관리-도구
편집 파일: keymgr.cpython-39.opt-1.pyc
a &�"h� � @ s� d dl mZ d dlZd dlZd dlZd dlZd dlZd dlZd dlZd dl Z d dl m Z dZ d dl mZmZmZmZmZmZ dd� Zddd �Zd d � Zd d � ZdS )� )�print_functionN)� defaultdictz dnssec-keymgr)�dnskey�keydict� keyseries�policy�parsetab�utilsc O s t | i |�� t�d� d S )N� )�print�sys�exit)�args�kwargs� r �./usr/lib/python3.9/site-packages/isc/keymgr.py�fatal s r c C s~ |}|r"t j�|�r"t �|t j�szt jd }|s8t jj}|�t j�D ]4}|t j | }t j�|�rtt �|t j�rt qzd}qD|S )a2 find the location of a specified command. If a default is supplied, exists and it's an executable, we use it; otherwise we search PATH for an alternative. :param command: command to look for :param default: default value to use :return: PATH with the location of a suitable binary �PATHN) �os�path�isfile�access�X_OK�environ�defpath�split�pathsep�sep)Zcommand�defaultZfpathr Z directoryr r r �set_path s r c C s� t dtj�t�d�d��} t dtj�t�d�d��}tjtd d�}|j dt ddd d � |j d d t d dd� |j ddt ddd� |j dd| t dd d� |j ddt ddd d� |j d d |t d d d� |j d d d!d"d#d$� |j d%d&d!d"d'd$� |j d(d)d*d!d"d+d$� |j d,d-d.d!d"d/d$� |j d0d1d2tj d3� |� � }|j �rBtd4� |j�rZ|j�rZtd5� |jdu �rntd6� |jdu �r�td7� |jdu�r�tj�|j��s�td8|j � n(tj�tjd9�|_tj�|j��s�d|_|S ):zc Read command line arguments, returns 'args' object :return: args object properly prepared z dnssec-keygenZsbinzdnssec-settimezA: schedule DNSSEC key rollovers according to a pre-defined policy)� description�zone�*NzSZone(s) to which the policy should be applied (default: all zones in the directory))�type�nargsr �helpz-Kr zDirectory containing keys�dir)�destr# r% �metavarz-c� policyfilezPolicy definition file�filez-g�keygenzPath to 'dnssec-keygen')r' r r# r% r( z-r� randomdevZ DEPRECATED)r' r# r r% r( z-s�settimezPath to 'dnssec-settime'z-k�no_zsk� store_trueFz,Only apply policy to key-signing keys (KSKs))r' �actionr r% z-z�no_kskz-Only apply policy to zone-signing keys (ZSKs)z-fz--force�forcez8Force updates to key events even if they are in the pastz-qz--quiet�quietzUpdate keys silentlyz-vz --version�version)r0 r4 z%ERROR: -r option has been deprecated.z)ERROR: -z and -k cannot be used together.z ERROR: dnssec-keygen not foundz ERROR: dnssec-settime not foundz!ERROR: Policy file "%s" not foundzdnssec-policy.conf)r r r �joinr �prefix�argparse�ArgumentParser�prog� add_argument�strr4 � parse_argsr, r r. r1 r+ r- r) �existsZ sysconfdir)r+ r- �parserr r r r r< 6 s~ �� � � � � � ��� � � � �r< c C sP t � } | j| j| j| jd�}zt�| j�}W n4 ty` } z t dt |� � W Y d }~n d }~0 0 zt || j| j d�}W n4 ty� } z t dt |� � W Y d }~n d }~0 0 zt ||d�}W n4 ty� } z t dt |� � W Y d }~n d }~0 0 z |j|| j| j| j| jd� W n6 t�yJ } z t dt |� � W Y d }~n d }~0 0 d S ) N)Z keygen_pathZ settime_pathZ keys_pathr, z Unable to load DNSSEC policy: )r Zzonesz Unable to build key dictionary: )�contextz Unable to build key series: )ZkskZzskr2 r3 zUnable to apply policy: )r< r+ r- r r, r Z dnssec_policyr) � Exceptionr r; r r! r Zenforce_policyr. r1 r2 r3 )r r? Zdp�eZkd�ksr r r �main� s0 �&&&� rC )N)Z __future__r r r r7 �glob�re�timeZcalendarZpprint� collectionsr r9 Ziscr r r r r r r r r< rC r r r r �<module> s @ J