90 lines
3.3 KiB
Python
90 lines
3.3 KiB
Python
"""
|
|
.. module: lemur.pending_certificates.cli
|
|
|
|
.. moduleauthor:: James Chuong <jchuong@instartlogic.com>
|
|
.. moduleauthor:: Curtis Castrapel <ccastrapel@netflix.com>
|
|
"""
|
|
from flask_script import Manager
|
|
from multiprocessing import Pool
|
|
|
|
from lemur.pending_certificates import service as pending_certificate_service
|
|
from lemur.plugins.base import plugins
|
|
from lemur.users import service as user_service
|
|
|
|
manager = Manager(usage="Handles pending certificate related tasks.")
|
|
agents = 20
|
|
|
|
|
|
# Need to call this multiple times and store status of the cert in DB. If it is being worked on by a worker, and which
|
|
# worker.
|
|
# Then open up an arbitrary number of copies of this? every minute??
|
|
# Or instead how about you send in a list of all pending certificates, make all the dns changes at once, then loop
|
|
# through and wait for each one to complete?
|
|
@manager.option('-i', dest='ids', action='append', help='IDs of pending certificates to fetch')
|
|
def fetch(ids):
|
|
"""
|
|
Attempt to get full certificates for each pending certificate listed.
|
|
|
|
Args:
|
|
ids: a list of ids of PendingCertificates (passed in by manager options when run as CLI)
|
|
`python manager.py pending_certs fetch -i 123 321 all`
|
|
"""
|
|
pending_certs = pending_certificate_service.get_pending_certs(ids)
|
|
user = user_service.get_by_username('lemur')
|
|
new = 0
|
|
failed = 0
|
|
|
|
for cert in pending_certs:
|
|
authority = plugins.get(cert.authority.plugin_name)
|
|
real_cert = authority.get_ordered_certificate(cert)
|
|
if real_cert:
|
|
# If a real certificate was returned from issuer, then create it in Lemur and delete
|
|
# the pending certificate
|
|
pending_certificate_service.create_certificate(cert, real_cert, user)
|
|
pending_certificate_service.delete(cert)
|
|
# add metrics to metrics extension
|
|
new += 1
|
|
else:
|
|
pending_certificate_service.increment_attempt(cert)
|
|
failed += 1
|
|
print(
|
|
"[+] Certificates: New: {new} Failed: {failed}".format(
|
|
new=new,
|
|
failed=failed,
|
|
)
|
|
)
|
|
|
|
|
|
def fetch_all():
|
|
"""
|
|
Attempt to get full certificates for each pending certificate listed.
|
|
|
|
Args:
|
|
ids: a list of ids of PendingCertificates (passed in by manager options when run as CLI)
|
|
`python manager.py pending_certs fetch -i 123 321 all`
|
|
"""
|
|
pending_certs = pending_certificate_service.get_pending_certs('all')
|
|
user = user_service.get_by_username('lemur')
|
|
new = 0
|
|
failed = 0
|
|
certs = authority.get_ordered_certificates(pending_certs)
|
|
for cert in certs:
|
|
authority = plugins.get(cert.authority.plugin_name)
|
|
real_cert = authority.get_ordered_certificate(cert)
|
|
if real_cert:
|
|
# If a real certificate was returned from issuer, then create it in Lemur and delete
|
|
# the pending certificate
|
|
pending_certificate_service.create_certificate(cert, real_cert, user)
|
|
pending_certificate_service.delete(cert)
|
|
# add metrics to metrics extension
|
|
new += 1
|
|
else:
|
|
pending_certificate_service.increment_attempt(cert)
|
|
failed += 1
|
|
print(
|
|
"[+] Certificates: New: {new} Failed: {failed}".format(
|
|
new=new,
|
|
failed=failed,
|
|
)
|
|
)
|