summaryrefslogtreecommitdiff
path: root/ticket.py
diff options
context:
space:
mode:
Diffstat (limited to 'ticket.py')
-rw-r--r--ticket.py25
1 files changed, 25 insertions, 0 deletions
diff --git a/ticket.py b/ticket.py
new file mode 100644
index 0000000..e7697e9
--- /dev/null
+++ b/ticket.py
@@ -0,0 +1,25 @@
+import crypto, socket, time
+
+keyfile = 'subdap-%s.key' % (socket.gethostname())
+pubfile = 'subdap-%s.pem' % (socket.gethostname())
+keys = ['user', 'ts', 'sig']
+
+def tgt_create(user):
+ ts = int(time.time())
+ data = '%d:%s' % (ts, user)
+ sig = crypto.sign(keyfile, data)
+ return {'user': user, 'ts': ts, 'sig': sig}
+
+def tgt_verify(user, ts, sig, maxage = None):
+ data = '%d:%s' % (int(ts), user)
+ status = crypto.verify(pubfile, data, sig)
+ if maxage != None:
+ status &= ts > time.time() - maxage
+ return status
+
+if __name__ == '__main__':
+ sig = tgt_create('test')
+ print sig
+ assert not tgt_verify(maxage = -9999, **sig)
+ assert tgt_verify(maxage = 9999, **sig)
+