File: //usr/local/CyberCP/plogical/__pycache__/customACME.cpython-310.pyc
o
��h8� � @ s� d dl Z d dlZd dlZd dlZd dlZd dlZd dlZd dlZd dlm Z d dl
m Z d dl m
Z
d dl
mZ d dlmZ d dl mZ d dlZd dlmZ d d lmZ d dlZG d
d � d �ZdS ) � N)�x509)�
serialization)�rsa)�hashes)�default_backend)�padding)�CyberCPLogFileWriter)�ProcessUtilitiesc @ s� e Zd Zd0dd�Zdd� Zdd� Zd d
� Zd d � Zd
d� Zdd� Z dd� Z
dd� Z dd� Z dd� Z
dd� Zdd � Zd d � Zd d � Zd!d"� Zd#d$� Zd1d'd(�Zd)d*� Zd1d+d,�Zd2d-d.�Zd/S )3�
CustomACMEF� letsencryptc
C s t j�d|� d|� d|� d|� �� || _|| _|| _|| _|dkr8|r.d| _t j�d� n d| _t j�d � n|rDd
| _t j�d � n d | _t j�d
� d| _d| _ d| _
d| _ d| _ g | _
d| _d| _d|� �| _d| _d|� d�| _t j�d| j� d| j� �� tjddd� dS )zInitialize CustomACMEz$Initializing CustomACME for domain: z , email: z , staging: z , provider: �zerosslz(https://acme-staging.zerossl.com/v2/DV90z$Using ZeroSSL staging ACME directoryz https://acme.zerossl.com/v2/DV90z'Using ZeroSSL production ACME directory�6https://acme-staging-v02.api.letsencrypt.org/directoryz*Using Let's Encrypt staging ACME directory�.https://acme-v02.api.letsencrypt.org/directoryz-Using Let's Encrypt production ACME directoryNz/etc/letsencrypt/live/z7/usr/local/lsws/Example/html/.well-known/acme-challengez/etc/letsencrypt/accounts/z.keyzCertificate path: z, Challenge path: z/etc/letsencrypt/accountsT)�exist_ok)�loggingr � writeToFile�domain� admin_email�staging�provider�acme_directory� account_key� account_url� directory�nonce� order_url�authorizations� finalize_url�certificate_url� cert_path�challenge_path�account_key_path�os�makedirs)�selfr r r r � r% �)/usr/local/CyberCP/plogical/customACME.py�__init__ sB � �zCustomACME.__init__c
C st zt j�d� tjddt� d�}|| _t j�d� W dS ty9 } zt j�dt|�� �� W Y d}~d S d}~ww )
zGenerate RSA account keyz Generating RSA account key...� � ��public_exponent�key_size�backendz&Successfully generated RSA account keyTz Error generating account key: NF) r r r r �generate_private_keyr r � Exception�str)r$ �key�er% r% r& �_generate_account_keyB s � ��z CustomACME._generate_account_keyc
C s� z%t j�d| j� �� t�| j�}|�� | _t j�dt�| j�� �� W dS t yC } zt j�dt
|�� �� W Y d}~dS d}~ww )zGet ACME directoryz Fetching ACME directory from z%Successfully fetched ACME directory: TzError getting directory: NF) r r r r �requests�get�jsonr �dumpsr/ r0 )r$ �responser2 r% r% r& �_get_directoryR s
���zCustomACME._get_directoryc
C s� zEt j�d� t�| jd �}d}dD ] }||jv r |} nq|s3t j�dt|j�� �� �� t d��|j| | _
t j�d| j
� �� W dS t yc } zt j�d t |�� �� W Y d}~d
S d}~ww ) z Get new nonce from ACME serverzGetting new nonce...�newNonceN)z Replay-Noncez replay-noncez REPLAY-NONCEzAvailable headers: z)Replay-Nonce header not found in responsezSuccessfully got nonce: TzError getting nonce: F)
r r r r4 �headr �headers�list�keys�KeyErrorr r/ r0 )r$ r8 � nonce_header� header_namer2 r% r% r& �
_get_nonce_ s(
� ��zCustomACME._get_noncec
C s� �z9t j�d|� �� |durt j�dt�|�� �� | �� s(t j�d� W dS t j�d� | j�� }|j}t j�d� |j �
|j � � d d d �}|j �
|j � � d d d �}t j�d
� d t
�|��d ��d
�t
�|��d ��d
�dd�}t j�dt�|�� �� d|| jd�}| jr�|| jd kr�| j|d< t j�d| j� �� n
||d< t j�d� t j�d� t
�t�|��d ���d ��d
�} |du r�d}
t j�d� nt j�d� t
�t�|��d ���d ��d
�}
t j�d� | � d |
� ��d �} t j�d � | j�| t�� t�� �} t j�d � t
�| ��d ��d
�}
t j�d � | |
|
d �}tj|d!d"�}t j�d#|� �� |W S t�yY } zt j�d$t|�� �� W Y d}~dS d}~ww )%z Create JWS (JSON Web Signature)zCreating JWS for URL: Nz Payload: zFailed to get fresh noncez Getting private key numbers...z"Converting RSA numbers to bytes...� � �bigzCreating JWK...�RSA�utf-8�=�RS256)�kty�nr2 �algz
Created JWK: )rL �urlr �
newAccount�kidzUsing Key ID: �jwkzUsing JWK for new accountz Encoding protected header...� z+Using empty payload for POST-as-GET requestzEncoding payload...zCreating signature input...�.zSigning input...zEncoding signature...zCreating final JWS...�� protected�payload� signature��,�:)�
separatorsz Final JWS: zError creating JWS: ) r r r r6 r7 rB r �private_numbers�public_numbersrK �to_bytes�
bit_lengthr2 �base64�urlsafe_b64encode�decode�rstripr r r �encode�signr �PKCS1v15r �SHA256r/ r0 )r$ rU rM r[ r\ �n_bytes�e_bytes�jwk_keyrT �
protected_b64� payload_b64�signature_inputrV �
signature_b64�jws�jws_strr2 r% r% r& � _create_jwsx s�
��
� � � � � ���zCustomACME._create_jwsc
C s� z=t j�| j�r;tj�d� t| jd�� }|�� }W d � n1 s#w Y t j
|dt � d�| _ tj�d� W dS W dS t
y[ } ztj�dt|�� �� W Y d}~dS d}~ww ) z&Load existing account key if availablez Loading existing account key...�rbN)�passwordr- z(Successfully loaded existing account keyTFzError loading account key: )r" �path�existsr! r r r �open�readr �load_pem_private_keyr r r/ r0 )r$ �f�key_datar2 r% r% r& �_load_account_key� s&
�� ��z CustomACME._load_account_keyc
C s� z9t j�d� | jjtjjtjj t�
� d�}t | j d��
}|�
|� W d � n1 s,w Y t j�d� W dS tyW } zt j�dt|�� �� W Y d}~dS d}~ww ) z Save account key for future usezSaving account key...��encoding�format�encryption_algorithm�wbNz Successfully saved account keyTzError saving account key: F)r r r r �
private_bytesr �Encoding�PEM�
PrivateFormat�PKCS8� NoEncryptionru r! �writer/ r0 )r$ ry rx r2 r% r% r& �_save_account_key� s" � � ��z CustomACME._save_account_keyc
C s6 z�t j�d� dd| j� �gd�}| jdkr`d| jv r`d| jd v r`| jd d r`t j�d� | �� \}}|r9|sXt j�d � d
