51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA.
*/
#include <sys/stat.h>
+#include <unistd.h>
#include <iostream>
#include <fstream>
#include "mysql.h"
#include "simpleOpensslSigner.h"
+#ifdef NO_DAEMON
+#define DAEMON false
+#else
+#define DAEMON true
+#endif
+
+std::string keyDir;
+std::vector<Profile> profiles;
+
std::string writeBackFile( uint32_t serial, std::string cert ) {
std::string filename = "keys";
mkdir( filename.c_str(), 0755 );
return 1;
}
- std::shared_ptr<JobProvider> jp( new MySQLJobProvider( "localhost", "cacert", argv[1], "cacert" ) );
- std::shared_ptr<Signer> sign( new SimpleOpensslSigner() );
- std::shared_ptr<Job> job = jp->fetchJob();
+ std::ifstream config;
+ config.open( "config.txt" );
- if( !job ) {
- std::cout << "Nothing to work on" << std::endl;
- return 2;
+ if( !config.is_open() ) {
+ std::cerr << "config missing" << std::endl;
+ return 1;
}
- if( job->task == "sign" ) {
- try {
- std::shared_ptr<TBSCertificate> cert = jp->fetchTBSCert( job );
+ std::string line1;
- if( !cert ) {
- std::cout << "wasn't able to load CSR" << std::endl;
- return 2;
+ while( config >> line1 ) {
+ if( line1[0] == '#' ) {
+ continue;
+ }
+
+ int splitter = line1.find( "=" );
+
+ if( splitter == -1 ) {
+ std::cerr << "Ignoring malformed config line: " << line1 << std::endl;
+ continue;
+ }
+
+ std::string key = line1.substr( 0, splitter );
+ std::string value = line1.substr( splitter + 1 );
+
+ if( key == "key.directory" ) {
+ keyDir = value;
+ continue;
+ }
+
+ if( key.compare( 0, 8, "profile." ) == 0 ) {
+ int numE = key.find( ".", 9 );
+
+ if( numE == 0 ) {
+ std::cout << "invalid line: " << line1 << std::endl;
+ continue;
}
- std::cout << "Found a CSR at '" << cert->csr << "' signing" << std::endl;
- std::ifstream t( cert->csr );
- cert->csr_content = std::string( std::istreambuf_iterator<char>( t ), std::istreambuf_iterator<char>() );
-
- std::shared_ptr<SignedCertificate> res = sign->sign( cert );
- std::string fn = writeBackFile( res->serial, res->certificate );
- res->crt_name = fn;
- jp->writeBack( job, res );
- } catch( const char* c ) {
- std::cerr << c << std::endl;
- return 2;
+ unsigned int i = atoi( key.substr( 8, numE - 8 ).c_str() );
+ std::string rest = key.substr( numE + 1 );
+
+ if( i + 1 > profiles.size() ) {
+ profiles.resize( i + 1 );
+ }
+
+ if( rest == "key" ) {
+ profiles[i].cert = value;
+ } else if( rest == "cert" ) {
+ profiles[i].key = value;
+ } else {
+ std::cout << "invalid line: " << line1 << std::endl;
+ continue;
+ }
}
}
- if( !jp->finishJob( job ) ) {
- return 1;
+ std::cout << profiles.size() << " profiles loaded." << std::endl;
+
+ if( keyDir == "" ) {
+ std::cerr << "Missing config property key.directory" << std::endl;
+ return -1;
}
- return 0;
+ config.close();
+
+ std::shared_ptr<JobProvider> jp( new MySQLJobProvider( "localhost", "cacert", argv[1], "cacert" ) );
+ std::shared_ptr<Signer> sign( new SimpleOpensslSigner() );
+
+ while( true ) {
+ std::shared_ptr<Job> job = jp->fetchJob();
+
+ if( !job ) {
+ std::cout << "Nothing to work on" << std::endl;
+ sleep( 5 );
+ continue;
+ }
+
+ if( job->task == "sign" ) {
+ try {
+ std::shared_ptr<TBSCertificate> cert = jp->fetchTBSCert( job );
+
+ if( !cert ) {
+ std::cout << "wasn't able to load CSR" << std::endl;
+ return 2;
+ }
+
+ std::cout << "Found a CSR at '" << cert->csr << "' signing" << std::endl;
+ std::ifstream t( cert->csr );
+ cert->csr_content = std::string( std::istreambuf_iterator<char>( t ), std::istreambuf_iterator<char>() );
+
+ std::shared_ptr<SignedCertificate> res = sign->sign( cert );
+ std::string fn = writeBackFile( res->serial, res->certificate );
+ res->crt_name = fn;
+ jp->writeBack( job, res );
+ } catch( const char* c ) {
+ std::cerr << c << std::endl;
+ return 2;
+ }
+ } else {
+ std::cout << "Unknown job type" << job->task << std::endl;
+ }
+
+ if( DAEMON && !jp->finishJob( job ) ) {
+ return 1;
+ }
+
+ if( !DAEMON ) {
+ return 0;
+ }
+ }
}