ó
#u|jc @ s d d l m Z d d l Z d d l Z d d l Z d d l Z d d l Z d d l Z d d l Z d d l Z d d l
m Z d Z d d l
m Z m Z m Z m Z m Z m Z d „ Z e a d „ Z d „ Z d „ Z d d
„ Z d „ Z d „ Z d S(
iÿÿÿÿ( t print_functionN( t defaultdicts dnssec-coverage( t dnskeyt eventlistt keydictt keyeventt keyzonet utilsc O s t | | Ž t j d ƒ d S( Ni ( t printt syst exit( t argst kwargs( ( s0 /usr/lib/python2.7/site-packages/isc/coverage.pyt fatal s
c O sk d | k r) | d } | j d d ƒ n t } t r> t a n | rQ t d ƒ n | rg t | | Ž n d S( su output text, adding a vertical space this is *not* the first
first section being printed since a call to vreset()t skipt N( t popt Nonet Truet
_firstlinet FalseR ( R R R ( ( s0 /usr/lib/python2.7/site-packages/isc/coverage.pyt output' s
c C s
t a d S( s reset vertical spacingN( R R ( ( ( s0 /usr/lib/python2.7/site-packages/isc/coverage.pyt vreset8 s c C s@ | j ƒ } y t | ƒ SWn t k
r- n Xt j d ƒ } | j | ƒ } | se t d | ƒ ‚ n | j ƒ \ } } t | ƒ } | j ƒ } | j d ƒ r¦ | d S| j d ƒ r½ | d S| j d ƒ rÔ | d S| j d ƒ rë | d
S| j d ƒ r| d S| j d
ƒ r| d S| j d ƒ r,| St d | ƒ ‚ d S( sÌ convert a formatted time (e.g., 1y, 6mo, 15mi, etc) into seconds
:param s: String with some text representing a time interval
:return: Integer with the number of seconds in the time interval
s ([0-9][0-9]*)\s*([A-Za-z]*)s Cannot parse %st yi€3át moi ' t wi€: t di€Q t hi t mii< t ss Invalid suffix %sN( t stript intt
ValueErrort ret compilet matcht groupst lowert
startswith( R t rt mt nt unit( ( s0 /usr/lib/python2.7/site-packages/isc/coverage.pyt
parse_timeA s6
c C s | } | s6 t j j | ƒ s6 t j | t j ƒ r¾ t j d } | sX t j j } n xc | j t j ƒ D]L } t j j | | ƒ } t j j | ƒ r± t j | t j ƒ r± Pn d } qk Wn | S( s1 find the location of a specified command. if a default is supplied
and it works, we use it; otherwise we search PATH for a match.
:param command: string with a command to look for in the path
:param default: default location to use
:return: detected location for the desired command
t PATHN( t ost patht isfilet accesst X_OKt environt defpatht splitt pathsept joinR ( t commandt defaultt fpathR. t directory( ( s0 /usr/lib/python2.7/site-packages/isc/coverage.pyt set_pathk s 0
'
c C s‚ t d t j j t j d ƒ d ƒ ƒ } t j d t d d ƒ } | j d d t
d d d
dC d d d
ƒ| j d d d d
d d t
d d d d ƒ| j d d d d t
d d d d ƒ| j d d d d t
d d d d ƒ| j d d d d t
d d d d ƒ| j d d d! d
d" d t
d d# d d ƒ| j d$ d d% d
| d t
d d& d d ƒ| j d' d d( d t
d
d) d d* d d ƒ| j d+ d d, d- d. d
t d d/ ƒ| j d0 d d1 d- d. d
t d d2 ƒ| j d3 d4 d d5 d- d. d
t d d6 ƒ| j d7 d8 d- d9 d9 t j
ƒ| j ƒ } | j rA| j rAt d: ƒ n6 | j sS| j rn| j rbd; n d< | _ n dC | _ | j r¢t | j ƒ d= k r¢t d> ƒ n y( | j rÉt | j ƒ } | | _ n Wn t k
rÝn Xy( | j rt | j ƒ } | | _ n Wn t k
rn Xy( | j rAt | j ƒ } | | _ n Wn t k
rUn XyS | j r¨| j } t | j ƒ } | d? k r’dC | _ q¨t j ƒ | | _ n Wn t k
r¼n X| j rÓ| j rÓ| S| j r_| j r_yM t | j d? | j | j ƒ } | j p| j | _ | j p+| j | _ Wq_t k
r[} t d@ | j | ƒ q_Xn | j s~t! dA ƒ dB | _ n | S(D s8 Read command line arguments, set global 'args' structures named-compilezonet sbint descriptions : checks future s DNSKEY coverage for a zonet zonet typet nargst *R8 t helps zone(s) to checks% (default: all zones in the directory)s -Kt destR. t .s& a directory containing keys to processt metavart dirs -ft filenames zone master filet files -mt maxttls the longest TTL in the zone(s)t times -dt keyttls the DNSKEY TTLs -rt resignt 1944000s: the RRSIG refresh interval in seconds [default: 22.5 days]s -ct compilezones path to 'named-compilezone's -lt
checklimitt 0sD Length of time to check for DNSSEC coverage [default: 0 (unlimited)]s -zt no_kskt actiont
store_trues# Only check zone-signing keys (ZSKs)s -kt no_zsks" Only check key-signing keys (KSKs)s -Ds --debugt
debug_modes Turn on debugging outputs -vs --versiont versions) ERROR: -z and -k cannot be used together.t KSKt ZSKi s) ERROR: -f can only be used with one zone.i s" Unable to load zone data from %s: s‰ WARNING: Maximum TTL value was not specified. Using 1 week
(604800 seconds); re-run with the -m option to get more
accurate results.i€: N(" R; R- R. R6 R t prefixt argparset ArgumentParsert progt add_argumentt strR R RV t
parse_argsRT RQ R
t keytypeRG t lenR> RI R+ R RK RL RO RJ R RN t ExceptionR R ( RN t parserR R( t kR' t limR> t e( ( s0 /usr/lib/python2.7/site-packages/isc/coverage.pyR_ „ s°
c C s® t ƒ } t d ƒ y( t d | j d | j d | j ƒ } Wn' t k
rd } t d t | ƒ ƒ n XxN | D]F } | j t
ƒ | j r˜ | j t
ƒ ql | j t
| j
| j ƒ ql Wt
d ƒ t ƒ y t | ƒ } Wn' t k
r } t d t | ƒ ƒ n Xt } | j s:| j d | j | j t
ƒ s‘t } q‘nW xT | j D]I } y+ | j | | j | j t
ƒ stt } n WqDt
d | ƒ qDXqDWt j | r£d n d
ƒ d S( Ns; PHASE 1--Loading keys to check for internal timing problemsR. R> RK s' ERROR: Unable to build key dictionary: s9 PHASE 2--Scanning future key events for coverage failuress# ERROR: Unable to build event list: s& ERROR: Coverage check failed for zone i i ( R_ R R R. R> RK Rb R
R^ t check_prepubR t sept
check_postpubRI RL R R R t coverageR R` RO R R R
( R t kdRf t keyt elistt errorsR> ( ( s0 /usr/lib/python2.7/site-packages/isc/coverage.pyt mainø s:
(
( t
__future__R R- R RZ t globR! RJ t calendart pprintt collectionsR R\ t iscR R R R R R R
R R R R R+ R R; R_ Ro ( ( ( s0 /usr/lib/python2.7/site-packages/isc/coverage.pyt <module> s& . * t