paulbsd-salt/states/_states/pki.py
2021-07-18 10:02:15 +02:00

48 lines
1.5 KiB
Python

#!/usr/bin/python3
from salt.utils.stringutils import get_diff
def fetched(name=None,
url="http://pki",
username=None,
password=None,
domains=None,
certfile=None,
keyfile=None):
ret = {
'name': name,
'changes': {},
'result': False,
'comment': 'Config is not up to date'
}
currentcert = None
currentkey = None
domain_concat = ",".join(domains)
currentcert = __salt__['pki.get_file_content'](checkfile=certfile)
currentkey = __salt__['pki.get_file_content'](checkfile=keyfile)
newcert, newkey = __salt__['pki.get_pki_cert'](url=url,
username=username,
password=password,
domains=domain_concat)
if currentcert != newcert or currentkey != newkey:
wcert = __salt__['pki.write_file_content'](newcert, certfile)
wkey = __salt__['pki.write_file_content'](newkey, keyfile)
ret["changes"]["old"] = "\n".join([currentcert, currentkey])
ret["changes"]["new"] = "\n".join([newcert, newkey])
ret["changes"]["diff"] = get_diff(ret["changes"]["old"],
ret["changes"]["new"])
ret["comment"] = "Updated certificates and keys"
ret["result"] = all([wcert, wkey])
else:
ret["comment"] = "Config is good and not changed"
ret["result"] = True
return ret