request.clients.est_client

EST (Enrollment over Secure Transport) client implementation.

Module Contents

request.clients.est_client.DEFAULT_EST_PORT = 443

request.clients.est_client.DEFAULT_EST_TIMEOUT = 30

exception request.clients.est_client.EstClientError

Bases: Exception

Base exception for EST client errors.

class request.clients.est_client.EstClient(context, timeout=DEFAULT_EST_TIMEOUT)

Bases: trustpoint.logger.LoggerMixin

EST client for communicating with EST servers according to RFC 7030.

This client implements the EST protocol for certificate enrollment, specifically supporting the simpleenroll operation.

The client uses an EstBaseRequestContext to configure the connection and authentication parameters.

Parameters:

• context (request.request_context.EstBaseRequestContext)

• timeout (int)

context

timeout = 30

simple_enroll(csr)

Perform simple enrollment by sending a CSR to the EST server.

This implements the /simpleenroll operation defined in RFC 7030 section 4.2.

Parameters:

csr (cryptography.x509.CertificateSigningRequest) – The Certificate Signing Request to enroll.

Returns:

The issued certificate from the EST server.

Raises:

EstClientError – If the enrollment fails.

Return type:

cryptography.x509.Certificate

get_ca_certs()

Retrieve CA certificates from the EST server.

This implements the /cacerts operation defined in RFC 7030 section 4.1.

Returns:

List of CA certificates from the server.

Raises:

EstClientError – If the operation fails.

Return type:

list[cryptography.x509.Certificate]