certapi 0.2.3__tar.gz → 0.2.4__tar.gz

{certapi-0.2.3 → certapi-0.2.4}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.1
 Name: certapi
-Version: 0.2.3
+Version: 0.2.4
 Summary: Python Package for managing keys, request SSL certificates from ACME.
 Home-page: https://github.com/mesudip/certapi
 Author: Sudip Bhattarai
@@ -16,6 +16,8 @@ Description-Content-Type: text/markdown
 CertApi is a Python package for requesting SSL certificates from ACME.
 This is supposed to be used as a base library for building other tools, or to integrate Certificate creation feature in you app.
 
+> ⚠️ Warning: This project is not polished for production use. Please stay tuned for the LTS `v1.0.0` release.
+
 ## Installation
 
 You can install CertApi using pip:

{certapi-0.2.3 → certapi-0.2.4}/README.md

@@ -3,6 +3,8 @@
 CertApi is a Python package for requesting SSL certificates from ACME.
 This is supposed to be used as a base library for building other tools, or to integrate Certificate creation feature in you app.
 
+> ⚠️ Warning: This project is not polished for production use. Please stay tuned for the LTS `v1.0.0` release.
+
 ## Installation
 
 You can install CertApi using pip:

{certapi-0.2.3 → certapi-0.2.4}/setup.py

@@ -2,7 +2,7 @@ from setuptools import setup, find_packages
 
 setup(
     name="certapi",
-    version="0.2.3",
+    version="0.2.4",
     packages=find_packages(where="src"),
     package_dir={"": "src"},
     install_requires=[

{certapi-0.2.3 → certapi-0.2.4}/src/certapi/Acme.py

@@ -326,7 +326,7 @@ class Order:
         self.status = self._data["status"]
         return response
 
-    def get_certificate(self) -> Certificate:
+    def get_certificate(self) -> Tuple[str, List[Certificate]]:
         if self.status == "processing":
             raise ValueError(
                 "Order is still in 'processing' state! Wait until the order is finalized, and  call `Order.refresh()`  to update the state"
@@ -337,8 +337,8 @@ class Order:
         certificate_res = self._acme._signed_req(
             self._data["certificate"], step="Get Certificate from Successful Order"
         )
-        certificate = crypto.x509.load_pem_x509_certificate(certificate_res.content)
-        return certificate
+        certificate = crypto.x509.load_pem_x509_certificates(certificate_res.content)
+        return ( certificate_res.content, certificate)
 
     def finalize(self, csr: CertificateSigningRequest):
         """

{certapi-0.2.3 → certapi-0.2.4}/src/certapi/certauthority.py

@@ -121,10 +121,10 @@ class CertAuthority:
                 order.refresh()  # is this refresh necessary?
 
                 if order.status == "valid":
-                    certificate = order.get_certificate()
+                    fullchain_cert,certificate =  order.get_certificate()
                     key_id = self.key_store.save_key(private_key, missing[0])
                     cert_id = self.key_store.save_cert(key_id, certificate, missing)
-                    issued_cert = IssuedCert(key_to_pem(private_key), certificate, missing)
+                    issued_cert = IssuedCert(key_to_pem(private_key), fullchain_cert, missing)
                     # Clean up challenges after successful certificate issuance
                     for c in challenges:
                         challenge_name = f"_acme-challenge.{c.domain}" if has_wildcard else c.token
@@ -145,24 +145,28 @@ class CertAuthority:
             return createExistingResponse(existing, [])
 
 
-def createExistingResponse(existing: Dict[str, Tuple[int | str, Key, Certificate]], issued_certs: List["IssuedCert"]):
+def createExistingResponse(existing: Dict[str, Tuple[int | str, Key, Certificate | str]], issued_certs: List["IssuedCert"]):
     certs = []
     certMap = {}
+
     for h, (id, key, cert) in existing.items():
         if id in certMap:
             certMap[id][0].append(h)
         else:
+            cert_pem = cert if isinstance(cert, str) else cert_to_pem(cert).decode("utf-8")
             certMap[id] = (
                 [h],
                 key.to_pem().decode("utf-8"),
-                cert_to_pem(cert).decode("utf-8"),
+                cert_pem,
             )
+
     for hosts, key, cert in certMap.values():
         certs.append(IssuedCert(key, cert, hosts))
 
     return CertificateResponse(certs, issued_certs)
 
 
+
 class CertificateResponse:
     def __init__(self, existing, issued):
         self.existing: List[IssuedCert] = existing

{certapi-0.2.3 → certapi-0.2.4}/src/certapi/crypto.py

@@ -106,6 +106,11 @@ def key_from_pem(data: bytes):
 def cert_from_pem(data: bytes) -> Certificate:
     return x509.load_pem_x509_certificate(data)
 
+def certs_from_pem(data: bytes) -> List[Certificate]:
+    return x509.load_pem_x509_certificates(data)
+
+def cert_to_der(cert):
+    return cert.public_bytes(serialization.Encoding.DER)
 
 def cert_to_pem(cert):
     return cert.public_bytes(serialization.Encoding.PEM)

{certapi-0.2.3 → certapi-0.2.4}/src/certapi/db.py

@@ -21,7 +21,7 @@ class KeyStore(ABC):
         pass
 
     @abstractmethod
-    def save_cert(self, private_key_id: int, cert: Certificate, domains: List[str], name: str = None) -> int:
+    def save_cert(self, private_key_id: int, cert: Certificate|str, domains: List[str], name: str = None) -> int:
         pass
 
     @abstractmethod
@@ -91,12 +91,12 @@ class SqliteKeyStore(KeyStore):
         self.save_key(key, name)
         return key
 
-    def save_cert(self, private_key_id: int, cert: Certificate, domains: List[str], name: str = None) -> int:
+    def save_cert(self, private_key_id: int, cert: Certificate|str, domains: List[str], name: str = None) -> int:
         conn = self._get_db_connection()
         cur = conn.cursor()
         cur.execute(
             "INSERT INTO certificates (name, priv_id, content) VALUES (?, ?, ?)",
-            (name, private_key_id, cert.public_bytes(serialization.Encoding.DER)),
+            (name, private_key_id, cert_to_der(cert)),
         )
         cert_id = cur.lastrowid
 
@@ -182,32 +182,42 @@ class FilesystemKeyStore(KeyStore):
             return cert_from_pem(cert_data)
         return None
 
-    def save_cert(self, private_key_id: str, cert: Certificate, domains: list, name: str = None) -> int:
+
+    def save_cert(self, private_key_id: str, cert: Certificate | str, domains: list, name: str = None) -> int:
+        def get_cert_pem(cert) -> bytes:
+            return cert.encode() if isinstance(cert, str) else cert_to_pem(cert)
+
+        cert_pem = get_cert_pem(cert)
+
         if name:
             cert_path = os.path.join(self.certs_dir, f"{name}.crt")
             with open(cert_path, "wb") as f:
-                f.write(cert_to_pem(cert))
+                f.write(cert_pem)
+
         key_content = None
         key_path = os.path.join(self.keys_dir, f"{private_key_id}.key")
         with open(key_path, "rb") as f:
             key_content = f.read()
-        
+
         for domain in domains:
+            domain_name = domain
             if name is not None and name.endswith(".selfsigned"):
-                domain = domain + ".selfsigned"
+                domain_name += ".selfsigned"
 
-            if domain != private_key_id:
-                with open(os.path.join(self.keys_dir, f"{domain}.key"), "wb") as f:
+            if domain_name != private_key_id:
+                with open(os.path.join(self.keys_dir, f"{domain_name}.key"), "wb") as f:
                     f.write(key_content)
-            domain_cert_path = os.path.join(self.certs_dir, f"{domain}.crt")
+
+            domain_cert_path = os.path.join(self.certs_dir, f"{domain_name}.crt")
             with open(domain_cert_path, "wb") as f:
-                f.write(cert_to_pem(cert))
+                f.write(cert_pem)
+
 
         return name if name else domains[0]  # Dummy ID since filesystem does not use numeric IDs
 
-    def get_cert(self, domain: str) -> None | Tuple[str, Key, Certificate]:
-        cert_path = os.path.join(self.certs_dir, f"{domain}.crt")
-        key_path = os.path.join(self.keys_dir, f"{domain}.key")
+    def get_cert(self, name: str) -> None | Tuple[str, Key, Certificate]:
+        cert_path = os.path.join(self.certs_dir, f"{name}.crt")
+        key_path = os.path.join(self.keys_dir, f"{name}.key")
         key = None
         cert = None
         if os.path.exists(key_path):
@@ -226,7 +236,7 @@ class FilesystemKeyStore(KeyStore):
 
         if cert is None or key is None:
             return None
-        return (domain, key, cert)
+        return (name, key, cert)
 
 
 class PostgresKeyStore(KeyStore):

{certapi-0.2.3 → certapi-0.2.4}/src/certapi.egg-info/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.1
 Name: certapi
-Version: 0.2.3
+Version: 0.2.4
 Summary: Python Package for managing keys, request SSL certificates from ACME.
 Home-page: https://github.com/mesudip/certapi
 Author: Sudip Bhattarai
@@ -16,6 +16,8 @@ Description-Content-Type: text/markdown
 CertApi is a Python package for requesting SSL certificates from ACME.
 This is supposed to be used as a base library for building other tools, or to integrate Certificate creation feature in you app.
 
+> ⚠️ Warning: This project is not polished for production use. Please stay tuned for the LTS `v1.0.0` release.
+
 ## Installation
 
 You can install CertApi using pip: