def create_cert(self, common_name):
cert = crypto.X509()
# NOTE: Expire time 3 yr
cert.set_serial_number(int(time.time() * 10000))
cert.gmtime_adj_notBefore(-3600 * 48)
cert.gmtime_adj_notAfter(94608000)
cert.get_subject().CN = common_name
cert.set_issuer(self.ca_root.get_subject())
cert.set_pubkey(self.ca_root.get_pubkey())
cert.set_version(2)
cert.sign(self.private_key, "sha256")
self.certs_cache[common_name] = cert
return cert
评论列表
文章目录