1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
|
import logging
from pathlib import Path
from threading import Timer
from typing import List, Optional
from knot_resolver.constants import WATCHDOG_LIB
from knot_resolver.controller.registered_workers import command_registered_workers
from knot_resolver.datamodel import KresConfig
from knot_resolver.datamodel.types import File
from knot_resolver.manager.config_store import ConfigStore, only_on_real_changes_update
from knot_resolver.utils import compat
logger = logging.getLogger(__name__)
def tls_cert_paths(config: KresConfig) -> List[str]:
files: List[Optional[File]] = [
config.network.tls.cert_file,
config.network.tls.key_file,
]
return [str(file) for file in files if file is not None]
if WATCHDOG_LIB:
from watchdog.events import (
FileSystemEvent,
FileSystemEventHandler,
)
from watchdog.observers import Observer
_tls_cert_watchdog: Optional["TLSCertWatchDog"] = None
class TLSCertEventHandler(FileSystemEventHandler):
def __init__(self, files: List[Path], cmd: str) -> None:
self._files = files
self._cmd = cmd
self._timer: Optional[Timer] = None
def _reload(self) -> None:
def command() -> None:
if compat.asyncio.is_event_loop_running():
compat.asyncio.create_task(command_registered_workers(self._cmd))
else:
compat.asyncio.run(command_registered_workers(self._cmd))
logger.info("Reloading of TLS certificate files has finished")
# skipping if reload was already triggered
if self._timer and self._timer.is_alive():
logger.info("Skipping TLS certificate files reloading, reload command was already triggered")
return
# start a 5sec timer
logger.info("Delayed reload of TLS certificate files has started")
self._timer = Timer(5, command)
self._timer.start()
def on_created(self, event: FileSystemEvent) -> None:
src_path = Path(str(event.src_path))
if src_path in self._files:
logger.info(f"Watched file '{src_path}' has been created")
self._reload()
def on_deleted(self, event: FileSystemEvent) -> None:
src_path = Path(str(event.src_path))
if src_path in self._files:
logger.warning(f"Watched file '{src_path}' has been deleted")
if self._timer:
self._timer.cancel()
for file in self._files:
if file.parent == src_path:
logger.warning(f"Watched directory '{src_path}' has been deleted")
if self._timer:
self._timer.cancel()
def on_modified(self, event: FileSystemEvent) -> None:
src_path = Path(str(event.src_path))
if src_path in self._files:
logger.info(f"Watched file '{src_path}' has been modified")
self._reload()
class TLSCertWatchDog:
def __init__(self, cert_file: Path, key_file: Path) -> None:
self._observer = Observer()
cmd = f"net.tls('{cert_file}', '{key_file}')"
cert_files: List[Path] = []
cert_files.append(cert_file)
cert_files.append(key_file)
cert_dirs: List[Path] = []
cert_dirs.append(cert_file.parent)
if cert_file.parent != key_file.parent:
cert_dirs.append(key_file.parent)
event_handler = TLSCertEventHandler(cert_files, cmd)
for d in cert_dirs:
self._observer.schedule(
event_handler,
str(d),
recursive=False,
)
logger.info(f"Directory '{d}' scheduled for watching")
def start(self) -> None:
self._observer.start()
def stop(self) -> None:
self._observer.stop()
self._observer.join()
@only_on_real_changes_update(tls_cert_paths)
async def _init_tls_cert_watchdog(config: KresConfig) -> None:
if WATCHDOG_LIB:
global _tls_cert_watchdog
if _tls_cert_watchdog:
_tls_cert_watchdog.stop()
if config.network.tls.files_watchdog and config.network.tls.cert_file and config.network.tls.key_file:
logger.info("Initializing TLS certificate files WatchDog")
_tls_cert_watchdog = TLSCertWatchDog(
config.network.tls.cert_file.to_path(),
config.network.tls.key_file.to_path(),
)
_tls_cert_watchdog.start()
async def init_files_watchdog(config_store: ConfigStore) -> None:
# watchdog for TLS certificate files
await config_store.register_on_change_callback(_init_tls_cert_watchdog)
|
