Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Cleanup symbiosis-ssl with default rubocop #80

Merged
merged 1 commit into from Aug 14, 2017
Merged

Cleanup symbiosis-ssl with default rubocop #80

Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Jump to
Jump to file
Failed to load files.
Diff view
Diff view
112 changes: 52 additions & 60 deletions common/bin/symbiosis-ssl
View file
Open in desktop
Expand Up @@ -57,74 +57,75 @@
# Modules we require
#

require 'English'
require 'getoptlong'

opts = GetoptLong.new(
[ '--help', '-h', GetoptLong::NO_ARGUMENT ],
[ '--manual', '-m', GetoptLong::NO_ARGUMENT ],
[ '--verbose', '-v', GetoptLong::NO_ARGUMENT ],
[ '--debug', '-d', GetoptLong::NO_ARGUMENT ],
[ '--force', '-f', GetoptLong::NO_ARGUMENT ],
[ '--list', '-l', GetoptLong::NO_ARGUMENT ],
[ '--threshold', '-t', GetoptLong::REQUIRED_ARGUMENT ],
[ '--no-generate', '-G', GetoptLong::NO_ARGUMENT ],
[ '--no-rollover', '-R', GetoptLong::NO_ARGUMENT ],
[ '--select', '-s', GetoptLong::REQUIRED_ARGUMENT ],
[ '--prefix', '-p', GetoptLong::REQUIRED_ARGUMENT ]
['--help', '-h', GetoptLong::NO_ARGUMENT],
['--manual', '-m', GetoptLong::NO_ARGUMENT],
['--verbose', '-v', GetoptLong::NO_ARGUMENT],
['--debug', '-d', GetoptLong::NO_ARGUMENT],
['--force', '-f', GetoptLong::NO_ARGUMENT],
['--list', '-l', GetoptLong::NO_ARGUMENT],
['--threshold', '-t', GetoptLong::REQUIRED_ARGUMENT],
['--no-generate', '-G', GetoptLong::NO_ARGUMENT],
['--no-rollover', '-R', GetoptLong::NO_ARGUMENT],
['--select', '-s', GetoptLong::REQUIRED_ARGUMENT],
['--prefix', '-p', GetoptLong::REQUIRED_ARGUMENT]
)

manual = help = false
$VERBOSE = false
$DEBUG = false
prefix = "/srv"
prefix = '/srv'
do_list = do_generate = do_rollover = nil
rollover_to = nil
threshold = 21

opts.each do |opt,arg|
case opt
when '--no-generate'
do_generate = false
when '--no-rollover'
do_rollover = false
when '--select'
rollover_to = arg.to_s
when '--force'
do_generate = do_rollover = true
$VERBOSE = true
when '--threshold'
begin
threshold = Integer(arg)
rescue ArgumentError
warn "** Could not parse #{arg.inspect} as an integer for --threshold"
end
when '--help'
help = true
when '--manual'
manual = true
when '--prefix'
prefix = arg
when '--list'
do_list = true
when '--verbose'
$VERBOSE = true
when '--debug'
$DEBUG = true
when '--no-generate'
do_generate = false
when '--no-rollover'
do_rollover = false
when '--select'
rollover_to = arg.to_s
when '--force'
do_generate = do_rollover = true
$VERBOSE = true
when '--threshold'
begin
threshold = Integer(arg)
rescue ArgumentError
warn "** Could not parse #{arg.inspect} as an integer for --threshold"
end
when '--help'
help = true
when '--manual'
manual = true
when '--prefix'
prefix = arg
when '--list'
do_list = true
when '--verbose'
$VERBOSE = true
when '--debug'
$DEBUG = true
end
end

#
# Output help as required.
#
if help or manual
if help || manual
require 'symbiosis/utils'
Symbiosis::Utils.show_help(__FILE__) if help
Symbiosis::Utils.show_manual(__FILE__) if manual
exit 0
end

#
# The required spawn a massive stack of warnings in verbose mode. So let's
# The requires spawn a massive stack of warnings in verbose mode. So let's
# hide them.
#
v = $VERBOSE
Expand All @@ -141,7 +142,6 @@ require 'symbiosis/ssl/selfsigned'
#
$VERBOSE = v


domains = []

ARGV.each do |arg|
Expand All @@ -155,21 +155,18 @@ ARGV.each do |arg|
domains << domain
end

if rollover_to and ARGV.length != 1
warn "** Exactly one domain must be specfied when rolling over to a specific set."
if rollover_to && ARGV.length != 1
warn '** Exactly one domain must be specfied when rolling over to a specific set.'
exit 1
end

if ARGV.empty?
domains = Symbiosis::Domains.all(prefix)
end
domains = Symbiosis::Domains.all(prefix) if ARGV.empty?

exit_code = 0

%w(INT TERM).each do |sig|
%w[INT TERM].each do |sig|
trap(sig) do

if 0 == Process.uid
if Process.uid.zero?
Process.euid = 0
Process.egid = 0
end
Expand All @@ -180,9 +177,8 @@ end

now = Time.now

domains.sort{|a,b| a.name <=> b.name}.each do |domain|

if do_list or rollover_to
domains.sort_by(&:name).each do |domain|
if do_list || rollover_to
puts "Certificate sets for #{domain}:"

if domain.ssl_available_sets.empty?
Expand All @@ -201,11 +197,9 @@ domains.sort{|a,b| a.name <=> b.name}.each do |domain|
current = domain.ssl_current_set
puts "\tCurrent SSL set: #{current.name}\n" unless $VERBOSE

if rollover_to.nil?
next
end
next if rollover_to.nil?

to_set = domain.ssl_available_sets.find{|s| s.name.to_s == rollover_to}
to_set = domain.ssl_available_sets.find { |s| s.name.to_s == rollover_to }

if to_set.nil?
puts "\tThere is no set '#{rollover_to}' available for this domain."
Expand All @@ -226,12 +220,10 @@ domains.sort{|a,b| a.name <=> b.name}.each do |domain|
begin
domain.ssl_magic(threshold, do_generate, do_rollover, now)
rescue StandardError => err
puts "\t!! Failed: #{err.to_s.gsub($/,'')}" if $VERBOSE
puts "\t!! Failed: #{err.to_s.gsub($RS, '')}" if $VERBOSE
puts err.backtrace.join("\n") if $DEBUG
exit_code = 1
end

end

exit exit_code