File: //proc/self/root/usr/lib/python2.7/site-packages/isc/keymgr.pyo
�
���gc @ s� d d l m Z d d l Z d d l Z d d l Z d d l Z d d l Z d d l Z d d l Z d d l Z d d l
m Z d Z d d l
m Z m Z m Z m Z m Z m Z d � Z d d � Z d � Z d � Z d S(
i����( t print_functionN( t defaultdicts
dnssec-keymgr( t dnskeyt keydictt keyseriest policyt parsetabt utilsc O s t | | � t j d � d S( Ni ( t printt syst exit( t argst kwargs( ( s. /usr/lib/python2.7/site-packages/isc/keymgr.pyt fatal s
c C s� | } | s6 t j j | � s6 t j | t j � r� t j d } | sX t j j } n x_ | j t j � D]H } | t j | } t j j | � r� t j | t j � r� Pn d } qk Wn | S( s2 find the location of a specified command. If a default is supplied,
exists and it's an executable, we use it; otherwise we search PATH
for an alternative.
:param command: command to look for
:param default: default value to use
:return: PATH with the location of a suitable binary
t PATHN( t ost patht isfilet accesst X_OKt environt defpatht splitt pathsept sept None( t commandt defaultt fpathR t directory( ( s. /usr/lib/python2.7/site-packages/isc/keymgr.pyt set_path s 0
'
c C s� t d t j j t j d � d � � } t d t j j t j d � d � � } t j d t d � } | j d d t
d d d
d: d d d
�| j d d d d t
d d d d �| j d d d d t
d d d d �| j d d d d
| d t
d d d d �| j d d d d t
d
d: d d d d �| j d d d d
| d t
d d d d �| j d! d d" d# d$ d
t d d% �| j d& d d' d# d$ d
t d d( �| j d) d* d d+ d# d$ d
t d d, d- �| j d. d/ d d0 d# d$ d
t d d1 �| j d2 d3 d# d4 d4 t j
�| j � } | j r@| j r@t d5 � n | j d: k r\t d6 � n | j d: k rxt d7 � n | j d: k r�t j j | j � s�t d8 | j � q�n< t j j t j d9 � | _ t j j | j � s�d: | _ n | S(; sc Read command line arguments, returns 'args' object
:return: args object properly prepared
s
dnssec-keygent sbins dnssec-settimet descriptionsA : schedule DNSSEC key rollovers according to a pre-defined policyt zonet typet nargst *R t helps. Zone(s) to which the policy should be applied s% (default: all zones in the directory)s -Kt destR s Directory containing keyst metavart dirs -ct
policyfiles Policy definition filet files -gt keygens Path to 'dnssec-keygen's -rt randomdevs@ Path to a file containing random data to pass to 'dnssec-keygen's -st settimes Path to 'dnssec-settime's -kt no_zskt actiont
store_trues, Only apply policy to key-signing keys (KSKs)s -zt no_ksks- Only apply policy to zone-signing keys (ZSKs)s -fs --forcet forces Force updates to key events s even if they are in the pasts -qs --quiett quiets Update keys silentlys -vs --versiont versions) ERROR: -z and -k cannot be used together.s ERROR: dnssec-keygen not founds ERROR: dnssec-settime not founds! ERROR: Policy file "%s" not founds dnssec-policy.confN( R R R t joinR t prefixt argparset ArgumentParsert progt add_argumentt strR t FalseR4 t
parse_argsR. R1 R
R+ R- R) t existst
sysconfdir( R+ R- t parserR ( ( s. /usr/lib/python2.7/site-packages/isc/keymgr.pyR= 6 sb !!
c
C sf t � } i | j d 6| j d 6| j d 6| j d 6} y t j | j � } Wn' t k
rv } t d t
| � � n Xy" t | d | j d | j �} Wn' t k
r� } t d t
| � � n Xy t
| d | �} Wn' t k
r} t d
t
| � � n Xy5 | j | d | j d | j d
| j d | j �Wn' t k
ra} t d t
| � � n Xd S( Nt keygen_patht settime_patht keys_pathR, s Unable to load DNSSEC policy: R t zoness Unable to build key dictionary: t contexts Unable to build key series: t kskt zskR2 R3 s Unable to apply policy: ( R= R+ R- R R, R t
dnssec_policyR) t ExceptionR
R; R R! R t enforce_policyR. R1 R2 R3 ( R RE t dpt et kdt ks( ( s. /usr/lib/python2.7/site-packages/isc/keymgr.pyt main} s,
" ( t
__future__R R R R7 t globt ret timet calendart pprintt collectionsR R9 t iscR R R R R R R
R R R= RO ( ( ( s. /usr/lib/python2.7/site-packages/isc/keymgr.pyt <module> s `. G