X-Git-Url: http://git.onelab.eu/?a=blobdiff_plain;f=sfa%2Ftrust%2Fgid.py;h=6adfec5fe6a8835f33e9b08fc4a35e1b2375bdea;hb=0cf0d31c313a366e3f272f830bdb4f2a7308e11f;hp=9cab1a51d34087432ef7be9a0c1ca9eb35fabc18;hpb=c537bab3dcfddac968b7db248e83864d4730f7b9;p=sfa.git diff --git a/sfa/trust/gid.py b/sfa/trust/gid.py index 9cab1a51..6adfec5f 100644 --- a/sfa/trust/gid.py +++ b/sfa/trust/gid.py @@ -27,12 +27,12 @@ ### $Id$ ### $URL$ - import xmlrpclib import uuid + +from sfa.util.sfalogging import sfa_logger from sfa.trust.certificate import Certificate from sfa.util.namespace import * -from sfa.util.sfalogging import logger ## # Create a new uuid. Returns the UUID as a string. @@ -82,7 +82,7 @@ class GID(Certificate): Certificate.__init__(self, create, subject, string, filename) if subject: - logger.info("subject: %s" % subject) + sfa_logger.debug("Creating GID for subject: %s" % subject) if uuid: self.uuid = int(uuid) if hrn: @@ -204,22 +204,16 @@ class GID(Certificate): if self.parent: # make sure the parent's hrn is a prefix of the child's hrn if not self.get_hrn().startswith(self.parent.get_hrn()): - raise GidParentHrn(self.parent.get_subject()) + raise GidParentHrn("This cert HRN %s doesnt start with parent HRN %s" % (self.get_hrn(), self.parent.get_hrn())) else: # make sure that the trusted root's hrn is a prefix of the child's trusted_gid = GID(string=trusted_root.save_to_string()) trusted_type = trusted_gid.get_type() trusted_hrn = trusted_gid.get_hrn() - if trusted_type == 'authority': - # Could add a check for type == 'authority' - trusted_hrn = trusted_hrn[:trusted_hrn.rindex('.')] + #if trusted_type == 'authority': + # trusted_hrn = trusted_hrn[:trusted_hrn.rindex('.')] cur_hrn = self.get_hrn() if not self.get_hrn().startswith(trusted_hrn): - raise GidParentHrn(trusted_hrn + " " + self.get_hrn()) + raise GidParentHrn("Trusted roots HRN %s isnt start of this cert %s" % (trusted_hrn, cur_hrn)) return - - - - -