99911f6c4c
Retains python2.7 compatibility for all files. Fixes only syntax errors, tests still fail on python3 for various reasons.
104 lines
2.5 KiB
Python
Executable File
104 lines
2.5 KiB
Python
Executable File
#!/usr/bin/env python
|
|
from saml2.sigver import _get_xmlsec_cryptobackend, SecurityContext
|
|
from saml2.httpbase import HTTPBase
|
|
|
|
from saml2 import saml
|
|
from saml2 import md
|
|
from saml2.attribute_converter import ac_factory
|
|
from saml2.extension import dri
|
|
from saml2.extension import idpdisc
|
|
from saml2.extension import mdattr
|
|
from saml2.extension import mdrpi
|
|
from saml2.extension import mdui
|
|
from saml2.extension import shibmd
|
|
from saml2.extension import ui
|
|
from saml2 import xmldsig
|
|
from saml2 import xmlenc
|
|
|
|
import argparse
|
|
|
|
from saml2.mdstore import MetaDataFile, MetaDataExtern, MetadataStore
|
|
|
|
__author__ = 'rolandh'
|
|
|
|
"""
|
|
A script that imports and verifies metadata.
|
|
"""
|
|
|
|
|
|
ONTS = {
|
|
saml.NAMESPACE: saml,
|
|
mdui.NAMESPACE: mdui,
|
|
mdattr.NAMESPACE: mdattr,
|
|
mdrpi.NAMESPACE: mdrpi,
|
|
dri.NAMESPACE: dri,
|
|
ui.NAMESPACE: ui,
|
|
idpdisc.NAMESPACE: idpdisc,
|
|
md.NAMESPACE: md,
|
|
xmldsig.NAMESPACE: xmldsig,
|
|
xmlenc.NAMESPACE: xmlenc,
|
|
shibmd.NAMESPACE: shibmd
|
|
}
|
|
|
|
|
|
parser = argparse.ArgumentParser()
|
|
parser.add_argument('-a', dest='attrsmap')
|
|
parser.add_argument('-o', dest='output', default="local")
|
|
parser.add_argument('-x', dest='xmlsec')
|
|
parser.add_argument('-i', dest='ignore_valid', action='store_true')
|
|
parser.add_argument(dest="conf")
|
|
args = parser.parse_args()
|
|
|
|
metad = None
|
|
|
|
# config file format
|
|
#
|
|
# local <local file name>
|
|
# remote <url> <local file name for certificate use to verify signature>
|
|
#
|
|
# for instance
|
|
#
|
|
#local metadata_sp_1.xml
|
|
#local InCommon-metadata.xml
|
|
#remote https://kalmar2.org/simplesaml/module.php/aggregator/?id=kalmarcentral2&set=saml2 kalmar2.pem
|
|
#
|
|
|
|
ATTRCONV = ac_factory(args.attrsmap)
|
|
|
|
mds = MetadataStore(ONTS.values(), None, None)
|
|
|
|
for line in open(args.conf).readlines():
|
|
line = line.strip()
|
|
if len(line) == 0:
|
|
continue
|
|
elif line[0] == "#":
|
|
continue
|
|
spec = line.split(" ")
|
|
|
|
if args.ignore_valid:
|
|
kwargs = {"check_validity": False}
|
|
else:
|
|
kwargs = {}
|
|
|
|
if spec[0] == "local":
|
|
metad = MetaDataFile(ONTS.values(), spec[1], spec[1], **kwargs)
|
|
elif spec[0] == "remote":
|
|
ATTRCONV = ac_factory(args.attrsmap)
|
|
httpc = HTTPBase()
|
|
crypto = _get_xmlsec_cryptobackend(args.xmlsec)
|
|
sc = SecurityContext(crypto, key_type="", cert_type="")
|
|
metad = MetaDataExtern(ONTS.values(), ATTRCONV, spec[1],
|
|
sc, cert=spec[2], http=httpc, **kwargs)
|
|
|
|
if metad:
|
|
try:
|
|
metad.load()
|
|
except:
|
|
raise
|
|
|
|
mds.metadata[spec[1]] = metad
|
|
|
|
print(mds.dumps(args.output))
|
|
|
|
|