moepman
/
acertmgr
mirror of https://github.com/moepman/acertmgr.git
1
0
Fork 0
Code Releases Activity

Use pyopenssl key format consistently 

Replaces a case where keys were handled manually instead of using
pyopenssl wrappers.
This commit is contained in:
David Klaftenegger 2016-04-07 02:23:21 +02:00 committed by Markus Hauschild
parent af17847cac
commit c4e1152ed4
2 changed files with 4 additions and 7 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
acertmgr.py
View File

@ -94,9 +94,7 @@ def cert_get(domains, settings):
server = acertmgr_web.ACMEHTTPServer(port)
server.start()
try:
key_fd = open(key_file, "r")
key = key_fd.read()
key_fd.close()
key = acertmgr_ssl.read_key(key_file)
cr = acertmgr_ssl.cert_request(domains.split(), key)
print("Reading account key...")
acc_key = acertmgr_ssl.read_key(acc_file)

7
acertmgr_ssl.py
View File

@ -36,15 +36,14 @@ def cert_valid_times(cert_file):
# @brief create a certificate signing request
# @param names list of domain names the certificate should be valid for
# @param key_data the key to use with the certificate in PEM format
# @return the CSR in PEM format
def cert_request(names, key_data):
# @param key the key to use with the certificate in pyopenssl format
# @return the CSR in pyopenssl format
def cert_request(names, key):
req = crypto.X509Req()
req.get_subject().commonName = names[0]
entries = ['DNS:'+name for name in names]
extensions = [crypto.X509Extension('subjectAltName'.encode('utf8'), False, ', '.join(entries).encode('utf8'))]
req.add_extensions(extensions)
key = crypto.load_privatekey(crypto.FILETYPE_PEM, key_data)
req.set_pubkey(key)
req.sign(key, 'sha256')
#return crypto.dump_certificate_request(crypto.FILETYPE_PEM, req)