⚝
One Hat Cyber Team
⚝
Your IP:
216.73.216.74
Server IP:
104.21.80.1
Server:
Linux vmi2315822.contaboserver.net 5.15.0-134-generic #145-Ubuntu SMP Wed Feb 12 20:08:39 UTC 2025 x86_64
Server Software:
LiteSpeed
PHP Version:
8.3.21
Buat File
|
Buat Folder
Eksekusi
Dir :
~
/
usr
/
local
/
CyberCP
/
plogical
/
__pycache__
/
View File Name :
customACME.cpython-310.pyc
o *36h�� � @ s� d dl Z d dlZd dlZd dlZd dlZd dlZd dlZd dlmZ d dl m Z d dl m Z d dl m Z d dlmZ d dl mZ d dlZd dlmZ d d lmZ d dlZG d d � d �ZdS ) � N)�x509)� serialization)�rsa)�hashes)�default_backend)�padding)�CyberCPLogFileWriter)�ProcessUtilitiesc @ s� e Zd Zd,dd�Zdd� Zdd� Zd d � Zd d � Zd d� Zdd� Z dd� Z dd� Z dd� Z dd� Z dd� Zdd � Zd d � Zd d � Zd-d#d$�Zd%d&� Zd-d'd(�Zd.d)d*�Zd+S )/� CustomACMEF� letsencryptc C s t j�d|� d|� d|� d|� �� || _|| _|| _|| _|dkr8|r.d| _t j�d� n d| _t j�d � n|rDd | _t j�d � n d | _t j�d � d| _d| _ d| _ d| _ d| _ g | _ d| _d| _d|� �| _d| _d|� d�| _t j�d| j� d| j� �� tjddd� dS )zInitialize CustomACMEz$Initializing CustomACME for domain: z , email: z , staging: z , provider: �zerosslz(https://acme-staging.zerossl.com/v2/DV90z$Using ZeroSSL staging ACME directoryz https://acme.zerossl.com/v2/DV90z'Using ZeroSSL production ACME directory�6https://acme-staging-v02.api.letsencrypt.org/directoryz*Using Let's Encrypt staging ACME directoryz.https://acme-v02.api.letsencrypt.org/directoryz-Using Let's Encrypt production ACME directoryNz/etc/letsencrypt/live/z7/usr/local/lsws/Example/html/.well-known/acme-challengez/etc/letsencrypt/accounts/z.keyzCertificate path: z, Challenge path: z/etc/letsencrypt/accountsT)�exist_ok)�loggingr � writeToFile�domain� admin_email�staging�provider�acme_directory� account_key� account_url� directory�nonce� order_url�authorizations� finalize_url�certificate_url� cert_path�challenge_path�account_key_path�os�makedirs)�selfr r r r � r$ �)/usr/local/CyberCP/plogical/customACME.py�__init__ s: $ zCustomACME.__init__c C st zt j�d� tjddt� d�}|| _t j�d� W dS ty9 } zt j�dt|�� �� W Y d}~d S d}~ww ) zGenerate RSA account keyz Generating RSA account key...� � ��public_exponent�key_size�backendz&Successfully generated RSA account keyTz Error generating account key: NF) r r r r �generate_private_keyr r � Exception�str)r# �key�er$ r$ r% �_generate_account_key> s � ��z CustomACME._generate_account_keyc C s� z%t j�d| j� �� t�| j�}|�� | _t j�dt�| j�� �� W dS t yC } zt j�dt |�� �� W Y d}~dS d}~ww )zGet ACME directoryz Fetching ACME directory from z%Successfully fetched ACME directory: TzError getting directory: NF) r r r r �requests�get�jsonr �dumpsr. r/ �r# �responser1 r$ r$ r% �_get_directoryN s ��zCustomACME._get_directoryc C s� z!t j�d� t�| jd �}|jd | _t j�d| j� �� W dS ty? } zt j�dt |�� �� W Y d}~dS d}~ww ) z Get new nonce from ACME serverzGetting new nonce...