x509证书验证

Home / 开发 / x509证书验证

开发

kinda22 in 31 10月 2022

# pyOpenSSL 22.1.0

# pycryptodome 3.15.0

from OpenSSL import crypto

def cert_verify(cert_file, ca_file):

cert = crypto.load_certificate(crypto.FILETYPE_PEM, open(cert_file).read())

ca = crypto.load_certificate(crypto.FILETYPE_PEM, open(ca_file).read())

store = crypto.X509Store()

store.add_cert(ca)

ctx = crypto.X509StoreContext(store, cert)

try:

ctx.verify_certificate()

return True

except:

return False

# node-forge

let pki = require('node-forge').pki;

let fs = require('fs');

let caCert;

let caStore;

try {

caCert = fs.readFileSync('path/to/ca-cert.pem').toString();

caStore = pki.createCaStore([ caCert ]);

} catch (e) {

log.error('Failed to load CA certificate (' + e + ')');

return....;

}

try {

pki.verifyCertificateChain(caStore, [ cert ]);

} catch (e) {

return handleResponse(new Error('Failed to verify certificate (' + e.message || e + ')'));

}