You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
109 lines
2.7 KiB
109 lines
2.7 KiB
#!/usr/bin/env python3
|
|
|
|
from fqdn import FQDN
|
|
import json
|
|
import logging
|
|
import os.path
|
|
import sys
|
|
import time
|
|
import uuid
|
|
|
|
from ca_manager.paths import *
|
|
|
|
__doc__ = """
|
|
Procedure to spawn a shell for automation, used by Ansible
|
|
"""
|
|
|
|
logfile = os.path.join(REQUEST_USER_HOME, 'request_server.log')
|
|
|
|
logging.basicConfig(
|
|
filename=logfile,
|
|
format='%(asctime)s - %(name)s - %(levelname)s - %(message)s',
|
|
level=logging.INFO,
|
|
)
|
|
|
|
logger = logging.getLogger('request_server')
|
|
|
|
|
|
def exit_good(response):
|
|
logger.info('JSON accepted, send ok')
|
|
response['failed'] = False
|
|
response['status'] = 'ok'
|
|
print(json.dumps(response))
|
|
sys.exit(0)
|
|
|
|
|
|
def exit_bad(reason):
|
|
logger.info('JSON rejected, send error; error %s', reason)
|
|
response = {
|
|
'failed': True,
|
|
'status': 'error',
|
|
'reason': reason,
|
|
'msg': reason,
|
|
}
|
|
print(json.dumps(response))
|
|
sys.exit(0)
|
|
|
|
|
|
def main():
|
|
|
|
logger.info('Shell started')
|
|
|
|
response = {}
|
|
|
|
if (len(sys.argv) > 2):
|
|
request_data = sys.argv[2]
|
|
else:
|
|
request_data = sys.stdin.read(10000)
|
|
|
|
logger.info('Got request data: <%s>', (request_data,))
|
|
|
|
try:
|
|
metarequest = json.loads(request_data)
|
|
assert 'type' in metarequest
|
|
except:
|
|
logger.info('"type" key not found in request')
|
|
logger.info('Stopping shell')
|
|
exit_bad('bad_json')
|
|
|
|
if metarequest['type'] == 'sign_request':
|
|
logger.info('Got a sign request')
|
|
request = metarequest['request']
|
|
request_id = str(uuid.uuid4())
|
|
logger.info('Request id %s', (request_id,))
|
|
|
|
if request['keyType'].endswith('_host'):
|
|
if not FQDN(request['hostName']).is_valid:
|
|
exit_bad('bad FQDN: <%s>' % (request['hostName'],))
|
|
|
|
logger.info('Writing request to target directory')
|
|
with open(os.path.join(REQUESTS_PATH, request_id), 'w') as stream:
|
|
stream.write(json.dumps(request))
|
|
|
|
logger.info('Stopping shell')
|
|
exit_good({'requestID': request_id})
|
|
|
|
elif metarequest['type'] == 'get_certificate':
|
|
logger.info('Got a GET request')
|
|
request_id = metarequest['requestID']
|
|
|
|
logger.info('Request id: %s', (request_id,))
|
|
result_path = os.path.join(RESULTS_PATH, request_id)
|
|
|
|
while not os.path.exists(result_path):
|
|
time.sleep(1)
|
|
|
|
with open(result_path, 'r') as stream:
|
|
result_data = stream.read()
|
|
|
|
logger.info('Stopping shell')
|
|
exit_good({'requestID': request_id, 'result': result_data})
|
|
|
|
else:
|
|
logger.info('Request type not supported: %s', metarequest['type'])
|
|
logger.info('Stopping shell')
|
|
exit_bad('unknown_type')
|
|
|
|
|
|
if __name__ == '__main__':
|
|
main()
|