Revize 80f30a68

Re #8589 - Implemented get_root(unique_id) in CertificateService

src/services/certificate_service.py

@@ -569 +569 @@
                                                                 identity_name,
                                                                 identity_passphrase, cot_pem_list, cert_key.password)
 
+    def get_root(self, unique_id: int):
+        """
+        Function that calls CertificateService.get_chain_of_trust() and extract root CA from the returned chain.
+        :param unique_id: ID of the certificate to which to find the root CA
+        :return: Instance of the Certificate class containing a root certificate which was found in the chain
+        """
+        Logger.debug("Function launched.")
+
+        chain_of_trust = self.get_chain_of_trust(from_id=unique_id, exclude_root=False)
+
+        if len(chain_of_trust) == 0:
+            Logger.error(f"No such certificate found 'ID = {unique_id}'.")
+            raise CertificateNotFoundException(unique_id)
+
+        root_ca = chain_of_trust[len(chain_of_trust) - 1]
+
+        if root_ca.type_id != ROOT_CA_ID or root_ca.certificate_id != root_ca.parent_id:
+            Logger.error(f"Certificate id '{root_ca.certificate_id}' has not same parent_id '{root_ca.parent_id} "
+                         f"or type_id '{root_ca.type_id}' is not a ROOT_CA_ID '{ROOT_CA_ID}'")
+            raise InvalidRootCA(root_ca.type_id, root_ca.certificate_id, root_ca.parent_id)
+
+        return root_ca
+
 
 class RevocationReasonInvalidException(Exception):
     """
@@ -638 +661 @@
 
     def __str__(self):
         return f"""Subject attribute "{self.attribute_name}" is invalid (reason: {self.reason})."""
+
+
+class InvalidRootCA(Exception):
+    """
+    Exception that denotes that certificate has invalid root CA parameters.
+    """
+
+    def __init__(self, type_id, id, parent_id):
+        self.type_id = type_id
+        self.id = id
+        self.parent_id = parent_id
+
+    def __str__(self):
+        return f"Certificate id '{self.id}' has not same parent_id '{self.parent_id} " \
+               f"or type_id '{self.type_id}' is not a ROOT_CA_ID '{ROOT_CA_ID}'"