cert.py

# Copyright 2014 ETH Zurich
# Copyright 2018 ETH Zurich, Anapaya Systems
#
# Licensed under the Apache License, Version 2.0 (the "License");
# you may not use this file except in compliance with the License.
# You may obtain a copy of the License at
#
#   http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS,
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
# See the License for the specific language governing permissions and
# limitations under the License.
"""
:mod:`cert` --- SCION topology certificate generator
=============================================
"""
from collections import defaultdict

from plumbum import local

from topology.common import ArgsTopoConfig, srv_iter


class CertGenArgs(ArgsTopoConfig):
    pass


class CertGenerator(object):
    def __init__(self, args):
        """
        :param CertGenArgs args: Contains the passed command line
        arguments and the parsed topo config.
        """
        self.args = args
        self.pki = local['./bin/scion-pki']
        self.core_count = defaultdict(int)

    def generate(self, topo_dicts):
        self.pki('tmpl', 'topo', self.args.topo_config, '-d', self.args.output_dir)
        self.pki('keys', 'gen', '*', '-d', self.args.output_dir)
        self.pki('trc', 'gen', '*', '-d', self.args.output_dir)
        self.pki('certs', 'gen', '*', '-d', self.args.output_dir)
        self.pki('certs', 'customers', '*', '-d', self.args.output_dir)
        self._copy_files(topo_dicts)

    def _copy_files(self, topo_dicts):
        cp = local['cp']
        # Copy the certs and key dir for all elements.
        for topo_id, as_topo, base in srv_iter(
                topo_dicts, self.args.output_dir, common=True):
            elem_dir = local.path(base)
            as_dir = elem_dir.dirname
            cp('-r', as_dir / 'certs', elem_dir / 'certs')
            cp('-r', as_dir / 'keys', elem_dir / 'keys')
            cp(as_dir.dirname / 'trcs' // '*.trc', elem_dir / 'certs')
        # Copy the customers dir for all certificate servers.
        for topo_id, as_topo in topo_dicts.items():
            as_dir = local.path(topo_id.base_dir(self.args.output_dir))
            custom_dir = as_dir / 'customers'
            if not custom_dir.exists():
                continue
            for elem in as_topo["CertificateService"]:
                cp('-r', as_dir / 'customers', as_dir / elem / 'customers')