shaba/awx
1
0
Fork 0
mirror of https://github.com/ansible/awx.git synced 2024-11-02 01:21:21 +03:00
Code Releases Activity

Update conf.Settings migration

Browse Source
This commit is contained in:
Wayne Witzel III 2017-06-12 13:00:01 -04:00
parent 3ef7f13131
commit 861d6a659c
1 changed files with 5 additions and 13 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

16
awx/conf/migrations/_reencrypt.py
View File

@ -5,25 +5,22 @@ import six
from django.utils.encoding import smart_str from django.utils.encoding import smart_str
from Crypto.Cipher import AES from Crypto.Cipher import AES
from awx.conf.settings import get_settings_to_cache
from awx.conf import settings_registry from awx.conf import settings_registry
__all__ = ['replace_aesecb_fernet', 'get_encryption_key', 'encrypt_field', __all__ = ['replace_aesecb_fernet', 'get_encryption_key', 'encrypt_field',
'decrypt_value', 'decrypt_value', 'decrypt_field_value'] 'decrypt_value', 'decrypt_value']
def replace_aesecb_fernet(apps, schema_editor): def replace_aesecb_fernet(apps, schema_editor):
Setting = apps.get_model('conf', 'Setting') Setting = apps.get_model('conf', 'Setting')
settings_to_cache = get_settings_to_cache(settings_registry)
for setting in Setting.objects.filter(key__in=settings_to_cache.keys(), user__isnull=True).order_by('pk'): for setting in Setting.objects.filter().order_by('pk'):
if settings_registry.is_setting_encrypted(setting.key): if settings_registry.is_setting_encrypted(setting.key):
try: if setting.value.startswith('$encrypted$AESCBC$'):
continue
setting.value = decrypt_field(setting, 'value') setting.value = decrypt_field(setting, 'value')
setting.save() setting.save()
except ValueError:
continue
def get_encryption_key(field_name, pk=None): def get_encryption_key(field_name, pk=None):
@ -77,11 +74,6 @@ def decrypt_field(instance, field_name, subfield=None):
return decrypt_value(key, value) return decrypt_value(key, value)
def decrypt_field_value(pk, field_name, value):
key = get_encryption_key(field_name, pk)
return decrypt_value(key, value)
def encrypt_field(instance, field_name, ask=False, subfield=None, skip_utf8=False): def encrypt_field(instance, field_name, ask=False, subfield=None, skip_utf8=False):
''' '''
Return content of the given instance and field name encrypted. Return content of the given instance and field name encrypted.