Synnefo » snf-ganeti

                  backup=True)

def GenerateClusterCrypto(new_cluster_cert, new_rapi_cert, new_spice_cert,

                          rapi_cert_pem=None, spice_cert_pem=None,

                          spice_cacert_pem=None, cds=None,

                          nodecert_file=pathutils.NODED_CERT_FILE,

                          rapicert_file=pathutils.RAPI_CERT_FILE,

                          spicecert_file=pathutils.SPICE_CERT_FILE,

                          spicecacert_file=pathutils.SPICE_CACERT_FILE,

  @param new_confd_hmac_key: Whether to generate a new HMAC key

  @type new_cds: bool

  @param new_cds: Whether to generate a new cluster domain secret

  @type rapi_cert_pem: string

  @param rapi_cert_pem: New RAPI certificate in PEM format

  @type spice_cert_pem: string

  @param cds: New cluster domain secret

  @type nodecert_file: string

  @param nodecert_file: optional override of the node cert file path

  @type rapicert_file: string

  @param rapicert_file: optional override of the rapi cert file path

  @type spicecert_file: string

  @param hmackey_file: optional override of the hmac key file path

  """

  # noded SSL certificate

  utils.GenerateNewSslCert(

    new_cluster_cert, nodecert_file,

    "Generating new cluster certificate at %s" % nodecert_file)

  # confd HMAC key

  if new_confd_hmac_key or not os.path.exists(hmackey_file):

    logging.debug("Writing new confd HMAC key to %s", hmackey_file)

  """

  # Generate cluster secrets

  result = utils.RunCmd([pathutils.DAEMON_UTIL, "start", constants.NODED])

  if result.failed: