crypt/certbot
1
0
Fork 0
mirror of https://github.com/certbot/certbot.git synced 2026-01-26 07:41:33 +03:00
Code Activity

notes on future blacklist import speedups

Browse Source
This commit is contained in:
Seth Schoen
2012-07-18 17:08:35 -07:00
parent df97026c72
commit bb0c4bf316
1 changed files with 9 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

11
server-ca/blacklisting/import-openssl-blacklist.py
View File

@@ -2,14 +2,21 @@
# This imports a Debian OpenSSL modulus blacklist file into the
# Redis set "debian_moduli". Specify one or more files on the
# command line to import them. Importing will require a little
# under a minute per file.
# command line to import them. Importing will require somewhere
# around a minute per file.
# E.g.,
# python import-openssl-blacklist.py /usr/share/openssl-blacklist/blacklist.*
# will import everything (including 1024 and 512 bit moduli, which might be
# rejected for other reasons).
# It would probably be a lot faster to make this use
# http://redis.io/topics/mass-insert
# instead of the Python redis library, or, indeed, to simply use
# grep -hv '#' /usr/share/openssl-blacklist/blacklist.RSA-* | sed 's/^/sadd debian_moduli /' | redis-cli --pipe
# but this requires redis-cli 2.4, and our test systems all have only
# redis-cli 2.2.12.
import sys, redis
r = redis.Redis()