Index: net/data/verify_certificate_chain_unittest/openssl_conf.py |
diff --git a/net/data/verify_certificate_chain_unittest/openssl_conf.py b/net/data/verify_certificate_chain_unittest/openssl_conf.py |
new file mode 100755 |
index 0000000000000000000000000000000000000000..fe1838d6638d481c63ba346a2dfe443a1092ff77 |
--- /dev/null |
+++ b/net/data/verify_certificate_chain_unittest/openssl_conf.py |
@@ -0,0 +1,136 @@ |
+#!/usr/bin/python |
+# Copyright (c) 2015 The Chromium Authors. All rights reserved. |
+# Use of this source code is governed by a BSD-style license that can be |
+# found in the LICENSE file. |
+ |
+"""This file contains helpers for representing, manipulating, and writing |
+OpenSSL configuration files [1] |
+ |
+Configuration files are simply a collection of name=value "properties", which |
+are grouped into "sections". |
+ |
+[1] https://www.openssl.org/docs/manmaster/apps/config.html |
+""" |
+ |
+class Property(object): |
+ """Represents a key/value pair in OpenSSL .cnf files. |
+ |
+ Names and values are not quoted in any way, so callers need to pass the text |
+ exactly as it should be written to the file (leading and trailing whitespace |
+ doesn't matter). |
+ |
+ For instance: |
+ baseConstraints = critical, CA:false |
+ |
+ Could be represented by a Property where: |
+ name = 'baseConstraints' |
+ value = 'critical, CA:false' |
+ """ |
+ def __init__(self, name, value): |
+ self.name = name |
+ self.value = value |
+ |
+ |
+ def write_to(self, out): |
+ """Outputs this property to .cnf file.""" |
+ out.write('%s = %s\n' % (self.name, self.value)) |
+ |
+ |
+class Section(object): |
+ """Represents a section in OpenSSL. For instance: |
+ [CA_root] |
+ preserve = true |
+ |
+ Could be represented by a Section where: |
+ name = 'CA_root' |
+ properties = [Property('preserve', 'true')] |
+ """ |
+ def __init__(self, name): |
+ self.name = name |
+ self.properties = [] |
+ |
+ |
+ def ensure_property_name_not_duplicated(self, name): |
+ """Raises an exception of there is more than 1 property named |name|.""" |
+ count = 0 |
+ for prop in self.properties: |
+ if prop.name == name: |
+ count += 1 |
+ if count > 1: |
+ raise Exception('Duplicate property: %s' % (name)) |
+ |
+ |
+ def set_property(self, name, value): |
+ """Replaces, adds, or removes a Property from the Section: |
+ |
+ - If |value| is None, then this is equivalent to calling |
+ remove_property(name) |
+ - If there is an existing property matching |name| then its value is |
+ replaced with |value| |
+ - If there are no properties matching |name| then a new one is added at |
+ the end of the section |
+ |
+ It is expected that there is AT MOST 1 property with the given name. If |
+ that is not the case then this function will raise an error.""" |
+ |
+ if value is None: |
+ self.remove_property(name) |
+ return |
+ |
+ self.ensure_property_name_not_duplicated(name) |
+ |
+ for prop in self.properties: |
+ if prop.name == name: |
+ prop.value = value |
+ return |
+ |
+ self.add_property(name, value) |
+ |
+ |
+ def add_property(self, name, value): |
+ """Adds a property (allows duplicates)""" |
+ self.properties.append(Property(name, value)) |
+ |
+ |
+ def remove_property(self, name): |
+ """Removes the property with the indicated name, if it exists. |
+ |
+ It is expected that there is AT MOST 1 property with the given name. If |
+ that is not the case then this function will raise an error.""" |
+ self.ensure_property_name_not_duplicated(name) |
+ |
+ for i in range(len(self.properties)): |
+ if self.properties[i].name == name: |
+ self.properties.pop(i) |
+ return |
+ |
+ |
+ def write_to(self, out): |
+ """Outputs the section in the format used by .cnf files""" |
+ out.write('[%s]\n' % (self.name)) |
+ for prop in self.properties: |
+ prop.write_to(out) |
+ out.write('\n') |
+ |
+ |
+class Config(object): |
+ """Represents a .cnf (configuration) file in OpenSSL""" |
+ def __init__(self): |
+ self.sections = [] |
+ |
+ |
+ def get_section(self, name): |
+ """Gets or creates a section with the given name.""" |
+ for section in self.sections: |
+ if section.name == name: |
+ return section |
+ new_section = Section(name) |
+ self.sections.append(new_section) |
+ return new_section |
+ |
+ |
+ def write_to_file(self, path): |
+ """Outputs the Config to a .cnf files.""" |
+ with open(path, 'w') as out: |
+ for section in self.sections: |
+ section.write_to(out) |