2
0
mirror of https://github.com/xcat2/confluent.git synced 2025-08-27 21:40:51 +00:00
Files
confluent/misc/sshca.py
Jarrod Johnson 34f2f6e359 Add a sample for doing SSH CA
This will explore the concept for the
backend of the get certificate api.
2020-03-06 13:43:54 -05:00

23 lines
596 B
Python

#!/usr/bin/python
import confluent.collective.manager as collective
import eventlet.green.subprocess as subprocess
import os
def initialize_ca():
try:
os.makedirs('/etc/confluent/ssh', mode=0o600)
except OSError as e:
if e.errno != 17:
raise
caname = '{0} SSH CA'.format(collective.get_myname())
subprocess.check_call(['ssh-keygen', '-C', caname, '-t', 'ecdsa', '-f', '/etc/confluent/ssh/ca', '-N', ''])
def ca_exists():
return os.path.exists('/etc/confluent/ssh/ca')
if __name__ == '__main__':
if not ca_exists():
initialize_ca()