mirror of
https://github.com/ansible-collections/community.crypto.git
synced 2026-03-29 14:53:22 +00:00
5d32937321
* Move acme.py to acme/__init__.py to prepare splitup. * Began moving generic code out. * Creating backends. * Update unit tests. * Move remaining new code out. * Use new interface. * Rewrite module init code. * Add changelog. * Add BackendException for crypto backend errors. * Improve / uniformize ACME error reporting. * Create ACMELegacyAccount for backwards compatibility. * Split up ACMEAccount into ACMEClient and ACMEAccount. * Move get_keyauthorization into module_utils.acme.challenges. * Improve error handling. * Move challenge and authorization handling code into module_utils. * Add split_identifier helper. * Move order code into module_utils. * Move ACME v2 certificate handling code to module_utils. * Fix/move ACME v1 certificate retrieval to module_utils as well. * Refactor alternate chain handling code by splitting it up into simpler functions. * Make chain matcher creation part of backend.
91 lines
3.4 KiB
Python
91 lines
3.4 KiB
Python
# -*- coding: utf-8 -*-
|
|
|
|
# Copyright: (c) 2016 Michael Gruener <michael.gruener@chaosmoon.net>
|
|
# Copyright: (c) 2021 Felix Fontein <felix@fontein.de>
|
|
# GNU General Public License v3.0+ (see COPYING or https://www.gnu.org/licenses/gpl-3.0.txt)
|
|
|
|
from __future__ import absolute_import, division, print_function
|
|
__metaclass__ = type
|
|
|
|
|
|
import base64
|
|
import binascii
|
|
import copy
|
|
import datetime
|
|
import hashlib
|
|
import json
|
|
import locale
|
|
import os
|
|
import re
|
|
import shutil
|
|
import sys
|
|
import tempfile
|
|
import traceback
|
|
|
|
from ansible.module_utils.basic import missing_required_lib
|
|
from ansible.module_utils.urls import fetch_url
|
|
from ansible.module_utils.six.moves.urllib.parse import unquote
|
|
from ansible.module_utils._text import to_native, to_text, to_bytes
|
|
|
|
from ansible_collections.community.crypto.plugins.module_utils.acme.acme import (
|
|
get_default_argspec,
|
|
ACMEDirectory,
|
|
)
|
|
|
|
from ansible_collections.community.crypto.plugins.module_utils.acme.backend_cryptography import (
|
|
CryptographyBackend,
|
|
CRYPTOGRAPHY_VERSION,
|
|
)
|
|
|
|
from ansible_collections.community.crypto.plugins.module_utils.acme.backend_openssl_cli import (
|
|
OpenSSLCLIBackend,
|
|
)
|
|
|
|
from ansible_collections.community.crypto.plugins.module_utils.acme._compatibility import (
|
|
handle_standard_module_arguments,
|
|
set_crypto_backend,
|
|
HAS_CURRENT_CRYPTOGRAPHY,
|
|
)
|
|
|
|
from ansible_collections.community.crypto.plugins.module_utils.acme._compatibility import ACMELegacyAccount as ACMEAccount
|
|
|
|
from ansible_collections.community.crypto.plugins.module_utils.acme.errors import ModuleFailException
|
|
|
|
from ansible_collections.community.crypto.plugins.module_utils.acme.io import (
|
|
read_file,
|
|
write_file,
|
|
)
|
|
|
|
from ansible_collections.community.crypto.plugins.module_utils.acme.utils import (
|
|
nopad_b64,
|
|
pem_to_der,
|
|
process_links,
|
|
)
|
|
|
|
|
|
def openssl_get_csr_identifiers(openssl_binary, module, csr_filename, csr_content=None):
|
|
module.deprecate(
|
|
'Please adjust your custom module/plugin to the ACME module_utils refactor '
|
|
'(https://github.com/ansible-collections/community.crypto/pull/184). The '
|
|
'compatibility layer will be removed in community.crypto 2.0.0, thus breaking '
|
|
'your code', version='2.0.0', collection_name='community.crypto')
|
|
return OpenSSLCLIBackend(module, openssl_binary=openssl_binary).get_csr_identifiers(csr_filename=csr_filename, csr_content=csr_content)
|
|
|
|
|
|
def cryptography_get_csr_identifiers(module, csr_filename, csr_content=None):
|
|
module.deprecate(
|
|
'Please adjust your custom module/plugin to the ACME module_utils refactor '
|
|
'(https://github.com/ansible-collections/community.crypto/pull/184). The '
|
|
'compatibility layer will be removed in community.crypto 2.0.0, thus breaking '
|
|
'your code', version='2.0.0', collection_name='community.crypto')
|
|
return CryptographyBackend(module).get_csr_identifiers(csr_filename=csr_filename, csr_content=csr_content)
|
|
|
|
|
|
def cryptography_get_cert_days(module, cert_file, now=None):
|
|
module.deprecate(
|
|
'Please adjust your custom module/plugin to the ACME module_utils refactor '
|
|
'(https://github.com/ansible-collections/community.crypto/pull/184). The '
|
|
'compatibility layer will be removed in community.crypto 2.0.0, thus breaking '
|
|
'your code', version='2.0.0', collection_name='community.crypto')
|
|
return CryptographyBackend(module).get_cert_days(cert_filename=cert_file, now=now)
|