# $Id$ """RPKI "up-down" protocol.""" import base64, sax_utils, resource_set, lxml.etree, x509 xmlns="http://www.apnic.net/specs/rescerts/up-down/" nsmap = { None : xmlns } class base_elt(object): """Generic PDU object. Virtual class, just provides some default methods. """ def startElement(self, stack, name, attrs): """Ignore startElement() if there's no specific handler. Some elements have no attributes and we only care about their text content. """ pass def endElement(self, stack, name, text): """Ignore endElement() if there's no specific handler. If we don't need to do anything else, just pop the stack. """ stack.pop() def make_elt(self, name, *attrs): """Construct a element, copying over a set of attributes.""" elt = lxml.etree.Element("{%s}%s" % (xmlns, name), nsmap=nsmap) for key in attrs: val = getattr(self, key, None) if val is not None: elt.set(key, str(val)) return elt def make_b64elt(self, elt, name, value=None): """Construct a sub-element with Base64 text content.""" if value is None: value = getattr(self, name, None) if value is not None: lxml.etree.SubElement(elt, "{%s}%s" % (xmlns, name), nsmap=nsmap).text = base64.b64encode(value) class multi_uri(list): """Container for a set of URIs.""" def __init__(self, ini): """Initialize a set of URIs, which includes basic some syntax checking.""" if isinstance(ini, (list, tuple)): self[:] = ini elif isinstance(ini, str): self[:] = ini.split(",") for s in self: assert s.strip() == s and s.find("://") >= 0, "Bad URI \"%s\"" % s else: raise TypeError def __str__(self): return ",".join(self) def rsync(self): """Find first rsync://... URI in self.""" for s in self: if s.startswith("rsync://"): return s return None class certificate_elt(base_elt): """Up-Down protocol representation of an issued certificate.""" def startElement(self, stack, name, attrs): """Handle attributes of element.""" assert name == "certificate", "Unexpected name %s, stack %s" % (name, stack) self.cert_url = multi_uri(attrs["cert_url"]) self.req_resource_set_as = resource_set.resource_set_as(attrs.get("req_resource_set_as")) self.req_resource_set_ipv4 = resource_set.resource_set_ipv4(attrs.get("req_resource_set_ipv4")) self.req_resource_set_ipv6 = resource_set.resource_set_ipv6(attrs.get("req_resource_set_ipv6")) def endElement(self, stack, name, text): """Handle text content of a element.""" assert name == "certificate" self.cert = x509.X509(Base64=text) stack.pop() def toXML(self): """Generate a element.""" elt = self.make_elt("certificate", "cert_url", "req_resource_set_as", "req_resource_set_ipv4", "req_resource_set_ipv6") elt.text = self.cert.get_Base64() return elt class class_elt(base_elt): """Up-Down protocol representation of a resource class.""" def __init__(self): self.certs = [] def startElement(self, stack, name, attrs): """Handle elements and their children.""" if name == "certificate": cert = certificate_elt() self.certs.append(cert) stack.append(cert) cert.startElement(stack, name, attrs) elif name != "issuer": assert name == "class", "Unexpected name %s, stack %s" % (name, stack) self.class_name = attrs["class_name"] self.cert_url = multi_uri(attrs["cert_url"]) self.suggested_sia_head = attrs.get("suggested_sia_head") self.resource_set_as = resource_set.resource_set_as(attrs["resource_set_as"]) self.resource_set_ipv4 = resource_set.resource_set_ipv4(attrs["resource_set_ipv4"]) self.resource_set_ipv6 = resource_set.resource_set_ipv6(attrs["resource_set_ipv6"]) def endElement(self, stack, name, text): """Handle elements and their children.""" if name == "issuer": self.issuer = x509.X509(Base64=text) else: assert name == "class", "Unexpected name %s, stack %s" % (name, stack) stack.pop() def toXML(self): """Generate a element.""" elt = self.make_elt("class", "class_name", "cert_url", "resource_set_as", "resource_set_ipv4", "resource_set_ipv6", "suggested_sia_head") elt.extend([i.toXML() for i in self.certs]) self.make_b64elt(elt, "issuer", self.issuer.get_DER()) return elt class list_pdu(base_elt): """Up-Down protocol "list" PDU.""" def toXML(self): """Generate (empty) payload of "list" PDU.""" return [] class list_response_pdu(base_elt): """Up-Down protocol "list_response" PDU.""" def __init__(self): self.classes = [] def