Google
Edit File: policy.pyc
� �`hfc @ s� d d l Z d d l j Z d d l j Z d d l Td d l m Z d f d � � YZ d f d � � YZ d e f d � � YZ d f d � � YZ e d k r~d d l Z e j d d k re e j d � Z e j � Z e j � e d d � Z e j e � nu e j d d k r{y= e e j d d e d e �Z e j d GHe j d � GHWn e k rwZ e j d GHn Xn n d S( i����N( t *( t copyt PolicyLexc B s� e Z d& Z e d' Z i Z d Z d Z d Z d Z d Z d � Z d � Z d � Z d � Z d � Z d � Z d! � Z d" � Z d# � Z d$ � Z d% � Z RS(( t POLICYt ALGORITHM_POLICYt ZONEt ALGORITHMt DIRECTORYt KEYTTLt KEY_SIZEt ROLL_PERIODt PRE_PUBLISHt POST_PUBLISHt COVERAGEt STANDBYt NONEt DATESUFFIXt KEYTYPEt ALGNAMEt STRt QSTRINGt NUMBERt LBRACEt RBRACEt SEMIs s (//|\#).*s \{s \}t ;c C s" | j j | j j d � 7_ d S( s \n+s N( t lexert linenot valuet count( t selft t( ( s. /usr/lib/python2.7/site-packages/isc/policy.pyt t_newline7 s c C s" | j j | j j d � 7_ d S( s /\*(.|\n)*?\*/s N( R R R R ( R R ( ( s. /usr/lib/python2.7/site-packages/isc/policy.pyt t_comment; s c C s+ t j d | j � j d � j � | _ | S( s� (?i)(?<=[0-9 \t])(y(?:ears|ear|ea|e)?|mo(?:nths|nth|nt|n)?|w(?:eeks|eek|ee|e)?|d(?:ays|ay|a)?|h(?:ours|our|ou|o)?|mi(?:nutes|nute|nut|nu|n)?|s(?:econds|econd|econ|eco|ec|e)?)\bs (?i)(y|mo|w|d|h|mi|s)([a-z]*)i ( t ret matchR t groupt lower( R R ( ( s. /usr/lib/python2.7/site-packages/isc/policy.pyt t_DATESUFFIX? s 'c C s | j j � | _ | S( s (?i)\b(KSK|ZSK)\b( R t upper( R R ( ( s. /usr/lib/python2.7/site-packages/isc/policy.pyt t_KEYTYPED s c C s | j j � | _ | S( s� (?i)\b(RSAMD5|DH|DSA|NSEC3DSA|ECC|RSASHA1|NSEC3RSASHA1|RSASHA256|RSASHA512|ECCGOST|ECDSAP256SHA256|ECDSAP384SHA384|ED25519|ED448)\b( R R' ( R R ( ( s. /usr/lib/python2.7/site-packages/isc/policy.pyt t_ALGNAMEI s c C s | j j | j d � | _ | S( s [A-Za-z._-][\w._-]*R ( t reserved_mapt getR t type( R R ( ( s. /usr/lib/python2.7/site-packages/isc/policy.pyt t_STRN s c C s2 | j j | j d � | _ | j d d !| _ | S( s "([^"\n]|(\\"))*"R i i����( R* R+ R R, ( R R ( ( s. /usr/lib/python2.7/site-packages/isc/policy.pyt t_QSTRINGS s c C s t | j � | _ | S( s \d+( t intR ( R R ( ( s. /usr/lib/python2.7/site-packages/isc/policy.pyt t_NUMBERY s c C s$ d | j d GH| j j d � d S( Ns Illegal character '%s'i i ( R R t skip( R R ( ( s. /usr/lib/python2.7/site-packages/isc/policy.pyt t_error^ s c K s� d t t � k r' t j d d � } n t d d � } x- | j D]" } | | j | j � j | � <q@ Wt j d | | � | _ d S( Nt maketranst _t -t object( t dirt strR3 t reservedR* R% t translatet lexR ( R t kwargst transt r( ( s. /usr/lib/python2.7/site-packages/isc/policy.pyt __init__b s c C s? | j j | � x( t r: | j j � } | s2 Pn | GHq Wd S( N( R t inputt Truet token( R t textR ( ( s. /usr/lib/python2.7/site-packages/isc/policy.pyt testk s ( R R R R R R R R R R R R R ( R R R s STRs QSTRINGR R R R ( t __name__t __module__R9 t tokensR* t t_ignoret t_ignore_olcommentt t_LBRACEt t_RBRACEt t_SEMIR R! R& R( R) R- R. R0 R2 R? RD ( ( ( s. /usr/lib/python2.7/site-packages/isc/policy.pyR sN t Policyc B s+ e Z e Z e Z e Z d Z d Z d Z d Z d Z d Z d Z d Z d Z d Z d Z d Z d Z i d d g d 6d d g d 6d d g d 6d d g d 6d d g d 6d d g d 6d d g d 6d d 6d d 6d d 6d d 6d d 6Z d d d d � Z d � Z d � Z d � Z d � Z d � Z RS( i i t DSAt NSEC3DSAi t RSAMD5t RSASHA1t NSEC3RSASHA1t RSASHA256t RSASHA512t ECCGOSTt ECDSAP256SHA256t ECDSAP384SHA384t ED25519t ED448c C s | | _ | | _ | | _ d S( N( t namet algorithmt parent( R RZ R[ R\ ( ( s. /usr/lib/python2.7/site-packages/isc/policy.pyR? � s c 6 C s� d | j r d p3 | j r! d p3 | j r0 d p3 d | j p? d | j rT | j j pW d | j rw d t | j � d pz d | j p� d | j r� t | j � p� d | j r� t | j � p� d | j r� t | j � p� d | j r� t | j � p� d | j r t | j � p d | j r%t | j � p(d | j r@t | j � pCd | j r[t | j � p^d | j rvt | j � pyd | j r�t | j � p�d | j r�t | j � p�d | j r�t | j � p�d f S( Ns %spolicy %s: inherits %s directory %s algorithm %s coverage %s ksk_keysize %s zsk_keysize %s ksk_rollperiod %s zsk_rollperiod %s ksk_prepublish %s ksk_postpublish %s zsk_prepublish %s zsk_postpublish %s ksk_standby %s zsk_standby %s keyttl %s s constructed s zone s algorithm t t UNKNOWNt Nonet "( t is_constructedt is_zonet is_algRZ R\ t directoryR8 R[ t coveraget ksk_keysizet zsk_keysizet ksk_rollperiodt zsk_rollperiodt ksk_prepublisht ksk_postpublisht zsk_prepublisht zsk_postpublisht ksk_standbyt zsk_standbyt keyttl( R ( ( s. /usr/lib/python2.7/site-packages/isc/policy.pyt __repr__� s( # c C s | d | k o | d k SS( Ni i ( ( R t key_sizet size_range( ( s. /usr/lib/python2.7/site-packages/isc/policy.pyt __verify_size� s c C s | j S( N( RZ ( R ( ( s. /usr/lib/python2.7/site-packages/isc/policy.pyt get_name� s c C s | j S( N( Ra ( R ( ( s. /usr/lib/python2.7/site-packages/isc/policy.pyt constructed� s c C s� | j rL | j d k rL | j | j k rL | j GHt d | j | j f f S| j r� | j d k r� | j | j k r� t d | j | j f f S| j r� | j d k r� | j | j k r� t d | j | j f f S| j r| j d k r| j | j k rt d | j | j f f S| j rp| j rp| j rp| j | j | j k rpt d d | j | j | j f f S| j r�| j r�| j r�| j | j | j k r�t d d | j | j | j f f S| j d k r�| j j | j � } | d k rS| j | j | � s$t d | j | f f S| j | j | � sSt d | j | f f Sn | j d k r�| j d d k r�t d d | j f S| j d k r�| j d d k r�t d d | j f S| j d k r�d | _ d | _ q�n t d f S( sr Check if the values in the policy make sense :return: True/False if the policy passes validation s6 KSK pre-publish period (%d) exceeds rollover period %ds7 KSK post-publish period (%d) exceeds rollover period %ds6 ZSK pre-publish period (%d) exceeds rollover period %ds7 ZSK post-publish period (%d) exceeds rollover period %ds% KSK pre/post-publish periods (%d/%d) s" combined exceed rollover period %ds% ZSK pre/post-publish periods (%d/%d) s& KSK key size %d outside valid range %ss& ZSK key size %d outside valid range %sRN RO i@ i s$ KSK key size %d not divisible by 64 s as required for DSAs$ ZSK key size %d not divisible by 64 RU RV RW RX RY R] N( RN RO ( RN RO ( RU RV RW RX RY ( Rh Rj R_ t FalseRk Ri Rl Rm R[ t valid_key_sz_per_algoR+ t _Policy__verify_sizeRf Rg RA ( R t key_sz_range( ( s. /usr/lib/python2.7/site-packages/isc/policy.pyt