a
�M�e0� � @ s^ d Z ddlZddlZddlZddlZddlZddlZddlZddlZddl Z ddl
Z
ddl m Z m
Z
mZmZmZ ddlZddlZddlZddlZddlZddlZddlZddlZddlZddlZddl Zddl Zddl Zdd� Z dd� Z ej!�"d�Z#e#�r>ddl$Z%ddl&Z&e%j'Z(e%j)j*j+Z,G d d
� d
e(�Z-G d d � d e&j.�Z/nG d
d � d �Z/e#Z0z ddl1Z1W n" e2�y~ G dd� d�Z1Y n0 ejZ3G dd� dej4j5�Z6G dd� dej4j7�Z8G dd� dej4j5�Z9G dd� dej4j5�Z:ej;j<Z<dd� Z=dd� Z>d d � Z?e@ed ��r
ejAaBnejCaBd d � ZDd!d"� ZEd#d$� ZFd%d&� ZGdhd(d)�ZHdid*d+�ZIdd,ddd-d-dd.d'dd'dejJf
ejKjLeMeeN eOeeM eOePePee eMePeeM eePeMf ed/ eeO ejKjLd0�d1d2�ZQd3d4� ZRd5d6� ZSdje eejKjLeTf e eeN eeOeNf d7�d8d9�ZUdke ee eeN ePePee
ejVjWejXjYf eeT ePePePeejKjL e d;� d<d=�ZZdlejKjLeMeeN eOeeM eOePePePePee ePejKjLd?�
d@dA�Z[dmejKjLeMeeN eOeeM eOePePePee ee ePeejKjLePf dB�
dCdD�Z\dEdF� Z]dGdH� Z^dne eejKjLeTf eeN eeOeNf dI�dJdK�Z_doe eeN ePee
ejVjWejXjYf eeT ePeejKjLeNf dL�dMdN�Z`dOdP� ZadpejKjLeMeeN eOeeM eOePePee ejKjLdQ�
dRdS�ZbdTdU� ZceeM eePeMf e1jddV�dWdX�ZedqejKjLeMeeN eOeeM eOePePee1jf ee1jd eeM eePeMf ejKjLdZ�
d[d\�ZgdrejKjLeMeeN eOeeM eOePePeejhji eePeMf eeM ejKjLd]� d^d_�Zhejjjkejljmdd>ddd'ddddd-ejXjnf
eMeejVjWeMf eejjjoeMf eejljpeMf eeN eOee
ejVjWejXjYf eeejVjWeMf ePeeN eeM eOeOePeejVjWeMf e d`�dadb�Z;G dcdd� ddejq�Zrdd>dddderjsfeMejtjueejKjL eOeeN eeN eeM eOerdde�
dfdg�ZvdS )szTalk to a DNS server.� N)�Any�Dict�Optional�Tuple�Unionc C s, | d u r d S | t � � }|dkr(tjj�|S )N� )�time�dns� exception�Timeout)�
expiration�timeout� r �-/usr/lib/python3.9/site-packages/dns/query.py�
_remaining/ s r c C s |d u r d S t t�� | |�S �N)�minr )r
r r r r � _expiration_for_this_attempt8 s r Zdohc s0 e Zd Z� fdd�Zddd�Zd dd�Z� ZS )
�_NetworkBackendc s& t � �� || _|| _|| _|| _d S r )�super�__init__� _local_port� _resolver�_bootstrap_address�_family)�self�resolver�
local_port�bootstrap_address�family�� __class__r r r G s
z_NetworkBackend.__init__Nc C s g }t |�\}}tj�|�r(|�|� nP| jd ur@|�| j� n8t|�}| j} |r^tj�|�} | j j
|| |d�}
|
� � }|D ]�} tj�| �} |d us�| j dkr�tj�
|| j f| �}
nd }
t| tj|
�}td|�}z(t|tj�
| |f| �|� t|�W S t�y Y q|0 q|tj�d S )N)r �lifetimer g @)�_compute_timesr �inet�
is_address�appendr r r �af_for_addressr � resolve_name� addressesr �low_level_address_tuple� _make_socket�socket� SOCK_STREAMr �_connect�_CoreSyncStream� Exception�httpcoreZ ConnectError)r �host�portr
�
local_address�socket_optionsr) �_r r Zanswers�address�af�source�sockZattempt_expirationr r r � connect_tcpN sB
�
�
�z_NetworkBackend.connect_tcpc C s t �d S r ��NotImplementedError)r �pathr
r5 r r r �connect_unix_socketu s z#_NetworkBackend.connect_unix_socket)N)N)�__name__�
__module__� __qualname__r r; r? �
__classcell__r r r r r F s
�
( �r c s* e Zd Zdddejd�� fdd�
Z� ZS )�_HTTPTransportr N)r r r r c sB |d u rdd l }|j�� }t� j|i |�� t||||�| j_d S �Nr )Z dns.resolverr ZResolverr r r Z_poolZ_network_backend)r r r r r �args�kwargsr r r r r { s
�z_HTTPTransport.__init__)r@ rA rB r, � AF_UNSPECr rC r r r r rD z s
�rD c @ s e Zd Zdd� ZdS )rD c C s t �d S r r< )r r2 r3 r
r4 r r r r; � s z_HTTPTransport.connect_tcpN)r@ rA rB r; r r r r rD � s c @ sX e Zd ZdZG dd� de�ZG dd� de�ZG dd� d�ZG dd � d �Ze d
d � �Z
d S )
�sslr c @ s e Zd ZdS )zssl.WantReadExceptionN�r@ rA rB r r r r �WantReadException� s rK c @ s e Zd ZdS )zssl.WantWriteExceptionNrJ r r r r �WantWriteException� s rL c @ s e Zd ZdS )zssl.SSLContextNrJ r r r r �
SSLContext� s rM c @ s e Zd ZdS )z
ssl.SSLSocketNrJ r r r r � SSLSocket� s rN c O s t d��d S )Nzno ssl support)r0 )�clsrF rG r r r �create_default_context� s zssl.create_default_contextN) r@ rA rB � CERT_NONEr0 rK rL rM rN � classmethodrP r r r r rI � s rI c @ s e Zd ZdZdS )�UnexpectedSourcez=A DNS query response came from an unexpected address or port.N�r@ rA rB �__doc__r r r r rS � s rS c @ s e Zd ZdZdS )� BadResponsez<A DNS query response does not respond to the question asked.NrT r r r r rV � s rV c @ s e Zd ZdZdS )�NoDOHzMDNS over HTTPS (DOH) was requested but the httpx module is not
available.NrT r r r r rW � s rW c @ s e Zd ZdZdS )�NoDOQzNDNS over QUIC (DOQ) was requested but the aioquic module is not
available.NrT r r r r rX � s rX c C s( t � � }| d u r|d fS ||| fS d S r )r )r
Znowr r r r# � s r# c C s� |r t | tj�r | �� dkr dS t� }d}|r8|tjO }|rF|tjO }|rV|�| |� |d u rdd }n |t � � }|dkr�t
j j �|�
|�s�t
j j �d S )Nr Tr )�
isinstancerI rN �pending�_selector_class� selectorsZ
EVENT_READZ EVENT_WRITE�registerr r r
r Zselect)�fd�readable�writabler6 r ZselZeventsr
r r r � _wait_for� s"
ra c C s | a d S r )r[ )Zselector_classr r r �_set_selector_class� s rb � PollSelectorc C s t | ddd|� d S )NTF�ra ��sr r r r �_wait_for_readable s rg c C s t | ddd|� d S )NFTrd re r r r �_wait_for_writable s rh c C sb z(t j�| |d �}t j�| |d �}W n t jjy@ Y dS 0 ||ko`|dd � |dd � kS )Nr F� )r r$ Z inet_ptonr
� SyntaxError)r8 Za1Za2Zn1Zn2r r r �_addresses_equal
s rk c C s` |sdS t | ||�s<tj�|d �r@|dd � |dd � kr@dS |rHdS td|� d|� ���d S )NTr ri Fzgot a response from z instead of )rk r r$ Z is_multicastrS )r8 � from_address� destination�ignore_unexpectedr r r �_matches_destination s ���ro Tc C s� d }d }zt j�| �}| }W n ty4 |r0� Y n0 |r`t j�|�}|r\||kr`td��n|}|r�|s�zt j�|�}W n ty� td��Y n0 |r�t j�||f|�}|r�t j�||f|�}|||fS )Nz5different address families for source and destinationz3source_port specified but address family is unknown)r r$ r' r0 �
ValueErrorZ
any_for_afr* )�wherer3 r9 � source_portZwhere_must_be_addressr8 rm Zsafr r r �_destination_and_source& s4 � rs c C sh t | |�}z<|�d� |d ur(|�|� |r>|j|d|d�W S |W S W n tyb |�� � Y n0 d S )NF)Zdo_handshake_on_connect�server_hostname)�socket_factoryZ setblockingZbindZ wrap_socketr0 �close)r8 �typer9 � ssl_contextrt rf r r r r+ R s
�
r+ i� Fz
/dns-queryzdns.resolver.Resolver)�qrq r
r3 r9 rr �one_rr_per_rrset�ignore_trailing�sessionr> �postr �verifyr r �returnc
C s� t st�|r t|tj�s td��| �� }t||||d�\}}}d}ddi}|dur�tj �
|�r�|t j krxd�
||| �}q�|t jkr�d�
||| �}n|}|du r�d}d}n|d }|d }t|d
d
| || |
|d �}|r�t�|�}ntjd
d
| |d �}|�p}|
�r*|�dtt|��d
�� |j||||d�}n.t�|��d�}|�� }|j|||d|id�}W d � n1 �sn0 Y |jdk �s�|jdk�r�td�
||j|j ���tj j |j | j | j ||d�}|j!�"� |_#| �$|��s�t%�|S )a� Return the response obtained after sending a query via DNS-over-HTTPS.
