certs.py 1.0 KB

12345678910111213141516171819202122232425262728293031323334353637383940
  1. from cert_gen import gen_cakey,build_name,build_csr,build_servercert,build_rootca,output_cert,output_key_encrypted,build_crl
  2. def gencerts(c,st,l,o,ou,cn,crldp,passphrase):
  3. ## Start
  4. ## Build Root CA
  5. #write_key_encrypted('rootca-key.pem',cakey,passphrase)
  6. casubject = caissuer = build_name(c,st,l,o,ou,u'Root CA')
  7. cakey = gen_cakey()
  8. cacert = build_rootca(cakey,casubject,caissuer,36500)
  9. #write_cert('rootca.pem',cacert)
  10. ## Build CSR
  11. csrkey = gen_cakey()
  12. #write_key('csr-key.pem',csrkey)
  13. csrsubject = build_name(c,st,l,o,ou,cn)
  14. csrcert = build_csr(csrkey,csrsubject,cn)
  15. ## Build Server Cert
  16. #servkey = key()
  17. #write_key("server-key.pem",servkey)
  18. #serversubject = build_name(c,st,l,o,ou,servername)
  19. servercert = build_servercert(cakey,cacert,csrcert,cn,crldp,36500)
  20. #write_cert('server.pem',servercert)
  21. crlcert = build_crl(cakey,caissuer,36500)
  22. return csrsubject,output_cert(cacert),output_key_encrypted(cakey,passphrase),output_key_encrypted(csrkey,passphrase),output_cert(servercert),output_cert(csrcert),output_cert(crlcert)