Infra
/
lemur
5
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

updating cryptography API call, to create right signing algorithm object.

This commit is contained in:
Hossein Shafagh 2019-02-26 16:36:59 -08:00
parent 16a18cc4b7
commit 9dbae39604
1 changed files with 3 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
lemur/common/utils.py
View File

@ -162,10 +162,10 @@ def check_cert_signature(cert, issuer_public_key):
else: else:
padder = padding.PKCS1v15() padder = padding.PKCS1v15()
issuer_public_key.verify(cert.signature, cert.tbs_certificate_bytes, padder, cert.signature_hash_algorithm) issuer_public_key.verify(cert.signature, cert.tbs_certificate_bytes, padder, cert.signature_hash_algorithm)
elif isinstance(issuer_public_key, ec.EllipticCurvePublicKey) and isinstance(cert.signature_hash_algorithm, ec.ECDSA): elif isinstance(issuer_public_key, ec.EllipticCurvePublicKey) and isinstance(ec.ECDSA(cert.signature_hash_algorithm), ec.ECDSA):
issuer_public_key.verify(cert.signature, cert.tbs_certificate_bytes, cert.signature_hash_algorithm) issuer_public_key.verify(cert.signature, cert.tbs_certificate_bytes, ec.ECDSA(cert.signature_hash_algorithm))
else: else:
raise InvalidSignature raise UnsupportedAlgorithm("Unsupported Algorithm '{var}'.".format(var=cert.signature_algorithm_oid._name))
def is_selfsigned(cert): def is_selfsigned(cert):
@ -179,8 +179,6 @@ def is_selfsigned(cert):
return True return True
except InvalidSignature: except InvalidSignature:
return False return False
except UnsupportedAlgorithm as e:
raise Exception(e)
def is_weekend(date): def is_weekend(date):