1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
|
# $Id$
import base64, sax_utils, resource_set
# This is still pretty nasty, feels much too complex for a relatively
# simple task.
class base_elt(object):
"""
Base type for left-right message elements.
"""
# This isn't quite right, as_number is only multivalue in some elements.
# Live with it for the moment, fix after code stablizes.
multivalue = ("peer_contact", "signing_cert", "extension_preference", "resource_class",
"as_number", "as_range", "subset_as_number", "subset_as_range",
"ipv4_prefix", "ipv4_range", "subset_ipv4_prefix", "subset_ipv4_range",
"ipv6_prefix", "ipv6_range", "subset_ipv6_prefix", "subset_ipv6_range")
b64content = ("peer_ta", "pkcs10_cert_request", "public_key", "signing_cert")
pdu_objects = ("self", "child", "parent", "bsc", "repository", "route_origin",
"list_resources", "report_error")
def store(self, key, val):
if key not in self.multivalue:
assert not getattr(self, key)
setattr(self, key, val)
elif hasattr(self, key):
getattr(self, key).append(val)
else:
setattr(self, key, [val])
def startElement(self, stack, name, attrs):
if name not in type_map:
getattr(self, "handle_" + name)(stack, name, attrs)
elif type(self) is type_map(name):
sax_utils.snarf_attribute(self, attrs, self.attributes)
else:
elt = type_map[name]()
stack.append(elt)
self.store(name, elt)
elt.startElement(stack, name, attrs)
def endElement(self, stack, name, text):
if name in self.b64content:
self.store(name, base64.b64decode(text))
if name in type_map:
stack.pop()
def boolean_handler(stack, name, attrs):
setattr(self, name, True)
handle_publish_world_now = boolean_handler
handle_reissue = boolean_handler
handle_rekey = boolean_handler
handle_revoke = boolean_handler
handle_run_now = boolean_handler
handle_suppress_publication = boolean_handler
def handle_generate_keypair(stack, name, attrs):
self.boolean_handler(stack, name, attrs)
sax_utils.snarf_attribute(self, attrs, ("key_type", "hash_alg", "key_length"))
def id_handler(stack, name, attrs):
sax_utils.snarf_attribute(self, attrs, "id")
handle_bsc_link = id_handler
handle_child_db_id = id_handler
handle_repository_link = id_handler
handle_sia_base = id_handler
def handle_peer_contact(stack, name, attrs):
self.peer_contact = attrs.getValue("uri").encode("ascii")
# Mumble, really should be using resource_set types here, more
# idiocy due to premature optimization
# Special case for dumb reasons, fix later
def handle_as_number(stack, name, attrs):
asn = long(attrs.getValue("asn"))
if isinstance(self, route_origin_elt):
assert not hasattr(self, name)
self.as_number = asn
else:
self.store(name, resource_range_as(asn, asn))
def handle_subset_as_number(stack, name, attrs):
asn = long(attrs.getValue("asn"))
self.store(name, resource_range_as(asn, asn))
def handle_as_range(stack, name, attrs):
self.store(name, resource_range_as(long(attrs.getValue("min")),
long(attrs.getValue("max"))))
handle_subset_as_range = handle_as_range
def handle_ipv4_range(stack, name, attrs):
self.store(name, resource_range_ipv4(ipaddrs.v4addr(attrs.getValue("min")),
ipaddrs.v4addr(attrs.getValue("max"))))
handle_subset_ipv4_range = handle_ipv4_range
def handle_ipv6_range(stack, name, attrs):
self.store(name, resource_range_ipv6(ipaddrs.v6addr(attrs.getValue("min")),
ipaddrs.v6addr(attrs.getValue("max"))))
handle_subset_ipv6_range = handle_ipv6_range
# Haven't written (subset_)?ipv[46]_prefix() handlers yet. Some of the code for
# that might belong in resource_set.py instead of here.
class self_elt(base_elt):
attributes = ("action", "self_id")
class bsc_elt(base_elt):
attributes = ("action", "self_id", "bsc_id")
class parent_elt(base_elt):
attributes = ("action", "self_id", "parent_id")
class child_elt(base_elt):
attributes = ("action", "self_id", "child_id")
class repository_elt(base_elt):
attributes = ("action", "self_id", "repository_id")
class route_origin_elt(base_elt):
attributes = ("action", "self_id", "route_origin_id")
class list_resources_elt(base_elt):
attributes = ("self_id", "child_id")
class report_error_elt(base_elt):
attributes = ("self_id", "error_code")
class msg(list):
"""
Left-right PDU.
