3
cj$ @ s U d Z ddlZddlZddlmZ ddlmZmZ ddlm Z ddl
m Z ddl m
Z
mZ ddlmZ ejeZdd d
d d gd
Zdddddgd
dddddgd
ddddd gd
dZxd:D ]Zed ee< qW xd;D ]Zed ee< qW d Zd d d d!d"d dddddddd#gZd$d%d&eeeed'gd(d)gd*Ze
eeZ d+d, Zd-d. Zd/d0 Z d1d2 Z d3d4 Z d5d6 Z e e e e!dd7d8d9Z"dS )t |dD ]0\}}t|}| d j|d}tj||dd qW dS )a-
Adds certificates to the system. To actually apply the new certificates
you must also call the appropriate distro-specific utility such as
L{update_ca_certs}.
@param distro_cfg: A hash providing _distro_ca_certs_configs function.
@param certs: A list of certificate strings.
N r# )
cert_indexi )mode) enumeratestrformatr
write_file)r/ Zcertsr2 cZcert_file_contentsZcert_file_namer, r, r- add_ca_certs s r9 c C s@ | dkrt | n*| d kr s(
r> c C s: | d dkrdS t jd tj| d tj| d dS )z
Removes all default trusted CA certificates from the system.
@param distro_cfg: A hash providing _distro_ca_certs_configs function.
r
Nz Deleting system CA certificatesr )LOGdebugr Zdelete_dir_contents)r/ r, r, r- r= s
r= )r r+ cloudargsreturnc C s d|krt jdddd nd|kr2tjd| dS d|krLd|krLtjd |jd|jd}t|jj}d
|krt jd dd d |jd
|jd
drtjd t |jj| d|krt j
|d}|rtjdt | t || tjd t
| dS )au
Call to handle ca_cert sections in cloud-config file.
@param name: The module name "ca_cert" from cloud.cfg
@param cfg: A nested dict containing the entire cloud config contents.
@param cloud: The L{CloudInit} object in use.
@param log: Pre-initialized Python logger object to use for logging.
@param args: Any module arguments from cloud.cfg
zca-certszKey 'ca-certs'z22.1zUse 'ca_certs' instead.)Z
deprecatedZdeprecated_versionZ
extra_messager z
rR )r r r r r r )r r )#__doc__Zloggingr' textwrapr Z cloudinitr r Zcloudinit.cloudr Zcloudinit.configr Zcloudinit.config.schemar r Zcloudinit.settingsr Z getLogger__name__rK r& r$ rP ZMODULE_DESCRIPTIONr" metar. r0 r9 r? r> r= r5 listrR r, r, r, r- s
'