Module pkix 

Python bindings for PKIX types: PyCsr, PyCrl, PyOcspResponse, and PKCS#7 / PKCS#12 helper functions.

Structs

PyCertID

OCSP CertID — identifies a certificate by its issuer hashes and serial number.

PyCertificateListBuilder

Fluent builder for a DER-encoded X.509 CRL (RFC 5280 §5).

PyCrl

X.509 Certificate Revocation List accessible from Python.

PyCsr

PKCS #10 Certificate Signing Request accessible from Python.

PyOCSPCertIDSpec

Parameters for a single OCSP request entry (one certificate to check).

PyOCSPRequestBuilder

Python-facing wrapper for synta_certificate::OCSPRequestBuilder.

PyOCSPResponseBuilder

Python-facing wrapper for synta_certificate::OCSPResponseBuilder.

PyOCSPSingleResponse

Parameters for a single OCSP response entry.

PyOcspRequest

Parsed OCSP Request (RFC 9654 / RFC 6960).

PyOcspResponse

OCSP Response (RFC 6960) accessible from Python.

Functions

create_pkcs12

Build a DER-encoded PKCS#12 PFX archive.

encode_extended_key_usage

Encode a list of OIDs as a DER SEQUENCE OF OID (ExtendedKeyUsage value).

encode_subject_alt_names

Encode a list of (tag_number, content_bytes) pairs as a DER SEQUENCE OF GeneralName.

load_der_pkcs7_certificates

Extract X.509 certificates from a PKCS#7 SignedData blob (DER or BER).

load_pem_pkcs7_certificates

Extract X.509 certificates from a PEM-encoded PKCS#7 SignedData blob.

load_pkcs12

Extract both certificates and private keys from a PKCS#12 archive.

load_pkcs12_certificates

Extract X.509 certificates from a PKCS#12 archive.

load_pkcs12_keys

Extract PKCS#8 private keys from a PKCS#12 archive.

name_der_equal

Compare two DER-encoded X.500 Names for byte-for-byte equality.

read_pki_blocks

Auto-detect the encoding of data and return every PKI object as a (label, der_bytes) tuple, in document order.