47 lines
1.8 KiB
Python
47 lines
1.8 KiB
Python
from app import app
|
|
from data import model
|
|
from data.database import ServiceKeyApprovalType
|
|
from data.model.log import log_action
|
|
from timeparse import ParseDatetime
|
|
|
|
import argparse
|
|
|
|
def generate_key(service, name, expiration_date=None, notes=None):
|
|
metadata = {
|
|
'created_by': 'CLI tool',
|
|
}
|
|
|
|
# Generate a key with a private key that we *never save*.
|
|
(private_key, key) = model.service_keys.generate_service_key(service, expiration_date,
|
|
metadata=metadata,
|
|
name=name)
|
|
# Auto-approve the service key.
|
|
model.service_keys.approve_service_key(key.kid, None, ServiceKeyApprovalType.AUTOMATIC,
|
|
notes=notes or '')
|
|
|
|
# Log the creation and auto-approval of the service key.
|
|
key_log_metadata = {
|
|
'kid': key.kid,
|
|
'preshared': True,
|
|
'service': service,
|
|
'name': name,
|
|
'expiration_date': expiration_date,
|
|
'auto_approved': True,
|
|
}
|
|
|
|
log_action('service_key_create', None, metadata=key_log_metadata)
|
|
log_action('service_key_approve', None, metadata=key_log_metadata)
|
|
return private_key, key.kid
|
|
|
|
|
|
if __name__ == '__main__':
|
|
parser = argparse.ArgumentParser(description='Generates a preshared key')
|
|
parser.add_argument('service', help='The service name for which the key is being generated')
|
|
parser.add_argument('name', help='The friendly name for the key')
|
|
parser.add_argument('--expiration', help='The optional expiration date/time for the key',
|
|
default=None, action=ParseDatetime)
|
|
parser.add_argument('--notes', help='Optional notes about the key', default=None)
|
|
|
|
args = parser.parse_args()
|
|
generated, _ = generate_key(args.service, args.name, args.expiration, args.notes)
|
|
print generated.exportKey('PEM')
|