1

from __future__ import absolute_import

     2

from __future__ import print_function

     3

import os

     4

from binascii import b2a_hqx

     5

try:

     6

    from runtime.spawn_subprocess import call

     7

except ImportError:

     8

    from subprocess import call

     9

    10

restart_stunnel_cmdline = ["/etc/init.d/S50stunnel", "restart"]

    11

    12

_PSKpath = None

    13

    14

    15

def restartStunnel():

    16

    """

    17

    Restart stunnel service using SysV init stript

    18

    to apply new generated credentials

    19

    """

    20

    try:

    21

        call(restart_stunnel_cmdline)

    22

    except OSError:

    23

        print(_("Couldn't restart stunnel service"))

    24

    25

    26

def PSKgen(ID, PSKpath):

    27

    28

    # b2a_hqx output len is 4/3 input len

    29

    secret = os.urandom(192)  # int(256/1.3333)

    30

    secretstring = b2a_hqx(secret)

    31

    32

    PSKstring = ID+":"+secretstring

    33

    with open(PSKpath, 'w') as f:

    34

        f.write(PSKstring)

    35

    restartStunnel()

    36

    37

    38

def ensurePSK(ID, PSKpath):

    39

    global _PSKpath

    40

    _PSKpath = PSKpath

    41

    # check if already there

    42

    if not os.path.exists(PSKpath):

    43

        # create if needed

    44

        PSKgen(ID, PSKpath)

    45

    46

    47

def getPSKID(errorlog):

    48

    if _PSKpath is not None:

    49

        if not os.path.exists(_PSKpath):

    50

            errorlog(

    51

                'Error: Pre-Shared-Key Secret in %s is missing!\n' % _PSKpath)

    52

            return None

    53

        ID, _sep, PSK = open(_PSKpath).read().partition(':')

    54

        PSK = PSK.rstrip('\n\r')

    55

        return (ID, PSK)

    56

    return None