diff options
author | Paul <paulhooijenga@gmail.com> | 2013-09-24 21:18:41 +0200 |
---|---|---|
committer | Paul <paulhooijenga@gmail.com> | 2013-09-24 21:18:41 +0200 |
commit | 98f765f693fc4fa7245c3179da1d791661ed502a (patch) | |
tree | 61f2ad6e3caf78ffce3f3d99d3a8a3205dd2a4dd /netlib/certutils.py | |
parent | 0fed8dc8eb2440a35b5ce95ba7e7360441ff677c (diff) | |
download | mitmproxy-98f765f693fc4fa7245c3179da1d791661ed502a.tar.gz mitmproxy-98f765f693fc4fa7245c3179da1d791661ed502a.tar.bz2 mitmproxy-98f765f693fc4fa7245c3179da1d791661ed502a.zip |
Don't create a certificate request when creating a dummy cert
Diffstat (limited to 'netlib/certutils.py')
-rw-r--r-- | netlib/certutils.py | 12 |
1 files changed, 2 insertions, 10 deletions
diff --git a/netlib/certutils.py b/netlib/certutils.py index 7dcb5450..60e41427 100644 --- a/netlib/certutils.py +++ b/netlib/certutils.py @@ -92,24 +92,16 @@ def dummy_cert(ca, commonname, sans): ca = OpenSSL.crypto.load_certificate(OpenSSL.crypto.FILETYPE_PEM, raw) key = OpenSSL.crypto.load_privatekey(OpenSSL.crypto.FILETYPE_PEM, raw) - req = OpenSSL.crypto.X509Req() - subj = req.get_subject() - subj.CN = commonname - req.set_pubkey(ca.get_pubkey()) - req.sign(key, "sha1") - if ss: - req.add_extensions([OpenSSL.crypto.X509Extension("subjectAltName", True, ss)]) - cert = OpenSSL.crypto.X509() cert.gmtime_adj_notBefore(-3600) cert.gmtime_adj_notAfter(60 * 60 * 24 * 30) cert.set_issuer(ca.get_subject()) - cert.set_subject(req.get_subject()) + cert.get_subject().CN = commonname cert.set_serial_number(int(time.time()*10000)) if ss: cert.set_version(2) cert.add_extensions([OpenSSL.crypto.X509Extension("subjectAltName", True, ss)]) - cert.set_pubkey(req.get_pubkey()) + cert.set_pubkey(ca.get_pubkey()) cert.sign(key, "sha1") return SSLCert(cert) |