Python gen_ss_cert示例

示例#1

文件： controller.py 项目： mattclay/acme-test-container

def tls_alpn_challenge_put_pem(domain, identifier):
    log('Adding TLS ALPN challenge for domain {0} and identifier {1} (PEM certificate and key)'.format(domain, identifier))
    key, cert_challenge = _get_alpn_key_cert_from_pem_chain(domain, identifier, request.data)
    cert_normal = gen_ss_cert(key, [domain], [], [])
    # Start/modify TLS-ALPN-01 challenge server
    tls_alpn_server.add(domain, key, cert_normal, cert_challenge)
    tls_alpn_server.update()
    return 'ok'

示例#2

文件： controller.py 项目： mattclay/acme-test-container

def tls_alpn_challenge_put_b64(domain, identifier):
    log('Adding TLS ALPN challenge for domain {0} and identifier {1} (Base64 encoded DER value)'.format(domain, identifier))
    key, cert_challenge = _get_alpn_key_cert_from_der_value(domain, identifier, request.data)
    cert_normal = gen_ss_cert(key, [domain], [], [])
    # Start/modify TLS-ALPN-01 challenge server
    tls_alpn_server.add(domain, key, cert_normal, cert_challenge)
    tls_alpn_server.update()
    return 'ok'

示例#3

文件： controller.py 项目： felixfontein/ansible-acme-test

def tls_alpn_challenge_put_pem(domain, identifier):
    log('Adding TLS ALPN challenge for domain {0} and identifier {1} (PEM certificate and key)'.format(domain, identifier))
    key, cert_challenge = _get_alpn_key_cert_from_pem_chain(domain, identifier, request.data)
    cert_normal = gen_ss_cert(key, [domain], [], [])
    # Start/modify TLS-ALPN-01 challenge server
    tls_alpn_server.add(domain, key, cert_normal, cert_challenge)
    tls_alpn_server.update()
    return 'ok'

示例#4

文件： controller.py 项目： felixfontein/ansible-acme-test

def tls_alpn_challenge_put_b64(domain, identifier):
    log('Adding TLS ALPN challenge for domain {0} and identifier {1} (Base64 encoded DER value)'.format(domain, identifier))
    key, cert_challenge = _get_alpn_key_cert_from_der_value(domain, identifier, request.data)
    cert_normal = gen_ss_cert(key, [domain], [], [])
    # Start/modify TLS-ALPN-01 challenge server
    tls_alpn_server.add(domain, key, cert_normal, cert_challenge)
    tls_alpn_server.update()
    return 'ok'

示例#5

文件： controller.py 项目： mattclay/acme-test-container

def _get_alpn_key_cert_from_der_value(domain, identifier, data):
    der_value = b"DER:0420" + codecs.encode(base64.standard_b64decode(data), 'hex')
    domains = []
    ips = []
    if identifier.upper().startswith('DNS:'):
        domains.append(identifier[4:])
    elif identifier.upper().startswith('IP:'):
        ips.append(identifier[3:])
    # Create private key
    key = crypto.PKey()
    key.generate_key(crypto.TYPE_RSA, 2048)
    # Create self-signed certificates
    acme_extension = crypto.X509Extension(b"1.3.6.1.5.5.7.1.31", critical=True, value=der_value)
    cert_challenge = gen_ss_cert(key, domains, ips, extensions=[acme_extension])
    return key, cert_challenge

示例#6

文件： controller.py 项目： felixfontein/ansible-acme-test

def _get_alpn_key_cert_from_der_value(domain, identifier, data):
    der_value = b"DER:0420" + codecs.encode(base64.standard_b64decode(data), 'hex')
    domains = []
    ips = []
    if identifier.upper().startswith('DNS:'):
        domains.append(identifier[4:])
    elif identifier.upper().startswith('IP:'):
        ips.append(identifier[3:])
    # Create private key
    key = crypto.PKey()
    key.generate_key(crypto.TYPE_RSA, 2048)
    # Create self-signed certificates
    acme_extension = crypto.X509Extension(b"1.3.6.1.5.5.7.1.31", critical=True, value=der_value)
    cert_challenge = gen_ss_cert(key, domains, ips, extensions=[acme_extension])
    return key, cert_challenge