Your IP : 18.219.119.163
3
���fk � @ s� d dl mZ d dlZd dlZd dlZd dlZd dlZd dlZd dlZd dl Z d dl
m Z dZ d dl
mZmZmZmZmZmZ dd� Zddd �Zd
d � Zd d
� ZdS )� )�print_functionN)� defaultdictz
dnssec-keymgr)�dnskey�keydict� keyseries�policy�parsetab�utilsc O s t | |� tjd� d S )N� )�print�sys�exit)�args�kwargs� r � /usr/lib/python3.6/keymgr.py�fatal s
r c C s� |}| s(t jj|� s(t j|t j� r�t jd }|s>t jj}xB|jt j�D ]2}|t j | }t jj|�rzt j|t j�rzP d}qLW |S )a2 find the location of a specified command. If a default is supplied,
exists and it's an executable, we use it; otherwise we search PATH
for an alternative.
:param command: command to look for
:param default: default value to use
:return: PATH with the location of a suitable binary
�PATHN)
�os�path�isfile�access�X_OK�environ�defpath�split�pathsep�sep)Zcommand�defaultZfpathr Z directoryr r r �set_path s $
r c C s� t dtjjtjd�d��} t dtjjtjd�d��}tjtd d�}|j dt
ddd;d � |j d d
t
ddd� |j ddt
ddd� |j dd| t
dd
d� |j ddt
ddd
d � |j d d |t
d d
d� |j d d!d"d#d$d%� |j d&d'd"d#d(d%� |j d)d*d+d"d#d<d%� |j d.d/d0d"d#d1d%� |j d2d3d4tj d5� |j � }|j
�rJ|j�rJtd6� |jdk�r^td7� |jdk�rrtd8� |jdk �r�tjj|j��s�td9|j � n(tjjtjd:�|_tjj|j��s�d|_|S )=zc Read command line arguments, returns 'args' object
:return: args object properly prepared
z
dnssec-keygenZsbinzdnssec-settimezA: schedule DNSSEC key rollovers according to a pre-defined policy)� description�zone�*Nz.Zone(s) to which the policy should be applied z%(default: all zones in the directory))�type�nargsr �helpz-Kr zDirectory containing keys�dir)�destr# r% �metavarz-c�
policyfilezPolicy definition file�filez-g�keygenzPath to 'dnssec-keygen')r' r r# r% r( z-r� randomdevz@Path to a file containing random data to pass to 'dnssec-keygen')r' r# r r% r( z-s�settimezPath to 'dnssec-settime'z-k�no_zsk�
store_trueFz,Only apply policy to key-signing keys (KSKs))r' �actionr r% z-z�no_kskz-Only apply policy to zone-signing keys (ZSKs)z-fz--force�forcez Force updates to key events z even if they are in the pastz-qz--quiet�quietzUpdate keys silentlyz-vz --version�version)r0 r4 z)ERROR: -z and -k cannot be used together.z ERROR: dnssec-keygen not foundz ERROR: dnssec-settime not foundz!ERROR: Policy file "%s" not foundzdnssec-policy.confzSZone(s) to which the policy should be applied (default: all zones in the directory)z8Force updates to key events even if they are in the past)r r r �joinr �prefix�argparse�ArgumentParser�prog� add_argument�strr4 �
parse_argsr. r1 r r+ r- r) �existsZ
sysconfdir)r+ r- �parserr r r r r< 6 sb
r< c : C sH t � } | j| j| j| jd�}ytj| j�}W n2 tk
r^ } zt dt
|� � W Y d d }~X nX yt || j| j d�}W n2 tk
r� } zt dt
|� � W Y d d }~X nX yt
||d�}W n2 tk
r� } zt dt
|� � W Y d d }~X nX y |j|| j| j| j| jd� W n4 tk
�rB } zt dt
|� � W Y d d }~X nX d S ) N)Z keygen_pathZ settime_pathZ keys_pathr, z Unable to load DNSSEC policy: )r Zzonesz Unable to build key dictionary: )�contextz Unable to build key series: )ZkskZzskr2 r3 zUnable to apply policy: )r< r+ r- r r, r Z
dnssec_policyr) � Exceptionr r; r r! r Zenforce_policyr. r1 r2 r3 )r r? Zdp�eZkdZksr r r �main} s,
"""rB )N)Z
__future__r r r r7 Zglob�reZtimeZcalendar�pprint� collectionsr r9 Ziscr r r r r r r r r< rB r r r r �<module> s @
G