1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
|
#!/usr/bin/python
# Copyright (C) 2007, 2008, 2009, 2010 Dennis Gilmore
# Copyright (C) 2009 Stewart Adam
# This file is part of fedora-packager.
# fedora-packager is free software: you can redistribute it and/or modify
# it under the terms of the GNU General Public License as published by
# the Free Software Foundation, either version 2 of the License, or
# (at your option) any later version.
# fedora-packager is distributed in the hope that it will be useful,
# but WITHOUT ANY WARRANTY; without even the implied warranty of
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
# GNU General Public License for more details.
# You should have received a copy of the GNU General Public License
# along with fedora-packager. If not, see <http://www.gnu.org/licenses/>.
import os
import string
import sys
import subprocess
import fedora_cert
import pycurl
def write_arch_config(arch, file):
config_file = open(file, "w")
config_file.write("""[koji]
;configuration for koji cli tool
;url of XMLRPC server
server = http://%s.koji.fedoraproject.org/kojihub
;url of web interface
weburl = http://%s.koji.fedoraproject.org/koji
;url of package download site
pkgurl = http://%s.koji.fedoraproject.org/packages
;path to the koji top directory
;topdir = /mnt/koji
;configuration for SSL athentication
;client certificate
cert = ~/.fedora.cert
;certificate of the CA that issued the client certificate
ca = ~/.fedora-upload-ca.cert
;certificate of the CA that issued the HTTP server certificate
serverca = ~/.fedora-server-ca.cert
""" % (arch, arch, arch))
config_file.close()
print "Wrote %s koji config file" % arch
def generate_browser_cert():
'''Convert the user cert to the format for importing into a browser'''
os.system('/usr/bin/openssl pkcs12 -export -in ~/.fedora.cert -CAfile ~/.fedora-upload-ca.cert -out ~/fedora-browser-cert.p12')
print """
Browser certificate exported to ~/fedora-browser-cert.p12
To import the certificate into Firefox:
Edit -> Preferences -> Advanced
Click "View Certificates"
On "Your Certificates" tab, click "Import"
Select ~/fedora-browser-cert.p12
Type the export passphrase you chose earlier
Once imported, you should see a certificate named "Fedora Project".
Your username should appear underneath this.
You should now be able to click the "login" link at http://koji.fedoraproject.org/koji/ successfully.
"""
def download_cert(location, file):
'''Download the cert and write to file'''
fp = open(file, 'w')
curl = pycurl.Curl()
curl.setopt(pycurl.URL, location)
curl.setopt(pycurl.FOLLOWLOCATION, 1)
curl.setopt(pycurl.MAXREDIRS, 5)
curl.setopt(pycurl.CONNECTTIMEOUT, 30)
curl.setopt(pycurl.TIMEOUT, 300)
curl.setopt(pycurl.NOSIGNAL, 1)
curl.setopt(pycurl.WRITEDATA, fp)
try:
curl.perform()
except:
import traceback
traceback.print_exc(file=sys.stderr)
sys.stderr.flush()
curl.close()
fp.close()
print "Saved: %s" % file
def main():
user_home = os.path.expanduser('~')
print 'Setting up Fedora packager environment'
user_cert = os.path.join(user_home, '.fedora.cert')
upload_ca_cert = os.path.join(user_home, '.fedora-upload-ca.cert')
server_ca_cert = os.path.join(user_home, '.fedora-server-ca.cert')
if not os.path.isfile(user_cert):
print '''You need a client certificate from the Fedora Account System, lets get one now'''
create_user_cert()
else:
#check if the cert has expired if it has lets get a new one
if certificate_expired():
username = read_user_cert()
print "Certificate has expired, getting a new one"
create_user_cert(username)
download_cert('https://admin.fedoraproject.org/accounts/fedora-server-ca.cert', server_ca_cert)
if not os.path.islink(upload_ca_cert):
print 'Linking: ~/.fedora-server-ca.cert to ~/.fedora-upload-ca.cert'
if os.path.exists(upload_ca_cert):
os.unlink(upload_ca_cert)
os.symlink(server_ca_cert, upload_ca_cert)
if not os.path.isdir(os.path.join(user_home, '.koji')):
os.mkdir(os.path.join(user_home, '.koji'))
for arch in ['sparc', 'arm', 'alpha', 's390', 'hppa', 'ppc']:
config_file = '%s/.koji/%s-config' % (user_home, arch)
if not os.path.isfile(config_file):
write_arch_config(arch, config_file)
else:
print "koji config for %s exists. Replacing with new file." % arch
os.unlink(config_file)
write_arch_config(arch, config_file)
print 'Setting up Browser Certificates'
generate_browser_cert()
if __name__ == "__main__":
main()
|
