diff options
| -rw-r--r-- | .gitignore | 1 | ||||
| -rw-r--r-- | ticket.py | 25 |
2 files changed, 26 insertions, 0 deletions
@@ -3,3 +3,4 @@ cherrypy.config *.pem *.pub *.orig +*.key diff --git a/ticket.py b/ticket.py new file mode 100644 index 0000000..e7697e9 --- /dev/null +++ b/ticket.py @@ -0,0 +1,25 @@ +import crypto, socket, time + +keyfile = 'subdap-%s.key' % (socket.gethostname()) +pubfile = 'subdap-%s.pem' % (socket.gethostname()) +keys = ['user', 'ts', 'sig'] + +def tgt_create(user): + ts = int(time.time()) + data = '%d:%s' % (ts, user) + sig = crypto.sign(keyfile, data) + return {'user': user, 'ts': ts, 'sig': sig} + +def tgt_verify(user, ts, sig, maxage = None): + data = '%d:%s' % (int(ts), user) + status = crypto.verify(pubfile, data, sig) + if maxage != None: + status &= ts > time.time() - maxage + return status + +if __name__ == '__main__': + sig = tgt_create('test') + print sig + assert not tgt_verify(maxage = -9999, **sig) + assert tgt_verify(maxage = 9999, **sig) + |