summaryrefslogtreecommitdiff
path: root/src/conf_mode
diff options
context:
space:
mode:
authorChristian Poessinger <christian@poessinger.com>2021-09-08 14:34:41 +0200
committerChristian Poessinger <christian@poessinger.com>2021-09-08 14:34:41 +0200
commit84e912ab2f583864e637c2df137f62f3d4cbeb14 (patch)
treed0ec5ec65d826dbcafbe48cbfc7eefcf283a3194 /src/conf_mode
parent63fbd8c663c8c42ad178d6f0694f20bb98acf01a (diff)
downloadvyos-1x-84e912ab2f583864e637c2df137f62f3d4cbeb14.tar.gz
vyos-1x-84e912ab2f583864e637c2df137f62f3d4cbeb14.zip
openvpn: T3805: use vyos.util.makedir() to create system directories
Diffstat (limited to 'src/conf_mode')
-rwxr-xr-xsrc/conf_mode/interfaces-openvpn.py18
1 files changed, 8 insertions, 10 deletions
diff --git a/src/conf_mode/interfaces-openvpn.py b/src/conf_mode/interfaces-openvpn.py
index 274bc655e..c837328be 100755
--- a/src/conf_mode/interfaces-openvpn.py
+++ b/src/conf_mode/interfaces-openvpn.py
@@ -47,6 +47,7 @@ from vyos.util import call
from vyos.util import chown
from vyos.util import dict_search
from vyos.util import dict_search_args
+from vyos.util import makedir
from vyos.util import write_file
from vyos.validate import is_addr_assigned
@@ -520,18 +521,17 @@ def generate_pki_files(openvpn):
if 'key' in pki_key:
key_path = os.path.join(cfg_dir, f'{interface}_crypt.key')
-
- with open(key_path, 'w') as f:
- f.write(wrap_openvpn_key(pki_key['key']))
-
- files.append(key_path)
-
- return files
+ write_file(key_path, wrap_openvpn_key(pki_key['key']),
+ user=user, group=group, mode=0o600)
def generate(openvpn):
interface = openvpn['ifname']
directory = os.path.dirname(cfg_file.format(**openvpn))
+ # create base config directory on demand
+ makedir(directory, user, group)
+ # enforce proper permissions on /run/openvpn
+ chown(directory, user, group)
# we can't know in advance which clients have been removed,
# thus all client configs will be removed and re-added on demand
@@ -543,9 +543,7 @@ def generate(openvpn):
return None
# create client config directory on demand
- if not os.path.exists(ccd_dir):
- os.makedirs(ccd_dir, 0o755)
- chown(ccd_dir, user, group)
+ makedir(ccd_dir, user, group)
# Fix file permissons for keys
generate_pki_files(openvpn)