BigBlueButton/bigbluebutton-Github
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Merge branch '090-encrypted-recording' into HEAD

Browse Source 
Conflicts:
	bigbluebutton-web/src/java/org/bigbluebutton/api/MeetingService.java
This commit is contained in:
Felipe Cecagno 2014-09-10 17:27:47 -03:00
commit 56f20fa5d3
17 changed files with 1233 additions and 576 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
bigbluebutton-config/bin/bbb-record
View File

@ -329,12 +329,12 @@ if [ $REPUBLISH ]; then
fi
if [ $CLEAN ]; then
sudo /etc/init.d/bbb-record stop
sudo /etc/init.d/bbb-record-core stop
for type in $TYPES; do
echo " clearning logs in /var/log/bigbluebutton/$type"
find /var/log/bigbluebutton/$type -name "*.log" -exec sudo rm '{}' \;
done
sudo /etc/init.d/bbb-record start
sudo /etc/init.d/bbb-record-core start
fi
if [ $DELETE ]; then

11
bigbluebutton-web/grails-app/controllers/org/bigbluebutton/web/controllers/ApiController.groovy
View File

@ -1510,6 +1510,17 @@ class ApiController {
mkp.yield(item.getExtensions())
}
}
}
download() {
r.getDownloads().each { item ->
format{
type(item.getFormat())
url(item.getUrl())
md5(item.getMd5())
key(item.getKey())
length(item.getLength())
}
}
}
}

11
bigbluebutton-web/src/groovy/org/bigbluebutton/api/RecordingServiceHelperImp.groovy
View File

@ -70,6 +70,12 @@ public class RecordingServiceHelperImp implements RecordingServiceHelper {
builder.duration(info.getPlaybackDuration())
builder.extension(info.getPlaybackExtensions())
}
builder.download {
builder.format(info.getDownloadFormat())
builder.link(info.getDownloadLink())
builder.md5(info.getDownloadMd5())
builder.key(info.getDownloadKey())
}
Map<String,String> metainfo = info.getMetadata();
builder.meta{
metainfo.keySet().each { key ->
@ -104,7 +110,10 @@ public class RecordingServiceHelperImp implements RecordingServiceHelper {
r.setPlaybackLink(rec.playback.link.text());
r.setPlaybackDuration(rec.playback.duration.text());
r.setPlaybackExtensions(rec.playback.extension.children());
r.setDownloadFormat(rec.download.format.text());
r.setDownloadLink(rec.download.link.text());
r.setDownloadMd5(rec.download.md5.text());
r.setDownloadKey(rec.download.key.text());
Map<String, String> meta = new HashMap<String, String>();
rec.meta.children().each { anode ->
log.debug("metadata: "+anode.name()+" "+anode.text())

1134
bigbluebutton-web/src/java/org/bigbluebutton/api/MeetingService.java
View File

File diff suppressed because it is too large Load Diff

47
bigbluebutton-web/src/java/org/bigbluebutton/api/domain/Download.java Executable file
View File

@ -0,0 +1,47 @@
package org.bigbluebutton.api.domain;
public class Download {
private String format;
private String url;
private int length;
private String md5;
private String key;
public Download(String format, String url, String md5, String key, int length) {
this.format = format;
this.url = url;
this.length = length;
this.md5 = md5;
this.key = key;
}
public String getFormat() {
return format;
}
public void setFormat(String format) {
this.format = format;
}
public String getUrl() {
return url;
}
public void setUrl(String url) {
this.url = url;
}
public int getLength() {
return length;
}
public void setLength(int length) {
this.length = length;
}
public void setMd5(String md5) {
this.md5 = md5;
}
public String getMd5() {
return md5;
}
public void setKey(String key) {
this.key = key;
}
public String getKey() {
return key;
}
}

45
bigbluebutton-web/src/java/org/bigbluebutton/api/domain/Recording.java
View File

@ -36,6 +36,7 @@ public class Recording {
private String endTime;
private Map<String, String> metadata = new HashMap<String, String>();
private ArrayList<Playback> playbacks=new ArrayList<Playback>();
private ArrayList<Download> downloads=new ArrayList<Download>();
//TODO:
private String state;
@ -44,7 +45,11 @@ public class Recording {
private String playbackDuration;
private GPathResult playbackExtensions;
private String downloadLink;
private String downloadFormat;
private String downloadMd5;
private String downloadKey;
public String getId() {
return id;
}
@ -84,7 +89,37 @@ public class Recording {
public void setEndTime(String endTime) {
this.endTime = convertOldDateFormat(endTime);
}
public String getDownloadLink() {
return downloadLink;
}
public void setDownloadLink(String downloadLink) {
this.downloadLink = downloadLink;
}
public String getDownloadFormat() {
return downloadFormat;
}
public void setDownloadFormat(String downloadFormat) {
this.downloadFormat = downloadFormat;
}
public String getDownloadMd5() {
return downloadMd5;
}
public void setDownloadMd5(String downloadMd5) {
this.downloadMd5 = downloadMd5;
}
public String getDownloadKey() {
return downloadKey;
}
public void setDownloadKey(String downloadKey) {
this.downloadKey = downloadKey;
}
public String getPlaybackLink() {
return playbackLink;
}
@ -141,6 +176,14 @@ public class Recording {
this.name = name;
}
public ArrayList<Download> getDownloads() {
return downloads;
}
public void setDownloads(ArrayList<Download> downloads) {
this.downloads = downloads;
}
public ArrayList<Playback> getPlaybacks() {
return playbacks;
}

10
record-and-playback/core/Gemfile
View File

@ -19,12 +19,9 @@
source "http://rubygems.org"
gem "rspec", "2.0.0", :require => "spec"
gem "cucumber", "0.9.2"
gem "redis", "2.1.1"
#gem "SystemTimer", "1.2.3"
gem "nokogiri", "1.4.4"
gem "resque", "1.15.0"
gem "redis"
gem "nokogiri"
gem "resque"
gem "mime-types"
gem "streamio-ffmpeg"
gem "rubyzip"
@ -32,3 +29,4 @@ gem "curb"
gem "builder"
gem "trollop"
gem "open4"
gem "fastimage"

1
record-and-playback/core/lib/recordandplayback.rb
View File

@ -31,6 +31,7 @@ require 'recordandplayback/deskshare_archiver'
require 'recordandplayback/generators/events'
require 'recordandplayback/generators/audio'
require 'recordandplayback/generators/video'
require 'recordandplayback/generators/mconf_processor'
require 'recordandplayback/generators/matterhorn_processor'
require 'recordandplayback/generators/audio_processor'
require 'recordandplayback/generators/presentation'

54
record-and-playback/core/lib/recordandplayback/generators/mconf_processor.rb Executable file
View File

@ -0,0 +1,54 @@
# Set encoding to utf-8
# encoding: UTF-8
#
# BigBlueButton open source conferencing system - http://www.bigbluebutton.org/
#
# Copyright (c) 2012 BigBlueButton Inc. and by respective authors (see below).
#
# This program is free software; you can redistribute it and/or modify it under the
# terms of the GNU Lesser General Public License as published by the Free Software
# Foundation; either version 3.0 of the License, or (at your option) any later
# version.
#
# BigBlueButton is distributed in the hope that it will be useful, but WITHOUT ANY
# WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A
# PARTICULAR PURPOSE. See the GNU Lesser General Public License for more details.
#
# You should have received a copy of the GNU Lesser General Public License along
# with BigBlueButton; if not, see <http://www.gnu.org/licenses/>.
#
require 'rubygems'
require 'fileutils'
require 'builder'
require 'mime/types'
require 'digest/md5'
require 'zip'
module BigBlueButton
class MconfProcessor
def self.zip_directory (directory, zipped_file)
BigBlueButton.logger.info("Task: Zipping directory... #{zipped_file} #{directory}")
#files = [webcam, deskshare, dublincore, manifest]
Zip::File.open(zipped_file, Zip::File::CREATE) do |zipfile|
Dir["#{directory}/**/**"].reject{|f|f==zipped_file}.each do |file|
zipfile.add(file.sub(directory+'/', ''), file)
end
end
end
def self.unzip(unzip_dir, zipfile)
Zip::File.open(zipfile) do |zip_file|
zip_file.each do |f|
f_path=File.join(unzip_dir, f.name)
FileUtils.mkdir_p(File.dirname(f_path))
zip_file.extract(f, f_path) unless File.exist?(f_path)
end
end
end
end
end

22
record-and-playback/deploy.sh
View File

@ -18,18 +18,13 @@
# with BigBlueButton; if not, see <http://www.gnu.org/licenses/>.
#
set -e
set -xe
sudo cp core/Gemfile /usr/local/bigbluebutton/core/Gemfile
sudo rm -rf /usr/local/bigbluebutton/core/lib
sudo cp -r core/lib /usr/local/bigbluebutton/core/
sudo rm -rf /usr/local/bigbluebutton/core/scripts
sudo cp -r core/scripts /usr/local/bigbluebutton/core/
sudo rm -rf /etc/bigbluebutton/god
sudo cp -r core/god/god /etc/bigbluebutton/
sudo rm -f /etc/init.d/bbb-record-core
sudo cp core/god/initd.god /etc/init.d/bbb-record-core
sudo chmod 0755 /etc/init.d/bbb-record-core
sudo rm -rf /var/bigbluebutton/playback/*
function deploy_format() {
@ -40,12 +35,19 @@ function deploy_format() {
scripts_dir="$format/scripts"
if [ -d $playback_dir ]; then sudo cp -r $playback_dir /var/bigbluebutton/playback/; fi
if [ -d $scripts_dir ]; then sudo cp -r $scripts_dir/* /usr/local/bigbluebutton/core/scripts/; fi
sudo mkdir -p /var/log/bigbluebutton/$format
sudo mkdir -p /var/log/bigbluebutton/$format /var/bigbluebutton/published/$format /var/bigbluebutton/recording/publish/$format
done
}
# deploy_format "slides"
deploy_format "presentation"
RECORDING_SERVER=false
if $RECORDING_SERVER ; then
deploy_format "presentation"
deploy_format "mconf_decrypter"
sudo mv /usr/local/bigbluebutton/core/scripts/mconf-recording-decrypter.initd /etc/init.d/mconf-recording-decrypter
sudo mv /usr/local/bigbluebutton/core/scripts/mconf-recording-decrypter.monit /etc/monit/conf.d/mconf-recording-decrypter
else
deploy_format "mconf_encrypted"
fi
sudo mkdir -p /var/bigbluebutton/playback/
sudo mkdir -p /var/bigbluebutton/recording/raw/
@ -57,7 +59,7 @@ sudo mkdir -p /var/bigbluebutton/recording/status/processed/
sudo mkdir -p /var/bigbluebutton/recording/status/sanity/
sudo mv /usr/local/bigbluebutton/core/scripts/*.nginx /etc/bigbluebutton/nginx/
sudo chown -R tomcat6:tomcat6 /var/bigbluebutton/ /var/log/bigbluebutton/
sudo chown -R tomcat7:tomcat7 /var/bigbluebutton/ /var/log/bigbluebutton/
sudo chown -R red5:red5 /var/bigbluebutton/deskshare/
sudo chown -R freeswitch:daemon /var/bigbluebutton/meetings/

166
record-and-playback/mconf_decrypter/scripts/mconf-decrypter.rb Executable file
View File

