1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
|
#!/usr/bin/env python
# $Id$
"""
Unpickle trunk/ CA state packaged by ca-pickle and attempt to whack a
tk705/ rpki-ca instance into an equivalent state.
"""
import os
import sys
import time
import cPickle
import datetime
import argparse
import subprocess
import rpki.config
import rpki.x509
class LazyDict(dict):
"""
Convenience wrapper to allow attribute notation for brevity
when diving into deeply nested mappings created by ca-pickle.
"""
def __getattr__(self, name):
if name in self:
return self[name]
raise AttributeError
@classmethod
def insinuate(cls, thing):
if isinstance(thing, dict):
return cls((k, cls.insinuate(v)) for k, v in thing.iteritems())
if isinstance(thing, list):
return list(cls.insinuate(v) for v in thing)
if isinstance(thing, tuple):
return tuple(cls.insinuate(v) for v in thing)
return thing
os.environ.update(TZ = "UTC")
time.tzset()
cfg = rpki.config.argparser(doc = __doc__)
cfg.argparser.add_argument("input_file", help = "input file")
cfg.add_logging_arguments()
args = cfg.argparser.parse_args()
cfg.configure_logging(args = args)
xzcat = subprocess.Popen(("xzcat", args.input_file), stdout = subprocess.PIPE)
world = LazyDict.insinuate(cPickle.load(xzcat.stdout))
if xzcat.wait() != 0:
sys.exit("XZ unpickling failed with code {}".format(xzcat.returncode))
# Trivial test, but if this works, the LazyDict stuff is probably working
#print "Engine handle is", world.cooked_config.myrpki.handle
def maybe_X509(obj): return None if obj is None else rpki.x509.X509( DER = obj)
def maybe_CRL(obj): return None if obj is None else rpki.x509.CRL( DER = obj)
def maybe_RSA(obj): return None if obj is None else rpki.x509.RSA( DER = obj)
def maybe_PKCS10(obj): return None if obj is None else rpki.x509.PKCS10(DER = obj)
# Because of the way Django ORM uses DJANGO_SETTINGS_MODULE, we'll
# probably need to fork() to handle the several databases. Shouldn't
# be particularly difficult, write three driver functions and a
# service function that fork()s then calls a driver, or something like
# that.
#
# Prototype with rpkid for now, fork later.
os.environ.update(DJANGO_SETTINGS_MODULE = "rpki.django_settings.rpkid")
import django
django.setup()
import rpki.rpkidb
print "rpkid self"
for row in world.databases.rpkid.self:
rpki.rpkidb.models.Tenant.objects.create(
pk = row.self_id,
tenant_handle = row.self_handle,
use_hsm = row.use_hsm,
crl_interval = row.crl_interval,
regen_margin = row.regen_margin,
bpki_cert = maybe_X509(row.bpki_cert),
bpki_glue = maybe_X509(row.bpki_glue))
print "rpkid bsc"
for row in world.databases.rpkid.bsc:
tenant = rpki.rpkidb.models.Tenant.objects.get(pk = row.self_id)
rpki.rpkidb.models.BSC.objects.create(
pk = row.bsc_id,
bsc_handle = row.bsc_handle,
private_key_id = maybe_RSA(row.private_key_id),
pkcs10_request = maybe_PKCS10(row.pkcs10_request),
hash_alg = row.hash_alg or "sha256",
signing_cert = maybe_X509(row.signing_cert),
signing_cert_crl = maybe_CRL(row.signing_cert_crl),
tenant = tenant)
print "rpkid repository"
for row in world.databases.rpkid.repository:
tenant = rpki.rpkidb.models.Tenant.objects.get(pk = row.self_id )
bsc = rpki.rpkidb.models.BSC.objects.get (pk = row.bsc_id, tenant = tenant)
rpki.rpkidb.models.Repository.objects.create(
pk = row.repository_id,
repository_handle = row.repository_handle,
peer_contact_uri = row.peer_contact_uri,
bpki_cert = maybe_X509(row.bpki_cert),
bpki_glue = maybe_X509(row.bpki_glue),
last_cms_timestamp = row.last_cms_timestamp,
bsc = bsc,
tenant = tenant)
print "rpkid parent"
for row in world.databases.rpkid.parent:
tenant = rpki.rpkidb.models.Tenant.objects.get (pk = row.self_id )
bsc = rpki.rpkidb.models.BSC.objects.get (pk = row.bsc_id, tenant = tenant)
repository = rpki.rpkidb.models.Repository.objects.get(pk = row.repository_id, tenant = tenant)
rpki.rpkidb.models.Parent.objects.create(
pk = row.parent_id,
parent_handle = row.parent_handle,
bpki_cert = maybe_X509(row.bpki_cms_cert),
bpki_glue = maybe_X509(row.bpki_cms_glue),
peer_contact_uri = row.peer_contact_uri,
sia_base = row.sia_base,
sender_name = row.sender_name,
recipient_name = row.recipient_name,
last_cms_timestamp = row.last_cms_timestamp,
bsc = bsc,
repository = repository,
tenant = tenant)
|
