1 | #!/usr/bin/python |
---|
2 | |
---|
3 | from __future__ import print_function |
---|
4 | |
---|
5 | import base64 |
---|
6 | import re |
---|
7 | import sys |
---|
8 | from OpenSSL import crypto |
---|
9 | |
---|
10 | def debug_chain(chain): |
---|
11 | for i, c in enumerate(chain): |
---|
12 | print(i, 's:', c.get_subject(), file=sys.stderr) |
---|
13 | print(i, 'i:', c.get_issuer(), file=sys.stderr) |
---|
14 | print(file=sys.stderr) |
---|
15 | |
---|
16 | def pem_to_scripts(data): |
---|
17 | certs = [ |
---|
18 | crypto.load_certificate(crypto.FILETYPE_PEM, m.group(0)) |
---|
19 | for m in |
---|
20 | re.finditer( |
---|
21 | b'-----BEGIN CERTIFICATE-----\r?\n.+?\r?\n-----END CERTIFICATE-----', |
---|
22 | data, re.DOTALL) |
---|
23 | ] |
---|
24 | |
---|
25 | # Put the chain in the right order, and delete any self-signed root |
---|
26 | leaf, = [c for c in certs if not any( |
---|
27 | c1.get_issuer() == c.get_subject() for c1 in certs)] |
---|
28 | chain = [leaf] |
---|
29 | count = 1 |
---|
30 | while True: |
---|
31 | issuers = [c for c in certs if chain[-1].get_issuer() == c.get_subject()] |
---|
32 | if not issuers: |
---|
33 | break |
---|
34 | issuer, = issuers |
---|
35 | assert issuer not in chain |
---|
36 | count += 1 |
---|
37 | if issuer.get_issuer() == issuer.get_subject(): |
---|
38 | break |
---|
39 | chain.append(issuer) |
---|
40 | assert count == len(certs) |
---|
41 | |
---|
42 | debug_chain(chain) |
---|
43 | |
---|
44 | return b' '.join(base64.b64encode( |
---|
45 | crypto.dump_certificate(crypto.FILETYPE_ASN1, c)) for c in chain) |
---|
46 | |
---|
47 | def scripts_to_pem(data): |
---|
48 | chain = [ |
---|
49 | crypto.load_certificate(crypto.FILETYPE_ASN1, base64.b64decode(d)) |
---|
50 | for d in data.split(b' ') |
---|
51 | ] |
---|
52 | |
---|
53 | debug_chain(chain) |
---|
54 | |
---|
55 | return b''.join(crypto.dump_certificate(crypto.FILETYPE_PEM, c) for c in chain) |
---|
56 | |
---|
57 | def __main__(): |
---|
58 | if sys.argv[1:] == ['import']: |
---|
59 | print(pem_to_scripts(sys.stdin.read().encode()).decode()) |
---|
60 | elif sys.argv[1:] == ['export']: |
---|
61 | print(scripts_to_pem(sys.stdin.read().encode()).decode(), end='') |
---|
62 | else: |
---|
63 | print('usage: {} {{import|export}}'.format(__file__), file=sys.stderr) |
---|
64 | |
---|
65 | if __name__ == '__main__': |
---|
66 | sys.exit(__main__()) |
---|