This repository has been archived by the owner on Jan 8, 2020. It is now read-only.
/
mm.py
executable file
·118 lines (98 loc) · 4.2 KB
/
mm.py
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
#!/usr/bin/env python
import os
import argparse
from saml2.extension import shibmd
from saml2.sigver import read_cert_from_file
from saml2.time_util import in_a_while
__author__ = 'rohe0002'
from saml2 import BINDING_HTTP_REDIRECT, md
from saml2 import samlp
import xmldsig as ds
from saml2.md import SingleSignOnService
from saml2.md import IDPSSODescriptor
from saml2.md import EntitiesDescriptor
from saml2.md import EntityDescriptor
from saml2.md import KeyDescriptor
def do_key_descriptor(cert):
return KeyDescriptor(
key_info = ds.KeyInfo(
x509_data=ds.X509Data(
x509_certificate=ds.X509Certificate(text=cert)
)
)
)
def entity_desc(loc, key_descriptor=None, eid=None, id=None, scope=None):
sso = SingleSignOnService(binding=BINDING_HTTP_REDIRECT, location=loc)
idp = IDPSSODescriptor(single_sign_on_service=sso,
key_descriptor=key_descriptor,
want_authn_requests_signed="false",
protocol_support_enumeration=samlp.NAMESPACE)
ei = EntityDescriptor(idpsso_descriptor=idp, entity_id=eid,
id=id)
if scope:
ei.extensions = md.Extensions()
ei.extensions.extension_elements.append(scope)
return ei
def entities_desc(service, ename, base, cert_file=None, validity="", cache="",
social=None, scopebase="social2saml.org"):
ed = []
if cert_file:
_cert = read_cert_from_file(cert_file, "pem")
key_descriptor = do_key_descriptor(_cert)
else:
key_descriptor = None
for name, desc in service.items():
if social is None or name in social:
scope = shibmd.Scope(text="%s.%s" % (name, scopebase))
loc = "%s/%s" % (base, desc["saml_endpoint"])
eid = "%s/%s" % (base, desc["entity_id"])
ed.append(entity_desc(loc, key_descriptor, eid, scope=scope))
return EntitiesDescriptor(name=ename, entity_descriptor=ed,
valid_until = in_a_while(hours=validity),
cache_duration=cache)
if __name__ == "__main__":
from config import idp_proxy_conf as ipc
parser = argparse.ArgumentParser()
parser.add_argument('-c', dest="cnf",
help="The idp configuration file")
parser.add_argument('-v', dest="validity",
help="Indicates the expiration time of the metadata",
type=int, default=6)
parser.add_argument('-d', dest="duration",
help="Indicates the maximum length of time a consumer should cache the metadata",
type=int)
parser.add_argument('-i', dest="individual", action='store_true',
help="If one metadata file per social service should be constructed")
parser.add_argument('-b', dest="scopebase", help="Scope base")
parser.add_argument('-t', dest="target", default=".",
help="where to place the individual metadata files")
parser.add_argument("soc", nargs="*", help="Which social services to include")
args = parser.parse_args()
cnf = __import__(args.cnf)
if cnf.BASE.endswith("/"):
_base = cnf.BASE[:-1]
else:
_base = cnf.BASE[:]
kwargs = {}
if args.soc:
kwargs["social"] = args.soc
if args.duration:
kwargs["cache"] = args.duration
if args.scopebase:
kwargs["scopebase"] = args.scopebase
if args.individual:
if not os.path.isdir(args.target):
os.mkdir(args.target)
for name, desc in ipc.SERVICE.items():
kwargs["social"] = [name]
ed = entities_desc(ipc.SERVICE, "%s/md/idpproxy-1.0.xml" % _base,
_base, cert_file=cnf.CONFIG["cert_file"],
validity=args.validity, **kwargs)
f = open("%s/%s.xml" % (args.target, name), "w")
f.write("%s" % ed)
f.close()
else:
ed = entities_desc(ipc.SERVICE, "%s/md/idpproxy-1.0.xml" % _base,
_base, cert_file=cnf.CONFIG["cert_file"],
validity=args.validity, **kwargs)
print ed