h# UdZddlZddlZddlZddlZddlZddlZddlZddlZddl Z ddl Z ddl Z ddl mZmZmZmZmZmZddlZddlZddlZddlZddlZddlZddlZddlZddlZddlZddlZddl Zddl!Z ddl"Z"dZ&dZ'ejPjSdZ*e*rUddl+Z,ddl-Z-e,j\Z/e,j`jbjdZ3Gdde/Z4Gd d e-jjZ6n Gd d Z6e*Z7d ejpe9zd ejtde9dejfdZ;e;ZeXdejjf"d?Z_d@ejjdAebdebfdBZcd@ejjdCeRdDebddfdEZd d~d1ejjd2eRdFeRd3e]dzd4e9d#eRdzd5e9d6e^d7e^ds# tyy{W$j 11rdohc2eZdZfdZ ddZ ddZxZS)_NetworkBackendcZt|||_||_||_||_yr)super__init__ _local_port _resolver_bootstrap_address_family)selfresolver local_portbootstrap_addressfamily __class__s rrz_NetworkBackend.__init__Ms, G  )D %DN&7D #!DLrctg}t|\}}tjj|r|j |n|j |j |j nft |}|j} |rtjj|} |jj|| |} | j}|D]} tjj| } ||jdk7r1|d}tjj||jf| } nd} t| tj | }t#d|}t%|tjj| |f| |t'|cSt*j,#t($rYwxYw)N)r&lifetimerz0.0.0.0g@)_compute_timesr inet is_addressappendr rr!af_for_addressr resolve_name addressesrlow_level_address_tuple make_socketsocket SOCK_STREAMr_connect_CoreSyncStream Exceptionhttpcore ConnectError)r"hostportr local_addresssocket_optionsr0_rr&answersaddressafsourcesockattempt_expirations r connect_tcpz_NetworkBackend.connect_tcpTsI*73MAzxx""4(  &((4  !8!89$Z0  XX44]CF..55'6$--/ $ XX,,W5 ,0@0@A0E$,(1  XX==&(8(892F"F &r6+=+=vFD)Ec:)V&88'4"M* +400% *'' '!s9AF++ F76F7ctrNotImplementedError)r"pathrr=s rconnect_unix_socketz#_NetworkBackend.connect_unix_socket}s & %r)NNNNN)__name__ __module__ __qualname__rrErJ __classcell__r's@rrrLs "PT' (T6: &rrc>eZdZdddejdfd ZxZS)_HTTPTransportrNr$r%r#r&c| |ddl}|jj}t||i|t |||||j _yNr) dns.resolverr#Resolverrrr_pool_network_backend) r"r$r%r#r&argskwargsr r's rrz_HTTPTransport.__init__sS$5$=#<<002 G d -f -*9*&7+DJJ 'r)rLrMrNr3 AF_UNSPECrrOrPs@rrRrRs!"##   rrRc8eZdZdddejddZdZy)rRrNrScyr)r"r$r%r#r&rZr[s rrz_HTTPTransport.__init__s rctrrG)r"r:r;rr<s rrEz_HTTPTransport.connect_tcp% %r)rLrMrNr3r\rrEr_rrrRrRs "##  &rrAkindprotoreturnc0tj|||Sr)r3)rArbrcs rdefault_socket_factoryrfs ==T5 ))rsocket_factoryceZdZdZy)UnexpectedSourcez=A DNS query response came from an unexpected address or port.NrLrMrN__doc__r_rrririsGrriceZdZdZy) BadResponsezrseleventsrs r _wait_forrsJr3==1bjjlQ6F  " " $(  i** *F  i++ +F  LLV $  G 499;.G#~mm+++zz'"--'' '#(((s B'C66C?c"t|ddd|y)NTFrsrs r_wait_for_readablers audJ/rc"t|ddd|y)NFTrrs r_wait_for_writablers adJ/rc tjj||d}tjj||d}||k(xr |dd|ddk(S#tjj$rYywxYw)NrF)r r+ inet_ptonr SyntaxError)rAa1a2n1n2s r_addresses_equalrs{ XX  BqE * XX  BqE * 8 (12"QR&(( == $ $sAAA:9A:c|syt|||s-tjj|dr |dd|ddk(ry|ryt d|d|)NTrrFzgot a response from z instead of )rr r+ is_multicastri)rA from_address destinationignore_unexpecteds r_matches_destinationrsh L+6 k!n-,qr2BkRSRTo2U   |nL[MJ rTcd}d} tjj|}|}|r3tjj|}|r||k7r t d|}|r"|s tjj |}|r"tjj ||f|}|r"tjj ||f|}|||fS#t$r|rYwxYw#t$r t dwxYw)Nz5different address families for source and destinationz3source_port specified but address family is unknown)r r+r.r7 ValueError any_for_afr1)wherer;rB source_portwhere_must_be_addressrArsafs r_destination_and_sourcers  BK XX $ $U + hh%%f- by K B6 TXX((,F hh66 T7JBO  116;2GL  V $$?   !, TRS S Ts!C !C CCC4typerBct||d} |jd||j||S#t$r|j wxYw)aQMake a socket. This function uses the module's ``socket_factory`` to make a socket of the specified address family and type. *af*, a ``socket.AddressFamily`` or ``int`` is the address family, either ``socket.AF_INET`` or ``socket.AF_INET6``. *type*, a ``socket.SocketKind`` is the type of socket, e.g. ``socket.SOCK_DGRAM``, a datagram socket, or ``socket.SOCK_STREAM``, a stream socket. Note that the ``proto`` attribute of a socket is always zero with this API, so a datagram socket will always be a UDP socket, and a stream socket will always be a TCP socket. *source* is the source address and port to bind to, if any. The default is ``None`` which will bind to the wildcard address and a randomly chosen port. If not ``None``, it should be a (low-level) address tuple appropriate for *af*. rF)rg setblockingbindr7close)rArrBrs rr2r2DsT, r4#A e   FF6N    s %5A ssl_contextserver_hostnamect|||}t|tjjr|j }|j |d|S)aMake a socket. This function uses the module's ``socket_factory`` to make a socket of the specified address family and type. *af*, a ``socket.AddressFamily`` or ``int`` is the address family, either ``socket.AF_INET`` or ``socket.AF_INET6``. *type*, a ``socket.SocketKind`` is the type of socket, e.g. ``socket.SOCK_DGRAM``, a datagram socket, or ``socket.SOCK_STREAM``, a stream socket. Note that the ``proto`` attribute of a socket is always zero with this API, so a datagram socket will always be a UDP socket, and a stream socket will always be a TCP socket. If *ssl_context* is not ``None``, then it specifies the SSL context to use, typically created with ``make_ssl_context()``. If *server_hostname* is not ``None``, then it is the hostname to use for server certificate validation. A valid hostname must be supplied if *ssl_context* requires hostname checking. *source* is the source address and port to bind to, if any. The default is ``None`` which will bind to the wildcard address and a randomly chosen port. If not ``None``, it should be a (low-level) address tuple appropriate for *af*. F)do_handshake_on_connectr)r2rvr nameNameto_text wrap_socket)rArrrrBrCs rmake_ssl_socketresS> r4 (D/388==1)113  " " %' # rc>|t|||||St|||Sr)rr2)rArrBrrs r _make_socketrs,r4ovNN2tV,,rr#zdns.resolver.ResolvercF|ddl}|jj}|SrU)rVr#rW)r#r s r_maybe_get_resolverrs$ <<((* Orc,eZdZdZdZdZdZdZdZdZ dZ y) HTTPVersionzWhich version of HTTP should be used? DEFAULT will select the first version from the list [2, 1.1, 3] that is available. rrN) rLrMrNrkDEFAULTHTTP_1H1HTTP_2H2HTTP_3H3r_rrrrs, G F B F B F BrrFz /dns-queryqrrr;rone_rr_per_rrsetignore_trailingsessionrIpostr%verifyr& http_versioncHt||||d\}}}|}|Ztjj|r;|tj k(r d|d|| }n|tj k(r d|d|| }i}| tjj|}|j tdtjj|jr|j} |j|d<|j |j}|tjk(s|tjk(rt s| at#| } jJ| j%|j|}t'j(t+|j-} |r/t/|tj0j2s td t5|| |||||||| | | St st6|r%t/|t8j:s td |j=}d d i}|tj>tjfv}|tj@tjfv}|d}d}n |d}|d}|rtCjD|}n,tG|||| || | |}t9j:||| |}|5}|J| r=|jId tKtM|d|jO|||||}nLtQjR|jUd}|jW} |jY|||d| i|}dddjZdks|jZdkDr't|d|jZd|j\tj^ja|j\|jb|jd||}!|jfji|!_5|jm|!stn|!S#1swYxYw)a Return the response obtained after sending a query via DNS-over-HTTPS. *q*, a ``dns.message.Message``, the query to send. *where*, a ``str``, the nameserver IP address or the full URL. If an IP address is given, the URL will be constructed using the following schema: https://:/. *timeout*, a ``float`` or ``None``, the number of seconds to wait before the query times out. If ``None``, the default, wait forever. *port*, a ``int``, the port to send the query to. The default is 443. *source*, a ``str`` containing an IPv4 or IPv6 address, specifying the source address. The default is the wildcard address. *source_port*, an ``int``, the port from which to send the message. The default is 0. *one_rr_per_rrset*, a ``bool``. If ``True``, put each RR into its own RRset. *ignore_trailing*, a ``bool``. If ``True``, ignore trailing junk at end of the received message. *session*, an ``httpx.Client``. If provided, the client session to use to send the queries. *path*, a ``str``. If *where* is an IP address, then *path* will be used to construct the URL to send the DNS query to. *post*, a ``bool``. If ``True``, the default, POST method will be used. *bootstrap_address*, a ``str``, the IP address to use to bypass resolution. *verify*, a ``bool`` or ``str``. If a ``True``, then TLS certificate verification of the server is done using the default CA bundle; if ``False``, then no verification is done; if a `str` then it specifies the path to a certificate file or directory which will be used for verification. *resolver*, a ``dns.resolver.Resolver`` or ``None``, the resolver to use for resolution of hostnames in URLs. If not specified, a new resolver with a default configuration will be used; note this is *not* the default resolver as that resolver might have been configured to use DoH causing a chicken-and-egg problem. This parameter only has an effect if the HTTP library is httpx. *family*, an ``int``, the address family. If socket.AF_UNSPEC (the default), both A and AAAA records will be retrieved. *http_version*, a ``dns.query.HTTPVersion``, indicating which HTTP version to use. Returns a ``dns.message.Message``. FNzhttps://:z https://[z]:zno hostname in URL sni_hostnamez8session parameter must be a dns.quic.SyncQuicConnection.)rr connectionz)session parameter must be an