Add REST endpoints for OCSP responses

VERSION.txt

@@ -1 +1 @@
-0.9.11
+0.10.0

pkilint/rest/__init__.py

@@ -3,7 +3,7 @@
 
 from fastapi import FastAPI, HTTPException
 
-from pkilint.rest import cabf_serverauth, cabf_smime
+from pkilint.rest import cabf_serverauth, cabf_smime, ocsp
 from pkilint.rest import model
 
 _PKILINT_VERSION = version('pkilint')
@@ -20,6 +20,7 @@
     cabf_smime.create_linter_group_instance(),
     cabf_serverauth.create_linter_group_instance(),
 ]
+_OCSP_PKIX_LINTER = ocsp.create_ocsp_response_linter()
 
 
 @app.get('/version')
@@ -94,3 +95,17 @@ def certificate_lint(linter_group_name: str, linter_name: str, doc: model.Certif
     parsed_doc = doc.parsed_document
 
     return linter_instance.lint(parsed_doc)
+
+@app.get('/ocsp/pkix')
+def ocsp_linter_validations() -> List[model.Validation]:
+    """Returns the set of validations performed by the OCSP response linter"""
+
+    return _OCSP_PKIX_LINTER.validations
+
+@app.post('/ocsp/pkix')
+def ocsp_response_lint(doc: model.OcspResponseModel) -> model.LintResultList:
+    """Lints the specified OCSP response"""
+
+    parsed_doc = doc.parsed_document
+
+    return _OCSP_PKIX_LINTER.lint(parsed_doc)

pkilint/rest/model.py

@@ -129,6 +129,29 @@ def validate(self) -> 'CertificateModel':
     def parsed_document(self):
         return self._parsed_document
 
+class OcspResponseModel(DocumentModel):
+    _parsed_document = None
+
+    @model_validator(mode='after')
+    def validate(self) -> 'OcspResponseModel':
+        super()._validate()
+
+        if self.pem is not None:
+            try:
+                self._parsed_document = loader.load_ocsp_response(self.pem, 'request', 'request')
+            except PyAsn1Error as e:
+                raise ValueError('Invalid PEM text specified') from e
+        else:
+            ocsp_der_response = base64.b64decode(self.b64)
+            try:
+                self._parsed_document = loader.load_ocsp_response(ocsp_der_response, 'request', 'request')
+            except PyAsn1Error as e:
+                raise ValueError('Invalid Base-64 encoding specified') from e
+        return self
+
+    @property
+    def parsed_document(self):
+        return self._parsed_document
 
 def create_unprocessable_entity_error_detail(message: str, error_type: str = 'value_error'):
     return [

pkilint/rest/ocsp.py

@@ -0,0 +1,12 @@
+from pkilint.pkix import ocsp, create_attribute_decoder, create_extension_decoder, extension, name
+from pkilint.rest import model
+
+def create_ocsp_response_linter():
+    return model.Linter(
+        validator=ocsp.create_pkix_ocsp_response_validator_container(
+            [
+                ocsp.create_response_decoder(),
+                create_attribute_decoder(name.ATTRIBUTE_TYPE_MAPPINGS),
+                create_extension_decoder(extension.EXTENSION_MAPPINGS),
+            ], []), name='ocsp_linter'
+    )