switch new_order to use crypto_util._pyopenssl_cert_or_req_san

This commit is contained in:
Erica Portnoy 2018-02-16 15:17:45 -08:00
parent 9f6d096e9d
commit e096952b2f

View file

@ -17,6 +17,7 @@ import re
import requests
import sys
from acme import crypto_util
from acme import errors
from acme import jws
from acme import messages
@ -568,11 +569,8 @@ class ClientV2(ClientBase):
:returns: The newly created order.
:rtype: OrderResource
"""
csr = cryptography.x509.load_pem_x509_csr(csr_pem,
cryptography.hazmat.backends.default_backend())
san_extension = next(ext for ext in csr.extensions
if ext.oid == cryptography.x509.oid.ExtensionOID.SUBJECT_ALTERNATIVE_NAME)
dnsNames = san_extension.value.get_values_for_type(cryptography.x509.DNSName)
csr = OpenSSL.crypto.load_certificate_request(OpenSSL.crypto.FILETYPE_PEM, csr_pem)
dnsNames = crypto_util._pyopenssl_cert_or_req_san(csr)
identifiers = []
for name in dnsNames: