Basic functionality in place

Change-Id: Ib331bf97e5cf61755a5884b48a3e510ebc257846
This commit is contained in:
Graham Hayes 2018-04-26 17:23:55 +01:00
parent f4818f279f
commit 038d7888e4
No known key found for this signature in database
GPG Key ID: 1B263DC59F4AEFD5
4 changed files with 75 additions and 3 deletions

View File

@ -0,0 +1,67 @@
# -*- coding: utf-8 -*-
# Licensed under the Apache License, Version 2.0 (the "License"); you may
# not use this file except in compliance with the License. You may obtain
# a copy of the License at
#
# http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
# License for the specific language governing permissions and limitations
# under the License.
import logging
import zope.interface
from certbot import interfaces
from certbot.plugins import dns_common
from openstack.config import loader
from openstack import connection
LOG = logging.getLogger(__name__)
@zope.interface.implementer(interfaces.IAuthenticator)
@zope.interface.provider(interfaces.IPluginFactory)
class Authenticator(dns_common.DNSAuthenticator):
"""DNS Authenticator for OpenStack
This Authenticator uses the OpenStack v2 DNS API to fulfill a
dns-01 challenge.
"""
description = 'Obtain certificates using a DNS TXT record.'
ttl = 60
@classmethod
def add_parser_arguments(cls, add): # pylint: disable=arguments-differ
super(Authenticator, cls).add_parser_arguments(
add, default_propagation_seconds=30)
add('client_config', help='OpenStack Client Config file.')
add('cloud', help='OpenStack to use.')
def more_info(self): # pylint: disable=missing-docstring,no-self-use
return 'This plugin configures a DNS TXT record to respond to a ' + \
'dns-01 challenge using the OpenStack DNS API.'
def _setup_credentials(self):
config_file = self.conf('client_config') or ''
config = loader.OpenStackConfig(
config_files=loader.CONFIG_FILES + [config_file])
self.cloud = connection.Connection(
config=config.get_one(
self.conf('cloud')
)
)
def _perform(self, domain, validation_name, validation):
self.zone = self.cloud.get_zone(domain + '.')
self.recordset = self.cloud.create_recordset(
self.zone['id'], validation_name + '.', "TXT", [validation])
def _cleanup(self, domain, validation_name, validation):
self.cloud.delete_recordset(
self.zone['id'], self.recordset['id'])

View File

@ -3,3 +3,6 @@
# process, which may cause wedges in the gate later. # process, which may cause wedges in the gate later.
pbr>=2.0 # Apache-2.0 pbr>=2.0 # Apache-2.0
acme[dev]
certbot[dev]
openstacksdk

View File

@ -13,8 +13,6 @@ classifier =
License :: OSI Approved :: Apache Software License License :: OSI Approved :: Apache Software License
Operating System :: POSIX :: Linux Operating System :: POSIX :: Linux
Programming Language :: Python Programming Language :: Python
Programming Language :: Python :: 2
Programming Language :: Python :: 2.7
Programming Language :: Python :: 3 Programming Language :: Python :: 3
Programming Language :: Python :: 3.5 Programming Language :: Python :: 3.5
@ -22,6 +20,10 @@ classifier =
packages = packages =
certbot_dns_openstack certbot_dns_openstack
[entry_points]
certbot.plugins =
dns-openstack = certbot_dns_openstack.dns_openstack:Authenticator
[build_sphinx] [build_sphinx]
all-files = 1 all-files = 1
warning-is-error = 1 warning-is-error = 1

View File

@ -1,6 +1,6 @@
[tox] [tox]
minversion = 2.0 minversion = 2.0
envlist = py35,py27,pep8 envlist = py35,pep8
skipsdist = True skipsdist = True
[testenv] [testenv]