57 lines
1.9 KiB
Python
57 lines
1.9 KiB
Python
|
import argparse
|
||
|
|
|
||
|
|
from dateutil.parser import parse as parse_date
|
||
|
|
|
||
|
|
from app import app
|
||
|
|
from data import model
|
||
|
|
from data.database import ServiceKeyApprovalType
|
||
|
|
from data.logs_model import logs_model
|
||
|
|
|
||
|
|
|
||
|
|
def generate_key(service, name, expiration_date=None, notes=None):
|
||
|
|
metadata = {
|
||
|
|
'created_by': 'CLI tool',
|
||
|
|
}
|
||
|
|
|
||
|
|
# Generate a key with a private key that we *never save*.
|
||
|
|
(private_key, key) = model.service_keys.generate_service_key(service, expiration_date,
|
||
|
|
metadata=metadata,
|
||
|
|
name=name)
|
||
|
|
# Auto-approve the service key.
|
||
|
|
model.service_keys.approve_service_key(key.kid, ServiceKeyApprovalType.AUTOMATIC, notes=notes or '')
|
||
|
|
|
||
|
|
# Log the creation and auto-approval of the service key.
|
||
|
|
key_log_metadata = {
|
||
|
|
'kid': key.kid,
|
||
|
|
'preshared': True,
|
||
|
|
'service': service,
|
||
|
|
'name': name,
|
||
|
|
'expiration_date': expiration_date,
|
||
|
|
'auto_approved': True,
|
||
|
|
}
|
||
|
|
|
||
|
|
logs_model.log_action('service_key_create', metadata=key_log_metadata)
|
||
|
|
logs_model.log_action('service_key_approve', metadata=key_log_metadata)
|
||
|
|
return private_key, key.kid
|
||
|
|
|
||
|
|
|
||
|
|
def valid_date(s):
|
||
|
|
try:
|
||
|
|
return parse_date(s)
|
||
|
|
except ValueError:
|
||
|
|
msg = "Not a valid date: '{0}'.".format(s)
|
||
|
|
raise argparse.ArgumentTypeError(msg)
|
||
|
|
|
||
|
|
|
||
|
|
if __name__ == '__main__':
|
||
|
|
parser = argparse.ArgumentParser(description='Generates a preshared key')
|
||
|
|
parser.add_argument('service', help='The service name for which the key is being generated')
|
||
|
|
parser.add_argument('name', help='The friendly name for the key')
|
||
|
|
parser.add_argument('--expiration', default=None, type=valid_date,
|
||
|
|
help='The optional expiration date for the key')
|
||
|
|
parser.add_argument('--notes', help='Optional notes about the key', default=None)
|
||
|
|
|
||
|
|
args = parser.parse_args()
|
||
|
|
generated, _ = generate_key(args.service, args.name, args.expiration, args.notes)
|
||
|
|
print generated.exportKey('PEM')
|