Linux cpanel.rrshost.in 5.15.0-25-generic #25-Ubuntu SMP Wed Mar 30 15:54:22 UTC 2022 x86_64
Apache
: 109.123.238.221 | : 172.70.100.144
128 Domain
8.2.28
aev999
Terminal
AUTO ROOT
Adminer
Backdoor Destroyer
Linux Exploit
Lock Shell
Lock File
Create User
CREATE RDP
PHP Mailer
BACKCONNECT
HASH IDENTIFIER
README
+ Create Folder
+ Create File
/
usr /
lib /
python3 /
dist-packages /
dns /
__pycache__ /
[ HOME SHELL ]
Name
Size
Permission
Action
__init__.cpython-310.pyc
625
B
-rw-r--r--
_asyncbackend.cpython-310.pyc
2.66
KB
-rw-r--r--
_asyncio_backend.cpython-310.p...
5.03
KB
-rw-r--r--
_curio_backend.cpython-310.pyc
3.72
KB
-rw-r--r--
_immutable_attr.cpython-310.py...
2.1
KB
-rw-r--r--
_immutable_ctx.cpython-310.pyc
2.1
KB
-rw-r--r--
_trio_backend.cpython-310.pyc
4
KB
-rw-r--r--
asyncbackend.cpython-310.pyc
2.58
KB
-rw-r--r--
asyncquery.cpython-310.pyc
11.21
KB
-rw-r--r--
asyncresolver.cpython-310.pyc
5.76
KB
-rw-r--r--
dnssec.cpython-310.pyc
14.21
KB
-rw-r--r--
e164.cpython-310.pyc
3.08
KB
-rw-r--r--
edns.cpython-310.pyc
9.56
KB
-rw-r--r--
entropy.cpython-310.pyc
3.11
KB
-rw-r--r--
enum.cpython-310.pyc
2.33
KB
-rw-r--r--
exception.cpython-310.pyc
4.56
KB
-rw-r--r--
flags.cpython-310.pyc
1.97
KB
-rw-r--r--
grange.cpython-310.pyc
1.02
KB
-rw-r--r--
immutable.cpython-310.pyc
2.27
KB
-rw-r--r--
inet.cpython-310.pyc
3.51
KB
-rw-r--r--
ipv4.cpython-310.pyc
1.29
KB
-rw-r--r--
ipv6.cpython-310.pyc
3.22
KB
-rw-r--r--
message.cpython-310.pyc
40.47
KB
-rw-r--r--
name.cpython-310.pyc
27.34
KB
-rw-r--r--
namedict.cpython-310.pyc
2.92
KB
-rw-r--r--
node.cpython-310.pyc
5.72
KB
-rw-r--r--
opcode.cpython-310.pyc
2.31
KB
-rw-r--r--
query.cpython-310.pyc
29.35
KB
-rw-r--r--
rcode.cpython-310.pyc
2.97
KB
-rw-r--r--
rdata.cpython-310.pyc
19.92
KB
-rw-r--r--
rdataclass.cpython-310.pyc
2.59
KB
-rw-r--r--
rdataset.cpython-310.pyc
13.65
KB
-rw-r--r--
rdatatype.cpython-310.pyc
5.84
KB
-rw-r--r--
renderer.cpython-310.pyc
7.44
KB
-rw-r--r--
resolver.cpython-310.pyc
40.67
KB
-rw-r--r--
reversename.cpython-310.pyc
2.86
KB
-rw-r--r--
rrset.cpython-310.pyc
6.64
KB
-rw-r--r--
serial.cpython-310.pyc
2.76
KB
-rw-r--r--
set.cpython-310.pyc
7.49
KB
-rw-r--r--
tokenizer.cpython-310.pyc
15.77
KB
-rw-r--r--
transaction.cpython-310.pyc
14.24
KB
-rw-r--r--
tsig.cpython-310.pyc
9.86
KB
-rw-r--r--
tsigkeyring.cpython-310.pyc
1.6
KB
-rw-r--r--
ttl.cpython-310.pyc
1.53
KB
-rw-r--r--
update.cpython-310.pyc
8.01
KB
-rw-r--r--
version.cpython-310.pyc
542
B
-rw-r--r--
versioned.cpython-310.pyc
14.06
KB
-rw-r--r--
wire.cpython-310.pyc
2.91
KB
-rw-r--r--
xfr.cpython-310.pyc
6.18
KB
-rw-r--r--
