Revize 1de95cdf

Re #8577 - Added handle methods for OCSP to the CrlOcspController.

src/controllers/crl_ocsp_controller.py

@@ -1 +1 @@
 from flask import Response
 from injector import inject
+import base64
 
 from src.exceptions.certificate_not_found_exception import CertificateNotFoundException
 from src.exceptions.private_key_not_found_exception import PrivateKeyNotFoundException
@@ -36 +37 @@
 
         return Response(crl, mimetype="application/x-x509-ca-cert",
                         headers={"Content-Disposition": f"attachment;filename={ca_id}_crl.pem"})
+
+    def get_ocsp_from_base64(self, ca_id, base64_der_ocsp_request):
+        """
+        Generate an OCSP Response for a base-64 encoded DER encoded OCSP Request.
+        :param ca_id: certificate authority ID
+        :param base64_der_ocsp_request: encoded request
+        :return: DER OCSP response
+        """
+        return self.get_ocsp_from_der(ca_id, base64.b64decode(base64_der_ocsp_request))
+
+    def get_ocsp_from_der(self, ca_id, der_ocsp_request):
+        """
+        Generate an OCSP Response for a DER encoded OCSP Request.
+        :param ca_id: certificate authority ID
+        :param der_ocsp_request: encoded request
+        :return: DER OCSP response
+        """
+        if len(der_ocsp_request) == 0:
+            return E_WRONG_PARAMETERS, C_BAD_REQUEST
+
+        try:
+            ca_id = int(ca_id)
+        except ValueError:
+            return E_WRONG_PARAMETERS, C_BAD_REQUEST
+
+        try:
+            ocsp_response = self.crl_service.generate_ocsp_response(ca_id, der_ocsp_request)
+        except CertificateNotFoundException or PrivateKeyNotFoundException:
+            return E_NO_CERTIFICATES_FOUND, C_NOT_FOUND
+
+        return Response(ocsp_response, mimetype="application/ocsp-response")