Closed tcmitchell closed 7 years ago
Adding PYTHONPATH to the execution fails with a different error:
sudo -u apache PYTHONPATH=/usr/share/geni-ch/chapi/chapi geni-sign-tool-csr
-k /usr/share/geni-ch/ma/ma-key.pem -c /usr/share/geni-ch/ma/ma-cert.pem \
-a ch.geni.net -d "${TOOL_EXPIRATION}" -e "${TOOL_EMAIL}" -i "${TOOL_NAME}"
--csr "${TOOL_CSR}" > /tmp/"${TOOL_NAME}".pem
Traceback (most recent call last):
File "/sbin/geni-sign-tool-csr", line 137, in <module>
sys.exit(main())
File "/sbin/geni-sign-tool-csr", line 119, in main
options.use_csr_subject)
File "/usr/share/geni-chapi/../geni-ch/chapi/chapi/tools/cert_utils.py", line 161, in make_cert
config = pm.getService('config')
File "/usr/share/geni-ch/chapi/chapi/tools/pluginmanager.py", line 39, in getService
return ALL_SERVICES[name]
KeyError: 'config'
This appears to be tied up in two changes: removing AMSoil and removing hardcoded paths. The underlying certificate signing function, cert_utils.make_cert
, now relies on the plugin manager to get the config plugin to get the OpenSSL config file.
geni-sign-tool-csr
will need to recreate some of the pluginmanager setup so that it can
invoke make_cert in the right environment.
Running geni-sign-tool-csr results in a stack trace: