Merge pull request #38 from openSUSE/dmulder/bug1196658

Fix failure to parse DER encoded cert

Author: dmulder

cepces/core.py

@@ -282,10 +282,17 @@ def _resolve_chain(self, data, child=None):
         oid = x509.oid.AuthorityInformationAccessOID
 
         # Load the certificate.
-        cert = x509.load_pem_x509_certificate(
-            data.encode(),
-            default_backend(),
-        )
+        try:
+            cert = x509.load_pem_x509_certificate(
+                data.encode(),
+                default_backend(),
+            )
+        except ValueError:
+            # The cert may be DER encoded instead
+            cert = x509.load_der_x509_certificate(
+                data.encode(),
+                default_backend(),
+            )
 
         # If no child is present, this is the first cert and thus cannot be
         # verified yet.