db116f7 x509: use python-cryptography to process certs

16 files Authored by ftweedal 7 years ago, Committed by dkupka 7 years ago,
    x509: use python-cryptography to process certs
    
    Update x509.load_certificate and related functions to return
    python-cryptography ``Certificate`` objects.  Update the call sites
    accordingly, including removal of NSS initialisation code.
    
    Also update GeneralName parsing code to return python-cryptography
    GeneralName values, for consistency with other code that processes
    GeneralNames.  The new function, `get_san_general_names`, and
    associated helper functions, can be removed when python-cryptography
    provides a way to deal with unrecognised critical extensions.
    
    Part of: https://fedorahosted.org/freeipa/ticket/6398
    
    Reviewed-By: Jan Cholasta <jcholast@redhat.com>
    Reviewed-By: Florence Blanc-Renaud <frenaud@redhat.com>
    
        
file modified
+14 -13
file modified
+6 -6
file modified
+162 -165
file modified
+9 -8
file modified
+1 -1
file modified
+14 -11
file modified
+4 -5
file modified
+62 -53
file modified
+10 -10