@ -0,0 +1,166 @@
#!/usr/bin/ruby
# Set encoding to utf-8
# encoding: UTF-8
#
# BigBlueButton open source conferencing system - http://www.bigbluebutton.org/
#
# Copyright (c) 2012 BigBlueButton Inc. and by respective authors (see below).
#
# This program is free software; you can redistribute it and/or modify it under the
# terms of the GNU Lesser General Public License as published by the Free Software
# Foundation; either version 3.0 of the License, or (at your option) any later
# version.
#
# BigBlueButton is distributed in the hope that it will be useful, but WITHOUT ANY
# WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A
# PARTICULAR PURPOSE. See the GNU Lesser General Public License for more details.
#
# You should have received a copy of the GNU Lesser General Public License along
# with BigBlueButton; if not, see <http://www.gnu.org/licenses/>.
#
require '../../core/lib/recordandplayback'
require 'rubygems'
require 'yaml'
require 'net/http'
require 'rexml/document'
require 'open-uri'
require 'digest/md5'
BigBlueButton.logger = Logger.new("/var/log/bigbluebutton/mconf_decrypter.log",'daily' )
#BigBlueButton.logger = Logger.new(STDOUT)
bbb_props = YAML::load(File.open('../../core/scripts/bigbluebutton.yml'))
mconf_props = YAML::load(File.open('mconf-decrypter.yml'))
# these properties must be global variables (starting with $)
$private_key = mconf_props['private_key']
$get_recordings_url = mconf_props['get_recordings_url']
$recording_dir = bbb_props['recording_dir']
$raw_dir = "#{$recording_dir}/raw"
$archived_dir = "#{$recording_dir}/status/archived"
def fetchRecordings(url)
#BigBlueButton.logger.debug("Fetching #{url}")
doc = nil
begin
doc = Nokogiri::XML(Net::HTTP.get_response(URI.parse(url)).body)
returncode = doc.xpath("//returncode")
if returncode.empty? or returncode.text != "SUCCESS"
BigBlueButton.logger.error "getRecordings didn't return success:\n#{doc.to_xml(:indent => 2)}"
return false
end
rescue
BigBlueButton.logger.error("Exception occurred: #{$!}")
return false
end
doc.xpath("//recording").each do |recording|
record_id = recording.xpath(".//recordID").text
recording.xpath(".//download/format").each do |format|
type = format.xpath(".//type").text
if type == "encrypted"
meeting_id = record_id
file_url = format.xpath(".//url").text
key_file_url = format.xpath(".//key").text
md5_value = format.xpath(".//md5").text
encrypted_file = file_url.split("/").last
decrypted_file = File.basename(encrypted_file, '.*') + ".zip"
if not File.exist?("#{$archived_dir}/#{meeting_id}.done") then
Dir.chdir($raw_dir) do
BigBlueButton.logger.info("Next recording to be processed is #{meeting_id}")
BigBlueButton.logger.debug("Removing any file previously downloaded related to this recording")
FileUtils.rm_r Dir.glob("#{$raw_dir}/#{record_id}*"), :force => true
BigBlueButton.logger.debug("recordID = #{record_id}")
BigBlueButton.logger.debug("file_url = #{file_url}")
BigBlueButton.logger.debug("key_file_url = #{key_file_url}")
BigBlueButton.logger.debug("md5_value = #{md5_value}")
BigBlueButton.logger.info("Downloading the encrypted file to #{encrypted_file}")
begin
writeOut = open(encrypted_file, "wb")
writeOut.write(open(file_url).read)
writeOut.close
rescue Exception => e
BigBlueButton.logger.error "Failed to download the encrypted file: #{e.to_s}"
next
end
md5_calculated = Digest::MD5.file(encrypted_file)
if md5_calculated == md5_value
BigBlueButton.logger.info("The calculated MD5 matches the expected value")
key_file = key_file_url.split("/").last
decrypted_key_file = File.basename(key_file, '.*') + ".txt"
BigBlueButton.logger.info("Downloading the key file to #{key_file}")
writeOut = open(key_file, "wb")
writeOut.write(open(key_file_url).read)
writeOut.close
if key_file != decrypted_key_file
BigBlueButton.logger.debug("Locating private key")
if not File.exists?("#{$private_key}")
BigBlueButton.logger.error "Couldn't find the private key on #{$private_key}"
next
end
BigBlueButton.logger.debug("Decrypting recording key")
command = "openssl rsautl -decrypt -inkey #{$private_key} < #{key_file} > #{decrypted_key_file}"
status = BigBlueButton.execute(command, false)
if not status.success?
BigBlueButton.logger.error "Couldn't decrypt the random key with the server private key"
next
end
FileUtils.rm_r "#{key_file}"
else
BigBlueButton.logger.info("No public key was used to encrypt the random key")
end
BigBlueButton.logger.debug("Decrypting the recording file")
command = "openssl enc -aes-256-cbc -d -pass file:#{decrypted_key_file} < #{encrypted_file} > #{decrypted_file}"
status = BigBlueButton.execute(command, false)
if not status.success?
BigBlueButton.logger.error "Couldn't decrypt the recording file using the random key"
next
end
BigBlueButton::MconfProcessor.unzip("#{$raw_dir}/#{meeting_id}", decrypted_file)
archived_done = File.new("#{$archived_dir}/#{meeting_id}.done", "w")
archived_done.write("Archived #{meeting_id}")
archived_done.close
[ "#{encrypted_file}", "#{decrypted_file}", "#{decrypted_key_file}" ].each { |file|
BigBlueButton.logger.info("Removing #{file}")
FileUtils.rm_r "#{file}"
}
BigBlueButton.logger.info("Recording #{record_id} decrypted successfully")
else
BigBlueButton.logger.error("The calculated MD5 doesn't match the expected value")
FileUtils.rm_f(encrypted_file)
end
end
end
end
end
end
return true
end
def processGetRecordingsUrlInput(input)
if input.respond_to? "each"
input.each do |url|
processGetRecordingsUrlInput url
end
else
fetchRecordings input
end
end
processGetRecordingsUrlInput $get_recordings_url

