o j#@s UdZddlZddlZddlZddlZddlZddlZddlZddlZddl Z ddl Z ddl Z ddl mZmZmZmZmZmZddlZddlZddlZddlZddlZddlZddlZddlZddlZddlZddlZddl Zddl!Zzddl"Z"Wne#yddl$m%Z"YnwddZ&ddZ'ej()dZ*e*rddl+Z,ddl-Z-e,j.Z/e,j0j1j2Z3Gd d d e/Z4Gd d d e-j5Z6nGd d d Z6e*Z7dej8e9Bdej:de9dejfddZ;e;Zj?Z@Gdddej>jAZBGdddej>j?ZCGdddej>j?ZDejEjFZFddZGdd ZHd!d"ZId#d$ZJd%d&ZKd'd(ZL )dd*d+ZM ddej8e9Bd,ej:d-edBdejfd.d/ZN  ddej8e9Bd,ej:d0e"jOd1ejPjQeRBdBd-edBde"jSf d2d3ZTd4d5ZUd6ed7dd7fd8d9ZVGd:d;d;ejWZXddd)dd)dejYeXjZfd?ej[j\d@eRdAe]dBdBe9d-eRdBdCe9dDe^dEe^dFedBdGeRdHe^dIeRdBdJe^eRBe"jOBd6ed7dKe9dLeXdej[j\f"dMdNZ_dOej`jadPebdebfdQdRZcdOej`jadSeRdTebddfdUdVZd  <   = = ) ) dd?ej[j\d@eRdWeRdAe]dBdBe9d-eRdBdCe9dDe^dEe^dJe^eRBe"jOBdHe^dXej`jedBdej[j\fdYdZZfd[d\Zgd]d^Zh dd_ed`ej[j\ebBdaedbe]dBdee9e]ff dcddZi   = =  e = = = dd_edaedBdbe]dBdfe^dDe^dgeejPjQejjjkfdBdhebdBdEe^die^dje^dkej[j\dBdefdldmZl  n   = = = =  =dd?ej[j\d@eRdAe]dBdBe9d-eRdBdCe9dfe^dDe^dEe^die^d_edBdje^dej[j\fdodpZm  n   = = =   =dd?ej[j\d@eRdAe]dBdBe9d-eRdBdCe9dfe^dDe^dEe^dqedBdredBdje^deej[j\e^ffdsdtZndudvZodwdxZp dd_ed`ej[j\ebBdbe]dBdee9e]ffdydzZq  =  e =dd_edbe]dBdDe^dgeejPjQejjjkfdBdhebdBdEe^deej[j\e]ffd{d|Zrd}d~Zs  n   = = dd?ej[j\d@eRdAe]dBdBe9d-eRdBdCe9dDe^dEe^d_edBdej[j\fddZtddZu ) ) ddJe^eRBde^deveRdBde"jOfddZwd1eRdBdJe^eRBde"jOfddZx    = =    )dd?ej[j\d@eRdAe]dBdBe9d-eRdBdCe9dDe^dEe^d_e"jSdBd0e"jOdBd1eRdBdJe^eRBdej[j\fddZy    = =  )  dd?ej[j\d@eRdAe]dBdBe9d-eRdBdCe9dDe^dEe^dXej`jedBdJe^eRBdeRdBd1eRdBdej[j\fddZ`GdddejWZzdej{j|deje"jSBdkej[j\de9dBdAe]dBdbe]dBdefddZ}ej~jejjddnddd)ddddd=ejjjf d@eRdejPjQeRBdej~jeRBdejjeRBdAe]dBdBe9dgeejPjQejjjkfdBdejPjQeRBdBde^de]dBd-eRdBdCe9de9de^dejPjQeRBdef ddZEddnddddezjfd@eRdej{j|dkej[j\dBdBe9dAe]dBde]dBd-eRdBdCe9dezddfddZdS)zTalk to a DNS server.N)AnyCallableDictOptionalTuplecastcCs,|durdS|t}|dkrtjj|S)N)timedns exceptionTimeout) expirationtimeoutr|/root/aizidognhua/tmp/workspace/projects/ec89d86c-575f-41c9-af57-ac45cbdbf775/venv/lib/python3.10/site-packages/dns/query.py _remaining5s  rcCs|durdStt||SN)minr )rr rrr_expiration_for_this_attempt>srdohcs4eZdZfddZ dddZ d ddZZS) _NetworkBackendcs&t||_||_||_||_dSr)super__init__ _local_port _resolver_bootstrap_address_family)selfresolver local_portbootstrap_addressfamily __class__rrrMs  z_NetworkBackend.__init__Nc Csg}t|\}}tj|r||n(|jdur ||jnt|}|j} |r/tj|} |j j || |d} | }|D]M} tj| } |dusO|j dkr`|durUd}tj ||j f| } nd} z t| tj| }td|}t|tj | |f| |t|WStyYq>wtj)N)r!lifetimerz0.0.0.0g@)_compute_timesr inet is_addressappendrrraf_for_addressr resolve_name addressesrlow_level_address_tuple make_socketsocket SOCK_STREAMr_connect_CoreSyncStream Exceptionhttpcore ConnectError)rhostportr local_addresssocket_optionsr+_r r!answersaddressafsourcesockattempt_expirationrrr connect_tcpTsH         z_NetworkBackend.connect_tcpcCtrNotImplementedError)rpathrr8rrrconnect_unix_socket}sz#_NetworkBackend.connect_unix_socket)NNNNN)__name__ __module__ __qualname__rr@rE __classcell__rrr"rrLs   *rcs*eZdZdddejdfdd ZZS)_HTTPTransportrNrr rr!csJ|dur|durddl}|j}tj|i|t|||||j_dSNr) dns.resolverrResolverrrr_pool_network_backend)rrr rr!argskwargsr r"rrrs   _HTTPTransport.