nik/FreedomBox
1
0
Fork 0
mirror of https://github.com/freedombox/FreedomBox.git synced 2026-07-22 11:59:33 +00:00
Code Issues Packages Projects Releases Wiki Activity

letsencrypt: Trigger events for obtain, revoke and delete

Browse Source 
Signed-off-by: Sunil Mohan Adapa <sunil@medhas.org>
Reviewed-by: Joseph Nuthalapati <njoseph@thoughtworks.com>
This commit is contained in:
Sunil Mohan Adapa 2019-06-28 11:36:24 -07:00 committed by Joseph Nuthalapati
parent c33c44eea0
commit 8cae72c441
No known key found for this signature in database
GPG Key ID: 5398F00A2FA43C35
2 changed files with 28 additions and 10 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

32
plinth/modules/letsencrypt/__init__.py
View File

@ -27,10 +27,11 @@ from plinth import action_utils, actions
from plinth import app as app_module
from plinth import cfg, menu
from plinth.errors import ActionError
from plinth.modules import config, names
from plinth.modules import names
from plinth.signals import domain_added, domain_removed, domainname_change
from plinth.utils import format_lazy
from . import components
from .manifest import backup
version = 3
@ -115,8 +116,25 @@ def diagnose():
return results
def try_action(domain, action):
actions.superuser_run('letsencrypt', [action, '--domain', domain])
def certificate_obtain(domain):
"""Obtain a certificate for a domain and notify handlers."""
actions.superuser_run('letsencrypt', ['obtain', '--domain', domain])
# Don't trigger an obtained event. Obtaining a certificate freshly also
# leads to a renewal (deploy) event from Let's Encrypt. There is no easy
# way to distinguish if the event is an initial event or a renewal event.
def certificate_revoke(domain):
"""Revoke a certificate for a domain and notify handlers."""
actions.superuser_run('letsencrypt', ['revoke', '--domain', domain])
components.on_certificate_event('revoked', [domain], None)
def certificate_delete(domain):
"""Delete a certificate for a domain and notify handlers."""
actions.superuser_run('letsencrypt', ['delete', '--domain', domain])
components.on_certificate_event('deleted', [domain], None)
def on_domainname_change(sender, old_domainname, new_domainname, **kwargs):
@ -142,10 +160,10 @@ def on_domain_added(sender, domain_type='', name='', description='',
try:
# Obtaining certs during tests or empty names isn't expected to succeed
if sender != 'test' and name:
logger.info("Obtaining a Let\'s Encrypt certificate for " + name)
try_action(name, 'obtain')
logger.info('Obtaining a Let\'s Encrypt certificate for %s', name)
certificate_obtain(name)
return True
except ActionError as ex:
except ActionError:
return False
@ -155,7 +173,7 @@ def on_domain_removed(sender, domain_type, name='', **kwargs):
# Revoking certs during tests or empty names isn't expected to succeed
if sender != 'test' and name:
logger.info("Revoking the Let\'s Encrypt certificate for " + name)
try_action(name, 'revoke')
certificate_revoke(name)
return True
except ActionError as exception:
logger.warning(

6
plinth/modules/letsencrypt/views.py
View File

@ -50,7 +50,7 @@ def index(request):
def revoke(request, domain):
"""Revoke a certificate for a given domain."""
try:
letsencrypt.try_action(domain, 'revoke')
letsencrypt.certificate_revoke(domain)
messages.success(
request,
_('Certificate successfully revoked for domain {domain}.'
@ -69,7 +69,7 @@ def revoke(request, domain):
def obtain(request, domain):
"""Obtain and install a certificate for a given domain."""
try:
letsencrypt.try_action(domain, 'obtain')
letsencrypt.certificate_obtain(domain)
messages.success(
request,
_('Certificate successfully obtained for domain {domain}').format(
@ -86,7 +86,7 @@ def obtain(request, domain):
def delete(request, domain):
"""Delete a certificate for a given domain, and cleanup renewal config."""
try:
actions.superuser_run('letsencrypt', ['delete', '--domain', domain])
letsencrypt.certificate_delete(domain)
messages.success(
request,
_('Certificate successfully deleted for domain {domain}').format(