Creating needed file for noVNC encryption

slapos/recipe/kvm/__init__.py

@@ -125,6 +125,7 @@ class Recipe(BaseSlapRecipe):
     kvm_conf['smp_count']   = self.options['smp_count']
     kvm_conf['ram_size']    = self.options['ram_size']
 
+    kvm_conf['vnc_display'] = 1
     # Instanciate KVM
 
     kvm_runner_path = self.instanciate_wrapper("kvm", kvm_conf)
@@ -140,7 +141,6 @@ class Recipe(BaseSlapRecipe):
     ##slapreport_runner_path = self.instanciate_wrapper("slapreport",
     #    [database_path, python_path])
     
-    kvm_conf['vnc_display'] = 1
     return kvm_conf
 
   def installNoVnc(self, source_ip, source_port, target_ip, target_port, 
@@ -165,7 +165,7 @@ class Recipe(BaseSlapRecipe):
     noVNC_conf['python_path']      = python_path
 
     noVNC_conf['ca_conf']          = self.installCertificateAuthority()
-    noVNC_conf['key_path'], noVNC_conf['certificate_path'] = self.requestCertificate('noVNC')
+    noVNC_conf['pem_path'] = self.createPem('noVNC')
 
     # Instanciate Websockify
     websockify_runner_path = self.instanciate_wrapper("websockify",
@@ -311,3 +311,26 @@ class Recipe(BaseSlapRecipe):
       )[0]
     self.path_list.append(wrapper)
     return cron_d
+
+  def createPem(self,name):
+    """
+    Create self.pem file for noVNC encryption
+
+    Parameters: name for the requestCertificate function
+
+    Return: path to self.pem
+    """
+    key, certificate = self.requestCertificate(name)
+    pem = os.path.join(self.ca_certs, 'self.pem')
+    
+    pem_file = open(pem, 'w')
+    key_file = open(key, 'r')
+    pem_file.write(key_file.read())
+    key_file.close()
+    
+    certificate_file = open(certificate, 'r')
+    pem_file.write(certificate_file.read())
+    certificate_file.close()
+    pem_file.close()
+    
+    return pem

slapos/recipe/kvm/template/websockify_run.in

@@ -2,7 +2,5 @@
 # BEWARE: This file is operated by slapgrid
 # BEWARE: It will be overwritten automatically
 
-cat %(key_path)s > self.pem
-cat %(certificate_path)s >> self.pem
-%(python_path)s %(websockify_path)s --web %(noVNC_location)s %(source_ip)s:%(source_port)s %(target_ip)s:%(target_port)s
+%(python_path)s %(websockify_path)s --web %(noVNC_location)s --cert=%(pem_path)s --ssl-only %(source_ip)s:%(source_port)s %(target_ip)s:%(target_port)s