File Manager

003 File Manager

Current Path: /usr/local/lib/python3.8/site-packages/salt/beacons

usr / local / lib / python3.8 / site-packages / salt / beacons /

📁 ..
📄 __init__.py(18.16 KB)
📁 __pycache__
📄 adb.py(5.2 KB)
📄 aix_account.py(1.33 KB)
📄 avahi_announce.py(8.53 KB)
📄 bonjour_announce.py(8.21 KB)
📄 btmp.py(8.33 KB)
📄 cert_info.py(5.82 KB)
📄 diskusage.py(3.35 KB)
📄 glxinfo.py(1.84 KB)
📄 haproxy.py(3.02 KB)
📄 inotify.py(11.88 KB)
📄 journald.py(2.61 KB)
📄 junos_rre_keys.py(723 B)
📄 load.py(5.95 KB)
📄 log_beacon.py(3.67 KB)
📄 memusage.py(1.57 KB)
📄 napalm_beacon.py(11.61 KB)
📄 network_info.py(4.66 KB)
📄 network_settings.py(6.53 KB)
📄 pkg.py(2.57 KB)
📄 proxy_example.py(1.48 KB)
📄 ps.py(2.23 KB)
📄 salt_monitor.py(4.06 KB)
📄 salt_proxy.py(1.81 KB)
📄 sensehat.py(2.82 KB)
📄 service.py(6.15 KB)
📄 sh.py(3.1 KB)
📄 smartos_imgadm.py(2.6 KB)
📄 smartos_vmadm.py(3.34 KB)
📄 status.py(4.11 KB)
📄 swapusage.py(1.57 KB)
📄 telegram_bot_msg.py(2.45 KB)
📄 twilio_txt_msg.py(2.65 KB)
📄 watchdog.py(4.79 KB)
📄 wtmp.py(10.17 KB)

Editing: cert_info.py

"""
Beacon to monitor certificate expiration dates from files on the filesystem.

.. versionadded:: 3000

:maintainer: <devops@eitr.tech>
:maturity: new
:depends: OpenSSL
"""
import logging
from datetime import datetime

import salt.utils.beacons
import salt.utils.files

try:
    from OpenSSL import crypto

HAS_OPENSSL = True
except ImportError:
    HAS_OPENSSL = False

log = logging.getLogger(__name__)

DEFAULT_NOTIFY_DAYS = 45

__virtualname__ = "cert_info"

def __virtual__():
    if HAS_OPENSSL is False:
        return False

return __virtualname__

def validate(config):
    """
    Validate the beacon configuration
    """
    # Configuration for cert_info beacon should be a list of dicts
    if not isinstance(config, list):
        return False, "Configuration for cert_info beacon must be a list."

config = salt.utils.beacons.list_to_dict(config)

if "files" not in config:
        return (
            False,
            "Configuration for cert_info beacon must contain files option.",
        )
    return True, "Valid beacon configuration"

def beacon(config):
    """
    Monitor the certificate files on the minion.

Specify a notification threshold in days and only emit a beacon if any certificates are
    expiring within that timeframe or if `notify_days` equals `-1` (always report information).
    The default notification threshold is 45 days and can be overridden at the beacon level and
    at an individual certificate level.

.. code-block:: yaml

beacons:
          cert_info:
            - files:
                - /etc/pki/tls/certs/mycert.pem
                - /etc/pki/tls/certs/yourcert.pem:
                    notify_days: 15
                - /etc/pki/tls/certs/ourcert.pem
            - notify_days: 45
            - interval: 86400

"""
    ret = []
    certificates = []
    CryptoError = crypto.Error  # pylint: disable=invalid-name

config = salt.utils.beacons.list_to_dict(config)

global_notify_days = config.get("notify_days", DEFAULT_NOTIFY_DAYS)

for cert_path in config.get("files", []):
        notify_days = global_notify_days

if isinstance(cert_path, dict):
            try:
                next_cert_path = next(iter(cert_path))
                notify_days = cert_path[next_cert_path].get(
                    "notify_days", global_notify_days
                )
            except StopIteration as exc:
                log.error("Unable to load certificate %s (%s)", cert_path, exc)
                continue
            else:
                cert_path = next_cert_path

try:
            with salt.utils.files.fopen(cert_path) as fp_:
                cert = crypto.load_certificate(crypto.FILETYPE_PEM, fp_.read())
        except (OSError, CryptoError) as exc:
            log.error("Unable to load certificate %s (%s)", cert_path, exc)
            continue

cert_date = datetime.strptime(
            cert.get_notAfter().decode(encoding="UTF-8"), "%Y%m%d%H%M%SZ"
        )
        date_diff = (cert_date - datetime.today()).days
        log.debug("Certificate %s expires in %s days.", cert_path, date_diff)

if notify_days < 0 or date_diff <= notify_days:
            log.debug(
                "Certificate %s triggered beacon due to %s day notification threshold.",
                cert_path,
                notify_days,
            )
            extensions = []
            for ext in range(0, cert.get_extension_count()):
                extensions.append(
                    {
                        "ext_name": cert.get_extension(ext)
                        .get_short_name()
                        .decode(encoding="UTF-8"),
                        "ext_data": str(cert.get_extension(ext)),
                    }
                )

certificates.append(
                {
                    "cert_path": cert_path,
                    "issuer": ",".join(
                        [
                            '{}="{}"'.format(
                                t[0].decode(encoding="UTF-8"),
                                t[1].decode(encoding="UTF-8"),
                            )
                            for t in cert.get_issuer().get_components()
                        ]
                    ),
                    "issuer_dict": {
                        k.decode("UTF-8"): v.decode("UTF-8")
                        for k, v in cert.get_issuer().get_components()
                    },
                    "notAfter_raw": cert.get_notAfter().decode(encoding="UTF-8"),
                    "notAfter": cert_date.strftime("%Y-%m-%d %H:%M:%SZ"),
                    "notBefore_raw": cert.get_notBefore().decode(encoding="UTF-8"),
                    "notBefore": datetime.strptime(
                        cert.get_notBefore().decode(encoding="UTF-8"), "%Y%m%d%H%M%SZ"
                    ).strftime("%Y-%m-%d %H:%M:%SZ"),
                    "serial_number": cert.get_serial_number(),
                    "signature_algorithm": cert.get_signature_algorithm().decode(
                        encoding="UTF-8"
                    ),
                    "subject": ",".join(
                        [
                            '{}="{}"'.format(
                                t[0].decode(encoding="UTF-8"),
                                t[1].decode(encoding="UTF-8"),
                            )
                            for t in cert.get_subject().get_components()
                        ]
                    ),
                    "subject_dict": {
                        k.decode("UTF-8"): v.decode("UTF-8")
                        for k, v in cert.get_subject().get_components()
                    },
                    "version": cert.get_version(),
                    "extensions": extensions,
                    "has_expired": cert.has_expired(),
                }
            )

if certificates:
        ret.append({"certificates": certificates})

return ret

003 File Manager

Editing: cert_info.py

Upload File

Create Folder