summaryrefslogtreecommitdiff
path: root/service/app/bitmask_libraries/smtp.py
blob: f07a48381af3cb4d44ed8a13de79dcabfdfc8339 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
import os
import requests
from .certs import which_bundle
from leap.mail.smtp import setup_smtp_gateway
import random


class LeapSmtp(object):

    SMTP_PORT = 2014

    def __init__(self, provider, keymanager=None, leap_srp_session=None):
        self._provider = provider
        self._keymanager = keymanager
        self._srp_session = leap_srp_session
        self._hostname, self._port = self._discover_smtp_server()
        self._smtp_port = None
        self._smtp_service = None
        self._twisted_port = 10000 + int(random.random() * 5000)

    def smtp_info(self):
        return ('localhost', LeapSmtp.SMTP_PORT)

    def _discover_smtp_server(self):
        json_data = self._provider.fetch_smtp_json()
        hosts = json_data['hosts']
        hostname = hosts.keys()[0]
        host = hosts[hostname]

        hostname = host['hostname']
        port = host['port']

        return hostname, port

    def _download_client_certificates(self):
        cert_path = self._client_cert_path()

        if not os.path.exists(os.path.dirname(cert_path)):
            os.makedirs(os.path.dirname(cert_path))

        session = requests.session()
        cert_url = '%s/%s/cert' % (self._provider.api_uri, self._provider.api_version)
        cookies = {"_session_id": self._srp_session.session_id}

        response = requests.get(cert_url, verify=which_bundle(self._provider), cookies=cookies, timeout=self._provider.config.timeout_in_s)
        response.raise_for_status()

        client_cert = response.content

        with open(cert_path, 'w') as f:
            f.write(client_cert)

    def _client_cert_path(self):
        return os.path.join(
            self._provider.config.leap_home,
            "providers",
            self._provider.domain,
            "keys", "client", "smtp.pem")

    def start(self):
        self._download_client_certificates()
        cert_path = self._client_cert_path()
        email = '%s@%s' % (self._srp_session.user_name, self._provider.domain)

        self._smtp_service, self._smtp_port = setup_smtp_gateway(
            port=(self._twisted_port),
            userid=email,
            keymanager=self._keymanager,
            smtp_host=self._hostname.encode('UTF-8'),
            smtp_port=self._port,
            smtp_cert=cert_path,
            smtp_key=cert_path,
            encrypted_only=False
        )

    def stop(self):
        if self._smtp_service is not None:
            self._smtp_port.stopListening()
            self._smtp_service.doStop()
            self._smtp_port = None
            self._smtp_service = None