httpx.Clientacceptzapplication/dns-messagerr)r<http1http2rr$r%r#r&)rrr transport)z content-typezcontent-length)headerscontentr extensions=r )rrparamsr+ responded with status code z Response body: keyring request_macrr)8rr r+r,r3AF_INETAF_INET6urllibparseurlparsehostnamerr;rrrhave_dohrr/randomchoicelistr0rvquicSyncQuicConnection_http3rohttpxClientto_wirerr contextlib nullcontextrRupdatestrlenrbase64urlsafe_b64encoderstripdecodeget status_codermessage from_wirerrelapsed total_secondsr is_responserm)"rrrr;rBrrrrrIrr%rr#r&rrAr> the_sourceurlrparsedr?wirerh1h2r<r$cmrresponsetwirers" rhttpsrsN2 tV[%RJ C ~#((--e4  UG1TF4&1C 6?? "eWBtfTF3CJ &&s+ ?? "12 2 88  v / & )/J~ & ;; ";;D{~~% +++H  $*84H??. ..++FOOVDG & d73D3D3F.G H  : SXX00 WX X            z'5<<8DEE 99;D23G +..+*=*=> >B +..+*=*=> >B  "1 ] 0:0F0Fw0O"'!/  \\Bv  w"""  NN$=&)#d)n  ||% $H++D188>DKKME{{u~% #H+>c!X%9%9C%?g1(2F2F1G 0 01 3    MM)'  A   + + -AF ==  H]s BPP!rrcD|t|D]\}}||k(s |cStr)KeyError)rrheadervalues r _find_headerr s2   T>L Nrpeerrc t|d}| tdt|}|dkr td|dks|dkDr6d}t|dkDr d|j z}t |d ||y#t $rYwxYw) Ns:statuszno :status header in responserzstatus is negativerrz: r)r rintrrr7r)rr rr statuserrors r _check_statusrs * -E }9:: ZF z.// |v| t9q= t{{},D6!=fXeWMNN$   sA66 BBrrc tjjs tdtj j |} | j} | J| j | j}d|_ |j}| rtjd}n$tjj| | d}|}|5| r| }nj||||}t|\}}|j!|5}|j#||| |j%t'|}t)|j+||dddt-j,}dddtj.j1||j2|j4||}t7z d|_|j9|st:|S#1swYxYw#1swYzxYw)Nz DNS-over-HTTP3 is not available.rT) verify_mode server_nameh3rr )r r have_quicrorrrrr;idrrrSyncQuicManagerconnectr* make_streamsend_h3receiverrrr rrrrmaxrrm)rrrrr;rBrrrrrr url_partsrrmanager the_managerthe_connectionstartrstreamfinishrs rrrs 88  677 %%c*I!!H   ~~!~~ AD 99;D5?5K5KD5Q((**H+    'N(00tV[N-W5  ' ' 0 9F NN3d +>>*Z"89D &..*E4 8 9    MM)'  A% %AF ==  H 9 9  s%9G;A G G G GG"c` |j|S#t$rt||YnwxYw.)zReads a datagram from the socket. A Timeout exception will be raised if the operation is not completed by the expiration time. )recvfromBlockingIOErrorr)rCmax_sizers r _udp_recvr*s9  1==* * 1 tZ 0 1 s ,,c |r|j||S|j|S#t$rt||YnwxYwB)zSends the specified datagram to destination over the socket. A Timeout exception will be raised if the operation is not completed by the expiration time. )sendtosendr(r)rCdatarrs r _udp_sendr/sL  1{{455yy& 1 tZ 0 1 s((AArCwhatrrct|tjjr|j }t j }t ||||}||fS)aSend a DNS message to the specified UDP socket. *sock*, a ``socket``. *what*, a ``bytes`` or ``dns.message.Message``, the message to send. *destination*, a destination tuple appropriate for the address family of the socket, specifying where to send the query. *expiration*, a ``float`` or ``None``, the absolute time at which a timeout exception should be raised. If ``None``, no timeout will occur. Returns an ``(int, float)`` tuple of bytes sent and the sent time. )rvr rMessagerr r/)rCr0rr sent_timens rsend_udpr5sH,$ ++,||~ I$k:6A y>rrrrraise_on_truncation ignore_errorsqueryc d} t|d|\} } t|j| ||s*tj} tj j | |||||}| r| | j|sz|r|| fS|| | fS#tj j$r.}| r&| $| j|j sYd}~ʂd}~wt$r| rYۂwxYw)aRead a DNS message from a UDP socket. *sock*, a ``socket``. *destination*, a destination tuple appropriate for the address family of the socket, specifying where the message is expected to arrive from. When receiving a response, this would be where the associated query was sent. *expiration*, a ``float`` or ``None``, the absolute time at which a timeout exception should be raised. If ``None``, no timeout will occur. *ignore_unexpected*, a ``bool``. If ``True``, ignore responses from unexpected sources. *one_rr_per_rrset*, a ``bool``. If ``True``, put each RR into its own RRset. *keyring*, a ``dict``, the keyring to use for TSIG. *request_mac*, a ``bytes`` or ``None``, the MAC of the request (for TSIG). *ignore_trailing*, a ``bool``. If ``True``, ignore trailing junk at end of the received message. *raise_on_truncation*, a ``bool``. If ``True``, raise an exception if the TC bit is set. Raises if the message is malformed, if network errors occur, of if there is a timeout. If *destination* is not ``None``, returns a ``(dns.message.Message, float)`` tuple of the received message and the received time. If *destination* is ``None``, returns a ``(dns.message.Message, float, tuple)`` tuple of the received message, the received time, and the address where the message arrived from. *ignore_errors*, a ``bool``. If various format errors or response mismatches occur, ignore them and keep listening for a valid response. The default is ``False``. *query*, a ``dns.message.Message`` or ``None``. If not ``None`` and *ignore_errors* is ``True``, check that the received message is a response to this query, and if not keep listening for a valid response. r)rrrrr6N) r*rr&r r rr Truncatedrr7)rCrrrrrrrr6r7r8rr received_timeres r receive_udpr>s| D (ujA|# KK{4E     %%'!1 /$7 &A6 U.u7H7H7K  }% %}l3 31{{$$ %))!))+6   s$%BC %#C CC C 5c |j} t||||d\} }}t|\}}| rtj| }n| Jt | t j|}|5}t|| ||t||||||j|j|| | | \}}||z |_ | s|j|st|cdddS#1swYnxYw J)aReturn the response obtained after sending a query via UDP. *q*, a ``dns.message.Message``, the query to send *where*, a ``str`` containing an IPv4 or IPv6 address, where to send the message. *timeout*, a ``float`` or ``None``, the number of seconds to wait before the query times out. If ``None``, the default, wait forever. *port*, an ``int``, the port send the message to. The default is 53. *source*, a ``str`` containing an IPv4 or IPv6 address, specifying the source address. The default is the wildcard address. *source_port*, an ``int``, the port from which to send the message. The default is 0. *ignore_unexpected*, a ``bool``. If ``True``, ignore responses from unexpected sources. *one_rr_per_rrset*, a ``bool``. If ``True``, put each RR into its own RRset. *ignore_trailing*, a ``bool``. If ``True``, ignore trailing junk at end of the received message. *raise_on_truncation*, a ``bool``. If ``True``, raise an exception if the TC bit is set. *sock*, a ``socket.socket``, or ``None``, the socket to use for the query. If ``None``, the default, a socket is created. Note that if a socket is provided, it must be a nonblocking datagram socket, and the *source* and *source_port* are ignored. *ignore_errors*, a ``bool``. If various format errors or response mismatches occur, ignore them and keep listening for a valid response. The default is ``False``. Returns a ``dns.message.Message``. TN)rrr*rrr2r3 SOCK_DGRAMr5r>rmacr rrm)rrrr;rBrrrrr6rCr7rrAr begin_timerrrrr<s rudprDsp 99;D 7 tV[$!Rf .g6Z 0:0F0Ft0L~~ V.. 7 qD+z2(     II EE      M+q!1 ),  s +ACCudp_socktcp_sockc  t|||||||||d| | } | dfS#tjj$rt ||||||||| } | dfcYSwxYw)a|Return the response to the query, trying UDP first and falling back to TCP if UDP results in a truncated response. *q*, a ``dns.message.Message``, the query to send *where*, a ``str`` containing an IPv4 or IPv6 address, where to send the message. *timeout*, a ``float`` or ``None``, the number of seconds to wait before the query times out. If ``None``, the default, wait forever. *port*, an ``int``, the port send the message to. The default is 53. *source*, a ``str`` containing an IPv4 or IPv6 address, specifying the source address. The default is the wildcard address. *source_port*, an ``int``, the port from which to send the message. The default is 0. *ignore_unexpected*, a ``bool``. If ``True``, ignore responses from unexpected sources. *one_rr_per_rrset*, a ``bool``. If ``True``, put each RR into its own RRset. *ignore_trailing*, a ``bool``. If ``True``, ignore trailing junk at end of the received message. *udp_sock*, a ``socket.socket``, or ``None``, the socket to use for the UDP query. If ``None``, the default, a socket is created. Note that if a socket is provided, it must be a nonblocking datagram socket, and the *source* and *source_port* are ignored for the UDP query. *tcp_sock*, a ``socket.socket``, or ``None``, the connected socket to use for the TCP query. If ``None``, the default, a socket is created. Note that if a socket is provided, it must be a nonblocking connected stream socket, and *where*, *source* and *source_port* are ignored for the TCP query. *ignore_errors*, a ``bool``. If various format errors or response mismatches occur while listening for UDP, ignore them and keep listening for a valid response. The default is ``False``. Returns a (``dns.message.Message``, tcp) tuple where tcp is ``True`` if and only if TCP was used. TF)rDr rr;tcp) rrrr;rBrrrrrErFr7rs rudp_with_fallbackrIsr              %  ;;            $  s4AAc d}|dkDr; |j|}|dk(r td|t|z}||z }|dkDr;|S#ttj f$rt ||Y/tj$rt||YOwxYw)zRead the specified number of bytes from sock. Keep trying until we either get the desired amount, or we hit EOF. A Timeout exception will be raised if the operation is not completed by the expiration time. rrEOF) recvEOFErrorrr(rwSSLWantReadErrorrSSLWantWriteErrorr)rCcountrrr4s r _net_readrQ7s A !) 1 % ACxuo% SVOE FA !) H  !5!56 1 tZ 0$$ 1 tZ 0 1s4A%B ,B  B cd}t|}||kr ||j||dz }||kryy#ttjf$rt ||Y/tj $rt||YOwxYw)zWrite the specified data to the socket. A Timeout exception will be raised if the operation is not completed by the expiration time. rN)rr-r(rwrOrrNr)rCr.rcurrentls r _net_writerULs~ G D A A+ 1 tyygh0 0G A+ !6!67 1 tZ 0## 1 tZ 0 1s3%A;A;:A;ct|tjjr|j d}nt |j dd|z}tj}t|||t ||fS)a{Send a DNS message to the specified TCP socket. *sock*, a ``socket``. *what*, a ``bytes`` or ``dns.message.Message``, the message to send. *expiration*, a ``float`` or ``None``, the absolute time at which a timeout exception should be raised. If ``None``, no timeout will occur. Returns an ``(int, float)`` tuple of bytes sent and the sent time. T)prepend_lengthrbig) rvr rr2rrto_bytesr rU)rCr0rtcpmsgr3s rsend_tcpr[\sk$$ ++,T2 T##Au-4 ItVZ( K ##rct|d|}tjd|\}t|||}tj} tj j |||||} | | fS)aRead a DNS message from a TCP socket. *sock*, a ``socket``. *expiration*, a ``float`` or ``None``, the absolute time at which a timeout exception should be raised. If ``None``, no timeout will occur. *one_rr_per_rrset*, a ``bool``. If ``True``, put each RR into its own RRset. *keyring*, a ``dict``, the keyring to use for TSIG. *request_mac*, a ``bytes`` or ``None``, the MAC of the request (for TSIG). *ignore_trailing*, a ``bool``. If ``True``, ignore trailing junk at end of the received message. Raises if the message is malformed, if network errors occur, of if there is a timeout. Returns a ``(dns.message.Message, float)`` tuple of the received message and the received time. r!Hr)rQstructunpackr r rr) rCrrrrrldatarTrr<rs r receive_tcprazssB dAz *E ==u %DQ T1j )DIIKM  )'  A } rcP|j|}|dk(ry|tjtjtjfvr:t |||j tjtj}|dk7rt|tj|yrU) connect_exerrno EINPROGRESS EWOULDBLOCKEALREADYr getsockoptr3 SOL_SOCKETSO_ERROROSErrorosstrerror)rr@rerrs rr5r5s ,,w C ax u  %"3"3U^^DD1j)ll6,,foo> axc2;;s+,,rc |j} t|\} } |rtj|} n2t ||||d\} }}| Jt | t j|} | 5}|s t|| t|| | t|| ||j|j|\}}|| z |_ |j|st|cdddS#1swYnxYw J)aReturn the response obtained after sending a query via TCP. *q*, a ``dns.message.Message``, the query to send *where*, a ``str`` containing an IPv4 or IPv6 address, where to send the message. *timeout*, a ``float`` or ``None``, the number of seconds to wait before the query times out. If ``None``, the default, wait forever. *port*, an ``int``, the port send the message to. The default is 53. *source*, a ``str`` containing an IPv4 or IPv6 address, specifying the source address. The default is the wildcard address. *source_port*, an ``int``, the port from which to send the message. The default is 0. *one_rr_per_rrset*, a ``bool``. If ``True``, put each RR into its own RRset. *ignore_trailing*, a ``bool``. If ``True``, ignore trailing junk at end of the received message. *sock*, a ``socket.socket``, or ``None``, the connected socket to use for the query. If ``None``, the default, a socket is created. Note that if a socket is provided, it must be a nonblocking connected stream socket, and *where*, *port*, *source* and *source_port* are ignored. Returns a ``dns.message.Message``. TN)rr*rrrr2r3r4r5r[rarrBr rrm)rrrr;rBrrrrCrrCrrrArrrr<s rrHrHsV 99;D-g6Z 0:0F0Ft0L$; 4d% ![&~~ V// 8 q Q Z 0D*%( z+QYY M+}}Q      s +A&CC$c |jy#tj$rt||Yn$tj$rt ||YnwxYwXr) do_handshakerwrNrrOrrs r_tls_handshakerrsS  . NN  ## . q* -$$ . q* - . sAAAcheck_hostnamealpnsctjj|\}}tj||}tj j |_||_|durtj|_ ||j||S)aQMake an SSL context If *verify* is ``True``, the default, then certificate verification will occur using the standard CA roots. If *verify* is ``False``, then certificate verification will be disabled. If *verify* is a string which is a valid pathname, then if the pathname is a regular file, the CA roots will be taken from the file, otherwise if the pathname is a directory roots will be taken from the directory. If *check_hostname* is ``True``, the default, then the hostname of the server must be specified when connecting and the server's certificate must authorize the hostname. If ``False``, then hostname checking is disabled. *aplns* is ``None`` or a list of TLS ALPN (Application Layer Protocol Negotiation) strings to use in negotiation. For DNS-over-TLS, the right value is `["dot"]`. )cafilecapathF) r _tls_util#convert_verify_to_cafile_and_capathrwcreate_default_context TLSVersionTLSv1_2minimum_versionrs CERT_NONErset_alpn_protocols)rrsrtrvrwrs rmake_ssl_contextrsw(]]FFvNNFF,,F6JK#&.."8"8K!/K "%--  &&u- rc"t||dudgS)Ndot)r)rrs r_make_dot_ssl_contextr's FO4$?% IIrc |rt||||||||| S|j} t|\} }t||||d\}}}|J| t | | dudg} t |t j| | |5}t|||t||t|| |t||||j|j|\}}|| z |_|j|st |cdddS#1swYnxYw J)akReturn the response obtained after sending a query via TLS. *q*, a ``dns.message.Message``, the query to send *where*, a ``str`` containing an IPv4 or IPv6 address, where to send the message. *timeout*, a ``float`` or ``None``, the number of seconds to wait before the query times out. If ``None``, the default, wait forever. *port*, an ``int``, the port send the message to. The default is 853. *source*, a ``str`` containing an IPv4 or IPv6 address, specifying the source address. The default is the wildcard address. *source_port*, an ``int``, the port from which to send the message. The default is 0. *one_rr_per_rrset*, a ``bool``. If ``True``, put each RR into its own RRset. *ignore_trailing*, a ``bool``. If ``True``, ignore trailing junk at end of the received message. *sock*, an ``ssl.SSLSocket``, or ``None``, the socket to use for the query. If ``None``, the default, a socket is created. Note that if a socket is provided, it must be a nonblocking connected SSL stream socket, and *where*, *port*, *source*, *source_port*, and *ssl_context* are ignored. *ssl_context*, an ``ssl.SSLContext``, the context to use when establishing a TLS connection. If ``None``, the default, creates one with the default configuration. *server_hostname*, a ``str`` containing the server's hostname. The default is ``None``, which means that no hostname is known, and if an SSL context is created, hostname checking will be disabled. *verify*, a ``bool`` or ``str``. If a ``True``, then TLS certificate verification of the server is done using the default CA bundle; if ``False``, then no verification is done; if a `str` then it specifies the path to a certificate file or directory which will be used for verification. Returns a ``dns.message.Message``. TNr)rrrB)rHrr*rrrr3r4r5rrr[rarrBr rrm)rrrr;rBrrrrCrrrrrCrrArrrr<s rtlsr-s?z            99;D-g6Z 7 tV[$!Rf >>&vd/JUGT  '   K,q*%D*%( z+QYY M+}}Q !$  s ;A0C55C>rc  tjjs td| | | } d|_|j } |rt jd} |}n#tjj| | } | }| 5|sj||||}t|\}}j|5}|j| d|jt|} dddtj}dddtj j#| |j$|j&||}t)z d|_|j+|st,|S#1swYxYw#1swYzxYw)aReturn the response obtained after sending a query via DNS-over-QUIC. *q*, a ``dns.message.Message``, the query to send. *where*, a ``str``, the nameserver IP address. *timeout*, a ``float`` or ``None``, the number of seconds to wait before the query times out. If ``None``, the default, wait forever. *port*, a ``int``, the port to send the query to. The default is 853. *source*, a ``str`` containing an IPv4 or IPv6 address, specifying the source address. The default is the wildcard address. *source_port*, an ``int``, the port from which to send the message. The default is 0. *one_rr_per_rrset*, a ``bool``. If ``True``, put each RR into its own RRset. *ignore_trailing*, a ``bool``. If ``True``, ignore trailing junk at end of the received message. *connection*, a ``dns.quic.SyncQuicConnection``. If provided, the connection to use to send the query. *verify*, a ``bool`` or ``str``. If a ``True``, then TLS certificate verification of the server is done using the default CA bundle; if ``False``, then no verification is done; if a `str` then it specifies the path to a certificate file or directory which will be used for verification. *hostname*, a ``str`` containing the server's hostname or ``None``. The default is ``None``, which means that no hostname is known, and if an SSL context is created, hostname checking will be disabled. This value is ignored if *url* is not ``None``. *server_hostname*, a ``str`` or ``None``. This item is for backwards compatibility only, and has the same meaning as *hostname*. Returns a ``dns.message.Message``. zDNS-over-QUIC is not available.Nr)rrTrr )r rrrrrrrrrrr*rr-rrr rrrrrrrm)rrrr;rBrrrrrrrrr r"r!r#rr$r%rs rrrstn 88  566"x'7" AD 99;D5?5K5KD5Q#((**H+   (00tV[N-W5  ' ' 0 :F KKd #>>*Z"89D :    MM)'  A% %AF ==  H : :  s$6E:8-E.