File: //lib/python3.9/site-packages/isc/__pycache__/keymgr.cpython-39.opt-1.pyc
a
G@�h� � @ s� d dl mZ d dlZd dlZd dlZd dlZd dlZd dlZd dlZd dl Z d dl
m Z dZ d dl
mZmZmZmZmZmZ dd� Zddd �Zd
d � Zd d
� ZdS )� )�print_functionN)� defaultdictz
dnssec-keymgr)�dnskey�keydict� keyseries�policy�parsetab�utilsc O s t | i |�� t�d� d S )N� )�print�sys�exit)�args�kwargs� r �./usr/lib/python3.9/site-packages/isc/keymgr.py�fatal s r c C s~ |}|r"t j�|�r"t �|t j�szt jd }|s8t jj}|�t j�D ]4}|t j | }t j�|�rtt �|t j�rt qzd}qD|S )a2 find the location of a specified command. If a default is supplied,
exists and it's an executable, we use it; otherwise we search PATH
for an alternative.
:param command: command to look for
:param default: default value to use
:return: PATH with the location of a suitable binary
�PATHN)
�os�path�isfile�access�X_OK�environ�defpath�split�pathsep�sep)Zcommand�defaultZfpathr Z directoryr r r �set_path s
r c C s� t dtj�t�d�d��} t dtj�t�d�d��}tjtd d�}|j dt
ddd d
� |j d d t
d
dd� |j ddt
ddd� |j dd| t
dd d� |j ddt
ddd d� |j d d |t
d d d� |j d d d!d"d#d$� |j d%d&d!d"d'd$� |j d(d)d*d!d"d+d$� |j d,d-d.d!d"d/d$� |j d0d1d2tj d3� |� � }|j
�rBtd4� |j�rZ|j�rZtd5� |jdu �rntd6� |jdu �r�td7� |jdu�r�tj�|j��s�td8|j � n(tj�tjd9�|_tj�|j��s�d|_|S ):zc Read command line arguments, returns 'args' object
:return: args object properly prepared
z
dnssec-keygenZsbinzdnssec-settimezA: schedule DNSSEC key rollovers according to a pre-defined policy)� description�zone�*NzSZone(s) to which the policy should be applied (default: all zones in the directory))�type�nargsr �helpz-Kr zDirectory containing keys�dir)�destr# r% �metavarz-c�
policyfilezPolicy definition file�filez-g�keygenzPath to 'dnssec-keygen')r' r r# r% r( z-r� randomdevZ
DEPRECATED)r' r# r r% r( z-s�settimezPath to 'dnssec-settime'z-k�no_zsk�
store_trueFz,Only apply policy to key-signing keys (KSKs))r' �actionr r% z-z�no_kskz-Only apply policy to zone-signing keys (ZSKs)z-fz--force�forcez8Force updates to key events even if they are in the pastz-qz--quiet�quietzUpdate keys silentlyz-vz --version�version)r0 r4 z%ERROR: -r option has been deprecated.z)ERROR: -z and -k cannot be used together.z ERROR: dnssec-keygen not foundz ERROR: dnssec-settime not foundz!ERROR: Policy file "%s" not foundzdnssec-policy.conf)r r r �joinr �prefix�argparse�ArgumentParser�prog� add_argument�strr4 �
parse_argsr, r r. r1 r+ r- r) �existsZ
sysconfdir)r+ r- �parserr r r r r< 6 s~ �� �
�
� � � ��� � �
�
�r< c
C sP t � } | j| j| j| jd�}zt�| j�}W n4 ty` } z t dt
|� � W Y d }~n
d }~0 0 zt || j| j d�}W n4 ty� } z t dt
|� � W Y d }~n
d }~0 0 zt
||d�}W n4 ty� } z t dt
|� � W Y d }~n
d }~0 0 z |j|| j| j| j| jd� W n6 t�yJ } z t dt
|� � W Y d }~n
d }~0 0 d S ) N)Z keygen_pathZ settime_pathZ keys_pathr, z Unable to load DNSSEC policy: )r Zzonesz Unable to build key dictionary: )�contextz Unable to build key series: )ZkskZzskr2 r3 zUnable to apply policy: )r< r+ r- r r, r Z
dnssec_policyr) � Exceptionr r; r r! r Zenforce_policyr. r1 r2 r3 )r r? Zdp�eZkd�ksr r r �main� s0 �&&&�
rC )N)Z
__future__r r r r7 �glob�re�timeZcalendarZpprint� collectionsr r9 Ziscr r r r r r r r r< rC r r r r �<module> s @
J