def _generate_key(self, file_name):
key_size = self.config.get_key_size()
cert_dir = Utils.get_cert_dir(file_name)
openssl_args = 'genrsa -out {}/{}.key {}'.format(cert_dir, file_name, key_size).split()
if self.config.key_encryption_enabled():
openssl_args.insert(1, self.config.get_key_encryption_algorithm())
self.openssl_exec(openssl_args)
def generate_csr(self, common_name):
# Prepare file system
file_name = Utils.normalize_cn(common_name)
self._prepare_fs(common_name)
# generate private key
self._generate_key(file_name)
cert_dir = Utils.get_cert_dir(file_name)
openssl_args = 'req -new -key {0}/{1}.key -out {0}/{1}.csr -subj'.format(cert_dir, file_name).split()
openssl_args.append(self._prepare_subject(common_name))
self.openssl_exec(openssl_args)
return Utils.get_csr_as_text(file_name)
def test_get_cert_dir(self):
cert_dir = Utils.get_cert_dir('example.com')
self.assertTrue(cert_dir.endswith('ncsslapi/certs/{}/example.com'.format(str(datetime.today().year))))