exportroles

Perl写的CA认证程序

## OpenCA - CA Command
## (c) 2001 by Michael Bell and OpenCA Group
##
##   File Name: exportRoles
##       Brief: Export Roles
## Description: Export the following data
##              * all objects RBAC
##              * openssl.cnf
##              * roles2openssl.cnf
##  Parameters: 

my $cmdName = "exportRoles";

if ( $cmd !~ /$cmdName/i ) {
        configError( "Wrong Command Usage ($cmd over $cmdName)!" );
        exit 1;
}

## GNU Tar suggested for exporting Issued Certificates
## to the CA. We use the GNU tar because of its availability
## for all the platforms and its stability.

## Get required parameters from the configuration file
my $creat  = getRequired( 'CreateArchive' );
my $test   = getRequired( 'TestArchive' );
my $dest   = getRequired( 'ExportDev' );
my $cadir  = getRequired( 'OpencaDir' );
my $tmp    = getRequired( 'TempDir' );

my $openssl = getRequired( 'sslconfig' );
my $map     = getRequired( 'roles2openssl' );

my ( @lastExport );

## Build the right $cmd with substitution of the $dest
## with the 'ExportDest' and in 'TestArchive'
my $arc  = $query->subVar( $creat, '$dest', $dest );
my $test = $query->subVar( $test,  '$dest', $dest );

print startLogPage("RBAC Exporting" );

print addLogSection("Create Temporary Directory for ACL ... ");
$tmpdir = $tmp."/RBAC_".$$;

if( not mkdir( "$tmpdir", 0700 )) {
        print addErrorLog( "Failed creating dir $tmpdir" );
        closePage();
        exit 1;
}
if( not chdir( "$tmpdir" )) {
        print addErrorLog( "Failed changing dir to $tmpdir" );
        closePage();
        exit 1;
}
print addLogLine( "Ok." );
print closeLogSection ();

print addLogSection("Exporting Roles to $tmpdir ... ");
my @roles = $db->searchItems (DATATYPE => RBAC);
my $i = 0;
my $role;
my $tools = new OpenCA::Tools;
foreach $role (@roles) {
  $tools->saveFile (FILENAME => "rbac_".$i.".txt",
                    DATA     => $role->getParsed()->{ITEM}
                   );
}
print addLogLine( "Ok." );
print closeLogSection ();

print addLogSection("Copying $openssl to $tmpdir ... ");
$ret = `cp $openssl . 2>&1`;
if( $? != 0 ) {
	print addErrorLog("Cannot copy $openssl to $tmpdir!");
	print addLogLine( "cp $openssl ." );
	closePage();
	exit 1;
}
print addLogLine( "Ok." );
print addPreLogLine( $ret );
print closeLogSection ();

print addLogSection("Copying $map to $tmpdir ... ");
$ret = `cp $map . 2>&1`;
if( $? != 0 ) {
	print addErrorLog("Cannot copy $map to $tmpdir!");
	print addLogLine( "cp $map ." );
	closePage();
	exit 1;
}
print addLogLine( "Ok." );
print addPreLogLine( $ret );
print closeLogSection ();

print addLogSection("Creating archive ... ");

$ret = `$arc * 2>&1`;
if( $? != 0 ) {
	print addErrorLog("Archiving Failed to $dest!");
	print addLogLine( "$arc" );
	closePage();
	exit 1;
}
print addLogLine( "Ok." );
print addPreLogLine( $ret );
print closeLogSection();

print addLogSection("Testing Created Archive ... ");
$ret = `$test 2>&1`;
if( $? != 0 ) {
	print addErrorLog("Check Failed on $dest!");
	closePage();
	exit;
}
print addLogLine( "Ok." );
print addPreLogLine( $ret );
print closeLogSection();

print addLogSection ("Removing Temporary Files ... ");

if( not chdir( "$tmp" )) {
        print addErrorLog( "Failed changing dir to $tmp." );
        closePage();
        exit 1;
}
if ( length ($tmpdir) < 7 ) {
	print addErrorLog("Stopping removing because $tmpdir is shorter then 7 characters!");
	closePage();
	exit 1;
}
$ret = `rm -rf $tmpdir 2>&1`;
if( $? != 0 ) {
	print addErrorLog("Removing Failed for $tmpdir!");
	print addLogLine( "rm -rf $tmpdir" );
	closePage();
	exit 1;
}

print addLogLine( "Ok." );
print addPreLogLine( $ret );
print closeLogSection();

closePage();

1;