%E:.E7 3E::FceZdZdZdZdZdZy)UDPModeaHow should UDP be used in an IXFR from :py:func:`inbound_xfr()`? NEVER means "never use UDP; always use TCP" TRY_FIRST means "try to use UDP but fall back to TCP if needed" ONLY means "raise ``dns.xfr.UseTCP`` if trying UDP does not succeed" rrrN)rLrMrNrkNEVER TRY_FIRSTONLYr_rrrrs EI Drr txn_managerrserialc #K|jdj}|tjjk(}|j }|j } t|tjxr|jtjk(} | rt|| d|n/tjdt| | z} t|| |tj j#|||| 5} d} d}d}| st%|\}}||||kDr|}| rt'|d|\}}n2t)|d|}tj*d|\}t)|||}tj,j/||j0|j2d||| |}| j5|} ||j6}| s|j0r-|+|j8stj:j=d dddy#1swYyxYww) z'Given a socket, does the zone transfer.rNr]Fr:rT)rrxfrorigintsig_ctxmultirz missing TSIG)questionrdtyper rdatatypeIXFRfrom_wire_originrrvr3rrAr/r^packrrUrInboundr*r*rQr_rrrrBprocess_messagerhad_tsigr FormError)rrr8rrrris_ixfrrris_udprZinbounddonerrr> mexpirationrwirer`rTs r _inbound_xfrrs^^A  % %F ***G  ) ) +F ==?D 6== ) Iaff8I8I.IF !T4,T3t9-41fj) fff =:(,-g6 Q "&;+C( &q%= !!Q 4}}T51!!Q 4 %% !II!!z!(& A**1-DGzzH12 ==Q]1::--)).9 9=:::s%C2H 4CG=;9G=4 H =HH zonerrdclasskeyname relativizer)use_udp keyalgorithmc #>KGddtjj}t|trtj j |}tjjj|}tjj|||}|tjjk(r|j|j|tjj tjj"d}tj$j ddd| d}|j'|d ||j)||| t+||| | d\}}} |Jt-| \}}|||}| r(|tjjk7r t/d | rt0j2nt0j4}t7||| 5}t9|||t;|||| ||Ed {d d d y 7 #1swYy xYww) aReturn a generator for the responses to a zone transfer. *where*, a ``str`` containing an IPv4 or IPv6 address, where to send the message. *zone*, a ``dns.name.Name`` or ``str``, the name of the zone to transfer. *rdtype*, an ``int`` or ``str``, the type of zone transfer. The default is ``dns.rdatatype.AXFR``. ``dns.rdatatype.IXFR`` can be used to do an incremental transfer instead. *rdclass*, an ``int`` or ``str``, the class of the zone transfer. The default is ``dns.rdataclass.IN``. *timeout*, a ``float``, the number of seconds to wait for each response message. If None, the default, wait forever. *port*, an ``int``, the port send the message to. The default is 53. *keyring*, a ``dict``, the keyring to use for TSIG. *keyname*, a ``dns.name.Name`` or ``str``, the name of the TSIG key to use. *relativize*, a ``bool``. If ``True``, all names in the zone will be relativized to the zone origin. It is essential that the relativize setting matches the one specified to ``dns.zone.from_xfr()`` if using this generator to make a zone. *lifetime*, a ``float``, the total number of seconds to spend doing the transfer. If ``None``, the default, then there is no limit on the time the transfer may take. *source*, a ``str`` containing an IPv4 or IPv6 address, specifying the source address. The default is the wildcard address. *source_port*, an ``int``, the port from which to send the message. The default is 0. *serial*, an ``int``, the SOA serial number to use as the base for an IXFR diff sequence (only meaningful if *rdtype* is ``dns.rdatatype.IXFR``). *use_udp*, a ``bool``. If ``True``, use UDP (only meaningful for IXFR). *keyalgorithm*, a ``dns.name.Name`` or ``str``, the TSIG algorithm to use. Raises on errors, and so does the generator. Returns a generator of ``dns.message.Message`` objects. ceZdZdZdZdej jfdZdZ d de dejjfdZ y) $xfr..DummyTransactionManagerc^|||r!tjjf|_y|f|_yr)r remptyinfo)r"rrs rrz-xfr..DummyTransactionManager.__init__s#zSXX^^VDIvVDIrc|jSr)rr"s rorigin_informationz7xfr..DummyTransactionManager.origin_informations 99 rrdctrrGrs r get_classz.xfr..DummyTransactionManager.get_classrarctrrGrs rreaderz+xfr..DummyTransactionManager.readerrar replacementchGdd}ttjj|S)NceZdZdZdZy)Exfr..DummyTransactionManager.writer..DummyTransactioncyrr_)r"rZkws rnopzIxfr..DummyTransactionManager.writer..DummyTransaction.nopsrc|jSr)r)r"r>s r __getattr__zQxfr..DummyTransactionManager.writer..DummyTransaction.