| _d | _| �� sLW d S | � � sSW d S | �
� W S | � ||�|d
< | � || jd �}|stt j�d� W d S t j�d� ddi}t
j| jd ||d�}t j�d|j� �� t j�d|j� �� |jdkr�|jd | _t j�d| j� �� | �� W dS |jdkr�t j�d� d| _d| _| �� s�W d S | � � s�W d S | �
� W S |jd kr�d |jv r�t j�d � | � � s�W d S | �
� W S W d S t�y } zt j�d t|�� �� W Y d }~d S d }~ww )!zCreate new ACME accountz Creating new ACME account...Tzmailto:)�termsOfServiceAgreed�contactr �meta�externalAccountRequiredzEZeroSSL requires External Account Binding, getting EAB credentials...zDFailed to get ZeroSSL EAB credentials, falling back to Let's Encryptr r F�externalAccountBindingrN z)Failed to create JWS for account creationz#Sending account creation request...� Content-Type�application/jose+json��datar< z"Account creation response status: zAccount creation response: �� �Locationz+Successfully created account. Account URL: i� zARate limit hit for account creation. Using staging environment...r
i� �badNoncez,Bad nonce, getting new nonce and retrying...zError creating account: N)r r r r r r � _get_zerossl_eab_credentialsr r9 rB �_create_account� _create_eabrp r4 �post� status_code�textr< r r� r r/ r0 )r$ rU �eab_kid� eab_hmac_keyrn r< r8 r2 r% r% r& r� � s� ��� �
�
�
�
��zCustomACME._create_accountc
C s� zJt j�d� d}ddi}d| ji}tj|||d�}t j�d|j� �� t j�d|j� �� |jd krH|�� }d
|v rHd |v rH|d
|d fW S W d S t yh } zt j�d
t
|�� �� W Y d}~d S d}~ww )z5Get External Account Binding credentials from ZeroSSLz"Getting ZeroSSL EAB credentials...z2https://api.zerossl.com/acme/eab-credentials-emailr� z!application/x-www-form-urlencoded�email)r< r� z ZeroSSL EAB response status: zZeroSSL EAB response: �� r� r� )NNz'Error getting ZeroSSL EAB credentials: N) r r r r r4 r� r� r� r6 r/ r0 )r$ �eab_urlr< r� r8 �eab_datar2 r% r% r& r� H s( ��
��z'CustomACME._get_zerossl_eab_credentialsc
C s� z�t j�d� | j�� }|j}|j�|j�� d d d�}|j �|j �� d d d�}dt
� |�� d��
d�t
� |�� d��
d�d�}d || jd
d �}t
� t�|��d��� d��
d�} t
� t�|��d��� d��
d�}
| � d |
� ��d�} t
�|d
�} t�| | tj��� }
t
� |
�� d��
d�}| |
|d�}t j�d� |W S ty� } zt j�dt|�� �� W Y d}~dS d}~ww )z+Create External Account Binding for ZeroSSLz$Creating External Account Binding...rC rD rE rF rG rH �rJ rK r2 �HS256rN )rL rO rM rR z==rS z-Successfully created External Account Bindingz)Error creating External Account Binding: N)r r r r r[ r\ rK r] r^ r2 r_ r` ra rb r r6 r7 rc �urlsafe_b64decode�hmac�new�hashlib�sha256�digestr/ r0 )r$ r� r� r[ r\ rg rh rP rT rj rk rl �hmac_keyrV rm �eabr2 r% r% r& r� d sN
��� �� �� ��zCustomACME._create_eabc
C sZ z�t j�d|� �� dd� |D �}d|i}| �|| jd �}|s)t j�d� W dS t j�d� d d
i}tj| jd ||d �}t j�d |j� �� t j�d
|j� �� |jdkr�|j d | _
|� � d | _ |� � d | _
t j�d| j
� �� t j�d| j � �� t j�d| j
� �� W dS W dS ty� } zt j�dt|�� �� W Y d}~dS d}~ww )z Create new order for domainsz Creating new order for domains: c S s g | ]}d |d��qS )�dns)�type�valuer% ��.0r r% r% r& �
<listcomp>� s z,CustomACME._create_order.<locals>.<listcomp>� identifiers�newOrderz'Failed to create JWS for order creationFz!Sending order creation request...r� r� r� z Order creation response status: zOrder creation response: r� r� r �finalizez'Successfully created order. Order URL: zAuthorizations: zFinalize URL: TzError creating order: N)r r r rp r r4 r� r� r� r< r r6 r r r/ r0 )r$ �domainsr� rU rn r< r8 r2 r% r% r& �
_create_order� s: � �
��zCustomACME._create_orderc
C s zit j�dt�|�� �� | �|�}|s t j�d� W dS tj�| j �s4t j�d| j � �� t�
| j � tj� | j |d �}t j�d|� �� t |d��
}|�
|� W d � n1 s\w Y t j�d � W d
S ty� } zt j�d t|�� �� W Y d}~dS d}~ww ) zHandle HTTP-01 challengezHandling HTTP challenge: z Failed to get key authorizationFz Creating challenge directory: �tokenzWriting challenge file: �wNz#Successfully handled HTTP challengeTz Error handling HTTP challenge: )r r r r6 r7 �_get_key_authorizationr" rs rt r r# �joinru r� r/ r0 )r$ � challenge�key_auth�challenge_filerx r2 r% r% r& �_handle_http_challenge� s*
� ��z!CustomACME._handle_http_challengec
C s\ zt j�dt�|�� �� W dS ty- } zt j�dt|�� �� W Y d}~dS d}~ww )z$Handle DNS-01 challenge (Cloudflare)zHandling DNS challenge: z Error handling DNS challenge: NF)r r r r6 r7 r/ r0 )r$ r� r2 r% r% r& �_handle_dns_challenge� s ��z CustomACME._handle_dns_challengec
C sj z�t j�d� | j�� }|j}|j�|j�� d d d�}|j �|j �� d d d�}dt
� |�� d��
d�t
� |�� d��
d�d�}t
� |j �d d��� d��
d�dt
� |j�d
d��� d��
d�d �}tj|d d
d�}t�|�d���� } t
� | �� d��
d�} |d � d| � �}
t j�d|
� �� |
W S ty� } zt j�dt| �� �� W Y d} ~ dS d} ~ ww )z#Get key authorization for challengez Getting key authorization...rC rD rE rF rG rH r� � � )r2 rJ rK TrW )� sort_keysrZ r� rR zKey authorization: z!Error getting key authorization: N)r r r r r[ r\ rK r] r^ r2 r_ r` ra rb r6 r7 r� r� rc r� r/ r0 ) r$ r� r[ r\ rg rh ri rP �
sorted_jwk�
thumbprintr� r2 r% r% r& r� � s2
�
���z!CustomACME._get_key_authorizationc
C s� zSt j�d|� �� i }| �||�}|s t j�d� W dS t j�d� ddi}tj|||d�}t j�d|j� �� t j�d |j� �� |jd
krQt j�d � W d S W dS tyq } zt j�d
t |�� �� W Y d}~dS d}~ww )a� Verify challenge completion with the ACME server
This function sends a POST request to the ACME server to verify that the challenge
has been completed successfully. The challenge URL is provided by the ACME server
when the challenge is created.
Example challenge_url:
"https://acme-v02.api.letsencrypt.org/acme/challenge/example.com/123456"
The verification process:
1. Creates an empty payload (POST-as-GET request)
2. Creates a JWS (JSON Web Signature) with the payload
3. Sends the request to the ACME server
4. Checks the response status
Returns:
bool: True if challenge is verified successfully, False otherwise
z Verifying challenge at URL: z/Failed to create JWS for challenge verificationFz)Sending challenge verification request...r� r� r� z(Challenge verification response status: z!Challenge verification response: r� z Successfully verified challengeTzError verifying challenge: N)
r r r rp r4 r� r� r� r/ r0 )r$ �
challenge_urlrU rn r< r8 r2 r% r% r& �_verify_challenge s, �
��z CustomACME._verify_challengec
C s6 z�t j�d� dt�|��d��d�i}| �|| j�}|s&t j�d� W dS t j�d� dd i}t j
| j||d
�}t j�d |j � �� t j�d |j � �� |j d
kr�d}d}t
|�D ]�}| �� sjt j�d� W dS | �d| j�}|s}t j�d� W dS t j
| j||d
�}t j�d|j � �� |j d
kr�|�� �d�} | dkr�|�� �d�| _t j�d| j� �� W dS | dkr�t j�d� W dS | dkr�t j�d |d � d |� �� t�|� qZt j�d |d � d |� �� t�|� qZt j�d � W dS W dS t�y }
zt j�d!t|
�� �� W Y d}
~
dS d}
~
ww )"z"Finalize order and get certificatezFinalizing order...�csrrG rH z+Failed to create JWS for order finalizationFz%Sending order finalization request...r� r� r� z$Order finalization response status: z Order finalization response: r� � � �*Failed to get nonce for order status checkN�+Failed to create JWS for order status check� Order status check response: �status�valid� certificatez/Successfully finalized order. Certificate URL: T�invalid�Order validation failed�
processing� Order still processing, attempt � �/�#Order status check failed, attempt �Order processing timed outzError finalizing order: )r r r r_ r` ra rb rp r r4 r� r� r� �rangerB r r6 r5 r �time�sleepr/ r0 ) r$ r� rU rn r< r8 � max_attempts�delay�attempt� order_statusr2 r% r% r& �_finalize_orderc sp � �
� �
� ��zCustomACME._finalize_orderc
C s0 zyt j�d� t j�d| j� �� | �� s t j�d� W dS | �d| j�}|s0t j�d� W dS ddi}tj| j||d�}t j�d |j� �� t j�d
|j � �� |jd krmt j�d � t
|j t �ri|j �
d
�W S |jW S t j�d|j � �� W dS ty� } zt j�dt |�� �� W Y d}~dS d}~ww )z%Download certificate from ACME serverzDownloading certificate...zCertificate URL: z,Failed to get nonce for certificate downloadNz-Failed to create JWS for certificate downloadr� r� r� z&Certificate download response status: z'Certificate download response headers: r� z#Successfully downloaded certificaterG z Certificate download failed: z Error downloading certificate: )r r r r rB rp r4 r� r� r< �
isinstancer� r0 rc �contentr/ )r$ rn r< r8 r2 r% r% r& �_download_certificate� s2 �
"��z CustomACME._download_certificater� r� c
C sR z�t j�d|� �� t|�D ]s}| �� s t j�d� W dS | �d|�}|s0t j�d� W dS ddi}tj|||d�}t j�d |j� �� |j d
krn|�
� � d �}|d kr`t j�d
� W dS |dkrnt j�d� W dS t j�d|d � d|� �� t �
|� qt j�d� W dS ty� } zt j�dt| �� �� W Y d} ~ dS d} ~ ww )z5Wait for challenge to be validated by the ACME serverz)Waiting for challenge validation at URL: z.Failed to get nonce for challenge status checkFNz/Failed to create JWS for challenge status checkr� r� r� z!Challenge status check response: r� r� r� z Challenge validated successfullyTr� zChallenge validation failedz!Challenge still pending, attempt r� r� z Challenge validation timed outz(Error waiting for challenge validation: )r r r r� rB rp r4 r� r� r� r6 r5 r� r� r/ r0 )
r$ r� r� r� r� rn r< r8 �challenge_statusr2 r% r% r& � _wait_for_challenge_validation� sB �
� ��z)CustomACME._wait_for_challenge_validationc
s2 zzt j�d� � �� g d�}d
� fdd� }d}|D ] }||d�r$d} nqd}|D ] }||d�r4d} nq)z t�� � d}W n
tjyH Y nw z t�� d tj� d}W n
tjy_ Y nw |rkt j�d
� � �� |rvt j�d � � �� |py|W S ty� } zt j�d t |�� �� W Y d }~dS d }~ww )a� Check if a domain has valid DNS records
This function performs multiple DNS checks to ensure the domain has valid DNS records.
It includes:
1. A record (IPv4) check
2. AAAA record (IPv6) check
3. DNS caching prevention
4. Multiple DNS server checks
Args:
domain (str): The domain to check
Returns:
bool: True if valid DNS records are found, False otherwise
z!Checking DNS records for domain: )z8.8.8.8z1.1.1.1z208.67.222.222�Ac
sj z�z�t � t jt j�}|�d� |�| df� t� }|d7 }|d7 }|d7 }|d7 }|d7 }|d7 }� �d�D ]}|�t|�� |� |�
� � q6|d7 }|dkrT|d7 }n|d 7 }|d7 }|� |� |� d
�}t|�d kr�t
�|d d
� d�}|dkr�W W |�� dS W W |�� dS ty� } ztj�d| � dt|�� �� W Y d }~W |�� dS d }~ww |�� w )N� �5 s s s rR � r� s i � � rD rE r TFz Error checking DNS with server z: )�socket�AF_INET�
SOCK_DGRAM�
settimeout�connect� bytearray�split�append�len�extendrc �send�recv�int�
from_bytes�closer/ r r r r0 )�server� record_type�sock�query�partr8 � answer_countr2 �r r% r& �check_with_dns_server sF
� � ��
z;CustomACME._check_dns_record.<locals>.check_with_dns_serverFT�AAAANz"IPv4 DNS record found for domain: z"IPv6 DNS record found for domain: z Error checking DNS records: )r� )
r r r r� �
gethostbyname�gaierror� getaddrinfo�AF_INET6r/ r0 )r$ r � dns_serversr� �a_record_foundr� �aaaa_record_foundr2 r% r� r& �_check_dns_record� sL 5
�
�
��
��z CustomACME._check_dns_recordc
C s� z�t j�d� t|�D ]�}| �� st j�d� W dS | �d| j�}|s.t j�d� W dS ddi}tj| j||d�}t j�d |j � �� |j
d
kr�|� � � d �}|d krg|� � � d
�| _
t j�d� W dS |dkrut j�d� W dS |dkr�t j�d|d � d|� �� t�|� q t j�d|d � d|� �� t�|� q t j�d� W dS ty� } zt j�dt|�� �� W Y d}~dS d}~ww )z Wait for order to be processedz Waiting for order processing...r� FNr� r� r� r� r� r� r� r� r� z Order validated successfullyTr� r� r� r� r� r� r� r� z$Error waiting for order processing: )r r r r� rB rp r r4 r� r� r� r6 r5 r r� r� r/ r0 ) r$ r� r� r� rn r< r8 r� r2 r% r% r& �_wait_for_order_processingi sP �
�
� ��z%CustomACME._wait_for_order_processingc
C st �zt j�d|� d|� �� | �� rt j�d� nt j�d� g }|D ]}| �|�r0|�|� q#t j�d|� d�� q#|sFt j�d� W dS t j�d � | �� sYt j�d
� W dS t j�d � | �� slt j�d � W dS t j�d
� | �� st j�d� W dS t j�d� | � � s�t j�d� | j
s�t j�d� d| _
d| _ | �� s�W dS | �� s�W dS | � � s�W dS nW dS t j�d� | � |�s�t j�d� W dS t j�d� | j
D �]}t j�d|� �� | �� s�t j�d� W dS t j�d|� �� | �d|�}|�s
t j�d� W dS d d i}tj|||d �}t j�d |j� �� t j�d |j� �� |jd!k�r:t j�d"� W dS |�� d# } | D ]�}
t j�d$t�|
�� �� |�r�|
d% d&k�r�| �|
��skt j�d'� W dS | �|
d( ��s~t j�d)� W dS | �|
d( ��s�t j�d*� W dS �qB|�s�|
d% d+k�r�| �|
��s�t j�d,� W dS | �|
d( ��s�t j�d-� W dS | �|
d( ��s�t j�d.� W dS �qBt j�d/|
d% � d0�� �qBq�t j�d1� tjd2d3t� d4�} | �d| j �}|�st j�d5� W dS tj| j ||d ��� } d6d7� | d8 D �}
t j�d9|
� �� t � � � t � t �!t j"j#|
d: �g��j$t �%d;d7� |
D ��dd<��&| t'�(� t� �}t j�d=� | �)|�*t+j,j-���sft j�d>� W dS t j�d?� | �.� �szt j�d@� W dS t j�dA� | �/� }|�s�t j�dB� W dS t j�dC� t0j1�2| j3��s�t j�dD| j3� �� t0�4| j3� t0j1�5| j3dE�}t0j1�5| j3dF�}t j�dG|� �� t6|dH��
