python-bpcon/configManager.py at master · hatmer/python-bpcon · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
"""
Reads configuration for congregate, bpcon, and logging
Creates any missing credential files (in linux only)
"""

import configparser
import ssl
import logging
from logging.config import fileConfig
import os.path
from Crypto.PublicKey import RSA
from BPCon.utils import shell

### Logging Configuration ###
#FORMAT = '%(levelname)s [%(filename)s %(funcName)s] %(message)s'
#logging.basicConfig(format=FORMAT)

fileConfig('logging_config.ini')
log = logging.getLogger()
#############################

class ConfigManager:

    def load_config(self, configFile):
        log = logging.getLogger()
        self.config = configparser.ConfigParser()
        self.config.read(configFile)

        conf = {}
        conf['log'] = log
        conf['ip_addr'] = self.config['network']['ip_addr']
        conf['port'] = int(self.config['network']['port'])
        conf['p_wss'] = "wss://"+conf['ip_addr'] +":"+ str(conf['port'])
        conf['c_wss'] = "wss://"+conf['ip_addr'] +":"+ str(conf['port']+1)

#        log.info("adding peers from config")
#        conf['peerlist'] = []
#        for key,val in self.config.items('peers'):
#            wss = "wss://"+key+":"+val
#            conf['peerlist'].append(wss)
#        log.info("peers added")
        conf['peerlist'] = [] # empty for clean start

        conf['peer_certs'] = self.config['creds']['peer_certs']
        conf['certfile'] = self.config['creds']['certfile']
        conf['keyfile'] = self.config['creds']['keyfile']
        conf['peer_keys'] = self.config['creds']['peer_keys']

        # Logging
        log.info("verifying credentials")
        # verify credential file tree
        if not os.path.exists('creds'):
            shell("mkdir creds")
        if not os.path.exists('creds/peers'):
            shell("mkdir -p creds/peers/certs")
            shell("mkdir -p creds/peers/pubkeys")
        if not os.path.exists('creds/local'):
            shell("mkdir creds/local")
        if not os.path.isfile('creds/local/server.key'):
            log.info("Generating private key")
            shell("openssl genrsa -passout pass:x -out server.pass.key 2048")
            shell("openssl rsa -passin pass:x -in server.pass.key -out creds/local/server.key")
            shell("rm server.pass.key")
            shell("openssl rsa -in creds/local/server.key -pubout > creds/local/server.pub")
        if not os.path.isfile('creds/local/server.crt'):
            log.info("Signing certificate")
            shell("openssl req -new -subj '/C=SE/ST=XX/L=XX/O=XX/CN=localhost' -key creds/local/server.key -out creds/local/server.csr")
            shell("openssl x509 -req -days 365 -in creds/local/server.csr -signkey creds/local/server.key -out creds/local/server.crt")

        conf['use_single_port'] = bool(self.config['system']['use_single_port'])
        conf['config_file'] = self.config['state']['config_file']
        conf['backup_file'] = self.config['state']['backup_file']
        conf['MAX_GROUP_SIZE'] = int(self.config['vars']['MAX_GROUP_SIZE'])


        ctx = ssl.SSLContext(ssl.PROTOCOL_SSLv23)
        ctx.load_cert_chain(certfile=conf['certfile'], keyfile=conf['keyfile'])
        conf['ssl'] = ctx
        conf['is_client'] = int(self.config['testing']['is_client'])
        return conf

    def save_config(self):
        with open(self.config['state']['config_file'], 'w') as configfile:
            self.config.write(configfile)