(path, issuer, cert)
| 168 | |
| 169 | |
| 170 | def new_crl(path, issuer, cert): |
| 171 | issuer_cert, signing_key = issuer |
| 172 | revoked_cert = ( |
| 173 | x509.RevokedCertificateBuilder() |
| 174 | .serial_number(cert[0].serial_number) |
| 175 | .revocation_date(datetime.datetime.today()) |
| 176 | .build() |
| 177 | ) |
| 178 | builder = ( |
| 179 | x509.CertificateRevocationListBuilder() |
| 180 | .issuer_name(issuer_cert.subject) |
| 181 | .last_update(datetime.datetime.today()) |
| 182 | .next_update(datetime.datetime.today() + datetime.timedelta(days=1)) |
| 183 | .add_revoked_certificate(revoked_cert) |
| 184 | ) |
| 185 | crl = builder.sign(private_key=signing_key, algorithm=hashes.SHA256()) |
| 186 | with open(path + ".crl.pem", "wb") as f: |
| 187 | f.write(crl.public_bytes(encoding=serialization.Encoding.PEM)) |
| 188 | |
| 189 | |
| 190 | def main(): |
no outgoing calls
no test coverage detected
searching dependent graphs…