*q*, a ``dns.message.Message``, the query to send.
*where*, a ``str``, the nameserver IP address or the full URL. If an IP address is
given, the URL will be constructed using the following schema:
https://<IP-address>:<port>/<path>.
*timeout*, a ``float`` or ``None``, the number of seconds to wait before the query
times out. If ``None``, the default, wait forever.
*port*, a ``int``, the port to send the query to. The default is 443.
*source*, a ``str`` containing an IPv4 or IPv6 address, specifying the source
address. The default is the wildcard address.
*source_port*, an ``int``, the port from which to send the message. The default is
0.
*one_rr_per_rrset*, a ``bool``. If ``True``, put each RR into its own RRset.
*ignore_trailing*, a ``bool``. If ``True``, ignore trailing junk at end of the
received message.
*session*, an ``httpx.Client``. If provided, the client session to use to send the
queries.
*path*, a ``str``. If *where* is an IP address, then *path* will be used to
construct the URL to send the DNS query to.
*post*, a ``bool``. If ``True``, the default, POST method will be used.
*bootstrap_address*, a ``str``, the IP address to use to bypass resolution.
*verify*, a ``bool`` or ``str``. If a ``True``, then TLS certificate verification
of the server is done using the default CA bundle; if ``False``, then no
verification is done; if a `str` then it specifies the path to a certificate file or
directory which will be used for verification.
*resolver*, a ``dns.resolver.Resolver`` or ``None``, the resolver to use for
resolution of hostnames in URLs. If not specified, a new resolver with a default
configuration will be used; note this is *not* the default resolver as that resolver
might have been configured to use DoH causing a chicken-and-egg problem. This
parameter only has an effect if the HTTP library is httpx.
*family*, an ``int``, the address family. If socket.AF_UNSPEC (the default), both A
and AAAA records will be retrieved.
Returns a ``dns.message.Message``.
z)session parameter must be an httpx.ClientFNZacceptzapplication/dns-messagezhttps://{}:{}{}zhttps://[{}]:{}{}r ri T)r4 �http1�http2r~ r r r r )r� r� r~ � transport)z content-typezcontent-length)�headers�contentr
� =r )r� r
�params�� i+ z2{} responded with status code {}
Response body: {}��keyring� request_macrz r{ )&�have_dohrW rY �httpxZClientrp �to_wirers r r$ r% r, ZAF_INET�formatZAF_INET6rD �
contextlib� nullcontext�update�str�lenr} �base64Zurlsafe_b64encode�rstrip�decode�getZ status_coder� �message� from_wirer� r� �elapsedZ
total_secondsr � is_responserV ) ry rq r
r3 r9 rr rz r{ r| r> r} r r~ r r �wirer8 r6 Z
the_sourcer� r� �urlr4 r �cm�responseZtwire�rr r r �httpsf s� D
�
�
�� �&
��� r� c C s0 z | � |�W S ty( t| |� Y q 0 q dS )z�Reads a datagram from the socket.
A Timeout exception will be raised if the operation is not completed
by the expiration time.
N)Zrecvfrom�BlockingIOErrorrg )r: Zmax_sizer r r r � _udp_recv� s r� c C sF z"|r| � ||�W S | �|�W S W q ty> t| |� Y q 0 q dS )z�Sends the specified datagram to destination over the socket.
A Timeout exception will be raised if the operation is not completed
by the expiration time.
N)Zsendto�sendr� rh )r: �datarm r r r r � _udp_send s r� )r: �whatrm r r c C s4 t |tjj�r|�� }t�� }t| |||�}||fS )a� Send a DNS message to the specified UDP socket.
*sock*, a ``socket``.
*what*, a ``bytes`` or ``dns.message.Message``, the message to send.
*destination*, a destination tuple appropriate for the address family
of the socket, specifying where to send the query.
*expiration*, a ``float`` or ``None``, the absolute time at which
a timeout exception should be raised. If ``None``, no timeout will
occur.
Returns an ``(int, float)`` tuple of bytes sent and the sent time.
)rY r r� �Messager� r r� )r: r� rm r � sent_time�nr r r �send_udp s
r� � ) r: rm r rn rz r� r� r{ �raise_on_truncation�
ignore_errors�queryr c
C s� d} t | d|�\} } t| j| ||�s&qt�� }
z tjj| |||||d�}W nn tjjy� } z6| r�|
dur�|
�|�� �s�W Y d}~qn� W Y d}~n&d}~0 t y� | r�Y qn� Y n0 | r�|
dur�|
�|�s�q|r�||
fS ||
| fS qdS )a Read a DNS message from a UDP socket.
*sock*, a ``socket``.
*destination*, a destination tuple appropriate for the address family
of the socket, specifying where the message is expected to arrive from.
When receiving a response, this would be where the associated query was
sent.
*expiration*, a ``float`` or ``None``, the absolute time at which
a timeout exception should be raised. If ``None``, no timeout will
occur.
*ignore_unexpected*, a ``bool``. If ``True``, ignore responses from
unexpected sources.
*one_rr_per_rrset*, a ``bool``. If ``True``, put each RR into its own
RRset.
*keyring*, a ``dict``, the keyring to use for TSIG.
*request_mac*, a ``bytes`` or ``None``, the MAC of the request (for TSIG).
*ignore_trailing*, a ``bool``. If ``True``, ignore trailing
junk at end of the received message.
*raise_on_truncation*, a ``bool``. If ``True``, raise an exception if
the TC bit is set.
Raises if the message is malformed, if network errors occur, of if
there is a timeout.
If *destination* is not ``None``, returns a ``(dns.message.Message, float)``
tuple of the received message and the received time.
If *destination* is ``None``, returns a
``(dns.message.Message, float, tuple)``
tuple of the received message, the received time, and the address where
the message arrived from.
*ignore_errors*, a ``bool``. If various format errors or response
mismatches occur, ignore them and keep listening for a valid response.
The default is ``False``.
*query*, a ``dns.message.Message`` or ``None``. If not ``None`` and
*ignore_errors* is ``True``, check that the received message is a response
to this query, and if not keep listening for a valid response.
r� � )r� r� rz r{ r� N)
r� ro r r r r� r� � Truncatedr� r0 )r: rm r rn rz r� r� r{ r� r� r� r� rl �
received_timer� �er r r � receive_udp2 sD >
��
�� � r� �5 )
ry rq r
r3 r9 rr rn rz r{ r� r: r� r c
C s� | � � } t||||�\}
}}t|�\}}|
r8t�|
�}nt|
tj|�}|�b}t|| ||� t |||||| j
| j || | | � \}}|| |_ | s�| �
|�s�t�|W d � S 1 s�0 Y dS )a� Return the response obtained after sending a query via UDP.
*q*, a ``dns.message.Message``, the query to send
*where*, a ``str`` containing an IPv4 or IPv6 address, where
to send the message.
*timeout*, a ``float`` or ``None``, the number of seconds to wait before the
query times out. If ``None``, the default, wait forever.
*port*, an ``int``, the port send the message to. The default is 53.
*source*, a ``str`` containing an IPv4 or IPv6 address, specifying
the source address. The default is the wildcard address.
*source_port*, an ``int``, the port from which to send the message.
The default is 0.
*ignore_unexpected*, a ``bool``. If ``True``, ignore responses from
unexpected sources.
*one_rr_per_rrset*, a ``bool``. If ``True``, put each RR into its own
RRset.
*ignore_trailing*, a ``bool``. If ``True``, ignore trailing
junk at end of the received message.
*raise_on_truncation*, a ``bool``. If ``True``, raise an exception if
the TC bit is set.
*sock*, a ``socket.socket``, or ``None``, the socket to use for the
query. If ``None``, the default, a socket is created. Note that
if a socket is provided, it must be a nonblocking datagram socket,
and the *source* and *source_port* are ignored.
*ignore_errors*, a ``bool``. If various format errors or response
mismatches occur, ignore them and keep listening for a valid response.
The default is ``False``.
Returns a ``dns.message.Message``.
N)r� rs r# r� r� r+ r, �
SOCK_DGRAMr� r� r� �macr r� rV )ry rq r
r3 r9 rr rn rz r{ r� r: r� r� r8 rm �
begin_timer r� rf r� r� r r r �udp� s8 8�
�
"r� )
ry rq r
r3 r9 rr rn rz r{ �udp_sock�tcp_sockr� r c
C sd z(t | ||||||||d| | � } | dfW S tjjy^ t| ||||||||
� } | df Y S 0 dS )a| Return the response to the query, trying UDP first and falling back
to TCP if UDP results in a truncated response.
*q*, a ``dns.message.Message``, the query to send
*where*, a ``str`` containing an IPv4 or IPv6 address, where to send the message.
*timeout*, a ``float`` or ``None``, the number of seconds to wait before the query
times out. If ``None``, the default, wait forever.
*port*, an ``int``, the port send the message to. The default is 53.
*source*, a ``str`` containing an IPv4 or IPv6 address, specifying the source
address. The default is the wildcard address.
*source_port*, an ``int``, the port from which to send the message. The default is
0.
*ignore_unexpected*, a ``bool``. If ``True``, ignore responses from unexpected
sources.
*one_rr_per_rrset*, a ``bool``. If ``True``, put each RR into its own RRset.
*ignore_trailing*, a ``bool``. If ``True``, ignore trailing junk at end of the
received message.
*udp_sock*, a ``socket.socket``, or ``None``, the socket to use for the UDP query.
If ``None``, the default, a socket is created. Note that if a socket is provided,
it must be a nonblocking datagram socket, and the *source* and *source_port* are
ignored for the UDP query.