zone.cpython-310.pyc
31.1
KB
-rw-r--r--
zonefile.cpython-310.pyc
6.86
KB
-rw-r--r--
Delete
Unzip
Zip
${this.title}
Close
Code Editor : dnssec.cpython-310.pyc
o x7�_�L � @ s� d Z ddlZddlZddlZddlZddlZddlZddlZddl Zddl Zddl Zddl Zddl ZG dd� dejj�ZG dd� dejj�ZG dd� dejj�Zd d � Zd d � Zd d� ZG dd� dejj�ZdCdd�Zdd� Zdd� Zdd� Z dd� Z dd � Z d d � Z d d � Z d!d"� Z!d#d$� Z"d%d&� Z#d'd(� Z$d)d*� Z%d+d,� Z&dDd-d.�Z'dDd/d0�Z(G d1d2� d2ejj�Z)d3d4� Z*d5d6� Z+z>dd7l,m-Z- dd8l.m/Z/ dd9l0m1Z1 dd:l2m3Z3 dd;l2m4Z4 dd<l2m5Z5 dd=l2m6Z6 dd>l2m7Z7 dd?l2m8Z8 dd@l2m9Z9 W n e:�y e+Z;e+Z<dAZ=Y nw e(Z;e'Z<dBZ=ej>Z>ej?Z?ej@Z@ejAZAejBZBejCZCejDZDejEZEejFZFejGZGejHZHejIZIejJZJejKZKejLZLejMZMejNZNdS )Ez.Common DNSSEC-related functions and constants.� Nc @ � e Zd ZdZdS )�UnsupportedAlgorithmz&The DNSSEC algorithm is not supported.N��__name__� __module__� __qualname__�__doc__� r r �,/usr/lib/python3/dist-packages/dns/dnssec.pyr # � r c @ r )�ValidationFailurez The DNSSEC signature is invalid.Nr r r r r r ' r r c @ s\ e Zd ZdZdZdZdZdZdZdZ dZ d Z d Z d Z d Zd ZdZdZdZdZedd� �ZdS )� Algorithm� � � � � � � � � � � � � � � � � c C � dS �N� r ��clsr r r �_maximum> � zAlgorithm._maximumN)r r r �RSAMD5�DH�DSA�ECC�RSASHA1� DSANSEC3SHA1�RSASHA1NSEC3SHA1� RSASHA256� RSASHA512�ECCGOST�ECDSAP256SHA256�ECDSAP384SHA384�ED25519�ED448�INDIRECT� PRIVATEDNS� PRIVATEOID� classmethodr$ r r r r r + s( r c C � t �| �S )z�Convert text into a DNSSEC algorithm value. *text*, a ``str``, the text to convert to into an algorithm value. Returns an ``int``. )r � from_text)�textr r r �algorithm_from_textC � r; c C r8 )z�Convert a DNSSEC algorithm value to text *value*, an ``int`` a DNSSEC algorithm. Returns a ``str``, the name of a DNSSEC algorithm. )r �to_text)�valuer r r �algorithm_to_textN r< r? c C s� | � � }| jtjkr|d d> |d S d}tt|�d �D ]}||d| d> |d| d 7 }q t|�d dkrG||t|�d d> 7 }||d? d@ 7 }|d@ S ) z�Return the key id (a 16-bit number) for the specified key. *key*, a ``dns.rdtypes.ANY.DNSKEY.DNSKEY`` Returns an ``int`` between 0 and 65535 ���r ���r r r r i�� )�to_wire� algorithmr r& �range�len)�key�rdata�total�ir r r �key_idY s �rJ c @ s( e Zd ZdZdZdZdZedd� �ZdS )�DSDigestz(DNSSEC Delgation Signer Digest Algorithmr r r c C r r r r" r r r r$ u r% zDSDigest._maximumN) r r r r �SHA1�SHA256�SHA384r7 r$ r r r r rK n s rK c C s� z t |t�r t|�� }W n ty td| ��w |tjkr%t�� }n|tj kr/t� � }n|tj kr9t� � }ntd| ��t | t�rKt j�| |�} |�| �� �� � |�|j|d�� |�� }t�dt|�|j|�| }t j�t jjt j j |dt |��S )aq Create a DS record for a DNSSEC key. *name*, a ``dns.name.Name`` or ``str``, the owner name of the DS record. *key*, a ``dns.rdtypes.ANY.DNSKEY.DNSKEY``, the key the DS is about. *algorithm*, a ``str`` or ``int`` specifying the hash algorithm. The currently supported hashes are "SHA1", "SHA256", and "SHA384". Case does not matter for these strings. *origin*, a ``dns.name.Name`` or ``None``. If `key` is a relative name, then it will be made absolute using the specified origin. Raises ``UnsupportedAlgorithm`` if the algorithm is unknown. Returns a ``dns.rdtypes.ANY.DS.DS`` zunsupported algorithm "%s"��originz!HBBr ) � isinstance�strrK �upper� Exceptionr rL �hashlib�sha1rM �sha256rN �sha384�dns�namer9 �update� canonicalizerB �digest�struct�packrJ rC rG � from_wire� rdataclass�IN� rdatatype�DSrE )rZ rF rC rP �dshashr] �dsrdatar r r �make_dsz s2 � � ��rg c C s� g }| � |j�}|d u rd S t|tjj�r,z |�tjjtj j �}W n t y+ Y d S w |}|D ]}|j |j krDt |�|jkrD|�|� q0|S �N)�get�signerrQ rY �node�Node� find_rdatasetra rb rc �DNSKEY�KeyErrorrC rJ �key_tag�append)�keys�rrsig�candidate_keysr> �rdatasetrG r r r �_find_candidate_keys� s& � � �rv c C s | t jt jt jt jt jfv S rh )r r& r* r, r- r. �rC r r r �_is_rsa� s �rx c C � | t jt jfv S rh )r r( r+ rw r r r �_is_dsa� � rz c C ry rh )r r0 r1 rw r r r � _is_ecdsa� r{ r| c C ry rh )r r2 r3 rw r r r � _is_eddsa� r{ r} c C � | t jkS rh )r r/ rw r r r �_is_gost� � r c C r~ rh )r r& rw r r r �_is_md5� r� r� c C s | t jt jt jt jfv S rh )r r( r* r+ r, rw r r r �_is_sha1� s �r� c C ry rh )r r- r0 rw r r r � _is_sha256� r{ r� c C r~ rh )r r1 rw r r r � _is_sha384� r� r� c C r~ rh )r r. rw r r r � _is_sha512� r� r� c C s� t | �rt�� S t| �rt�� S t| �rt�� S t| �r t�� S t | �r(t� � S | t j kr1t� � S | t j kr;t�d�S td| ��)N�r z unknown hash for algorithm %u)r� �hashes�MD5r� rL r� rM r� rN r� �SHA512r r2 r3 �SHAKE256r rw r r r � _make_hash� s r� c C s t �| d�S )N�big)�int� from_bytes)�br r r �_bytes_to_long� s r� c $ C sn t |t�rtj�|tjj�}t||�}|du rtd��|D �]�}t | t�r.| d }| d }n| j}| }|du r;t � � }|j |k rDtd��|j |krMtd��t |j �r�|j} t�d| dd� �\} | dd� } | dkr{t�d| dd � �\} | d d� } | d| � } | | d� } zt�t| �t| ���t� �} W n ty� td ��w |j}�n1t|j ��r1|j} t�d| dd� �\}| dd� } d |d }| dd � }| d d� } | d|� }| |d� } | d|� }| |d� } | d|� }zt�t|�t�t|�t|�t|����t� �} W n t�y td ��w |jdd� }|jdd� }t � t|�t|��}n�t |j ��r�|j} |j t j k�rHt!�"� }d}nt!�#� }d}| d|� }| ||d � }zt!j$|t|�t|�d��t� �} W n t�yz td ��w |jd|� }|j|d� }t � t|�t|��}nEt%|j ��r�|j} |j t j&k�r�t'j(}nt)j*}z|�+| �} W n t�y� td ��w |j}nt,|j ��r�t-dt.|j � ��td|j ��d}||j/|d�dd� 7 }||j0�1|�7 }|�2|�}t3|�d |j4k �rtd��|j4t3|�d k �r |�5|j4d �d } tj�d| �}|�1� } t�6d|j7|j8|j9�} t:|�} | D ] } || 7 }|| 7 }| �1|�}!t�6dt3|!��}"||"7 }||!7 }�q2t;|j �}#zPt |j ��rm| �<||t=�>� |#� W dS t|j ��r~| �<|||#� W dS t |j ��r�| �<||t!�?|#�� W dS t%|j ��r�| �<||� W dS td|j �� t@�y� Y q w td��)a* Validate an RRset against a single signature rdata, throwing an exception if validation is not successful. *rrset*, the RRset to validate. This can be a ``dns.rrset.RRset`` or a (``dns.name.Name``, ``dns.rdataset.Rdataset``) tuple. *rrsig*, a ``dns.rdata.Rdata``, the signature to validate. *keys*, the key dictionary, used to find the DNSKEY associated with a given name. The dictionary is keyed by a ``dns.name.Name``, and has ``dns.node.Node`` or ``dns.rdataset.Rdataset`` values. *origin*, a ``dns.name.Name`` or ``None``, the origin to use for relative names. *now*, an ``int`` or ``None``, the time, in seconds since the epoch, to use as the current time when validating. If ``None``, the actual current time is used. Raises ``ValidationFailure`` if the signature is expired, not yet valid, the public key is invalid, the algorithm is unknown, the verification fails, etc. Raises ``UnsupportedAlgorithm`` if the algorithm is recognized by dnspython but not implemented. Nz unknown keyr r �expiredz not yet validz!Bz!Hr zinvalid public key�@ r � � � �0 )�curve�x�yz)algorithm "%s" not supported by dnspythonzunknown algorithm %u� rO � z#owner name longer than RRSIG labels�*z!HHIzverify failure)ArQ rR rY rZ r9 �rootrv r �tuple�time� expiration� inceptionrx rC rF r^ �unpack�rsa�RSAPublicNumbersr� � public_key�default_backend� ValueError� signaturerz �dsa�DSAPublicNumbers�DSAParameterNumbers�utils�encode_dss_signaturer| r r0 �ec� SECP256R1� SECP384R1�EllipticCurvePublicNumbersr} r2 �ed25519�Ed25519PublicKey�ed448�Ed448PublicKey�from_public_bytesr r r? rB rj � to_digestable� derelativizerE �labels�splitr_ �rdtype�rdclass� original_ttl�sortedr� �verify�padding�PKCS1v15�ECDSA�InvalidSignature)$�rrsetrs rr rP �nowrt � candidate_key�rrnameru �keyptr�bytes_�rsa_e�rsa_nr� �sig�t�octets�dsa_q�dsa_p�dsa_g�dsa_y�sig_r�sig_sr� �ecdsa_x�ecdsa_y�loader�data�suffix� rrnamebuf�rrfixed�rrlist�rr�rrdata�rrlen� chosen_hashr r r �_validate_rrsig� s2 �� � ���� � ��� � � �� � � � � ���r� c C s� t |t�rtj�|tjj�}t | t�r| d }n| j}t |t�r)|d }|d }n|j}|}|�|�}|�|�}||kr@td��|D ]}z t | ||||� W dS tt fy[ Y qBw td��)a Validate an RRset against a signature RRset, throwing an exception if none of the signatures validate. *rrset*, the RRset to validate. This can be a ``dns.rrset.RRset`` or a (``dns.name.Name``, ``dns.rdataset.Rdataset``) tuple. *rrsigset*, the signature RRset. This can be a ``dns.rrset.RRset`` or a (``dns.name.Name``, ``dns.rdataset.Rdataset``) tuple. *keys*, the key dictionary, used to find the DNSKEY associated with a given name. The dictionary is keyed by a ``dns.name.Name``, and has ``dns.node.Node`` or ``dns.rdataset.Rdataset`` values. *origin*, a ``dns.name.Name``, the origin to use for relative names; defaults to None. *now*, an ``int`` or ``None``, the time, in seconds since the epoch, to use as the current time when validating. If ``None``, the actual current time is used. Raises ``ValidationFailure`` if the signature is expired, not yet valid, the public key is invalid, the algorithm is unknown, the verification fails, etc. r r zowner names do not matchNzno RRSIGs validated) rQ rR rY rZ r9 r� r� �choose_relativityr r� r ) r� �rrsigsetrr rP r� r� � rrsigname� rrsigrdatasetrs r r r � _validate� s, �r� c @ s e Zd ZdZdZedd� �ZdS )� NSEC3HashzNSEC3 hash algorithmr c C r r r r" r r r r$ � r% zNSEC3Hash._maximumN)r r r r rL r7 r$ r r r r r� � s r� c C s t �dd�}z t|t �rt|�� }W n ty td��w |tjkr(td��|}|du r1d}nt|t �rHt|�d dkrDt � |�}ntd��t| t j j �sUt j �| �} | �� �� }t�|| ��� }t|�D ] }t�|| ��� }qht�|��d �} | �|�} | S ) a� Calculate the NSEC3 hash, according to https://tools.ietf.org/html/rfc5155#section-5 *domain*, a ``dns.name.Name`` or ``str``, the name to hash. *salt*, a ``str``, ``bytes``, or ``None``, the hash salt. If a string, it is decoded as a hex string. *iterations*, an ``int``, the number of iterations. *algorithm*, a ``str`` or ``int``, the hash algorithm. The only defined algorithm is SHA1. Returns a ``str``, the encoded NSEC3 hash. � ABCDEFGHIJKLMNOPQRSTUVWXYZ234567� 0123456789ABCDEFGHIJKLMNOPQRSTUVz-Wrong hash algorithm (only SHA1 is supported)Nr� r r zInvalid salt lengthzutf-8)rR � maketransrQ r� rS rT r� rL rE �bytes�fromhexrY rZ �Namer9 r\ rB rU rV r] rD �base64� b32encode�decode� translate) �domain�salt� iterationsrC �b32_conversion� salt_encoded�domain_encodedr] �_�outputr r r � nsec3_hash� s8 � � � r� c O s t d��)Nz.DNSSEC validation requires python cryptography)� ImportError)�args�kwargsr r r � _need_pyca0 s r� )r� )r� )r� )r� )r� )r� )r� )r� )r� )r� FTrh )NN)Or rU r^ r� r� �dns.enumrY � dns.exception�dns.name�dns.node� dns.rdataset� dns.rdata� dns.rdatatype�dns.rdataclass� exception� DNSExceptionr r �enum�IntEnumr r; r? rJ rK rg rv rx rz r| r} r r� r� r� r� r� r� r� r� r� r� r� r� �cryptography.exceptionsr� � cryptography.hazmat.backendsr� � cryptography.hazmat.primitivesr� �)cryptography.hazmat.primitives.asymmetricr� r� r� r� r� r� r� r� �validate�validate_rrsig� _have_pycar& r' r( r) r* r+ r, r- r. r/ r0 r1 r2 r3 r4 r5 r6 r r r r �<module> s� . :: 6 �
Close
