Method public_key

src/cryptography/x509/base.py:355–406

Sets the requestor's public key (as found in the signing request).

(
        self,
        key: CertificatePublicKeyTypes,
        *,
        rsa_padding: type[padding.PSS] | None = None,
    )

        )

    def public_key(
        self,
        key: CertificatePublicKeyTypes,
        *,
        rsa_padding: type[padding.PSS] | None = None,
    ) -> CertificateBuilder:
        """
        Sets the requestor's public key (as found in the signing request).
        """
        if not isinstance(
            key,
            (
                dsa.DSAPublicKey,
                rsa.RSAPublicKey,
                ec.EllipticCurvePublicKey,
                ed25519.Ed25519PublicKey,
                ed448.Ed448PublicKey,
                mldsa.MLDSA44PublicKey,
                mldsa.MLDSA65PublicKey,
                mldsa.MLDSA87PublicKey,
                x25519.X25519PublicKey,
                x448.X448PublicKey,
            ),
        ):
            raise TypeError(
                "Expecting one of DSAPublicKey, RSAPublicKey,"
                " EllipticCurvePublicKey, Ed25519PublicKey,"
                " Ed448PublicKey, MLDSA44PublicKey, MLDSA65PublicKey,"
                " MLDSA87PublicKey, X25519PublicKey, or "
                "X448PublicKey."
            )
        if rsa_padding is not None:
            if rsa_padding is not padding.PSS:
                raise TypeError(
                    "rsa_padding must be the PSS class, not an instance"
                )
            if not isinstance(key, rsa.RSAPublicKey):
                raise TypeError(
                    "rsa_padding is only supported with RSA public keys"
                )
        if self._public_key is not None:
            raise ValueError("The public key may only be set once.")
        return CertificateBuilder(
            self._issuer_name,
            self._subject_name,
            key,
            self._serial_number,
            self._not_valid_before,
            self._not_valid_after,
            self._extensions,
            rsa_padding,
        )

    def serial_number(self, number: int) -> CertificateBuilder:
        """