kms_kmip_server.py

#! /usr/bin/env python3
"""
KMS KMIP test server.
"""

import argparse
import logging
import os
import shutil

from kmip.services.server import KmipServer

HOSTNAME = "localhost"
PORT = 5698


def main():
    dir_path = os.path.dirname(os.path.realpath(__file__))
    drivers_evergreen_tools = os.path.join(dir_path, "..", "..")
    default_ca_file = os.path.join(
        drivers_evergreen_tools, ".evergreen", "x509gen", "ca.pem"
    )
    default_cert_file = os.path.join(
        drivers_evergreen_tools, ".evergreen", "x509gen", "server.pem"
    )

    parser = argparse.ArgumentParser(description="MongoDB Mock KMIP KMS Endpoint.")
    parser.add_argument(
        "-p", "--port", type=int, default=PORT, help="Port to listen on"
    )
    parser.add_argument(
        "--ca_file", type=str, default=default_ca_file, help="TLS CA PEM file"
    )
    parser.add_argument(
        "--cert_file", type=str, default=default_cert_file, help="TLS Server PEM file"
    )
    args = parser.parse_args()

    # Ensure we start with a fresh seed database.
    database_path = os.path.join(
        drivers_evergreen_tools, ".evergreen", "csfle", "pykmip.db"
    )
    database_seed_path = os.path.join(
        drivers_evergreen_tools, ".evergreen", "csfle", "pykmip.db.bak"
    )
    shutil.copy(database_seed_path, database_path)

    server = KmipServer(
        hostname=HOSTNAME,
        port=args.port,
        certificate_path=args.cert_file,
        ca_path=args.ca_file,
        config_path=None,
        auth_suite="TLS1.2",
        log_path=os.path.join(
            drivers_evergreen_tools, ".evergreen", "csfle", "pykmip.log"
        ),
        database_path=database_path,
        logging_level=logging.DEBUG,
    )
    with server:
        print(f"\nStarting KMS KMIP server on port {args.port}")
        server.serve()


if __name__ == "__main__":
    main()