Home       Trees       Index       Help   

Access Grid Toolkit

Package AccessGrid :: Package Security :: Package wxgui :: Module CertificateRepository
[show private | hide private]
[frames | no frames]

Module AccessGrid.Security.wxgui.CertificateRepository

Certificate management module.

The on-disk repository looks like this:

<repo_root>/
            metadata.db
            certificates/<subject_hash>/
                               <issuer_serial_hash>/cert.pem
                                                    user_files/
                               <modulus_hash>.req.pem
            privatekeys/
                        <modulus_hash>
Classes
Certificate  
CertificateDescriptor  
CertificateRepository  
CertificateRequestDescriptor  

Exceptions
RepoAlreadyExists Thrown if repository already exists, and the CertificateRepository constructor was invoked with create=1.
RepoBadPassphrase  
RepoDoesNotExist Thrown if repository does not exist, and the CertificateRepository constructor was invoked with create=0.
RepoInvalidCertificate Thrown if an attempt was made to use an invalid certificate.

Function Summary
  ConstructSigningPolicy(cert)
Construct a simple signing policy based on the subject name of cert.
  ParseSigningPolicy(policyFH)
Parse a signing policy from filehandle policyFH.
  utc2time(t)
Convert a UTC time (as kept in the X509 notbefore/notafter fields) to seconds since the epoch.
  utc2tuple(t)

Variable Summary
str __revision__ = '$Id: CertificateRepository.py,v 1.1 2004...
Logger log = <logging.Logger instance at 0x02064580>

Function Details

ConstructSigningPolicy(cert)

Construct a simple signing policy based on the subject name of cert.

It might not be right, but it might be.

We make it match on all parts of the cert's subject except for CN.

ParseSigningPolicy(policyFH)

Parse a signing policy from filehandle policyFH.

For now, we just return the CA name that it represents so we don't get bogged down in parsing minutiae.

utc2time(t)

Convert a UTC time (as kept in the X509 notbefore/notafter fields) to seconds since the epoch.

We need to handle conversion out of our local timezone, because time.mktime() converts to the local timezone, but the tuple returned by utc2tuple is GMT.


Variable Details

__revision__

Type:
str
Value:
'$Id: CertificateRepository.py,v 1.1 2004/03/10 23:07:10 olson Exp $'

log

Type:
Logger
Value:
<logging.Logger instance at 0x02064580>

   Home       Trees       Index       Help   

Access Grid Toolkit

Generated by Epydoc 2.1 on Thu Apr 14 16:39:25 2005 http://epydoc.sf.net