__init__)rGrHrIr. AF_UNSPECrrJrrr"rrKs rKc@s*eZdZdddejdddZddZdS)rKrNrLcOdSrr)rrr rr!rRrSrrrrs rTcCrArrB)rr5r6rr7rrrr@z_HTTPTransport.connect_tcp)rGrHrIr.rUrr@rrrrrKs r<kindprotoreturncCst|||Sr)r.)r<rXrYrrrdefault_socket_factorysr[socket_factoryc@eZdZdZdS)UnexpectedSourcez=A DNS query response came from an unexpected address or port.NrGrHrI__doc__rrrrr^r^c@r]) BadResponsezrrrmake_ssl_socketes rcCs$|dur t|||||St|||Sr)rr-)r<rr=rrrrr _make_sockets rrzdns.resolver.ResolvercCs|dur ddl}|j}|SrM)rNrrO)rr rrr_maybe_get_resolvers rc@s,eZdZdZdZdZdZdZdZdZ dZ dS) HTTPVersionzWhich version of HTTP should be used? DEFAULT will select the first version from the list [2, 1.1, 3] that is available. rr|N) rGrHrIr`DEFAULTHTTP_1H1HTTP_2H2HTTP_3H3rrrrrsrFz /dns-queryqrrr6rone_rr_per_rrsetignore_trailingsessionrDpostr verifyr! http_versionc"Cst||||d\}}}|}|dur6tj|r6|tjkr'd|d|| }n|tjkr6d|d|| }i}| durbtj |}|j durKt dtj|j rZ|j } |j |d<|j durb|j }|t jksn|t jkrts| durt| } |j dus}J| |j |}tt|} |rt|tjjst d t|| |||||||| | |d Stst|rt|tjst d |}d d i}|t jt jfv}|t j t jfv}|durd}d}n|d}|d}|rt!"|}nt#|||| || | |d}tj||| |d}|A}|dus J| r$|$d t%t&|d|j'|||||d}nt()|*d}|+} |j,|||d| i|d}Wdn 1sGwY|j-dksX|j-dkrft |d|j-d|j.tj/j0|j.|j1|j2||d}!|j34|!_5|6|!st7|!S)a Return the response obtained after sending a query via DNS-over-HTTPS. *q*, a ``dns.message.Message``, the query to send. *where*, a ``str``, the nameserver IP address or the full URL. If an IP address is given, the URL will be constructed using the following schema: https://:/. *timeout*, a ``float`` or ``None``, the number of seconds to wait before the query times out. If ``None``, the default, wait forever. *port*, a ``int``, the port to send the query to. The default is 443. *source*, a ``str`` containing an IPv4 or IPv6 address, specifying the source address. The default is the wildcard address. *source_port*, an ``int``, the port from which to send the message. The default is 0. *one_rr_per_rrset*, a ``bool``. If ``True``, put each RR into its own RRset. *ignore_trailing*, a ``bool``. If ``True``, ignore trailing junk at end of the received message. *session*, an ``httpx.Client``. If provided, the client session to use to send the queries. *path*, a ``str``. If *where* is an IP address, then *path* will be used to construct the URL to send the DNS query to. *post*, a ``bool``. If ``True``, the default, POST method will be used. *bootstrap_address*, a ``str``, the IP address to use to bypass resolution. *verify*, a ``bool`` or ``str``. If a ``True``, then TLS certificate verification of the server is done using the default CA bundle; if ``False``, then no verification is done; if a `str` then it specifies the path to a certificate file or directory which will be used for verification. *resolver*, a ``dns.resolver.Resolver`` or ``None``, the resolver to use for resolution of hostnames in URLs. If not specified, a new resolver with a default configuration will be used; note this is *not* the default resolver as that resolver might have been configured to use DoH causing a chicken-and-egg problem. This parameter only has an effect if the HTTP library is httpx. *family*, an ``int``, the address family. If socket.AF_UNSPEC (the default), both A and AAAA records will be retrieved. *http_version*, a ``dns.query.HTTPVersion``, indicating which HTTP version to use. Returns a ``dns.message.Message``. FNzhttps://:z https://[z]:zno hostname in URL sni_hostnamez8session parameter must be a dns.quic.SyncQuicConnection.)rr connectionz)session parameter must be an httpx.Clientacceptzapplication/dns-messagerr|)r7http1http2rrr rr!)rrr transport)z content-typezcontent-length)headerscontentr extensions=r )rrparamsr+ responded with status code z Response body: keyring request_macrr)8rr r&r'r.AF_INETAF_INET6urllibparseurlparsehostnamerr6rrrhave_dohrr*randomchoicelistr+rfquicSyncQuicConnection_http3rchttpxClientto_wirerr contextlib nullcontextrKupdatestrlenrbase64urlsafe_b64encoderstripdecodeget status_codermessage from_wirerrelapsed total_secondsr is_responserb)"rrrr6r=rrrrrDrr rrr!rr<r9 the_sourceurlrparsedr:wirerh1h2r7rcmrresponsetwirerrrrhttpssG              rrrcCs.