mirror of https://github.com/zeromq/pyzmq.git
62 lines
1.9 KiB
Python
62 lines
1.9 KiB
Python
#!/usr/bin/env python
|
|
|
|
"""
|
|
Generate client and server CURVE certificate files then move them into the
|
|
appropriate store directory, private_keys or public_keys. The certificates
|
|
generated by this script are used by the stonehouse and ironhouse examples.
|
|
|
|
In practice this would be done by hand or some out-of-band process.
|
|
|
|
Author: Chris Laws
|
|
"""
|
|
|
|
import os
|
|
import shutil
|
|
from typing import Union
|
|
|
|
import zmq.auth
|
|
|
|
|
|
def generate_certificates(base_dir: Union[str, os.PathLike]) -> None:
|
|
'''Generate client and server CURVE certificate files'''
|
|
keys_dir = os.path.join(base_dir, 'certificates')
|
|
public_keys_dir = os.path.join(base_dir, 'public_keys')
|
|
secret_keys_dir = os.path.join(base_dir, 'private_keys')
|
|
|
|
# Create directories for certificates, remove old content if necessary
|
|
for d in [keys_dir, public_keys_dir, secret_keys_dir]:
|
|
if os.path.exists(d):
|
|
shutil.rmtree(d)
|
|
os.mkdir(d)
|
|
|
|
# create new keys in certificates dir
|
|
server_public_file, server_secret_file = zmq.auth.create_certificates(
|
|
keys_dir, "server"
|
|
)
|
|
client_public_file, client_secret_file = zmq.auth.create_certificates(
|
|
keys_dir, "client"
|
|
)
|
|
|
|
# move public keys to appropriate directory
|
|
for key_file in os.listdir(keys_dir):
|
|
if key_file.endswith(".key"):
|
|
shutil.move(
|
|
os.path.join(keys_dir, key_file), os.path.join(public_keys_dir, '.')
|
|
)
|
|
|
|
# move secret keys to appropriate directory
|
|
for key_file in os.listdir(keys_dir):
|
|
if key_file.endswith(".key_secret"):
|
|
shutil.move(
|
|
os.path.join(keys_dir, key_file), os.path.join(secret_keys_dir, '.')
|
|
)
|
|
|
|
|
|
if __name__ == '__main__':
|
|
if zmq.zmq_version_info() < (4, 0):
|
|
raise RuntimeError(
|
|
f"Security is not supported in libzmq version < 4.0. libzmq version {zmq.zmq_version()}"
|
|
)
|
|
|
|
generate_certificates(os.path.dirname(__file__))
|