From 1c44d82bc9270466521e8c8d5339d0213935f385 Mon Sep 17 00:00:00 2001 From: Adrian Likins Date: Wed, 30 Apr 2008 22:37:07 -0400 Subject: add two new options to "certmaster-ca" -list-signed shows a list of certs the certmaster has already signed --list-cert-hashes returns the list of signed certs in the CN-hash format that the acls files expects. Should make it a little easier to use the acls. Both options take optional hostnames or hostname globs --- scripts/certmaster-ca | 32 +++++++++++++++++++++++++++++++- 1 file changed, 31 insertions(+), 1 deletion(-) (limited to 'scripts/certmaster-ca') diff --git a/scripts/certmaster-ca b/scripts/certmaster-ca index 27e190e..7370ef3 100755 --- a/scripts/certmaster-ca +++ b/scripts/certmaster-ca @@ -31,11 +31,17 @@ def parseargs(args): help='sign requests of hosts specified') parser.add_option('-c', '--clean', default=False, action="store_true", help="clean out all certs or csrs for the hosts specified") + parser.add_option("", "--list-signed", default=False, action="store_true", + help='list all signed certs') + parser.add_option("", "--list-cert-hash", default=False, action="store_true", + help="list the cert hash for signed certs") (opts, args) = parser.parse_args() - if not opts.list and not opts.sign and not opts.clean: + # gotta be a better way... + if not opts.list and not opts.sign and not opts.clean \ + and not opts.list_signed and not opts.list_cert_hash: parser.print_help() sys.exit(1) @@ -88,5 +94,29 @@ def main(args): return 0 + if opts.list_signed: + hostglobs = ["*"] + if args: + hostglobs = args + + signed_certs = cm.get_signed_certs(args) + + for i in signed_certs: + print i + + return 0 + + if opts.list_cert_hash: + hostglobs = ["*"] + if args: + hostglobs = args + + cert_hashes = cm.get_cert_hashes(hostglobs) + + for i in cert_hashes: + print i + + return 0 + if __name__ == "__main__": sys.exit(main(sys.argv[1:])) -- cgit