x/tatu
Code Issues Proposed changes

Server creates CA's private keys (instead of client).

Browse Source
This commit is contained in:
Pino de Candia 2017-10-29 03:34:26 +00:00
parent aae0119466
commit 79a56d259c
3 changed files with 3 additions and 13 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
tatu/api/models.py
View File

@ -13,8 +13,6 @@ class Authorities(object):
db.createAuthority( db.createAuthority(
self.session, self.session,
body['auth_id'], body['auth_id'],
user_key=body['user_key'],
host_key=body['host_key'],
) )
resp.status = falcon.HTTP_201 resp.status = falcon.HTTP_201
resp.location = '/authorities/' + body['auth_id'] resp.location = '/authorities/' + body['auth_id']

6
tatu/db/models.py
View File

@ -23,10 +23,10 @@ class Authority(Base):
def getAuthority(session, auth_id): def getAuthority(session, auth_id):
return session.query(Authority).get(auth_id) return session.query(Authority).get(auth_id)
def createAuthority(session, auth_id, user_key, host_key): def createAuthority(session, auth_id):
auth = Authority(auth_id=auth_id, auth = Authority(auth_id=auth_id,
user_key=user_key, user_key=RSA.generate(2048).exportKey('PEM'),
host_key=host_key) host_key=RSA.generate(2048).exportKey('PEM'))
session.add(auth) session.add(auth)
session.commit() session.commit()
return auth return auth

8
tatu/tests/test_app.py
View File

@ -32,17 +32,11 @@ user_pub_key = user_key.publickey().exportKey('OpenSSH')
user_fingerprint = sshpubkeys.SSHKey(user_pub_key).hash() user_fingerprint = sshpubkeys.SSHKey(user_pub_key).hash()
auth_id = str(uuid.uuid4()) auth_id = str(uuid.uuid4())
auth_user_key = RSA.generate(2048)
auth_host_key = RSA.generate(2048)
auth_user_pub_key = auth_user_key.publickey().exportKey('OpenSSH')
auth_host_pub_key = auth_host_key.publickey().exportKey('OpenSSH')
@pytest.mark.dependency() @pytest.mark.dependency()
def test_post_authority(client, db): def test_post_authority(client, db):
body = { body = {
'auth_id': auth_id, 'auth_id': auth_id,
'user_key': auth_user_key.exportKey('PEM'),
'host_key': auth_host_key.exportKey('PEM'),
} }
response = client.simulate_post( response = client.simulate_post(
'/authorities', '/authorities',
@ -61,9 +55,7 @@ def test_get_authority(client):
body = json.loads(response.content) body = json.loads(response.content)
assert 'auth_id' in body assert 'auth_id' in body
assert 'user_key.pub' in body assert 'user_key.pub' in body
assert body['user_key.pub'] == auth_user_pub_key
assert 'host_key.pub' in body assert 'host_key.pub' in body
assert body['host_key.pub'] == auth_host_pub_key
assert 'user_key' not in body assert 'user_key' not in body
assert 'host_key' not in body assert 'host_key' not in body