nvflare.lighter.impl.cert module

class CertBuilder(root_valid_days=360)[source]

Bases: Builder

Build certificate chain for every participant.

Handles building (creating and self-signing) the root CA certificates, creating server, client and admin certificates, and having them signed by the root CA for secure communication. If the state folder has information about previously generated certs, it loads them back and reuses them.

Parameters:

root_valid_days – validity period in days for a newly generated root CA certificate. This value does not renew or replace a root CA already stored in the provisioning state.

build(project: Project, ctx: ProvisionContext)[source]

Execute the main build logic for this builder.

Parameters:

  • project (Project) – The project to be provisioned.

  • ctx (ProvisionContext) – Context shared across builders.

finalize(project: Project, ctx: ProvisionContext)[source]

Finalize the build process and perform any cleanup.

Parameters:

  • project (Project) – The project to be provisioned.

  • ctx (ProvisionContext) – Context shared across builders.

get_pri_key_cert(participant: Participant)[source]
initialize(project: Project, ctx: ProvisionContext)[source]

Prepare the builder with any necessary pre-processing.

Parameters:

  • project (Project) – The project to be provisioned.

  • ctx (ProvisionContext) – Context shared across builders.