|durt|D] \}}||kr|Sqtr)KeyError)rrheadervaluerrr _find_headers rpeerrcCst|d}|dur tdt|}|dkrtd|dks!|dkrFd}t|dkr;zd|}Wn ty:Ynwt|d ||dS) Ns:statuszno :status header in responserzstatus is negativerrz: r)rr~intrrr2r)rrrrstatuserrorrrr _check_statuss   rrrc  CsVtjjstdtj|} | j} | dusJ| jdur| j}d|_ | }| r.t d}n tjj | | dd}|}|J| rA| }n|||||}t|\}}||}|||| |t|}t|||Wdn1suwYt}Wdn1swYtjj||j|j||d}t||d|_||st|S)Nz DNS-over-HTTP3 is not available.rT) verify_mode server_nameh3rr)r r have_quicrcrrrrr6idrrrSyncQuicManagerconnectr% make_streamsend_h3receiverrrr rrrrmaxrrb)rrrrr6r=rrrrrr url_partsrrmanager the_managerthe_connectionstartr streamfinishrrrrrsP         rcCs. z||WStyt||Ynwq)zReads a datagram from the socket. A Timeout exception will be raised if the operation is not completed by the expiration time. )recvfromBlockingIOErrorry)r>max_sizer rrr _udp_recvs  r cCs@ z|r |||WS||WStyt||Ynwq)zSends the specified datagram to destination over the socket. A Timeout exception will be raised if the operation is not completed by the expiration time. )sendtosendr r{)r>datarr rrr _udp_sends  rr>whatrr cCs4t|tjjr |}t}t||||}||fS)aSend a DNS message to the specified UDP socket. *sock*, a ``socket``. *what*, a ``bytes`` or ``dns.message.Message``, the message to send. *destination*, a destination tuple appropriate for the address family of the socket, specifying where to send the query. *expiration*, a ``float`` or ``None``, the absolute time at which a timeout exception should be raised. If ``None``, no timeout will occur. Returns an ``(int, float)`` tuple of bytes sent and the sent time. )rfr rMessagerr r)r>rrr sent_timenrrrsend_udps rrrrraise_on_truncation ignore_errorsqueryc  Csd} t|d|\} } t|j| ||sqt} ztjj| |||||d}Wn-tjjyH}z| rC| durC| |sCWYd}~qd}~wt yS| rRYqw| r`| dur`| |s`q|rf|| fS|| | fS)aRead a DNS message from a UDP socket. *sock*, a ``socket``. *destination*, a destination tuple appropriate for the address family of the socket, specifying where the message is expected to arrive from. When receiving a response, this would be where the associated query was sent. *expiration*, a ``float`` or ``None``, the absolute time at which a timeout exception should be raised. If ``None``, no timeout will occur. *ignore_unexpected*, a ``bool``. If ``True``, ignore responses from unexpected sources. *one_rr_per_rrset*, a ``bool``. If ``True``, put each RR into its own RRset. *keyring*, a ``dict``, the keyring to use for TSIG. *request_mac*, a ``bytes`` or ``None``, the MAC of the request (for TSIG). *ignore_trailing*, a ``bool``. If ``True``, ignore trailing junk at end of the received message. *raise_on_truncation*, a ``bool``. If ``True``, raise an exception if the TC bit is set. Raises if the message is malformed, if network errors occur, of if there is a timeout. If *destination* is not ``None``, returns a ``(dns.message.Message, float)`` tuple of the received message and the received time. If *destination* is ``None``, returns a ``(dns.message.Message, float, tuple)`` tuple of the received message, the received time, and the address where the message arrived from. *ignore_errors*, a ``bool``. If various format errors or response mismatches occur, ignore them and keep listening for a valid response. The default is ``False``. *query*, a ``dns.message.Message`` or ``None``. If not ``None`` and *ignore_errors* is ``True``, check that the received message is a response to this query, and if not keep listening for a valid response. rT)rrrrrN) r rr!r r rr Truncatedrr2)r>rr rrrrrrrrrr received_timererrr receive_udpsH>      r5c  Cs|} t||||d\} }}t|\}}| rt| }n | dus#Jt| tj|}|1}t|| ||t ||||||j |j || | | \}}|||_ | sT| |sTt|WdS1s`wY J)aReturn the response obtained after sending a query via UDP. *q*, a ``dns.message.Message``, the query to send *where*, a ``str`` containing an IPv4 or IPv6 address, where to send the message. *timeout*, a ``float`` or ``None``, the number of seconds to wait before the query times out. If ``None``, the default, wait forever. *port*, an ``int``, the port send the message to. The default is 53. *source*, a ``str`` containing an IPv4 or IPv6 address, specifying the source address. The default is the wildcard address. *source_port*, an ``int``, the port from which to send the message. The default is 0. *ignore_unexpected*, a ``bool``. If ``True``, ignore responses from unexpected sources. *one_rr_per_rrset*, a ``bool``. If ``True``, put each RR into its own RRset. *ignore_trailing*, a ``bool``. If ``True``, ignore trailing junk at end of the received message. *raise_on_truncation*, a ``bool``. If ``True``, raise an exception if the TC bit is set. *sock*, a ``socket.socket``, or ``None``, the socket to use for the query. If ``None``, the default, a socket is created. Note that if a socket is provided, it must be a nonblocking datagram socket, and the *source* and *source_port* are ignored. *ignore_errors*, a ``bool``. If various format errors or response mismatches occur, ignore them and keep listening for a valid response. The default is ``False``. Returns a ``dns.message.Message``. TN)rrr%rrr-r. SOCK_DGRAMrrrmacr rrb)rrrr6r=rrrrrr>rrr<r begin_timer rrxrrrrrudps>8      r#udp_socktcp_sockc Cs`zt|||||||||d| | } | dfWStjjy/t||||||||| } | dfYSw)a|Return the response to the query, trying UDP first and falling back to TCP if UDP results in a truncated response. *q*, a ``dns.message.Message``, the query to send *where*, a ``str`` containing an IPv4 or IPv6 address, where to send the message. *timeout*, a ``float`` or ``None``, the number of seconds to wait before the query times out. If ``None``, the default, wait forever. *port*, an ``int``, the port send the message to. The default is 53. *source*, a ``str`` containing an IPv4 or IPv6 address, specifying the source address. The default is the wildcard address. *source_port*, an ``int``, the port from which to send the message. The default is 0. *ignore_unexpected*, a ``bool``. If ``True``, ignore responses from unexpected sources. *one_rr_per_rrset*, a ``bool``. If ``True``, put each RR into its own RRset. *ignore_trailing*, a ``bool``. If ``True``, ignore trailing junk at end of the received message. *udp_sock*, a ``socket.socket``, or ``None``, the socket to use for the UDP query. If ``None``, the default, a socket is created. Note that if a socket is provided, it must be a nonblocking datagram socket, and the *source* and *source_port* are ignored for the UDP query. *tcp_sock*, a ``socket.socket``, or ``None``, the connected socket to use for the TCP query. If ``None``, the default, a socket is created. Note that if a socket is provided, it must be a nonblocking connected stream socket, and *where*, *source* and *source_port* are ignored for the TCP query. *ignore_errors*, a ``bool``. If various format errors or response mismatches occur while listening for UDP, ignore them and keep listening for a valid response. The default is ``False``. Returns a (``dns.message.Message``, tcp) tuple where tcp is ``True`` if and only if TCP was used. TF)r#r rrtcp) rrrr6r=rrrrr$r%rrrrrudp_with_fallbacks<9  r'c Csd}|dkrCz||}|dkrtd|t|8}||7}Wnttjfy0t||Yntjy>t||Ynw|dks|S)zRead the specified number of bytes from sock. Keep trying until we either get the desired amount, or we hit