From 038d7888e462f568ab9f1816c9173d4e82a61bd2 Mon Sep 17 00:00:00 2001
From: Graham Hayes <gr@ham.ie>
Date: Thu, 26 Apr 2018 17:23:55 +0100
Subject: [PATCH] Basic functionality in place

Change-Id: Ib331bf97e5cf61755a5884b48a3e510ebc257846
---
 certbot_dns_openstack/dns_openstack.py | 67 ++++++++++++++++++++++++++
 requirements.txt                       |  3 ++
 setup.cfg                              |  6 ++-
 tox.ini                                |  2 +-
 4 files changed, 75 insertions(+), 3 deletions(-)
 create mode 100644 certbot_dns_openstack/dns_openstack.py

diff --git a/certbot_dns_openstack/dns_openstack.py b/certbot_dns_openstack/dns_openstack.py
new file mode 100644
index 0000000..b7831d8
--- /dev/null
+++ b/certbot_dns_openstack/dns_openstack.py
@@ -0,0 +1,67 @@
+# -*- coding: utf-8 -*-
+
+# Licensed under the Apache License, Version 2.0 (the "License"); you may
+# not use this file except in compliance with the License. You may obtain
+# a copy of the License at
+#
+#      http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
+# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
+# License for the specific language governing permissions and limitations
+# under the License.
+import logging
+
+import zope.interface
+
+from certbot import interfaces
+from certbot.plugins import dns_common
+
+from openstack.config import loader
+from openstack import connection
+
+LOG = logging.getLogger(__name__)
+
+
+@zope.interface.implementer(interfaces.IAuthenticator)
+@zope.interface.provider(interfaces.IPluginFactory)
+class Authenticator(dns_common.DNSAuthenticator):
+    """DNS Authenticator for OpenStack
+
+    This Authenticator uses the OpenStack v2 DNS API to fulfill a
+    dns-01 challenge.
+    """
+
+    description = 'Obtain certificates using a DNS TXT record.'
+    ttl = 60
+
+    @classmethod
+    def add_parser_arguments(cls, add):  # pylint: disable=arguments-differ
+        super(Authenticator, cls).add_parser_arguments(
+            add, default_propagation_seconds=30)
+        add('client_config', help='OpenStack Client Config file.')
+        add('cloud', help='OpenStack to use.')
+
+    def more_info(self):  # pylint: disable=missing-docstring,no-self-use
+        return 'This plugin configures a DNS TXT record to respond to a ' + \
+               'dns-01 challenge using the OpenStack DNS API.'
+
+    def _setup_credentials(self):
+        config_file = self.conf('client_config') or ''
+        config = loader.OpenStackConfig(
+            config_files=loader.CONFIG_FILES + [config_file])
+        self.cloud = connection.Connection(
+            config=config.get_one(
+                self.conf('cloud')
+            )
+        )
+
+    def _perform(self, domain, validation_name, validation):
+        self.zone = self.cloud.get_zone(domain + '.')
+        self.recordset = self.cloud.create_recordset(
+            self.zone['id'], validation_name + '.', "TXT", [validation])
+
+    def _cleanup(self, domain, validation_name, validation):
+        self.cloud.delete_recordset(
+            self.zone['id'], self.recordset['id'])
diff --git a/requirements.txt b/requirements.txt
index 1d18dd3..8cf2926 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -3,3 +3,6 @@
 # process, which may cause wedges in the gate later.
 
 pbr>=2.0 # Apache-2.0
+acme[dev]
+certbot[dev]
+openstacksdk
\ No newline at end of file
diff --git a/setup.cfg b/setup.cfg
index 9608cff..afbe639 100644
--- a/setup.cfg
+++ b/setup.cfg
@@ -13,8 +13,6 @@ classifier =
     License :: OSI Approved :: Apache Software License
     Operating System :: POSIX :: Linux
     Programming Language :: Python
-    Programming Language :: Python :: 2
-    Programming Language :: Python :: 2.7
     Programming Language :: Python :: 3
     Programming Language :: Python :: 3.5
 
@@ -22,6 +20,10 @@ classifier =
 packages =
     certbot_dns_openstack
 
+[entry_points]
+certbot.plugins =
+    dns-openstack = certbot_dns_openstack.dns_openstack:Authenticator
+
 [build_sphinx]
 all-files = 1
 warning-is-error = 1
diff --git a/tox.ini b/tox.ini
index c7b0d93..dda808b 100644
--- a/tox.ini
+++ b/tox.ini
@@ -1,6 +1,6 @@
 [tox]
 minversion = 2.0
-envlist = py35,py27,pep8
+envlist = py35,pep8
 skipsdist = True
 
 [testenv]