File: //usr/local/ssl/lib/python2.4/site-packages/dns/tsig.pyc
mò
*}Rc @ sÜ d Z d k Z d k Z d k Z d k Z d k Z d k Z d k Z d e i i
f d „ ƒ YZ d e i i
f d „ ƒ YZ d e i i
f d „ ƒ YZ
d e
f d „ ƒ YZ d
e
f d „ ƒ YZ d e
f d
„ ƒ YZ d e
f d „ ƒ YZ e i i d ƒ Z e i i d ƒ Z e i i d ƒ Z e i i d ƒ Z e i i d ƒ Z e i i d ƒ Z e Z d Z d Z d Z d Z d e e! e d „ Z" d e e! e d „ Z# d e e! d „ Z$ d a% d „ Z& d „ Z' d „ Z( d S( s DNS TSIG support.Nt BadTimec B s t Z d Z RS( sB Raised if the current time is not within the TSIG's validity time.( t __name__t
__module__t __doc__( ( ( t, /usr/lib/python2.4/site-packages/dns/tsig.pyR s t BadSignaturec B s t Z d Z RS( s- Raised if the TSIG signature fails to verify.( R R R ( ( ( R R s t PeerErrorc B s t Z d Z RS( s; Base class for all TSIG errors generated by the remote peer( R R R ( ( ( R R # s t
PeerBadKeyc B s t Z d Z RS( s. Raised if the peer didn't know the key we used( R R R ( ( ( R R ' s t PeerBadSignaturec B s t Z d Z RS( s4 Raised if the peer didn't like the signature we sent( R R R ( ( ( R R + s t PeerBadTimec B s t Z d Z RS( s/ Raised if the peer didn't like the time we sent( R R R ( ( ( R R / s t PeerBadTruncationc B s t Z d Z RS( sG Raised if the peer didn't like amount of truncation in the TSIG we sent( R R R ( ( ( R R
3 s s HMAC-MD5.SIG-ALG.REG.INTs hmac-sha1s hmac-sha224s hmac-sha256s hmac-sha384s hmac-sha512i i i i c
C sR t | ƒ \ } } | o\ t i | d | ƒ} t | ƒ } | d j o* | i t
i d | ƒ ƒ | i | ƒ qu n t
i d | ƒ } | i | ƒ | i | d ƒ | oO | i | i ƒ ƒ | i t
i d t i i ƒ ƒ | i t
i d d ƒ ƒ n | d }
|
d ?d @} |
d @} t
i d
| | | ƒ } | | } t | ƒ } | d j o t d ƒ ‚ n t
i d
| | ƒ | } | o | i | ƒ | i | ƒ n | i | ƒ | i# ƒ } t
i d t | ƒ ƒ } | | | | | } |
oK t i | d | ƒ} t | ƒ } | i t
i d | ƒ ƒ | i | ƒ n d } | | | f S( sj Return a (tsig_rdata, mac, ctx) tuple containing the HMAC TSIG rdata
for the input parameters, the HMAC MAC calculated by applying the
TSIG signature algorithm, and the TSIG digest context.
@rtype: (string, string, hmac.HMAC object)
@raises ValueError: I{other_data} is too long
@raises NotImplementedError: I{algorithm} is not supported
t digestmodi s !Hi s !Il i l ÿ l ÿÿ s !HIHiÿÿ s TSIG Other Data is > 65535 bytess !HHN() t
get_algorithmt algorithmt algorithm_nameR t firstt hmact newt secrett ctxt lent request_mact mlt updatet structt packt original_idt idt wiret keynamet
to_digestablet dnst
rdataclasst ANYt timet long_timet
upper_timet
lower_timet fudget time_mact pre_mact
other_datat olt
ValueErrort errort post_mact digestt mact mpackt
tsig_rdatat multit None( R R R R" R& R R, R) R R R2 R R
R# R R R% R$ R' R1 R/ R0 R R( R* R R- ( ( R t signG sL
c
C s. t | | | | | | | | | | |
| | ƒ
S( N( R4 R R R R" R& R R, R) R R R2 R R
(
R R R R" R& R R, R) R R R2 R R
( ( R t hmac_md5z s c C so t i d | d d !ƒ \ } | d j o t i i ‚ n | d 8} | d d !t i d | ƒ | d | !} | }
t i i
| |
ƒ \ } } |
| }
t i d | |
|
d !ƒ \ } } } } | d d >| d } |
d 7}
| |
|
| !} |
| 7}
t i d | |
|
d
!ƒ \ } } } |
d
7}
| |
|
| !} |
| 7}
|
| | j o t i i ‚ n | d j op | t j o
t ‚ qã| t j o
t ‚ qã| t j o
t ‚ qã| t! j o
t" ‚ qãt# d | ƒ ‚ n | | } | | } | | j p
| | j o
t' ‚ n t( | | | | | | | | | | | |
| ƒ
\ } } } | | j o
t1 ‚ n | S(
s* Validate the specified TSIG rdata against the other input parameters.
@raises FormError: The TSIG is badly formed.
@raises BadTime: There is too much time skew between the client and the
server.
@raises BadSignature: The TSIG signature did not validate
@rtype: hmac.HMAC objects !Hi
i i i s !HIHHl i s !HHHi s unknown TSIG error code %dN(2 R t unpackR t adcountR t exceptiont FormErrorR t
tsig_startt new_wireR1 t currentt namet from_wiret anamet usedR$ R% R& t mac_sizeR" R/ R R, t
other_sizeR) t
tsig_rdlent BADSIGR t BADKEYR t BADTIMER t BADTRUNCR
R t time_lowt time_hight nowR R4 R R R R R2 R t junkt our_macR ( R R R RJ R R: R1 RC R R2 R RL R) R< R% R$ R7 R& RH RK R@ R" RI RB R/ R R; R? R, RA ( ( R t validate€ sP
(
)
&
c C s4 y t i i | ƒ t | <Wn t j
o n Xd S( N( R t hasht gett hash_algt _hashest tsig_algt KeyError( RR RP ( ( R t _maybe_add_hash· s c C sX h a t t d ƒ t t d ƒ t t d ƒ t t d ƒ t t d ƒ t t d ƒ d S( Nt SHA224t SHA256t SHA384t SHA512t SHA1t MD5( RQ RT t HMAC_SHA224t HMAC_SHA256t HMAC_SHA384t HMAC_SHA512t HMAC_SHA1t HMAC_MD5( ( ( R t
_setup_hashes½ s
c C sØ t d j o t ƒ n t | t t f ƒ o t i i | ƒ } n t
i d j o8 | t j p
| t
j o t d t | ƒ d ƒ ‚ n y | i ƒ t | f SWn- t j
o! t d t | ƒ d ƒ ‚ n Xd S( sÊ Returns the wire format string and the hash module to use for the
specified TSIG algorithm
@rtype: (string, hash constructor)
@raises NotImplementedError: I{algorithm} is not supported
i s TSIG algorithm s requires Python 2.5.2 or laters is not supportedN( RQ R3 Ra t
isinstanceR
t strt unicodeR R= t from_textt syst
hexversionR] R^ t NotImplementedErrorR RS ( R
( ( R R Ç s
* () R R R Rf t
dns.exceptionR t dns.hasht dns.rdataclasst dns.nameR8 t DNSExceptionR R R R R R R
R= Re R` R_ R[ R\ R] R^ t default_algorithmRD RE RF RG R3 t Falset TrueR4 R5 RM RQ RT Ra R ( Rn R R4 R RE R^ R5 R RF R R[ R R RG R] Rf R` RM RT R R\ R
Ra R R_ R RD R ( ( R t ? s@ 35