"""
spec_uri = "http://www.hactrn.net/uris/rpki/left-right-spec/"
version = 1
dispatch = {
"self" : self_elt,
"child" : child_elt,
"parent" : parent_elt,
"repository" : repository_elt,
"route_origin" : route_origin_elt,
"bsc" : bsc_elt,
"list_resources" : list_resources_elt,
"report_error" : report_error_elt }
def startElement(self, stack, name, attrs):
if name == "msg":
sax_utils.snarf_attribute(self, attrs, "version", int)
sax_utils.snarf_attribute(self, attrs, "type")
assert self.version == 1
else:
assert name in self.dispatch
elt = self.dispatch[name](self)
self.append(elt)
stack.append(elt)
elt.startElement(stack, name, attrs)
def endElement(self, stack, name, text):
assert name == "msg"
assert len(stack) == 1
def __str__(self):
return ('<?xml version="1.0" encoding="US-ASCII" ?>\n'
'<msg xmlns="%s" version="%d" type="%s">\n' \
% (self.spec_uri, self.version, self.type)
) + "".join(map(str,self)) + "</msg>\n"
class sax_handler(sax_utils.handler):
"""
SAX handler for Left-Right protocol.
"""
def startElement(self, name, attrs):
if name == "msg":
self.stack = [msg()]
self.stack[-1].startElement(self.stack, name, attrs)
def endElement(self, name):
self.stack[-1].endElement(self.stack, name, self.get_text())
if name == "msg":
assert len(self.stack) == 1
self.set_obj(self.stack[0])
type_map = {
"msg" : msg_elt,
"self" : self_elt,
"child" : child_elt,
"parent" : parent_elt,
"repository" : repository_elt,
"route_origin" : route_origin_elt,
"bsc" : bsc_elt,
"list_resources" : list_resources_elt,
"report_error" : report_error_elt,
"extension_preference" : extension_preference_elt,
"resource_class" : resource_class_elt
}
# bsc_link ; attribute-only element
# child_db_id ; attribute-only element
# repository_link ; attribute-only element
# sia_base ; attribute-only element
#
# as_number ; attribute-only element, single/multi depending on context (sigh)
# as_range ; attribute-only element, multi
# ipv4_prefix ; attribute-only element, multi
# ipv4_range ; attribute-only element, multi
# ipv6_prefix ; attribute-only element, multi
# ipv6_range ; attribute-only element, multi
# peer_contact ; attribute-only element, multi
# subset_as_number ; attribute-only element, multi
# subset_as_range ; attribute-only element, multi
# subset_ipv4_prefix ; attribute-only element, multi
# subset_ipv4_range ; attribute-only element, multi
# subset_ipv6_prefix ; attribute-only element, multi
# subset_ipv6_range ; attribute-only element, multi
#
# peer_ta ; base64 element
# pkcs10_cert_request ; base64 element
# public_key ; base64 element
# signing_cert ; base64 element, multi
#
# extension_preference ; container element, multi
# resource_class ; container element, multi
#
# generate_keypair ; attribute-only control element
# publish_world_now ; empty control element
# reissue ; empty control element
# rekey ; empty control element
# revoke ; empty control element
# run_now ; empty control element
# suppress_publication ; empty control element
#
# msg ; pdu
# bsc ; pdu element
# child ; pdu element
# list_resources ; pdu element
# parent ; pdu element
# report_error ; pdu element
# repository ; pdu element
# route_origin ; pdu element
# self ; pdu element
|
