aswi2021jmsd-gitlab4/src/constants.py @ fe297740

# Database
INMEMORY_DATABASE_FILE = ":memory:"
TEST_DATABASE_FILE = INMEMORY_DATABASE_FILE
DATETIME_FORMAT = "%a, %d %b %Y"
SCHEMA_SQL_FILE = "SQLite_database.sql"
VALUES_SQL_FILE = "SQLite_default_values.sql"

# Logging
LOG_DIR = "logs"
LOG_FILENAME = "application.log"
LOG_FORMAT = "%(levelname)-8s %(asctime)s - %(message)s"
LOG_NAME = "app_logger"

REV_REASON_UNSPECIFIED = "unspecified"

# Types of certificates
ROOT_CA_ID = 1
INTERMEDIATE_CA_ID = 2
CERTIFICATE_ID = 3

# Usage types of certificates
CA_ID = 1
SSL_ID = 2
SIGNATURE_ID = 3
AUTHENTICATION_ID = 4
DICT_USAGES = {CA_ID: False, SSL_ID: False, SIGNATURE_ID: False, AUTHENTICATION_ID: False}

# DB names of tables
TAB_CERTIFICATES = "Certificates"
TAB_PRIVATE_KEYS = "PrivateKeys"
TAB_CERTIFICATE_USAGES = "CertificateUsages"
TAB_CERTIFICATE_TYPES = "CertificateTypes"
TAB_USAGE_TYPES = "UsageTypes"

# DB column names
COL_ID = "id"
COL_PK = "private_key"

# DB column names of Certificates table
COL_VALID_FROM = "valid_from"
COL_VALID_TO = "valid_to"
COL_PEM_DATA = "pem_data"
COL_COMMON_NAME = "common_name"
COL_COUNTRY_CODE = "country_code"
COL_LOCALITY = "locality"
COL_PROVINCE = "province"
COL_ORGANIZATION = "organization"
COL_ORGANIZATIONAL_UNIT = "organizational_unit"
COL_EMAIL_ADDRESS = "email_address"
COL_REVOCATION_DATE = "revocation_date"
COL_REVOCATION_REASON = "revocation_reason"
COL_DELETION_DATE = "deletion_date"
COL_TYPE_ID = "certificate_type_id"
COL_PARENT_ID = "parent_certificate_id"
COL_PRIVATE_KEY_ID = "private_key_id"

# DB column names of PrivateKeys table
COL_PRIVATE_KEY = "private_key"
COL_PASSWORD = "password"

# DB column names of PrivateKey table
COL_CERTIFICATE_ID = "certificate_id"
COL_USAGE_TYPE_ID = "usage_type_id"

# configuration default
DEFAULT_CONNECTION_STRING = "db/database_sqlite.db"
DEFAULT_SERVER_BASE_URL = "http://localhost"
DEFAULT_LOG_LEVEL = "DEBUG"
DEFAULT_ROOT_DIR = "aswi2021jmsd"

# available certificate states and revocation reasons
CERTIFICATE_STATES = {"valid", "revoked"}
CERTIFICATE_REVOCATION_REASONS = {"unspecified", "keyCompromise",
                                  "CACompromise", "affiliationChanged",
                                  "superseded", "cessationOfOperation",
                                  "certificateHold", "removeFromCRL"}
CERTIFICATE_REVOCATION_REASON_HOLD = "certificateHold"

CERTIFICATE_VALID = "valid"
CERTIFICATE_REVOKED = "revoked"
CERTIFICATE_EXPIRED = "expired"


# Insert values into the template using % (index_file, serial_file)
CRL_CONFIG = """[ ca ]
default_ca = crl_ca

[ crl_ext ]
authorityKeyIdentifier=keyid:always

[ crl_ca ]
database = %s
serial = %s
default_md = sha1
policy = crl_policy
default_crl_days = 30

[ crl_policy ]
commonName = supplied
stateOrProvinceName = optional
countryName = optional
emailAddress = optional
organizationName = optional
organizationalUnitName = optional

"""