}|�7|� W d � n 1 �s�w Y t j�dI|� �� t6|dH��}|�7| j8t+j,j9t+j:j;t+�<� dJ�� W d � n 1 �s
w Y t j�dK� W dS t=�y9 } zt j�dLt>|�� �� W Y d}~dS d}~ww )Mz Main method to issue certificatez+Starting certificate issuance for domains: z , use_dns: zUsing existing account keyz2No existing account key found, will create new onezSkipping domain z due to missing DNS recordsz'No valid domains found with DNS recordsFz Step 1: Generating account keyz Failed to generate account keyz Step 2: Getting ACME directoryz Failed to get ACME directoryzStep 3: Getting noncezFailed to get noncezStep 4: Creating accountzFailed to create accountz#Switching to staging environment...Tr
zStep 5: Creating orderzFailed to create orderzStep 6: Handling challengesz Processing authorization URL: z%Failed to get nonce for authorizationz$Fetching authorization details for: Nz.Failed to create JWS for authorization requestr� r� r� z Authorization response status: zAuthorization response: r� zFailed to get authorization�
challengeszProcessing challenge: r� zdns-01z Failed to handle DNS challengerM z Failed to verify DNS challengez DNS challenge validation failedzhttp-01z Failed to handle HTTP challengez Failed to verify HTTP challengez HTTP challenge validation failedz Skipping z
challengezStep 7: Generating CSRr( r) r* z&Failed to create JWS for order detailsc S s g | ]}|d �qS )r� r% )r� �
identifierr% r% r& r� s z0CustomACME.issue_certificate.<locals>.<listcomp>r� zOrder domains: r c S s g | ]}t �|��qS r% )r �DNSNamer� r% r% r& r� % s
�)�criticalzStep 8: Finalizing orderzFailed to finalize orderz$Step 9: Waiting for order processingzFailed to process orderz Step 10: Downloading certificatez Failed to download certificatezStep 11: Saving certificatez Creating certificate directory: z
fullchain.pemz privkey.pemzSaving certificate to: r zSaving private key to: r{ z+Successfully completed certificate issuancezError issuing certificate: )?r r r rz r r� r3 r9 rB r� r r r� r rp r4 r� r� r� r6 r7 r� r� r� r� r r. r r r � CertificateSigningRequestBuilder� subject_name�Name�
NameAttribute�NameOID� COMMON_NAME�
add_extension�SubjectAlternativeNamerd r rf r� � public_bytesr r� �DERr r� r" rs rt r r# r� ru r� r� r� r� r� r� r/ r0 )r$ r� �use_dns�
valid_domainsr �auth_urlrn r< r8 r
r� r1 �order_response�
order_domainsr� r� � cert_file�key_filerx r2 r% r% r& �issue_certificate� s8 �
�
�
�
� � � ��
�� �
�
� � ��z CustomACME.issue_certificateN)Fr )r� r� )F)�__name__�
__module__� __qualname__r' r3 r9 rB rp rz r� r� r� r� r� r� r� r� r� r� r� r� r r r r% r% r% r& r
s,
,
aK 8# 5FB
#(
y.r
)r6 r" r� r4 r_ r� r� r � cryptographyr � cryptography.hazmat.primitivesr �)cryptography.hazmat.primitives.asymmetricr r � cryptography.hazmat.backendsr r �OpenSSL�plogicalr �plogical.processUtilitiesr r� r
r% r% r% r& �<module> s&