Esempio n. 1
0
    def test_clear(self):
        repoid = 'repo1'
        self.test_repo_first_time(repoid)
        client = None
        cf = CertFiles(TEST_CERT_ROOT_DIR, repoid)
        cf.update(client)

        cf.apply()

        rootdir = os.path.join(TEST_CERT_ROOT_DIR, repoid)
        self.assertFalse(os.path.exists(rootdir))
Esempio n. 2
0
def _handle_client_cert(repo, rootdir, clientcert):
    """
    Handle the x.509 client certificate that was specified with the repo.
    The cert file will be written to disk, deleting any existing
    files that were there. The repo object will be updated with the
    sslclientcert setting related to the stored certificates.
    """
    certificates = CertFiles(rootdir, repo.id)
    certificates.update(clientcert)
    clientpath = certificates.apply()
    # client certificate
    if clientcert:
        repo['sslclientcert'] = clientpath
Esempio n. 3
0
    def test_repo_first_time(self, repoid='repo1'):
        repoid = 'repo1'
        client = 'MY-CLIENT-KEY_AND_CERT'
        cf = CertFiles(TEST_CERT_ROOT_DIR, repoid)

        cf.update(client)

        clientpath = cf.apply()
        rootdir = os.path.join(TEST_CERT_ROOT_DIR, repoid)
        self.assertTrue(os.path.exists(rootdir))
        self.assertEqual(clientpath, os.path.join(rootdir, CertFiles.CLIENT))
        f = open(clientpath)
        pem = f.read()
        f.close()
        self.assertEqual(pem, client)
Esempio n. 4
0
def unbind(repo_filename, mirror_list_filename, keys_root_dir, cert_root_dir, repo_id, lock=None):
    """
    Removes the repo identified by repo_id from the given repo file. If the repo is
    not bound, this call has no effect. If the mirror list file exists, it will be
    deleted.

    The default lock is defined at the module level and is
    used to ensure that concurrent access to the give files is prevented. Specific
    locks can be passed in for testing purposes to circumvent the default
    location of the lock which requires root access.

    @param repo_filename: full path to the location of the repo file in which
                          the repo will be removed; if this file does not exist
                          this call has no effect
    @type  repo_filename: string

    @param mirror_list_filename: full path to the location of the mirror list file
                                 that may exist for the given repo; if the file does
                                 not exist this field will be ignored
    @type  mirror_list_filename: string

    @param keys_root_dir: absolute path to the root directory in which the keys for
                          all repos will be stored
    @type  keys_root_dir: string

    @param cert_root_dir: absolute path to the root directory in which the certs for
                          all repos will be stored
    @type  cert_root_dir: string

    @param repo_id: identifies the repo in the repo file to delete
    @type  repo_id: string

    @param lock: if the default lock is unacceptable, it may be overridden in this variable
    @type  lock: L{Lock}
    """

    if not lock:
        lock = Lock(LOCK_FILE)

    lock.acquire()
    try:
        log.info('Unbinding repo [%s]' % repo_id)

        if not os.path.exists(repo_filename):
            return

        # Repo file changes
        repo_file = RepoFile(repo_filename)
        repo_file.load()
        repo_file.remove_repo_by_name(repo_id)  # will not throw an error if repo doesn't exist
        repo_file.save()

        # Mirror list removal
        if os.path.exists(mirror_list_filename):
            os.remove(mirror_list_filename)

        # Keys removal
        repo_keys = RepoKeyFiles(keys_root_dir, repo_id)
        repo_keys.update_filesystem()

        # cert removal
        certificates = CertFiles(cert_root_dir, repo_id)
        certificates.apply()

    finally:
        lock.release()