관리-도구
편집 파일: bind.cpython-39.pyc
a � �g� � @ sD d dl Z d dlmZmZ d dlmZ ddlmZ G dd� de�ZdS )� N)�CalledProcessError� check_output)�mkstemp� )�ConfigGeneratorc @ sZ e Zd ZdZddhZdZdddddd d d d d � Zddddd�Zedd� �Z edd� �Z dS )� BindGeneratorZbindZdnssecz>systemctl try-reload-or-restart bind.service 2>/dev/null || : )ZDSAZNSEC3DSA)ZRSASHA1Z NSEC3RSASHA1)Z RSASHA256)Z RSASHA512)ZECCGOST)ZECDSAP256SHA256)ZECDSAP384SHA384)ZED25519)ZED448) zDSA-SHA1zRSA-SHA1z RSA-SHA2-256z RSA-SHA2-512Z GOSTR341001�ECDSA-SHA2-256�ECDSA-SHA2-384z EDDSA-ED25519z EDDSA-ED448zSHA-1zSHA-256zSHA-384ZGOST)ZSHA1zSHA2-256zSHA2-384ZGOSTR94c C s� |j }d}|d7 }|d7 }|d D ]:}z"| j| D ]}||� d�7 }q2W q" tyZ Y q"0 q"d|d vr~d|d v r~|d 7 }d |d vr�d |d v r�|d 7 }|d 7 }|d7 }|d D ]0}z|| j| � d�7 }W q� ty� Y q�0 q�|d 7 }|S )N� zdisable-algorithms "." { zRSAMD5; �signz; r Z SECP256R1�groupzECDSAP256SHA256; r Z SECP384R1zECDSAP384SHA384; z}; zdisable-ds-digests "." { �hash)Zdisabled� sign_not_map�KeyError� hash_not_map)�clsZpolicy�ip�s�iZ disabled_sign� r �:/usr/share/crypto-policies/python/policygenerators/bind.py�generate_config' s. z BindGenerator.generate_configc C s� t � \}}z�t�|d��.}|�d� |�|� |�d� W d � n1 sL0 Y ztd|g�}W nJ ty� | �d� | �d|� �� Y W t�|� dS ty� Y n0 W t�|� n t�|� 0 dS ) N�wz options { z }; z/usr/sbin/named-checkconfz*There is an error in bind generated policyzPolicy: FT) r �os�fdopen�writer r Zeprint�unlink�OSError)r Zconfig�fd�path�f�_r r r � test_configD s$ ( � zBindGenerator.test_configN) �__name__� __module__� __qualname__Z CONFIG_NAMEZSCOPESZ RELOAD_CMDr r � classmethodr r" r r r r r s, � � r ) r � subprocessr r Ztempfiler Zconfiggeneratorr r r r r r �<module> s