Your IP : 216.73.216.213
�
f f
� 2 @ s� d Z d d l Z d d l Z d d l Z d d l Z d d l Td Z e j j e j j e
� � Z d d d � Z d Z
d d
� Z d d � Z e d
k r�e j e � e d � \ Z Z e d d � � Z e j e � Wd QXe d d � � Z e j e � Wd QXe d � e d d d d d d d d d g � e d d d d d d d d d g � e d d � �! Z e j e � e j e � Wd QXe d d � � Z e j e � Wd QXe � e d � \ Z Z e d d � �! Z e j e � e j e � Wd QXe d d � \ Z Z e d! d � �! Z e j e � e j e � Wd QXe d d � \ Z Z e d" d � �! Z e j e � e j e � Wd QXe � e d# � e d d$ d d d% d& d' g � n d S)(zOMake the custom certificate and private key files used by test_ssl
and friends.� N)�*a�
[req]
distinguished_name = req_distinguished_name
x509_extensions = req_x509_extensions
prompt = no
[req_distinguished_name]
C = XY
L = Castle Anthrax
O = Python Software Foundation
CN = {hostname}
[req_x509_extensions]
subjectAltName = DNS:{hostname}
[ ca ]
default_ca = CA_default
[ CA_default ]
dir = cadir
database = $dir/index.txt
crlnumber = $dir/crl.txt
default_md = sha1
default_days = 3600
default_crl_days = 3600
certificate = pycacert.pem
private_key = pycakey.pem
serial = $dir/serial
RANDFILE = $dir/.rand
policy = policy_match
[ policy_match ]
countryName = match
stateOrProvinceName = optional
organizationName = match
organizationalUnitName = optional
commonName = supplied
emailAddress = optional
[ policy_anything ]
countryName = optional
stateOrProvinceName = optional
localityName = optional
organizationName = optional
organizationalUnitName = optional
commonName = supplied
emailAddress = optional
[ v3_ca ]
subjectKeyIdentifier=hash
authorityKeyIdentifier=keyid:always,issuer
basicConstraints = CA:true
Fc
" C s� t d | � g } x? t d � D]1 } t j d d � � } | j | j � Wd QXq! W| \ } } } zct | d � � } | j t j d | � � Wd QXd d d d
d d d
d | d | g } | r
t j d d � � } | j | j � | j } Wd QX| d | g 7} n | d d | g 7} t
d g | � | rud d | d | d d d d d d | g } t
d g | � n t | d � � } | j � }
Wd QXt | d � � } | j � } Wd QX|
| f SWd x | D] } t j
| � q�WXd S)Nzcreating cert for � ZdeleteF�w�hostname�reqz-newz-days�3650z-nodesz-newkeyzrsa:1024z-keyoutz-configz-outz-x509�openssl�caz-outdir�cadirz-policyZpolicy_anythingz-batchz-infiles�r)�print�range�tempfile�NamedTemporaryFile�append�name�open�write� req_template�format�
check_call�read�os�remove)
r ZsignZ tempnames�i�fZreq_fileZ cert_fileZkey_file�argsZreqfile�cert�keyr � r �8/opt/alt/python34/lib64/python3.4/test/make_ssl_certs.py�
make_cert_keyF s<
r! r
c C s t j t � d S)N)�shutilZrmtree� TMP_CADIRr r r r � unmake_can s r$ c 2 C s� t j t � t t j j d d � d � � } Wd QXt t j j d d � d � � } | j d � Wd QXt t j j d d � d � � } | j d � Wd QXt j d � �} | j t j
d
d � � | j � t j � �� } d d
d d d d d d d d d d | j d d g } t
d g | � d d | j d d d d d t d! d d d d" d d d# | j g } t
d g | � d d | j d$ d d% g } t
d g | � Wd QXWd QXd S)&Nr
z index.txtza+zcrl.txtZ00zindex.txt.attrzw+zunique_subject = nor r z
our-ca-serverr z-newz-daysr z -extensionsZv3_caz-nodesz-newkeyzrsa:2048z-keyoutz pycakey.pemz-outz-subjzG/C=XY/L=Castle Anthrax/O=Python Software Foundation CA/CN=our-ca-serverr r z-configz-create_serialz pycacert.pemz-batchz-outdirz-keyfilez -selfsignz-infilesz-gencrlzrevocation.crl)r �mkdirr# r �path�joinr r r r r �flushr r )r �tr r r r �make_caq s.
!!!
r* �__main__Z localhostz ssl_cert.pemr z ssl_key.pemz5password protecting ssl_key.pem in ssl_key.passwd.pemr Zrsaz-inz-outzssl_key.passwd.pemz-des3z-passoutz
pass:somepasszkeycert.passwd.pemz keycert.pemza+Z fakehostnamez keycert2.pemTz keycert3.pemz keycert4.pemzr
Please change the values in test_ssl.py, test_parse_cert function related to notAfter,notBefore and serialNumberZx509z-datesz-serialz-noout)�__doc__r r" �sysr �
subprocessr r& �abspath�dirname�__file__�herer! r# r$ r* �__name__�chdirr r r r r r r r r r r �<module> sT
: &
%%