certvalidator_certificate_validation_with_crl_ocsp_checks.py

1from certvalidator import CertificateValidator, ValidationContext
2
3with open('certificate.crt', 'rb') as f:
4    cert_data = f.read()
5
6# If you have an intermediate CA certificate, load it here
7with open('intermediate.crt', 'rb') as f:
8    intermediate_cert_data = f.read()
9
10context = ValidationContext(trust_roots=[intermediate_cert_data])
11validator = CertificateValidator(cert_data, validation_context=context)
12
13try:
14    # This performs the path building and validation
15    path = validator.validate_usage({'digital_signature'})
16    print("Certificate is valid")
17except Exception as e:
18    print(f"Validation failed: {e}")