Improve support for requesting client certs in tlslite

third_party/tlslite/tlslite/X509.py

 """Class representing an X.509 certificate."""
 
 from utils.ASN1Parser import ASN1Parser
 from utils.cryptomath import *
 from utils.keyfactory import _createPublicRSAKey
 
 
 class X509:
     """This class represents an X.509 certificate.
 
     @type bytes: L{array.array} of unsigned bytes
     @ivar bytes: The DER-encoded ASN.1 certificate
 
     @type publicKey: L{tlslite.utils.RSAKey.RSAKey}
     @ivar publicKey: The subject public key from the certificate.
+
+    @type subject: L{array.array} of unsigned bytes
+    @ivar subject: The DER-encoded ASN.1 subject distinguished name.
     """
 
     def __init__(self):
         self.bytes = createByteArraySequence([])
         self.publicKey = None
+        self.subject = None
 
     def parse(self, s):
         """Parse a PEM-encoded X.509 certificate.
 
         @type s: str
         @param s: A PEM-encoded X.509 certificate (i.e. a base64-encoded
         certificate wrapped with "-----BEGIN CERTIFICATE-----" and
         "-----END CERTIFICATE-----" tags).
         """
 
@@ skipping 25 matching lines @@
         #Get the tbsCertificate
         tbsCertificateP = p.getChild(0)
 
         #Is the optional version field present?
         #This determines which index the key is at.
         if tbsCertificateP.value[0]==0xA0:
             subjectPublicKeyInfoIndex = 6
         else:
             subjectPublicKeyInfoIndex = 5
 
+        #Get the subject
+        self.subject = tbsCertificateP.getChildBytes(\
+                           subjectPublicKeyInfoIndex - 1)
+
         #Get the subjectPublicKeyInfo
         subjectPublicKeyInfoP = tbsCertificateP.getChild(\
                                     subjectPublicKeyInfoIndex)
 
         #Get the algorithm
         algorithmP = subjectPublicKeyInfoP.getChild(0)
         rsaOID = algorithmP.value
         if list(rsaOID) != [6, 9, 42, 134, 72, 134, 247, 13, 1, 1, 1, 5, 0]:
             raise SyntaxError("Unrecognized AlgorithmIdentifier")
 
@@ skipping 48 matching lines @@
                 if e[0] == cryptlib_py.CRYPT_ERROR_NOTFOUND:
                     returnVal = None
             return returnVal
         finally:
             cryptlib_py.cryptDestroyCert(c)
 
     def writeBytes(self):
         return self.bytes