Revize ce8b9aaf

Re #8573 - Implemented get_private_key_of_a_certificate method in CertController and added /api/certificates/<id>/private_key endpoint

app.py

@@ -46 +46 @@
 def get_cert_chain(id, certificate_controller: CertController):
     return certificate_controller.get_certificate_trust_chain_by_id(id)
 
[e-mail]('/api/certificates/<id>/private_key', methods=["GET"])
+def get_private_key_of_a_certificate(id, certificate_controller: CertController):
+    return certificate_controller.get_private_key_of_a_certificate(id)
 
 @app.route('/api/certificates/<id>/public_key', methods=["GET"])
 def get_public_key_of_a_certificate(id, certificate_controller: CertController):

src/controllers/certificates_controller.py

@@ -345 +345 @@
             CA: c_issuer.certificate_id
         }
 
-    def get_public_key_of_a_certificate(self, id):
+    def get_private_key_of_a_certificate(self, id):
         """
         Get a private key used to sign a certificate in PEM format specified by certificate's ID
 
+        :param id: ID of a certificate whose private key is to be queried
+        :type id: dict | bytes
+
+        :rtype: PemResponse
+        """
+
+        # try to parse the supplied ID
+        try:
+            v = int(id)
+        except ValueError:
+            return E_WRONG_PARAMETERS, C_BAD_REQUEST
+
+        # find a certificate with using the given ID
+        cert = self.certificate_service.get_certificate(v)
+
+        if cert is None:
+            return E_NO_CERTIFICATES_FOUND, C_NOT_FOUND
+        else:
+            # certificate exists, fetch it's private key
+            private_key = self.key_service.get_key(cert.private_key_id)
+            if cert is None:
+                return E_NO_CERT_PRIVATE_KEY_FOUND, C_INTERNAL_SERVER_ERROR
+            else:
+                return {"success": True, "data": private_key.private_key}, C_SUCCESS
+
+    def get_public_key_of_a_certificate(self, id):
+        """
+        Get a public key of a certificate in PEM format specified by certificate's ID
+
         :param id: ID of a certificate whose public key is to be queried
         :type id: dict | bytes
 

tests/integration_tests/rest_api/certificates_test.py

@@ -545 +545 @@
     assert "".join(expected) == actual
 
 
+def test_get_cert_private_key(server):
+    for i in range(6, 2):
+        ret = server.get(f"/api/certificates/{i}/private_key")
+
+        assert ret.status_code == 200
+
+        assert "data" in ret.json
+        assert "success" in ret.json
+        assert ret.json["success"]
+        assert "-----BEGIN RSA PRIVATE KEY-----" in ret.json["data"]
+
+
+def test_get_cert_private_key_incorrect_id(server):
+    for i in range(111, 222, 333):
+        ret = server.get(f"/api/certificates/{i}/private_key")
+
+        assert ret.status_code == 404
+
+        assert "data" in ret.json
+        assert "success" in ret.json
+        assert not ret.json["success"]
+        assert "No such certificate found." == ret.json["data"]
+
+
 def test_get_cert_public_key(server):
     for i in range(6, 2):
         ret = server.get(f"/api/certificates/{i}/public_key")