PyKIcore.py 文件源码

def renew_crl_date(self, next_crl_days=183):
        '''
        Extend crl expiry date and/or renwew crl

        :param next_crl_days: Number of days to add for CRL expiry.
        :type next_crl_days: Int.

        :returns: Informational result dict {'error': Boolean, 'message': String}
        :rtype: Dict.
        '''

        crlObj = self.load_crl(self.__crlpath)
        if not crlObj['error']:
            crlObj = crlObj['message']
        else:
            res = {"error": True, "message": crlObj['message']}
            return(res)

        caKeyObj = self.load_pkey(
            self.__intermediateCAkeyfile,
            self.__intermediatePass)
        if not caKeyObj['error']:
            caKeyObj = caKeyObj['message']
        else:
            res = {"error": True, "message": caKeyObj['message']}
            return(res)

        caCertObj = self.load_crt(self.__intermediateCAcrtfile)
        if not caCertObj['error']:
            caCertObj = caCertObj['message']
        else:
            res = {"error": True, "message": caCertObj['message']}
            return(res)

        try:
            encodedCrl = crlObj.export(
                caCertObj,
                caKeyObj,
                days=next_crl_days,
                digest=self.__CRL_ALGO.encode('utf-8')).decode('utf-8')
            wresult = self.writeFile(self.__crlpath, encodedCrl)
            if wresult['error']:
                res = {"error": True, "message": wresult['message']}
                return(res)
        except:
            res = {
                "error": True,
                "message": "ERROR: Unable to edit crl: " +
                self.__crlpath}
            return(res)

        res = {"error": False, "message": "INFO: CRL date updated successfuly."}
        return(res)