Revize 19e5260d

Re #8573 - Implemented extract_public_key_from_certificate

src/services/cryptography.py

@@ -231 +231 @@
             # the process failed because of some other reason (incorrect cert format)
             raise CryptographyException(OPENSSL_EXECUTABLE, args, err.decode())
 
-    def extract_public_key(self, private_key_pem: str, passphrase=None) -> str:
+    def extract_public_key_from_private_key(self, private_key_pem: str, passphrase=None) -> str:
         """
         Extracts a public key from the given private key passed in PEM format
         :param private_key_pem: PEM data representing the private key from which a public key should be extracted
@@ -243 +243 @@
             args.extend(["-passin", f"pass:{passphrase}"])
         return self.__run_for_output(args, proc_input=bytes(private_key_pem, encoding="utf-8")).decode()
 
+    def extract_public_key_from_certificate(self, cert_pem: str) -> str:
+        """
+        Extracts a public key from the given certificate passed in PEM format
+        :param cert_pem: PEM data representing a certificate from which a public key should be extracted
+        :return: a string containing the extracted public key in PEM format
+        """
+        # extracting public key from a certificate does not seem to require a passphrase even when
+        # signed using an encrypted PK
+        args = ["x509", "-in", "-", "-noout", "-pubkey"]
+        return self.__run_for_output(args, proc_input=bytes(cert_pem, encoding="utf-8")).decode()
+
     def parse_cert_pem(self, cert_pem):
         """
         Parses the given certificate in PEM format and returns the subject of the certificate and it's NOT_BEFORE