mirror of
https://github.com/certbot/certbot.git
synced 2026-01-21 19:01:07 +03:00
65 lines
2.4 KiB
Python
65 lines
2.4 KiB
Python
"""Continuity Authenticator"""
|
|
import zope.interface
|
|
|
|
from acme import challenges
|
|
|
|
from letsencrypt import achallenges
|
|
from letsencrypt import errors
|
|
from letsencrypt import interfaces
|
|
from letsencrypt import proof_of_possession
|
|
from letsencrypt import recovery_token
|
|
|
|
|
|
class ContinuityAuthenticator(object):
|
|
"""IAuthenticator for
|
|
:const:`~acme.challenges.ContinuityChallenge` class challenges.
|
|
|
|
:ivar rec_token: Performs "recoveryToken" challenges.
|
|
:type rec_token: :class:`letsencrypt.recovery_token.RecoveryToken`
|
|
|
|
:ivar proof_of_pos: Performs "proofOfPossession" challenges.
|
|
:type proof_of_pos:
|
|
:class:`letsencrypt.proof_of_possession.Proof_of_Possession`
|
|
|
|
"""
|
|
zope.interface.implements(interfaces.IAuthenticator)
|
|
|
|
# This will have an installer soon for get_key/cert purposes
|
|
def __init__(self, config, installer):
|
|
"""Initialize Client Authenticator.
|
|
|
|
:param config: Configuration.
|
|
:type config: :class:`letsencrypt.interfaces.IConfig`
|
|
|
|
:param installer: Let's Encrypt Installer.
|
|
:type installer: :class:`letsencrypt.interfaces.IInstaller`
|
|
|
|
"""
|
|
self.rec_token = recovery_token.RecoveryToken(
|
|
config.server, config.rec_token_dir)
|
|
self.proof_of_pos = proof_of_possession.ProofOfPossession(installer)
|
|
|
|
def get_chall_pref(self, unused_domain): # pylint: disable=no-self-use
|
|
"""Return list of challenge preferences."""
|
|
return [challenges.ProofOfPossession, challenges.RecoveryToken]
|
|
|
|
def perform(self, achalls):
|
|
"""Perform client specific challenges for IAuthenticator"""
|
|
responses = []
|
|
for achall in achalls:
|
|
if isinstance(achall, achallenges.ProofOfPossession):
|
|
responses.append(self.proof_of_pos.perform(achall))
|
|
elif isinstance(achall, achallenges.RecoveryToken):
|
|
responses.append(self.rec_token.perform(achall))
|
|
else:
|
|
raise errors.LetsEncryptContAuthError("Unexpected Challenge")
|
|
return responses
|
|
|
|
def cleanup(self, achalls):
|
|
"""Cleanup call for IAuthenticator."""
|
|
for achall in achalls:
|
|
if isinstance(achall, achallenges.RecoveryToken):
|
|
self.rec_token.cleanup(achall)
|
|
elif not isinstance(achall, achallenges.ProofOfPossession):
|
|
raise errors.LetsEncryptContAuthError("Unexpected Challenge")
|