Package ganeti :: Package tools :: Module ssl_update

[frames] | no frames]

Module ssl_update

Script to recreate and sign the client SSL certificates.

Classes

SslSetupError
Local class for reporting errors.

Functions

ParseOptions()
Parses the options passed to the program.

source code

DeleteClientCertificate()
Deleting the client certificate.

source code

ClearMasterCandidateSsconfList()
Clear the ssconf list of master candidate certs.

source code

Main()
Main routine.

source code

Variables

_DATA_CHECK = ht.TStrictDict(False, True, {constants.NDS_CLUST...

Imports: os, optparse, sys, logging, cli, constants, errors, utils, ht, pathutils, common

Function Details

ParseOptions()

Parses the options passed to the program.

Returns:: Options and arguments

DeleteClientCertificate()

Deleting the client certificate. This is necessary for downgrades.

ClearMasterCandidateSsconfList()

Clear the ssconf list of master candidate certs.

This is necessary when deleting the client certificates for a downgrade, because otherwise the master cannot distribute the configuration to the nodes via RPC during a downgrade anymore.

Variables Details

_DATA_CHECK

Value:

ht.TStrictDict(False, True, {constants.NDS_CLUSTER_NAME: ht.TNonEmptyS
tring, constants.NDS_NODE_DAEMON_CERTIFICATE: ht.TNonEmptyString, cons
tants.NDS_NODE_NAME: ht.TNonEmptyString, constants.NDS_ACTION: ht.TNon
EmptyString,})