Revize b1fa358f

Re #8576 - implemented CRL endpoint

app.py

@@ -7 +7 @@
 from src.config import configuration
 from src.config.connection_provider import ConnectionProvider
 from src.controllers.certificates_controller import CertController
+from src.controllers.crl_ocsp_controller import CrlOcspController
 from src.services.cryptography import CryptographyService, CryptographyException
 
 app = Flask(__name__)
@@ -67 +68 @@
     return certificate_controller.get_public_key_of_a_certificate(id)
 
 
[e-mail]('/api/crl/<id>', methods=["GET"])
+def get_crl_of_issuer(id, crl_ocsp_controller: CrlOcspController):
+    return crl_ocsp_controller.get_crl(id)
+
+
 def initialize_app(application) -> bool:
     """
     Initializes the application

src/controllers/crl_ocsp_controller.py

@@ +1 @@
+from flask import Response
+from injector import inject
+
+from src.exceptions.certificate_not_found_exception import CertificateNotFoundException
+from src.exceptions.private_key_not_found_exception import PrivateKeyNotFoundException
+from src.services.crl.crl_service import CrlService
+from src.controllers.return_codes import *
+
+E_WRONG_PARAMETERS = {"success": False, "data": "Invalid request, wrong parameters."}
+E_NO_CERTIFICATES_FOUND = {"success": False, "data": "No such certificate found."}
+
+
+class CrlOcspController:
+
+    @inject
+    def __init__(self, crl_service: CrlService):
+        self.crl_service = crl_service
+
+    def get_crl(self, ca_id: str):
+        """
+        Generate and download a CRL for a selected certificate authority
+        :param ca_id: certificate authority whose CRL is requested
+        :return: download response / error
+        """
+        # convert id from string to int
+        try:
+            identifier = int(ca_id)
+        except ValueError:
+            return E_WRONG_PARAMETERS, C_BAD_REQUEST
+
+        # generate the CRL
+        try:
+            crl = self.crl_service.generate_crl_response(identifier)
+        except (CertificateNotFoundException, PrivateKeyNotFoundException):
+            return E_NO_CERTIFICATES_FOUND, C_NOT_FOUND
+
+        return Response(crl, mimetype="application/x-x509-ca-cert",
+                        headers={"Content-Disposition": f"attachment;filename={ca_id}_crl.pem"})