Trusting in custom certificates
By default, PKI Express will only allow operations performed by valid Brazilian certificates emmited by ICP-Brasil organization. However, if you want to use another kind of the certificate, it's required to configure the PkiExpressOperator class or any class that inherits from it.
Using Lacuna's testing certificates
In case you are testing your aplication using our mock certificates (see link), you have to set the trust_lacuna_test_root
field to true
to trust in these certificates:
operator.trust_lacuna_test_root = True
Using a custom certificate
In case you are using other kinds of certificates, you need to provide each certificate roots for the operator class.
operator.add_trusted_root('/path/to/root1.cer')
operator.add_trusted_root('/path/to/root2.cer')
operator.add_trusted_root('/path/to/root3.cer')