*tcp_sock*, a ``socket.socket``, or ``None``, the connected socket to use for the
TCP query. If ``None``, the default, a socket is created. Note that if a socket is
provided, it must be a nonblocking connected stream socket, and *where*, *source*
and *source_port* are ignored for the TCP query.
*ignore_errors*, a ``bool``. If various format errors or response mismatches occur
while listening for UDP, ignore them and keep listening for a valid response. The
default is ``False``.
Returns a (``dns.message.Message``, tcp) tuple where tcp is ``True`` if and only if
TCP was used.
TFN)r� r r� r� �tcp)
ry rq r
r3 r9 rr rn rz r{ r� r� r� r� r r r �udp_with_fallback� s: 9�
� r� c C s� d}|dkr|z.| � |�}|dkr$t�|t|�8 }||7 }W q ttjfy\ t| |� Y q tjyx t| |� Y q0 q|S )z�Read the specified number of bytes from sock. Keep trying until we
either get the desired amount, or we hit EOF.
A Timeout exception will be raised if the operation is not completed
by the expiration time.
r� r ) Zrecv�EOFErrorr� r� rI �SSLWantReadErrorrg �SSLWantWriteErrorrh )r: �countr rf r� r r r � _net_readO s
r� c C st d}t |�}||k rpz|| �||d� �7 }W q ttjfyP t| |� Y q tjyl t| |� Y q 0 q dS )z�Write the specified data to the socket.
A Timeout exception will be raised if the operation is not completed
by the expiration time.
r N)r� r� r� rI r� rh r� rg )r: r� r �current�lr r r �
_net_writed s r� )r: r� r r c C sP t |tjj�r |jdd�}nt|��dd�| }t�� }t| ||� t|�|fS )a{ Send a DNS message to the specified TCP socket.
*sock*, a ``socket``.
*what*, a ``bytes`` or ``dns.message.Message``, the message to send.
*expiration*, a ``float`` or ``None``, the absolute time at which
a timeout exception should be raised. If ``None``, no timeout will
occur.
Returns an ``(int, float)`` tuple of bytes sent and the sent time.
T)Zprepend_length� Zbig) rY r r� r� r� r� �to_bytesr r� )r: r� r �tcpmsgr� r r r �send_tcpt s r� )r: r rz r� r� r{ r c C sL t | d|�}t�d|�\}t | ||�}t�� } tjj|||||d�}
|
| fS )a� Read a DNS message from a TCP socket.
*sock*, a ``socket``.
*expiration*, a ``float`` or ``None``, the absolute time at which
a timeout exception should be raised. If ``None``, no timeout will
occur.
*one_rr_per_rrset*, a ``bool``. If ``True``, put each RR into its own
RRset.
*keyring*, a ``dict``, the keyring to use for TSIG.
*request_mac*, a ``bytes`` or ``None``, the MAC of the request (for TSIG).
*ignore_trailing*, a ``bool``. If ``True``, ignore trailing
junk at end of the received message.
Raises if the message is malformed, if network errors occur, of if
there is a timeout.
Returns a ``(dns.message.Message, float)`` tuple of the received message
and the received time.
r� �!Hr� )r� �struct�unpackr r r� r� ) r: r rz r� r� r{ �ldatar� r� r� r� r r r � receive_tcp� s ! �r� c C s` | � |�}|dkrd S |tjtjtjfv rDt| |� | �tjtj �}|dkr\t
|t � |���d S rE )
Z
connect_ex�errnoZ EINPROGRESSZ EWOULDBLOCKZEALREADYrh Z
getsockoptr, Z
SOL_SOCKETZSO_ERROR�OSError�os�strerror)rf r7 r �errr r r r. � s
r. )
ry rq r
r3 r9 rr rz r{ r: r c C s� | � � } t|�\}
} |r$t�|�} n"t||||�\}
}}t|
tj|�} | �b}|s\t||| � t || | � t
|| || j | j |�\}}||
|_
| �|�s�t�|W d � S 1 s�0 Y dS )a� Return the response obtained after sending a query via TCP.
*q*, a ``dns.message.Message``, the query to send
*where*, a ``str`` containing an IPv4 or IPv6 address, where
to send the message.
*timeout*, a ``float`` or ``None``, the number of seconds to wait before the
query times out. If ``None``, the default, wait forever.
*port*, an ``int``, the port send the message to. The default is 53.
*source*, a ``str`` containing an IPv4 or IPv6 address, specifying
the source address. The default is the wildcard address.
*source_port*, an ``int``, the port from which to send the message.
The default is 0.
*one_rr_per_rrset*, a ``bool``. If ``True``, put each RR into its own
RRset.
*ignore_trailing*, a ``bool``. If ``True``, ignore trailing
junk at end of the received message.
*sock*, a ``socket.socket``, or ``None``, the connected socket to use for the
query. If ``None``, the default, a socket is created. Note that
if a socket is provided, it must be a nonblocking connected stream
socket, and *where*, *port*, *source* and *source_port* are ignored.
Returns a ``dns.message.Message``.
N)r� r# r� r� rs r+ r, r- r. r� r� r� r� r r� rV )ry rq r
r3 r9 rr rz r{ r: r� r� r r� r8 rm rf r� r� r r r r� � s( + �
�
"r� c C sP z| � � W d S tjy, t| |� Y q tjyH t| |� Y q 0 q d S r )Z do_handshakerI r� rg r� rh re r r r �_tls_handshake s r� )rt r~ r c C s� d }d }t |t�r>tj�|�r$|}ntj�|�r6|}ntd��tj||d�}tj j
|_ | d u rdd|_ |�
dg� |du r�tj|_|S )Nzinvalid verify string)�cafile�capathF�dot)rY r� r� r> �isfile�isdirrp rI rP Z
TLSVersionZTLSv1_2Zminimum_versionZcheck_hostnameZset_alpn_protocolsrQ � verify_mode)rt r~ r� r� rx r r r �_make_dot_ssl_context s
r� �U )
ry rq r
r3 r9 rr rz r{ r: rx rt r~ r c
C s� |r t | ||||||||� S | �� } t|�\}
}t||||�\}}}| du rZ|sZt|
| �} t|tj|| |
d��h}t|||� t ||� t
|| |� t |||| j | j
|�\}}||
|_| �|�s�t�|W d � S 1 s�0 Y dS )ak Return the response obtained after sending a query via TLS.
*q*, a ``dns.message.Message``, the query to send
*where*, a ``str`` containing an IPv4 or IPv6 address, where
to send the message.
*timeout*, a ``float`` or ``None``, the number of seconds to wait before the
query times out. If ``None``, the default, wait forever.
*port*, an ``int``, the port send the message to. The default is 853.
*source*, a ``str`` containing an IPv4 or IPv6 address, specifying
the source address. The default is the wildcard address.
*source_port*, an ``int``, the port from which to send the message.
The default is 0.
*one_rr_per_rrset*, a ``bool``. If ``True``, put each RR into its own
RRset.
*ignore_trailing*, a ``bool``. If ``True``, ignore trailing
junk at end of the received message.
*sock*, an ``ssl.SSLSocket``, or ``None``, the socket to use for
the query. If ``None``, the default, a socket is created. Note
that if a socket is provided, it must be a nonblocking connected
SSL stream socket, and *where*, *port*, *source*, *source_port*,
and *ssl_context* are ignored.
*ssl_context*, an ``ssl.SSLContext``, the context to use when establishing
a TLS connection. If ``None``, the default, creates one with the default
configuration.
*server_hostname*, a ``str`` containing the server's hostname. The
default is ``None``, which means that no hostname is known, and if an
SSL context is created, hostname checking will be disabled.
*verify*, a ``bool`` or ``str``. If a ``True``, then TLS certificate verification
of the server is done using the default CA bundle; if ``False``, then no
verification is done; if a `str` then it specifies the path to a certificate file or
directory which will be used for verification.
Returns a ``dns.message.Message``.
N)rx rt )r� r� r# rs r� r+ r, r- r. r� r� r� r� r� r r� rV )ry rq r
r3 r9 rr rz r{ r: rx rt r~ r� r� r r8 rm rf r� r� r r r �tls1 sL =� �
�
�
"r� ) ry rq r
r3 r9 rr rz r{ �
connectionr~ rt r c C s t jjstd��d| _| �� } |r2t�d�} |}
nt jj| |
d�} | }| �| |s`|� ||||�}
t
|�\}}|
� |��*}|� | d� |�
t|��} W d � n1 s�0 Y t�� }W d � n1 s�0 Y t jj| | j| j||d�}t|| d�|_| �|��st�|S )a� Return the response obtained after sending a query via DNS-over-QUIC.
*q*, a ``dns.message.Message``, the query to send.
*where*, a ``str``, the nameserver IP address.
*timeout*, a ``float`` or ``None``, the number of seconds to wait before the query
times out. If ``None``, the default, wait forever.
*port*, a ``int``, the port to send the query to. The default is 853.
*source*, a ``str`` containing an IPv4 or IPv6 address, specifying the source
address. The default is the wildcard address.
*source_port*, an ``int``, the port from which to send the message. The default is
0.
*one_rr_per_rrset*, a ``bool``. If ``True``, put each RR into its own RRset.
*ignore_trailing*, a ``bool``. If ``True``, ignore trailing junk at end of the
received message.
*connection*, a ``dns.quic.SyncQuicConnection``. If provided, the
connection to use to send the query.
*verify*, a ``bool`` or ``str``. If a ``True``, then TLS certificate verification
of the server is done using the default CA bundle; if ``False``, then no
verification is done; if a `str` then it specifies the path to a certificate file or
directory which will be used for verification.
*server_hostname*, a ``str`` containing the server's hostname. The
default is ``None``, which means that no hostname is known, and if an
SSL context is created, hostname checking will be disabled.
Returns a ``dns.message.Message``.
z DNS-over-QUIC is not available.r N)r� Z server_nameTr� r )r �quicZ have_quicrX �idr� r� r� ZSyncQuicManagerZconnectr# Z make_streamr� Zreceiver r r� r� r� r� �maxr� rV )ry rq r
r3 r9 rr rz r{ r� r~ rt r� ZmanagerZthe_connectionZ the_manager�startr �streamZfinishr� r r r r� � s< 2
� ,&� r� )rq �zone�rdtype�rdclassr
r3 r� �keyname�
relativizer" r9 rr �serial�use_udp� keyalgorithmr c ' c s� t |t�rtj�|�}tjj�|�}tj� |||�}|tjj
krdtj �|dddd| �}|j �
|� |dur||j|||d� |�� }t| ||
| �\}}}
|
r�|tjj
kr�td��|
r�tjntj}t|||
����}t| �\}}t|||� t|�}|
�rt||d|� n t�d|�| }t |||� d }d
}d } d} |�rF|} tjj } nd} |} d} |�s�t|�\}}!|!du �s�|du�r�|!|k�r�|}!|
�r�t |d |!�\}}n&t |d |!�}"t� d|"�\}t |||!�}|tjj
k}#tjj!||j"|j#d
| | d
|#d
�}$|$�$� }%|%tj$j%k�rt&|%��|$j'} d}&| du �r�|$j(�r<|$j(d j| k�rHtj)�*d��|$j(d }|j+tjj,k�rntj)�*d��d}&|�-� } |tjj
k�r�tj.�/| d j.�| k�r�d
}nd
} |$j(|&d� D ]�}|�r�tj)�*d��|j+tjj,k�rX|j| k�rX| �r|d j.| k�r tj)�*d��d } n|tjj
k�r&| }|| k�rj|tjj0k�sR|tjj
k�rj|�rjd
}n| �r�tjj0}d } �q�|�r�|j"�r�|$j1�s�tj)�*d��|$V �qRW d � n1 �s�0 Y dS )a� Return a generator for the responses to a zone transfer.
*where*, a ``str`` containing an IPv4 or IPv6 address, where
to send the message.
*zone*, a ``dns.name.Name`` or ``str``, the name of the zone to transfer.
*rdtype*, an ``int`` or ``str``, the type of zone transfer. The
default is ``dns.rdatatype.AXFR``. ``dns.rdatatype.IXFR`` can be
used to do an incremental transfer instead.
*rdclass*, an ``int`` or ``str``, the class of the zone transfer.
The default is ``dns.rdataclass.IN``.
*timeout*, a ``float``, the number of seconds to wait for each
response message. If None, the default, wait forever.
*port*, an ``int``, the port send the message to. The default is 53.
*keyring*, a ``dict``, the keyring to use for TSIG.
*keyname*, a ``dns.name.Name`` or ``str``, the name of the TSIG
key to use.
*relativize*, a ``bool``. If ``True``, all names in the zone will be
relativized to the zone origin. It is essential that the
relativize setting matches the one specified to
``dns.zone.from_xfr()`` if using this generator to make a zone.
*lifetime*, a ``float``, the total number of seconds to spend
doing the transfer. If ``None``, the default, then there is no
limit on the time the transfer may take.
*source*, a ``str`` containing an IPv4 or IPv6 address, specifying
the source address. The default is the wildcard address.
*source_port*, an ``int``, the port from which to send the message.
The default is 0.
*serial*, an ``int``, the SOA serial number to use as the base for
an IXFR diff sequence (only meaningful if *rdtype* is
``dns.rdatatype.IXFR``).
*use_udp*, a ``bool``. If ``True``, use UDP (only meaningful for IXFR).
*keyalgorithm*, a ``dns.name.Name`` or ``str``, the TSIG algorithm to use.
Raises on errors, and so does the generator.
Returns a generator of ``dns.message.Message`` objects.
r �IN�SOAz. . %u 0 0 0 0N)� algorithmzcannot do a UDP AXFRr� FTr� r� �r� r� �xfr�origin�tsig_ctxZmultirz z No answer or RRset not for qnamezfirst RRset is not an SOAri zanswers after final SOAzIXFR base serial mismatch� missing TSIG)2rY r� r �nameZ from_text� rdatatype� RdataTypeZmaker� �
make_query�IXFR�rrsetZ authorityr& Zuse_tsigr� rs rp r, r� r- r+ r# r. r� r� r� �packr� �emptyr� r� r� r� r� r� �rcodeZNOERROR�
TransferErrorr� Zanswerr
� FormErrorr� r� �copyr� ZSerial�AXFR�had_tsig)'rq r� r� r� r
r3 r� r� r� r" r9 rr r� r� r� ry r� r� r8 rm � sock_typerf r6 r r� r� �doneZ delete_modeZ
expecting_SOAZ soa_rrsetr� Zonamer� � mexpirationr� �is_ixfrr� r� Z answer_indexr r r r� � s� E
�
�� �
�
�� r� c @ s e Zd ZdZdZdZdZdS )�UDPModea How should UDP be used in an IXFR from :py:func:`inbound_xfr()`?
