PKI tools for e.g. checking certificate CRL/OCSP revocation
Project description
pki-tools
PKI tools exposes a high level cryptography
API for e.g.:
- checking revocation of certificates:
- using CRL defined in the x509 CRL distribution points extension (https://datatracker.ietf.org/doc/html/rfc5280.html#section-4.2.1.13)
- using OCSP defined in the x509 Authority Information Access extension (https://datatracker.ietf.org/doc/html/rfc5280.html#section-4.2.2.1)
- loading certificates
Installation
pip install pki-tools
Usage
CRL
Checking revocation using PEM encoded certificate
from pki_tools.crl import is_revoked, Revoked, Error
cert_pem = """
-----BEGIN CERTIFICATE-----
<CERTIFICATE_PEM_BYTES>
-----END CERTIFICATE-----
"""
try:
is_revoked(cert_pem)
except Revoked as e:
print(f"Certificate revoked: {e}")
except Error as e:
print(f"Revocation check failed. Error: {e}")
raise
Checking revocation using an already loaded cryptography x509.Certificate:
from cryptography import x509
from pki_tools.ocsp import is_revoked, Revoked, Error
cert : x509.Certificate = ...
issuer: x509.Certificate = ...
try:
is_revoked(cert, issuer)
except Revoked as e:
print(f"Certificate revoked: {e}")
except Error as e:
print(f"Revocation check failed. Error: {e}")
raise
OCSP
Checking revocation using PEM encoded certificate
from pki_tools.ocsp import is_revoked, Revoked, Error
cert_pem = """
-----BEGIN CERTIFICATE-----
<CERTIFICATE_PEM_BYTES>
-----END CERTIFICATE-----
"""
issuer_pem = """
-----BEGIN CERTIFICATE-----
<ISSUER_PEM_BYTES>
-----END CERTIFICATE-----
"""
try:
is_revoked(cert_pem, issuer_pem)
except Revoked as e:
print(f"Certificate revoked: {e}")
except Error as e:
print(f"Revocation check failed. Error: {e}")
raise
Checking revocation using an already loaded cryptography x509.Certificate:
from cryptography import x509
from pki_tools.ocsp import is_revoked, Revoked, Error
cert : x509.Certificate = ...
issuer_cert : x509.Certificate = ...
try:
is_revoked(cert, issuer_cert)
except Revoked as e:
print(f"Certificate revoked: {e}")
except Error as e:
print(f"Revocation check failed. Error: {e}")
raise
Project details
Release history Release notifications | RSS feed
Download files
Download the file for your platform. If you're not sure which to choose, learn more about installing packages.
Source Distribution
pki_tools-0.0.3.tar.gz
(4.0 kB
view hashes)
Built Distribution
Close
Hashes for pki_tools-0.0.3-py3-none-any.whl
Algorithm | Hash digest | |
---|---|---|
SHA256 | 8da14490b02284826f17250ad39e52722d1e7b811257f6135e0f51e63b0d68a4 |
|
MD5 | e27dac31d4152062a9e1e551dcac0ecc |
|
BLAKE2b-256 | e0aaea3d8235214f576ba7974535ab4136f281ffadb6a5a8f71c246285af4d0c |