EOF. A Timeout exception will be raised if the operation is not completed by the expiration time. rrEOF) recvEOFErrorrr rgSSLWantReadErrorrySSLWantWriteErrorr{)r>countr rxrrrr _net_read7s    r.c Cs~d}t|}||kr=z ||||d7}Wnttjfy(t||Yntjy6t||Ynw||ks dSdS)zWrite the specified data to the socket. A Timeout exception will be raised if the operation is not completed by the expiration time. rN)rrr rgr,r{r+ry)r>rr currentlrrr _net_writeLsr1cCsPt|tjjr|jdd}n t|dd|}t}t|||t||fS)a{Send a DNS message to the specified TCP socket. *sock*, a ``socket``. *what*, a ``bytes`` or ``dns.message.Message``, the message to send. *expiration*, a ``float`` or ``None``, the absolute time at which a timeout exception should be raised. If ``None``, no timeout will occur. Returns an ``(int, float)`` tuple of bytes sent and the sent time. T)prepend_lengthrbig) rfr rrrrto_bytesr r1)r>rr tcpmsgrrrrsend_tcp\s   r6c CsLt|d|}td|\}t|||}t} tjj|||||d} | | fS)aRead a DNS message from a TCP socket. *sock*, a ``socket``. *expiration*, a ``float`` or ``None``, the absolute time at which a timeout exception should be raised. If ``None``, no timeout will occur. *one_rr_per_rrset*, a ``bool``. If ``True``, put each RR into its own RRset. *keyring*, a ``dict``, the keyring to use for TSIG. *request_mac*, a ``bytes`` or ``None``, the MAC of the request (for TSIG). *ignore_trailing*, a ``bool``. If ``True``, ignore trailing junk at end of the received message. Raises if the message is malformed, if network errors occur, of if there is a timeout. Returns a ``(dns.message.Message, float)`` tuple of the received message and the received time. r!Hr)r.structunpackr r rr) r>r rrrrldatar0rrrrrr receive_tcpzs ! r;cCs`||}|dkr dS|tjtjtjfvr"t|||tjtj }|dkr.t |t |dSrM) connect_exerrno EINPROGRESS EWOULDBLOCKEALREADYr{ getsockoptr. SOL_SOCKETSO_ERROROSErrorosstrerror)rxr;r errrrrr0s  r0c Cs|} t|\} } |rt|} nt||||d\} }}| dus#Jt| tj|} | 1}|s5t||| t || | t || ||j |j |\}}|| |_ ||sTt|WdS1s`wY J)aReturn the response obtained after sending a query via TCP. *q*, a ``dns.message.Message``, the query to send *where*, a ``str`` containing an IPv4 or IPv6 address, where to send the message. *timeout*, a ``float`` or ``None``, the number of seconds to wait before the query times out. If ``None``, the default, wait forever. *port*, an ``int``, the port send the message to. The default is 53. *source*, a ``str`` containing an IPv4 or IPv6 address, specifying the source address. The default is the wildcard address. *source_port*, an ``int``, the port from which to send the message. The default is 0. *one_rr_per_rrset*, a ``bool``. If ``True``, put each RR into its own RRset. *ignore_trailing*, a ``bool``. If ``True``, ignore trailing junk at end of the received message. *sock*, a ``socket.socket``, or ``None``, the connected socket to use for the query. If ``None``, the default, a socket is created. Note that if a socket is provided, it must be a nonblocking connected stream socket, and *where*, *port*, *source* and *source_port* are ignored. Returns a ``dns.message.Message``. TN)rr%rrrr-r.r/r0r6r;rr!r rrb)rrrr6r=rrrr>rr"r rr<rrxrrrrrr&s.