问题:

I tried installing M2Crypto and facing problems. I don't want to force my customers to use such libraries which are difficult to install. So, I thought I would give pyOpenSSL a try. I am able to get the public key from pem certificate but am not able to find any way to verify the signature.

回答1:

You simply can't do this with pyOpenSSL. It is a very limited wrapper around openssl library. But I have a guess what's wrong with building M2Crypto on your host. Try running:

export SWIG_FEATURES=-I/usr/include/openssl

before trying to install M2Crypto.

回答2:

I believe that what you want is the code from this blog entry (it's mine):

http://www.v13.gr/blog/?p=303

As you can see you have to use DER to handle the certificate and get the appropriate parts. That took me a considerable amount of effort and days so let me know whether it worked for you too.