MetadataResolver: Instantiate trusted certs directly

No need to hackishly decode from PEM to DER
moreati · Oct 5, 2015 · d3fdcaa · d3fdcaa
1 parent ef597bf
commit d3fdcaa
Showing 1 changed file with 1 addition and 2 deletions.
diff --git a/u2flib_server/attestation/resolvers.py b/u2flib_server/attestation/resolvers.py
@@ -72,8 +72,7 @@ def _name_key(name):
 
     def _index(self, metadata):
         for cert_pem in metadata.trustedCertificates:
-            cert_der = ''.join(cert_pem.splitlines()[1:-1]).decode('base64')
-            cert = x509.load_der_x509_certificate(cert_der, default_backend())
+            cert = x509.load_pem_x509_certificate(cert_pem, default_backend())
             subject = self._name_key(cert.subject)
             if subject not in self._certs:
                 self._certs[subject] = []