A CA object.

Examples: >>> ca = cnert.CA() >>> ca.is_root_ca True >>> ca.is_intermediate_ca False >>> ca.parent is None True

Parameters: subject_attrs: Subject Name Attributes. subject_attrs: Issuer Name Attributes. path_length: Maximum path length certificates subordinate. not_valid_before: CA not valid before date. not_valid_after: CA not valid after date. parent: Parent of CA. intermediate_num: Number of intermediates.

Methods:

• issue_cert –

  Issues a certificate

is_intermediate_ca: bool

is_root_ca: bool

issue_cert(
    *sans: str,
    subject_attrs: NameAttrs | None = None,
    not_valid_before: datetime | None = None,
    not_valid_after: datetime | None = None,
    serial_number: int | None = None,
    csr: CSR | None = None,
) -> _Cert

Bases: Freezer

An object for storing (and freezing) Name Attributes for Subject Name Attributes and Issuer Name Attributes.

Accepts any valid x509.NameAttribute as key arguments with arbitrary string values.

Has methods for returning initialized attributes in a dict and for returning a cryptography.x509.Name

There is alse a method for showing the allowed attributes.

Examples: >>> subject_attrs = cnert.NameAttrs(COMMON_NAME="example.com") >>> subject_attrs.COMMON_NAME 'example.com' >>> subject_attrs.dict_ {'COMMON_NAME': 'example.com'} >>> subject_attrs.x509_name

Methods:

• allowed_keys –

  Returns a list of allowed key arguments.

• x509_name –

  Examples:

allowed_keys() -> list[str]

x509_name() -> Name

Builds and signs a X509 Certificate.

Methods:

• build –

  Does the Certificate building.

build(sans: tuple[] | tuple[str, ...], subject_attrs_X509_name: Name, issuer_attrs_X509_name: Name, serial_number: int, not_valid_before: datetime, not_valid_after: datetime, is_ca: bool, public_key: RSAPublicKey, issuer_public_key: RSAPublicKey | None = None, path_length: int | None = None) -> None

A _Cert object.

This object is returned by cnert.CA().issue_cert()

Examples:

>>> ca = CA()
>>> cert = ca.issue_cert()
>>> cert.subject_attrs
NameAttrs(COMMON_NAME="example.com")
>>> cert.issuer_attrs
NameAttrs(ORGANIZATION_NAME="Root CA")
>>> cert.not_valid_before
datetime.datetime(2023, 3, 24, 23, 56, 55, 901545)
>>> cert.not_valid_after
datetime.datetime(2023, 6, 23, 23, 56, 55, 901545)

Parameters: sans: Subject Alternative Names as positional arguments subject_attrs: Subject Name Attributes issuer_attrs: Issure Name Attributes not_valid_before: CA not valid before date not_valid_after: CA not valid after date serial_number: Serial number parent: Certificate of CA. private_key: RSA private key path_length: Path length is_ca: if CA

MD5: str

SHA1: str

SHA256: str

authority_key_identifier_digest: str | None

private_key_pem_PKCS1: bytes

private_key_pem_PKCS8: bytes

public_key: RSAPublicKey

public_key_pem: bytes

subject_key_identifier_digest: str

A CSR object.

Examples: >>> csr = cnert.CSR()

Parameters: sans: Subject Alternative Names as positional arguments subject_attrs: Subject Name Attributes private_key: RSA private key