2
record-and-playback/mconf_decrypter/scripts/mconf-decrypter.yml Normal file
View File

@ -0,0 +1,2 @@
get_recordings_url: http://localhost:8080/bigbluebutton/api/getRecordings?checksum=1bc39cd242bb8f9b331af0d2323dc1ba3cabe2fe
private_key: /usr/local/bigbluebutton/core/scripts/private.pem

44
record-and-playback/mconf_decrypter/scripts/mconf-recording-decrypter.initd Normal file
View File

@ -0,0 +1,44 @@
#!/bin/sh
### BEGIN INIT INFO
# Provides: mconf-recording-decrypter
# Required-Start: $remote_fs $syslog
# Required-Stop: $remote_fs $syslog
# Default-Start: 2 3 4 5
# Default-Stop: 0 1 6
# Description: Starts the foo service
### END INIT INFO
NAME=mconf-recording-decrypter
PID_FILE=/var/run/mconf-recording-decrypter.pid
DIR=/usr/local/bigbluebutton/core/scripts
EXEC=mconf-decrypter.rb
RUN_AS=tomcat7
if [ ! -f $DIR/$EXEC ]; then
echo "$DIR/$EXEC not found."
exit
fi
case "$1" in
start)
echo "Starting $NAME"
cd $DIR
start-stop-daemon -d $DIR --start --background --pidfile $PID_FILE --chuid $RUN_AS:$RUN_AS --make-pidfile --exec $EXEC --quiet
;;
stop)
echo "Stopping $NAME"
start-stop-daemon --stop --quiet --oknodo --pidfile $PIDFILE --exec $EXEC
;;
force-reload|restart)
$0 stop
$0 start
;;
*)
echo "Use: /etc/init.d/$NAME {start|stop|restart|force-reload}"
exit 1
;;
esac
exit 0

3
record-and-playback/mconf_decrypter/scripts/mconf-recording-decrypter.monit Normal file
View File

