Revize 52f2eca4

Certificate usage hotfix before DEMO #4 - digital signature does not specify timestamping

src/services/certificate_service.py

@@ -31 +31 @@
 REQUIRED_USAGE_EXTENSION_FLAGS = {
     CA_ID: ExtensionFieldFlags({CRITICAL, KEY_CERT_SIGN, CRL_SIGN}, {}, {CRITICAL, CA}),
     SSL_ID: ExtensionFieldFlags({DIGITAL_SIGNATURE, KEY_ENCIPHERMENT, KEY_AGREEMENT}, {SERVER_AUTH}, {}),
-    SIGNATURE_ID: ExtensionFieldFlags({DIGITAL_SIGNATURE, NON_REPUDIATION}, {TIME_STAMPING}, {}),
+    SIGNATURE_ID: ExtensionFieldFlags({DIGITAL_SIGNATURE, NON_REPUDIATION}, {}, {}),
     AUTHENTICATION_ID: ExtensionFieldFlags({DIGITAL_SIGNATURE}, {CLIENT_AUTH}, {})}
 
 

tests/integration_tests/services/certificate_service_test.py

@@ -129 +129 @@
         X509v3 extensions:
             X509v3 Key Usage: 
                 Digital Signature, Non Repudiation
-            X509v3 Extended Key Usage: 
-                Time Stamping
     """.replace("\r", "").replace("\n", "")
 
     assert expected in cert_loaded_printed.replace("\n", "").replace("\r", "")

tests/unit_tests/utils/usages_to_extensions_test.py

@@ -21 +21 @@
     usages[AUTHENTICATION_ID] = True
 
     expected = """keyUsage=digitalSignature,nonRepudiation
-extendedKeyUsage=clientAuth,timeStamping"""
+extendedKeyUsage=clientAuth"""
 
     assert "\n".join(usages_to_extension_lines(usages, REQUIRED_USAGE_EXTENSION_FLAGS)) == expected