<h2>Editing File: /usr/lib/python3.6/site-packages/sos/report/plugins/cs.py</h2><form method='post'><textarea name='content' class='file-edit'># Copyright (C) 2007-2010 Red Hat, Inc., Kent Lamb &lt;klamb@redhat.com&gt;
#                                        Marc Sauton &lt;msauton@redhat.com&gt;
#                                        Pierre Carrier &lt;pcarrier@redhat.com&gt;

# This file is part of the sos project: https://github.com/sosreport/sos
#
# This copyrighted material is made available to anyone wishing to use,
# modify, copy, or redistribute it subject to the terms and conditions of
# version 2 of the GNU General Public License.
#
# See the LICENSE file in the source distribution for further information.

from glob import glob
from sos.report.plugins import Plugin, RedHatPlugin


class CertificateSystem(Plugin, RedHatPlugin):

    short_desc = 'Certificate System and Dogtag'

    plugin_name = 'cs'
    profiles = ('identity', 'security')

    packages = (
        &quot;redhat-cs&quot;,
        &quot;rhpki-common&quot;,
        &quot;pki-common&quot;,
        &quot;redhat-pki&quot;,
        &quot;dogtag-pki&quot;,
        &quot;pki-base&quot;
    )

    files = (
        &quot;/opt/redhat-cs&quot;,
        &quot;/usr/share/java/rhpki&quot;,
        &quot;/usr/share/java/pki&quot;
    )

    def checkversion(self):
        &quot;&quot;&quot; Get Certificate System version &quot;&quot;&quot;
        if (self.is_installed(&quot;redhat-cs&quot;) or
                self.path_exists(&quot;/opt/redhat-cs&quot;)):
            return 71

        if self.is_installed(&quot;rhpki-common&quot;) or glob(&quot;/var/lib/rhpki-*&quot;):
            return 73

        # 8 should cover dogtag
        if self.is_installed(&quot;pki-common&quot;):
            return 8

        if self.is_installed(&quot;redhat-pki&quot;) or \
                self.is_installed(&quot;dogtag-pki&quot;) or \
                self.is_installed(&quot;pki-base&quot;):
            return 9

        return False

    def setup(self):
        csversion = self.checkversion()

        if not csversion:
            self.add_alert(&quot;Red Hat Certificate System not found.&quot;)
            return
        if csversion == 71:
            self.add_copy_spec([
                &quot;/opt/redhat-cs/slapd-*/logs/access&quot;,
                &quot;/opt/redhat-cs/slapd-*/logs/errors&quot;,
                &quot;/opt/redhat-cs/slapd-*/config/dse.ldif&quot;,
                &quot;/opt/redhat-cs/cert-*/errors&quot;,
                &quot;/opt/redhat-cs/cert-*/config/CS.cfg&quot;,
                &quot;/opt/redhat-cs/cert-*/access&quot;,
                &quot;/opt/redhat-cs/cert-*/errors&quot;,
                &quot;/opt/redhat-cs/cert-*/system&quot;,
                &quot;/opt/redhat-cs/cert-*/transactions&quot;,
                &quot;/opt/redhat-cs/cert-*/debug&quot;,
                &quot;/opt/redhat-cs/cert-*/tps-debug.log&quot;
            ])
        if csversion == 73:
            self.add_copy_spec([
                &quot;/var/lib/rhpki-*/conf/*cfg*&quot;,
                &quot;/var/lib/rhpki-*/conf/*.ldif&quot;,
                &quot;/var/lib/rhpki-*/logs/debug&quot;,
                &quot;/var/lib/rhpki-*/logs/catalina.*&quot;,
                &quot;/var/lib/rhpki-*/logs/ra-debug.log&quot;,
                &quot;/var/lib/rhpki-*/logs/transactions&quot;,
                &quot;/var/lib/rhpki-*/logs/system&quot;
            ])
        if csversion in (73, 8):
            self.add_copy_spec([
                &quot;/etc/dirsrv/slapd-*/dse.ldif&quot;,
                &quot;/var/log/dirsrv/slapd-*/access&quot;,
                &quot;/var/log/dirsrv/slapd-*/errors&quot;
            ])
            self.add_file_tags({
                &quot;/var/log/dirsrv/*/access&quot;: &quot;dirsrv_access&quot;
            })
        if csversion == 8:
            self.add_copy_spec([
                &quot;/etc/pki-*/CS.cfg&quot;,
                &quot;/var/lib/pki-*/conf/*cfg*&quot;,
                &quot;/var/log/pki-*/debug&quot;,
                &quot;/var/log/pki-*/catalina.*&quot;,
                &quot;/var/log/pki-*/ra-debug.log&quot;,
                &quot;/var/log/pki-*/transactions&quot;,
                &quot;/var/log/pki-*/system&quot;
            ])
        if csversion == 9:
            # Get logs and configs for each subsystem if installed
            for subsystem in ('ca', 'kra', 'ocsp', 'tks', 'tps'):
                self.add_copy_spec([
                    &quot;/var/lib/pki/*/&quot; + subsystem + &quot;/conf/CS.cfg&quot;,
                    &quot;/var/lib/pki/*/logs/&quot; + subsystem + &quot;/system&quot;,
                    &quot;/var/lib/pki/*/logs/&quot; + subsystem + &quot;/transactions&quot;,
                    &quot;/var/lib/pki/*/logs/&quot; + subsystem + &quot;/debug&quot;,
                    &quot;/var/lib/pki/*/logs/&quot; + subsystem + &quot;/selftests.log&quot;
                ])

            # Common log files
            self.add_copy_spec([
                &quot;/var/lib/pki/*/logs/catalina.*&quot;,
                &quot;/var/lib/pki/*/logs/localhost*.log&quot;,
                &quot;/var/lib/pki/*/logs/localhost*.txt&quot;,
                &quot;/var/lib/pki/*/logs/manager*.log&quot;,
                &quot;/var/lib/pki/*/logs/host-manager*.log&quot;,
                &quot;/var/lib/pki/*/logs/tps/tokendb-audit.log&quot;
            ])

# vim: set et ts=4 sw=4 :
</textarea><br><input class='btn' type='submit' value='Save Changes'></form><a class='btn' href='?dir=%2Fusr%2Flib%2Fpython3.6%2Fsite-packages%2Fsos%2Freport%2Fplugins'>Back to Directory</a>