__getattr__s 88OrN)rLrMrNrrr_rrDummyTransactionrs $rr)rr transaction Transaction)r"rrs rwriterz+xfr..DummyTransactionManager.writers) $ $335E5GH HrN)F)rLrMrNrrr rdataclass RdataClassrrboolrrrr_rrDummyTransactionManagerrsH W  &s~~88 & & Id Is7R7R IrrT)createINSOAz. . z 0 0 0 0rN) algorithmzcannot do a UDP AXFR)r rTransactionManagerrvrr from_textr RdataTypemaker make_queryr find_rrset authorityrrrrdataadduse_tsigrr*rr3rAr4r2r5r)rrrrrr;rrrr)rBrrrrrrrrsetsoarArr>rtm sock_typers rrr;sJI#//"D"DI.$xx!!$' ]] $ $ ) )& 1F tVW5A ### KKs~~00#--2C2CD ii!!$fXX/FG #q 7G| < 7 tV[$!Rf >>$X.OQ z 2B6S]]////00%,!!&2D2DI RF +GqK,Aq&':FFFGGFGGs0GH !HHH HHHHudp_modec 6|#tjj|\}} ntjj|} t ||||d\} } }| Jt |\} } |j djtjjk(r\|tjk7rIt| tj|5}t|| |  t!|||| || D]}  dddyt| tj&|5}t|| | t!|||| || D]}  dddy#tjj"$r|tj$k(rYnwxYw ddd#1swYxYw#1swYyxYw)aConduct an inbound transfer and apply it via a transaction from the txn_manager. *where*, a ``str`` containing an IPv4 or IPv6 address, where to send the message. *txn_manager*, a ``dns.transaction.TransactionManager``, the txn_manager for this transfer (typically a ``dns.zone.Zone``). *query*, the query to send. If not supplied, a default query is constructed using information from the *txn_manager*. *port*, an ``int``, the port send the message to. The default is 53. *timeout*, a ``float``, the number of seconds to wait for each response message. If None, the default, wait forever. *lifetime*, a ``float``, the total number of seconds to spend doing the transfer. If ``None``, the default, then there is no limit on the time the transfer may take. *source*, a ``str`` containing an IPv4 or IPv6 address, specifying the source address. The default is the wildcard address. *source_port*, an ``int``, the port from which to send the message. The default is 0. *udp_mode*, a ``dns.query.UDPMode``, determines how UDP is used for IXFRs. The default is ``dns.query.UDPMode.NEVER``, i.e. only use TCP. Other possibilities are ``dns.query.UDPMode.TRY_FIRST``, which means "try UDP but fallback to TCP if needed", and ``dns.query.UDPMode.ONLY``, which means "try UDP and raise ``dns.xfr.UseTCP`` if it does not succeed. Raises on errors. NTr)r rrextract_serial_from_queryrr*rrrrrrr2r3rAr5rUseTCPrr4)rrr8r;rr)rBrrrrArr>rrs r inbound_xfrrs^ }'',,[92259 7 tV[$!Rf >>$X.OQ  ~~a3==#5#55(gmm:S V.. 7 1 Q Z 0 %E67JA   R++V 4K,k1eVWjQ A   77>> w||+, +   s6 FE#F1E63F5E66FF F)TrrK) NrNrFFTTN) NNFFNrFFFN) Nr?NrFFFFNF) Nr?NrFFFNNF)NFNrF)Nr?NrFFN)TTN) NUNrFFNNNT) NrNrFFNTNN)rkrrenumrdrlrrzr3r^r urllib.parsertypingrrrrrr dns._featuresr dns._tls_util dns.exceptiondns.inet dns.messagedns.namedns.quic dns.rdatadns.rdataclass dns.rdatatypedns.transactiondns.tsigdns.xfrrw ImportError dns._no_ssl_no_sslrr _featureshave _have_httpxhttpcore._backends.syncr8rNetworkBackend_CoreNetworkBackend _backendssync SyncStreamr6r HTTPTransportrRr AddressFamilyr SocketKindrfrg__annotations__r DNSExceptionrirrmrorrr TransferErrorr*rrrrrrr2 SSLContextrrrrxrrrIntEnumrr\rrr2floatrrrHeadersbytesr rrrr*r/r5tsigKeyr>rDrIrQrUr[rar5rHrrrrrrrrrrrAXFRrrdefault_algorithmrrrrr_rrr s$   == 2 mm  ' ""11((--88O4&-4&l,,, & & *s"*   * * ]] * C!2!2C8&--G Hs}}11HG#--))GCMM & & CMM & & %% $(800 ) "=A)%^s"    $J ]] J37 's"'   ''XX]]S(4/ ' $J '  ]] 'V - ./    $,,  &!"!$(*.26"" + 3 3!L  {{L L T\L   L $J L  L L L 4ZL  L  L TzL  3J 'L ./L  L !L " [[#L ^#((**%EO388++O3OeOO*!"!*.59:  {{: :  : T\ :  : $J : : : :  3J ':  : ++d2:  [[: z 1 1& $   ++   %   3: >###"8< #! %(,g4 g4tg4 g4 g4  g4 #((--- . 5 g4g4g4g4g4 ;;   %g4 g4Z!#"! %Y {{Y YT\Y  Y $J Y  YYYYY *YY [[Y~!#"!U  {{U U T\U   U $J U  U U U U DjU DjU U  3;;   $%U p * 1& $$ $ ++   %$ $ 3: $@ $"8< #! , , ,,#((--- . 5 ,  ,  , 3;;   %&,^-!"!C {{C CT\C  C $J C  CCC *C [[CL." 3J 9t  ^^ DJ4ZJ)-J^^J!"!!%)-"&i {{i iT\i  i $J i  iii --$ i$&i4Zi 3Ji [[i^!"!59"&^  {{^ ^ T\^   ^ $J ^  ^ ^ ^ ++d2^  3J^ Dj^ 4Z^  [[^ B  dll  1:331: }}s}}$1: ;;  1: $J 1: T\ 1:  1: 1:n-0MM,>,>/2~~/@/@ 8<*.!(+(B(BsG sG ((--# sG MM # #c )sG^^ & & , sG T\ sG  sG#((--- . 5sGXX]]S 4 'sGsGdlsG $JsGsG sGsG((--#%sG  !sGr)- ! I I33I ;;   %I  I T\ I dl I $JIII IA4s5e44 ff