diff options
Diffstat (limited to 'rpkid.without_tls/pubd.py')
| -rw-r--r-- | rpkid.without_tls/pubd.py | 171 |
1 files changed, 0 insertions, 171 deletions
diff --git a/rpkid.without_tls/pubd.py b/rpkid.without_tls/pubd.py deleted file mode 100644 index b28646f3..00000000 --- a/rpkid.without_tls/pubd.py +++ /dev/null @@ -1,171 +0,0 @@ -""" -RPKI publication engine. - -Usage: python pubd.py [ { -c | --config } configfile ] - [ { -h | --help } ] - [ { -p | --profile } outputfile ] - -Default configuration file is pubd.conf, override with --config option. - -$Id$ - -Copyright (C) 2009--2010 Internet Systems Consortium ("ISC") - -Permission to use, copy, modify, and distribute this software for any -purpose with or without fee is hereby granted, provided that the above -copyright notice and this permission notice appear in all copies. - -THE SOFTWARE IS PROVIDED "AS IS" AND ISC DISCLAIMS ALL WARRANTIES WITH -REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY -AND FITNESS. IN NO EVENT SHALL ISC BE LIABLE FOR ANY SPECIAL, DIRECT, -INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM -LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE -OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR -PERFORMANCE OF THIS SOFTWARE. - -Portions copyright (C) 2007--2008 American Registry for Internet Numbers ("ARIN") - -Permission to use, copy, modify, and distribute this software for any -purpose with or without fee is hereby granted, provided that the above -copyright notice and this permission notice appear in all copies. - -THE SOFTWARE IS PROVIDED "AS IS" AND ARIN DISCLAIMS ALL WARRANTIES WITH -REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY -AND FITNESS. IN NO EVENT SHALL ARIN BE LIABLE FOR ANY SPECIAL, DIRECT, -INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM -LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE -OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR -PERFORMANCE OF THIS SOFTWARE. -""" - -import os, time, getopt, sys, re -import rpki.resource_set, rpki.up_down, rpki.x509, rpki.sql -import rpki.http, rpki.config, rpki.exceptions, rpki.relaxng -import rpki.log, rpki.publication - -class pubd_context(object): - """ - A container for various pubd parameters. - """ - - def __init__(self, cfg): - - self.sql = rpki.sql.session(cfg) - - self.bpki_ta = rpki.x509.X509(Auto_update = cfg.get("bpki-ta")) - self.irbe_cert = rpki.x509.X509(Auto_update = cfg.get("irbe-cert")) - self.pubd_cert = rpki.x509.X509(Auto_update = cfg.get("pubd-cert")) - self.pubd_key = rpki.x509.RSA( Auto_update = cfg.get("pubd-key")) - - self.http_server_host = cfg.get("server-host", "") - self.http_server_port = int(cfg.get("server-port", "4434")) - - self.publication_base = cfg.get("publication-base", "publication/") - - self.publication_multimodule = cfg.getboolean("publication-multimodule", False) - - def handler_common(self, query, client, cb, certs, crl = None): - """ - Common PDU handler code. - """ - - def done(r_msg): - reply = rpki.publication.cms_msg().wrap(r_msg, self.pubd_key, self.pubd_cert, crl) - self.sql.sweep() - cb(reply) - - q_msg = rpki.publication.cms_msg(DER = query).unwrap(certs) - q_msg.serve_top_level(self, client, done) - - def control_handler(self, query, path, cb): - """ - Process one PDU from the IRBE. - """ - - def done(x): - cb(200, x) - - rpki.log.trace() - try: - self.sql.ping() - self.handler_common(query, None, done, (self.bpki_ta, self.irbe_cert)) - except (rpki.async.ExitNow, SystemExit): - raise - except Exception, data: - rpki.log.traceback() - cb(500, "Unhandled exception %s" % data) - - client_url_regexp = re.compile("/client/([-A-Z0-9_/]+)$", re.I) - - def client_handler(self, query, path, cb): - """ - Process one PDU from a client. - """ - - def done(x): - cb(200, x) - - rpki.log.trace() - try: - self.sql.ping() - match = self.client_url_regexp.search(path) - if match is None: - raise rpki.exceptions.BadContactURL, "Bad path: %s" % path - client_handle = match.group(1) - client = rpki.publication.client_elt.sql_fetch_where1(self, "client_handle = %s", (client_handle,)) - if client is None: - raise rpki.exceptions.ClientNotFound, "Could not find client %s" % client_handle - config = rpki.publication.config_elt.fetch(self) - if config is None or config.bpki_crl is None: - raise rpki.exceptions.CMSCRLNotSet - self.handler_common(query, client, done, (self.bpki_ta, client.bpki_cert, client.bpki_glue), config.bpki_crl) - except (rpki.async.ExitNow, SystemExit): - raise - except Exception, data: - rpki.log.traceback() - cb(500, "Could not process PDU: %s" % data) - -os.environ["TZ"] = "UTC" -time.tzset() - -cfg_file = "pubd.conf" -profile = False - -opts, argv = getopt.getopt(sys.argv[1:], "c:dhp:?", ["config=", "debug", "help"]) -for o, a in opts: - if o in ("-h", "--help", "-?"): - print __doc__ - sys.exit(0) - elif o in ("-c", "--config"): - cfg_file = a - elif o in ("-d", "--debug"): - rpki.log.use_syslog = False - elif o in ("-p", "--profile"): - profile = a -if argv: - raise rpki.exceptions.CommandParseFailure, "Unexpected arguments %s" % argv - -rpki.log.init("pubd") - -def main(): - - cfg = rpki.config.parser(cfg_file, "pubd") - - if profile: - rpki.log.info("Running in profile mode with output to %s" % profile) - - cfg.set_global_flags() - - pctx = pubd_context(cfg) - - rpki.http.server( - host = pctx.http_server_host, - port = pctx.http_server_port, - handlers = (("/control", pctx.control_handler), - ("/client/", pctx.client_handler))) - -if profile: - import cProfile - cProfile.run("main()", profile) -else: - main() |