[Mintaa]

#python

Nie moge podpisać XML'a certyfikatem.

from lxml import etree
from signxml import XMLSigner, XMLVerifier
from OpenSSL import crypto

Korzystam z biblioteki [https://pypi.org/project/signxml/](https://pypi.org/project/signxml/)

certpw = b'password'
with open("C:\Users\Test\Desktop\Test2\Certs\Adam.p12",
 "rb") as file:
 p12 = crypto.load_pkcs12(file.read(), certpw)
with open("./Certs/LEK_CERT.crt", "wb") as fobj:
 fobj.write(crypto.dump_certificate(crypto.FILETYPE_PEM, p12.get_certificate()))
with open("./Certs/LEK_priv.key", "wb") as fobj:
 fobj.write(crypto.dump_privatekey(crypto.FILETYPE_PEM, p12.get_privatekey()))

data_to_sign = ""
cert = open("LEK_CERT.crt").read()
key = open("LEK_priv.key").read()
root = etree.fromstring(data_to_sign)
signed_root = XMLSigner().sign(root, key=key, cert=cert)
verified_data = XMLVerifier().verify(signed_root).signed_xml

Cały czas wali mi błędami

Traceback (most recent call last):
 File "C:\Users\Test\.virtualenvs\Test2\lib\site-packages\signxml\util__init__.py", line 214, in _add_cert_to_store
 X509StoreContext(store, cert).verify_certificate()
 File "C:\Users\Test\.virtualenvs\Test2\lib\site-packages\OpenSSL\crypto.py", line 1932, in verify_certificate
 raise self._exception_from_context()
OpenSSL.crypto.X509StoreContextError: unable to get local issuer certificate

[apo]

@Mintaa:
Spróbuj zainstalować najnowszy pip, wywalić i dodać na nowo openssl.
A jeszcze pip install certifi

[Mintaa]

@apo: nie pomaga