def test_crl_0(self):
"""Test that the X509 CRL revocation works correctly."""
with open(os.path.join(self.crl_dir, "ch1_ta4_crl.pem"),
"rb") as f:
crl = x509.load_pem_x509_crl(
f.read(), default_backend())
with open(os.path.join(self.cs_dir,
"cs1_ch1_ta4_cert.pem"), "rb") as f:
cert = x509.load_pem_x509_certificate(
f.read(), default_backend())
self.assertTrue(crl.issuer == cert.issuer)
for rev in crl:
if rev.serial_number == cert.serial_number:
break
else:
self.assertTrue(False, "Can not find revoked "
"certificate in CRL!")
评论列表
文章目录