1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
|
#
# Copyright (c) 2015 ThoughtWorks, Inc.
#
# Pixelated is free software: you can redistribute it and/or modify
# it under the terms of the GNU Affero General Public License as published by
# the Free Software Foundation, either version 3 of the License, or
# (at your option) any later version.
#
# Pixelated is distributed in the hope that it will be useful,
# but WITHOUT ANY WARRANTY; without even the implied warranty of
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
# GNU Affero General Public License for more details.
#
# You should have received a copy of the GNU Affero General Public License
# along with Pixelated. If not, see <http://www.gnu.org/licenses/>.
from twisted.internet import reactor
from twisted.internet import defer
from twisted.internet import ssl
from OpenSSL import SSL
from OpenSSL import crypto
from email import message_from_file
import os
from pixelated.adapter.model.mail import InputMail
from pixelated.config import arguments
from pixelated.config.services import Services
from pixelated.config.leap import initialize_leap, CREATE_WELCOME_MAIL
from pixelated.config import logger
from pixelated.config.site import PixelatedSite
from pixelated.resources.loading_page import LoadingResource
from pixelated.resources.root_resource import RootResource
from leap.common.events import (
register,
catalog as events
)
@defer.inlineCallbacks
def start_user_agent(loading_app, host, port, sslkey, sslcert, leap_home, leap_session):
yield loading_app.stopListening()
services = Services(leap_home, leap_session)
yield services.setup(leap_home, leap_session)
resource = RootResource()
resource.initialize(
services.keymanager,
services.search_engine,
services.mail_service,
services.draft_service,
services.feedback_service)
if sslkey and sslcert:
reactor.listenSSL(port, PixelatedSite(resource), _ssl_options(sslkey, sslcert), interface=host)
else:
reactor.listenTCP(port, PixelatedSite(resource), interface=host)
# soledad needs lots of threads
reactor.threadpool.adjustPoolsize(5, 15)
def _ssl_options(sslkey, sslcert):
with open(sslkey) as keyfile:
pkey = crypto.load_privatekey(crypto.FILETYPE_PEM, keyfile.read())
with open(sslcert) as certfile:
cert = crypto.load_certificate(crypto.FILETYPE_PEM, certfile.read())
acceptable = ssl.AcceptableCiphers.fromOpenSSLCipherString(
u'ECDHE-RSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-SHA384:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-SHA256:ECDHE-RSA-AES256-SHA:!RC4:HIGH:!MD5:!aNULL:!EDH')
options = ssl.CertificateOptions(privateKey=pkey,
certificate=cert,
method=SSL.TLSv1_2_METHOD,
acceptableCiphers=acceptable)
return options
def welcome_mail(leap_session):
if CREATE_WELCOME_MAIL():
current_path = os.path.dirname(os.path.abspath(__file__))
with open(os.path.join(current_path, 'assets', 'welcome.mail')) as mail_template_file:
mail_template = message_from_file(mail_template_file)
input_mail = InputMail.from_python_mail(mail_template)
leap_session.mail_store.add_mail('INBOX', input_mail.raw)
return leap_session
def initialize():
args = arguments.parse_user_agent_args()
logger.init(debug=args.debug)
loading_app = reactor.listenTCP(args.port, PixelatedSite(LoadingResource()), interface=args.host)
deferred = initialize_leap(args.leap_provider_cert,
args.leap_provider_cert_fingerprint,
args.credentials_file,
args.organization_mode,
args.leap_home)
deferred.addCallback(welcome_mail)
deferred.addCallback(
lambda leap_session: start_user_agent(
loading_app,
args.host,
args.port,
args.sslkey,
args.sslcert,
args.leap_home,
leap_session))
def _quit_on_error(failure):
failure.printTraceback()
reactor.stop()
def _register_shutdown_on_token_expire(leap_session):
register(events.SOLEDAD_INVALID_AUTH_TOKEN, lambda _: reactor.stop())
return leap_session
deferred.addCallback(_register_shutdown_on_token_expire)
deferred.addErrback(_quit_on_error)
reactor.run()
|
