add-quality-check-script #20

This pull requests adds a script to check the quality of certificate signing requests and certificates recorded in the webdb database. The script uses read-only access to the database and filesystem.

Poetry is used to manage the required Python dependencies. Database access uses SQLAlchemy and the MariaDB connector/Python. The cryptography library is used to check the CSR and certificate data.

Script operation can be controlled using a set of environment variables.

Environment Variable	Usage
`DB_USER`	database user
`DB_PASSWORD`	database password
`DB_HOST`	database hostname
`DB_PORT`	database TCP port
`DB_NAME`	database name
`ROOT_CA_CERTIFICATE`	filename to the class 1 root CA certificate
`SUB_CA_CERTIFICATE`	filename to the class 3 sub CA certificate
`DEBUG`	enable debug logging

DEBUG is evaluated using the bool builtin function.

This pull requests adds a script to check the quality of certificate signing requests and certificates recorded in the webdb database. The script uses read-only access to the database and filesystem. [Poetry](https://python-poetry.org/docs/) is used to manage the required Python dependencies. Database access uses [SQLAlchemy](https://www.sqlalchemy.org/) and the [MariaDB connector/Python](https://pypi.org/project/mariadb/). The [cryptography](https://cryptography.io/en/latest/) library is used to check the CSR and certificate data. Script operation can be controlled using a set of environment variables. | Environment Variable | Usage | | --------------------- | ------------------------------------------- | | `DB_USER` | database user | | `DB_PASSWORD` | database password | | `DB_HOST` | database hostname | | `DB_PORT` | database TCP port | | `DB_NAME` | database name | | `ROOT_CA_CERTIFICATE` | filename to the class 1 root CA certificate | | `SUB_CA_CERTIFICATE` | filename to the class 3 sub CA certificate | | `DEBUG` | enable debug logging | `DEBUG` is evaluated using the [bool](https://docs.python.org/3/library/functions.html#bool) builtin function.

I'm only able to understand Python a little bit, so I don't know special details about this language ...

... but as far as I'm able to read the code, it could be installed on webdb2 (for testing) AS LONG AS THERE IS A SECOND REVIEW by a person having more/detailed python-knowledge.

(After successful testing on webdb2 with production data it could be installed on webdb1, too).

I'm only able to understand Python a little bit, so I don't know special details about this language ... ... but as far as I'm able to read the code, it could be installed on webdb2 (for testing) AS LONG AS THERE IS A SECOND REVIEW by a person having more/detailed python-knowledge. (After successful testing on webdb2 with production data it could be installed on webdb1, too).

Labels Milestones

add-quality-check-script #20

Reviewers