def check_certificates()

in libcloud/container/drivers/lxd.py [0:0]

• 41 lines of code
• 19 McCabe index (conditional complexity)

def check_certificates(key_file, cert_file, **kwargs):
    """
    Basic checks for the provided certificates in LXDtlsConnection
    """

    # there is no point attempting to connect if either is missing
    if key_file is None or cert_file is None:
        raise InvalidCredsError(
            "TLS Connection requires specification " "of a key file and a certificate file"
        )

    # if they are not none they may be empty strings
    # or certificates that are not appropriate
    if key_file == "" or cert_file == "":
        raise InvalidCredsError(
            "TLS Connection requires specification " "of a key file and a certificate file"
        )

    # if none of the above check the types
    if "key_files_allowed" in kwargs.keys():
        key_file_suffix = key_file.split(".")

        if key_file_suffix[-1] not in kwargs["key_files_allowed"]:
            raise InvalidCredsError(
                "Valid key files are: "
                + str(kwargs["key_files_allowed"])
                + "you provided: "
                + key_file_suffix[-1]
            )

            # if none of the above check the types
    if "cert_files_allowed" in kwargs.keys():
        cert_file_suffix = cert_file.split(".")

        if cert_file_suffix[-1] not in kwargs["cert_files_allowed"]:
            raise InvalidCredsError(
                "Valid certification files are: "
                + str(kwargs["cert_files_allowed"])
                + "you provided: "
                + cert_file_suffix[-1]
            )

    # if all these are good check the paths
    keypath = os.path.expanduser(key_file)
    is_file_path = os.path.exists(keypath) and os.path.isfile(keypath)
    if not is_file_path:
        raise InvalidCredsError(
            "You need a key file to authenticate with " "LXD tls. This can be found in the server."
        )

    certpath = os.path.expanduser(cert_file)
    is_file_path = os.path.exists(certpath) and os.path.isfile(certpath)
    if not is_file_path:
        raise InvalidCredsError(
            "You need a certificate file to "
            "authenticate with LXD tls. "
            "This can be found in the server."
        )