by
:meth:`argparse.ArgumentParser.parse_args`.
:type namespace: :class:`argparse.Namespace`
N)� namespace�returnc C sZ | t �| d|� tj�| jj�| j_tj�| jj�| j_tj�| jj�| j_t | � d S )Nr )
�object� __setattr__r
�path�abspathr �
config_dir�work_dirZlogs_dir�_check_config_sanity)�selfr � r �9/usr/lib/python3.9/site-packages/certbot/configuration.py�__init__, s zNamespaceConfig.__init__)�namer
c C s t | j|�S �N)�getattrr )r r r r r � __getattr__: s zNamespaceConfig.__getattr__)r �valuer
c C s t | j||� d S r )�setattrr )r r r r r r r = s zNamespaceConfig.__setattr__)r
c C s | j jS )z ACME Directory Resource URI.�r �server�r r r r r @ s zNamespaceConfig.server)�server_r
c C s || j _d S r r )r r" r r r r E s c C s | j jS )z�Email used for registration and recovery contact.
Use comma to register multiple emails,
ex: u1@example.com,u2@example.com. (default: Ask).
�r �emailr! r r r r$ I s zNamespaceConfig.email)�mailr
c C s || j _d S r r# )r r% r r r r$ R s c C s | j jS )zSize of the RSA key.�r � rsa_key_sizer! r r r r' V s z NamespaceConfig.rsa_key_size)�ksizer
c C s || j _dS )z Set the rsa_key_size propertyNr& )r r( r r r r' [ s c C s | j jS )z`The SECG elliptic curve name to use.
Please see RFC 8446 for supported values.
�r �elliptic_curver! r r r r* ` s z NamespaceConfig.elliptic_curve)�ecurver
c C s || j _dS )z Set the elliptic_curve propertyNr) )r r+ r r r r* h s c C s | j jS )zhType of generated private key.
Only *ONE* per invocation can be provided at this time.
�r �key_typer! r r r r- m s zNamespaceConfig.key_type)�ktyper
c C s || j _dS )zSet the key_type propertyNr, )r r. r r r r- u s c C s | j jS )z�Adds the OCSP Must-Staple extension to the certificate.
Autoconfigures OCSP Stapling for supported setups
(Apache version >= 2.3.3 ).
)r � must_stapler! r r r r/ z s zNamespaceConfig.must_staplec C s | j jS )zConfiguration directory.)r r r! r r r r � s zNamespaceConfig.config_dirc C s | j jS )zWorking directory.)r r r! r r r r � s zNamespaceConfig.work_dirc C s | � | j�S )z2Directory where all account information is stored.)� accounts_dir_for_server_path� server_pathr! r r r � accounts_dir� s z NamespaceConfig.accounts_dirc C s t j�| jjtj�S )z Configuration backups directory.)r
r �joinr r r Z
BACKUP_DIRr! r r r �
backup_dir� s zNamespaceConfig.backup_dirc C s t �dt� tj�| jjtj �S )zBDirectory where new Certificate Signing Requests (CSRs) are saved.z[NamespaceConfig.csr_dir is deprecated and will be removed in an upcoming release of Certbot)
�warnings�warn�DeprecationWarningr
r r3 r r r ZCSR_DIRr! r r r �csr_dir� s �zNamespaceConfig.csr_dirc C s t j�| jjtj�S )z:Directory used before a permanent checkpoint is finalized.)r
r r3 r r r ZIN_PROGRESS_DIRr! r r r �in_progress_dir� s z NamespaceConfig.in_progress_dirc C s t �dt� tj�| jjtj �S )z
Keys storage.z[NamespaceConfig.key_dir is deprecated and will be removed in an upcoming release of Certbot)
r5 r6 r7 r
r r3 r r r ZKEY_DIRr! r r r �key_dir� s �zNamespaceConfig.key_dirc C s t j�| jjtj�S )z Temporary checkpoint directory.)r
r r3 r r r ZTEMP_CHECKPOINT_DIRr! r r r �temp_checkpoint_dir� s
�z#NamespaceConfig.temp_checkpoint_dirc C s | j jS )z�Disable verification of the ACME server's certificate.
The root certificates trusted by Certbot can be overriden by setting the
REQUESTS_CA_BUNDLE environment variable.
)r �
no_verify_sslr! r r r r< � s z NamespaceConfig.no_verify_sslc C s | j jS )z�Port used in the http-01 challenge.
This only affects the port Certbot listens on.
A conforming ACME server will still attempt to connect on port 80.
)r � http01_portr! r r r r= � s zNamespaceConfig.http01_portc C s | j jS )z;The address the server listens to during http-01 challenge.)r �http01_addressr! r r r r> � s z NamespaceConfig.http01_addressc C s | j jS )z�Port used to serve HTTPS.
This affects which port Nginx will listen on after a LE certificate
is installed.
)r �
https_portr! r r r r? � s zNamespaceConfig.https_portc C s | j jS )zuList of user specified preferred challenges.
Sorted with the most preferred challenge listed first.
)r � pref_challsr! r r r r@ � s zNamespaceConfig.pref_challsc C s | j jS )a� Allow only a subset of names to be authorized to perform validations.
When performing domain validation, do not consider it a failure
if authorizations can not be obtained for a strict subset of
the requested domains. This may be useful for allowing renewals for
multiple domains to succeed even if some domains no longer point
at this system.
)r �allow_subset_of_namesr! r r r rA � s
z%NamespaceConfig.allow_subset_of_namesc C s | j jS )z�Enable strict permissions checks.
Require that all configuration files are owned by the current
user; only needed if your config is somewhere unsafe like /tmp/.
)r �strict_permissionsr! r r r rB � s z"NamespaceConfig.strict_permissionsc C s | j jS )z�Disable renewal updates.
If updates provided by installer enhancements when Certbot is being run
with "renew" verb should be disabled.
)r �disable_renew_updatesr! r r r rC � s z%NamespaceConfig.disable_renew_updatesc C s | j jS )z�Set the preferred certificate chain.
If the CA offers multiple certificate chains, prefer the chain whose
topmost certificate was issued from this Subject Common Name.
If no match, the default offered chain will be used.
)r �preferred_chainr! r r r rD � s z NamespaceConfig.preferred_chainc C s& t �| jj�}|j|j �dtjj�S )z File path based on ``server``.�/) r �urlparser r �netlocr �replacer
�sep)r �parsedr r r r1 s zNamespaceConfig.server_path)r1 r
c C s t �|�}tj�| jjtj|�S )z/Path to accounts directory based on server_path) r Z.underscores_for_unsupported_characters_in_pathr
r r3 r r r Z ACCOUNTS_DIR)r r1 r r r r0 s
�z,NamespaceConfig.accounts_dir_for_server_pathc C s t j�| jjtj�S r )r
r r3 r r r Z ARCHIVE_DIRr! r r r �default_archive_dir s z#NamespaceConfig.default_archive_dirc C s t j�| jjtj�S r )r
r r3 r r r ZLIVE_DIRr! r r r �live_dir s zNamespaceConfig.live_dirc C s t j�| jjtj�S r )r
r r3 r r r ZRENEWAL_CONFIGS_DIRr! r r r �renewal_configs_dir s
�z#NamespaceConfig.renewal_configs_dirc C s t j�| jjtj�S )z>Path to directory with hooks to run with the renew subcommand.)r
r r3 r r r ZRENEWAL_HOOKS_DIRr! r r r �renewal_hooks_dir s �z!NamespaceConfig.renewal_hooks_dirc C s t j�| jtj�S )z8Path to the pre-hook directory for the renew subcommand.)r
r r3 rN r ZRENEWAL_PRE_HOOKS_DIRr! r r r �renewal_pre_hooks_dir s
�z%NamespaceConfig.renewal_pre_hooks_dirc C s t j�| jtj�S )z;Path to the deploy-hook directory for the renew subcommand.)r
r r3 rN r ZRENEWAL_DEPLOY_HOOKS_DIRr! r r r �renewal_deploy_hooks_dir% s
�z(NamespaceConfig.renewal_deploy_hooks_dirc C s t j�| jtj�S )z9Path to the post-hook directory for the renew subcommand.)r
r r3 rN r ZRENEWAL_POST_HOOKS_DIRr! r r r �renewal_post_hooks_dir+ s
�z&NamespaceConfig.renewal_post_hooks_dirc C s | j jS )zuThis option specifies how long (in seconds) Certbot will wait
for the server to issue a certificate.
)r �issuance_timeoutr! r r r rR 1 s z NamespaceConfig.issuance_timeoutc C s | j jS )z�This option specifies whether Certbot should generate a new private
key when replacing a certificate, even if reuse_key is set.
)r �new_keyr! r r r rS 8 s zNamespaceConfig.new_key)�_memor
c C s t �| j�}t| �|�S r )�copyZdeepcopyr �type)r rT Znew_nsr r r � __deepcopy__A s z NamespaceConfig.__deepcopy__)4�__name__�
__module__� __qualname__�__doc__�argparseZ Namespacer �strr r r �propertyr �setterr r$ �intr' r* r- �boolr/ r r r2 r4 r8 r9 r: r; r< r= r> r? r r@ rA rB rC rD r1 r0 rK rL rM rN rO rP rQ rR rS rW r r r r r s� r )�configr
c C sF | j | jkr t�d�| j���| jjdurB| jjD ]}t�|� q2dS )z�Validate command line options and display error message if
requirements are not met.
:param config: NamespaceConfig instance holding user configuration
:type args: :class:`certbot.configuration.NamespaceConfig`
z;Trying to run http-01 and https-port on the same port ({0})N) r= r? r ZConfigurationError�formatr Zdomainsr Zenforce_domain_sanity)rb Zdomainr r r r H s �� r )r[ r\ rU �typingr r r Zurllibr r5 Zcertbotr r Zcertbot._internalr Zcertbot.compatr r
r r r r r r �<module> s 9