�newNoncez Replay-NoncezSuccessfully got nonce: TzError getting nonce: NF) r r r r3 �headr �headersr r. r/ r7 r$ r$ r% � _get_nonceZ s ��zCustomACME._get_noncec C s� �zAt j�d|� �� |durt j�dt�|�� �� | �� s(t j�d� W dS t j�d� | j�� }|j}t j�d� |j � |j � � d d d �}|j � |j � � d d d �}t j�d � d t �|��d ��d �t �|��d ��d �dd�}t j�dt�|�� �� d|| jd�}| jr�|| jd kr�| j|d< t j�d| j� �� n ||d< t j�d� t j�d� t �t�|��d ���d ��d �} |du r�d} t j�d� nt j�d� t �t�|��d ���d ��d �} t j�d� | � d | � ��d �} t j�d � | j�| t�� t�� �} t j�d � t �| ��d ��d �} t j�d � | | d �}|du�r0| |d!< tj|d"d#�}t j�d$|� �� |W S t�ya } zt j�d%t|�� �� W Y d}~dS d}~ww )&z Create JWS (JSON Web Signature)zCreating JWS for URL: Nz Payload: zFailed to get fresh noncez Getting private key numbers...z"Converting RSA numbers to bytes...� � �bigzCreating JWK...�RSA�utf-8�=�RS256)�kty�nr1 �algz Created JWK: )rG �urlr � newAccount�kidzUsing Key ID: �jwkzUsing JWK for new accountz Encoding protected header...� z+Using empty payload for POST-as-GET requestzEncoding payload...zCreating signature input...�.zSigning input...zEncoding signature...zCreating final JWS...)� protected� signature�payload��,�:)� separatorsz Final JWS: zError creating JWS: ) r r r r5 r6 r= r �private_numbers�public_numbersrF �to_bytes� bit_lengthr1 �base64�urlsafe_b64encode�decode�rstripr r r �encode�signr �PKCS1v15r �SHA256r. r/ )r# rP rH rU rV �n_bytes�e_bytes�jwk_keyrN � protected_b64� payload_b64�signature_inputrO � signature_b64�jws�jws_strr1 r$ r$ r% � _create_jwsf s� �� � � � � � � ��zCustomACME._create_jwsc C s� z=t j�| j�r;tj�d� t| jd�� }|�� }W d � n1 s#w Y t j |dt � d�| _ tj�d� W dS W dS t y[ } ztj�dt|�� �� W Y d}~dS d}~ww ) z&Load existing account key if availablez Loading existing account key...�rbN)�passwordr, z(Successfully loaded existing account keyTFzError loading account key: )r! �path�existsr r r r �open�readr �load_pem_private_keyr r r. r/ )r# �f�key_datar1 r$ r$ r% �_load_account_key� s& �� ��z CustomACME._load_account_keyc C s� z9t j�d� | jjtjjtjj t� � d�}t | j d�� }|� |� W d � n1 s,w Y t j�d� W dS tyW } zt j�dt|�� �� W Y d}~dS d}~ww ) z Save account key for future usezSaving account key...��encoding�format�encryption_algorithm�wbNz Successfully saved account keyTzError saving account key: F)r r r r � private_bytesr �Encoding�PEM� PrivateFormat�PKCS8� NoEncryptionro r �writer. r/ )r# rs rr r1 r$ r$ r% �_save_account_key� s" � � ��z CustomACME._save_account_keyc C s� z�t j�d� dd| j� �gd�}| �|| jd �}|s%t j�d� W dS t j�d� d d i}tj| jd ||d �}t j�d |j� �� t j�d |j � �� |jdkrj|j d | _ t j�d| j � �� | � � W dS |jdkr�t j�d� d| _ d| _| �� s�W dS | �� s�W dS | �� W S |jdkr�d|j v r�t j�d� | �� s�W dS | �� W S W dS ty� } zt j�dt|�� �� W Y d}~dS d}~ww )zCreate new ACME accountz Creating new ACME account...Tzmailto:)�termsOfServiceAgreed�contactrI z)Failed to create JWS for account creationFz#Sending account creation request...