discomment certificates

app.config["JWT_SECRET_KEY"] = "super-secret"

jwt = JWTManager(app)

# # create public/PRIVATE key

# key = PKey()

# key.generate_key(TYPE_RSA, 2048)

# # Generate CSR 

# req = X509Req()

# req.get_subject().O = 'Telefonica I+D'

# req.get_subject().OU = 'Innovation'

# req.get_subject().L = 'Madrid'

# req.get_subject().ST = 'Madrid'

# req.get_subject().C = 'ES'

# req.get_subject().emailAddress = 'inno@tid.es'

# req.set_pubkey(key)

# req.sign(key, 'sha256')

# # Get CSR

# csr_request = dump_certificate_request(FILETYPE_PEM, req)

# # Get private key

# private_key = dump_privatekey(FILETYPE_PEM, key)

# # Get ca.cert from vault

# config = Config().get_config() # get configuration from config.py

# url = 'http://{}:{}/v1/secret/data/ca'.format(os.getenv('VAULT_HOSTNAME'), os.getenv('VAULT_PORT'))   # http://vault:8200/v1/secret/data/ca

# headers = {'X-Vault-Token': config['ca_factory']['token']}

# response = requests.request("GET", url, headers=headers, verify = False)

# ca_cert = json.loads(response.text)["data"]["data"]["ca"]

# # Request Vault a CA certificate to backoffice application

# url = 'http://{}:{}/v1/pki_int/sign/my-ca'.format(os.getenv('VAULT_HOSTNAME'), os.getenv('VAULT_PORT'))  # http://vault:8200/v1/pki_int/sign/my-ca

# headers = {'X-Vault-Token': config['ca_factory']['token']}  # token = dev-only-token

# data = {

#     'format':'pem_bundle',

#     'ttl': '43000h',

#     'csr': csr_request,

#     'common_name': "superadmin"

# }

# response = requests.request("POST", url, headers=headers, data=data, verify = False)

# backoffice_cert = json.loads(response.text)['data']['certificate']

# # Save ca_cert

# ca_file = open('./backoffice_service/certs/ca.crt', 'wb+')

# ca_file.write(bytes(ca_cert, 'utf-8'))

# ca_file.close()

# # Save private_key 

# private_key_file = open("./backoffice_service/certs/backoffice_vault_private_key.key", 'wb+')

# private_key_file.write(private_key)

# private_key_file.close()

# # Save backoffice_cert

# certification_file = open('./backoffice_service/certs/backoffice_vault_cert.crt', 'wb+')

# certification_file.write(bytes(backoffice_cert, 'utf-8'))

# certification_file.close()

# create public/PRIVATE key

key = PKey()

key.generate_key(TYPE_RSA, 2048)

# Generate CSR 

req = X509Req()

req.get_subject().O = 'Telefonica I+D'

req.get_subject().OU = 'Innovation'

req.get_subject().L = 'Madrid'

req.get_subject().ST = 'Madrid'

req.get_subject().C = 'ES'

req.get_subject().emailAddress = 'inno@tid.es'

req.set_pubkey(key)

req.sign(key, 'sha256')

# Get CSR

csr_request = dump_certificate_request(FILETYPE_PEM, req)

# Get private key

private_key = dump_privatekey(FILETYPE_PEM, key)

# Get ca.cert from vault

config = Config().get_config() # get configuration from config.py

url = 'http://{}:{}/v1/secret/data/ca'.format(os.getenv('VAULT_HOSTNAME'), os.getenv('VAULT_PORT'))   # http://vault:8200/v1/secret/data/ca

headers = {'X-Vault-Token': config['ca_factory']['token']}

response = requests.request("GET", url, headers=headers, verify = False)

ca_cert = json.loads(response.text)["data"]["data"]["ca"]

# Request Vault a CA certificate to backoffice application

url = 'http://{}:{}/v1/pki_int/sign/my-ca'.format(os.getenv('VAULT_HOSTNAME'), os.getenv('VAULT_PORT'))  # http://vault:8200/v1/pki_int/sign/my-ca

headers = {'X-Vault-Token': config['ca_factory']['token']}  # token = dev-only-token

data = {

    'format':'pem_bundle',

    'ttl': '43000h',

    'csr': csr_request,

    'common_name': "superadmin"

}

response = requests.request("POST", url, headers=headers, data=data, verify = False)

backoffice_cert = json.loads(response.text)['data']['certificate']

# Save ca_cert

ca_file = open('./backoffice_service/certs/ca.crt', 'wb+')

ca_file.write(bytes(ca_cert, 'utf-8'))

ca_file.close()

# Save private_key 

private_key_file = open("./backoffice_service/certs/backoffice_vault_private_key.key", 'wb+')

private_key_file.write(private_key)

private_key_file.close()

# Save backoffice_cert

certification_file = open('./backoffice_service/certs/backoffice_vault_cert.crt', 'wb+')

certification_file.write(bytes(backoffice_cert, 'utf-8'))

certification_file.close()

#----------------------------------------

# launch