3
ꅭh> @ s d dl mZmZmZ d dlZd dlZd dlZd dlZd dlm Z d dl
Z
d dl m Z d dl
mZmZmZmZ d dlmZmZ d dlmZ d dlmZ d d lmZ d d
lm Z m Z m Z d d l m Z d d l!m"Z"m#Z#m$Z$m%Z% d
d Z&dd Z'G dd de(Z)G dd de(Z*e
j+ej,G dd de-Z.G dd de-Z/e j0e.G dd de-Z1e j0e.G dd d e-Z2e j0e.G d d d e-Z3e j0e.G d d d e-Z4e j0e.G d!d" d"e-Z5G d#d$ d$e-Z6e j0e.G d%d& d&e-Z7e j0e.G d'd( d(e-Z8e j0e.G d)d* d*e-Z9e j0e.G d+d, d,e-Z:G d-d. d.e-Z;G d/d0 d0e ZG d5d6 d6e-Z?G d7d8 d8e-Z@G d9d: d:e-ZAe j0e.G d;d< d d>e-ZCe j0e.G d?d@ d@e-ZDe j0e.G dAdB dBe-ZEG dCdD dDe ZFdEdF eFD ZGe j0e.G dGdH dHe-ZHe j0e.G dIdJ dJe-ZIe j0e.G dKdL dLe-ZJG dMdN dNe-ZKG dOdP dPe-ZLe j0e.G dQdR dRe-ZMe j0e.G dSdT dTe-ZNe j0e.G dUdV dVe-ZOe j0e.G dWdX dXe-ZPe j0e.G dYdZ dZe-ZQe j0e.G d[d\ d\e-ZRe j0e.G d]d^ d^e-ZSe j0e.G d_d` d`e-ZTe j0e.G dadb dbe-ZUe j0e.G dcdd dde-ZVdS )e )absolute_importdivisionprint_functionN)Enum)utils)
BIT_STRING DERReaderOBJECT_IDENTIFIERSEQUENCE)
constant_time
serialization)EllipticCurvePublicKey) RSAPublicKey)SignedCertificateTimestamp) GeneralName IPAddress OtherName)RelativeDistinguishedName)CRLEntryExtensionOID ExtensionOIDOCSPExtensionOIDObjectIdentifierc C s t | tr | jtjjtjj}nt | tr@| jtjj tjj
}n| jtjjtjj }t |}|j
t}|jt}|jt} W d Q R X | |jt |j s|j W d Q R X | j dkrtd| j}tj|j S )Nr zInvalid public key encoding)
isinstancer Z public_bytesr ZEncodingZDERZ PublicFormatZPKCS1r
ZX962ZUncompressedPointZSubjectPublicKeyInfor Zread_single_elementr
Z read_elementr r Zis_emptyZread_any_elementZ read_byte
ValueErrordatahashlibZsha1digest)
public_keyr Z
serializedreaderZpublic_key_info algorithm r "/usr/lib64/python3.6/extensions.py _key_identifier_from_public_key& s.
r" c s. fdd} fdd} fdd}|||fS )Nc s t t| S )N)lengetattr)self)
field_namer r!
len_methodO s z*_make_sequence_methods..len_methodc s t t| S )N)iterr$ )r% )r& r r! iter_methodR s z+_make_sequence_methods..iter_methodc s t | | S )N)r$ )r% idx)r& r r! getitem_methodU s z._make_sequence_methods..getitem_methodr )r& r' r) r+ r )r& r! _make_sequence_methodsN s r, c s e Zd Z fddZ ZS )DuplicateExtensionc s t t| j| || _d S )N)superr- __init__oid)r% msgr0 ) __class__r r! r/ \ s zDuplicateExtension.__init__)__name__
__module__ __qualname__r/
__classcell__r r )r2 r! r- [ s r- c s e Zd Z fddZ ZS )ExtensionNotFoundc s t t| j| || _d S )N)r. r7 r/ r0 )r% r1 r0 )r2 r r! r/ b s zExtensionNotFound.__init__)r3 r4 r5 r/ r6 r r )r2 r! r7 a s r7 c @ s e Zd Zejdd ZdS )
ExtensionTypec C s dS )zK
Returns the oid associated with the given extension type.
Nr )r% r r r! r0 i s zExtensionType.oidN)r3 r4 r5 abcabstractpropertyr0 r r r r! r8 g s r8 c @ s: e Zd Zdd Zdd Zdd Zed\ZZZ dd Z
d
S )
Extensionsc C s
|| _ d S )N) _extensions)r%
extensionsr r r! r/ q s zExtensions.__init__c C s0 x| D ]}|j |kr|S qW tdj||d S )NzNo {} extension was found)r0 r7 format)r% r0 extr r r! get_extension_for_oidt s
z Extensions.get_extension_for_oidc C sD |t krtdx | D ]}t|j|r|S qW tdj||jd S )Nz|UnrecognizedExtension can't be used with get_extension_for_class because more than one instance of the class may be present.zNo {} extension was found)UnrecognizedExtension TypeErrorr valuer7 r> r0 )r% Zextclassr? r r r! get_extension_for_class{ s
z"Extensions.get_extension_for_classr< c C s dj | jS )Nz)r> r< )r% r r r! __repr__ s zExtensions.__repr__N) r3 r4 r5 r/ r@ rD r, __len____iter__ __getitem__rE r r r r! r; p s
r; c @ sD e Zd ZejZdd Zdd Zdd Zdd Z d d
Z
e j d Z
d S )
CRLNumberc C s t |tjstd|| _d S )Nz crl_number must be an integer)r six
integer_typesrB _crl_number)r%
crl_numberr r r! r/ s zCRLNumber.__init__c C s t |tstS | j|jkS )N)r rI NotImplementedrM )r% otherr r r! __eq__ s
zCRLNumber.__eq__c C s
| |k S )Nr )r% rO r r r! __ne__ s zCRLNumber.__ne__c C s
t | jS )N)hashrM )r% r r r! __hash__ s zCRLNumber.__hash__c C s dj | jS )Nz)r> rM )r% r r r! rE s zCRLNumber.__repr__rL N)r3 r4 r5 r Z
CRL_NUMBERr0 r/ rP rQ rS rE r read_only_propertyrM r r r r! rI s rI c @ sp e Zd ZejZdd Zedd Zedd Z dd Z
d d
Z d d Z d
d Z
ejdZejdZejdZdS )AuthorityKeyIdentifierc C sv |d k|d kkrt d|d k rBt|}tdd |D sBtd|d k r`t|tj r`td|| _|| _|| _ d S )NzXauthority_cert_issuer and authority_cert_serial_number must both be present or both Nonec s s | ]}t |tV qd S )N)r r ).0xr r r! s z2AuthorityKeyIdentifier.__init__..z;authority_cert_issuer must be a list of GeneralName objectsz/authority_cert_serial_number must be an integer)
r listallrB r rJ rK _key_identifier_authority_cert_issuer _authority_cert_serial_number)r% key_identifierauthority_cert_issuer authority_cert_serial_numberr r r! r/ s
z AuthorityKeyIdentifier.__init__c C s t |}| |d d dS )N)r^ r_ r` )r" )clsr r r r r! from_issuer_public_key s
z-AuthorityKeyIdentifier.from_issuer_public_keyc C s( t |tr|j}n|jj}| |d d dS )N)r^ r_ r` )r SubjectKeyIdentifierr rC )ra Zskir r r r! "from_issuer_subject_key_identifier s
z9AuthorityKeyIdentifier.from_issuer_subject_key_identifierc C s
dj | S )Nz)r> )r% r r r! rE s z AuthorityKeyIdentifier.__repr__c C s2 t |tstS | j|jko0| j|jko0| j|jkS )N)r rU rN r^ r_ r` )r% rO r r r! rP s
z AuthorityKeyIdentifier.__eq__c C s
| |k S )Nr )r% rO r r r! rQ s z AuthorityKeyIdentifier.__ne__c C s, | j d krd }n
t| j }t| j|| jfS )N)r_ tuplerR r^ r` )r% Zacir r r! rS s
z AuthorityKeyIdentifier.__hash__r[ r\ r] N)r3 r4 r5 r ZAUTHORITY_KEY_IDENTIFIERr0 r/ classmethodrb rd rE rP rQ rS r rT r^ r_ r` r r r r! rU s !
rU c @ sP e Zd ZejZdd Zedd Ze j
dZ dd Z dd Z
d
d Zd d
ZdS )rc c C s
|| _ d S )N)_digest)r% r r r r! r/ s z SubjectKeyIdentifier.__init__c C s | t |S )N)r" )ra r r r r! from_public_key s z$SubjectKeyIdentifier.from_public_keyrg c C s dj | jS )Nz$)r> r )r% r r r! rE s z SubjectKeyIdentifier.__repr__c C s t |tstS tj| j|jS )N)r rc rN r Zbytes_eqr )r% rO r r r! rP s
zSubjectKeyIdentifier.__eq__c C s
| |k S )Nr )r% rO r r r! rQ # s zSubjectKeyIdentifier.__ne__c C s
t | jS )N)rR r )r% r r r! rS & s z SubjectKeyIdentifier.__hash__N)r3 r4 r5 r ZSUBJECT_KEY_IDENTIFIERr0 r/ rf rh r rT r rE rP rQ rS r r r r! rc
s
rc c @ sH e Zd ZejZdd Zed\ZZ Z
dd Z dd Z dd Z
d
d Zd S )
AuthorityInformationAccessc C s, t |}tdd |D s"td|| _d S )Nc s s | ]}t |tV qd S )N)r AccessDescription)rV rW r r r! rX 0 s z6AuthorityInformationAccess.__init__..z@Every item in the descriptions list must be an AccessDescription)rY rZ rB
_descriptions)r% descriptionsr r r! r/ . s
z#AuthorityInformationAccess.__init__rk c C s dj | jS )Nz )r> rk )r% r r r! rE : s z#AuthorityInformationAccess.__repr__c C s t |tstS | j|jkS )N)r ri rN rk )r% rO r r r! rP = s
z!AuthorityInformationAccess.__eq__c C s
| |k S )Nr )r% rO r r r! rQ C s z!AuthorityInformationAccess.__ne__c C s t t| jS )N)rR re rk )r% r r r! rS F s z#AuthorityInformationAccess.__hash__N)r3 r4 r5 r Z AUTHORITY_INFORMATION_ACCESSr0 r/ r, rF rG rH rE rP rQ rS r r r r! ri * s
ri c @ sH e Zd ZejZdd Zed\ZZ Z
dd Z dd Z dd Z
d
d Zd S )
SubjectInformationAccessc C s, t |}tdd |D s"td|| _d S )Nc s s | ]}t |tV qd S )N)r rj )rV rW r r r! rX P s z4SubjectInformationAccess.__init__..z@Every item in the descriptions list must be an AccessDescription)rY rZ rB rk )r% rl r r r! r/ N s
z!SubjectInformationAccess.__init__rk c C s dj | jS )Nz )r> rk )r% r r r! rE Z s z!SubjectInformationAccess.__repr__c C s t |tstS | j|jkS )N)r rm rN rk )r% rO r r r! rP ] s
z SubjectInformationAccess.__eq__c C s
| |k S )Nr )r% rO r r r! rQ c s z SubjectInformationAccess.__ne__c C s t t| jS )N)rR re rk )r% r r r! rS f s z!SubjectInformationAccess.__hash__N)r3 r4 r5 r ZSUBJECT_INFORMATION_ACCESSr0 r/ r, rF rG rH rE rP rQ rS r r r r! rm J s
rm c @ sH e Zd Zdd Zdd Zdd Zdd Zd d
Zej d Z
ej d Z d
S )rj c C s4 t |tstdt |ts$td|| _|| _d S )Nz)access_method must be an ObjectIdentifierz%access_location must be a GeneralName)r r rB r _access_method_access_location)r%
access_methodaccess_locationr r r! r/ k s
zAccessDescription.__init__c C s
dj | S )NzY)r> )r% r r r! rE u s zAccessDescription.__repr__c C s& t |tstS | j|jko$| j|jkS )N)r rj rN rp rq )r% rO r r r! rP { s
zAccessDescription.__eq__c C s
| |k S )Nr )r% rO r r r! rQ s zAccessDescription.__ne__c C s t | j| jfS )N)rR rp rq )r% r r r! rS s zAccessDescription.__hash__rn ro N) r3 r4 r5 r/ rE rP rQ rS r rT rp rq r r r r! rj j s
rj c @ sN e Zd ZejZdd ZejdZ ejdZ
dd Z dd Z d d
Z
d d Zd
S )BasicConstraintsc C s^ t |tstd|d k r(| r(td|d k rNt |tj sF|dk rNtd|| _|| _d S )Nzca must be a boolean valuez)path_length must be None when ca is Falser z2path_length must be a non-negative integer or None)r boolrB r rJ rK _ca _path_length)r% ca path_lengthr r r! r/ s
zBasicConstraints.__init__rt ru c C s
dj | S )Nz:)r> )r% r r r! rE s zBasicConstraints.__repr__c C s& t |tstS | j|jko$| j|jkS )N)r rr rN rv rw )r% rO r r r! rP s
zBasicConstraints.__eq__c C s
| |k S )Nr )r% rO r r r! rQ s zBasicConstraints.__ne__c C s t | j| jfS )N)rR rv rw )r% r r r! rS s zBasicConstraints.__hash__N)r3 r4 r5 r ZBASIC_CONSTRAINTSr0 r/ r rT rv rw rE rP rQ rS r r r r! rr s
rr c @ sD e Zd ZejZdd ZejdZ dd Z
dd Z dd Z d
d Z
d S )
DeltaCRLIndicatorc C s t |tjstd|| _d S )Nz crl_number must be an integer)r rJ rK rB rL )r% rM r r r! r/ s zDeltaCRLIndicator.__init__rL c C s t |tstS | j|jkS )N)r rx rN rM )r% rO r r r! rP s
zDeltaCRLIndicator.__eq__c C s
| |k S )Nr )r% rO r r r! rQ s zDeltaCRLIndicator.__ne__c C s
t | jS )N)rR rM )r% r r r! rS s zDeltaCRLIndicator.__hash__c C s
dj | S )Nz.)r> )r% r r r! rE s zDeltaCRLIndicator.__repr__N)r3 r4 r5 r ZDELTA_CRL_INDICATORr0 r/ r rT rM rP rQ rS rE r r r r! rx s
rx c @ sH e Zd ZejZdd Zed\ZZ Z
dd Z dd Z dd Z
d
d Zd S )
CRLDistributionPointsc C s, t |}tdd |D s"td|| _d S )Nc s s | ]}t |tV qd S )N)r DistributionPoint)rV rW r r r! rX s z1CRLDistributionPoints.__init__..z?distribution_points must be a list of DistributionPoint objects)rY rZ rB _distribution_points)r% distribution_pointsr r r! r/ s z CRLDistributionPoints.__init__r{ c C s dj | jS )Nz)r> r{ )r% r r r! rE s z CRLDistributionPoints.__repr__c C s t |tstS | j|jkS )N)r ry rN r{ )r% rO r r r! rP s
z CRLDistributionPoints.__eq__c C s
| |k S )Nr )r% rO r r r! rQ s z CRLDistributionPoints.__ne__c C s t t| jS )N)rR re r{ )r% r r r! rS s z CRLDistributionPoints.__hash__N)r3 r4 r5 r ZCRL_DISTRIBUTION_POINTSr0 r/ r, rF rG rH rE rP rQ rS r r r r! ry s ry c @ sH e Zd ZejZdd Zed\ZZ Z
dd Z dd Z dd Z
d
d Zd S )
FreshestCRLc C s, t |}tdd |D s"td|| _d S )Nc s s | ]}t |tV qd S )N)r rz )rV rW r r r! rX s z'FreshestCRL.__init__..z?distribution_points must be a list of DistributionPoint objects)rY rZ rB r{ )r% r| r r r! r/ s zFreshestCRL.__init__r{ c C s dj | jS )Nz)r> r{ )r% r r r! rE s zFreshestCRL.__repr__c C s t |tstS | j|jkS )N)r r} rN r{ )r% rO r r r! rP s
zFreshestCRL.__eq__c C s
| |k S )Nr )r% rO r r r! rQ s zFreshestCRL.__ne__c C s t t| jS )N)rR re r{ )r% r r r! rS s zFreshestCRL.__hash__N)r3 r4 r5 r Z FRESHEST_CRLr0 r/ r, rF rG rH rE rP rQ rS r r r r! r} s r} c @ s\ e Zd Zdd Zdd Zdd Zdd Zd d
Zej d Z
ej d Z ej d
Z ej dZ
dS )rz c C s |r|rt d|r6t|}tdd |D s6td|rLt|tsLtd|rrt|}tdd |D srtd|rt|t stdd |D rtd |rtj|kstj |krt d
|r| r|p| rt d || _
|| _ || _ || _
d S ) NzOYou cannot provide both full_name and relative_name, at least one must be None.c s s | ]}t |tV qd S )N)r r )rV rW r r r! rX & s z-DistributionPoint.__init__..z/full_name must be a list of GeneralName objectsz1relative_name must be a RelativeDistinguishedNamec s s | ]}t |tV qd S )N)r r )rV rW r r r! rX 3 s z2crl_issuer must be None or a list of general namesc s s | ]}t |tV qd S )N)r ReasonFlags)rV rW r r r! rX : s z0reasons must be None or frozenset of ReasonFlagszLunspecified and remove_from_crl are not valid reasons in a DistributionPointzPYou must supply crl_issuer, full_name, or relative_name when reasons is not None)r rY rZ rB r r frozensetr~ unspecifiedremove_from_crl
_full_name_relative_name_reasons _crl_issuer)r% full_name
relative_namereasons
crl_issuerr r r! r/ sB
zDistributionPoint.__init__c C s
dj | S )Nz})r> )r% r r r! rE R s zDistributionPoint.__repr__c C s> t |tstS | j|jko<| j|jko<| j|jko<| j|jkS )N)r rz rN r r r r )r% rO r r r! rP Y s
zDistributionPoint.__eq__c C s
| |k S )Nr )r% rO r r r! rQ d s zDistributionPoint.__ne__c C sH | j d k rt| j }nd }| jd k r0t| j}nd }t|| j| j|fS )N)r re r rR r r )r% fnr r r r! rS g s
zDistributionPoint.__hash__r r r r N)r3 r4 r5 r/ rE rP rQ rS r rT r r r r r r r r! rz s 5
rz c @ s4 e Zd ZdZdZdZdZdZdZdZ dZ
d Z d
Z d S ) r~ r Z
keyCompromiseZ cACompromiseZaffiliationChanged
supersededZcessationOfOperationZcertificateHoldZprivilegeWithdrawnZ aACompromiseZ
removeFromCRLN)
r3 r4 r5 r Zkey_compromiseZ
ca_compromiseZaffiliation_changedr Zcessation_of_operationZcertificate_holdZprivilege_withdrawnZ
aa_compromiser r r r r! r~ z s r~ c @ sN e Zd ZejZdd Zdd Zdd Zdd Z d d
Z
e j d Z
e j d Zd
S )PolicyConstraintsc C sd |d k r t |tj r td|d k rrequire_explicit_policy must be a non-negative integer or Nonez=inhibit_policy_mapping must be a non-negative integer or NonezSAt least one of require_explicit_policy and inhibit_policy_mapping must not be None)r rJ rK rB r _require_explicit_policy_inhibit_policy_mapping)r% require_explicit_policyinhibit_policy_mappingr r r! r/ s
zPolicyConstraints.__init__c C s
dj | S )Nz{)r> )r% r r r! rE s zPolicyConstraints.__repr__c C s& t |tstS | j|jko$| j|jkS )N)r r rN r r )r% rO r r r! rP s
zPolicyConstraints.__eq__c C s
| |k S )Nr )r% rO r r r! rQ s zPolicyConstraints.__ne__c C s t | j| jfS )N)rR r r )r% r r r! rS s zPolicyConstraints.__hash__r r N)r3 r4 r5 r ZPOLICY_CONSTRAINTSr0 r/ rE rP rQ rS r rT r r r r r r! r s r c @ sH e Zd ZejZdd Zed\ZZ Z
dd Z dd Z dd Z
d
d Zd S )
CertificatePoliciesc C s, t |}tdd |D s"td|| _d S )Nc s s | ]}t |tV qd S )N)r PolicyInformation)rV rW r r r! rX s z/CertificatePolicies.__init__..z;Every item in the policies list must be a PolicyInformation)rY rZ rB _policies)r% Zpoliciesr r r! r/ s
z CertificatePolicies.__init__r c C s dj | jS )Nz)r> r )r% r r r! rE s z CertificatePolicies.__repr__c C s t |tstS | j|jkS )N)r r rN r )r% rO r r r! rP s
zCertificatePolicies.__eq__c C s
| |k S )Nr )r% rO r r r! rQ s zCertificatePolicies.__ne__c C s t t| jS )N)rR re r )r% r r r! rS s z CertificatePolicies.__hash__N)r3 r4 r5 r ZCERTIFICATE_POLICIESr0 r/ r, rF rG rH rE rP rQ rS r r r r! r s
r c @ sH e Zd Zdd Zdd Zdd Zdd Zd d
Zej d Z
ej d Z d
S )r c C sH t |tstd|| _|r>t|}tdd |D s>td|| _d S )Nz-policy_identifier must be an ObjectIdentifierc s s | ]}t |tjtfV qd S )N)r rJ Z text_type
UserNotice)rV rW r r r! rX s z-PolicyInformation.__init__..zMpolicy_qualifiers must be a list of strings and/or UserNotice objects or None)r r rB _policy_identifierrY rZ _policy_qualifiers)r% policy_identifierpolicy_qualifiersr r r! r/ s
zPolicyInformation.__init__c C s
dj | S )Nze)r> )r% r r r! rE s zPolicyInformation.__repr__c C s& t |tstS | j|jko$| j|jkS )N)r r rN r r )r% rO r r r! rP s
zPolicyInformation.__eq__c C s
| |k S )Nr )r% rO r r r! rQ s zPolicyInformation.__ne__c C s( | j d k rt| j }nd }t| j|fS )N)r re rR r )r% Zpqr r r! rS
s
zPolicyInformation.__hash__r r N) r3 r4 r5 r/ rE rP rQ rS r rT r r r r r r! r s
r c @ sH e Zd Zdd Zdd Zdd Zdd Zd d
Zej d Z
ej d Z d
S )r c C s( |rt |t rtd|| _|| _d S )Nz2notice_reference must be None or a NoticeReference)r NoticeReferencerB _notice_reference_explicit_text)r% notice_reference
explicit_textr r r! r/ s
zUserNotice.__init__c C s
dj | S )NzV)r> )r% r r r! rE " s zUserNotice.__repr__c C s& t |tstS | j|jko$| j|jkS )N)r r rN r r )r% rO r r r! rP ( s
zUserNotice.__eq__c C s
| |k S )Nr )r% rO r r r! rQ 1 s zUserNotice.__ne__c C s t | j| jfS )N)rR r r )r% r r r! rS 4 s zUserNotice.__hash__r r N) r3 r4 r5 r/ rE rP rQ rS r rT r r r r r r! r s
r c @ sH e Zd Zdd Zdd Zdd Zdd Zd d
Zej d Z
ej d Z d
S )r c C s2 || _ t|}tdd |D s(td|| _d S )Nc s s | ]}t |tV qd S )N)r int)rV rW r r r! rX ? s z+NoticeReference.__init__..z)notice_numbers must be a list of integers)
_organizationrY rZ rB _notice_numbers)r% organizationnotice_numbersr r r! r/ < s
zNoticeReference.__init__c C s
dj | S )NzU)r> )r% r r r! rE D s zNoticeReference.__repr__c C s& t |tstS | j|jko$| j|jkS )N)r r rN r r )r% rO r r r! rP J s
zNoticeReference.__eq__c C s
| |k S )Nr )r% rO r r r! rQ S s zNoticeReference.__ne__c C s t | jt| jfS )N)rR r re r )r% r r r! rS V s zNoticeReference.__hash__r r N) r3 r4 r5 r/ rE rP rQ rS r rT r r r r r r! r ; s
r c @ sH e Zd ZejZdd Zed\ZZ Z
dd Z dd Z dd Z
d
d Zd S )
ExtendedKeyUsagec C s, t |}tdd |D s"td|| _d S )Nc s s | ]}t |tV qd S )N)r r )rV rW r r r! rX c s z,ExtendedKeyUsage.__init__..z9Every item in the usages list must be an ObjectIdentifier)rY rZ rB _usages)r% Zusagesr r r! r/ a s
zExtendedKeyUsage.__init__r c C s dj | jS )Nz)r> r )r% r r r! rE l s zExtendedKeyUsage.__repr__c C s t |tstS | j|jkS )N)r r rN r )r% rO r r r! rP o s
zExtendedKeyUsage.__eq__c C s
| |k S )Nr )r% rO r r r! rQ u s zExtendedKeyUsage.__ne__c C s t t| jS )N)rR re r )r% r r r! rS x s zExtendedKeyUsage.__hash__N)r3 r4 r5 r ZEXTENDED_KEY_USAGEr0 r/ r, rF rG rH rE rP rQ rS r r r r! r ] s r c @ s2 e Zd ZejZdd Zdd Zdd Zdd Z d S )
OCSPNoCheckc C s t |tstS dS )NT)r r rN )r% rO r r r! rP s
zOCSPNoCheck.__eq__c C s
| |k S )Nr )r% rO r r r! rQ s zOCSPNoCheck.__ne__c C s t tS )N)rR r )r% r r r! rS s zOCSPNoCheck.__hash__c C s dS )Nzr )r% r r r! rE s zOCSPNoCheck.__repr__N)
r3 r4 r5 r Z
OCSP_NO_CHECKr0 rP rQ rS rE r r r r! r | s
r c @ s2 e Zd ZejZdd Zdd Zdd Zdd Z d S )
PrecertPoisonc C s t |tstS dS )NT)r r rN )r% rO r r r! rP s
zPrecertPoison.__eq__c C s
| |k S )Nr )r% rO r r r! rQ s zPrecertPoison.__ne__c C s t tS )N)rR r )r% r r r! rS s zPrecertPoison.__hash__c C s dS )Nzr )r% r r r! rE s zPrecertPoison.__repr__N)
r3 r4 r5 r ZPRECERT_POISONr0 rP rQ rS rE r r r r! r s
r c @ sH e Zd ZejZdd Zed\ZZ Z
dd Z dd Z dd Z
d
d Zd S )
TLSFeaturec C s: t |}tdd |D s(t|dkr0td|| _d S )Nc s s | ]}t |tV qd S )N)r TLSFeatureType)rV rW r r r! rX s z&TLSFeature.__init__..r z@features must be a list of elements from the TLSFeatureType enum)rY rZ r# rB _features)r% Zfeaturesr r r! r/ s zTLSFeature.__init__r c C s
dj | S )Nz$)r> )r% r r r! rE s zTLSFeature.__repr__c C s t |tstS | j|jkS )N)r r rN r )r% rO r r r! rP s
zTLSFeature.__eq__c C s
| |k S )Nr )r% rO r r r! rQ s zTLSFeature.__ne__c C s t t| jS )N)rR re r )r% r r r! rS s zTLSFeature.__hash__N)r3 r4 r5 r Z TLS_FEATUREr0 r/ r, rF rG rH rE rP rQ rS r r r r! r s
r c @ s e Zd ZdZdZdS )r N)r3 r4 r5 Zstatus_requestZstatus_request_v2r r r r! r s r c C s i | ] }||j qS r )rC )rV rW r r r!
s r c @ sD e Zd ZejZdd Zdd Zdd Zdd Z d d
Z
e j d Z
d S )
InhibitAnyPolicyc C s. t |tjstd|dk r$td|| _d S )Nz skip_certs must be an integerr z)skip_certs must be a non-negative integer)r rJ rK rB r _skip_certs)r%
skip_certsr r r! r/ s
zInhibitAnyPolicy.__init__c C s
dj | S )Nz-)r> )r% r r r! rE s zInhibitAnyPolicy.__repr__c C s t |tstS | j|jkS )N)r r rN r )r% rO r r r! rP s
zInhibitAnyPolicy.__eq__c C s
| |k S )Nr )r% rO r r r! rQ s zInhibitAnyPolicy.__ne__c C s
t | jS )N)rR r )r% r r r! rS s zInhibitAnyPolicy.__hash__r N)r3 r4 r5 r ZINHIBIT_ANY_POLICYr0 r/ rE rP rQ rS r rT r r r r r! r s r c @ s e Zd ZejZdd ZejdZ ejdZ
ejdZ ejdZ ejdZ
ejdZejd Zed
d Zed d
Zdd Zdd Zdd Zdd ZdS )KeyUsagec
C sP | r|s| rt d|| _|| _|| _|| _|| _|| _|| _|| _| | _ d S )NzKencipher_only and decipher_only can only be true when key_agreement is true)
r _digital_signature_content_commitment_key_encipherment_data_encipherment_key_agreement_key_cert_sign _crl_sign_encipher_only_decipher_only)
r% digital_signaturecontent_commitmentkey_enciphermentdata_encipherment
key_agreement
key_cert_signcrl_sign
encipher_only
decipher_onlyr r r! r/ s zKeyUsage.__init__r r r r r r r c C s | j stdn| jS d S )Nz7encipher_only is undefined unless key_agreement is true)r r r )r% r r r! r s zKeyUsage.encipher_onlyc C s | j stdn| jS d S )Nz7decipher_only is undefined unless key_agreement is true)r r r )r% r r r! r % s zKeyUsage.decipher_onlyc C s< y| j }| j}W n tk
r, d}d}Y nX dj| ||S )NFa- )r r r r> )r% r r r r r! rE . s
zKeyUsage.__repr__c C sz t |tstS | j|jkox| j|jkox| j|jkox| j|jkox| j|jkox| j|jkox| j |j kox| j
|j
kox| j |j kS )N) r r rN r r r r r r r r r )r% rO r r r! rP C s
zKeyUsage.__eq__c C s
| |k S )Nr )r% rO r r r! rQ S s zKeyUsage.__ne__c
C s, t | j| j| j| j| j| j| j| j| j f S )N)
rR r r r r r r r r r )r% r r r! rS V s zKeyUsage.__hash__N)r3 r4 r5 r Z KEY_USAGEr0 r/ r rT r r r r r r r propertyr r rE rP rQ rS r r r r! r s
r c @ sV e Zd ZejZdd Zdd Zdd Zdd Z d d
Z
d d Z e j
d
Ze j
dZdS )NameConstraintsc C s |d k r4t |}tdd |D s*td| j| |d k rht |}tdd |D s^td| j| |d kr|d krtd|| _|| _d S )Nc s s | ]}t |tV qd S )N)r r )rV rW r r r! rX m s z+NameConstraints.__init__..z@permitted_subtrees must be a list of GeneralName objects or Nonec s s | ]}t |tV qd S )N)r r )rV rW r r r! rX w s z?excluded_subtrees must be a list of GeneralName objects or NonezIAt least one of permitted_subtrees and excluded_subtrees must not be None)rY rZ rB _validate_ip_namer _permitted_subtrees_excluded_subtrees)r% permitted_subtreesexcluded_subtreesr r r! r/ j s"
zNameConstraints.__init__c C s& t |tstS | j|jko$| j|jkS )N)r r rN r r )r% rO r r r! rP s
zNameConstraints.__eq__c C s
| |k S )Nr )r% rO r r r! rQ s zNameConstraints.__ne__c C s t dd |D rtdd S )Nc s s. | ]&}t |to$t |jtjtjf V qd S )N)r r rC ipaddressZ IPv4NetworkZ IPv6Network)rV namer r r! rX s z4NameConstraints._validate_ip_name..zGIPAddress name constraints must be an IPv4Network or IPv6Network object)anyrB )r% Ztreer r r! r s
z!NameConstraints._validate_ip_namec C s
dj | S )Nze)r> )r% r r r! rE s zNameConstraints.__repr__c C s@ | j d k rt| j }nd }| jd k r0t| j}nd }t||fS )N)r re r rR )r% ZpsZesr r r! rS s
zNameConstraints.__hash__r r N)r3 r4 r5 r ZNAME_CONSTRAINTSr0 r/ rP rQ r rE rS r rT r r r r r r! r f s
r c @ sR e Zd Zdd ZejdZejdZejdZdd Z dd Z
d
d Z d d
Z dS ) Extensionc C s: t |tstdt |ts$td|| _|| _|| _d S )Nz2oid argument must be an ObjectIdentifier instance.z critical must be a boolean value)r r rB rs _oid _critical_value)r% r0 criticalrC r r r! r/ s
zExtension.__init__r r r c C s
dj | S )Nz@)r> )r% r r r! rE s zExtension.__repr__c C s2 t |tstS | j|jko0| j|jko0| j|jkS )N)r r rN r0 r rC )r% rO r r r! rP s
zExtension.__eq__c C s
| |k S )Nr )r% rO r r r! rQ s zExtension.__ne__c C s t | j| j| jfS )N)rR r0 r rC )r% r r r! rS s zExtension.__hash__N)
r3 r4 r5 r/ r rT r0 r rC rE rP rQ rS r r r r! r s
r c @ sJ e Zd Zdd Zed\ZZZdd Zdd Z dd Z
d
d Z d d
Z dS ) GeneralNamesc C s, t |}tdd |D s"td|| _d S )Nc s s | ]}t |tV qd S )N)r r )rV rW r r r! rX s z(GeneralNames.__init__..z^Every item in the general_names list must be an object conforming to the GeneralName interface)rY rZ rB _general_names)r%
general_namesr r r! r/ s
zGeneralNames.__init__r c s0 fdd| D } t kr(dd |D }t|S )Nc 3 s | ]}t | r|V qd S )N)r )rV i)typer r! rX s z3GeneralNames.get_values_for_type..c s s | ] }|j V qd S )N)rC )rV r r r r! rX s )r rY )r% r Zobjsr )r r! get_values_for_type s z GeneralNames.get_values_for_typec C s dj | jS )Nz)r> r )r% r r r! rE s zGeneralNames.__repr__c C s t |tstS | j|jkS )N)r r rN r )r% rO r r r! rP s
zGeneralNames.__eq__c C s
| |k S )Nr )r% rO r r r! rQ s zGeneralNames.__ne__c C s t t| jS )N)rR re r )r% r r r! rS s zGeneralNames.__hash__N)
r3 r4 r5 r/ r, rF rG rH r rE rP rQ rS r r r r! r s
r c @ sP e Zd ZejZdd Zed\ZZ Z
dd Z dd Z dd Z
d
d Zd d
ZdS )SubjectAlternativeNamec C s t || _d S )N)r r )r% r r r r! r/ s z SubjectAlternativeName.__init__r c C s | j j|S )N)r r )r% r r r r! r s z*SubjectAlternativeName.get_values_for_typec C s dj | jS )Nz )r> r )r% r r r! rE s z SubjectAlternativeName.__repr__c C s t |tstS | j|jkS )N)r r rN r )r% rO r r r! rP s
z SubjectAlternativeName.__eq__c C s
| |k S )Nr )r% rO r r r! rQ s z SubjectAlternativeName.__ne__c C s
t | jS )N)rR r )r% r r r! rS s z SubjectAlternativeName.__hash__N)r3 r4 r5 r ZSUBJECT_ALTERNATIVE_NAMEr0 r/ r, rF rG rH r rE rP rQ rS r r r r! r s r c @ sP e Zd ZejZdd Zed\ZZ Z
dd Z dd Z dd Z
d
d Zd d
ZdS )IssuerAlternativeNamec C s t || _d S )N)r r )r% r r r r! r/ ' s z IssuerAlternativeName.__init__r c C s | j j|S )N)r r )r% r r r r! r , s z)IssuerAlternativeName.get_values_for_typec C s dj | jS )Nz)r> r )r% r r r! rE / s z IssuerAlternativeName.__repr__c C s t |tstS | j|jkS )N)r r rN r )r% rO r r r! rP 2 s
z IssuerAlternativeName.__eq__c C s
| |k S )Nr )r% rO r r r! rQ 8 s z IssuerAlternativeName.__ne__c C s
t | jS )N)rR r )r% r r r! rS ; s z IssuerAlternativeName.__hash__N)r3 r4 r5 r ZISSUER_ALTERNATIVE_NAMEr0 r/ r, rF rG rH r rE rP rQ rS r r r r! r # s r c @ sP e Zd ZejZdd Zed\ZZ Z
dd Z dd Z dd Z
d
d Zd d
ZdS )CertificateIssuerc C s t || _d S )N)r r )r% r r r r! r/ C s zCertificateIssuer.__init__r c C s | j j|S )N)r r )r% r r r r! r H s z%CertificateIssuer.get_values_for_typec C s dj | jS )Nz)r> r )r% r r r! rE K s zCertificateIssuer.__repr__c C s t |tstS | j|jkS )N)r r rN r )r% rO r r r! rP N s
zCertificateIssuer.__eq__c C s
| |k S )Nr )r% rO r r r! rQ T s zCertificateIssuer.__ne__c C s
t | jS )N)rR r )r% r r r! rS W s zCertificateIssuer.__hash__N)r3 r4 r5 r ZCERTIFICATE_ISSUERr0 r/ r, rF rG rH r rE rP rQ rS r r r r! r ? s r c @ sD e Zd ZejZdd Zdd Zdd Zdd Z d d
Z
e j d Z
d S )
CRLReasonc C s t |tstd|| _d S )Nz*reason must be an element from ReasonFlags)r r~ rB _reason)r% reasonr r r! r/ _ s
zCRLReason.__init__c C s dj | jS )Nz)r> r )r% r r r! rE e s zCRLReason.__repr__c C s t |tstS | j|jkS )N)r r rN r )r% rO r r r! rP h s
zCRLReason.__eq__c C s
| |k S )Nr )r% rO r r r! rQ n s zCRLReason.__ne__c C s
t | jS )N)rR r )r% r r r! rS q s zCRLReason.__hash__r N)r3 r4 r5 r Z
CRL_REASONr0 r/ rE rP rQ rS r rT r r r r r! r [ s r c @ sD e Zd ZejZdd Zdd Zdd Zdd Z d d
Z
e j d Z
d S )
InvalidityDatec C s t |tjstd|| _d S )Nz+invalidity_date must be a datetime.datetime)r datetimerB _invalidity_date)r% invalidity_dater r r! r/ { s zInvalidityDate.__init__c C s dj | jS )Nz$)r> r )r% r r r! rE s zInvalidityDate.__repr__c C s t |tstS | j|jkS )N)r r rN r )r% rO r r r! rP s
zInvalidityDate.__eq__c C s
| |k S )Nr )r% rO r r r! rQ s zInvalidityDate.__ne__c C s
t | jS )N)rR r )r% r r r! rS s zInvalidityDate.__hash__r N)r3 r4 r5 r ZINVALIDITY_DATEr0 r/ rE rP rQ rS r rT r r r r r! r w s r c @ sH e Zd ZejZdd Zed\ZZ Z
dd Z dd Z dd Z
d
d Zd S )
)PrecertificateSignedCertificateTimestampsc C s, t |}tdd |D s"td|| _d S )Nc s s | ]}t |tV qd S )N)r r )rV sctr r r! rX s zEPrecertificateSignedCertificateTimestamps.__init__..zYEvery item in the signed_certificate_timestamps list must be a SignedCertificateTimestamp)rY rZ rB _signed_certificate_timestamps)r% signed_certificate_timestampsr r r! r/ s
z2PrecertificateSignedCertificateTimestamps.__init__r c C s dj t| S )Nz/)r> rY )r% r r r! rE s z2PrecertificateSignedCertificateTimestamps.__repr__c C s t t| jS )N)rR re r )r% r r r! rS s z2PrecertificateSignedCertificateTimestamps.__hash__c C s t |tstS | j|jkS )N)r r rN r )r% rO r r r! rP s
z0PrecertificateSignedCertificateTimestamps.__eq__c C s
| |k S )Nr )r% rO r r r! rQ s z0PrecertificateSignedCertificateTimestamps.__ne__N)r3 r4 r5 r Z%PRECERT_SIGNED_CERTIFICATE_TIMESTAMPSr0 r/ r, rF rG rH rE rS rP rQ r r r r! r s r c @ sH e Zd ZejZdd Zed\ZZ Z
dd Z dd Z dd Z
d
d Zd S )
SignedCertificateTimestampsc C s, t |}tdd |D s"td|| _d S )Nc s s | ]}t |tV qd S )N)r r )rV r r r r! rX s z7SignedCertificateTimestamps.__init__..zYEvery item in the signed_certificate_timestamps list must be a SignedCertificateTimestamp)rY rZ rB r )r% r r r r! r/ s
z$SignedCertificateTimestamps.__init__r c C s dj t| S )Nz!)r> rY )r% r r r! rE s z$SignedCertificateTimestamps.__repr__c C s t t| jS )N)rR re r )r% r r r! rS s z$SignedCertificateTimestamps.__hash__c C s t |tstS | j|jkS )N)r r rN r )r% rO r r r! rP s
z"SignedCertificateTimestamps.__eq__c C s
| |k S )Nr )r% rO r r r! rQ s z"SignedCertificateTimestamps.__ne__N)r3 r4 r5 r Z SIGNED_CERTIFICATE_TIMESTAMPSr0 r/ r, rF rG rH rE rS rP rQ r r r r! r s r c @ sD e Zd ZejZdd Zdd Zdd Zdd Z d d
Z
e j d Z
d S )
OCSPNoncec C s t |tstd|| _d S )Nznonce must be bytes)r bytesrB _nonce)r% noncer r r! r/ s
zOCSPNonce.__init__c C s t |tstS | j|jkS )N)r r rN r )r% rO r r r! rP s
zOCSPNonce.__eq__c C s
| |k S )Nr )r% rO r r r! rQ s zOCSPNonce.__ne__c C s
t | jS )N)rR r )r% r r r! rS s zOCSPNonce.__hash__c C s
dj | S )Nz )r> )r% r r r! rE s zOCSPNonce.__repr__r N)r3 r4 r5 r ZNONCEr0 r/ rP rQ rS rE r rT r r r r r! r s r c @ s e Zd ZejZdd Zdd Zdd Zdd Z d d
Z
e j d Z
e j d Ze j d
Ze j dZe j dZe j dZe j dZdS )IssuingDistributionPointc C s |r,t |t s$tdd |D r,td|rLtj|ksDtj|krLtdt |tort |tort |tort |ts|td||||g}t dd |D dkrtd t
|||||||gstd
|| _ || _ || _
|| _|| _|| _|| _d S ) Nc s s | ]}t |tV qd S )N)r r~ )rV rW r r r! rX s z4IssuingDistributionPoint.__init__..z:only_some_reasons must be None or frozenset of ReasonFlagszTunspecified and remove_from_crl are not valid reasons in an IssuingDistributionPointzuonly_contains_user_certs, only_contains_ca_certs, indirect_crl and only_contains_attribute_certs must all be boolean.c S s g | ] }|r|qS r r )rV rW r r r!
3 s z5IssuingDistributionPoint.__init__.. zOnly one of the following can be set to True: only_contains_user_certs, only_contains_ca_certs, indirect_crl, only_contains_attribute_certszCannot create empty extension: if only_contains_user_certs, only_contains_ca_certs, indirect_crl, and only_contains_attribute_certs are all False, then either full_name, relative_name, or only_some_reasons must have a value.)r r rZ rB r~ r r r rs r# r _only_contains_user_certs_only_contains_ca_certs
_indirect_crl _only_contains_attribute_certs_only_some_reasonsr r ) r% r r only_contains_user_certsonly_contains_ca_certsonly_some_reasons indirect_crl only_contains_attribute_certsZcrl_constraintsr r r! r/ sP
z!IssuingDistributionPoint.__init__c C s
dj | S )NaG )r> )r% r r r! rE U s z!IssuingDistributionPoint.__repr__c C sb t |tstS | j|jko`| j|jko`| j|jko`| j|jko`| j|jko`| j|jko`| j |j kS )N)
r r rN r r r r r r r )r% rO r r r! rP a s
z IssuingDistributionPoint.__eq__c C s
| |k S )Nr )r% rO r r r! rQ p s z IssuingDistributionPoint.__ne__c C s$ t | j| j| j| j| j| j| jfS )N)rR r r r r r r r )r% r r r! rS s s z!IssuingDistributionPoint.__hash__r r r r r r r N)r3 r4 r5 r ZISSUING_DISTRIBUTION_POINTr0 r/ rE rP rQ rS r rT r r r r r r r r r r r! r s P
r c @ sH e Zd Zdd ZejdZejdZdd Zdd Z d d
Z
d d Z d
S )rA c C s" t |tstd|| _|| _d S )Nz oid must be an ObjectIdentifier)r r rB r r )r% r0 rC r r r! r/ s
z UnrecognizedExtension.__init__r r c C s
dj | S )Nz7)r> )r% r r r! rE s z UnrecognizedExtension.__repr__c C s& t |tstS | j|jko$| j|jkS )N)r rA rN r0 rC )r% rO r r r! rP s
z UnrecognizedExtension.__eq__c C s
| |k S )Nr )r% rO r r r! rQ s z UnrecognizedExtension.__ne__c C s t | j| jfS )N)rR r0 rC )r% r r r! rS s z UnrecognizedExtension.__hash__N) r3 r4 r5 r/ r rT r0 rC rE rP rQ rS r r r r! rA s
rA )WZ
__future__r r r r9 r r r enumr rJ Z cryptographyr Zcryptography.hazmat._derr r r r
Z cryptography.hazmat.primitivesr r Z,cryptography.hazmat.primitives.asymmetric.ecr
Z-cryptography.hazmat.primitives.asymmetric.rsar Z*cryptography.x509.certificate_transparencyr Z cryptography.x509.general_namer r r Zcryptography.x509.namer Zcryptography.x509.oidr r r r r" r, Exceptionr- r7 Z
add_metaclassABCMetaobjectr8 r; Zregister_interfacerI rU rc ri rm rj rr rx ry r} rz r~ r r r r r r r r r r Z_TLS_FEATURE_TYPE_TO_ENUMr r r r r r r r r r r r r r rA r r r r! s (
!_ $)##^
< 2%" " qQ)& (&