Paul
/
Security-Quiz
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

Added Let's Encrypt API

Browse Source
Paul Wagener 9 years ago
parent 2ef5c3aafc
commit ccdb7bad62
9 changed files with 169 additions and 8 deletions
Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL
Show Stats Download Patch File Download Diff File
  1. 26
      quiz/migrations/0004_letsencryptchallenge.py
  2. 5
      quiz/models.py
  3. 3
      quiz/tests.py
  4. 3
      quiz/views.py
  5. 2
      securityquiz/urls.py
  6. 11
      static/css/semantic.min.css
  7. 17
      static/js/semantic.min.js
  8. 53
      templates/letsencrypt.html
  9. 55
      views.py

26
quiz/migrations/0004_letsencryptchallenge.py
Unescape View File

@ -0,0 +1,26 @@
# -*- coding: utf-8 -*-
from __future__ import unicode_literals
from django.db import models, migrations
class Migration(migrations.Migration):
dependencies = [
('quiz', '0003_auto_20150520_1113'),
]
operations = [
migrations.CreateModel(
name='LetsEncryptChallenge',
fields=[
('id', models.AutoField(verbose_name='ID', serialize=False, auto_created=True, primary_key=True)),
('challenge', models.CharField(max_length=128)),
('response', models.CharField(max_length=128)),
('expiry_date', models.DateTimeField()),
],
options={
},
bases=(models.Model,),
),
]

5
quiz/models.py
Unescape View File

@ -18,3 +18,8 @@ class Answer(models.Model):
def __str__(self): def __str__(self):
return self.question + ": " + self.string return self.question + ": " + self.string
class LetsEncryptChallenge(models.Model):
challenge = models.CharField(max_length=128)
response = models.CharField(max_length=128)
expiry_date = models.DateTimeField()

3
quiz/tests.py
Unescape View File

@ -1,3 +0,0 @@
from django.test import TestCase
# Create your tests here.

3
quiz/views.py
Unescape View File

@ -1,3 +0,0 @@
from django.shortcuts import render
# Create your views here.

2
securityquiz/urls.py
Unescape View File

@ -14,5 +14,7 @@ urlpatterns = patterns('',
url(r'^admin/', include(admin.site.urls)), url(r'^admin/', include(admin.site.urls)),
url(r'^save$', 'views.save'), url(r'^save$', 'views.save'),
url(r'^sign$', 'views.sign'), url(r'^sign$', 'views.sign'),
url(r'^letsencrypt$', 'views.letsencrypt'),
url(r'^\.well-known/acme-challenge/(.+)', 'views.letsencrypt_challenge'),
url(r'^(.*)$', 'views.home', name='home'), url(r'^(.*)$', 'views.home', name='home'),
) )

11
static/css/semantic.min.css vendored
View File

File diff suppressed because one or more lines are too long

17
static/js/semantic.min.js vendored
View File

File diff suppressed because one or more lines are too long

53
templates/letsencrypt.html
Unescape View File

@ -0,0 +1,53 @@
<!DOCTYPE html>
<html>
<head>
<link rel="stylesheet" href="/static/css/semantic.min.css">
<style type="text/css">
body {
margin-top: 20px;
}
</style>
</head>
<body>
<h1 class="ui centered aligned header">Let's Encrypt</h1>
<div class="ui three column centered grid">
<div class="column ui">
<form method="POST" action="" class="ui form primary center aligned segment">
{% csrf_token %}
{% if challenge %}
<p>Vanaf<br>
<a href="http://sec1.aii.avans.nl/.well-known/acme-challenge/{{challenge}}">http://sec1.aii.avans.nl/.well-known/acme-challenge/{{challenge}}</a><br> wordt de komende 10 minuten de volgende tekst getoond:<br>
<code>{{challenge}}.{{response}}</code>
{% elif error %}
<div class="ui negative message">
<p>{{error}}</p>
</div>
{% else %}
<div class="field">
<label for="domain">Challenge-response</label>
<div class="ui huge input">
<textarea name="challenge-response" value="" style="text-align: center;" placeholder=""></textarea>
</div>
<p>Vul hier de code in die Let's Encrypt van je vraagt om te geven via <br><code>http://sec1.aii.avans.nl/.well-known/acme-challenge/</code></p>
</div>
<button type="submit" class="ui big blue submit button">Opslaan</button>
{% endif %}
</form>
</div>
</div>
</div>
</body>
</html>

55
views.py
Unescape View File

@ -6,7 +6,7 @@ from django.views.decorators.csrf import csrf_exempt
from django.contrib.auth import authenticate, login, logout from django.contrib.auth import authenticate, login, logout
from django.contrib.auth.models import User from django.contrib.auth.models import User
from django.contrib import messages from django.contrib import messages
from quiz.models import Answer from quiz.models import Answer, LetsEncryptChallenge
import oauth2 as oauth, cgi, json, base64, urlparse, subprocess import oauth2 as oauth, cgi, json, base64, urlparse, subprocess
from oauth2_provider.views.generic import ProtectedResourceView from oauth2_provider.views.generic import ProtectedResourceView
import securityquiz.secrets as secrets import securityquiz.secrets as secrets
@ -132,6 +132,59 @@ class SecurityApi(ProtectedResourceView):
def get(self, request, *args, **kwargs): def get(self, request, *args, **kwargs):
return HttpResponse("Geheime code: abguvatgbfrrurerzbirnybat") return HttpResponse("Geheime code: abguvatgbfrrurerzbirnybat")
def letsencrypt(request):
template_vars = {}
if request.method == 'POST':
try:
challengeresponse = request.POST['challenge-response']
if challengeresponse.strip() == '':
raise Exception('Geen data opgegeven')
if not '.' in challengeresponse:
raise Exception('Verkeerde code opgegeven. De code die je moet opgeven is met een puntje er in.')
print challengeresponse.split('.')
if len(challengeresponse.split('.')) <> 2:
raise Exception('De code moet maar 1 puntje bevatten')
challenge, response = challengeresponse.split('.')
if len(challenge) < 40 or len(response) < 40:
raise Exception('De code is te kort')
expiry_date = pytz.utc.localize(datetime.datetime.utcnow() + datetime.timedelta(minutes=10))
challengeresponse, created = LetsEncryptChallenge.objects.get_or_create(challenge=challenge, defaults={
'response': response,
'expiry_date': expiry_date
})
challengeresponse.response = response
challengeresponse.expiry_date = expiry_date
challengeresponse.save()
template_vars['challenge'] = challenge
template_vars['response'] = response
except str as e:
template_vars['error'] = e.message
raise e
return render(request, 'letsencrypt.html', template_vars)
def letsencrypt_challenge(request, challenge):
try:
# Delete old challenges
LetsEncryptChallenge.objects.filter(expiry_date__lte=datetime.datetime.utcnow()).delete()
challengeresponse = LetsEncryptChallenge.objects.get(challenge=challenge)
response = HttpResponse(challengeresponse.challenge + "." + challengeresponse.response)
response['Content-Type'] = 'text/plain'
return response
except LetsEncryptChallenge.DoesNotExist:
return HttpResponseNotFound('404')
def sign(request): def sign(request):
if request.method == 'POST': if request.method == 'POST':
from OpenSSL import crypto from OpenSSL import crypto

Write Preview
Loading…
Cancel
Save