You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
89 lines
2.1 KiB
89 lines
2.1 KiB
#!/usr/bin/env python3
|
|
# -*- coding: utf-8 -*-
|
|
|
|
from playhouse.gfk import *
|
|
|
|
from datetime import datetime
|
|
|
|
import os
|
|
import os.path
|
|
|
|
from .customModel import CustomModel
|
|
from .certificate import Certificate
|
|
|
|
from ..paths import *
|
|
|
|
__doc__ = """
|
|
Module of base classes to handle authorities
|
|
"""
|
|
|
|
|
|
class Authority(CustomModel):
|
|
|
|
signed_certificates = ReverseGFK(Certificate, 'authority_type', 'authority_id')
|
|
|
|
request_allowed = []
|
|
|
|
# data stored in the database
|
|
active = BooleanField()
|
|
|
|
ca_id = CharField(
|
|
index=True,
|
|
unique=True,
|
|
)
|
|
|
|
creation_date = DateTimeField(
|
|
help_text='authority creation date',
|
|
)
|
|
|
|
name = CharField(
|
|
index=True,
|
|
help_text='authority descriptive name',
|
|
)
|
|
|
|
serial = IntegerField(
|
|
help_text='next certificate serial number',
|
|
)
|
|
|
|
isRoot = BooleanField(
|
|
help_text='is root authority?',
|
|
)
|
|
|
|
def __bool__(self):
|
|
return os.path.exists(self.path)
|
|
|
|
@property
|
|
def path(self):
|
|
return os.path.join(MANAGER_PATH, self.ca_id)
|
|
|
|
def generate(self):
|
|
raise NotImplementedError()
|
|
|
|
def sign(self, request):
|
|
assert type(request) in self.request_allowed
|
|
|
|
# write the key data from the request into
|
|
# the output folder
|
|
with open(request.destination, 'w') as stream:
|
|
stream.write(request.key_data)
|
|
|
|
cert = Certificate(
|
|
authority=self,
|
|
cert_id=request.req_id,
|
|
date_issued=datetime.now(),
|
|
receiver=request.receiver,
|
|
serial_number=self.serial,
|
|
path=request.cert_destination,
|
|
)
|
|
|
|
cert.validity_interval = self.generate_certificate(request)
|
|
|
|
cert.save()
|
|
self.serial += 1
|
|
return cert.path
|
|
|
|
def generate_certificate(self, request):
|
|
raise NotImplementedError()
|
|
|
|
def __repr__(self):
|
|
return ('%s %s (%s), created on %s' % (self.__class__.__name__, self.ca_id, self.name, self.creation_date))
|