sushy.resources.certificateservice package¶

Submodules¶

sushy.resources.certificateservice.certificate module¶

class sushy.resources.certificateservice.certificate.Certificate(connector, path='', redfish_version=None, registries=None, reader=None, json_doc=None, root=None)¶

Bases: sushy.resources.base.ResourceBase

certificate_string = <sushy.resources.base.Field object>¶

Certificate in the format defined by certificate_type

certificate_type = <sushy.resources.base.MappedField object>¶

The format of the certificate

certificate_usage_type = <sushy.resources.base.MappedField object>¶

The types or purposes for this certificate

delete()¶

Delete this certificate.

description = <sushy.resources.base.Field object>¶

Certificate description

fingerprint = <sushy.resources.base.Field object>¶

The fingerprint of the certificate

fingerprint_hash_algorithm = <sushy.resources.base.Field object>¶

The hash algorithm for the fingerprint of the certificate

identity = <sushy.resources.base.Field object>¶

The certificate identity string

issuer = <sushy.resources.certificateservice.certificate.Identifier object>¶

The issuer of the certificate

key_usage = <sushy.resources.base.MappedListField object>¶

The key usage extension, which defines the purpose of the public keys in this certificate

name = <sushy.resources.base.Field object>¶

The certificate name

serial_number = <sushy.resources.base.Field object>¶

The serial number of the certificate

signature_algorithm = <sushy.resources.base.Field object>¶

The algorithm used for creating the signature of the certificate

subject = <sushy.resources.certificateservice.certificate.Identifier object>¶

The subject of the certificate

uefi_signature_owner = <sushy.resources.base.Field object>¶

The UEFI signature owner for this certificate

valid_not_after = <sushy.resources.base.Field object>¶

The date when the certificate is no longer valid

valid_not_before = <sushy.resources.base.Field object>¶

The date when the certificate becomes valid

class sushy.resources.certificateservice.certificate.CertificateCollection(connector, path, redfish_version=None, registries=None, root=None)¶

Bases: sushy.resources.base.MutableResourceCollectionBase

create_member(certificate_string, certificate_type)¶

Create a new member of this collection.

Parameters

• certificate_string – the contents of the new certificate.

• certificate_type – the type of the new certificate, one of sushy.CertificateType.

class sushy.resources.certificateservice.certificate.Identifier(*args, **kwargs)¶

Bases: sushy.resources.base.CompositeField

The identifier information about a certificate.

city = <sushy.resources.base.Field object>¶

common_name = <sushy.resources.base.Field object>¶

country = <sushy.resources.base.Field object>¶

email = <sushy.resources.base.Field object>¶

organization = <sushy.resources.base.Field object>¶

organizational_unit = <sushy.resources.base.Field object>¶

state = <sushy.resources.base.Field object>¶

sushy.resources.certificateservice.certificateservice module¶

class sushy.resources.certificateservice.certificateservice.ActionsField(*args, **kwargs)¶

Bases: sushy.resources.base.CompositeField

generate_csr = <sushy.resources.common.ActionField object>¶

replace_certificate = <sushy.resources.common.ActionField object>¶

class sushy.resources.certificateservice.certificateservice.CertificateLocations(connector, path, redfish_version=None, registries=None, root=None)¶

Bases: sushy.resources.base.ResourceLinksBase

property members_identities¶

A sequence with members identities

name = <sushy.resources.base.Field object>¶

The name of the collection

class sushy.resources.certificateservice.certificateservice.CertificateService(connector, path='', redfish_version=None, registries=None, reader=None, json_doc=None, root=None)¶

Bases: sushy.resources.base.ResourceBase

property certificate_locations¶

Property to reference certificate locations instance

identity = <sushy.resources.base.Field object>¶

The certificate service identity

name = <sushy.resources.base.Field object>¶

The certificate service name

replace_certificate(certificate_uri, certificate_string, certificate_type)¶

Replace an existing certificate in the service.

Parameters

• certificate_uri – URI of an existing certificate.

• certificate_string – the contents of the new certificate.

• certificate_type – the type of the new certificate, one of sushy.CertificateType.

sushy.resources.certificateservice.constants module¶

class sushy.resources.certificateservice.constants.CertificateType(value)¶

Bases: enum.Enum

An enumeration.

PEM = 'PEM'¶

A Privacy Enhanced Mail (PEM)-encoded single certificate.

PEM_CHAIN = 'PEMchain'¶

A Privacy Enhanced Mail (PEM)-encoded certificate chain.

PKCS7 = 'PKCS7'¶

A Privacy Enhanced Mail (PEM)-encoded PKCS7 certificate.

class sushy.resources.certificateservice.constants.CertificateUsageType(value)¶

Bases: enum.Enum

An enumeration.

BIOS = 'BIOS'¶

This certificate is a BIOS certificate like those associated with UEFI.

DEVICE = 'Device'¶

This certificate is a device type certificate like those associated with SPDM and other standards.

PLATFORM = 'Platform'¶

This certificate is a platform type certificate like those associated with SPDM and other standards.

SSH = 'SSH'¶

This certificate is used for SSH.

USER = 'User'¶

This certificate is a user certificate like those associated with a manager account.

WEB = 'Web'¶

This certificate is a web or HTTPS certificate like those used for event destinations.

class sushy.resources.certificateservice.constants.KeyUsage(value)¶

Bases: enum.Enum

An enumeration.

CLIENT_AUTHENTICATION = 'ClientAuthentication'¶

TLS WWW client authentication.

CODE_SIGNING = 'CodeSigning'¶

Signs downloadable executable code.

CRL_SIGNING = 'CRLSigning'¶

Verifies signatures on certificate revocation lists (CRLs).

DATA_ENCIPHERMENT = 'DataEncipherment'¶

Directly enciphers raw user data without an intermediate symmetric cipher.

DECIPHER_ONLY = 'DecipherOnly'¶

Deciphers data while performing a key agreement.

DIGITAL_SIGNATURE = 'DigitalSignature'¶

Verifies digital signatures, other than signatures on certificates and CRLs.

EMAIL_PROTECTION = 'EmailProtection'¶

Email protection.

ENCIPHER_ONLY = 'EncipherOnly'¶

Enciphers data while performing a key agreement.

KEY_AGREEMENT = 'KeyAgreement'¶

Key agreement.

KEY_CERT_SIGN = 'KeyCertSign'¶

Verifies signatures on public key certificates.

KEY_ENCIPHERMENT = 'KeyEncipherment'¶

Enciphers private or secret keys.

NON_REPUDIATION = 'NonRepudiation'¶

Verifies digital signatures, other than signatures on certificates and CRLs, and provides a non-repudiation service that protects against the signing entity falsely denying some action.

OCSP_SIGNING = 'OCSPSigning'¶

Signs OCSP responses.

SERVER_AUTHENTICATION = 'ServerAuthentication'¶

TLS WWW server authentication.

TIMESTAMPING = 'Timestamping'¶

Binds the hash of an object to a time.

Module contents¶