� Content-Type�application/jose+json��datar< z"Account creation response status: zAccount creation response: �� �Locationz+Successfully created account. Account URL: i� zARate limit hit for account creation. Using staging environment...r i� �badNoncez,Bad nonce, getting new nonce and retrying...zError creating account: N)r r r r rj r r3 �post� status_code�textr< r r� r r r9 r= �_create_accountr. r/ )r# rP rh r< r8 r1 r$ r$ r% r� � sP � � ��zCustomACME._create_accountc C sZ z�t j�d|� �� dd� |D �}d|i}| �|| jd �}|s)t j�d� W dS t j�d� d d i}tj| jd ||d �}t j�d |j� �� t j�d |j� �� |jdkr�|j d | _ |� � d | _ |� � d | _ t j�d| j � �� t j�d| j � �� t j�d| j � �� W dS W dS ty� } zt j�dt|�� �� W Y d}~dS d}~ww )z Create new order for domainsz Creating new order for domains: c S s g | ]}d |d��qS )�dns)�type�valuer$ ��.0r r$ r$ r% � <listcomp># s z,CustomACME._create_order.<locals>.<listcomp>� identifiers�newOrderz'Failed to create JWS for order creationFz!Sending order creation request...r� r� r� z Order creation response status: zOrder creation response: r� r� r �finalizez'Successfully created order. Order URL: zAuthorizations: zFinalize URL: TzError creating order: N)r r r rj r r3 r� r� r� r< r r5 r r r. r/ )r# �domainsr� rP rh r< r8 r1 r$ r$ r% � _create_order s: � � ��zCustomACME._create_orderc C s zit j�dt�|�� �� | �|�}|s t j�d� W dS tj�| j �s4t j�d| j � �� t� | j � tj� | j |d �}t j�d|� �� t |d�� }|� |� W d � n1 s\w Y t j�d � W d S ty� } zt j�d t|�� �� W Y d}~dS d}~ww ) zHandle HTTP-01 challengezHandling HTTP challenge: z Failed to get key authorizationFz Creating challenge directory: �tokenzWriting challenge file: �wNz#Successfully handled HTTP challengeTz Error handling HTTP challenge: )r r r r5 r6 �_get_key_authorizationr! rm rn r r" �joinro r� r. r/ )r# � challenge�key_auth�challenge_filerr r1 r$ r$ r% �_handle_http_challengeB s* � ��z!CustomACME._handle_http_challengec C s\ zt j�dt�|�� �� W dS ty- } zt j�dt|�� �� W Y d}~dS d}~ww )z$Handle DNS-01 challenge (Cloudflare)zHandling DNS challenge: z Error handling DNS challenge: NF)r r r r5 r6 r. r/ )r# r� r1 r$ r$ r% �_handle_dns_challenge` s ��z CustomACME._handle_dns_challengec C sj z�t j�d� | j�� }|j}|j�|j�� d d d�}|j �|j �� d d d�}dt � |�� d�� d�t � |�� d�� d�d�}t � |j �d d��� d�� d�dt � |j�d d��� d�� d�d �}tj|d d d�}t�|�d���� } t � | �� d�� d�} |d � d| � �} t j�d| � �� | W S ty� } zt j�dt| �� �� W Y d} ~ dS d} ~ ww )z#Get key authorization for challengez Getting key authorization...r> r? r@ rA rB rC )rE rF r1 � � )r1 rE rF TrQ )� sort_keysrT r� rM zKey authorization: z!Error getting key authorization: N)r r r r rU rV rF rW rX r1 rY rZ r[ r\ r5 r6 �hashlib�sha256r] �digestr. r/ ) r# r� rU rV ra rb rc rK � sorted_jwk� thumbprintr� r1 r$ r$ r% r� k s2 � ���z!CustomACME._get_key_authorizationc C s� zSt j�d|� �� i }| �||�}|s t j�d� W dS t j�d� ddi}tj|||d�}t j�d|j� �� t j�d |j� �� |jd krQt j�d � W d S W dS tyq } zt j�d t |�� �� W Y d}~dS d}~ww )a� Verify challenge completion with the ACME server This function sends a POST request to the ACME server to verify that the challenge has been completed successfully. The challenge URL is provided by the ACME server when the challenge is created. Example challenge_url: "https://acme-v02.api.letsencrypt.org/acme/challenge/example.com/123456" The verification process: 1. Creates an empty payload (POST-as-GET request) 2. Creates a JWS (JSON Web Signature) with the payload 3. Sends the request to the ACME server 4. Checks the response status Returns: bool: True if challenge is verified successfully, False otherwise z Verifying challenge at URL: z/Failed to create JWS for challenge verificationFz)Sending challenge verification request...r� r� r� z(Challenge verification response status: z!Challenge verification response: �� z Successfully verified challengeTzError verifying challenge: N) r r r rj r3 r� r� r� r. r/ )r# � challenge_urlrP rh r< r8 r1 r$ r$ r% �_verify_challenge� s, � ��z CustomACME._verify_challengec C s z�t j�d� dt�|��d��d�i}| �|| j�}|s&t j�d� W dS t j�d� dd i}t j | j||d �}t j�d |j � �� t j�d |j � �� |j d kr�d}d}t |�D ]�}| �� sjt j�d� W dS t j| j|d�}t j�d|j � �� |j d kr�|�� �d�} | dkr�|�� �d�| _t j�d| j� �� W dS | dkr�t j�d� W dS | dkr�t j�d|d � d |� �� t�|� qZt j�d |d � d |� �� t�|� qZt j�d � W dS W dS t�y } zt j�d t| �� �� W Y d!} ~ dS d!} ~ ww )"z"Finalize order and get certificatezFinalizing order...�csrrB rC z+Failed to create JWS for order finalizationFz%Sending order finalization request...r� r� r� z$Order finalization response status: z Order finalization response: r� � � �*Failed to get nonce for order status check�r< � Order status check response: �status�valid� certificatez/Successfully finalized order. Certificate URL: T�invalid�Order validation failed� processing� Order still processing, attempt � �/�#Order status check failed, attempt �Order processing timed outzError finalizing order: N)r r r rY rZ r[ r\ rj r r3 r� r� r� �ranger= r4 r r5 r �time�sleepr. r/ ) r# r� rP rh r< r8 � max_attempts�delay�attempt� order_statusr1 r$ r$ r% �_finalize_order� s\ � � ��zCustomACME._finalize_orderc C s� zFt j�d� t j�d| j� �� t�| j�}t j�d|j� �� t j�d|j� �� t j�d|j� �� |jdkrDt j�d� |j W S W dS t yd } zt j�d t |�� �� W Y d}~dS d}~ww ) z%Download certificate from ACME serverzDownloading certificate...zCertificate URL: z&Certificate download response status: z'Certificate download response headers: z'Certificate download response content: r� z#Successfully downloaded certificateNz Error downloading certificate: ) r r r r r3 r4 r� r< r� �contentr. r/ r7 r$ r$ r% �_download_certificate s ��z CustomACME._download_certificater� r� c C s, zwt j�d|� �� t|�D ]`}| �� s t j�d� W dS ddi}tj||d�}t j�d|j� �� |jdkr[|� � �d �}|d krMt j�d � W d S |d kr[t j�d� W dS t j�d|d � d|� �� t � |� qt j�d� W dS t y� } zt j�dt |�� �� W Y d}~dS d}~ww )z5Wait for challenge to be validated by the ACME serverz)Waiting for challenge validation at URL: z.Failed to get nonce for challenge status checkFr� r� r� z!Challenge status check response: r� r� r� z Challenge validated successfullyTr� zChallenge validation failedz!Challenge still pending, attempt r� r� z Challenge validation timed outz(Error waiting for challenge