Merge lp:~akuzminsky/twindb-agent/bug-1432002 into lp:twindb-agent

[Aleksandr Kuzminsky]

=== modified file 'twindb.py'
--- twindb.py	2015-03-07 04:39:13 +0000
+++ twindb.py	2015-03-16 02:21:57 +0000
@@ -1738,6 +1738,66 @@
     return backup_size
 
 
+def handler_send_key(config, job):
+    """
+    Processes send_key job
+    """
+    # Get owner of the GPG key
+    try:
+        gpg_pub_key = job["params"]["gpg_pub_key"]
+        if gpg_pub_key:
+            cmd_1 = ["gpg", "--list-packets"]
+            logger.debug("Starting %r" % cmd_1)
+            p1 = subprocess.Popen(cmd_1, stdin=subprocess.PIPE, stdout=subprocess.PIPE)
+            cout, cerr = p1.communicate(gpg_pub_key)
+            for line in cout.split("\n"):
+                if "keyid:" in line:
+                    keyid = line.replace("keyid:", "").strip()
+                    break
+            logger.debug("Requestor's public key id is %s" % keyid)
+        else:
+            logger.error("Requestor public key is empty")
+            return
+    except OSError as err:
+        logger.error(err)
+        return
+    # Import public GPG key. It's a user public key sent by the dispatcher
+    try:
+        logger.debug("Importing requestor's key %s" % keyid)
+        cmd_1 = ["gpg", "--import"]
+        p1 = subprocess.Popen(cmd_1, stdin=subprocess.PIPE, stdout=subprocess.PIPE, stderr=subprocess.PIPE)
+        p1.communicate(gpg_pub_key)
+    except OSError as err:
+        logger.error(err)
+        return
+    # Get private key and encrypt it
+    try:
+        gpg_pub_key = job["params"]["gpg_pub_key"]
+        if gpg_pub_key:
+            logger.debug("Exporting private key of server %s" % server_id)
+            cmd_1 = ["gpg", "--armor", "--export-secret-key", server_id]
+            cmd_2 = ["gpg", "--armor", "--encrypt", "--sign", "--batch", "-r", keyid, "--local-user", server_id, "--trust-model", "always"]
+            logger.debug("Starting %r" % cmd_1)
+            p1 = subprocess.Popen(cmd_1, stdout=subprocess.PIPE)
+            logger.debug("Starting %r" % cmd_2)
+            p2 = subprocess.Popen(cmd_2, stdin=p1.stdout, stdout=subprocess.PIPE)
+            cout, cerr = p2.communicate()
+            enc_private_key = cout
+            logger.debug("Encrypted private key %s" % enc_private_key)
+    except OSError as err:
+        logger.error(err)
+        return
+    # Now send the private key to dispatcher
+    job_id = job["job_id"]
+    data = {
+        "type": "send_key",
+        "params": {
+            "enc_private_key": enc_private_key,
+            "job_id": job_id
+        }
+    }
+    get_response(data)
+
 # Check if directory is empty
 # Inputs
 #   dir - directory name
@@ -2341,6 +2401,8 @@
         elif job["type"] == "restore":
             #return restore_backup(config, job)
             return False
+        elif job["type"] == "send_key":
+            return handler_send_key(config, job)
         else:
             logger.error("Unsupported job type " + job["type"])
             return False