@ -0,0 +1,3 @@
check process mconf-recording-decrypter with pidfile /var/run/mconf-recording-decrypter.pid
start program = "/etc/init.d/mconf-recording-decrypter start" with timeout 60 seconds
stop program = "/etc/init.d/mconf-recording-decrypter stop"

22
record-and-playback/mconf_encrypted/scripts/mconf_encrypted.nginx Normal file
View File

@ -0,0 +1,22 @@
#
# BigBlueButton open source conferencing system - http://www.bigbluebutton.org/
#
# Copyright (c) 2012 BigBlueButton Inc. and by respective authors (see below).
#
# This program is free software; you can redistribute it and/or modify it under the
# terms of the GNU Lesser General Public License as published by the Free Software
# Foundation; either version 3.0 of the License, or (at your option) any later
# version.
#
# BigBlueButton is distributed in the hope that it will be useful, but WITHOUT ANY
# WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A
# PARTICULAR PURPOSE. See the GNU Lesser General Public License for more details.
#
# You should have received a copy of the GNU Lesser General Public License along
# with BigBlueButton; if not, see <http://www.gnu.org/licenses/>.
#
location /mconf_encrypted {
root /var/bigbluebutton/published;
index index.html index.htm;
}

62
record-and-playback/mconf_encrypted/scripts/process/mconf_encrypted.rb Executable file
View File

@ -0,0 +1,62 @@
# Set encoding to utf-8
# encoding: UTF-8
#
# BigBlueButton open source conferencing system - http://www.bigbluebutton.org/
#
# Copyright (c) 2012 BigBlueButton Inc. and by respective authors (see below).
#
# This program is free software; you can redistribute it and/or modify it under the
# terms of the GNU Lesser General Public License as published by the Free Software
# Foundation; either version 3.0 of the License, or (at your option) any later
# version.
#
# BigBlueButton is distributed in the hope that it will be useful, but WITHOUT ANY
# WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A
# PARTICULAR PURPOSE. See the GNU Lesser General Public License for more details.
#
# You should have received a copy of the GNU Lesser General Public License along
# with BigBlueButton; if not, see <http://www.gnu.org/licenses/>.
#
require '../../core/lib/recordandplayback'
require 'rubygems'
require 'trollop'
require 'yaml'
opts = Trollop::options do
opt :meeting_id, "Meeting id to archive", :default => '58f4a6b3-cd07-444d-8564-59116cb53974', :type => String
end
meeting_id = opts[:meeting_id]
#Mconf process log file
logger = Logger.new("/var/log/bigbluebutton/mconf_encrypted/process-#{meeting_id}.log", 'daily' )
BigBlueButton.logger = logger
# This script lives in scripts/archive/steps while bigbluebutton.yml lives in scripts/
props = YAML::load(File.open('../../core/scripts/bigbluebutton.yml'))
recording_dir = props['recording_dir']
raw_presentation_src = props['raw_presentation_src']
meeting_raw_dir = "#{recording_dir}/raw/#{meeting_id}"
meeting_raw_presentation_dir = "#{raw_presentation_src}/#{meeting_id}"
meeting_process_dir = "#{recording_dir}/process/mconf_encrypted/#{meeting_id}"
if not FileTest.directory?(meeting_process_dir)
FileUtils.mkdir_p "#{meeting_process_dir}"
# Create a copy of the raw archives
BigBlueButton.logger.info("Copying the recording raw files from #{meeting_raw_dir} to #{meeting_process_dir}")
FileUtils.cp_r Dir.glob("#{meeting_raw_dir}/*"), meeting_process_dir
# There's no need to backup the presentation raw folder now
# FileUtils.mkdir_p "#{meeting_process_dir}/presentation_raw"
# BigBlueButton.logger.info("Copying the recording presentation from #{meeting_raw_presentation_dir}/#{meeting_id} to #{meeting_process_dir}/presentation_raw")
# FileUtils.cp_r Dir.glob("#{meeting_raw_presentation_dir}/#{meeting_id}/*"), "#{meeting_process_dir}/presentation_raw"
process_done = File.new("#{recording_dir}/status/processed/#{meeting_id}-mconf_encrypted.done", "w")
process_done.write("Processed #{meeting_id}")
process_done.close
end