validation: N)r r r r� r= r3 r4 r� r� r5 r� r� r. r/ ) r# r� r� r� r� r< r8 �challenge_statusr1 r$ r$ r% � _wait_for_challenge_validation3 s6 � ��z)CustomACME._wait_for_challenge_validationc s2 zzt j�d� � �� g d�}d � fdd� }d}|D ] }||d�r$d} nqd}|D ] }||d�r4d} nq)z t�� � d}W n tjyH Y nw z t�� d tj� d}W n tjy_ Y nw |rkt j�d � � �� |rvt j�d � � �� |py|W S ty� } zt j�d t |�� �� W Y d }~dS d }~ww )a� Check if a domain has valid DNS records This function performs multiple DNS checks to ensure the domain has valid DNS records. It includes: 1. A record (IPv4) check 2. AAAA record (IPv6) check 3. DNS caching prevention 4. Multiple DNS server checks Args: domain (str): The domain to check Returns: bool: True if valid DNS records are found, False otherwise z!Checking DNS records for domain: )z8.8.8.8z1.1.1.1z208.67.222.222�Ac sj z�z�t � t jt j�}|�d� |�| df� t� }|d7 }|d7 }|d7 }|d7 }|d7 }|d7 }� �d�D ]}|�t|�� |� |� � � q6|d7 }|dkrT|d7 }n|d 7 }|d7 }|� |� |� d �}t|�d kr�t �|d d � d�}|dkr�W W |�� dS W W |�� dS ty� } ztj�d| � dt|�� �� W Y d }~W |�� dS d }~ww |�� w )N� �5 s s s rM � r� s i � � r? r@ r TFz Error checking DNS with server z: )�socket�AF_INET� SOCK_DGRAM� settimeout�connect� bytearray�split�append�len�extendr] �send�recv�int� from_bytes�closer. r r r r/ )�server� record_type�sock�query�partr8 � answer_countr1 �r r$ r% �check_with_dns_servero sF � � �� z;CustomACME._check_dns_record.<locals>.check_with_dns_serverFT�AAAANz"IPv4 DNS record found for domain: z"IPv6 DNS record found for domain: z Error checking DNS records: )r� ) r r r r� � gethostbyname�gaierror� getaddrinfo�AF_INET6r. r/ )r# r � dns_serversr� �a_record_foundr� �aaaa_record_foundr1 r$ r� r% �_check_dns_recordT sL 5 � � �� ��z CustomACME._check_dns_recordc C sh z�t j�d� t|�D ]�}| �� st j�d� W dS ddi}tj| j|d�}t j�d|j� �� |j dkry|� � �d �}|d krS|� � �d �| _ t j�d � W d S |dkrat j�d� W dS |dkryt j�d|d � d|� �� t � |� q t j�d|d � d|� �� t � |� q t j�d� W dS ty� } zt j�dt|�� �� W Y d}~dS d}~ww )z Wait for order to be processedz Waiting for order processing...r� Fr� r� r� r� r� r� r� r� z Order validated successfullyTr� r� r� r� r� r� r� r� z$Error waiting for order processing: N)r r r r� r= r3 r4 r r� r� r5 r r� r� r. r/ )r# r� r� r� r< r8 r� r1 r$ r$ r% �_wait_for_order_processing� s@ � ��z%CustomACME._wait_for_order_processingc C s �z�t j�d|� d|� �� | �� rt j�d� nt j�d� g }|D ]}| �|�r0|�|� q#t j�d|� d�� q#|sFt j�d� W dS t j�d � | �� sYt j�d � W dS t j�d � | �� slt j�d � W dS t j�d � | �� st j�d� W dS t j�d� | � � s�t j�d� | j s�t j�d� d| _ d| _ | �� s�W dS | �� s�W dS | � � s�W dS nW dS t j�d� | � |�s�t j�d� W dS t j�d� | j D ]�}t j�d|� �� | �� s�t j�d� W dS ddi}tj||d�}t j�d |j� �� t j�d |j� �� |jd k�r t j�d � W dS |�� d }|D ]�} t j�d!t�| �� �� |�ru| d" d#k�ru| �| ��sMt j�d$� W dS | �| d% ��s`t j�d&� W dS | �| d% ��sst j�d'� W dS �q$|�s�| d" d(k�r�| �| ��s�t j�d)� W dS | �| d% ��s�t j�d*� W dS | �| d% ��s�t j�d+� W dS �q$t j�d,| d" � d-�� �q$q�t j�d.