summaryrefslogtreecommitdiffstats
path: root/scripts
diff options
context:
space:
mode:
authorSeth Vidal <skvidal@fedoraproject.org>2007-10-04 16:41:51 -0400
committerSeth Vidal <skvidal@fedoraproject.org>2007-10-04 16:41:51 -0400
commitce379bdb3d6ade0a6326d5d7cf9446389cf4d94b (patch)
tree1c666b97ec851ea0b842940409fb3fd65ab10a3e /scripts
parent3ff3336d954160739fca807732ec217d2dabc572 (diff)
downloadthird_party-func-ce379bdb3d6ade0a6326d5d7cf9446389cf4d94b.tar.gz
third_party-func-ce379bdb3d6ade0a6326d5d7cf9446389cf4d94b.tar.xz
third_party-func-ce379bdb3d6ade0a6326d5d7cf9446389cf4d94b.zip
- certmaster-ca supports wildcards to -s and -c, now
- add basic acl support to funcd - make sure that the caller is using the cert/key of our ca before letting anything run - add authfailure exception
Diffstat (limited to 'scripts')
-rwxr-xr-xscripts/certmaster-ca12
1 files changed, 9 insertions, 3 deletions
diff --git a/scripts/certmaster-ca b/scripts/certmaster-ca
index f7982ca..867bd04 100755
--- a/scripts/certmaster-ca
+++ b/scripts/certmaster-ca
@@ -67,9 +67,15 @@ def main(args):
return 1
for hn in args:
- csrfile = '%s/%s.csr' % (cm.cfg.csrroot, hn)
- certfile = cm.sign_this_csr(csrfile)
- print '%s signed - cert located at %s' % (hn, certfile)
+ csrglob = '%s/%s.csr' % (cm.cfg.csrroot, hn)
+ csrs = glob.glob(csrglob)
+ if not csrs:
+ errorprint('No match for %s to sign' % hn)
+ return 1
+
+ for fn in csrs:
+ certfile = cm.sign_this_csr(fn)
+ print '%s signed - cert located at %s' % (fn, certfile)
return 0
if opts.clean: