Synnefo » snf-ganeti

import tempfile

  (fd, tmp_file_name) = tempfile.mkstemp(dir=os.path.dirname(file_name))

  try:

    # Set permissions before writing key

    os.chmod(tmp_file_name, 0600)

    result = utils.RunCmd(["openssl", "req", "-new", "-newkey", "rsa:1024",

                           "-days", str(validity), "-nodes", "-x509",

                           "-keyout", tmp_file_name, "-out", tmp_file_name,

                           "-batch"])

    if result.failed:

      raise errors.OpExecError("Could not generate SSL certificate, command"

                               " %s had exitcode %s and error message %s" %

                               (result.cmd, result.exit_code, result.output))

    # Make read-only

    os.chmod(tmp_file_name, 0400)

    os.rename(tmp_file_name, file_name)

  finally:

    utils.RemoveFile(tmp_file_name)