Example #1
0
    def main(cls):
        from keystone.token.providers.fernet import utils as fernet

        keystone_user_id, keystone_group_id = cls.get_user_group()
        fernet.create_key_directory(keystone_user_id, keystone_group_id)
        if fernet.validate_key_repository(requires_write=True):
            fernet.initialize_key_repository(keystone_user_id, keystone_group_id)
Example #2
0
    def main(cls):
        from keystone.token.providers.fernet import utils as fernet

        keystone_user_id, keystone_group_id = cls.get_user_group()
        fernet.create_key_directory(keystone_user_id, keystone_group_id)
        if fernet.validate_key_repository(requires_write=True):
            fernet.initialize_key_repository(keystone_user_id,
                                             keystone_group_id)
Example #3
0
def symptom_usability_of_Fernet_key_repository():
    """Fernet key repository is not setup correctly.

    The Fernet key repository is expected to be readable by the user running
    keystone, but not world-readable, because it contains security-sensitive
    secrets.
    """
    return ('fernet' in CONF.token.provider
            and not fernet_utils.validate_key_repository())
Example #4
0
def symptom_usability_of_Fernet_key_repository():
    """Fernet key repository is not setup correctly.

    The Fernet key repository is expected to be readable by the user running
    keystone, but not world-readable, because it contains security-sensitive
    secrets.
    """
    return (
        'fernet' in CONF.token.provider
        and not fernet_utils.validate_key_repository())
Example #5
0
    def main(cls):
        from keystone.token.providers.fernet import utils as fernet

        keystone_user_id, keystone_group_id = cls.get_user_group()
        if fernet.validate_key_repository():
            fernet.rotate_keys(keystone_user_id, keystone_group_id)
Example #6
0
 def main(cls):
     keystone_user_id, keystone_group_id = cls.get_user_group()
     if fernet.validate_key_repository():
         fernet.rotate_keys(keystone_user_id, keystone_group_id)
Example #7
0
 def main(cls):
     keystone_user_id, keystone_group_id = cls.get_user_group()
     fernet.create_key_directory(keystone_user_id, keystone_group_id)
     if fernet.validate_key_repository():
         fernet.initialize_key_repository(
             keystone_user_id, keystone_group_id)
Example #8
0
 def main(cls):
     keystone_user_id, keystone_group_id = cls.get_user_group()
     if fernet.validate_key_repository():
         fernet.rotate_keys(keystone_user_id, keystone_group_id)
Example #9
0
 def main(cls):
     keystone_user_id, keystone_group_id = cls.get_user_group()
     fernet.create_key_directory(keystone_user_id, keystone_group_id)
     if fernet.validate_key_repository():
         fernet.initialize_key_repository(
             keystone_user_id, keystone_group_id)