mirror of
https://github.com/trezor/trezor-firmware.git
synced 2024-10-12 02:49:02 +00:00
27 lines
756 B
Python
Executable File
27 lines
756 B
Python
Executable File
#!/usr/bin/python3
|
|
import pem
|
|
from cryptography import x509
|
|
from cryptography.x509.oid import NameOID
|
|
from cryptography.hazmat.backends import default_backend
|
|
from cryptography.hazmat.primitives import hashes, serialization
|
|
|
|
bundle = '/var/lib/ca-certificates/ca-bundle.pem'
|
|
|
|
certs = pem.parse_file(bundle)
|
|
|
|
def process_cert(cert):
|
|
cert = x509.load_pem_x509_certificate(cert.as_bytes(), default_backend())
|
|
i = cert.issuer
|
|
f = cert.fingerprint(hashes.BLAKE2s(32))
|
|
try:
|
|
i = i.get_attributes_for_oid(NameOID.COMMON_NAME)[0].value
|
|
except:
|
|
i = i.get_attributes_for_oid(NameOID.ORGANIZATION_NAME)[0].value
|
|
print(' # %s' % i)
|
|
print(' %s,' % f)
|
|
|
|
print('cert_bundle = [')
|
|
for c in certs:
|
|
process_cert(c)
|
|
print(']')
|