irdbd cleanup

svn path=/scripts/apnic-poke-1.sh; revision=1454

1 files changed, 117 insertions, 0 deletions

diff --git a/scripts/irdbd.py b/scripts/irdbd.py
new file mode 100755
index 00000000..1d79e875
--- /dev/null
+++ b/scripts/irdbd.py
@@ -0,0 +1,117 @@
+# $Id$
+
+"""
+IR database daemon.
+
+Usage: python irdbd.py [ { -c | --config } configfile ] [ { -h | --help } ]
+
+Default configuration file is irdbd.conf, override with --config option.
+"""
+
+import sys, os, time, getopt, urlparse, traceback
+import tlslite.api, MySQLdb, lxml.etree
+import rpki.https, rpki.config, rpki.resource_set, rpki.cms, rpki.relaxng
+import rpki.exceptions, rpki.left_right, rpki.log
+
+def handler(query, path):
+  try:
+    q_elt = rpki.cms.xml_verify(query, cms_ta)
+    rpki.relaxng.left_right.assertValid(q_elt)
+    q_msg = rpki.left_right.sax_handler.saxify(q_elt)
+    if not isinstance(q_msg, rpki.left_right.msg):
+      raise rpki.exceptions.BadQuery, "Unexpected %s PDU" % repr(q_msg)
+
+    r_msg = rpki.left_right.msg()
+
+    for q_pdu in q_msg:
+
+      try:
+        if not isinstance(q_pdu, rpki.left_right.list_resources_elt) or q_pdu.type != "query":
+          raise rpki.exceptions.BadQuery, "Unexpected %s PDU" % repr(q_pdu)
+
+        r_pdu = rpki.left_right.list_resources_elt()
+        r_pdu.type = "reply"
+        r_pdu.tag = q_pdu.tag
+        r_pdu.self_id = q_pdu.self_id
+        r_pdu.child_id = q_pdu.child_id
+
+        cur.execute("""SELECT registrant_id, subject_name, valid_until FROM registrant
+                       WHERE registrant.rpki_self_id = %s AND registrant.rpki_child_id = %s
+                       """, (q_pdu.self_id, q_pdu.child_id))
+        if cur.rowcount != 1:
+          raise rpki.exceptions.NotInDatabase, \
+                "This query should have produced a single exact match, something's messed up (rowcount = %d, self_id = %s, child_id = %s)" \
+                % (cur.rowcount, q_pdu.self_id, q_pdu.child_id)
+
+        registrant_id, subject_name, valid_until = cur.fetchone()
+        r_pdu.subject_name = subject_name
+        r_pdu.valid_until = valid_until.strftime("%Y-%m-%dT%H:%M:%SZ")
+        r_pdu.as   = rpki.resource_set.resource_set_as.from_sql(cur,   "SELECT start_as, end_as FROM asn WHERE registrant_id = %s", (registrant_id,))
+        r_pdu.ipv4 = rpki.resource_set.resource_set_ipv4.from_sql(cur, "SELECT start_ip, end_ip FROM net WHERE registrant_id = %s AND version = 4", (registrant_id,))
+        r_pdu.ipv6 = rpki.resource_set.resource_set_ipv6.from_sql(cur, "SELECT start_ip, end_ip FROM net WHERE registrant_id = %s AND version = 6", (registrant_id,))
+
+      except Exception, data:
+        rpki.log.error(traceback.format_exc())
+        r_pdu = rpki.left_right.report_error_elt.from_exception(data, q_pdu.self_id)
+
+      r_msg.append(r_pdu)
+
+    r_elt = r_msg.toXML()
+    rpki.relaxng.left_right.assertValid(r_elt)
+    return 200, rpki.cms.xml_sign(r_elt, cms_key, cms_certs)
+
+  except Exception, data:
+    rpki.log.error(traceback.format_exc())
+
+    # We only get here in cases where we couldn't or wouldn't generate
+    # <report_error/>, so just return HTTP failure.
+
+    return 500, "Unhandled exception %s: %s" % (data.__class__.__name__, data)
+
+os.environ["TZ"] = "UTC"
+time.tzset()
+
+rpki.log.init("irdbd")
+
+cfg_file = "irdbd.conf"
+
+opts,argv = getopt.getopt(sys.argv[1:], "c:h?", ["config=", "help"])
+for o,a in opts:
+  if o in ("-h", "--help", "-?"):
+    print __doc__
+    sys.exit(0)
+  if o in ("-c", "--config"):
+    cfg_file = a
+if argv:
+  raise RuntimeError, "Unexpected arguments %s" % argv
+
+cfg = rpki.config.parser(cfg_file, "irdbd")
+
+startup_msg = cfg.get("startup-message", "")
+if startup_msg:
+  rpki.log.info(startup_msg)
+
+db = MySQLdb.connect(user   = cfg.get("sql-username"),
+                     db     = cfg.get("sql-database"),
+                     passwd = cfg.get("sql-password"))
+
+cur = db.cursor()
+
+cms_ta          = rpki.x509.X509(Auto_file = cfg.get("cms-ta"))
+cms_key         = rpki.x509.RSA(Auto_file = cfg.get("cms-key"))
+cms_certs       = rpki.x509.X509_chain(Auto_files = cfg.multiget("cms-cert"))
+
+u = urlparse.urlparse(cfg.get("https-url"))
+
+assert u.scheme in ("", "https") and \
+       u.username is None and \
+       u.password is None and \
+       u.params   == "" and \
+       u.query    == "" and \
+       u.fragment == ""
+
+rpki.https.server(privateKey = rpki.x509.RSA(Auto_file = cfg.get("https-key")),
+                  certChain  = rpki.x509.X509_chain(Auto_files = cfg.multiget("https-cert")),
+                  host       = u.hostname or "localhost",
+                  port       = u.port or 443,
+                  handlers   = ((u.path, handler),))