Function dummy_crl

mitmproxy/certs.py:407–428

Generates an empty CRL signed with the CA key privkey: CA private key cacert: CA certificate Returns a CRL DER encoded

(
    privkey: rsa.RSAPrivateKey,
    cacert: x509.Certificate,
)

def dummy_crl(
    privkey: rsa.RSAPrivateKey,
    cacert: x509.Certificate,
) -> bytes:
    """
    Generates an empty CRL signed with the CA key

    privkey: CA private key
    cacert: CA certificate

    Returns a CRL DER encoded
    """
    builder = x509.CertificateRevocationListBuilder()
    builder = builder.issuer_name(cacert.issuer)

    now = datetime.datetime.now()
    builder = builder.last_update(now + CERT_VALIDITY_OFFSET)
    builder = builder.next_update(now + CERT_VALIDITY_OFFSET + CRL_EXPIRY)

    builder = builder.add_extension(x509.CRLNumber(1000), False)  # meaningless number
    crl = builder.sign(private_key=privkey, algorithm=hashes.SHA256())
    return crl.public_bytes(serialization.Encoding.DER)


@dataclass(frozen=True)