171
record-and-playback/mconf_encrypted/scripts/publish/mconf_encrypted.rb Executable file
View File

@ -0,0 +1,171 @@
# Set encoding to utf-8
# encoding: UTF-8
#
# BigBlueButton open source conferencing system - http://www.bigbluebutton.org/
#
# Copyright (c) 2012 BigBlueButton Inc. and by respective authors (see below).
#
# This program is free software; you can redistribute it and/or modify it under the
# terms of the GNU Lesser General Public License as published by the Free Software
# Foundation; either version 3.0 of the License, or (at your option) any later
# version.
#
# BigBlueButton is distributed in the hope that it will be useful, but WITHOUT ANY
# WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A
# PARTICULAR PURPOSE. See the GNU Lesser General Public License for more details.
#
# You should have received a copy of the GNU Lesser General Public License along
# with BigBlueButton; if not, see <http://www.gnu.org/licenses/>.
#
require '../../core/lib/recordandplayback'
require 'rubygems'
require 'yaml'
require 'cgi'
require 'digest/md5'
bbb_props = YAML::load(File.open('../../core/scripts/bigbluebutton.yml'))
recording_dir = bbb_props['recording_dir']
playback_host = bbb_props['playback_host']
published_dir = bbb_props['published_dir']
raw_presentation_src = bbb_props['raw_presentation_src']
done_files = Dir.glob("#{recording_dir}/status/processed/*.done")
done_files.each do |df|
match = /(.*)-(.*).done/.match df.sub(/.+\//, "")
meeting_id = match[1]
if (match[2] == "mconf_encrypted")
BigBlueButton.logger = Logger.new("/var/log/bigbluebutton/mconf_encrypted/publish-#{meeting_id}.log", 'daily' )
meeting_process_dir = "#{recording_dir}/process/mconf_encrypted/#{meeting_id}"
meeting_publish_dir = "#{recording_dir}/publish/mconf_encrypted/#{meeting_id}"
meeting_published_dir = "#{recording_dir}/published/mconf_encrypted/#{meeting_id}"
meeting_raw_dir = "#{recording_dir}/raw/#{meeting_id}"
meeting_raw_presentation_dir = "#{raw_presentation_src}/#{meeting_id}"
if not FileTest.directory?(meeting_publish_dir)
FileUtils.mkdir_p meeting_publish_dir
Dir.chdir(meeting_publish_dir) do
BigBlueButton::MconfProcessor.zip_directory(meeting_process_dir, "#{meeting_id}.zip")
metadata = BigBlueButton::Events.get_meeting_metadata("#{meeting_process_dir}/events.xml")
length = 16
chars = 'abcdefghjkmnpqrstuvwxyzABCDEFGHJKLMNPQRSTUVWXYZ23456789'
password = ''
length.times { password << chars[rand(chars.size)] }
passfile = File.new("#{meeting_id}.txt", "w")
passfile.write "#{password}"
passfile.close
# encrypt files
command = "openssl enc -aes-256-cbc -pass file:#{meeting_id}.txt < #{meeting_id}.zip > #{meeting_id}.dat"
status = BigBlueButton.execute(command)
if not status.success?
raise "Couldn't encrypt the recording file using the random key"
end
FileUtils.rm_f "#{meeting_id}.zip"
key_filename = ""
if metadata.has_key?('mconflb-rec-server-key') and not metadata['mconflb-rec-server-key'].to_s.empty?
key_filename = "#{meeting_id}.enc"
# The key is already unescaped in the metadata!!
#BigBlueButton.logger.info("Unescaping public key")
#public_key_decoded = CGI::unescape("#{metadata['public-key'].to_s}")
public_key_decoded = "#{metadata['mconflb-rec-server-key'].to_s}"
