Changeset 1264

Timestamp:

12/22/06 11:17:58 (6 years ago)

Author:

mglb1

Message:

Check for policy server CFengine keys and create them if they do not exist
as the daemon is starting up.

Fixes #76

File:

• ccsd/trunk/crcnetd/_utils/ccsd_cfengine.py (modified) (3 diffs)

ccsd/trunk/crcnetd/_utils/ccsd_cfengine.py

@@ -28 +28 @@
 import os
 import os.path
+import shutil
 from stat import *
 import svn.core as core
@@ -1162 +1163 @@
                 "".join(output))
     
+def checkCfengineKeys():
+    """Ensures that CFengine keys for the server exist"""
+    session = getSessionE(ADMIN_SESSION_ID)
+    
+    # Check for existing changeset
+    commit = 0
+    if session.changeset == 0:
+        session.begin("Creating CFengine policy server keys")
+        commit = 1
+   
+    policy_ip = getIP(config_get_required("network", "server_name"))
+
+    try:
+        # Determine directories to store things in
+        workdir = session.revision.getWorkingDir()
+        cfkeydir = "%s/ppkeys" % (workdir)
+        ensureDirExists(cfkeydir)
+        
+        # Check if the policy server keys exist
+        key = "%s/root-%s" % (cfkeydir, policy_ip)
+        if not os.path.exists("%s.pub" % key) or \
+                not os.path.exists("%s.priv" % key):
+            # Generate the keys
+            genCfKey(cfkeydir, policy_ip)
+            log_info("Created CFengine keys for policy server (%s)" % \
+                    policy_ip)
+
+        # Check if the policy server keys are linked to localhost
+        if not os.path.exists("%s/localhost.pub" % cfkeydir) or \
+                not os.path.exists("%s/localhost.priv" % cfkeydir):
+            # Copy policy server keys to here, using shutil rather than 
+            # svn as the policy server keys may have been created above
+            # and not checked in yet.
+            shutil.copy("%s.pub" % key, 
+                    "%s/localhost.pub" % cfkeydir)
+            shutil.copy("%s.priv" % key, 
+                    "%s/localhost.priv" % cfkeydir)
+            log_info("Copied CFengine policy server keys for localhost")
+
+    except:
+        log_error("Failed to setup CFengine keys for policy server", 
+                sys.exc_info())
+        # Rollback any changes
+        if commit == 1:
+            session.rollback()
+        return False
+
+    # Commit changeset if necessary
+    if commit==1:
+        session.commit()
+        
+    return True
+
 def getActiveRevision(hostname=None):
     """Returns the active revision for the cfengine input directory 
@@ -2678 +2732 @@
     initTemplates()
     
+    # Ensure that CFengine keys exists for this server
+    checkCfengineKeys()
+
     # Register Cfengine Resource Server
     registerResource("cfengine", cfserver)