From f0cefcc77d593198b6e295e92a8bf05fedc8c8ff Mon Sep 17 00:00:00 2001
From: Bhuvan Arumugam <bhuvan@apache.org>
Date: Sun, 8 Jul 2012 16:06:32 -0700
Subject: Keyring support for openstackclient.

Bug: 1030440

If password is defined in keyring, use it; otherwise, prompt for the
password. Keying is configured using command line switch,
--os-use-keyring or env(OS_USE_KEYRING).

* openstackclient/common/openstackkeyring.py
  The abstract class for keyring, specifically for openstack. The
  class is used to store encrypted password in keyring, without
  prompting for keyring password. The encrypted password is
  stored in ~/.openstack-keyring.cfg file.

* openstack-common.py
  Update openstackkeyring library from openstack.common.

* openstackclient/shell.py
  OpenStackClient.build_option_parser(): New boolean argument,
   --os-use-keyring, default to env(OS_USE_KEYRING).
  OpenStackClient.authenticate_user(): Get password from keyring,
  if it is defined; otherwise, prompt for the password. If user
  enter a password and keyring is enabled, store it in keyring.
  OpenStackClient.init_keyring_backend(): New method to define
  openstack backend for keyring.
  OpenStackClient.get_password_from_keyring(): New method to
  get password from keyring.
  OpenStackClient.set_password_in_keyring(): New method go set
  password in keyring.

* toos/pip-requires
  Define keyring and pycrypto as one of dependent.

Change-Id: I36d3a63054658c0ef0553d68b38fefbc236930ef
---
 openstackclient/common/openstackkeyring.py | 65 ++++++++++++++++++++++++++++++
 1 file changed, 65 insertions(+)
 create mode 100644 openstackclient/common/openstackkeyring.py

(limited to 'openstackclient/common')

diff --git a/openstackclient/common/openstackkeyring.py b/openstackclient/common/openstackkeyring.py
new file mode 100644
index 00000000..3a5ce27f
--- /dev/null
+++ b/openstackclient/common/openstackkeyring.py
@@ -0,0 +1,65 @@
+# Copyright 2011 OpenStack LLC.
+# All Rights Reserved
+#
+#    Licensed under the Apache License, Version 2.0 (the "License"); you may
+#    not use this file except in compliance with the License. You may obtain
+#    a copy of the License at
+#
+#         http://www.apache.org/licenses/LICENSE-2.0
+#
+#    Unless required by applicable law or agreed to in writing, software
+#    distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
+#    WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
+#    License for the specific language governing permissions and limitations
+#    under the License.
+#
+# vim: tabstop=4 shiftwidth=4 softtabstop=4
+
+"""
+Keyring backend for Openstack, to store encrypted password in a file.
+"""
+
+from Crypto.Cipher import AES
+
+import crypt
+import keyring
+import os
+
+KEYRING_FILE = os.path.join(os.path.expanduser('~'), '.openstack-keyring.cfg')
+
+
+class OpenstackKeyring(keyring.backend.BasicFileKeyring):
+    """ Openstack Keyring to store encrypted password """
+
+    filename = KEYRING_FILE
+
+    def supported(self):
+        """ applicable for all platforms, but not recommend """
+        pass
+
+    def _init_crypter(self):
+        """ initialize the crypter using the class name """
+        block_size = 32
+        padding = '0'
+
+        # init the cipher with the class name, upto block_size
+        password = __name__[block_size:]
+        password = password + (block_size - len(password) % \
+                              block_size) * padding
+        return AES.new(password, AES.MODE_CFB)
+
+    def encrypt(self, password):
+        """ encrypt the given password """
+        crypter = self._init_crypter()
+        return crypter.encrypt(password)
+
+    def decrypt(self, password_encrypted):
+        """ decrypt the given password """
+        crypter = self._init_crypter()
+        return crypter.decrypt(password_encrypted)
+
+
+def os_keyring():
+    """ initialize the openstack keyring """
+    return keyring.core.load_keyring(None,
+             'openstackclient.common.openstackkeyring.OpenstackKeyring')
-- 
cgit v1.2.1