1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
|
#!/usr/bin/python
# fedora-cert - a command line tool to manage your fedora SSL user certificates
#
# Copyright (C) 2009-2010 Red Hat Inc.
# Author(s): Dennis Gilmore <dennis@ausil.us>
#
# This program is free software; you can redistribute it and/or modify it
# under the terms of the GNU General Public License as published by the
# Free Software Foundation; either version 2 of the License, or (at your
# option) any later version. See http://www.gnu.org/copyleft/gpl.html for
# the full text of the license.
import optparse
import fedora_cert
import urlgrabber
import sys
def main(opts):
# lets read in the existing cert if it exists.
# gets us existing acc info
if not opts.username:
try:
username = fedora_cert.read_user_cert()
except:
print "Can't determine fas name, lets get a new cert"
try:
fedora_cert.create_user_cert(None)
except fedora_cert.fedora_cert_error, e:
print e
sys.exit(1)
sys.exit(0)
else:
username = opts.username
#has cert expired? do we force a new cert? get a new one
if opts.newcert:
print "Getting a new User Certificate"
try:
fedora_cert.create_user_cert(username)
except fedora_cert.fedora_cert_error, e:
print e
sys.exit(1)
sys.exit(0)
if fedora_cert.certificate_expired():
print "Certificate has expired, getting a new one"
try:
fedora_cert.create_user_cert(username)
except fedora_cert.fedora_cert_error, e:
print e
sys.exit(1)
sys.exit(0)
if opts.verifycert:
print "Verifying Certificate"
try:
fedora_cert.verify_cert()
except fedora_cert.fedora_cert_error, e:
print e
sys.exit(1)
print "CRL Checking not implemented yet"
if __name__ == '__main__':
opt_p = optparse.OptionParser(usage="%prog [OPTIONS] ")
opt_p.add_option('-u', '--username', action='store', dest='username',
default=False, help="FAS Username.")
opt_p.add_option('-n', '--new-cert', action='store_true', dest='newcert',
default=False, help="Generate a new Fedora Certificate.")
opt_p.add_option('-v', '--verify-cert', action='store_true', dest='verifycert',
default=False, help="Verify Certificate.")
(opts, args) = opt_p.parse_args()
main(opts)
|
