Skip to content

Commit 4e5bf2c

Browse files
bobdoahkislyuk
authored andcommitted
Strip PEM header from OpenSSL.crypto.X509 cert
The dump_certificate method doesn't strip the PEM header. The X509Certificate should be a base64-encoded certificate, minus the header.
1 parent fe13b20 commit 4e5bf2c

File tree

1 file changed

+1
-1
lines changed

1 file changed

+1
-1
lines changed

signxml/__init__.py

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -396,7 +396,7 @@ def sign(self, data, key=None, passphrase=None, cert=None, reference_uri=None, k
396396
x509_certificate.text = strip_pem_header(cert)
397397
else:
398398
from OpenSSL.crypto import dump_certificate, FILETYPE_PEM
399-
x509_certificate.text = dump_certificate(FILETYPE_PEM, cert)
399+
x509_certificate.text = strip_pem_header(dump_certificate(FILETYPE_PEM, cert))
400400
else:
401401
sig_root.append(key_info)
402402
else:

0 commit comments

Comments
 (0)