CondorCORE/condorcore-keyring
CondorCORE/condorcore-keyring
2
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Use pysequoia in key_extract_certificate

Browse Source
This commit is contained in:
Wiktor Kwapisiewicz 2023-06-01 22:35:41 +02:00
parent 6b6c506d52
commit a5b08015a4
1 changed files with 7 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

10
libkeyringctl/sequoia.py
View File

@ -5,6 +5,7 @@ from datetime import datetime
from functools import reduce from functools import reduce
from pathlib import Path from pathlib import Path
from platform import python_version_tuple from platform import python_version_tuple
from pysequoia import Cert
from re import sub from re import sub
from tempfile import mkdtemp from tempfile import mkdtemp
from typing import Dict from typing import Dict
@ -336,10 +337,13 @@ def key_extract_certificate(key: Path, output: Optional[Path]) -> str:
The result of the extract in case output is None The result of the extract in case output is None
""" """
cmd = ["sq", "key", "extract-cert", str(key)] cert = Cert.from_file(str(key))
# Conversion to string exports only public parts
public = str(cert)
if output: if output:
cmd.extend(["--output", str(output)]) with open(output, "wb") as f:
return system(cmd) f.write(public.encode("utf8"))
return public
def certify(key: Path, certificate: Path, uid: Uid, output: Optional[Path]) -> str: def certify(key: Path, certificate: Path, uid: Uid, output: Optional[Path]) -> str: