Python CA Examples

Example #1

File: ca.py Project: 0xr0ot/drozer

 def testItShouldCreateACertificate(self):
     ca = CA()
     ca.create_ca()
     
     key, certificate = ca.create_certificate()
     
     assert isinstance(key, OpenSSL.crypto.PKey)
     assert isinstance(certificate, OpenSSL.crypto.X509)

Example #2

    def testItShouldCreateACertificate(self):
        ca = CA()
        ca.create_ca()

        key, certificate = ca.create_certificate()

        assert isinstance(key, OpenSSL.crypto.PKey)
        assert isinstance(certificate, OpenSSL.crypto.X509)

Example #3

File: ca.py Project: 0xr0ot/drozer

 def testItShouldNotCreateACertificateWithoutACA(self):
     ca = CA()
     
     try:
         ca.create_certificate()
         
         assert False, "expected NoKeyMaterialError"
     except NoKeyMaterialError:
         pass
     except:
         assert False, "expected NoKeyMaterialError"

Example #4

    def testItShouldNotCreateACertificateWithoutACA(self):
        ca = CA()

        try:
            ca.create_certificate()

            assert False, "expected NoKeyMaterialError"
        except NoKeyMaterialError:
            pass
        except:
            assert False, "expected NoKeyMaterialError"

Example #5

    def testItShouldLoadACA(self):
        old_ca = CA()
        old_ca.create_ca()

        key_pem = CA.pkey_to_pem(old_ca.ca_key)
        cert_pem = CA.certificate_to_pem(old_ca.ca_cert)

        ca = CA()
        assert ca.load(key_pem, cert_pem)

Example #6

File: ca.py Project: 0xr0ot/drozer

 def testItShouldNotLoadACAFromInvalidKeyMaterial(self):
     old_ca = CA()
     old_ca.create_ca()
     
     key_pem = CA.pkey_to_pem(old_ca.ca_key)
     
     old_ca.create_ca()
     
     cert_pem = CA.certificate_to_pem(old_ca.ca_cert)
     
     ca = CA()
     assert not ca.load(key_pem, cert_pem)
     assert not ca.has_ca()

Example #7

    def testTheCAKeyMaterialShouldBeValid(self):
        ca = CA()
        ca.create_ca()

        ctx = OpenSSL.SSL.Context(OpenSSL.SSL.TLSv1_METHOD)
        ctx.use_privatekey(ca.ca_key)
        ctx.use_certificate(ca.ca_cert)

        try:
            ctx.check_privatekey()
        except OpenSSL.SSL.Error:
            assert False, "key does not match certificate"
        except:
            pass

Example #8

File: ca.py Project: 0xr0ot/drozer

 def testTheCAKeyMaterialShouldBeValid(self):
     ca = CA()
     ca.create_ca()
     
     ctx = OpenSSL.SSL.Context(OpenSSL.SSL.TLSv1_METHOD)
     ctx.use_privatekey(ca.ca_key)
     ctx.use_certificate(ca.ca_cert)
     
     try:
         ctx.check_privatekey()
     except OpenSSL.SSL.Error:
         assert False, "key does not match certificate"
     except:
         pass

Example #9

File: ca.py Project: 0xr0ot/drozer

 def testItShouldHaveACAAfterLoading(self):
     old_ca = CA()
     old_ca.create_ca()
     
     key_pem = CA.pkey_to_pem(old_ca.ca_key)
     cert_pem = CA.certificate_to_pem(old_ca.ca_cert)
     
     ca = CA()
     ca.load(key_pem, cert_pem)
     
     assert ca.has_ca()

Example #10

File: ca.py Project: 0xr0ot/drozer

 def testItShouldLoadACA(self):
     old_ca = CA()
     old_ca.create_ca()
     
     key_pem = CA.pkey_to_pem(old_ca.ca_key)
     cert_pem = CA.certificate_to_pem(old_ca.ca_cert)
     
     ca = CA()
     assert ca.load(key_pem, cert_pem)

Example #11

    def testItShouldHaveACAAfterCreation(self):
        ca = CA()
        ca.create_ca()

        assert ca.has_ca()

Example #12

    def testItShouldNotHaveACAByDefault(self):
        ca = CA()

        assert not ca.has_ca()

Example #13

    def testItShouldGetTheCAPrivateKey(self):
        ca = CA()
        ca.create_ca()

        assert isinstance(ca.ca_key, OpenSSL.crypto.PKey)

Example #14

    def testItShouldSerializeACertificateToPEM(self):
        ca = CA()
        ca.create_ca()

        assert CA.certificate_to_pem(ca.ca_cert).find("CERTIFICATE") >= 0

Example #15

File: ca.py Project: 0xr0ot/drozer

 def testItShouldNotHaveACAByDefault(self):
     ca = CA()
     
     assert not ca.has_ca()

Example #16

    def testItShouldCreateACA(self):
        ca = CA()

        assert ca.create_ca()

Example #17

File: ca.py Project: 0xr0ot/drozer

 def testItShouldSerializeACertificateToPEM(self):
     ca = CA()
     ca.create_ca()
     
     assert CA.certificate_to_pem(ca.ca_cert).find("CERTIFICATE") >= 0

Example #18

File: ca.py Project: 0xr0ot/drozer

 def testItShouldGetTheCAPrivateKey(self):
     ca = CA()
     ca.create_ca()
     
     assert isinstance(ca.ca_key, OpenSSL.crypto.PKey)

Example #19

File: ca.py Project: 0xr0ot/drozer

 def testItShouldCreateACA(self):
     ca = CA()
     
     assert ca.create_ca()

Example #20

File: ca.py Project: 0xr0ot/drozer

 def testItShouldHaveACAAfterCreation(self):
     ca = CA()
     ca.create_ca()
     
     assert ca.has_ca()

Example #21

    def testItShouldHaveACAAfterLoading(self):
        old_ca = CA()
        old_ca.create_ca()

        key_pem = CA.pkey_to_pem(old_ca.ca_key)
        cert_pem = CA.certificate_to_pem(old_ca.ca_cert)

        ca = CA()
        ca.load(key_pem, cert_pem)

        assert ca.has_ca()

Example #22

File: ca.py Project: 0xr0ot/drozer

 def testItShouldSerializeAPrivateKeyToPEM(self):
     ca = CA()
     ca.create_ca()
     
     assert CA.pkey_to_pem(ca.ca_key).find("PRIVATE KEY") >= 0

Example #23

    def testItShouldNotLoadACAFromInvalidKeyMaterial(self):
        old_ca = CA()
        old_ca.create_ca()

        key_pem = CA.pkey_to_pem(old_ca.ca_key)

        old_ca.create_ca()

        cert_pem = CA.certificate_to_pem(old_ca.ca_cert)

        ca = CA()
        assert not ca.load(key_pem, cert_pem)
        assert not ca.has_ca()

Example #24

    def testItShouldSerializeAPrivateKeyToPEM(self):
        ca = CA()
        ca.create_ca()

        assert CA.pkey_to_pem(ca.ca_key).find("PRIVATE KEY") >= 0

Example #25

    def testItShouldGetTheCACertificate(self):
        ca = CA()
        ca.create_ca()

        assert isinstance(ca.ca_cert, OpenSSL.crypto.X509)

Example #26

File: ca.py Project: 0xr0ot/drozer

 def testItShouldGetTheCACertificate(self):
     ca = CA()
     ca.create_ca()
     
     assert isinstance(ca.ca_cert, OpenSSL.crypto.X509)