cert.py 文件源码

def create_cert(self, common_name):
        cert = crypto.X509()

        # NOTE: Expire time 3 yr
        cert.set_serial_number(int(time.time() * 10000))
        cert.gmtime_adj_notBefore(-3600 * 48)
        cert.gmtime_adj_notAfter(94608000)
        cert.get_subject().CN = common_name

        cert.set_issuer(self.ca_root.get_subject())
        cert.set_pubkey(self.ca_root.get_pubkey())
        cert.set_version(2)
        cert.sign(self.private_key, "sha256")

        self.certs_cache[common_name] = cert
        return cert