(csr: Any, domains: List[str], issuer: Credentials)
| 342 | |
| 343 | @staticmethod |
| 344 | def _add_leaf_usages(csr: Any, domains: List[str], issuer: Credentials) -> Any: |
| 345 | return csr.add_extension( |
| 346 | x509.BasicConstraints(ca=False, path_length=None), |
| 347 | critical=True, |
| 348 | ).add_extension( |
| 349 | x509.AuthorityKeyIdentifier.from_issuer_subject_key_identifier( |
| 350 | issuer.certificate.extensions.get_extension_for_class( |
| 351 | x509.SubjectKeyIdentifier).value), |
| 352 | critical=False |
| 353 | ).add_extension( |
| 354 | x509.SubjectAlternativeName([x509.DNSName(domain) for domain in domains]), |
| 355 | critical=True, |
| 356 | ).add_extension( |
| 357 | x509.ExtendedKeyUsage([ |
| 358 | ExtendedKeyUsageOID.SERVER_AUTH, |
| 359 | ]), |
| 360 | critical=True |
| 361 | ) |
| 362 | |
| 363 | @staticmethod |
| 364 | def _add_client_usages(csr: Any, issuer: Credentials, rfc82name: str = None) -> Any: |
no outgoing calls
no test coverage detected