diff options
author | Rob Austein <sra@hactrn.net> | 2008-02-27 19:02:11 +0000 |
---|---|---|
committer | Rob Austein <sra@hactrn.net> | 2008-02-27 19:02:11 +0000 |
commit | e1bc9584d821857a9a1869f38b934812ff60f7fb (patch) | |
tree | c9c1f45818ab9f4e6dacefc1428c9a9dcb67c0fd /scripts/rpkid.py | |
parent | a9ecdddda7c364cd62dbd1c16fc0f19615fe288e (diff) |
Filename cleanup
svn path=/rpkid/Makefile; revision=1531
Diffstat (limited to 'scripts/rpkid.py')
-rwxr-xr-x | scripts/rpkid.py | 137 |
1 files changed, 0 insertions, 137 deletions
diff --git a/scripts/rpkid.py b/scripts/rpkid.py deleted file mode 100755 index 5779753b..00000000 --- a/scripts/rpkid.py +++ /dev/null @@ -1,137 +0,0 @@ -# $Id$ - -# Copyright (C) 2007--2008 American Registry for Internet Numbers ("ARIN") -# -# Permission to use, copy, modify, and distribute this software for any -# purpose with or without fee is hereby granted, provided that the above -# copyright notice and this permission notice appear in all copies. -# -# THE SOFTWARE IS PROVIDED "AS IS" AND ARIN DISCLAIMS ALL WARRANTIES WITH -# REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY -# AND FITNESS. IN NO EVENT SHALL ARIN BE LIABLE FOR ANY SPECIAL, DIRECT, -# INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM -# LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE -# OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR -# PERFORMANCE OF THIS SOFTWARE. - -""" -RPKI engine daemon. This is still very much a work in progress. - -Usage: python rpkid.py [ { -c | --config } configfile ] [ { -h | --help } ] - -Default configuration file is rpkid.conf, override with --config option. -""" - -import traceback, os, time, getopt, sys, MySQLdb, lxml.etree -import rpki.resource_set, rpki.up_down, rpki.left_right, rpki.x509, rpki.sql -import rpki.https, rpki.config, rpki.cms, rpki.exceptions, rpki.relaxng, rpki.log - -def left_right_handler(query, path): - """Process one left-right PDU.""" - rpki.log.trace() - try: - q_elt = rpki.cms.xml_verify(query, gctx.cms_ta_irbe) - rpki.relaxng.left_right.assertValid(q_elt) - q_msg = rpki.left_right.sax_handler.saxify(q_elt) - r_msg = q_msg.serve_top_level(gctx) - r_elt = r_msg.toXML() - rpki.relaxng.left_right.assertValid(r_elt) - reply = rpki.cms.xml_sign(r_elt, gctx.cms_key, gctx.cms_certs) - rpki.sql.sql_sweep(gctx) - return 200, reply - except lxml.etree.DocumentInvalid: - rpki.log.warn("Received reply document does not pass schema check: " + lxml.etree.tostring(r_elt, pretty_print = True)) - rpki.log.warn(traceback.format_exc()) - return 500, "Schema violation" - except Exception, data: - rpki.log.error(traceback.format_exc()) - return 500, "Unhandled exception %s" % data - -def up_down_handler(query, path): - """Process one up-down PDU.""" - rpki.log.trace() - try: - child_id = path.partition("/up-down/")[2] - if not child_id.isdigit(): - raise rpki.exceptions.BadContactURL, "Bad path: %s" % path - child = rpki.left_right.child_elt.sql_fetch(gctx, long(child_id)) - if child is None: - raise rpki.exceptions.ChildNotFound, "Could not find child %s" % child_id - reply = child.serve_up_down(gctx, query) - rpki.sql.sql_sweep(gctx) - return 200, reply - except Exception, data: - rpki.log.error(traceback.format_exc()) - return 400, "Could not process PDU: %s" % data - -def cronjob_handler(query, path): - """Periodic tasks. As simple as possible for now, may need to break - this up into separate handlers later. - """ - - rpki.log.trace() - for s in rpki.left_right.self_elt.sql_fetch_all(gctx): - s.client_poll(gctx) - s.update_children(gctx) - s.regenerate_crls_and_manifests(gctx) - rpki.sql.sql_sweep(gctx) - return 200, "OK" - -class global_context(object): - """A container for various global parameters.""" - - def __init__(self, cfg): - - self.db = MySQLdb.connect(user = cfg.get("sql-username"), - db = cfg.get("sql-database"), - passwd = cfg.get("sql-password")) - self.cur = self.db.cursor() - - self.cms_ta_irdb = rpki.x509.X509(Auto_file = cfg.get("cms-ta-irdb")) - self.cms_ta_irbe = rpki.x509.X509(Auto_file = cfg.get("cms-ta-irbe")) - self.cms_key = rpki.x509.RSA(Auto_file = cfg.get("cms-key")) - self.cms_certs = rpki.x509.X509_chain(Auto_files = cfg.multiget("cms-cert")) - - self.https_key = rpki.x509.RSA(Auto_file = cfg.get("https-key")) - self.https_certs = rpki.x509.X509_chain(Auto_files = cfg.multiget("https-cert")) - self.https_ta = rpki.x509.X509_chain(Auto_files = cfg.multiget("https-ta")) - - self.irdb_url = cfg.get("irdb-url") - - self.https_server_host = cfg.get("server-host", "") - self.https_server_port = int(cfg.get("server-port", "4433")) - - self.publication_kludge_base = cfg.get("publication-kludge-base", "publication/") - -os.environ["TZ"] = "UTC" -time.tzset() - -rpki.log.init("rpkid") - -cfg_file = "rpkid.conf" - -opts,argv = getopt.getopt(sys.argv[1:], "c:h?", ["config=", "help"]) -for o,a in opts: - if o in ("-h", "--help", "-?"): - print __doc__ - sys.exit(0) - if o in ("-c", "--config"): - cfg_file = a -if argv: - raise RuntimeError, "Unexpected arguments %s" % argv - -cfg = rpki.config.parser(cfg_file, "rpkid") - -startup_msg = cfg.get("startup-message", "") -if startup_msg: - rpki.log.info(startup_msg) - -gctx = global_context(cfg) - -rpki.https.server(privateKey = gctx.https_key, - certChain = gctx.https_certs, - host = gctx.https_server_host, - port = gctx.https_server_port, - handlers=(("/left-right", left_right_handler), - ("/up-down/", up_down_handler), - ("/cronjob", cronjob_handler))) |