Revize c15357a9

Re #8707 - Implemented get_certificate_state() in CertificateRepository

src/services/certificate_service.py

@@ -4 +4 @@
 
 from src.config.configuration import Configuration
 from src.constants import ROOT_CA_ID, INTERMEDIATE_CA_ID, CA_ID, CERTIFICATE_ID, CERTIFICATE_STATES, \
-    CERTIFICATE_REVOCATION_REASONS, SSL_ID, SIGNATURE_ID, AUTHENTICATION_ID
+    CERTIFICATE_REVOCATION_REASONS, SSL_ID, SIGNATURE_ID, AUTHENTICATION_ID, CERTIFICATE_VALID, CERTIFICATE_EXPIRED, \
+    CERTIFICATE_REVOKED
 from src.dao.certificate_repository import CertificateRepository
 from src.exceptions.certificate_not_found_exception import CertificateNotFoundException
 from src.exceptions.database_exception import DatabaseException
@@ -427 +428 @@
         :return: certificates state from {valid, revoked, expired}
         :raises CertificateNotFoundException: in case id of non-existing certificate is entered
         """
-        pass
+        status = CERTIFICATE_VALID
+
+        # Read the selected certificate from the repository
+        certificate = self.certificate_repository.read(id)
+        if certificate is None:
+            raise CertificateNotFoundException(id)
+
+        # check the expiration date using OpenSSL
+        if not self.cryptography_service.verify_cert(certificate.pem_data):
+            status = CERTIFICATE_EXPIRED
+
+        # check certificate revocation
+        all_revoked_by_parent = self.certificate_repository.get_all_revoked_by(certificate.parent_id)
+        all_revoked_by_parent_ids = [cert.certificate_id for cert in all_revoked_by_parent]
+
+        if id in all_revoked_by_parent_ids:
+            status = CERTIFICATE_REVOKED
+
+        return status
+
 
     def __get_crl_endpoint(self, ca_identifier: int) -> str:
         """