Lines Matching +full:format +full:- +full:extra +full:- +full:args
2 # -*- coding: utf-8 -*-
4 # nghttp2 - HTTP/2 C Library
83 def run_openssl(args, allow_tempfail=False): argument
86 p = subprocess.Popen(args, stdout=subprocess.PIPE)
88 die('failed to invoke {}:{}'.format(args, e))
96 raise Exception('nonzero return code {}'.format(p.returncode))
99 msg = 'OpenSSL exitted abnormally: {}:{}'.format(args, e)
114 return run_openssl([cmd, 'version']).decode('utf-8').strip()
120 [cmd, 'x509', '-in', cert_fn, '-noout',
121 '-ocsp_uri']).decode('utf-8').strip()
124 die('failed to extract ocsp URI from {}'.format(cert_fn))
131 chain = read_file(cert_fn).decode('utf-8')
133 r'.*?-----END CERTIFICATE-----.*?(-----BEGIN CERTIFICATE-----.*?-----END CERTIFICATE-----)',
136 … die('--issuer option was not used, and failed to extract issuer certificate from the certificate')
137 write_file(issuer_fn, (m.group(1) + '\n').encode('utf-8'))
143 sys.stderr.write('sending OCSP request to {}\n'.format(ocsp_uri))
144 args = [
145 cmd, 'ocsp', '-issuer', issuer_fn, '-cert', cert_fn, '-url', ocsp_uri,
146 '-noverify', '-respout', respder_fn
150 args.extend(['-header', 'Host', ocsp_host])
151 resp = run_openssl(args, allow_tempfail=True)
152 return resp.decode('utf-8')
164 ['-VAfile', issuer_fn],
166 ['-partial_chain', '-trusted_first', '-CAfile', issuer_fn],
168 ['-CAfile', issuer_fn],
171 for extra in allextra:
173 args = [cmd, 'ocsp', '-respin', respder_fn]
174 args.extend(extra)
175 p = subprocess.Popen(args, stdout=f, stderr=f)
181 if f.read().decode('utf-8').find(
182 'Response Verify Failure') != -1:
184 sys.stderr.write('verify OK (used: {})\n'.format(extra))
187 sys.stderr.write(read_file(verify_fn).decode('utf-8'))
195 'fetch-ocsp-response (using {})\n'.format(openssl_version))
209 sys.stderr.write('{}\n'.format(resp))
213 if resp.find('Responder Error:') != -1:
231 '--issuer',
235 parser.add_argument('--openssl',
241 args = parser.parse_args() variable
249 fetch_ocsp_response(args.openssl, args.certificate, tempdir,
250 args.issuer)