Revize 0fd6d825

Re #8576 - CrlService implemented generate_crl_response(), prepared method generate_crl in CryptographyService

src/services/crl/crl_service.py

@@ -3 +3 @@
 from injector import inject
 
 from src.dao.certificate_repository import CertificateRepository
+from src.exceptions.certificate_not_found_exception import CertificateNotFoundException
 from src.services.crl.ca_index_file_line_generator import create_index_file_revoked_line
 from src.services.cryptography import CryptographyService
+from src.utils.temporary_file import TemporaryFile
 
 
 class CrlService:
@@ -42 +44 @@
 
         # join all lines with a new line
         return "\n".join(index_lines)
+
+    def generate_crl_response(self, ca_id: int) -> str:
+        """
+        Generate a CRL for the given certificate authority
+        that contains all revoked certificates
+
+        :param ca_id: ID of a CA whose CRL shall be generated
+        :return: CRL in PEM format
+        """
+        # check if the requested CA exists and if not throw an exception
+        if self.certificate_repository.read(ca_id) is None:
+            raise CertificateNotFoundException(ca_id)
+
+        # Create an index file and call cryptography service to generate CRL
+        with TemporaryFile("crl.index", self.create_revoked_index(ca_id)) as index_path:
+            crl_content = self.cryptography_service.generate_crl(index_path)
+
+        return crl_content

src/services/cryptography.py

@@ -355 +355 @@
         """
         return self.__run_for_output(["version"]).decode("utf-8")
 
+    def generate_crl(self, index_file_path: str) -> str:
+        """
+        Generate a CertificateRevocationList for a specified
+        certificate authority.
+
+        :param index_file_path: path to a file that contains the openssl index with all revoked certificates
+        :return: CRL encoded in PEM format string
+        """
+        # TODO
+        return ""
 
 class CryptographyException(Exception):