From 50e7a1f2e31aa299f062e19357d8abb97581f582 Mon Sep 17 00:00:00 2001
From: Clement Rouault <clement.rouault@sogeti.com>
Date: Mon, 5 Dec 2016 17:41:49 +0100
Subject: [PATCH] Still Working on CryptoAPI

---
 windows/crypto/__init__.py    |  1 +
 windows/crypto/certificate.py | 65 +++++++++++++++++++++++++++++++++++
 2 files changed, 66 insertions(+)
 create mode 100644 windows/crypto/__init__.py
 create mode 100644 windows/crypto/certificate.py

diff --git a/windows/crypto/__init__.py b/windows/crypto/__init__.py
new file mode 100644
index 0000000..220e17f
--- /dev/null
+++ b/windows/crypto/__init__.py
@@ -0,0 +1 @@
+from windows.crypto.certificate import *
\ No newline at end of file
diff --git a/windows/crypto/certificate.py b/windows/crypto/certificate.py
new file mode 100644
index 0000000..4b68ec8
--- /dev/null
+++ b/windows/crypto/certificate.py
@@ -0,0 +1,65 @@
+import windows
+from windows import winproxy
+from windows.generated_def import *
+
+
+class CertificatContext(PCCERT_CONTEXT):
+    _type_ = PCCERT_CONTEXT._type_ # Not herited from PCCERT_CONTEXT
+
+    def raw_serial(self):
+        serial_number = self[0].pCertInfo[0].SerialNumber
+        return [(c & 0xff) for c in serial_number.pbData[:serial_number.cbData][::-1]]
+
+    def serial_string(self):
+        serial_number = self[0].pCertInfo[0].SerialNumber
+        serial_bytes = [(c & 0xff) for c in serial_number.pbData[:serial_number.cbData][::-1]]
+        return " ".join("{:02x}".format(x) for x in serial_bytes)
+
+    def get_name(self, flags=0):
+        size = winproxy.CertGetNameStringA(self, CERT_NAME_SIMPLE_DISPLAY_TYPE, flags, None, None, 0)
+        namebuff = ctypes.c_buffer(size)
+        size = winproxy.CertGetNameStringA(self, CERT_NAME_SIMPLE_DISPLAY_TYPE, flags, None, namebuff, size)
+        return namebuff[:-1]
+
+    def get_issuer_name(self):
+        return self.get_name(flags=CERT_NAME_ISSUER_FLAG)
+
+    def get_raw_chain(self):
+        chain_context = PCCERT_CHAIN_CONTEXT()
+
+        enhkey_usage = CERT_ENHKEY_USAGE()
+        enhkey_usage.cUsageIdentifier = 0
+        enhkey_usage.rgpszUsageIdentifier = None
+
+        cert_usage = CERT_USAGE_MATCH()
+        cert_usage.dwType = USAGE_MATCH_TYPE_AND
+        cert_usage.Usage   = enhkey_usage
+
+        chain_para = CERT_CHAIN_PARA()
+        chain_para.cbSize = sizeof(chain_para)
+        chain_para.RequestedUsage = cert_usage
+
+        winproxy.CertGetCertificateChain(None, self.cert, None, self.cert.hCertStore, byref(chain_para), 0, None, byref(chain_context))
+        return CertficateChain(chain_context)
+        
+    def duplicate(self):
+        res = winproxy.CertDuplicateCertificateContext(self)
+        # Check what the doc says: the pointer returned is actually the PCERT in parameter
+        # Only the refcount is incremented
+        # This postulate allow us to return 'self' directly
+        # https://msdn.microsoft.com/en-us/library/windows/desktop/aa376045(v=vs.85).aspx
+        if not ctypes.cast(res, PVOID).value == ctypes.cast(self, PVOID).value:
+            raise ValueError("CertDuplicateCertificateContext did not returned the argument (check doc)")
+        return self
+        
+
+
+class CertficateChain(object):
+    def __init__(self, pc_chain_context):
+        self.chain = pc_chain_context[0]
+
+    def to_list(self):
+        res = []
+        for i in range(self.chain.rgpChain[0][0].cElement):
+            res.append(CertificatContext(self.chain.rgpChain[0][0].rgpElement[i][0].pCertContext))
+        return res
\ No newline at end of file