diff options
| author | Rob Austein <sra@hactrn.net> | 2007-12-05 00:55:00 +0000 |
|---|---|---|
| committer | Rob Austein <sra@hactrn.net> | 2007-12-05 00:55:00 +0000 |
| commit | cfe926c349a510f12a9f84a8aa62f3428636eb9f (patch) | |
| tree | 156c9e15c025324aa94ea031f0851c4a4bd37061 /scripts/rpki/cms.py | |
| parent | 4dc7c50e8deb8432c31fca22497552ff6eee9db2 (diff) | |
Checkpoint
svn path=/scripts/apnic-poke-2.sh; revision=1363
Diffstat (limited to 'scripts/rpki/cms.py')
| -rw-r--r-- | scripts/rpki/cms.py | 9 |
1 files changed, 7 insertions, 2 deletions
diff --git a/scripts/rpki/cms.py b/scripts/rpki/cms.py index 2a9124c7..8e14047d 100644 --- a/scripts/rpki/cms.py +++ b/scripts/rpki/cms.py @@ -8,7 +8,7 @@ requires disk I/O, and likes PEM format. Fix this later. import os, rpki.x509, rpki.exceptions, lxml.etree -debug = True +debug = 2 # openssl smime -sign -nodetach -outform DER -signer biz-certs/Alice-EE.cer # -certfile biz-certs/Alice-CA.cer -inkey biz-certs/Alice-EE.key @@ -52,6 +52,11 @@ def sign(plaintext, keypair, certs): os.unlink(certfile_filename) os.unlink(plaintext_filename) + if debug >= 2: + print + print "CMS dump:" + dumpasn1(cms) + return cms # openssl smime -verify -inform DER -in THING.der -CAfile biz-certs/Alice-Root.cer @@ -82,7 +87,7 @@ def verify(cms, ta): if status == "Verification successful\n": return plaintext else: - if debug: + if debug >= 1: print "CMS verification failed, dumping inputs:" print print "TA:" |