validate� s� N( RE RF Rw Rb Rc Ra R_ Rh Ri Rj Rl Rk Rm Rf Rg Rn Ro Rp Re Rd Rx R? Rq Ry Ru Rv R{ ( ( ( s. /usr/lib/python2.7/site-packages/isc/policy.pyRM v sD & t PolicyExceptionc B s e Z RS( ( RE RF ( ( ( s. /usr/lib/python2.7/site-packages/isc/policy.pyR| ) s t dnssec_policyc B sX e Z i Z i Z i Z d! Z d! Z e Z d! d � Z d � Z d � Z d � Z d � Z d � Z d � Z d � Z d � Z d � Z d � Z d � Z d � Z d � Z d � Z d � Z d � Z d � Z d � Z d � Z d � Z d � Z d � Z d � Z! d � Z" d � Z# d � Z$ d � Z% d � Z& d � Z' d � Z( d � Z) d � Z* RS(" c K s� t � | _ | j j | _ d | k r4 t | d <n d | k rM t | d <n t j d | | � | _ | j d � t � } d | _ t | _ d | _ d | _ t | � | j d <d | j d _ d | j d _ d | j d _ t | � | j d <d | j d _ d | j d _ d | j d _ t | � | j d <d | j d _ d | j d _ t | � | j d <d | j d _ d | j d _ t | � | j d <d | j d _ d | j d _ t | � | j d <d | j d _ d | j d _ t | � | j d <d | j d _ d | j d _ t | � | j d <d | j d _ d | j d _ t | � | j d <d | j d _ d | j d _ d | j d _ d | j d _ t | � | j d <d | j d _ d | j d _ d | j d _ d | j d _ t | � | j d <d | j d _ d | j d _ d | j d _ d | j d _ t | � | j d <d | j d _ d | j d _ d | j d _ d | j d _ | r�| j | � n d S( Nt debugt write_tablest modules policy global { algorithm rsasha256; key-size ksk 2048; key-size zsk 2048; roll-period ksk 0; roll-period zsk 1y; pre-publish ksk 1mo; pre-publish zsk 1mo; post-publish ksk 1mo; post-publish zsk 1mo; standby ksk 0; standby zsk 0; keyttl 1h; coverage 6mo; }; policy default { policy global; };i RN i RO RP RQ RR RS RT RU RV RW RX RY ( R t plexRG Rw t yacct parsert setupRM R_ R[ RA Rc Rf Rg R t alg_policyRZ t load( R t filenameR< t p( ( s. /usr/lib/python2.7/site-packages/isc/policy.pyR? 4 s| c C s_ | | _ t | _ t | � �2 } | j � } d | j j _ | j j | � Wd QXd | _ d S( Ni ( R� RA t initialt opent readR� R R R� t parseR_ ( R R� t fRC ( ( s. /usr/lib/python2.7/site-packages/isc/policy.pyR� � s c C s, t | _ d | j j _ | j j | � d S( Ni ( RA R� R� R R R� R� ( R RC ( ( s. /usr/lib/python2.7/site-packages/isc/policy.pyR� � s c 1 K s� | j � } d } | | j k r1 | j | } n | d k re t | j d � } | | _ t | _ n | j d k r� | j p� | j d } x | r� | j r� | j } q� W| r� | j p� d | _ n | j | j k r� | j | j } n t d � � | j d k rV| j p| j d } x# | d k r@| j r@| j } q W| oM| j | _ n | j d k r�| j px| j d } x | r�| j r�| j } q~W| r�| j p�| j | _ n | j d k r | j p�| j d } x | j r | j r | j } q�W| r| j p| j | _ n | j d k r�| j pA| j d } x | j rf| j rf| j } qGW| rv| j p|| j | _ n | j d k r�| j p�| j d } x | j r�| j r�| j } q�W| r�| j p�| j | _ n | j d k rQ| j p | j d } x | j r2| j r2| j } qW| rB| j pH| j | _ n | j d k r�| j ps| j d } x | j r�| j r�| j } qyW| r�| j p�| j | _ n | j d k r | j p�| j d } x | j r�| j r�| j } q�W| r| j p| j | _ n | j d k r�| j p?| j d } x | j rd| j rd| j } qEW| rt| j pz| j | _ n | j d k r�| j p�| j d } x | j r�| j r�| j } q�W| r�| j p�| j | _ n | j d k rI| j p | j d } x# | d k r3| j r3| j } qW| o@| j | _ n d | k s`| d r�| j � \ } } | s�t | � � d Sn | S( Nt defaults algorithm not foundt novalidate( R% R_ t zone_policyR t named_policyRZ RA Ra R[ R\ R� R| Rd Re Rf Rg Rh Ri Rj Rl Rk Rm Rp R{ ( R t zoneR< t zR� R\ t apt validt msg( ( s. /usr/lib/python2.7/site-packages/isc/policy.pyt policy� s� c C s d S( sB policylist : init policy | policylist policyN( ( R R� ( ( s. /usr/lib/python2.7/site-packages/isc/policy.pyt p_policylist s c C s t | _ d S( s init :N( Rw R� ( R R� ( ( s. /usr/lib/python2.7/site-packages/isc/policy.pyt p_init s c C s d S( sT policy : alg_policy | zone_policy | named_policyN( ( R R� ( ( s. /usr/lib/python2.7/site-packages/isc/policy.pyt p_policy s c C s | d | d <d S( sA name : STR | KEYTYPE | DATESUFFIXi i N( ( R R� ( ( s. /usr/lib/python2.7/site-packages/isc/policy.pyt p_name s c C s= | d j � | d <t j d | d � s9 t d � � n d S( sc domain : STR | QSTRING | KEYTYPE | DATESUFFIXi i s ^[\w.-][\w.-]*$s invalid domainN( t stripR" R# R| ( R R� ( ( s. /usr/lib/python2.7/site-packages/isc/policy.pyt p_domain s c C s t � | _ d S( s new_policy :N( RM t current( R R� ( ( s. /usr/lib/python2.7/site-packages/isc/policy.pyt p_new_policy* s c C s4 | d | j _ t | j _ | j | j | d <d S( sF alg_policy : ALGORITHM_POLICY ALGNAME new_policy alg_option_group SEMIi N( R� RZ RA Rc R� ( R R� ( ( s. /usr/lib/python2.7/site-packages/isc/policy.pyt p_alg_policy. s c C sL | d j d � | j _ t | j _ | j | j | d j d � j � <d S( s= zone_policy : ZONE domain new_policy policy_option_group SEMIi t .N( t rstripR� RZ RA Rb R� R% ( R R� ( ( s. /usr/lib/python2.7/site-packages/isc/policy.pyt p_zone_policy5 s #c C s. | d | j _ | j | j | d j � <d S( s> named_policy : POLICY name new_policy policy_option_group SEMIi N( R� RZ R� R% ( R R� ( ( s. /usr/lib/python2.7/site-packages/isc/policy.pyt p_named_policy< s c C s | d | d <d S( s duration : NUMBERi i N( ( R R� ( ( s. /usr/lib/python2.7/site-packages/isc/policy.pyt p_duration_1B s c C s d | d <d S( s duration : NONEi N( R_ ( R R� ( ( s. /usr/lib/python2.7/site-packages/isc/policy.pyt p_duration_2G s c C s | d d k r% | d d | d <n� | d d k rJ | d d | d <n� | d d k ro | d d | d <n� | d d k r� | d d | d <nw | d d k r� | d d | d <nR | d d k r� | d d | d <n- | d d k r� | d | d <n t d � � d S( s duration : NUMBER DATESUFFIXi t yi i�3�i t moi �' t wi�: t di�Q t hi t mii< t ss invalid durationN( R| ( R R� ( ( s. /usr/lib/python2.7/site-packages/isc/policy.pyt p_duration_3L s c C s d S( s6 policy_option_group : LBRACE policy_option_list RBRACEN( ( R R� ( ( s. /usr/lib/python2.7/site-packages/isc/policy.pyt p_policy_option_group_ s c C s d S( sm policy_option_list : policy_option SEMI | policy_option_list policy_option SEMIN( ( R R� ( ( s. /usr/lib/python2.7/site-packages/isc/policy.pyt p_policy_option_listc s c C s d S( s� policy_option : parent_option | directory_option | coverage_option | rollperiod_option | prepublish_option | postpublish_option | keysize_option | algorithm_option | keyttl_option | standby_optionN( ( R R� ( ( s. /usr/lib/python2.7/site-packages/isc/policy.pyt p_policy_optionh s c C s d S( s0 alg_option_group : LBRACE alg_option_list RBRACEN( ( R R� ( ( s. /usr/lib/python2.7/site-packages/isc/policy.pyt p_alg_option_groupu s c C s d S( s^ alg_option_list : alg_option SEMI | alg_option_list alg_option SEMIN( ( R R� ( ( s. /usr/lib/python2.7/site-packages/isc/policy.pyt p_alg_option_listy s c C s d S( s alg_option : coverage_option | rollperiod_option | prepublish_option | postpublish_option | keyttl_option | keysize_option | standby_optionN( ( R R� ( ( s. /usr/lib/python2.7/site-packages/isc/policy.pyt p_alg_option~ s c C s! | j | d j � | j _ d S( s parent_option : POLICY namei N( R� R% R� R\ ( R R� ( ( s. /usr/lib/python2.7/site-packages/isc/policy.pyt p_parent_option� s c C s | d | j _ d S( s$ directory_option : DIRECTORY QSTRINGi N( R� Rd ( R R� ( ( s. /usr/lib/python2.7/site-packages/isc/policy.pyt p_directory_option� s c C s | d | j _ d S( s# coverage_option : COVERAGE durationi N( R� Re ( R R� ( ( s. /usr/lib/python2.7/site-packages/isc/policy.pyt p_coverage_option� s c C s7 | d d k r# | d | j _ n | d | j _ d S( s0 rollperiod_option : ROLL_PERIOD KEYTYPE durationi t KSKi N( R� Rh Ri ( R R� ( ( s. /usr/lib/python2.7/site-packages/isc/policy.pyt p_rollperiod_option� s c C s7 | d d k r# | d | j _ n | d | j _ d S( s0 prepublish_option : PRE_PUBLISH KEYTYPE durationi R� i N( R� Rj Rl ( R R� ( ( s. /usr/lib/python2.7/site-packages/isc/policy.pyt p_prepublish_option� s c C s7 | d d k r# | d | j _ n | d | j _ d S( s2 postpublish_option : POST_PUBLISH KEYTYPE durationi R� i N( R� Rk Rm ( R R� ( ( s. /usr/lib/python2.7/site-packages/isc/policy.pyt p_postpublish_option� s c C s7 | d d k r# | d | j _ n | d | j _ d S( s( keysize_option : KEY_SIZE KEYTYPE NUMBERi R� i N( R� Rf Rg ( R R� ( ( s. /usr/lib/python2.7/site-packages/isc/policy.pyt p_keysize_option� s c C s7 | d d k r# | d | j _ n | d | j _ d S( s' standby_option : STANDBY KEYTYPE NUMBERi R� i N( R� Rn Ro ( R R� ( ( s. /usr/lib/python2.7/site-packages/isc/policy.pyt p_standby_option� s c C s | d | j _ d S( s keyttl_option : KEYTTL durationi N( R� Rp ( R R� ( ( s. /usr/lib/python2.7/site-packages/isc/policy.pyt p_keyttl_option� s c C s | d | j _ d S( s$ algorithm_option : ALGORITHM ALGNAMEi N( R� R[ ( R R� ( ( s. /usr/lib/python2.7/site-packages/isc/policy.pyt p_algorithm_option� s c C s� | r< d | j p d | j r$ d n d | j | j f GHnL | j s� t d | j pW d | j rf d n d | rx | j p{ d f � � n d S( Ns %s%s%d:syntax error near '%s'R] t :s %s%s%d:unexpected end of inputi ( R� R R R� R| ( R R� ( ( s. /usr/lib/python2.7/site-packages/isc/policy.pyt p_error� s N(+ RE RF R� R� R� R_ R� R� RA R� R? R� R� R� R� R� R� R� R� R� R� R� R� R� R� R� R� R� R� R� R� R� R� R� R� R� R� R� R� R� R� R� R� ( ( ( s. /usr/lib/python2.7/site-packages/isc/policy.pyR} , sN _ h t __main__i R; i R~ R� R R� s nonexistent.zonei ( R" t ply.lexR; t ply.yaccR� t stringR R RM t ExceptionR| R} RE t syst argvR� t fileR� RC t closeR� RD RA t ppR� R� t et args( ( ( s. /usr/lib/python2.7/site-packages/isc/policy.pyt <module> s0 `�� �