QSslCertificate¶

The QSslCertificate class provides a convenient API for an X509 certificate. More…

Synopsis¶

Functions¶

def __eq__ (other)
def __ne__ (other)
def clear ()
def digest ([algorithm=QCryptographicHash.Md5])
def effectiveDate ()
def expiryDate ()
def extensions ()
def handle ()
def isBlacklisted ()
def isNull ()
def isSelfSigned ()
def issuerDisplayName ()
def issuerInfo (attribute)
def issuerInfo (info)
def issuerInfoAttributes ()
def publicKey ()
def serialNumber ()
def subjectAlternativeNames ()
def subjectDisplayName ()
def subjectInfo (attribute)
def subjectInfo (info)
def subjectInfoAttributes ()
def swap (other)
def toDer ()
def toPem ()
def toText ()
def version ()

Static functions¶

def fromData (data[, format=QSsl.Pem])
def fromDevice (device[, format=QSsl.Pem])
def fromPath (path[, format=QSsl.Pem[, syntax=QSslCertificate.PatternSyntax.FixedString]])
def importPkcs12 (device, key, cert[, caCertificates=None[, passPhrase=QByteArray()]])
def verify (certificateChain[, hostName=””])

Detailed Description¶

QSslCertificate stores an X509 certificate, and is commonly used to verify the identity and store information about the local host, a remotely connected peer, or a trusted third party Certificate Authority.

There are many ways to construct a QSslCertificate . The most common way is to call peerCertificate() , which returns a QSslCertificate object, or peerCertificateChain() , which returns a list of them. You can also load certificates from a DER (binary) or PEM (Base64) encoded bundle, typically stored as one or more local files, or in a Qt Resource.

You can call isNull() to check if your certificate is null. By default, QSslCertificate constructs a null certificate. A null certificate is invalid, but an invalid certificate is not necessarily null. If you want to reset all contents in a certificate, call clear() .

After loading a certificate, you can find information about the certificate, its subject, and its issuer, by calling one of the many accessor functions, including version() , serialNumber() , issuerInfo() and subjectInfo() . You can call effectiveDate() and expiryDate() to check when the certificate starts being effective and when it expires. The publicKey() function returns the certificate subject’s public key as a QSslKey . You can call issuerInfo() or subjectInfo() to get detailed information about the certificate issuer and its subject.

Internally, QSslCertificate is stored as an X509 structure. You can access this handle by calling handle() , but the results are likely to not be portable.

See also

QSslSocket QSslKey QSslCipher QSslError

class PySide6.QtNetwork.QSslCertificate(device[, format=QSsl.Pem])¶

PySide6.QtNetwork.QSslCertificate([data=QByteArray()[, format=QSsl.Pem]])

PySide6.QtNetwork.QSslCertificate(other)

Parameters

other – PySide6.QtNetwork.QSslCertificate
data – PySide6.QtCore.QByteArray
device – PySide6.QtCore.QIODevice
format – EncodingFormat

Constructs a QSslCertificate by reading format encoded data from device and using the first certificate found. You can later call isNull() to see if device contained a certificate, and if this certificate was loaded successfully.

Constructs a QSslCertificate by parsing the format encoded data and using the first available certificate found. You can later call isNull() to see if data contained a certificate, and if this certificate was loaded successfully.

Constructs an identical copy of other.

PySide6.QtNetwork.QSslCertificate.SubjectInfo¶

Describes keys that you can pass to issuerInfo() or subjectInfo() to get information about the certificate issuer or subject.

Constant

Description

QSslCertificate.Organization

“O” The name of the organization.

QSslCertificate.CommonName

“CN” The common name; most often this is used to store the host name.

QSslCertificate.LocalityName

“L” The locality.

QSslCertificate.OrganizationalUnitName

“OU” The organizational unit name.

QSslCertificate.CountryName

“C” The country.

QSslCertificate.StateOrProvinceName

“ST” The state or province.

QSslCertificate.DistinguishedNameQualifier

The distinguished name qualifier

QSslCertificate.SerialNumber

The certificate’s serial number

QSslCertificate.EmailAddress

The email address associated with the certificate

PySide6.QtNetwork.QSslCertificate.PatternSyntax¶

The syntax used to interpret the meaning of the pattern.