� tjd/d0t� d1�} tj| j|d��� } d2d3� | d4 D �} t j�d5| � �� t � � � t � t � t j!j"| d6 �g��j#t �$d7d3� | D ��dd8��%| t&�'� t� �} t j�d9� | �(| �)t*j+j,���s4t j�d:� W dS t j�d;� | �-� �sHt j�d<� W dS t j�d=� | �.� }|�s^t j�d>� W dS t j�d?� t/j0�1| j2��s|t j�d@| j2� �� t/�3| j2� t/j0�4| j2dA�}t/j0�4| j2dB�}t j�dC|� �� t5|dD�� }|�6|� W dE � n 1 �s�w Y t j�dF|� �� t5|dD��}|�6| j7t*j+j8t*j9j:t*�;� dG�� W dE � n 1 �s�w Y t j�dH� W dS t<�y } zt j�dIt=|�� �� W Y dE}~dS dE}~ww )Jz Main method to issue certificatez+Starting certificate issuance for domains: z , use_dns: zUsing existing account keyz2No existing account key found, will create new onezSkipping domain z due to missing DNS recordsz'No valid domains found with DNS recordsFz Step 1: Generating account keyz Failed to generate account keyz Step 2: Getting ACME directoryz Failed to get ACME directoryzStep 3: Getting noncezFailed to get noncezStep 4: Creating accountzFailed to create accountz#Switching to staging environment...Tr zStep 5: Creating orderzFailed to create orderzStep 6: Handling challengesz Processing authorization URL: z%Failed to get nonce for authorizationr� r� r� z Authorization response status: zAuthorization response: r� zFailed to get authorization� challengeszProcessing challenge: r� zdns-01z Failed to handle DNS challengerH z Failed to verify DNS challengez DNS challenge validation failedzhttp-01z Failed to handle HTTP challengez Failed to verify HTTP challengez HTTP challenge validation failedz Skipping z challengezStep 7: Generating CSRr' r( r) c S s g | ]}|d �qS )r� r$ )r� � identifierr$ r$ r% r� k s z0CustomACME.issue_certificate.<locals>.<listcomp>r� zOrder domains: r c S s g | ]}t �|��qS r$ )r �DNSNamer� r$ r$ r% r� t s �)�criticalzStep 8: Finalizing orderzFailed to finalize orderz$Step 9: Waiting for order processingzFailed to process orderz Step 10: Downloading certificatez Failed to download certificatezStep 11: Saving certificatez Creating certificate directory: z fullchain.pemz privkey.pemzSaving certificate to: ry NzSaving private key to: ru z+Successfully completed certificate issuancezError issuing certificate: )>r r r rt r� r� r2 r9 r= r� r r r� r r3 r4 r� r� r5 r6 r� r� r� r� r r- r r r � CertificateSigningRequestBuilder� subject_name�Name� NameAttribute�NameOID� COMMON_NAME� add_extension�SubjectAlternativeNamer^ r r` r� � public_bytesr r{ �DERr� r� r! rm rn r r" r� ro r� rz r| r} r~ r r. r/ )r# r� �use_dns� valid_domainsr �auth_urlr< r8 r� r� r0 �order_response� order_domainsr� r� � cert_file�key_filerr r1 r$ r$ r% �issue_certificate� s" � � � � � ��� �� � � � � ��z CustomACME.issue_certificateN)Fr )r� r� )F)�__name__� __module__� __qualname__r& r2 r9 r= rj rt r� r� r� r� r� r� r� r� r� r� r� r� r r$ r$ r$ r% r s( * d1# 5F9 ! y&r )r5 r! r� r3 rY r� r � cryptographyr � cryptography.hazmat.primitivesr �)cryptography.hazmat.primitives.asymmetricr r � cryptography.hazmat.backendsr r �OpenSSL�plogicalr �plogical.processUtilitiesr r� r r$ r$ r$ r% �<module> s$