certvalidator_certificate_chain_validation_with_trust_root.py

1import os
2from certvalidator import CertificateValidator, ValidationContext
3
4# The following code is based on the example from the official documentation.
5# Note: You would normally load these from files or a directory.
6with open('path/to/certificate.crt', 'rb') as f:
7    end_entity_cert = f.read()
8
9with open('path/to/intermediate.crt', 'rb') as f:
10    intermediate_cert = f.read()
11
12# Setup the validation context with the trusted root
13context = ValidationContext(trust_roots=[b'...PEM or DER encoded root CA...'])
14
15# Initialize the validator with the cert to check, any intermediates, and the context
16validator = CertificateValidator(
17    end_entity_cert,
18    intermediate_certs=[intermediate_cert],
19    validation_context=context
20)
21
22# Validate the certificate; this will raise an Exception if invalid
23path = validator.validate_usage({'digital_signature', 'key_encipherment'})
24
25# If no exception was raised, the certificate is valid for the specified usage
26print("Certificate is valid.")