def __init__(self,name,plugin):
self.name = name
# set config defaults
self.key_default_bits = '2048'
self.key_default_algorithm = 'rsa'
self.req_default_md = 'sha512'
self.cert_default_md = 'sha512'
self.cert_default_days = '365'
self.cert_default_extensions = None
self.ca_days = '1096'
self.dn_fields = [ 'C', 'ST', 'L', 'O', 'OU', 'CN' ]
self.dn_defaults = {}
self.extensions = {}
self.basepath = '%s/CA/%s' % (plugin.data,self.name)
self.plugin = plugin
# read configuration file
self.readBasicConfig()
self.readDNDefaultConfig()
self.readExtensionsConfig()
# initialize object index & make methods available
self.index = SSLObjIndex(self)
class SSLCA(object):
"""
An object representing a CA
The CA maintains configuration for generating SSL objects, and
contains an object index to look up existing and store new objects
"""
def __init__(self,name,plugin):
self.name = name
# set config defaults
self.key_default_bits = '2048'
self.key_default_algorithm = 'rsa'
self.req_default_md = 'sha512'
self.cert_default_md = 'sha512'
self.cert_default_days = '365'
self.cert_default_extensions = None
self.ca_days = '1096'
self.dn_fields = [ 'C', 'ST', 'L', 'O', 'OU', 'CN' ]
self.dn_defaults = {}
self.extensions = {}
self.basepath = '%s/CA/%s' % (plugin.data,self.name)
self.plugin = plugin
# read configuration file
self.readBasicConfig()
self.readDNDefaultConfig()
self.readExtensionsConfig()
# initialize object index & make methods available
self.index = SSLObjIndex(self)
def config(self,*args,**kwargs):
'''Convenience function to call self.plugin.config with self.name'''
return self.plugin.config(self.name,*args,**kwargs)
def readBasicConfig(self):
'''
Process the config file section for this CA [zbca:ca_name]
'''
for opt, val in self.config():
if opt == 'dn_fields':
val = [s.strip().lower() for s in val.split(',')]
setattr(self,opt,val)
def readDNDefaultConfig(self):
'''
Process the dn-defaults config file section for this CA
[zbca:ca_name-dn-defaults]
'''
for opt, val in self.config('dn-defaults'):
self.dn_defaults[opt.lower()] = val
def readExtensionsConfig(self):
'''
Process the extensions config file sections for this CA:
[zbca:ca_name-extensions-foo]
'''
for suffix,sect in self.config('extensions',True):
self.extensions[suffix] = {}
for opt, val in sect:
self.extensions[suffix][opt] = val
def defaultExtensions(self):
'''
Convenience function returns default extensions dict
'''
return self.extensions.get(self.cert_default_extensions,None)
def initSSLObj(self, attrs, metadata):
'''
Retrieve an existing SSL object from the object index,
or if none exists, generate a new one
'''
elt = self.index.searchAttrs(attrs)
if elt is not None:
# object exists in index, so build the object from the
# element passed back by the exception
obj = SSLObj.init(self,elt,metadata)
else:
# generate new object from attrs
obj = SSLObj.init(self, attrs, metadata)
# store object in index and save the index
if obj.store:
self.index.store(obj)
self.index.write()
return obj
def newSerial(self):
'''
Retrieve the CA State 'serial' variable, increment the value,
save the variable, and return the value
We don't save the index yet; the index should be together with the
cert for consistency
'''
serial = self.index.getCAState('serial',default=0,coerce=int)+1
self.index.setCAState('serial',serial)
return serial
def tostring(self):
'''Return a string representation of the CA object'''
return pformat (self.__dict__)