public_key_filename = "public-key.pem"
public_key = File.new("#{public_key_filename}", "w")
public_key.write "#{public_key_decoded}"
public_key.close
=begin
# Test: print the public key
public_key = File.new("#{public_key_filename}", "r")
counter = 0
while (line = public_key.gets)
BigBlueButton.logger.info "#{counter}: #{line}"
counter = counter + 1
end
public_key.close
=end
command = "openssl rsautl -encrypt -pubin -inkey #{public_key_filename} < #{meeting_id}.txt > #{meeting_id}.enc"
status = BigBlueButton.execute(command)
if not status.success?
raise "Couldn't encrypt the random key using the server public key passed as metadata"
end
# Comment it for testing
FileUtils.rm_f ["#{meeting_id}.txt", "#{public_key_filename}"]
else
key_filename = "#{meeting_id}.txt"
BigBlueButton.logger.warn "No public key was found in the meeting's metadata"
end
# generate md5 checksum
md5sum = Digest::MD5.file("#{meeting_id}.dat")
BigBlueButton.logger.info("Creating metadata.xml")
# Create metadata.xml
b = Builder::XmlMarkup.new(:indent => 2)
metaxml = b.recording {
b.id(meeting_id)
b.state("available")
b.published(true)
# Date Format for recordings: Thu Mar 04 14:05:56 UTC 2010
b.start_time(BigBlueButton::Events.first_event_timestamp("#{meeting_process_dir}/events.xml"))
b.end_time(BigBlueButton::Events.last_event_timestamp("#{meeting_process_dir}/events.xml"))
b.download {
b.format("encrypted")
b.link("http://#{playback_host}/mconf_encrypted/#{meeting_id}/#{meeting_id}.dat")
b.md5(md5sum)
b.key("http://#{playback_host}/mconf_encrypted/#{meeting_id}/#{key_filename}")
}
b.meta {
BigBlueButton::Events.get_meeting_metadata("#{meeting_process_dir}/events.xml").each { |k,v| b.method_missing(k,v) }
}
}
metadata_xml = File.new("metadata.xml","w")
metadata_xml.write(metaxml)
metadata_xml.close
BigBlueButton.logger.info("Publishing mconf_encrypted")
# Now publish this recording
if not FileTest.directory?("#{published_dir}/mconf_encrypted")
FileUtils.mkdir_p "#{published_dir}/mconf_encrypted"
end
BigBlueButton.logger.info("Publishing files")
FileUtils.cp_r(meeting_publish_dir, "#{published_dir}/mconf_encrypted")
# it doesn't work since video and deskshare files are owned by red5,
# freeswitch files are owned by freeswitch, and this script is ran by
# tomcat6, so it can just remove files owned by tomcat6
FileUtils.rm_r [ "/usr/share/red5/webapps/video/streams/#{meeting_id}",
"/usr/share/red5/webapps/deskshare/streams/#{meeting_id}",
Dir.glob("/var/freeswitch/meetings/#{meeting_id}*.wav") ], :force => true
# Remove all the recording flags
FileUtils.rm_f [ "#{recording_dir}/status/sanity/#{meeting_id}.done",
"#{recording_dir}/status/recorded/#{meeting_id}.done",
"#{recording_dir}/status/archived/#{meeting_id}.done" ]
# Comment it for testing
BigBlueButton.logger.info("Removing the recording raw files: #{meeting_raw_dir}")
FileUtils.rm_r meeting_raw_dir, :force => true
BigBlueButton.logger.info("Removing the recording presentation: #{meeting_raw_presentation_dir}")
FileUtils.rm_r meeting_raw_presentation_dir, :force => true
publish_done = File.new("#{recording_dir}/status/published/#{meeting_id}-mconf_encrypted.done", "w")
publish_done.write("Published #{meeting_id}")
publish_done.close
end
end
end
end