Revize ef65f488

Re #8472 - Implemented get_chain_of_trust method and added an integration test validating it

Added return type specification to read_all method in CertificateRepository

src/services/certificate_service.py

@@ +1 @@
+from typing import List
+
 from src.constants import ROOT_CA_ID, INTERMEDIATE_CA_ID, CA_ID, CERTIFICATE_ID
 from src.dao.certificate_repository import CertificateRepository
 from src.model.certificate import Certificate
@@ -123 +125 @@
     def get_certificate(self, unique_id: int) -> Certificate:
         return self.certificate_repository.read(unique_id)
 
-    def get_certificates(self, cert_type=None) -> Certificate:
+    def get_certificates(self, cert_type=None) -> List[Certificate]:
         return self.certificate_repository.read_all(cert_type)
+
+    def get_chain_of_trust(self, from_id: int, to_id: int = -1, exclude_root=True) -> List[Certificate]:
+        start_cert = self.certificate_repository.read(from_id)
+
+        if start_cert is None or (start_cert.type_id == ROOT_CA_ID and exclude_root):
+            return []
+
+        current_cert = start_cert
+        chain_of_trust = [current_cert]
+
+        # TODO could possibly be simplified
+        if start_cert.type_id == ROOT_CA_ID:
+            return chain_of_trust
+
+        while True:
+            parent_cert = self.certificate_repository.read(current_cert.parent_id)
+
+            # check whether parent certificate
+            if parent_cert is None or parent_cert.type_id == ROOT_CA_ID:
+                if not exclude_root:
+                    chain_of_trust.append(parent_cert)
+                break
+
+            chain_of_trust.append(parent_cert)
+
+            if parent_cert.certificate_id == to_id:
+                break
+
+            current_cert = parent_cert
+
+        return chain_of_trust