Constant

Description

QSslCertificate.PatternSyntax.RegularExpression

A rich Perl-like pattern matching syntax.

QSslCertificate.PatternSyntax.Wildcard

This provides a simple pattern matching syntax similar to that used by shells (command interpreters) for “file globbing”. See fromWildcard() .

QSslCertificate.PatternSyntax.FixedString

The pattern is a fixed string. This is equivalent to using the pattern on a string in which all metacharacters are escaped using escape(). This is the default.

New in version 5.15.

PySide6.QtNetwork.QSslCertificate.clear()¶

Clears the contents of this certificate, making it a null certificate.

See also

isNull()

PySide6.QtNetwork.QSslCertificate.digest([algorithm=QCryptographicHash.Md5])¶

Parameters: algorithm – Algorithm
Return type: PySide6.QtCore.QByteArray

Returns a cryptographic digest of this certificate. By default, an MD5 digest will be generated, but you can also specify a custom algorithm.

PySide6.QtNetwork.QSslCertificate.effectiveDate()¶

Return type: PySide6.QtCore.QDateTime

Returns the date-time that the certificate becomes valid, or an empty QDateTime if this is a null certificate.

See also

expiryDate()

PySide6.QtNetwork.QSslCertificate.expiryDate()¶

Return type: PySide6.QtCore.QDateTime

Returns the date-time that the certificate expires, or an empty QDateTime if this is a null certificate.

See also

effectiveDate()

PySide6.QtNetwork.QSslCertificate.extensions()¶

Return type

Returns a list containing the X509 extensions of this certificate.

static PySide6.QtNetwork.QSslCertificate.fromData(data[, format=QSsl.Pem])¶

Parameters

data – PySide6.QtCore.QByteArray
format – EncodingFormat

Return type

Searches for and parses all certificates in data that are encoded in the specified format and returns them in a list of certificates.

See also

fromDevice()

static PySide6.QtNetwork.QSslCertificate.fromDevice(device[, format=QSsl.Pem])¶

Parameters

device – PySide6.QtCore.QIODevice
format – EncodingFormat

Return type

Searches for and parses all certificates in device that are encoded in the specified format and returns them in a list of certificates.

See also

fromData()

static PySide6.QtNetwork.QSslCertificate.fromPath(path[, format=QSsl.Pem[, syntax=QSslCertificate.PatternSyntax.FixedString]])¶

Parameters

path – str
format – EncodingFormat
syntax – PatternSyntax

Return type

Searches all files in the path for certificates encoded in the specified format and returns them in a list. path must be a file or a pattern matching one or more files, as specified by syntax.

Example:

certs = QSslCertificate.fromPath("C:/ssl/certificate.*.pem",()
                                             QSsl.Pem, QSslCertificate.Wildcard)
for cert in certs:
    print(cert.issuerInfo(QSslCertificate.Organization))

Table of Contents

Previous topic

Next topic

QSslCertificate¶

Synopsis¶

Functions¶

Static functions¶

Detailed Description¶

Constant	Description
QSslCertificate.Organization	“O” The name of the organization.
QSslCertificate.CommonName	“CN” The common name; most often this is used to store the host name.
QSslCertificate.LocalityName	“L” The locality.
QSslCertificate.OrganizationalUnitName	“OU” The organizational unit name.
QSslCertificate.CountryName	“C” The country.
QSslCertificate.StateOrProvinceName	“ST” The state or province.
QSslCertificate.DistinguishedNameQualifier	The distinguished name qualifier
QSslCertificate.SerialNumber	The certificate’s serial number
QSslCertificate.EmailAddress	The email address associated with the certificate

Constant	Description
QSslCertificate.PatternSyntax.RegularExpression	A rich Perl-like pattern matching syntax.
QSslCertificate.PatternSyntax.Wildcard	This provides a simple pattern matching syntax similar to that used by shells (command interpreters) for “file globbing”. See `fromWildcard()` .
QSslCertificate.PatternSyntax.FixedString	The pattern is a fixed string. This is equivalent to using the pattern on a string in which all metacharacters are escaped using escape(). This is the default.