startElement(self, stack, name, attrs): """Handle "list_response" PDU.""" assert name == "class", "Unexpected name %s, stack %s" % (name, stack) klass = class_elt() self.classes.append(klass) stack.append(klass) klass.startElement(stack, name, attrs) def toXML(self): """Generate payload of "list_response" PDU.""" return [i.toXML() for i in self.classes] class issue_pdu(base_elt): """Up-Down protocol "issue" PDU.""" def startElement(self, stack, name, attrs): """Handle "issue" PDU.""" assert name == "request", "Unexpected name %s, stack %s" % (name, stack) self.class_name = attrs["class_name"] self.req_resource_set_as = resource_set.resource_set_as(attrs.get("req_resource_set_as")) self.req_resource_set_ipv4 = resource_set.resource_set_ipv4(attrs.get("req_resource_set_ipv4")) self.req_resource_set_ipv6 = resource_set.resource_set_ipv6(attrs.get("req_resource_set_ipv6")) def endElement(self, stack, name, text): """Handle "issue" PDU.""" assert name == "request", "Unexpected name %s, stack %s" % (name, stack) self.pkcs10 = x509.PKCS10_Request(Base64=text) stack.pop() def toXML(self): """Generate payload of "issue" PDU.""" elt = self.make_elt("request", "class_name", "req_resource_set_as", "req_resource_set_ipv4", "req_resource_set_ipv6") elt.text = self.pkcs10.get_Base64() return [elt] class issue_response_pdu(list_response_pdu): """Up-Down protocol "issue_response" PDU.""" def toXML(self): """Generate payload of "issue_response" PDU.""" assert len(self.classes) == 1 return list_response_pdu.toXML(self) class revoke_pdu(base_elt): """Up-Down protocol "revoke" PDU.""" def startElement(self, stack, name, attrs): """Handle "revoke" PDU.""" self.class_name = attrs["class_name"] self.ski = attrs["ski"] def toXML(self): """Generate payload of "revoke" PDU.""" return [self.make_elt("key", "class_name", "ski")] class revoke_response_pdu(revoke_pdu): """Up-Down protocol "revoke_response" PDU.""" pass class error_response_pdu(base_elt): """Up-Down protocol "error_response" PDU.""" codes = { 1101 : "Already processing request", 1102 : "Version number error", 1103 : "Unrecognised request type", 1201 : "Request - no such resource class", 1202 : "Request - no resources allocated in resource class", 1203 : "Request - badly formed certificate request", 1301 : "Revoke - no such resource class", 1302 : "Revoke - no such key", 2001 : "Internal Server Error - Request not performed" } def endElement(self, stack, name, text): """Handle "error_response" PDU.""" if name == "status": code = int(text) assert code in self.codes self.status = code elif name == "last_message_processed": self.last_message_processed = text elif name == "description": self.description = text else: assert name == "message", "Unexpected name %s, stack %s" % (name, stack) stack.pop() stack[-1].endElement(stack, name, text) def toXML(self): """Generate payload of "error_response" PDU.""" assert self.status in self.codes elt = self.make_elt("status") elt.text = str(self.status) return [elt] class message_pdu(base_elt): """Up-Down protocol message wrapper PDU.""" version = 1 def toXML(self): """Generate payload of message PDU.""" elt = self.make_elt("message", "version", "sender", "recipient", "type") elt.extend(self.payload.toXML()) return elt def startElement(self, stack, name, attrs): """Handle message PDU. Payload of the element varies depending on the "type" attribute, so after some basic checks we have to instantiate the right class object to handle whatever kind of PDU this is. """ assert name == "message", "Unexpected name %s, stack %s" % (name, stack) assert self.version == int(attrs["version"]) self.sender = attrs["sender"] self.recipient = attrs["recipient"] self.type = attrs["type"] self.payload = { "list" : list_pdu, "list_response" : list_response_pdu, "issue" : issue_pdu, "issue_response" : issue_response_pdu, "revoke" : revoke_pdu, "revoke_response" : revoke_response_pdu, "error_response" : error_response_pdu }[attrs["type"]]() stack.append(self.payload) def __str__(self): lxml.etree.tostring(self.toXML(), pretty_print=True, encoding="UTF-8") class sax_handler(sax_utils.handler): """SAX handler for Up-Down protocol.""" def create_top_level(self, name, attrs): """Top-level PDU for this protocol is .""" return message_pdu()