Merge pull request #42 from falencastro/verifier-to-verify

Replaces .verifier with .verify method
openSUSE · Sep 20, 2024 · 622b1f1 · 622b1f1
2 parents 6abc53e + bf3c19c
commit 622b1f1
Showing 1 changed file with 7 additions and 9 deletions.
diff --git a/cepces/core.py b/cepces/core.py
@@ -243,25 +243,23 @@ def _verify_certificate_signature(self, cert, issuer):
         """
         sig_hash_alg = cert.signature_hash_algorithm
         sig_bytes = cert.signature
+        sig_data = cert.tbs_certificate_bytes
         issuer_public_key = issuer.public_key()
 
         # Check the type of public key
         if isinstance(issuer_public_key, rsa.RSAPublicKey):
-            verifier = issuer_public_key.verifier(
-                sig_bytes, padding.PKCS1v15(), sig_hash_alg,
+            issuer_public_key.verify(
+                sig_bytes, sig_data, padding.PKCS1v15(), sig_hash_alg,
             )
         elif isinstance(issuer_public_key, ec.EllipticCurvePublicKey):
-            verifier = issuer_public_key.verifier(
-                sig_bytes, ec.ECDSA(sig_hash_alg),
+            issuer_public_key.verify(
+                sig_bytes, sig_data, ec.ECDSA(sig_hash_alg),
             )
         else:
-            verifier = issuer_public_key.verifier(
-                sig_bytes, sig_hash_alg,
+            issuer_public_key.verify(
+                sig_bytes, sig_data, sig_hash_alg,
             )
 
-        verifier.update(cert.tbs_certificate_bytes)
-        verifier.verify()
-
         return True
 
     def _resolve_chain(self, data, child=None):