+          r&cCsN z|WdStjyt||Yntjy%t||Ynwqr) do_handshakergr+ryr,r{rwrrr_tls_handshakesrIcheck_hostnamealpnscCsTtj|\}}tj||d}tjj|_||_|durtj |_ |dur(| ||S)aQMake an SSL context If *verify* is ``True``, the default, then certificate verification will occur using the standard CA roots. If *verify* is ``False``, then certificate verification will be disabled. If *verify* is a string which is a valid pathname, then if the pathname is a regular file, the CA roots will be taken from the file, otherwise if the pathname is a directory roots will be taken from the directory. If *check_hostname* is ``True``, the default, then the hostname of the server must be specified when connecting and the server's certificate must authorize the hostname. If ``False``, then hostname checking is disabled. *aplns* is ``None`` or a list of TLS ALPN (Application Layer Protocol Negotiation) strings to use in negotiation. For DNS-over-TLS, the right value is `["dot"]`. )cafilecapathFN) r _tls_util#convert_verify_to_cafile_and_capathrgcreate_default_context TLSVersionTLSv1_2minimum_versionrJ CERT_NONErset_alpn_protocols)rrJrKrLrMrrrrmake_ssl_contexts  rVcCst||dudgS)Ndot)rV)rrrrr_make_dot_ssl_context'srXUc  Cs|rt||||||||| S|} t|\} }t||||d\}}}|dus)J| dur6t| | dudg} t|tj| | |d4}t|||t ||t || |t ||||j |j |\}}|| |_||skt|WdS1swwY J)akReturn the response obtained after sending a query via TLS. *q*, a ``dns.message.Message``, the query to send *where*, a ``str`` containing an IPv4 or IPv6 address, where to send the message. *timeout*, a ``float`` or ``None``, the number of seconds to wait before the query times out. If ``None``, the default, wait forever. *port*, an ``int``, the port send the message to. The default is 853. *source*, a ``str`` containing an IPv4 or IPv6 address, specifying the source address. The default is the wildcard address. *source_port*, an ``int``, the port from which to send the message. The default is 0. *one_rr_per_rrset*, a ``bool``. If ``True``, put each RR into its own RRset. *ignore_trailing*, a ``bool``. If ``True``, ignore trailing junk at end of the received message. *sock*, an ``ssl.SSLSocket``, or ``None``, the socket to use for the query. If ``None``, the default, a socket is created. Note that if a socket is provided, it must be a nonblocking connected SSL stream socket, and *where*, *port*, *source*, *source_port*, and *ssl_context* are ignored. *ssl_context*, an ``ssl.SSLContext``, the context to use when establishing a TLS connection. If ``None``, the default, creates one with the default configuration. *server_hostname*, a ``str`` containing the server's hostname. The default is ``None``, which means that no hostname is known, and if an SSL context is created, hostname checking will be disabled. *verify*, a ``bool`` or ``str``. If a ``True``, then TLS certificate verification of the server is done using the default CA bundle; if ``False``, then no verification is done; if a `str` then it specifies the path to a certificate file or directory which will be used for verification. Returns a ``dns.message.Message``. TNrW)rrr=)r&rr%rrVrr.r/r0rIr6r;rr!r rrb)rrrr6r=rrrr>rrrrr"r r<rrxrrrrrtls-sR=         rZrc  Cs&tjjstd| dur| dur| } d|_|} |r#td} |}n tjj| | d} | }| >|s:| ||||}t |\}}| |}| | d| t|} Wdn1s]wYt}Wdn1spwYtjj| |j|j||d}t||d|_||st|S)aReturn the response obtained after sending a query via DNS-over-QUIC. *q*, a ``dns.message.Message``, the query to send. *where*, a ``str``, the nameserver IP address. *timeout*, a ``float`` or ``None``, the number of seconds to wait before the query times out. If ``None``, the default, wait forever. *port*, a ``int``, the port to send the query to. The default is 853. *source*, a ``str`` containing an IPv4 or IPv6 address, specifying the source address. The default is the wildcard address. *source_port*, an ``int``, the port from which to send the message. The default is 0. *one_rr_per_rrset*, a ``bool``. If ``True``, put each RR into its own RRset. *ignore_trailing*, a ``bool``. If ``True``, ignore trailing junk at end of the received message. *connection*, a ``dns.quic.SyncQuicConnection``. If provided, the connection to use to send the query. *verify*, a ``bool`` or ``str``. If a ``True``, then TLS certificate verification of the server is done using the default CA bundle; if ``False``, then no verification is done; if a `str` then it specifies the path to a certificate file or directory which will be used for verification. *hostname*, a ``str`` containing the server's hostname or ``None``. The default is ``None``, which means that no hostname is known, and if an SSL context is created, hostname checking will be disabled. This value is ignored if *url* is not ``None``. *server_hostname*, a ``str`` or ``None``. This item is for backwards compatibility only, and has the same meaning as *hostname*. Returns a ``dns.message.Message``. zDNS-over-QUIC is not available.Nr)rrTrr)r rrrdrrrrrrr%rrrrr rrrrrrrb)rrrr6r=rrrrrrrrrrrrr rrrrrrrsH7       rc@seZdZdZdZdZdZdS)UDPModeaHow should UDP be used in an IXFR from :py:func:`inbound_xfr()`? NEVER means "never use UDP; always use TCP" TRY_FIRST means "try to use UDP but fall back to TCP if needed" ONLY means "raise ``dns.xfr.UseTCP`` if trying UDP does not succeed" rr|rN)rGrHrIr`NEVER TRY_FIRSTONLYrrrrr[s r[ txn_managerrxserialc cs|jdj}|tjjk}|}|} t|tjo |j tj k} | r+t || d|nt dt| | } t|| |tj|||| } d} d}d}| st|\}}|dus_|dura||kra|}| rlt|d|\}}nt|d|}t d|\}t|||}tjj||j|jd||| |d}| |} |V|j}| rM|jr|dur|jstjd WddSWddSWddS1swYdS) z'Given a socket, does the zone transfer.rNr7FrrT)rrxfrorigintsig_ctxmultirz missing TSIG)questionrdtyper rdatatypeIXFRfrom_wire_originrrfr.rr rr8packrr1raInboundr%r r.r9rrrr!process_messagerchad_tsigr FormError)r_rxrr`rr rfis_ixfrrbris_udpr5inbounddonercrr9 mexpirationrwirer:r0rrr _inbound_xfrs\       "ruzonerfrdclasskeyname relativizer$use_udp keyalgorithmccsfGdddtjj}t|trtj|}tjj |}tj |||}|tjj krL|j |j|tjjtjjdd}tjddd| d}||d |d urX|j|||d t||| | d\}}} |d usiJt| \}}|||}| r|tjj krtd | rtjntj}t||| }t|||t|||| ||Ed HWd d S1swYd S) aReturn a generator for the responses to a zone transfer. *where*, a ``str`` containing an IPv4 or IPv6 address, where to send the message. *zone*, a ``dns.name.Name`` or ``str``, the name of the zone to transfer. *rdtype*, an ``int`` or ``str``, the type of zone transfer. The default is ``dns.rdatatype.AXFR``. ``dns.rdatatype.IXFR`` can be used to do an incremental transfer instead. *rdclass*, an ``int`` or ``str``, the class of the zone transfer. The default is ``dns.rdataclass.IN``. *timeout*, a ``float``, the number of seconds to wait for each response message. If None, the default, wait forever. *port*, an ``int``, the port send the message to. The default is 53. *keyring*, a ``dict``, the keyring to use for TSIG. *keyname*, a ``dns.name.Name`` or ``str``, the name of the TSIG key to use. *relativize*, a ``bool``. If ``True``, all names in the zone will be relativized to the zone origin. It is essential that the relativize setting matches the one specified to ``dns.zone.from_xfr()`` if using this generator to make a zone. *lifetime*, a ``float``, the total number of seconds to spend doing the transfer. If ``None``, the default, then there is no limit on the time the transfer may take. *source*, a ``str`` containing an IPv4 or IPv6 address, specifying the source address. The default is the wildcard address. *source_port*, an ``int``, the port from which to send the message. The default is 0. *serial*, an ``int``, the SOA serial number to use as the base for an IXFR diff sequence (only meaningful if *rdtype* is ``dns.rdatatype.IXFR``). *use_udp*, a ``bool``. If ``True``, use UDP (only meaningful for IXFR). *keyalgorithm*, a ``dns.name.Name`` or ``str``, the TSIG algorithm to use. Raises on errors, and so does the generator. Returns a generator of ``dns.message.Message`` objects. c@sNeZdZddZddZdejjfddZdd Z dd e dej j fd d Z dS)z$xfr..DummyTransactionManagercSs|||rtjjn|f|_dSr)r remptyinfo)rrbryrrrrsz-xfr..DummyTransactionManager.