def _certificate_to_der(certificate):
buf_ptr = ffi.new("unsigned char**")
buf_ptr[0] = ffi.NULL
length = lib.i2d_X509(certificate, buf_ptr)
if length < 0:
raise ssl_error(None)
try:
return _bytes_with_len(ffi.cast("char*", buf_ptr[0]), length)
finally:
lib.OPENSSL_free(buf_ptr[0])
def _create_tuple_for_attribute(name, value):
buf = ffi.new("char[]", X509_NAME_MAXLEN)
length = lib.OBJ_obj2txt(buf, X509_NAME_MAXLEN, name, 0)
if length < 0:
raise ssl_error(None)
name = _str_with_len(buf, length)
buf_ptr = ffi.new("unsigned char**")
length = lib.ASN1_STRING_to_UTF8(buf_ptr, value)
if length < 0:
raise ssl_error(None)
try:
value = _str_with_len(buf_ptr[0], length)
finally:
lib.OPENSSL_free(buf_ptr[0])
return (name, value)