63 lines
2.0 KiB
Python
63 lines
2.0 KiB
Python
"""Utility helpers for nscert package.
|
|
|
|
Includes a robust PEM extractor that searches arbitrary Console JSON payloads
|
|
for a PEM CSR block (-----BEGIN CERTIFICATE REQUEST----- ...
|
|
-----END CERTIFICATE REQUEST-----).
|
|
"""
|
|
|
|
from typing import Optional, Any, TextIO
|
|
import re
|
|
import sys
|
|
|
|
PEM_RE = re.compile(r"-----BEGIN CERTIFICATE REQUEST-----(?:.|\n)+?-----END CERTIFICATE REQUEST-----", re.DOTALL)
|
|
|
|
|
|
# Compatibility exports: delegate terminal formatting to nscert.term
|
|
from .term import format_warning, print_warning, format_error, print_error, format_info, print_info # re-exported for backwards compatibility
|
|
|
|
|
|
|
|
def extract_pem_from_json(obj: Any) -> Optional[str]:
|
|
"""Recursively search `obj` (dict/list/str) for the first PEM CSR block.
|
|
|
|
Returns the matched PEM string or None if not found.
|
|
"""
|
|
if isinstance(obj, str):
|
|
m = PEM_RE.search(obj)
|
|
if m:
|
|
return m.group(0)
|
|
return None
|
|
|
|
if isinstance(obj, dict):
|
|
# check common CSR locations quickly
|
|
# e.g., {"ns_ssl_csr": [{"csr": "-----BEGIN..."}]}
|
|
if "ns_ssl_csr" in obj:
|
|
val = obj.get("ns_ssl_csr")
|
|
if isinstance(val, list):
|
|
for item in val:
|
|
if isinstance(item, dict):
|
|
csr = item.get("csr")
|
|
if csr:
|
|
m = PEM_RE.search(csr)
|
|
if m:
|
|
return m.group(0)
|
|
# generic recursive walk
|
|
for v in obj.values():
|
|
res = extract_pem_from_json(v)
|
|
if res:
|
|
return res
|
|
|
|
if isinstance(obj, list):
|
|
# If it's a list of strings (rows), join them and search the whole block
|
|
if all(isinstance(i, str) for i in obj):
|
|
joined = "\n".join(obj)
|
|
m = PEM_RE.search(joined)
|
|
if m:
|
|
return m.group(0)
|
|
for item in obj:
|
|
res = extract_pem_from_json(item)
|
|
if res:
|
|
return res
|
|
|
|
return None
|