Infra
/
lemur
5
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

CLI support single cert revoke

This commit is contained in:
sayali 2020-12-02 18:08:19 -08:00
parent 33bb17779d
commit 5ca0c83a07
1 changed files with 16 additions and 7 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

23
lemur/certificates/cli.py
View File

@ -619,9 +619,8 @@ def clear_pending():
v.clear_pending_certificates() v.clear_pending_certificates()
@manager.option( @manager.option("-p", "--path", dest="path", help="Absolute file path to a Lemur query csv.")
"-p", "--path", dest="path", help="Absolute file path to a Lemur query csv." @manager.option("-id", "--certid", dest="cert_id", help="ID of the certificate to be revoked")
)
@manager.option("-r", "--reason", dest="reason", default="unspecified", help="CRL Reason as per RFC 5280 section 5.3.1") @manager.option("-r", "--reason", dest="reason", default="unspecified", help="CRL Reason as per RFC 5280 section 5.3.1")
@manager.option("-m", "--message", dest="message", help="Message explaining reason for revocation") @manager.option("-m", "--message", dest="message", help="Message explaining reason for revocation")
@manager.option( @manager.option(
@ -632,10 +631,17 @@ def clear_pending():
default=False, default=False,
help="Persist changes.", help="Persist changes.",
) )
def revoke(path, reason, message, commit): def revoke(path, cert_id, reason, message, commit):
""" """
Revokes given certificate. Revokes given certificate.
""" """
if not path and not cert_id:
print("[!] No input certificates mentioned to revoke")
return
if path and cert_id:
print("[!] Please mention single certificate id (-id) or input file (-p)")
return
if commit: if commit:
print("[!] Running in COMMIT mode.") print("[!] Running in COMMIT mode.")
@ -645,9 +651,12 @@ def revoke(path, reason, message, commit):
reason = CRLReason.unspecified.name reason = CRLReason.unspecified.name
comments = {"comments": message, "crl_reason": reason} comments = {"comments": message, "crl_reason": reason}
with open(path, "r") as f: if cert_id:
for x in f.readlines()[2:]: worker(cert_id, commit, comments)
worker(x, commit, comments) else:
with open(path, "r") as f:
for x in f.readlines()[2:]:
worker(x, commit, comments)
@manager.command @manager.command