NEVER means "never use UDP; always use TCP"
TRY_FIRST means "try to use UDP but fall back to TCP if needed"
ONLY means "raise ``dns.xfr.UseTCP`` if trying UDP does not succeed"
r ri r� N)r@ rA rB rU �NEVERZ TRY_FIRST�ONLYr r r r r � s r )
rq � txn_managerr� r3 r
r" r9 rr �udp_moder c C s^ |du rt j�|�\}} n t j�|�} |jd j}
|
t jjk} |�� } |� � }
t
| |||�\}}}t |�\}}d}|�rZd}| r�|t j
kr�tj}d}n
tj}d}t|||����}t|||� |r�t||
d|� n t�dt|
��|
}t|||� t j�||
| |���"}d}d}|�s�t |�\}}|du �s>|du�rB||k�rB|}|�rZt|d|�\}}n&t|d|�} t�d| �\} t|| |�}t j j ||j |j d| || | d�} z|� | �}W n: t jj!�y� |t j"k�r҂ d}d}t j
}Y �qY n0 | j#}�q|�s|j �r| j$�st j%�&d ��W d � n1 �s.0 Y W d � qr1 �sN0 Y qrdS )
a� Conduct an inbound transfer and apply it via a transaction from the
txn_manager.
*where*, a ``str`` containing an IPv4 or IPv6 address, where
to send the message.
*txn_manager*, a ``dns.transaction.TransactionManager``, the txn_manager
for this transfer (typically a ``dns.zone.Zone``).
*query*, the query to send. If not supplied, a default query is
constructed using information from the *txn_manager*.
*port*, an ``int``, the port send the message to. The default is 53.
*timeout*, a ``float``, the number of seconds to wait for each
response message. If None, the default, wait forever.
*lifetime*, a ``float``, the total number of seconds to spend
doing the transfer. If ``None``, the default, then there is no
limit on the time the transfer may take.
*source*, a ``str`` containing an IPv4 or IPv6 address, specifying
the source address. The default is the wildcard address.
*source_port*, an ``int``, the port from which to send the message.
The default is 0.
*udp_mode*, a ``dns.query.UDPMode``, determines how UDP is used
for IXFRs. The default is ``dns.UDPMode.NEVER``, i.e. only use
TCP. Other possibilities are ``dns.UDPMode.TRY_FIRST``, which
means "try UDP but fallback to TCP if needed", and
``dns.UDPMode.ONLY``, which means "try UDP and raise
``dns.xfr.UseTCP`` if it does not succeed.
Raises on errors.
Nr TFr� r� r� r� r� )'r r� r� Zextract_serial_from_queryZquestionr� r� r� Zfrom_wire_originr� rs r# r r r, r� r- r+ r. r� r� r� r� r� ZInboundr� r� r� r� r� r� r� Zprocess_messageZUseTCPr r� r r
r� ) rq r r� r3 r
r" r9 rr r
r� r� r r� r� r8 rm r6 r Zretryr Zis_udprf r� Zinboundr r� r Zrwirer� r� r� r r r � inbound_xfr� s~ / �
�� �
r )T)NN)N)
NNFFNr� FFFN)
Nr� Nr FFFFNF)
Nr� Nr FFFNNF)N)NFNr� F)Nr� Nr FFN)
Nr� Nr FFNNNT) Nr� Nr FFNTN)wrU r� r� �enumr� r� Zos.pathr\ r, r� r �typingr r r r r Z
dns._featuresr Z
dns.exceptionZdns.inetZ dns.messageZdns.nameZdns.quicZ dns.rcodeZdns.rdataclassZ
dns.rdatatypeZ
dns.serialZdns.transactionZdns.tsigZdns.xfrr r Z _featuresZhaveZ _have_httpxZhttpcore._backends.syncr1 r� ZNetworkBackendZ_CoreNetworkBackendZ _backends�syncZ
SyncStreamr/ r Z
HTTPTransportrD r� rI � ImportErrorru r
Z DNSExceptionrS r� rV rW rX r� r� r# ra rb �hasattrrc r[ ZSelectSelectorrg rh rk ro rs r+ rH r� r� r� �float�int�boolr� r� r� �bytesr� r� �NameZtsigZKeyr� r� r� r� r� r� r� r. r� r� rM r� rN r� r� ZSyncQuicConnectionr� r Z
rdataclassr� Zdefault_algorithmr� Z
RdataClass�IntEnumr r Z transactionZTransactionManagerr r r r r �<module> s�
4 �
,
�
� �
� �
� m �� ^ �� X �
� �� / �� D � �
� n �
� Z�� ;�
