| 1 |
fa03de5c
|
Captain_Trojan
|
from src.utils.file_anchor import FileAnchor
|
| 2 |
|
|
|
| 3 |
d2b0ef43
|
Stanislav Král
|
INMEMORY_DATABASE_FILE = ":memory:"
|
| 4 |
|
|
TEST_DATABASE_FILE = INMEMORY_DATABASE_FILE
|
| 5 |
bcdb15bd
|
David Friesecký
|
DATABASE_FILE = "db/database_sqlite.db"
|
| 6 |
fa03de5c
|
Captain_Trojan
|
DATABASE_FILE_LOCATION = FileAnchor("aswi2021jmsd", DATABASE_FILE)
|
| 7 |
493022a0
|
Jan Pašek
|
DATETIME_FORMAT = "%d.%m.%Y %H:%M:%S"
|
| 8 |
2c96b4a5
|
David Friesecký
|
|
| 9 |
1bdc90c0
|
David Friesecký
|
LOG_FILE = "log/application.log"
|
| 10 |
|
|
LOG_FILE_LOCATION = FileAnchor("aswi2021jmsd", LOG_FILE)
|
| 11 |
|
|
LOG_FORMAT = "%(levelname)-8s %(asctime)s - %(message)s"
|
| 12 |
|
|
|
| 13 |
163f57d0
|
David Friesecký
|
REV_REASON_UNSPECIFIED = "unspecified"
|
| 14 |
|
|
|
| 15 |
a0602bad
|
David Friesecký
|
# Types of certificates
|
| 16 |
2c96b4a5
|
David Friesecký
|
ROOT_CA_ID = 1
|
| 17 |
|
|
INTERMEDIATE_CA_ID = 2
|
| 18 |
|
|
CERTIFICATE_ID = 3
|
| 19 |
|
|
|
| 20 |
a0602bad
|
David Friesecký
|
# Usage types of certificates
|
| 21 |
2c96b4a5
|
David Friesecký
|
CA_ID = 1
|
| 22 |
|
|
SSL_ID = 2
|
| 23 |
|
|
SIGNATURE_ID = 3
|
| 24 |
|
|
AUTHENTICATION_ID = 4
|
| 25 |
993ee5a1
|
David Friesecký
|
DICT_USAGES = {CA_ID: False, SSL_ID: False, SIGNATURE_ID: False, AUTHENTICATION_ID: False}
|
| 26 |
|
|
|
| 27 |
b5114e4e
|
David Friesecký
|
# DB names of tables
|
| 28 |
993ee5a1
|
David Friesecký
|
TAB_CERTIFICATES = "Certificates"
|
| 29 |
|
|
TAB_PRIVATE_KEYS = "PrivateKeys"
|
| 30 |
|
|
TAB_CERTIFICATE_USAGES = "CertificateUsages"
|
| 31 |
bcdb15bd
|
David Friesecký
|
TAB_CERTIFICATE_TYPES = "CertificateTypes"
|
| 32 |
|
|
TAB_USAGE_TYPES = "UsageTypes"
|
| 33 |
b5114e4e
|
David Friesecký
|
|
| 34 |
|
|
# DB column names
|
| 35 |
|
|
COL_ID = "id"
|
| 36 |
|
|
|
| 37 |
993ee5a1
|
David Friesecký
|
# DB column names of Certificates table
|
| 38 |
b5114e4e
|
David Friesecký
|
COL_COMMON_NAME = "common_name"
|
| 39 |
|
|
COL_VALID_FROM = "valid_from"
|
| 40 |
|
|
COL_VALID_TO = "valid_to"
|
| 41 |
|
|
COL_PEM_DATA = "pem_data"
|
| 42 |
1f75a8f5
|
David Friesecký
|
COL_REVOCATION_DATE = "revocation_date"
|
| 43 |
|
|
COL_REVOCATION_REASON = "revocation_reason"
|
| 44 |
b5114e4e
|
David Friesecký
|
COL_PRIVATE_KEY_ID = "private_key_id"
|
| 45 |
993ee5a1
|
David Friesecký
|
COL_TYPE_ID = "certificate_type_id"
|
| 46 |
47e0e828
|
David Friesecký
|
COL_PARENT_ID = "parent_certificate_id"
|
| 47 |
b5114e4e
|
David Friesecký
|
|
| 48 |
993ee5a1
|
David Friesecký
|
# DB column names of PrivateKeys table
|
| 49 |
b5114e4e
|
David Friesecký
|
COL_PRIVATE_KEY = "private_key"
|
| 50 |
|
|
COL_PASSWORD = "password"
|
| 51 |
993ee5a1
|
David Friesecký
|
|
| 52 |
|
|
# DB column names of PrivateKey table
|
| 53 |
|
|
COL_CERTIFICATE_ID = "certificate_id"
|
| 54 |
|
|
COL_USAGE_TYPE_ID = "usage_type_id"
|
| 55 |
c073a0fc
|
Jan Pašek
|
|
| 56 |
|
|
# configuration default
|
| 57 |
|
|
DEFAULT_CONNECTION_STRING = "db/database_sqlite.db"
|
| 58 |
a766e644
|
Jan Pašek
|
DEFAULT_SERVER_BASE_URL = "http://localhost"
|
| 59 |
|
|
|
| 60 |
|
|
# available certificate states and revocation reasons
|
| 61 |
|
|
CERTIFICATE_STATES = {"valid", "revoked"}
|
| 62 |
|
|
CERTIFICATE_REVOCATION_REASONS = {"unspecified", "keyCompromise",
|
| 63 |
94e89bb1
|
Jan Pašek
|
"CACompromise", "affiliationChanged",
|
| 64 |
a766e644
|
Jan Pašek
|
"superseded", "cessationOfOperation",
|
| 65 |
94e89bb1
|
Jan Pašek
|
"certificateHold", "removeFromCRL"}
|
| 66 |
64cfca84
|
Jan Pašek
|
|
| 67 |
|
|
|
| 68 |
|
|
# Insert values into the template using % (index_file, serial_file)
|
| 69 |
|
|
CRL_CONFIG = """[ ca ]
|
| 70 |
|
|
default_ca = crl_ca
|
| 71 |
|
|
|
| 72 |
|
|
[ crl_ext ]
|
| 73 |
|
|
authorityKeyIdentifier=keyid:always
|
| 74 |
|
|
|
| 75 |
|
|
[ crl_ca ]
|
| 76 |
|
|
database = %s
|
| 77 |
|
|
serial = %s
|
| 78 |
|
|
default_md = sha1
|
| 79 |
dd91fb7a
|
Jan Pašek
|
policy = crl_policy
|
| 80 |
64cfca84
|
Jan Pašek
|
default_crl_days = 30
|
| 81 |
|
|
|
| 82 |
dd91fb7a
|
Jan Pašek
|
[ crl_policy ]
|
| 83 |
64cfca84
|
Jan Pašek
|
commonName = supplied
|
| 84 |
|
|
stateOrProvinceName = optional
|
| 85 |
|
|
countryName = optional
|
| 86 |
|
|
emailAddress = optional
|
| 87 |
|
|
organizationName = optional
|
| 88 |
|
|
organizationalUnitName = optional
|
| 89 |
|
|
|
| 90 |
|
|
"""
|