67 lines
2.0 KiB
Python
67 lines
2.0 KiB
Python
from cryptography.hazmat.primitives.asymmetric import rsa
|
|
from cryptography.hazmat.primitives import serialization, hashes
|
|
from cryptography.x509 import NameOID, CertificateBuilder
|
|
from cryptography import x509
|
|
import datetime
|
|
import os
|
|
import argparse
|
|
|
|
def main():
|
|
parser = argparse.ArgumentParser()
|
|
parser.add_argument("--common-name", type=str, default='127.0.0.1')
|
|
args = parser.parse_args()
|
|
|
|
if os.path.exists("certificate.pfx"):
|
|
q = input("certificate.pfx already exists. Are you sure you want to generate a new certificate? (y/n): ")
|
|
if q != "y":
|
|
input("Press enter to exit...")
|
|
return
|
|
|
|
# Generate private key
|
|
private_key = rsa.generate_private_key(
|
|
public_exponent=65537,
|
|
key_size=4096
|
|
)
|
|
|
|
# Generate self-signed certificate
|
|
subject = issuer = x509.Name([
|
|
x509.NameAttribute(NameOID.COMMON_NAME, args.common_name),
|
|
])
|
|
|
|
cert = CertificateBuilder().subject_name(
|
|
subject
|
|
).issuer_name(
|
|
issuer
|
|
).public_key(
|
|
private_key.public_key()
|
|
).serial_number(
|
|
x509.random_serial_number()
|
|
).not_valid_before(
|
|
datetime.datetime.utcnow()
|
|
).not_valid_after(
|
|
datetime.datetime.utcnow() + datetime.timedelta(days=365)
|
|
).add_extension(
|
|
x509.BasicConstraints(ca=True, path_length=None), critical=True
|
|
).sign(private_key, hashes.SHA256())
|
|
|
|
# Export PKCS12 file
|
|
from cryptography.hazmat.primitives.serialization.pkcs12 import serialize_key_and_certificates
|
|
|
|
pfx_data = serialize_key_and_certificates(
|
|
name=b"The Cycle: Frontier backend",
|
|
key=private_key,
|
|
cert=cert,
|
|
cas=None,
|
|
encryption_algorithm=serialization.NoEncryption()
|
|
)
|
|
|
|
# Save to file
|
|
with open("certificate.pfx", "wb") as f:
|
|
f.write(pfx_data)
|
|
|
|
print("PKCS#12 certificate (certificate.pfx) created successfully.")
|
|
input("Press enter to exit...")
|
|
|
|
if __name__ == '__main__':
|
|
main()
|