|
| 1 | +# for python2.7 |
| 2 | +import os |
| 3 | +from lxml import etree |
| 4 | +from signxml import XMLSigner, XMLVerifier |
| 5 | +# |
| 6 | +import const |
| 7 | + |
| 8 | +def create_cpix_user_request( |
| 9 | + key_ids, media_id, |
| 10 | + content_id, commonEncryptionScheme, |
| 11 | + private_key, public_cert, delivery_public_cert=None, |
| 12 | + use_playready=False, use_widevine=False, use_fairplay=False, |
| 13 | + nsmap=const.NSMAP |
| 14 | + ): |
| 15 | + if delivery_public_cert is None: |
| 16 | + delivery_public_cert_path = (os.path.dirname(__file__) + '/keys/qencode-public_cert.pem') |
| 17 | + delivery_public_cert = open(delivery_public_cert_path, 'rb').read() |
| 18 | + |
| 19 | + root = etree.Element('{%s}CPIX' % nsmap['cpix'], |
| 20 | + name=media_id, contentId=content_id, nsmap=nsmap) |
| 21 | + root.set('{%s}schemaLocation' % nsmap['xsi'], |
| 22 | + 'urn:dashif:org:cpix cpix.xsd') |
| 23 | + |
| 24 | + delivery_data_list = etree.SubElement(root, '{%s}DeliveryDataList' % nsmap['cpix']) |
| 25 | + delivery_data = etree.SubElement(delivery_data_list,'{%s}DeliveryData' % nsmap['cpix']) |
| 26 | + delivery_key = etree.SubElement(delivery_data, '{%s}DeliveryKey' % nsmap['cpix']) |
| 27 | + |
| 28 | + x509_data = etree.SubElement(delivery_key, '{%s}X509Data' % nsmap['ds']) |
| 29 | + x509_cert = etree.SubElement(x509_data, '{%s}X509Certificate' % nsmap['ds']) |
| 30 | + x509_cert.text = delivery_public_cert.replace( |
| 31 | + '-----BEGIN CERTIFICATE-----', '' |
| 32 | + ).replace( |
| 33 | + '-----END CERTIFICATE-----', '' |
| 34 | + ).replace('\n', '') |
| 35 | + |
| 36 | + content_key_list = etree.SubElement(root, |
| 37 | + '{%s}ContentKeyList' % nsmap['cpix']) |
| 38 | + content_key_usage_list = etree.SubElement(root, |
| 39 | + '{%s}ContentKeyUsageRuleList' % nsmap['cpix']) |
| 40 | + drm_system_list = etree.SubElement(root, |
| 41 | + '{%s}DRMSystemList' % nsmap['cpix']) |
| 42 | + |
| 43 | + for data in key_ids: |
| 44 | + if commonEncryptionScheme == 'default': |
| 45 | + etree.SubElement(content_key_list, '{%s}ContentKey' % nsmap['cpix'], kid=data['kid']) |
| 46 | + else: |
| 47 | + etree.SubElement(content_key_list, '{%s}ContentKey' % nsmap['cpix'], kid=data['kid'], |
| 48 | + commonEncryptionScheme=commonEncryptionScheme) |
| 49 | + |
| 50 | + if use_playready: |
| 51 | + etree.SubElement(drm_system_list, '{%s}DRMSystem' % nsmap['cpix'], kid=data['kid'], |
| 52 | + systemId=const.SYSTEM_ID_PLAYREADY) |
| 53 | + |
| 54 | + if use_widevine: |
| 55 | + etree.SubElement(drm_system_list, '{%s}DRMSystem' % nsmap['cpix'], kid=data['kid'], |
| 56 | + systemId=const.SYSTEM_ID_WIDEVINE) |
| 57 | + |
| 58 | + if use_fairplay: |
| 59 | + etree.SubElement(drm_system_list, '{%s}DRMSystem' % nsmap['cpix'], kid=data['kid'], |
| 60 | + systemId=const.SYSTEM_ID_FAIRPLAY) |
| 61 | + |
| 62 | + etree.SubElement(content_key_usage_list, |
| 63 | + '{%s}ContentKeyUsageRule' % nsmap['cpix'], |
| 64 | + kid=data['kid'], |
| 65 | + intendedTrackType=data['track_type']) |
| 66 | + |
| 67 | + signed_root = XMLSigner( |
| 68 | + c14n_algorithm='http://www.w3.org/TR/2001/REC-xml-c14n-20010315', |
| 69 | + signature_algorithm='rsa-sha256', |
| 70 | + digest_algorithm='sha512' |
| 71 | + ).sign(root, key=private_key, cert=public_cert) |
| 72 | + |
| 73 | + xml_text = etree.tostring(signed_root, encoding='utf-8') |
| 74 | + |
| 75 | + return xml_text |
0 commit comments