1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
|
require 'puppet/application'
class Puppet::Application::Cert < Puppet::Application
should_parse_config
run_mode :master
attr_accessor :all, :ca, :digest, :signed
def subcommand
@subcommand
end
def subcommand=(name)
# Handle the nasty, legacy mapping of "clean" to "destroy".
sub = name.to_sym
@subcommand = (sub == :clean ? :destroy : sub)
end
option("--clean", "-c") do
self.subcommand = "destroy"
end
option("--all", "-a") do
@all = true
end
option("--digest DIGEST") do |arg|
@digest = arg
end
option("--signed", "-s") do
@signed = true
end
option("--debug", "-d") do |arg|
Puppet::Util::Log.level = :debug
end
require 'puppet/ssl/certificate_authority/interface'
Puppet::SSL::CertificateAuthority::Interface::INTERFACE_METHODS.reject {|m| m == :destroy }.each do |method|
option("--#{method}", "-#{method.to_s[0,1]}") do
self.subcommand = method
end
end
option("--verbose", "-v") do
Puppet::Util::Log.level = :info
end
def main
if @all
hosts = :all
elsif @signed
hosts = :signed
else
hosts = command_line.args.collect { |h| h.downcase }
end
begin
@ca.apply(:revoke, :to => hosts) if subcommand == :destroy
@ca.apply(subcommand, :to => hosts, :digest => @digest)
rescue => detail
puts detail.backtrace if Puppet[:trace]
puts detail.to_s
exit(24)
end
end
def setup
require 'puppet/ssl/certificate_authority'
exit(Puppet.settings.print_configs ? 0 : 1) if Puppet.settings.print_configs?
Puppet::Util::Log.newdestination :console
if [:generate, :destroy].include? subcommand
Puppet::SSL::Host.ca_location = :local
else
Puppet::SSL::Host.ca_location = :only
end
begin
@ca = Puppet::SSL::CertificateAuthority.new
rescue => detail
puts detail.backtrace if Puppet[:trace]
puts detail.to_s
exit(23)
end
end
def parse_options
# handle the bareword subcommand pattern.
result = super
unless self.subcommand then
if sub = self.command_line.args.shift then
self.subcommand = sub
else
help
end
end
result
end
end
|
