U ]$@sTdZddlZddlZddlmZdZGdddejZGdddeZd d d Z dS) z7Module contains classes used by the Nginx Configurator.N)commonZ add_headercsreZdZdZdZedZfddZeddZdd d Z d d Z d dZ fddZ fddZ ddZZS)AddraRepresents an Nginx address, i.e. what comes after the 'listen' directive. According to the `documentation`_, this may be address[:port], port, or unix:path. The latter is ignored here. The default value if no directive is specified is \*:80 (superuser) or \*:8000 (otherwise). If no port is specified, the default is 80. If no address is specified, listen on all addresses. .. _documentation: http://nginx.org/en/docs/http/ngx_http_core_module.html#listen .. todo:: Old-style nginx configs define SSL vhosts in a separate block instead of using 'ssl' in the listen directive. :param str addr: addr part of vhost address, may be hostname, IPv4, IPv6, "", or "\*" :param str port: port number or "\*" or "" :param bool ssl: Whether the directive includes 'ssl' :param bool default: Whether the directive includes 'default_server' :param bool default: Whether this is an IPv6 address :param bool ipv6only: Whether the directive includes 'ipv6only=on' )*z0.0.0.0rcs<tt|||f||_||_||_||_||jk|_dSN) superr__init__ssldefaultipv6ipv6onlyUNSPECIFIED_IPV4_ADDRESSESunspecified_address)selfhostportr r r r  __class__3/usr/lib/python3/dist-packages/certbot_nginx/obj.pyr's z Addr.__init__c Cs|d}d}d}d}d}d}d}|d} | dr:dStd| } | rld}| }| | d d}n8| d } td | drd}| d}n| d}| d }|r|} | d krd}q| dkrd}q| dkrd}q| dkrd}q|||||||S)zInitialize Addr from string. Frrzunix:Nz\[.*\]T:z^\d+$r Zdefault_serverr z ipv6only=on)splitpop startswithrematchgroupend partition) clsZstr_addrpartsr r r r rraddrZ ipv6_matchtupZnextpartrrr fromstring0s@      zAddr.fromstringTcCshd}|jdr$|jdr$d|j}n |jdr:|jd}n |jd}|jrV|rV|d7}|jrd|d7}|S)z$Return string representation of Addrrrrz%s:%sz default_serverz ssl)r%r r )rZinclude_defaultr#rrr to_stringds     zAddr.to_stringcCs|Sr)r'rrrr__str__usz Addr.__str__cCsd|dS)NzAddr())r)r(rrr__repr__xsz Addr.__repr__cstt|Sr)rr__hash__r(rrrr,{sz Addr.__hash__csP|jr@|jr@t|j|jdf|jt|j|jdf|jkStt||S)z3Check ip/port equality, with IPv6 support. r)rrrCANONICAL_UNSPECIFIED_ADDRESSr%r r__eq__rotherrrrsuper_eqs z Addr.super_eqcCs2t||jr.||o,|j|jko,|j|jkSdS)NF) isinstancerr1r r r/rrrr.s    z Addr.__eq__)T)__name__ __module__ __qualname____doc__r r-r classmethodr&r'r)r+r,r1r. __classcell__rrrrr s  3   rc@s`eZdZdZddZddZddZdd Zd d Zd d Z ddZ ddZ ddZ ddZ dS) VirtualHostaRepresents an Nginx Virtualhost. :ivar str filep: file path of VH :ivar set addrs: Virtual Host addresses (:class:`set` of :class:`Addr`) :ivar set names: Server names/aliases of vhost (:class:`list` of :class:`str`) :ivar list raw: The raw form of the parsed server block :ivar bool ssl: SSLEngine on in vhost :ivar bool enabled: Virtual host is enabled :ivar list path: The indices into the parsed file used to access the server block defining the vhost cCs.||_||_||_||_||_||_||_dS)zInitialize a VH.N)filepaddrsnamesr enabledrawpath)rr:r;r r=r<r>r?rrrrszVirtualHost.__init__cCs<dddt|jtdD}d|j|t|j|j|jfS)N, css|]}t|VqdSrstr.0r$rrr sz&VirtualHost.__str__..keyz0file: %s addrs: %s names: %s ssl: %s enabled: %s) joinsortedr;rBr:listr<r r=)rZaddr_strrrrr)szVirtualHost.__str__cCsd|dddS)Nz VirtualHost( r@z) )r)replacer(rrrr+szVirtualHost.__repr__cCsht||jrd|j|jkobt|jtdt|jtdkob|j|jkob|j|jkob|j|jkob|j |j kSdS)NrFF) r2rr:rIr;rBr<r r=r?r/rrrr.s      zVirtualHost.__eq__cCs,t|jt|jt|jt|j|j|jfSr)hashr:tupler?r;r<r r=r(rrrr,s zVirtualHost.__hash__cCst|jt|}|dk S)zDetermine if this server block has a particular header set. :param str header_name: The name of the header to check for, e.g. 'Strict-Transport-Security' N)_find_directiver>ADD_HEADER_DIRECTIVE)rZ header_namefoundrrr has_headerszVirtualHost.has_headercCsJtjdt|jt|dD]$}|j||t||kr dSq dS)zFDetermine if raw server block contains test list at top level rrTF)sixZmovesrangelenr>)rZtestirrr contains_lists$zVirtualHost.contains_listcCs|jD]}|jrdSqdS)zRReturn true if one or more of the listen directives in vhost supports IPv6TFr;r rarrr ipv6_enableds zVirtualHost.ipv6_enabledcCs&|js dS|jD]}|jsdSqdS)zRReturn true if one or more of the listen directives in vhost are IPv4 onlyTFrXrYrrr ipv4_enableds  zVirtualHost.ipv4_enabledcCs8dj|jddd|jDd|j|jr0dnddS)z5Return a representation of VHost to be used in dialogzBFile: {filename} Addresses: {addrs} Names: {names} HTTPS: {https} r@css|]}t|VqdSrrArCrrrrEsz+VirtualHost.display_repr..ZYesZNo)filenamer;r<Zhttps)formatr:rHr;r<r r(rrr display_reprs  zVirtualHost.display_reprN)r3r4r5r6rr)r+r.r,rRrWr[r\r_rrrrr9s    r9cs\|rt|tjrdS|dkr4dks0|kr4|Sfdd|D}tdd|DdS)zFind a directive of type directive_name in directives. If match_content is given, Searches for `match_content` in the directive arguments. Nrc3s|]}t|VqdSr)rO)rDlinedirective_name match_contentrrrEsz"_find_directive..css|]}|dk r|VqdSrr)rDmrrrrE s)r2rSZ string_typesnext)Z directivesrbrcZmatchesrrarrOs rO)N) r6rrSZcertbot.pluginsrrProbjectr9rOrrrrs  g