pk/atst
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Memoize parsed openssl cert

Browse Source
This commit is contained in:
George Drummond 2019-03-20 11:05:57 -04:00
parent eafb000d58
commit 37ab26862a
No known key found for this signature in database
GPG Key ID: 296DD6077123BF17
1 changed files with 11 additions and 10 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

21
atst/utils/pdf_verification.py
View File

@ -8,6 +8,7 @@ from cryptography.hazmat.primitives.asymmetric import padding
class PDFSignature: class PDFSignature:
def __init__(self, byte_range_start=None, crl_check=None, pdf=None): def __init__(self, byte_range_start=None, crl_check=None, pdf=None):
self._signers_cert = None self._signers_cert = None
self._openssl_loaded_certificate = None
self.byte_range_start = byte_range_start self.byte_range_start = byte_range_start
self.crl_check = crl_check self.crl_check = crl_check
self.pdf = pdf self.pdf = pdf
@ -78,17 +79,21 @@ class PDFSignature:
""" """
return self.signed_binary_data["digest_algorithms"][0]["algorithm"].native return self.signed_binary_data["digest_algorithms"][0]["algorithm"].native
@property
def openssl_loaded_certificate(self):
if self._openssl_loaded_certificate is None:
self._openssl_loaded_certificate = crypto.load_certificate(
crypto.FILETYPE_PEM, self.signers_cert
)
return self._openssl_loaded_certificate
@property @property
def cert_common_name(self): def cert_common_name(self):
""" """
This returns the common name on the certificate. This might be a name or This returns the common name on the certificate. This might be a name or
a DOD ID for example. a DOD ID for example.
""" """
return ( return self.openssl_loaded_certificate.get_subject().commonName
crypto.load_certificate(crypto.FILETYPE_PEM, self.signers_cert)
.get_subject()
.commonName
)
@property @property
def encrypted_hash_of_signed_document(self): def encrypted_hash_of_signed_document(self):
@ -140,11 +145,7 @@ class PDFSignature:
Get signed PDF signature and determine if it was actually signed Get signed PDF signature and determine if it was actually signed
by the certificate that it claims it was. Returns a boolean. by the certificate that it claims it was. Returns a boolean.
""" """
public_key = ( public_key = self.openssl_loaded_certificate.get_pubkey().to_cryptography_key()
crypto.load_certificate(crypto.FILETYPE_PEM, self.signers_cert)
.get_pubkey()
.to_cryptography_key()
)
attrs = self.signed_binary_data["signer_infos"][0]["signed_attrs"] attrs = self.signed_binary_data["signer_infos"][0]["signed_attrs"]
signed_data = None signed_data = None