gocsaf/cmd/csaf_provider/transaction.go

package main

import (
	"os"
	"path/filepath"
	"strings"

	"github.com/Intevation/csaf_trusted/csaf"
)

func newProviderMetadata(cfg *config) *csaf.ProviderMetadata {

	pmd := csaf.NewProviderMetadata(
		cfg.Domain + "/.wellknown/csaf/provider-metadata.json")

	// Register feeds.

	var feeds []csaf.Feed

	for _, t := range cfg.TLPs {
		if t == tlpCSAF {
			continue
		}
		var (
			ts       = string(t)
			feedName = "csaf-feed-tlp-" + ts + ".json"
			feedURL  = csaf.JsonURL(
				cfg.Domain + "/.well-known/csaf/" + ts + "/" + feedName)
			tlpLabel = csaf.TLPLabel(strings.ToUpper(ts))
		)
		feeds = append(feeds, csaf.Feed{
			Summary:  "TLP:" + string(tlpLabel) + " advisories",
			TLPLabel: &tlpLabel,
			URL:      &feedURL,
		})
	}

	if len(feeds) > 0 {
		pmd.Distributions = []csaf.Distribution{{
			Rolie: []csaf.ROLIE{{
				Feeds: feeds,
			}},
		}}
	}

	return pmd
}

func doTransaction(
	cfg *config,
	t tlp,
	fn func(string, *csaf.ProviderMetadata) error,
) error {

	wellknown := filepath.Join(cfg.Web, ".well-known", "csaf")

	metadata := filepath.Join(wellknown, "provider-metadata.json")

	pmd, err := func() (*csaf.ProviderMetadata, error) {
		f, err := os.Open(metadata)
		if err != nil {
			if os.IsNotExist(err) {
				return newProviderMetadata(cfg), nil
			}
			return nil, err
		}
		defer f.Close()
		return csaf.LoadProviderMetadata(f)
	}()

	if err != nil {
		return err
	}

	webTLP := filepath.Join(wellknown, string(t))

	oldDir, err := filepath.EvalSymlinks(webTLP)
	if err != nil {
		return err
	}

	folderTLP := filepath.Join(cfg.Folder, string(t))

	newDir, err := mkUniqDir(folderTLP)
	if err != nil {
		return err
	}

	// Copy old content into new.
	if err := deepCopy(newDir, oldDir); err != nil {
		os.RemoveAll(newDir)
		return err
	}

	// Work with new folder.
	if err := fn(newDir, pmd); err != nil {
		os.RemoveAll(newDir)
		return err
	}

	// Write back provider metadata.
	newMetaName, newMetaFile, err := mkUniqFile(metadata)
	if err != nil {
		os.RemoveAll(newDir)
		return err
	}

	if err := pmd.Save(newMetaFile); err != nil {
		newMetaFile.Close()
		os.Remove(newMetaName)
		os.RemoveAll(newDir)
		return err
	}

	if err := newMetaFile.Close(); err != nil {
		os.Remove(newMetaName)
		os.RemoveAll(newDir)
		return err
	}

	if err := os.Rename(newMetaName, metadata); err != nil {
		os.RemoveAll(newDir)
		return err
	}

	// Switch directories.
	symlink := filepath.Join(newDir, string(t))
	if err := os.Symlink(newDir, symlink); err != nil {
		os.RemoveAll(newDir)
		return err
	}
	if err := os.Rename(symlink, webTLP); err != nil {
		os.RemoveAll(newDir)
		return err
	}

	return os.RemoveAll(oldDir)
}