从指定路径更新雷池WAF证书

import requests
import time
import pyotp
import urllib3

BASE_URL = "https://www.iots.vip"     # 登录地址
USERNAME = "admin"         
PASSWORD = "123123123"

OTP_SECRET = "ADXXXXXXWB5S3UIWZCDX"   # 动态验证码的密钥
CERT_ID = "1"                         # 证书ID， 一般如果仅有一个证书，ID为1， 多个证书也可以调用下面的list_all_certs来获取ID
CERT_FILE_PATH = "www.iots.vip.crt"   # 证书路径
CERT_KEY_PATH = "www.iots.vip.key"    # 证书路径 


def get_passcode(secret):
    totp = pyotp.TOTP(secret)
    return totp.now()

class SafeLine:
    def __init__(self, base_url):
        urllib3.disable_warnings()
        self.base_url = base_url
        self.csrf_token = None
        self.jwt = None
        self.session = requests.Session()
        self.session.verify = False

    def get_csrf_token(self):
        response = self.session.get(f"{self.base_url}/api/open/auth/csrf")
        data = response.json()
        self.csrf_token = data['data']['csrf_token']
        return self.csrf_token

    def login(self, username, password):
        self.get_csrf_token()
        payload = {
            "username": username,
            "password": password,
            "csrf_token": self.csrf_token
        }
        response = self.session.post(f"{self.base_url}/api/open/auth/login", json=payload)
        data = response.json()
        self.jwt = data['data']['jwt']
        return self.jwt

    def validate_mfa(self, code):
        self.get_csrf_token()
        headers = {'authorization': 'Bearer ' + self.jwt}
        payload = {
            "code": code,
            "timestamp": int(time.time() * 1000),
            "csrf_token": self.csrf_token
        }
        response = self.session.post(f"{self.base_url}/api/open/auth/tfa", headers=headers, json=payload)
        data = response.json()
        if data['err'] is None:
            self.jwt = data['data']['jwt']
            print("login success")
        else:
            self.jwt = None
        return data['data']['jwt']

    def list_all_certs(self):
        headers = {'authorization': 'Bearer ' + self.jwt}
        response = self.session.get(f"{self.base_url}/api/open/cert", headers=headers)
        data = response.json()
        return data['data']['nodes']

    def update_cert(self, cert_id, crt, key):
        headers = {'authorization': 'Bearer ' + self.jwt}
        payload = {
            "manual": {
                "crt": crt,
                "key": key
            },
            "type": 2
        }
        response = self.session.put(f"{self.base_url}/api/open/cert/{cert_id}", headers=headers, json=payload)
        data = response.json()
        if data['err'] is None:
            print("update success")


if __name__ == '__main__':
    safeline = SafeLine(base_url=BASE_URL)
    safeline.login(USERNAME, PASSWORD)
    safeline.validate_mfa(get_passcode(OTP_SECRET))

    with open(CERT_FILE_PATH, 'r') as cert_file:
        cert_str = cert_file.read()
    with open(CERT_KEY_PATH, 'r') as key_file:
        cert_key = key_file.read()
    safeline.update_cert(CERT_ID, cert_str, cert_key)