File manager - Edit - /opt/saltstack/salt/lib/python3.10/site-packages/salt/runners/__pycache__/venafiapi.cpython-310.pyc
Back
o ;j� � @ s� d Z ddlZddlZddlZddlZddlmZ ddlZddl Zddl Zddl m Z zddl Z ddlmZ dZW n eyC dZY nw dZdZe�e�Zd d � Zd d � Z dd d�ZeZdd� Zdd� Z dd� Z dd� Z dS )a) Support for Venafi :depends: - vcert Python module :configuration: In order to connect to Venafi services you need to specify it in Salt master configuration. Example for Venafi Cloud (using env variables): .. code-block:: yaml venafi: api_key: "sdb://osenv/CLOUDAPIKEY" Example for Venafi Platform (using env variables): .. code-block:: yaml venafi: base_url: "https://tpp.example.com/" tpp_user: admin tpp_password: "sdb://osenv/TPP_PASSWORD" trust_bundle: "/opt/venafi/bundle.pem" � N)�CommandExecutionError)�CertificateRequestTF�venafi/domains�venafic C s� t �d� t�di ��dd�} t�di ��dd�}t �d|� t�di ��dd�}t�di ��dd�}t�di ��d d�}t�di ��d d�}t �d � |rTtjd d �S |rht �d|� tj|| ||d|id�S tj|| ||d�S )Nz=Initializing Venafi Trust Platform or Venafi Cloud connectionr �api_key� �base_urlzUsing base_url: %s�tpp_user� tpp_password� trust_bundle�fakezFinished config processingT)r z"Will use trust bundle from file %sZverify)�url�token�user�passwordZhttp_request_kwargs)r r r r )�log�info�__opts__�get�vcertZ Connection)r r r r r r � r �J/opt/saltstack/salt/lib/python3.10/site-packages/salt/runners/venafiapi.py�_init_connection3 s. ��r c C s t rtS dS )z; Only load the module if vcert module is installed F)� HAS_VCERT�__virtualname__r r r r � __virtual__N s r c C s< t �d� |du rt �d� t�d� |dur"|�d�r"td |�}t� } | du rEt|||||||d�} | � |�} t �d| � | � | � nFt �d | � t �d |� z#t j j �| �� }|�� }W d � n1 shw Y t||d �} W n ty� } z td | � d |� ���d}~ww | �| |� d}t�� | }d}|du r�t�� |k r�| �| �}|du r�t�d� |du r�t�� |k s�| du r�| j}n8| r�z t j j �| �� }|�� }W d � n1 s�w Y W n ty� } z td | � d |� ���d}~ww d}t j�tt�dtj��}| |j |j |d�}|� t ||� |j |fS )z� Request a new certificate CLI Example: .. code-block:: bash salt-run venafi.request <minion_id> <dns_name> z Requesting Venafi certificateNzMissing zone parameter� zsdb://zsdb.get)� common_name�countryZprovinceZlocalityZ organizationZorganizational_unit� key_passwordz Updating request from zone %sz Will use generated CSR from %sz Using CN %s)�csrr zUnable to open file z: i, � �cachedir)� minion_id�cert�chainZpkey) r r �error�sys�exit� startswithZ__salt__r r Zread_zone_confZupdate_from_zone_config�salt�utils�filesZfopen�read� ExceptionZ request_cert�timeZ retrieve_cert�sleepZprivate_key_pem�cache�Cacher r �syspaths� CACHE_DIRr$ r% �store�CACHE_BANK_NAME)r# �dns_name�zoner �state�locZorgZorg_unitr Zcsr_pathZ pkey_path�conn�requestZ zone_configZcsr_filer �eZtimeout_seconds�timeoutr$ Z private_keyZ pkey_filer1 �datar r r r< W s| � ��� � ����� r< c C sV t j�tt�dtj��}|�t| �}t |t �sg }||vr"|� |� |� t| |� dS )zA Maintain a relationship between a minion and a DNS name r" N) r* r1 r2 r r r3 r4 �fetchr6 � isinstance�list�appendr5 )r# r7 r1 Z dns_namesr r r �_id_map� s rD c C s6 t j�tt�dtj��}|�t| �pi }|�d�}|S )z� Show issued certificate for domain CLI Example: .. code-block:: bash salt-run venafi.show_cert example.com r" r$ ) r* r1 r2 r r r3 r4 r@ r6 )r7 r1 Z domain_datar$ r r r � show_cert� s rE c C s" t j�tt�dtj��} | �d�S )z� List domains that have been cached CLI Example: .. code-block:: bash salt-run venafi.list_domain_cache r" r )r* r1 r2 r r r3 r4 rB )r1 r r r �list_domain_cache� s rF c C s� t j�tt�dtj��}t| t�r| � d�} t| t �s t d��g }g }| D ] }z |� t |� |�|� W q% t yB |�|� Y q%w ||d�S )z� Delete cached domains from the master CLI Example: .. code-block:: bash salt-run venafi.del_cached_domain domain1.example.com,domain2.example.com r" �,zwYou must pass in either a string containing one or more domains separated by commas, or a list of single domain strings)Z SucceededZFailed)r* r1 r2 r r r3 r4 rA �str�splitrB r �flushr6 rC )Zdomainsr1 �successZfailed�domainr r r �del_cached_domain� s" � � rM ) NNNNNNNNNN) �__doc__�loggingr' r/ Z salt.cacher* Z salt.syspathsr3 Zsalt.utils.filesZsalt.utils.jsonZsalt.utils.stringutilsZsalt.exceptionsr r Z vcert.commonr r � ImportErrorr6 r � getLogger�__name__r r r r< ZrenewrD rE rF rM r r r r �<module> sL � �Z
| ver. 1.4 |
Github
|
.
| PHP 8.2.30 | Generation time: 0 |
proxy
|
phpinfo
|
Settings