From 0c5273c85ea72d60e5907acb22398584ded0a077 Mon Sep 17 00:00:00 2001 From: Vishvananda Ishaya Date: Wed, 18 Jan 2012 21:04:47 -0800 Subject: Create nova cert worker for x509 support * Adds new worker for cert management * Makes decrypt use an rpc to the worker * Moves CA filesystem creation out of cloud.setup * Moves test for X509 into crypto * Adds test for encrypting and decrypting using cert * Cleans up extra code in cloudpipe * Fixes bug 918563 * Prepares for a future patch that will fix bug 903345 Change-Id: I4693c50c8f432706f97395af39e736f49d60e719 --- bin/nova-all | 2 +- bin/nova-cert | 47 +++++++++++++++++++++++++++++++++++++++++++++++ 2 files changed, 48 insertions(+), 1 deletion(-) create mode 100755 bin/nova-cert (limited to 'bin') diff --git a/bin/nova-all b/bin/nova-all index 9c9e2bbaa..806c2d002 100755 --- a/bin/nova-all +++ b/bin/nova-all @@ -65,7 +65,7 @@ if __name__ == '__main__': except (Exception, SystemExit): logging.exception(_('Failed to load %s') % 'objectstore-wsgi') for binary in ['nova-xvpvncproxy', 'nova-compute', 'nova-volume', - 'nova-network', 'nova-scheduler', 'nova-vsa']: + 'nova-network', 'nova-scheduler', 'nova-vsa', 'nova-cert']: try: servers.append(service.Service.create(binary=binary)) except (Exception, SystemExit): diff --git a/bin/nova-cert b/bin/nova-cert new file mode 100755 index 000000000..725bf4aee --- /dev/null +++ b/bin/nova-cert @@ -0,0 +1,47 @@ +#!/usr/bin/env python +# vim: tabstop=4 shiftwidth=4 softtabstop=4 + +# Copyright 2012 OpenStack, LLC. +# +# Licensed under the Apache License, Version 2.0 (the "License"); you may +# not use this file except in compliance with the License. You may obtain +# a copy of the License at +# +# http://www.apache.org/licenses/LICENSE-2.0 +# +# Unless required by applicable law or agreed to in writing, software +# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT +# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the +# License for the specific language governing permissions and limitations +# under the License. + +"""Starter script for Nova Cert.""" + +import eventlet +eventlet.monkey_patch() + +import os +import sys + +# If ../nova/__init__.py exists, add ../ to Python search path, so that +# it will override what happens to be installed in /usr/(local/)lib/python... +POSSIBLE_TOPDIR = os.path.normpath(os.path.join(os.path.abspath(sys.argv[0]), + os.pardir, + os.pardir)) +if os.path.exists(os.path.join(POSSIBLE_TOPDIR, 'nova', '__init__.py')): + sys.path.insert(0, POSSIBLE_TOPDIR) + + +from nova import flags +from nova import log as logging +from nova import service +from nova import utils + +if __name__ == '__main__': + utils.default_flagfile() + flags.FLAGS(sys.argv) + logging.setup() + utils.monkey_patch() + server = service.Service.create(binary='nova-cert') + service.serve(server) + service.wait() -- cgit