@@ -243,25 +243,23 @@ def _verify_certificate_signature(self, cert, issuer):
243
243
"""
244
244
sig_hash_alg = cert .signature_hash_algorithm
245
245
sig_bytes = cert .signature
246
+ sig_data = cert .tbs_certificate_bytes
246
247
issuer_public_key = issuer .public_key ()
247
248
248
249
# Check the type of public key
249
250
if isinstance (issuer_public_key , rsa .RSAPublicKey ):
250
- verifier = issuer_public_key .verifier (
251
- sig_bytes , padding .PKCS1v15 (), sig_hash_alg ,
251
+ issuer_public_key .verify (
252
+ sig_bytes , sig_data , padding .PKCS1v15 (), sig_hash_alg ,
252
253
)
253
254
elif isinstance (issuer_public_key , ec .EllipticCurvePublicKey ):
254
- verifier = issuer_public_key .verifier (
255
- sig_bytes , ec .ECDSA (sig_hash_alg ),
255
+ issuer_public_key .verify (
256
+ sig_bytes , sig_data , ec .ECDSA (sig_hash_alg ),
256
257
)
257
258
else :
258
- verifier = issuer_public_key .verifier (
259
- sig_bytes , sig_hash_alg ,
259
+ issuer_public_key .verify (
260
+ sig_bytes , sig_data , sig_hash_alg ,
260
261
)
261
262
262
- verifier .update (cert .tbs_certificate_bytes )
263
- verifier .verify ()
264
-
265
263
return True
266
264
267
265
def _resolve_chain (self , data , child = None ):
0 commit comments