Revize 36409852

Re #8472 - Improved parse_cert_pem method in such way that it also parses notBefore and notAfter fields now

src/services/cryptography.py

@@ -1 @@
-import subprocess
 import re
+import subprocess
+import time
 
-# encryption method to be used when generating private keys
 from src.model.subject import Subject
 from src.utils.temporary_file import TemporaryFile
 
+# encryption method to be used when generating private keys
 PRIVATE_KEY_ENCRYPTION_METHOD = "-aes256"
 
 # openssl executable name
 OPENSSL_EXECUTABLE = "openssl"
 
+# format of NOT_BEFORE NOT_AFTER date fields
+NOT_AFTER_BEFORE_DATE_FORMAT = "%b %d %H:%M:%S %Y %Z"
+
 
 class CryptographyService:
 
@@ -187 +191 @@
         :param issuer_key: string containing the private key of the issuer's certificate in PEM format
         :param issuer_pem: string containing the certificate of the issuer that will sign this CSR in PEM format
         :param issuer_key: string containing the private key of the issuer's certificate in PEM format
-        :param subject_key_pass: string containing the passphrase of the private key used when creating the certificate in PEM
-        format
+        :param subject_key_pass: string containing the passphrase of the private key used when creating the certificate
+        in PEM format
         :param issuer_key_pass: string containing the passphrase of the private key of the issuer's certificate in PEM
         format
         :param extensions: extensions to be applied when creating the certificate
@@ -229 +233 @@
 
     def parse_cert_pem(self, cert_pem):
         """
-        Parses the given certificate in PEM format and returns the subject of the certificate
+        Parses the given certificate in PEM format and returns the subject of the certificate and it's NOT_BEFORE
+        and NOT_AFTER field
         :param cert_pem: a certificated in a PEM format to be parsed
-        :return: a subject stored within the supplied certificate
+        :return: a tuple containing a subject, NOT_BEFORE and NOT_AFTER dates
         """
         # run openssl x509 to view certificate content
-        args = ["x509", "-noout", "-text", "-in", "-"]
-        result = self.__run_for_output(args, proc_input=bytes(cert_pem, encoding="utf-8")).decode()
+        args = ["x509", "-noout", "-subject", "-startdate", "-enddate", "-in", "-"]
 
-        # find the line containing the subject
-        match = re.search(r"Subject:\s(.*)", result)
+        cert_info_raw = self.__run_for_output(args, proc_input=bytes(cert_pem, encoding="utf-8")).decode()
+
+        # split lines
+        results = re.split("\n", cert_info_raw)
+        subj_line = results[0]
+        not_before_line = results[1]
+        not_after_line = results[2]
+
+        # attempt to extract subject via regex
+        match = re.search(r"subject=(.*)", subj_line)
         if match is None:
             # TODO use logger
-            print(f"Could not find subject to parse: {result}")
+            print(f"Could not find subject to parse: {subj_line}")
             return None
         else:
-            # find all attributes (key = value
-            found = re.findall(r"\s?([^c=\s]+)\s?=\s?([^,\n]+)", match.group())
+            # find all attributes (key = value)
+            found = re.findall(r"\s?([^c=\s]+)\s?=\s?([^,\n]+)", match.group(1))
             subj = Subject()
             for key, value in found:
+                print(f"{key}:{value}")
                 if key == "C":
                     subj.country = value
                 elif key == "ST":
@@ -262 +275 @@
                     subj.common_name = value
                 elif key == "emailAddress":
                     subj.email_address = value
-            return subj
+
+        # extract notBefore and notAfter date fields
+        not_before = re.search(r"notBefore=(.*)", not_before_line)
+        not_after = re.search(r"notAfter=(.*)", not_after_line)
+
+        # if date fields are found parse them into date objects
+        if not_before is not None:
+            not_before = time.strptime(not_before.group(1), NOT_AFTER_BEFORE_DATE_FORMAT)
+        if not_after is not None:
+            not_after = time.strptime(not_after.group(1), NOT_AFTER_BEFORE_DATE_FORMAT)
+
+        # TODO wrapper class?
+        # return it as a tuple
+        return subj, not_before, not_after
 
 
 class CryptographyException(Exception):