File: //opt/cppython/lib/python3.8/site-packages/cryptography/x509/__pycache__/base.cpython-38.pyc
U
KD�g i � @ s4 d dl mZ d dlZd dlZd dlZd dlZd dlZd dlmZ d dl m
Z d dl m
Z
d dlmZmZmZmZmZmZmZmZ d dlmZmZ d dlmZm Z m Z m Z d d l m Z m!Z! d d
l"m#Z# e�d d d �Z$ej%e
j&e
j'e
j(e
j)e
j*e
j+e
j,e
j-f Z.G d
d� de/�Z0dddd�dd�Z1dddd�dd�Z2ddd�d d �Z3G d d � d �Z4G d d!� d!�Z5G d"d#� d#ej6�Z7G d$d%� d%e/�Z8e j9Z9G d&d'� d'ej:d(�Z;e;�<e j;� G d)d*� d*e;�Z=e j>Z>e j?Z?e j@Z@e jAZAe jBZBe jCZCe jDZDe jEZEe jFZFG d+d,� d,�ZGG d-d.� d.�ZHG d/d0� d0�ZIG d1d2� d2�ZJd3d4�d5d6�ZKdS )7� )� annotationsN)�utils)�x509)�hashes)�dsa�ec�ed448�ed25519�padding�rsa�x448�x25519)� CertificateIssuerPrivateKeyTypes�CertificatePublicKeyTypes)� Extension�
Extensions�
ExtensionType�_make_sequence_methods)�Name� _ASN1Type)�ObjectIdentifieri� � c s& e Zd Zdddd�� fdd� Z� ZS )�AttributeNotFound�strr �None)�msg�oid�returnc s t � �|� || _d S �N)�super�__init__r )�selfr r �� __class__� �C/opt/cppython/lib/python3.8/site-packages/cryptography/x509/base.pyr 8 s zAttributeNotFound.__init__��__name__�
__module__� __qualname__r �
__classcell__r$ r$ r" r% r 7 s r zExtension[ExtensionType]� list[Extension[ExtensionType]]r )� extension�
extensionsr c C s" |D ]}|j | j krtd��qd S )Nz$This extension has already been set.)r �
ValueError)r, r- �er$ r$ r% �_reject_duplicate_extension= s r0 r �0list[tuple[ObjectIdentifier, bytes, int | None]])r �
attributesr c C s$ |D ]\}}}|| krt d��qd S )Nz$This attribute has already been set.)r. )r r2 Zattr_oid�_r$ r$ r% �_reject_duplicate_attributeG s r4 �datetime.datetime��timer c C s: | j dk r2| �� }|r|nt�� }| jdd�| S | S dS )z�Normalizes a datetime to a naive datetime in UTC.
time -- datetime to normalize. Assumed to be in UTC if not timezone
aware.
N��tzinfo)r9 � utcoffset�datetime� timedelta�replace)r7 �offsetr$ r$ r% �_convert_to_naive_utc_timeQ s
r? c @ sx e Zd Zejjfddddd�dd�Zedd�d d
��Zedd�d d ��Zd
d�dd�Z ddd�dd�Z
dd�dd�Z dS )� Attributer �bytes�intr )r �value�_typer c C s || _ || _|| _d S r )�_oid�_valuerD )r! r rC rD r$ r$ r% r ` s zAttribute.__init__�r c C s | j S r )rE �r! r$ r$ r% r j s z
Attribute.oidc C s | j S r )rF rH r$ r$ r% rC n s zAttribute.valuer c C s d| j � d| j�d�S )Nz<Attribute(oid=z, value=�)>)r rC rH r$ r$ r% �__repr__r s zAttribute.__repr__�object�bool)�otherr c C s2 t |t�stS | j|jko0| j|jko0| j|jkS r )�
isinstancer@ �NotImplementedr rC rD )r! rM r$ r$ r% �__eq__u s
�
�zAttribute.__eq__c C s t | j| j| jf�S r )�hashr rC rD rH r$ r$ r% �__hash__ s zAttribute.__hash__N) r' r( r) r Z
UTF8StringrC r �propertyr rJ rP rR r$ r$ r$ r% r@ _ s �
r@ c @ sH e Zd Zddd�dd�Zed�\ZZZdd�d d
�Zd d d
�dd�Z dS )�
Attributesztyping.Iterable[Attribute]r )r2 r c C s t |�| _d S r )�list� _attributes)r! r2 r$ r$ r% r � s zAttributes.__init__rV r rG c C s d| j � d�S )Nz <Attributes(rI )rV rH r$ r$ r% rJ � s zAttributes.__repr__r r@ )r r c C s2 | D ]}|j |kr| S qtd|� d�|��d S )NzNo z attribute was found)r r )r! r �attrr$ r$ r% �get_attribute_for_oid� s
z Attributes.get_attribute_for_oidN)
r' r( r) r r �__len__�__iter__� __getitem__rJ rX r$ r$ r$ r% rT � s rT c @ s e Zd ZdZdZdS )�Versionr � N)r' r( r) Zv1�v3r$ r$ r$ r% r\ � s r\ c s& e Zd Zdddd�� fdd� Z� ZS )�InvalidVersionr rB r )r �parsed_versionr c s t � �|� || _d S r )r r r` )r! r r` r" r$ r% r � s zInvalidVersion.__init__r& r$ r$ r" r% r_ � s r_ c @ sl e Zd Zeejdd�dd���Zeejdd�dd���Zeejdd�dd ���Zeejd
d�d d ���Z d
S )�RevokedCertificaterB rG c C s dS )zG
Returns the serial number of the revoked certificate.
Nr$ rH r$ r$ r% �
serial_number� s z RevokedCertificate.serial_numberr5 c C s dS )zH
Returns the date of when this certificate was revoked.
Nr$ rH r$ r$ r% �revocation_date� s z"RevokedCertificate.revocation_datec C s dS )zl
Returns the date of when this certificate was revoked as a non-naive
UTC datetime.
Nr$ rH r$ r$ r% �revocation_date_utc� s z&RevokedCertificate.revocation_date_utcr c C s dS )zW
Returns an Extensions object containing a list of Revoked extensions.
Nr$ rH r$ r$ r% r- � s z RevokedCertificate.extensionsN)
r' r( r) rS �abc�abstractmethodrb rc rd r- r$ r$ r$ r% ra � s ra )� metaclassc @ sf e Zd Zdddd�dd�Zedd�dd ��Zedd�d
d ��Zedd�d d
��Zedd�dd��ZdS )�_RawRevokedCertificaterB r5 r �rb rc r- c C s || _ || _|| _d S r ��_serial_number�_revocation_date� _extensions�r! rb rc r- r$ r$ r% r � s z _RawRevokedCertificate.__init__rG c C s | j S r )rk rH r$ r$ r% rb � s z$_RawRevokedCertificate.serial_numberc C s t jdtjdd� | jS )Nuk Properties that return a naïve datetime object have been deprecated. Please switch to revocation_date_utc.r] )�
stacklevel)�warnings�warnr ZDeprecatedIn42rl rH r$ r$ r% rc � s �z&_RawRevokedCertificate.revocation_datec C s | j jtjjd�S )Nr8 )rl r= r; �timezone�utcrH r$ r$ r% rd � s z*_RawRevokedCertificate.revocation_date_utcc C s | j S r )rm rH r$ r$ r% r- � s z!_RawRevokedCertificate.extensionsN) r' r( r) r rS rb rc rd r- r$ r$ r$ r% rh � s
rh c @ s� e Zd Zdg g fdddd�dd�Zdd d �d
d �Zd d
d d�dd�Zdd�dddd d�dd�Zd!dd�dddd d d �d d �ZdS )"� CertificateSigningRequestBuilderN� Name | Noner+ r1 )� subject_namer- r2 c C s || _ || _|| _dS )zB
Creates an empty X.509 certificate request (v1).
N)�
_subject_namerm rV )r! rv r- r2 r$ r$ r% r � s z)CertificateSigningRequestBuilder.__init__r ��namer c C s4 t |t�std��| jdk r$td��t|| j| j�S )zF
Sets the certificate requestor's distinguished name.
�Expecting x509.Name object.N�&The subject name may only be set once.)rN r � TypeErrorrw r. rt rm rV �r! ry r$ r$ r% rv s
�z-CertificateSigningRequestBuilder.subject_namer rL ��extval�criticalr c C sD t |t�std��t|j||�}t|| j� t| j| j|f�| j �S )zE
Adds an X.509 extension to the certificate request.
�"extension must be an ExtensionType)
rN r r| r r r0 rm rt rw rV �r! r r� r, r$ r$ r% �
add_extension s
�z.CertificateSigningRequestBuilder.add_extension)�_tagr rA z_ASN1Type | None)r rC r� r c C s| t |t�std��t |t�s$td��|dk r>t |t�s>td��t|| j� |dk rZ|j}nd}t| j | j
| j|||ff��S )zK
Adds an X.509 attribute with an OID and associated value.
z oid must be an ObjectIdentifierzvalue must be bytesNztag must be _ASN1Type) rN r r| rA r r4 rV rC rt rw rm )r! r rC r� �tagr$ r$ r% �
add_attribute& s
�z.CertificateSigningRequestBuilder.add_attribute�� rsa_paddingr �_AllowedHashTypes | None�
typing.Any�%padding.PSS | padding.PKCS1v15 | None�CertificateSigningRequest�� private_key� algorithm�backendr� r c C sX | j dkrtd��|dk rHt|tjtjf�s4td��t|tj�sHtd��t �
| |||�S )zF
Signs the request using the requestor's private key.
Nz/A CertificateSigningRequest must have a subject� Padding must be PSS or PKCS1v15�&Padding is only supported for RSA keys) rw r. rN r
�PSS�PKCS1v15r| r �
RSAPrivateKey� rust_x509Zcreate_x509_csr�r! r� r� r� r� r$ r$ r% �signF s
�z%CertificateSigningRequestBuilder.sign)N)r' r( r) r rv r� r� r� r$ r$ r$ r% rt � s �
�$ ��rt c
@ s� e Zd ZU ded< ddddddg fddddddddd �d
d �Zd d d
�dd�Zd d d
�dd�Zdd d�dd�Zdd d�dd�Zdd d�d d �Z dd d�d d �Z
d d!d d"�d#d$�Z d.dd%�d&d'd(d)d*d+�d,d-�Z dS )/�CertificateBuilderr+ rm Nru z CertificatePublicKeyTypes | None�
int | None�datetime.datetime | Noner )� issuer_namerv �
public_keyrb �not_valid_before�not_valid_afterr- r c C s6 t j| _|| _|| _|| _|| _|| _|| _|| _ d S r )
r\ r^ �_version� _issuer_namerw � _public_keyrk �_not_valid_before�_not_valid_afterrm )r! r� rv r� rb r� r� r- r$ r$ r% r b s
zCertificateBuilder.__init__r rx c C sD t |t�std��| jdk r$td��t|| j| j| j| j | j
| j �S )z3
Sets the CA's distinguished name.
rz N�%The issuer name may only be set once.) rN r r| r� r. r� rw r� rk r� r� rm r} r$ r$ r% r� u s
�z CertificateBuilder.issuer_namec C sD t |t�std��| jdk r$td��t| j|| j| j| j | j
| j �S )z:
Sets the requestor's distinguished name.
rz Nr{ ) rN r r| rw r. r� r� r� rk r� r� rm r} r$ r$ r% rv � s
�z CertificateBuilder.subject_namer )�keyr c C s` t |tjtjtjtjt j
t j t
jf�s.td��| jdk r@td��t| j| j|| j| j| j| j�S )zT
Sets the requestor's public key (as found in the signing request).
z�Expecting one of DSAPublicKey, RSAPublicKey, EllipticCurvePublicKey, Ed25519PublicKey, Ed448PublicKey, X25519PublicKey, or X448PublicKey.Nz$The public key may only be set once.)rN r Z DSAPublicKeyr Z RSAPublicKeyr ZEllipticCurvePublicKeyr ZEd25519PublicKeyr ZEd448PublicKeyr
ZX25519PublicKeyr Z
X448PublicKeyr| r� r. r� r� rw rk r� r� rm )r! r� r$ r$ r% r� � s2 �� �
�z CertificateBuilder.public_keyrB ��numberr c C sh t |t�std��| jdk r$td��|dkr4td��|�� dkrHtd��t| j| j| j || j
| j | j �S )z5
Sets the certificate serial number.
�'Serial number must be of integral type.N�'The serial number may only be set once.r z%The serial number should be positive.� �3The serial number should not be more than 159 bits.)
rN rB r| rk r. �
bit_lengthr� r� rw r� r� r� rm �r! r� r$ r$ r% rb � s&
��z CertificateBuilder.serial_numberr5 r6 c C sz t |tj�std��| jdk r&td��t|�}|tk r>td��| jdk rZ|| jkrZtd��t| j | j
| j | j || j| j
�S )z7
Sets the certificate activation time.
�Expecting datetime object.Nz*The not valid before may only be set once.z>The not valid before date must be on or after 1950 January 1).zBThe not valid before date must be before the not valid after date.)rN r; r| r� r. r? �_EARLIEST_UTC_TIMEr� r� r� rw r� rk rm �r! r7 r$ r$ r% r� � s,
���z#CertificateBuilder.not_valid_beforec C sz t |tj�std��| jdk r&td��t|�}|tk r>td��| jdk rZ|| jk rZtd��t| j | j
| j | j | j|| j
�S )z7
Sets the certificate expiration time.
r� Nz)The not valid after may only be set once.z<The not valid after date must be on or after 1950 January 1.zAThe not valid after date must be after the not valid before date.)rN r; r| r� r. r? r� r� r� r� rw r� rk rm r� r$ r$ r% r� � s2
�����z"CertificateBuilder.not_valid_afterr rL r~ c C sT t |t�std��t|j||�}t|| j� t| j| j | j
| j | j | j
| j|f��S )z=
Adds an X.509 extension to the certificate.
r� )rN r r| r r r0 rm r� r� rw r� rk r� r� r� r$ r$ r% r� s
�z CertificateBuilder.add_extensionr� r r� r� r� � Certificater� c C s� | j dkrtd��| jdkr$td��| jdkr6td��| jdkrHtd��| jdkrZtd��| jdkrltd��|dk r�t|tj tj
f�s�t d��t|t j
�s�t d ��t�| |||�S )
zC
Signs the certificate using the CA's private key.
Nz&A certificate must have a subject namez&A certificate must have an issuer namez'A certificate must have a serial numberz/A certificate must have a not valid before timez.A certificate must have a not valid after timez$A certificate must have a public keyr� r� )rw r. r� rk r� r� r� rN r
r� r� r| r r� r� Zcreate_x509_certificater� r$ r$ r% r� , s.
�zCertificateBuilder.sign)N)
r' r( r) �__annotations__r r� rv r� rb r� r� r� r� r$ r$ r$ r% r� _ s(
� % ��r� c @ s� e Zd ZU ded< ded< dddg g fdddddd�d d
�Zd d d �d
d�Zdd d�dd�Zdd d�dd�Zddd d�dd�Zdd d �d d �Z d(dd �d d!d"d#d$d%�d&d'�Z
dS ))� CertificateRevocationListBuilderr+ rm zlist[RevokedCertificate]�_revoked_certificatesNru r� )r� � last_update� next_updater- �revoked_certificatesc C s" || _ || _|| _|| _|| _d S r )r� � _last_update� _next_updaterm r� )r! r� r� r� r- r� r$ r$ r% r X s
z)CertificateRevocationListBuilder.__init__r )r� r c C s< t |t�std��| jd k r$td��t|| j| j| j| j �S )Nrz r� )
rN r r| r� r. r� r� r� rm r� )r! r� r$ r$ r% r� f s
�z,CertificateRevocationListBuilder.issuer_namer5 )r� r c C sr t |tj�std��| jd k r&td��t|�}|tk r>td��| jd k rZ|| jkrZtd��t| j || j| j
| j �S )Nr� �!Last update may only be set once.�8The last update date must be on or after 1950 January 1.z9The last update date must be before the next update date.) rN r; r| r� r. r? r� r� r� r� rm r� )r! r� r$ r$ r% r� u s(
���z,CertificateRevocationListBuilder.last_update)r� r c C sr t |tj�std��| jd k r&td��t|�}|tk r>td��| jd k rZ|| jk rZtd��t| j | j|| j
| j �S )Nr� r� r� z8The next update date must be after the last update date.) rN r; r| r� r. r? r� r� r� r� rm r� )r! r� r$ r$ r% r� � s(
���z,CertificateRevocationListBuilder.next_updater rL r~ c C sL t |t�std��t|j||�}t|| j� t| j| j | j
| j|f�| j �S )zM
Adds an X.509 extension to the certificate revocation list.
r� ) rN r r| r r r0 rm r� r� r� r� r� r� r$ r$ r% r� � s
�z.CertificateRevocationListBuilder.add_extensionra )�revoked_certificater c C s2 t |t�std��t| j| j| j| j| j|f��S )z8
Adds a revoked certificate to the CRL.
z)Must be an instance of RevokedCertificate) rN ra r| r� r� r� r� rm r� )r! r� r$ r$ r% �add_revoked_certificate� s
�z8CertificateRevocationListBuilder.add_revoked_certificater� r r� r� r� �CertificateRevocationListr� c C s| | j d krtd��| jd kr$td��| jd kr6td��|d k rlt|tjtjf�sXtd��t|t j
�sltd��t � | |||�S )Nz A CRL must have an issuer namez"A CRL must have a last update timez"A CRL must have a next update timer� r� )
r� r. r� r� rN r
r� r� r| r r� r� Zcreate_x509_crlr� r$ r$ r% r� � s"
�z%CertificateRevocationListBuilder.sign)N) r' r( r) r� r r� r� r� r� r� r� r$ r$ r$ r% r� T s"
� ��r� c @ sj e Zd Zddg fdddd�dd�Zdd d �d
d �Zd d d
�dd�Zddd d�dd�Zdddd�dd�ZdS )�RevokedCertificateBuilderNr� r� r+ ri c C s || _ || _|| _d S r rj rn r$ r$ r% r � s z"RevokedCertificateBuilder.__init__rB r� c C sX t |t�std��| jd k r$td��|dkr4td��|�� dkrHtd��t|| j| j�S )Nr� r� r z$The serial number should be positiver� r� ) rN rB r| rk r. r� r� rl rm r� r$ r$ r% rb � s
� �z'RevokedCertificateBuilder.serial_numberr5 r6 c C sN t |tj�std��| jd k r&td��t|�}|tk r>td��t| j|| j �S )Nr� z)The revocation date may only be set once.z7The revocation date must be on or after 1950 January 1.)
rN r; r| rl r. r? r� r� rk rm r� r$ r$ r% rc s
� �z)RevokedCertificateBuilder.revocation_dater rL r~ c C sD t |t�std��t|j||�}t|| j� t| j| j | j|f��S )Nr� )
rN r r| r r r0 rm r� rk rl r� r$ r$ r% r� s
�z'RevokedCertificateBuilder.add_extensionr� ra )r� r c C s: | j d krtd��| jd kr$td��t| j | jt| j��S )Nz/A revoked certificate must have a serial numberz1A revoked certificate must have a revocation date)rk r. rl rh r rm )r! r� r$ r$ r% �build s
��z RevokedCertificateBuilder.build)N)r' r( r) r rb rc r� r� r$ r$ r$ r% r� � s �
r� rB rG c C s t �t�d�d�d? S )N� �bigr )rB �
from_bytes�os�urandomr$ r$ r$ r% �random_serial_number. s r� )L�
__future__r re r; r� �typingrp Z cryptographyr Z"cryptography.hazmat.bindings._rustr r� Z cryptography.hazmat.primitivesr Z)cryptography.hazmat.primitives.asymmetricr r r r r
r r r
Z/cryptography.hazmat.primitives.asymmetric.typesr r Z cryptography.x509.extensionsr r r r Zcryptography.x509.namer r Zcryptography.x509.oidr r� �Union�SHA224�SHA256�SHA384�SHA512ZSHA3_224ZSHA3_256ZSHA3_384ZSHA3_512Z_AllowedHashTypes� Exceptionr r0 r4 r? r@ rT �Enumr\ r_ r� �ABCMetara �registerrh r� r� Zload_pem_x509_certificateZload_der_x509_certificateZload_pem_x509_certificatesZload_pem_x509_csrZload_der_x509_csrZload_pem_x509_crlZload_der_x509_crlrt r� r� r� r� r$ r$ r$ r% �<module> sj (
��
$ "e v I