Source code for octavia.controller.worker.v2.tasks.cert_task

# Copyright 2015 Hewlett-Packard Development Company, L.P.
# Licensed under the Apache License, Version 2.0 (the "License"); you may
# not use this file except in compliance with the License. You may obtain
# a copy of the License at
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
# License for the specific language governing permissions and limitations
# under the License.

from cryptography import fernet
from oslo_config import cfg
from stevedore import driver as stevedore_driver
from taskflow import task

from octavia.common import utils


[docs] class BaseCertTask(task.Task): """Base task to load drivers common to the tasks.""" def __init__(self, **kwargs): super().__init__(**kwargs) self.cert_generator = stevedore_driver.DriverManager( namespace='octavia.cert_generator', name=CONF.certificates.cert_generator, invoke_on_load=True, ).driver
[docs] class GenerateServerPEMTask(BaseCertTask): """Create the server certs for the agent comm Use the amphora_id for the CN """
[docs] def execute(self, amphora_id): cert = self.cert_generator.generate_cert_key_pair( cn=amphora_id, validity=CONF.certificates.cert_validity_time) key = utils.get_compatible_server_certs_key_passphrase() fer = fernet.Fernet(key) # storing in db requires conversion bytes to string # (required for python3) return fer.encrypt(cert.certificate + cert.private_key).decode('utf-8')