65 lines
2.0 KiB
Python
65 lines
2.0 KiB
Python
"""
|
|
.. module: lemur.plugins.lemur_cfssl.plugin
|
|
:platform: Unix
|
|
:synopsis: This module is responsible for communicating with the CFSSL private CA.
|
|
:copyright: (c) 2016 by Thomson Reuters
|
|
:license: Apache, see LICENSE for more details.
|
|
|
|
.. moduleauthor:: Charles Hendrie <chad.hendrie@tr.com>
|
|
"""
|
|
|
|
import json
|
|
import requests
|
|
|
|
from flask import current_app
|
|
|
|
from lemur.plugins.bases import IssuerPlugin
|
|
from lemur.plugins import lemur_cfssl as cfssl
|
|
|
|
|
|
class CfsslIssuerPlugin(IssuerPlugin):
|
|
title = 'CFSSL'
|
|
slug = 'cfssl-issuer'
|
|
description = 'Enables the creation of certificates by CFSSL private CA'
|
|
version = cfssl.VERSION
|
|
|
|
author = 'Charles Hendrie'
|
|
author_url = 'https://github.com/netflix/lemur.git'
|
|
|
|
def __init__(self, *args, **kwargs):
|
|
self.session = requests.Session()
|
|
super(CfsslIssuerPlugin, self).__init__(*args, **kwargs)
|
|
|
|
def create_certificate(self, csr, issuer_options):
|
|
"""
|
|
Creates a CFSSL certificate.
|
|
|
|
:param csr:
|
|
:param issuer_options:
|
|
:return:
|
|
"""
|
|
current_app.logger.info("Requesting a new cfssl certificate with csr: {0}".format(csr))
|
|
|
|
url = "{0}{1}".format(current_app.config.get('CFSSL_URL'), '/api/v1/cfssl/sign')
|
|
|
|
data = {'certificate_request': csr.decode('utf_8')}
|
|
data = json.dumps(data)
|
|
|
|
response = self.session.post(url, data=data.encode(encoding='utf_8', errors='strict'))
|
|
response_json = json.loads(response.content.decode('utf_8'))
|
|
cert = response_json['result']['certificate']
|
|
|
|
return cert, current_app.config.get('CFSSL_INTERMEDIATE'),
|
|
|
|
@staticmethod
|
|
def create_authority(options):
|
|
"""
|
|
Creates an authority, this authority is then used by Lemur to allow a user
|
|
to specify which Certificate Authority they want to sign their certificate.
|
|
|
|
:param options:
|
|
:return:
|
|
"""
|
|
role = {'username': '', 'password': '', 'name': 'cfssl'}
|
|
return current_app.config.get('CFSSL_ROOT'), "", [role]
|