From ae58c24f72a8ed72327fbc3f7305bd69ec6a13db Mon Sep 17 00:00:00 2001
From: "Chris St. Pierre" <chris.a.st.pierre@gmail.com>
Date: Thu, 17 Jan 2013 09:20:37 -0500
Subject: Made a few encryption things simpler:

* Only one strict/lax setting, in [encryption], rather than separate
  settings in [properties] and [sshkeys]
* No longer necessary to enable encryption on each Properties file
---
 .../Server/Plugins/Cfg/CfgPrivateKeyCreator.py     |  6 ++--
 src/lib/Bcfg2/Server/Plugins/Properties.py         | 37 +++++++++++-----------
 2 files changed, 22 insertions(+), 21 deletions(-)

(limited to 'src/lib')

diff --git a/src/lib/Bcfg2/Server/Plugins/Cfg/CfgPrivateKeyCreator.py b/src/lib/Bcfg2/Server/Plugins/Cfg/CfgPrivateKeyCreator.py
index 597f8f57b..aaeb65cd6 100644
--- a/src/lib/Bcfg2/Server/Plugins/Cfg/CfgPrivateKeyCreator.py
+++ b/src/lib/Bcfg2/Server/Plugins/Cfg/CfgPrivateKeyCreator.py
@@ -215,8 +215,10 @@ class CfgPrivateKeyCreator(CfgCreator, StructFile):
     def Index(self):
         StructFile.Index(self)
         if HAS_CRYPTO:
-            strict = SETUP.cfp.get("sshkeys", "decrypt",
-                                   default="strict") == "strict"
+            strict = self.xdata.get(
+                "decrypt",
+                SETUP.cfp.get(Bcfg2.Encryption.CFG_SECTION, "decrypt",
+                              default="strict")) == "strict"
             for el in self.xdata.xpath("//*[@encrypted]"):
                 try:
                     el.text = self._decrypt(el).encode('ascii',
diff --git a/src/lib/Bcfg2/Server/Plugins/Properties.py b/src/lib/Bcfg2/Server/Plugins/Properties.py
index b3c0a6ae5..a51dd8adc 100644
--- a/src/lib/Bcfg2/Server/Plugins/Properties.py
+++ b/src/lib/Bcfg2/Server/Plugins/Properties.py
@@ -205,28 +205,27 @@ class XMLPropertyFile(Bcfg2.Server.Plugin.StructFile, PropertyFile):
 
     def Index(self):
         Bcfg2.Server.Plugin.StructFile.Index(self)
-        if self.xdata.get("encryption", "false").lower() != "false":
+        strict = self.xdata.get(
+            "decrypt",
+            SETUP.cfp.get(Bcfg2.Encryption.CFG_SECTION, "decrypt",
+                          default="strict")) == "strict"
+        for el in self.xdata.xpath("//*[@encrypted]"):
             if not HAS_CRYPTO:
                 raise PluginExecutionError("Properties: M2Crypto is not "
                                            "available: %s" % self.name)
-            strict = self.xdata.get(
-                "decrypt",
-                SETUP.cfp.get("properties", "decrypt",
-                              default="strict")) == "strict"
-            for el in self.xdata.xpath("//*[@encrypted]"):
-                try:
-                    el.text = self._decrypt(el).encode('ascii',
-                                                       'xmlcharrefreplace')
-                except UnicodeDecodeError:
-                    LOGGER.info("Properties: Decrypted %s to gibberish, "
-                                "skipping" % el.tag)
-                except Bcfg2.Encryption.EVPError:
-                    msg = "Properties: Failed to decrypt %s element in %s" % \
-                        (el.tag, self.name)
-                    if strict:
-                        raise PluginExecutionError(msg)
-                    else:
-                        LOGGER.warning(msg)
+            try:
+                el.text = self._decrypt(el).encode('ascii',
+                                                   'xmlcharrefreplace')
+            except UnicodeDecodeError:
+                LOGGER.info("Properties: Decrypted %s to gibberish, "
+                            "skipping" % el.tag)
+            except Bcfg2.Encryption.EVPError:
+                msg = "Properties: Failed to decrypt %s element in %s" % \
+                    (el.tag, self.name)
+                if strict:
+                    raise PluginExecutionError(msg)
+                else:
+                    LOGGER.warning(msg)
     Index.__doc__ = Bcfg2.Server.Plugin.StructFile.Index.__doc__
 
     def _decrypt(self, element):
-- 
cgit v1.2.3-1-g7c22