pki.py 文件源码

def prune_not_ca(self):
        from pyasn1.codec.ber import decoder as d
        for i in list(reversed(range(len(self.certs)))):
            for e in range(self.certs[i].get_extension_count()):
                if self.certs[i].get_extension(e).get_short_name() == 'basicConstraints':
                    data = d.decode(self.certs[i].get_extension(e).get_data())[0]
                    ca = False
                    if data:
                        ca = data.getComponentByPosition(0)
                    if not ca:
                        self.certs.pop(i)
                        return True
        return False