| # Copyright (c) 2013 The Chromium OS Authors. All rights reserved. |
| # Use of this source code is governed by a BSD-style license that can be |
| # found in the LICENSE file. |
| |
| import tempfile |
| |
| from autotest_lib.client.bin import utils |
| |
| class PEMCertificate(object): |
| """Object enclosing a PEM certificate. |
| |
| Uses the "openssl" utility to report various properties of a certificate. |
| |
| """ |
| OPENSSL_COMMAND = 'openssl' |
| ATTRIBUTE_SUBJECT = 'subject' |
| ATTRIBUTE_FINGERPRINT = 'fingerprint' |
| |
| def __init__(self, pem_contents): |
| self._pem_contents = pem_contents |
| self._fingerprint = None |
| self._subject = None |
| self._subject_dict = None |
| |
| |
| def get_attribute(self, attribute): |
| """Returns the named attribute of the certificate. |
| |
| @param attribute string referring to the attribute to retrieve. |
| @return string containing the retrieved attribute value. |
| |
| """ |
| with tempfile.NamedTemporaryFile() as temp: |
| temp.write(self._pem_contents) |
| temp.flush() |
| output = utils.system_output( |
| '%s x509 -noout -%s -in %s' % |
| (self.OPENSSL_COMMAND, attribute, temp.name)) |
| # Output is of the form "name=value..." |
| return output.split('=', 1)[1] |
| |
| |
| @property |
| def fingerprint(self): |
| """Returns the SHA-1 fingerprint of a certificate.""" |
| if self._fingerprint is None: |
| self._fingerprint = self.get_attribute(self.ATTRIBUTE_FINGERPRINT) |
| return self._fingerprint |
| |
| |
| @property |
| def subject(self): |
| """Returns the subject DN of the certificate as a list of name=value""" |
| if self._subject is None: |
| subject = self.get_attribute(self.ATTRIBUTE_SUBJECT) |
| # OpenSSL returns a form of: |
| # " /C=US/ST=CA/L=Mountain View/CN=chromelab..." |
| # but we want to return something like: |
| # [ "C=US", "ST=CA", "L=Mountain View", "CN=chromelab..." ] |
| self._subject = subject.lstrip(' /').split('/') |
| return self._subject |
| |
| |
| @property |
| def subject_dict(self): |
| """Returns the subject DN of the certificate as a dict of name:value""" |
| if self._subject_dict is None: |
| # Convert the list [ 'A=B', ... ] into a dict { 'A': 'B', ... } |
| self._subject_dict = dict(map(lambda x: x.split('=', 1), |
| self.subject)) |
| return self._subject_dict |
