Changeset 2d601b7 for fedd

Timestamp:

Jul 12, 2011 11:30:45 AM (13 years ago)

Author:

Ted Faber <faber@…>

Branches:

compt_changes, info-ops, master

Children:

62e8e03

Parents:

816daef

Message:

Add an option to specify a CN directly

File:

• fedd/cert_to_fedid.py (modified) (2 diffs)

fedd/cert_to_fedid.py

@@ -21 +21 @@
         self.add_option('--cert', dest='cert', 
                 help='Cretificate to copy subject from')
+        self.add_option('--cn', dest='cn', default=None, 
+                help='Set the CN directly')
         self.add_option('--openssl', dest='openssl',
                 help='Path to openssl command', default='/usr/bin/openssl')
@@ -42 +44 @@
 
 try:
-    c = X509.load_cert(opts.cert)
-    subj = c.get_subject().as_text()
-    if subj.startswith('/'): i = 1
-    else: i = 0
-    subj = '/' + re.sub('/', '\/', subj[i:])
+    if opts.cn is not None:
+        subj = '/CN=' + opts.cn
+        if len(subj) > 64: subj = subj[0:63]
+    else:
+        c = X509.load_cert(opts.cert)
+        subj = c.get_subject().as_text()
+        if subj.startswith('/'): i = 1
+        else: i = 0
+        subj = '/' + re.sub('/', '\/', subj[i:])
 
     tf, tn = tempfile.mkstemp(suffix=".pem")