예제 #1
0
def configure_client_ssl(relation_data):
    """Configure client with ssl
    """
    ssl_mode, external_ca = get_ssl_mode()
    if ssl_mode == 'off':
        return
    relation_data['ssl_port'] = config('ssl_port')
    if external_ca:
        if config('ssl_ca'):
            relation_data['ssl_ca'] = base64.b64encode(config('ssl_ca'))
        return
    ca = ServiceCA.get_ca()
    relation_data['ssl_ca'] = base64.b64encode(ca.get_ca_bundle())
def configure_client_ssl(relation_data):
    """Configure client with ssl
    """
    ssl_mode, external_ca = _get_ssl_mode()
    if ssl_mode == 'off':
        return
    relation_data['ssl_port'] = config('ssl_port')
    if external_ca:
        if config('ssl_ca'):
            relation_data['ssl_ca'] = base64.b64encode(
                config('ssl_ca'))
        return
    ca = ServiceCA.get_ca()
    relation_data['ssl_ca'] = base64.b64encode(ca.get_ca_bundle())
def configure_client_ssl(relation_data):
    """Configure client with ssl
    """
    ssl_mode, external_ca = get_ssl_mode()
    if ssl_mode == 'off':
        return
    relation_data['ssl_port'] = config('ssl_port')
    if ssl_mode == CERTS_FROM_RELATION:
        relation_certs = get_relation_cert_data()
        ca_data = relation_certs['ca']
        if relation_certs.get('chain'):
            ca_data = ca_data + relation_certs.get('chain')
        relation_data['ssl_ca'] = b64encoded_string(ca_data)
    else:
        if external_ca:
            if config('ssl_ca'):
                if "BEGIN CERTIFICATE" in config('ssl_ca'):
                    ssl_ca_encoded = b64encoded_string(config('ssl_ca'))
                else:
                    ssl_ca_encoded = config('ssl_ca')
                relation_data['ssl_ca'] = ssl_ca_encoded
            return
        ca = ServiceCA.get_ca()
        relation_data['ssl_ca'] = b64encoded_string(ca.get_ca_bundle())
예제 #4
0
def configure_client_ssl(relation_data):
    """Configure client with ssl
    """
    ssl_mode, external_ca = get_ssl_mode()
    if ssl_mode == 'off':
        return
    relation_data['ssl_port'] = config('ssl_port')
    if ssl_mode == CERTS_FROM_RELATION:
        relation_certs = get_relation_cert_data()
        ca_data = relation_certs['ca']
        if relation_certs.get('chain'):
            ca_data = ca_data + relation_certs.get('chain')
        relation_data['ssl_ca'] = b64encoded_string(ca_data)
    else:
        if external_ca:
            if config('ssl_ca'):
                if "BEGIN CERTIFICATE" in config('ssl_ca'):
                    ssl_ca_encoded = b64encoded_string(config('ssl_ca'))
                else:
                    ssl_ca_encoded = config('ssl_ca')
                relation_data['ssl_ca'] = ssl_ca_encoded
            return
        ca = ServiceCA.get_ca()
        relation_data['ssl_ca'] = b64encoded_string(ca.get_ca_bundle())