{"action":"created","issue":{"url":"https://api.github.com/repos/mozilla/signing-clients/issues/10","labels_url":"https://api.github.com/repos/mozilla/signing-clients/issues/10/labels{/name}","comments_url":"https://api.github.com/repos/mozilla/signing-clients/issues/10/comments","events_url":"https://api.github.com/repos/mozilla/signing-clients/issues/10/events","html_url":"https://github.com/mozilla/signing-clients/issues/10","id":54914312,"number":10,"title":"Add a way to extract the serial number from a signature","user":{"login":"magopian","id":167767,"avatar_url":"https://avatars.githubusercontent.com/u/167767?v=3","gravatar_id":"","url":"https://api.github.com/users/magopian","html_url":"https://github.com/magopian","followers_url":"https://api.github.com/users/magopian/followers","following_url":"https://api.github.com/users/magopian/following{/other_user}","gists_url":"https://api.github.com/users/magopian/gists{/gist_id}","starred_url":"https://api.github.com/users/magopian/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/magopian/subscriptions","organizations_url":"https://api.github.com/users/magopian/orgs","repos_url":"https://api.github.com/users/magopian/repos","events_url":"https://api.github.com/users/magopian/events{/privacy}","received_events_url":"https://api.github.com/users/magopian/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":4,"created_at":"2015-01-20T17:38:56Z","updated_at":"2015-01-26T16:30:58Z","closed_at":null,"body":"From a discussion on irc:\r\n\r\n```\r\n18:13 < rtilder> magopian: The pkcs7 variable here: https://github.com/mozilla/olympia/pull/426/files#diff-1ff978159be740b1b8edc4fcc67c4faaL81\r\n18:16 < rtilder> It should be an M2Crypto.SMIME.PKCS7 object that allows you to inspect the signature, extract the signing certificate, and thence pull the serial number.  The\r\n                 problem is that the code for doing so might be pretty ungainly because it's M2Crypto.  So it might be worth wrapping in signing_clients.\r\n18:17 < rtilder> Errr... inspect the signature, extract the signing certificate, and then pull the serial number from that certificate.\r\n```\r\n\r\nAnd\r\n\r\n```\r\nIt would probably be something like pkcs7.get0_signers(M2Crypto.X509.X509_Stack())[0].get_serial_number()\r\n```"},"comment":{"url":"https://api.github.com/repos/mozilla/signing-clients/issues/comments/71489363","html_url":"https://github.com/mozilla/signing-clients/issues/10#issuecomment-71489363","issue_url":"https://api.github.com/repos/mozilla/signing-clients/issues/10","id":71489363,"user":{"login":"rtilder","id":250074,"avatar_url":"https://avatars.githubusercontent.com/u/250074?v=3","gravatar_id":"","url":"https://api.github.com/users/rtilder","html_url":"https://github.com/rtilder","followers_url":"https://api.github.com/users/rtilder/followers","following_url":"https://api.github.com/users/rtilder/following{/other_user}","gists_url":"https://api.github.com/users/rtilder/gists{/gist_id}","starred_url":"https://api.github.com/users/rtilder/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/rtilder/subscriptions","organizations_url":"https://api.github.com/users/rtilder/orgs","repos_url":"https://api.github.com/users/rtilder/repos","events_url":"https://api.github.com/users/rtilder/events{/privacy}","received_events_url":"https://api.github.com/users/rtilder/received_events","type":"User","site_admin":false},"created_at":"2015-01-26T16:30:58Z","updated_at":"2015-01-26T16:30:58Z","body":"Not this commit but another that I will also be merging shortly."}}