__init__cS|jSr)r}rrrrorigin_informationz7xfr..DummyTransactionManager.origin_informationrZcSrArrBrrrr get_classrWz.xfr..DummyTransactionManager.get_classcSrArrBrrrrreaderrWz+xfr..DummyTransactionManager.readerF replacementcSsGddd}ttjj|S)Nc@seZdZddZddZdS)zExfr..DummyTransactionManager.writer..DummyTransactionc_rVrr)rrRkwrrrnoprWzIxfr..DummyTransactionManager.writer..DummyTransaction.nopcSr~r)r)rr9rrr __getattr__rzQxfr..DummyTransactionManager.writer..DummyTransaction.__getattr__N)rGrHrIrrrrrrDummyTransactions r)rr transaction Transaction)rrrrrrwritersz+xfr..DummyTransactionManager.writerN)F)rGrHrIrrr rdataclass RdataClassrrboolrrrrrrrDummyTransactionManagers rT)createINSOAz. . z 0 0 0 0rN) algorithmzcannot do a UDP AXFR)r rTransactionManagerrfrr from_textrg RdataTypemaker make_queryrh find_rrset authorityrrrrdataadduse_tsigrr%rr.r r/r-r0ru)rrvrfrwrr6rrxryr$r=rr`rzr{rrrrsetsoar<rr9r tm sock_typerxrrrra;s6E         "raudp_modec  CsR|dur tj|\}} ntj|} t||||d\} } }| dus$Jt|\} } |jdjtjj kr}|t j kr}t | t j|5}t|| | zt|||| || D]} qQWWddStjjym|t jkrkYnwWdn1sxwYt | t j|}t|| | t|||| || D]} qWddS1swYdS)aConduct an inbound transfer and apply it via a transaction from the txn_manager. *where*, a ``str`` containing an IPv4 or IPv6 address, where to send the message. *txn_manager*, a ``dns.transaction.TransactionManager``, the txn_manager for this transfer (typically a ``dns.zone.Zone``). *query*, the query to send. If not supplied, a default query is constructed using information from the *txn_manager*. *port*, an ``int``, the port send the message to. The default is 53. *timeout*, a ``float``, the number of seconds to wait for each response message. If None, the default, wait forever. *lifetime*, a ``float``, the total number of seconds to spend doing the transfer. If ``None``, the default, then there is no limit on the time the transfer may take. *source*, a ``str`` containing an IPv4 or IPv6 address, specifying the source address. The default is the wildcard address. *source_port*, an ``int``, the port from which to send the message. The default is 0. *udp_mode*, a ``dns.query.UDPMode``, determines how UDP is used for IXFRs. The default is ``dns.query.UDPMode.NEVER``, i.e. only use TCP. Other possibilities are ``dns.query.UDPMode.TRY_FIRST``, which means "try UDP but fallback to TCP if needed", and ``dns.query.UDPMode.ONLY``, which means "try UDP and raise ``dns.xfr.UseTCP`` if it does not succeed. Raises on errors. NTr)r rarextract_serial_from_queryrr%rerfrgrhr[r\r-r.r r0ruUseTCPr^r/)rr_rr6rr$r=rrr`r<rr9r rxrrr inbound_xfrs>/        "r)TrrF) NrNrFFTTN) NNFFNrFFFN) NrNrFFFFNF) NrNrFFFNNF)NFNrF)NrNrFFN)TTN) NrYNrFFNNNT) NrYNrFFNTNN)r`rrenumr=rErrjr.r8r urllib.parsertypingrrrrrr dns._featuresr dns._tls_util dns.exceptiondns.inet dns.messagedns.namedns.quic dns.rdatadns.rdataclass dns.rdatatypedns.transactiondns.tsigdns.xfrrg ImportError dns._no_ssl_no_sslrr _featureshave _have_httpxhttpcore._backends.syncr3rNetworkBackend_CoreNetworkBackend _backendssync SyncStreamr1r HTTPTransportrKr AddressFamilyr SocketKindr[r\__annotations__r DNSExceptionr^rnrbrcrdra TransferErrorr%ruryr{rrrr- SSLContextrrrrhrrrIntEnumrrUrrrfloatrrrHeadersbytesrrrrr rrtsigKeyrr#r'r.r1r6r;r0r&rIrrVrXrZr[rrrurgAXFRrrdefault_algorithmrrr\rrrrrsZ     6    / % +        P      =        m     _     X     /  F   "       o     a   7          y