ruạṛ
a L��f$� � @ s d dl Z d dlZd dlZd dlZd dlZd dlmZ d dlmZ d dlm Z d dl m Z m Z d dlmZ d dlmZ d dlmZmZ d d lmZ d d lmZmZmZmZm Z m Z m Z m Z m Z d d l!m"Z"m#Z# d d l$m%Z%m&Z&m'Z'm(Z( ej)d ddd�Z*ee+d�dd�Z,e-d�dd�Z.G dd� de/�Z0G dd� de/�Z1G dd� de j2d �Z3G d d � d �Z4G d d � d e3�Z5G d!d"� d"e3�Z6G d#d$� d$e3�Z7G d%d&� d&e3�Z8G d'd(� d(e3�Z9G d)d*� d*�Z:G d+d,� d,e3�Z;G d-d.� d.e3�Z<G d/d0� d0e3�Z=G d1d2� d2e3�Z>G d3d4� d4�Z?G d5d6� d6ej@�ZAeAjBeAjCeAjDeAjEeAjFeAjGeAjHeAjId7�ZJeAjBd8eAjCd9eAjDd:eAjEd;eAjFd<eAjGd=eAjHd>eAjId?iZKG d@dA� dAe3�ZLG dBdC� dCe3�ZMG dDdE� dE�ZNG dFdG� dG�ZOG dHdI� dI�ZPG dJdK� dKe3�ZQG dLdM� dMe3�ZRG dNdO� dOe3�ZSG dPdQ� dQe3�ZTG dRdS� dSej@�ZUdTdU� eUD �ZVG dVdW� dWe3�ZWG dXdY� dYe3�ZXG dZd[� d[e3�ZYG d\d]� d]ejZe* �Z[G d^d_� d_�Z\G d`da� dae3�Z]G dbdc� dce3�Z^G ddde� dee3�Z_G dfdg� dge3�Z`G dhdi� die3�ZaG djdk� dke3�ZbG dldm� dme3�ZcG dndo� doe3�ZdG dpdq� dqe3�ZeG drds� dse3�ZfdS )t� N)�utils)�asn1)�x509)� constant_time� serialization)�EllipticCurvePublicKey)� RSAPublicKey)�#CERTIFICATE_ISSUER_PUBLIC_KEY_TYPES� CERTIFICATE_PUBLIC_KEY_TYPES)�SignedCertificateTimestamp) �DNSName� DirectoryName� GeneralName� IPAddress� OtherName� RFC822Name� RegisteredID�UniformResourceIdentifier�_IPADDRESS_TYPES)�Name�RelativeDistinguishedName)�CRLEntryExtensionOID� ExtensionOID�OCSPExtensionOID�ObjectIdentifier�ExtensionTypeVar� ExtensionTypeT)�bound� covariant�� public_key�returnc C sl t | t�r | �tjjtjj�}n>t | t�r@| �tjj tjj �}n | �tjjtjj �}t � |�}t�|��� S �N)� isinstancer � public_bytesr �Encoding�DER� PublicFormat�PKCS1r �X962�UncompressedPoint�SubjectPublicKeyInfor �parse_spki_for_data�hashlib�sha1�digest)r �data� serialized� r2 ��/sparta/input/_build_configuration/image_build+validate/lib/bmcenv/lib64/python3.9/site-packages/cryptography/x509/extensions.py� _key_identifier_from_public_key1 s � �� r4 �� field_namec s4 t d�� fdd� }� fdd�}� fdd�}|||fS )N�r! c s t t| � ��S r" )�len�getattr��selfr5 r2 r3 � len_methodJ s z*_make_sequence_methods.<locals>.len_methodc s t t| � ��S r" )�iterr9 r: r5 r2 r3 � iter_methodM s z+_make_sequence_methods.<locals>.iter_methodc s t | � �| S r" )r9 )r; �idxr5 r2 r3 �getitem_methodP s z._make_sequence_methods.<locals>.getitem_method)�int)r6 r< r> r@ r2 r5 r3 �_make_sequence_methodsI s rB c s& e Zd Zeedd�� fdd� Z� ZS )�DuplicateExtensionN��msg�oidr! c s t t| ��|� || _d S r" )�superrC �__init__rF �r; rE rF �� __class__r2 r3 rH W s zDuplicateExtension.__init__��__name__� __module__� __qualname__�strr rH � __classcell__r2 r2 rJ r3 rC V s rC c s& e Zd Zeedd�� fdd� Z� ZS )�ExtensionNotFoundNrD c s t t| ��|� || _d S r" )rG rR rH rF rI rJ r2 r3 rH ] s zExtensionNotFound.__init__rL r2 r2 rJ r3 rR \ s rR c @ s* e Zd ZU eje ed< ed�dd�ZdS )r rF r7 c C s t d�| ���dS )z7 Serializes the extension type to DER. z8public_bytes is not implemented for extension type {0!r}N)�NotImplementedError�formatr: r2 r2 r3 r$ e s ��zExtensionType.public_bytesN) rM rN rO �typing�ClassVarr �__annotations__�bytesr$ r2 r2 r2 r3 r b s )� metaclassc @ sd e Zd Zejd dd�dd�Zedd�dd�Zeje d d �d d �Z e d �\Z Z Zed�dd�ZdS )� ExtensionszExtension[ExtensionType]N)� extensionsr! c C s t |�| _d S r" )�list� _extensions)r; r[ r2 r2 r3 rH q s zExtensions.__init__)rF r! c C s0 | D ]}|j |kr| S qtd�|�|��d S )N�No {} extension was found)rF rR rT )r; rF �extr2 r2 r3 �get_extension_for_oidv s z Extensions.get_extension_for_oidzExtension[ExtensionTypeVar])�extclassr! c C sD |t u rtd��| D ]}t|j|�r| S qtd�|�|j��d S )Nz|UnrecognizedExtension can't be used with get_extension_for_class because more than one instance of the class may be present.r^ )�UnrecognizedExtension� TypeErrorr# �valuerR rT rF )r; ra r_ r2 r2 r3 �get_extension_for_class s � �z"Extensions.get_extension_for_classr] r7 c C s d� | j�S )Nz<Extensions({})>)rT r] r: r2 r2 r3 �__repr__� s zExtensions.__repr__)rM rN rO rU �IterablerH r r` �Typer re rB �__len__�__iter__� __getitem__rP rf r2 r2 r2 r3 rZ p s � � � rZ c @ sn e Zd ZejZedd�dd�Zee d�dd�Z ed�d d �Z e d�d d �Z eed�d d��Zed�dd�ZdS )� CRLNumberN�� crl_numberr! c C s t |t�std��|| _d S �Nz crl_number must be an integer�r# rA rc � _crl_number�r; rn r2 r2 r3 rH � s zCRLNumber.__init__��otherr! c C s t |t�stS | j|jkS r" )r# rl �NotImplementedrn �r; rt r2 r2 r3 �__eq__� s zCRLNumber.__eq__r7 c C s t | j�S r" ��hashrn r: r2 r2 r3 �__hash__� s zCRLNumber.__hash__c C s d� | j�S )Nz<CRLNumber({})>)rT rn r: r2 r2 r3 rf � s zCRLNumber.__repr__c C s | j S r" �rq r: r2 r2 r3 rn � s zCRLNumber.crl_numberc C s t �| �S r" �� rust_x509�encode_extension_valuer: r2 r2 r3 r$ � s zCRLNumber.public_bytes)rM rN rO r � CRL_NUMBERrF rA rH �object�boolrw rz rP rf �propertyrn rX r$ r2 r2 r2 r3 rl � s rl c @ s� e Zd ZejZeje ejej e eje dd�dd�Z e ed d�dd��Ze dd d �d d ��Zed �d d�Zeed�dd�Ze d �dd�Zeeje d �dd��Zeejeje d �dd��Zeeje d �dd��Zed �dd�Z dS ) �AuthorityKeyIdentifierN)�key_identifier�authority_cert_issuer� authority_cert_serial_numberr! c C sr |d u |d u krt d��|d urBt|�}tdd� |D ��sBtd��|d ur\t|t�s\td��|| _|| _|| _d S )NzXauthority_cert_issuer and authority_cert_serial_number must both be present or both Nonec s s | ]}t |t�V qd S r" �r# r ��.0�xr2 r2 r3 � <genexpr>� s z2AuthorityKeyIdentifier.__init__.<locals>.<genexpr>z;authority_cert_issuer must be a list of GeneralName objectsz/authority_cert_serial_number must be an integer) � ValueErrorr\ �allrc r# rA �_key_identifier�_authority_cert_issuer� _authority_cert_serial_number)r; r� r� r� r2 r2 r3 rH � s* ���� �z AuthorityKeyIdentifier.__init__r c C s t |�}| |d d d�S �N)r� r� r� �r4 )�clsr r/ r2 r2 r3 �from_issuer_public_key� s �z-AuthorityKeyIdentifier.from_issuer_public_key�SubjectKeyIdentifier)�skir! c C s | |j d d d�S r� )r/ )r� r� r2 r2 r3 �"from_issuer_subject_key_identifier� s �z9AuthorityKeyIdentifier.from_issuer_subject_key_identifierr7 c C s d� | �S )Nz�<AuthorityKeyIdentifier(key_identifier={0.key_identifier!r}, authority_cert_issuer={0.authority_cert_issuer}, authority_cert_serial_number={0.authority_cert_serial_number})>�rT r: r2 r2 r3 rf � s ��z AuthorityKeyIdentifier.__repr__rs c C s2 t |t�stS | j|jko0| j|jko0| j|jkS r" )r# r� ru r� r� r� rv r2 r2 r3 rw � s ���z AuthorityKeyIdentifier.__eq__c C s, | j d u rd }n t| j �}t| j|| jf�S r" )r� �tuplery r� r� )r; �acir2 r2 r3 rz s �z AuthorityKeyIdentifier.__hash__c C s | j S r" )r� r: r2 r2 r3 r� s z%AuthorityKeyIdentifier.key_identifierc C s | j S r" )r� r: r2 r2 r3 r� s z,AuthorityKeyIdentifier.authority_cert_issuerc C s | j S r" )r� r: r2 r2 r3 r� s z3AuthorityKeyIdentifier.authority_cert_serial_numberc C s t �| �S r" r| r: r2 r2 r3 r$ s z#AuthorityKeyIdentifier.public_bytes) rM rN rO r �AUTHORITY_KEY_IDENTIFIERrF rU �OptionalrX rg r rA rH � classmethodr r� r� rP rf r� r� rw rz r� r� �Listr� r� r$ r2 r2 r2 r3 r� � s2 � &� � �r� c @ s� e Zd ZejZedd�dd�Zee d d�dd��Z e ed�d d ��Z e ed�d d ��Z ed�d d�Zeed�dd�Zed�dd�Zed�dd�ZdS )r� N)r/ r! c C s || _ d S r" ��_digest)r; r/ r2 r2 r3 rH # s z SubjectKeyIdentifier.__init__r c C s | t |��S r" r� )r� r r2 r2 r3 �from_public_key& s z$SubjectKeyIdentifier.from_public_keyr7 c C s | j S r" r� r: r2 r2 r3 r/ , s zSubjectKeyIdentifier.digestc C s | j S r" r� r: r2 r2 r3 r� 0 s z#SubjectKeyIdentifier.key_identifierc C s d� | j�S )Nz$<SubjectKeyIdentifier(digest={0!r})>)rT r/ r: r2 r2 r3 rf 4 s z SubjectKeyIdentifier.__repr__rs c C s t |t�stS t�| j|j�S r" )r# r� ru r �bytes_eqr/ rv r2 r2 r3 rw 7 s zSubjectKeyIdentifier.__eq__c C s t | j�S r" )ry r/ r: r2 r2 r3 rz = s z SubjectKeyIdentifier.__hash__c C s t �| �S r" r| r: r2 r2 r3 r$ @ s z!SubjectKeyIdentifier.public_bytes)rM rN rO r �SUBJECT_KEY_IDENTIFIERrF rX rH r� r r� r� r/ r� rP rf r� r� rw rA rz r$ r2 r2 r2 r3 r� s �r� c @ sp e Zd ZejZejd dd�dd�Ze d�\Z Z Z e d�dd �Zeed �d d �Zed�d d�Zed�dd�ZdS )�AuthorityInformationAccess�AccessDescriptionN�� descriptionsr! c C s, t |�}tdd� |D ��s"td��|| _d S )Nc s s | ]}t |t�V qd S r" �r# r� r� r2 r2 r3 r� K � z6AuthorityInformationAccess.__init__.<locals>.<genexpr>�@Every item in the descriptions list must be an AccessDescription�r\ r� rc � _descriptions�r; r� r2 r2 r3 rH G s �z#AuthorityInformationAccess.__init__r� r7 c C s d� | j�S )Nz <AuthorityInformationAccess({})>�rT r� r: r2 r2 r3 rf U s z#AuthorityInformationAccess.__repr__rs c C s t |t�stS | j|jkS r" )r# r� ru r� rv r2 r2 r3 rw X s z!AuthorityInformationAccess.__eq__c C s t t| j��S r" �ry r� r� r: r2 r2 r3 rz ^ s z#AuthorityInformationAccess.__hash__c C s t �| �S r" r| r: r2 r2 r3 r$ a s z'AuthorityInformationAccess.public_bytes)rM rN rO r � AUTHORITY_INFORMATION_ACCESSrF rU rg rH rB ri rj rk rP rf r� r� rw rA rz rX r$ r2 r2 r2 r3 r� D s � r� c @ sp e Zd ZejZejd dd�dd�Ze d�\Z Z Z e d�dd �Zeed �d d �Zed�d d�Zed�dd�ZdS )�SubjectInformationAccessr� Nr� c C s, t |�}tdd� |D ��s"td��|| _d S )Nc s s | ]}t |t�V qd S r" r� r� r2 r2 r3 r� l r� z4SubjectInformationAccess.__init__.<locals>.<genexpr>r� r� r� r2 r2 r3 rH h s �z!SubjectInformationAccess.__init__r� r7 c C s d� | j�S )Nz <SubjectInformationAccess({})>r� r: r2 r2 r3 rf v s z!SubjectInformationAccess.__repr__rs c C s t |t�stS | j|jkS r" )r# r� ru r� rv r2 r2 r3 rw y s z SubjectInformationAccess.__eq__c C s t t| j��S r" r� r: r2 r2 r3 rz s z!SubjectInformationAccess.__hash__c C s t �| �S r" r| r: r2 r2 r3 r$ � s z%SubjectInformationAccess.public_bytes)rM rN rO r �SUBJECT_INFORMATION_ACCESSrF rU rg rH rB ri rj rk rP rf r� r� rw rA rz rX r$ r2 r2 r2 r3 r� e s � r� c @ sn e Zd Zeedd�dd�Zed�dd�Zee d�d d �Z e d�d d �Z e ed�d d��Ze ed�dd��ZdS )r� N)� access_method�access_locationr! c C s4 t |t�std��t |t�s$td��|| _|| _d S )Nz)access_method must be an ObjectIdentifierz%access_location must be a GeneralName)r# r rc r �_access_method�_access_location)r; r� r� r2 r2 r3 rH � s zAccessDescription.__init__r7 c C s d� | �S )NzY<AccessDescription(access_method={0.access_method}, access_location={0.access_location})>r� r: r2 r2 r3 rf � s ��zAccessDescription.__repr__rs c C s& t |t�stS | j|jko$| j|jkS r" )r# r� ru r� r� rv r2 r2 r3 rw � s �zAccessDescription.__eq__c C s t | j| jf�S r" )ry r� r� r: r2 r2 r3 rz � s zAccessDescription.__hash__c C s | j S r" )r� r: r2 r2 r3 r� � s z AccessDescription.access_methodc C s | j S r" )r� r: r2 r2 r3 r� � s z!AccessDescription.access_location)rM rN rO r r rH rP rf r� r� rw rA rz r� r� r� r2 r2 r2 r3 r� � s � r� c @ s� e Zd ZejZeeje dd�dd�Z e ed�dd��Z e eje d�dd ��Z ed�d d �Zeed �d d�Ze d�dd�Zed�dd�ZdS )�BasicConstraintsN)�ca� path_lengthr! c C sX t |t�std��|d ur&|s&td��|d urHt |t�r@|dk rHtd��|| _|| _d S )Nzca must be a boolean valuez)path_length must be None when ca is Falser z2path_length must be a non-negative integer or None)r# r� rc r� rA �_ca� _path_length)r; r� r� r2 r2 r3 rH � s ���zBasicConstraints.__init__r7 c C s | j S r" )r� r: r2 r2 r3 r� � s zBasicConstraints.cac C s | j S r" )r� r: r2 r2 r3 r� � s z BasicConstraints.path_lengthc C s d� | �S )Nz:<BasicConstraints(ca={0.ca}, path_length={0.path_length})>r� r: r2 r2 r3 rf � s ��zBasicConstraints.__repr__rs c C s& t |t�stS | j|jko$| j|jkS r" )r# r� ru r� r� rv r2 r2 r3 rw � s zBasicConstraints.__eq__c C s t | j| jf�S r" )ry r� r� r: r2 r2 r3 rz � s zBasicConstraints.__hash__c C s t �| �S r" r| r: r2 r2 r3 r$ � s z BasicConstraints.public_bytes)rM rN rO r �BASIC_CONSTRAINTSrF r� rU r� rA rH r� r� r� rP rf r� rw rz rX r$ r2 r2 r2 r3 r� � s r� c @ sn e Zd ZejZedd�dd�Zeed�dd��Z e e d�d d �Z ed�d d �Z ed�d d�Zed�dd�ZdS )�DeltaCRLIndicatorNrm c C s t |t�std��|| _d S ro rp rr r2 r2 r3 rH � s zDeltaCRLIndicator.__init__r7 c C s | j S r" r{ r: r2 r2 r3 rn � s z DeltaCRLIndicator.crl_numberrs c C s t |t�stS | j|jkS r" )r# r� ru rn rv r2 r2 r3 rw � s zDeltaCRLIndicator.__eq__c C s t | j�S r" rx r: r2 r2 r3 rz � s zDeltaCRLIndicator.__hash__c C s d� | �S )Nz.<DeltaCRLIndicator(crl_number={0.crl_number})>r� r: r2 r2 r3 rf � s zDeltaCRLIndicator.__repr__c C s t �| �S r" r| r: r2 r2 r3 r$ � s z DeltaCRLIndicator.public_bytes)rM rN rO r �DELTA_CRL_INDICATORrF rA rH r� rn r� r� rw rz rP rf rX r$ r2 r2 r2 r3 r� � s r� c @ sp e Zd ZejZejd dd�dd�Ze d�\Z Z Z e d�dd �Zeed �d d �Zed�d d�Zed�dd�ZdS )�CRLDistributionPoints�DistributionPointN��distribution_pointsr! c C s, t |�}tdd� |D ��s"td��|| _d S )Nc s s | ]}t |t�V qd S r" �r# r� r� r2 r2 r3 r� s z1CRLDistributionPoints.__init__.<locals>.<genexpr>�?distribution_points must be a list of DistributionPoint objects�r\ r� rc �_distribution_points�r; r� r2 r2 r3 rH � s ��z CRLDistributionPoints.__init__r� r7 c C s d� | j�S )Nz<CRLDistributionPoints({})>�rT r� r: r2 r2 r3 rf s z CRLDistributionPoints.__repr__rs c C s t |t�stS | j|jkS r" )r# r� ru r� rv r2 r2 r3 rw s z CRLDistributionPoints.__eq__c C s t t| j��S r" �ry r� r� r: r2 r2 r3 rz s z CRLDistributionPoints.__hash__c C s t �| �S r" r| r: r2 r2 r3 r$ s z"CRLDistributionPoints.public_bytes)rM rN rO r �CRL_DISTRIBUTION_POINTSrF rU rg rH rB ri rj rk rP rf r� r� rw rA rz rX r$ r2 r2 r2 r3 r� � s � � r� c @ sp e Zd ZejZejd dd�dd�Ze d�\Z Z Z e d�dd �Zeed �d d �Zed�d d�Zed�dd�ZdS )� FreshestCRLr� Nr� c C s, t |�}tdd� |D ��s"td��|| _d S )Nc s s | ]}t |t�V qd S r" r� r� r2 r2 r3 r� % s z'FreshestCRL.__init__.<locals>.<genexpr>r� r� r� r2 r2 r3 rH ! s ��zFreshestCRL.__init__r� r7 c C s d� | j�S )Nz<FreshestCRL({})>r� r: r2 r2 r3 rf 3 s zFreshestCRL.__repr__rs c C s t |t�stS | j|jkS r" )r# r� ru r� rv r2 r2 r3 rw 6 s zFreshestCRL.__eq__c C s t t| j��S r" r� r: r2 r2 r3 rz < s zFreshestCRL.__hash__c C s t �| �S r" r| r: r2 r2 r3 r$ ? s zFreshestCRL.public_bytes)rM rN rO r � FRESHEST_CRLrF rU rg rH rB ri rj rk rP rf r� r� rw rA rz rX r$ r2 r2 r2 r3 r� s � � r� c @ s� e Zd Zejeje eje ejejd ejeje dd�dd�Z e d�dd�Z e e d �d d �Zed�d d �Zeejeje d�dd��Zeeje d�dd��Zeejejd d�dd��Zeejeje d�dd��ZdS )r� � ReasonFlagsN)� full_name� relative_name�reasons� crl_issuerr! c C s� |r|rt d��|d ur:t|�}tdd� |D ��s:td��|rPt|t�sPtd��|d urzt|�}tdd� |D ��sztd��|r�t|t�r�tdd� |D ��s�td ��|r�tj|v s�tj |v r�t d ��|r�|s�|s�|s�t d ��|| _ || _ || _ || _ d S ) NzOYou cannot provide both full_name and relative_name, at least one must be None.c s s | ]}t |t�V qd S r" r� r� r2 r2 r3 r� S r� z-DistributionPoint.__init__.<locals>.<genexpr>z/full_name must be a list of GeneralName objectsz1relative_name must be a RelativeDistinguishedNamec s s | ]}t |t�V qd S r" r� r� r2 r2 r3 r� ` r� z2crl_issuer must be None or a list of general namesc s s | ]}t |t�V qd S r" �r# r� r� r2 r2 r3 r� g r� z0reasons must be None or frozenset of ReasonFlagszLunspecified and remove_from_crl are not valid reasons in a DistributionPointzPYou must supply crl_issuer, full_name, or relative_name when reasons is not None)r� r\ r� rc r# r � frozensetr� � unspecified�remove_from_crl� _full_name�_relative_name�_reasons� _crl_issuer)r; r� r� r� r� r2 r2 r3 rH D sV �� ��������zDistributionPoint.__init__r7 c C s d� | �S )Nz}<DistributionPoint(full_name={0.full_name}, relative_name={0.relative_name}, reasons={0.reasons}, crl_issuer={0.crl_issuer})>r� r: r2 r2 r3 rf s ��zDistributionPoint.__repr__rs c C s> t |t�stS | j|jko<| j|jko<| j|jko<| j|jkS r" )r# r� ru r� r� r� r� rv r2 r2 r3 rw � s � � �zDistributionPoint.__eq__c C sH | j d urt| j �}nd }| jd ur0t| j�}nd }t|| j| j|f�S r" )r� r� r� ry r� r� )r; �fnr� r2 r2 r3 rz � s � �zDistributionPoint.__hash__c C s | j S r" �r� r: r2 r2 r3 r� � s zDistributionPoint.full_namec C s | j S r" �r� r: r2 r2 r3 r� � s z DistributionPoint.relative_namec C s | j S r" )r� r: r2 r2 r3 r� � s zDistributionPoint.reasonsc C s | j S r" )r� r: r2 r2 r3 r� � s z DistributionPoint.crl_issuer)rM rN rO rU r� rg r r � FrozenSetrH rP rf r� r� rw rA rz r� r� r� r� r� r� r2 r2 r2 r3 r� C s" � ; r� c @ s4 e Zd ZdZdZdZdZdZdZdZ dZ d Z d Z d S ) r� r� � keyCompromise� cACompromise�affiliationChanged� superseded�cessationOfOperation�certificateHold�privilegeWithdrawn� aACompromise� removeFromCRLN) rM rN rO r� �key_compromise� ca_compromise�affiliation_changedr� �cessation_of_operation�certificate_hold�privilege_withdrawn� aa_compromiser� r2 r2 r2 r3 r� � s r� )� � � � � � � � r� r� r� r� r� r� r� r� c @ s� e Zd ZejZeje eje dd�dd�Z e d�dd�Z e e d�d d �Zed�d d �Zeeje d�d d��Zeeje d�dd��Zed�dd�ZdS )�PolicyConstraintsN)�require_explicit_policy�inhibit_policy_mappingr! c C s\ |d urt |t�std��|d ur4t |t�s4td��|d u rL|d u rLtd��|| _|| _d S )Nz>require_explicit_policy must be a non-negative integer or Nonez=inhibit_policy_mapping must be a non-negative integer or NonezSAt least one of require_explicit_policy and inhibit_policy_mapping must not be None)r# rA rc r� �_require_explicit_policy�_inhibit_policy_mapping)r; r� r� r2 r2 r3 rH � s$ �� ���zPolicyConstraints.__init__r7 c C s d� | �S )Nz{<PolicyConstraints(require_explicit_policy={0.require_explicit_policy}, inhibit_policy_mapping={0.inhibit_policy_mapping})>r� r: r2 r2 r3 rf s ��zPolicyConstraints.__repr__rs c C s& t |t�stS | j|jko$| j|jkS r" )r# r� ru r� r� rv r2 r2 r3 rw s �zPolicyConstraints.__eq__c C s t | j| jf�S r" )ry r� r� r: r2 r2 r3 rz s �zPolicyConstraints.__hash__c C s | j S r" )r� r: r2 r2 r3 r� s z)PolicyConstraints.require_explicit_policyc C s | j S r" )r� r: r2 r2 r3 r� s z(PolicyConstraints.inhibit_policy_mappingc C s t �| �S r" r| r: r2 r2 r3 r$ s z PolicyConstraints.public_bytes)rM rN rO r �POLICY_CONSTRAINTSrF rU r� rA rH rP rf r� r� rw rz r� r� r� rX r$ r2 r2 r2 r3 r� � s � r� c @ sp e Zd ZejZejd dd�dd�Ze d�\Z Z Z e d�dd �Zeed �d d �Zed�d d�Zed�dd�ZdS )�CertificatePolicies�PolicyInformationN)�policiesr! c C s, t |�}tdd� |D ��s"td��|| _d S )Nc s s | ]}t |t�V qd S r" )r# r� r� r2 r2 r3 r� ) r� z/CertificatePolicies.__init__.<locals>.<genexpr>z;Every item in the policies list must be a PolicyInformation)r\ r� rc � _policies)r; r� r2 r2 r3 rH ' s �z CertificatePolicies.__init__r� r7 c C s d� | j�S )Nz<CertificatePolicies({})>)rT r� r: r2 r2 r3 rf 3 s z CertificatePolicies.__repr__rs c C s t |t�stS | j|jkS r" )r# r� ru r� rv r2 r2 r3 rw 6 s zCertificatePolicies.__eq__c C s t t| j��S r" )ry r� r� r: r2 r2 r3 rz < s z CertificatePolicies.__hash__c C s t �| �S r" r| r: r2 r2 r3 r$ ? s z CertificatePolicies.public_bytes)rM rN rO r �CERTIFICATE_POLICIESrF rU rg rH rB ri rj rk rP rf r� r� rw rA rz rX r$ r2 r2 r2 r3 r� $ s r� c @ s� e Zd Zeejejejedf dd�dd�Z ed�dd�Z e e d �d d �Z ed�d d �Zeed�dd��Zeejejejedf d�dd��ZdS )r� � UserNoticeN)�policy_identifier�policy_qualifiersr! c C sL t |t�std��|| _|d urBt|�}tdd� |D ��sBtd��|| _d S )Nz-policy_identifier must be an ObjectIdentifierc s s | ]}t |ttf�V qd S r" )r# rP r r� r2 r2 r3 r� R s z-PolicyInformation.__init__.<locals>.<genexpr>zMpolicy_qualifiers must be a list of strings and/or UserNotice objects or None)r# r rc �_policy_identifierr\ r� �_policy_qualifiers)r; r r r2 r2 r3 rH D s ��zPolicyInformation.__init__r7 c C s d� | �S )Nze<PolicyInformation(policy_identifier={0.policy_identifier}, policy_qualifiers={0.policy_qualifiers})>r� r: r2 r2 r3 rf \ s ��zPolicyInformation.__repr__rs c C s& t |t�stS | j|jko$| j|jkS r" )r# r� ru r r rv r2 r2 r3 rw b s �zPolicyInformation.__eq__c C s( | j d urt| j �}nd }t| j|f�S r" )r r� ry r )r; �pqr2 r2 r3 rz k s �zPolicyInformation.__hash__c C s | j S r" )r r: r2 r2 r3 r u s z#PolicyInformation.policy_identifierc C s | j S r" )r r: r2 r2 r3 r y s z#PolicyInformation.policy_qualifiers)rM rN rO r rU r� rg �UnionrP rH rf r� r� rw rA rz r� r r� r r2 r2 r2 r3 r� C s �� �r� c @ s� e Zd Zejd eje dd�dd�Zed�dd�Zee d �d d �Z e d�d d �Z e ejd d�dd��Ze eje d�dd��ZdS )r �NoticeReferenceN)�notice_reference� explicit_textr! c C s& |rt |t�std��|| _|| _d S )Nz2notice_reference must be None or a NoticeReference)r# r rc �_notice_reference�_explicit_text)r; r r r2 r2 r3 rH � s ��zUserNotice.__init__r7 c C s d� | �S )NzV<UserNotice(notice_reference={0.notice_reference}, explicit_text={0.explicit_text!r})>r� r: r2 r2 r3 rf � s ��zUserNotice.__repr__rs c C s& t |t�stS | j|jko$| j|jkS r" )r# r ru r r rv r2 r2 r3 rw � s �zUserNotice.__eq__c C s t | j| jf�S r" )ry r r r: r2 r2 r3 rz � s zUserNotice.__hash__c C s | j S r" )r r: r2 r2 r3 r � s zUserNotice.notice_referencec C s | j S r" )r r: r2 r2 r3 r � s zUserNotice.explicit_text)rM rN rO rU r� rP rH rf r� r� rw rA rz r� r r r2 r2 r2 r3 r � s � r c @ s� e Zd Zeje eje dd�dd�Zed�dd�Z e e d�d d �Z ed�d d �Z eeje d�d d��Zeeje d�dd��ZdS )r N)� organization�notice_numbersr! c C s2 || _ t|�}tdd� |D ��s(td��|| _d S )Nc s s | ]}t |t�V qd S r" )r# rA r� r2 r2 r3 r� � r� z+NoticeReference.__init__.<locals>.<genexpr>z)notice_numbers must be a list of integers)� _organizationr\ r� rc �_notice_numbers)r; r r r2 r2 r3 rH � s zNoticeReference.__init__r7 c C s d� | �S )NzU<NoticeReference(organization={0.organization!r}, notice_numbers={0.notice_numbers})>r� r: r2 r2 r3 rf � s ��zNoticeReference.__repr__rs c C s& t |t�stS | j|jko$| j|jkS r" )r# r ru r r rv r2 r2 r3 rw � s �zNoticeReference.__eq__c C s t | jt| j�f�S r" )ry r r� r r: r2 r2 r3 rz � s zNoticeReference.__hash__c C s | j S r" )r r: r2 r2 r3 r � s z NoticeReference.organizationc C s | j S r" )r r: r2 r2 r3 r � s z NoticeReference.notice_numbers)rM rN rO rU r� rP rg rA rH rf r� r� rw rz r� r r� r r2 r2 r2 r3 r � s � r c @ sp e Zd ZejZeje dd�dd�Z e d�\Z Z Z ed�dd�Zeed �d d �Zed�d d �Zed�dd�ZdS )�ExtendedKeyUsageN)�usagesr! c C s, t |�}tdd� |D ��s"td��|| _d S )Nc s s | ]}t |t�V qd S r" )r# r r� r2 r2 r3 r� � r� z,ExtendedKeyUsage.__init__.<locals>.<genexpr>z9Every item in the usages list must be an ObjectIdentifier)r\ r� rc �_usages)r; r r2 r2 r3 rH � s �zExtendedKeyUsage.__init__r r7 c C s d� | j�S )Nz<ExtendedKeyUsage({})>)rT r r: r2 r2 r3 rf � s zExtendedKeyUsage.__repr__rs c C s t |t�stS | j|jkS r" )r# r ru r rv r2 r2 r3 rw � s zExtendedKeyUsage.__eq__c C s t t| j��S r" )ry r� r r: r2 r2 r3 rz � s zExtendedKeyUsage.__hash__c C s t �| �S r" r| r: r2 r2 r3 r$ � s z ExtendedKeyUsage.public_bytes)rM rN rO r �EXTENDED_KEY_USAGErF rU rg r rH rB ri rj rk rP rf r� r� rw rA rz rX r$ r2 r2 r2 r3 r � s r c @ sL e Zd ZejZeed�dd�Ze d�dd�Z e d�dd�Z e d�d d �Zd S ) � OCSPNoCheckrs c C s t |t�stS dS �NT)r# r ru rv r2 r2 r3 rw � s zOCSPNoCheck.__eq__r7 c C s t t�S r" )ry r r: r2 r2 r3 rz � s zOCSPNoCheck.__hash__c C s dS )Nz<OCSPNoCheck()>r2 r: r2 r2 r3 rf � s zOCSPNoCheck.__repr__c C s t �| �S r" r| r: r2 r2 r3 r$ s zOCSPNoCheck.public_bytesN)rM rN rO r � OCSP_NO_CHECKrF r� r� rw rA rz rP rf rX r$ r2 r2 r2 r3 r � s r c @ sL e Zd ZejZeed�dd�Ze d�dd�Z e d�dd�Z e d�d d �Zd S ) � PrecertPoisonrs c C s t |t�stS dS r )r# r ru rv r2 r2 r3 rw s zPrecertPoison.__eq__r7 c C s t t�S r" )ry r r: r2 r2 r3 rz s zPrecertPoison.__hash__c C s dS )Nz<PrecertPoison()>r2 r: r2 r2 r3 rf s zPrecertPoison.__repr__c C s t �| �S r" r| r: r2 r2 r3 r$ s zPrecertPoison.public_bytesN)rM rN rO r �PRECERT_POISONrF r� r� rw rA rz rP rf rX r$ r2 r2 r2 r3 r s r c @ sp e Zd ZejZejd dd�dd�Ze d�\Z Z Z e d�dd �Zeed �d d �Zed�d d�Zed�dd�ZdS )� TLSFeature�TLSFeatureTypeN)�featuresr! c C s8 t |�}tdd� |D ��r&t|�dkr.td��|| _d S )Nc s s | ]}t |t�V qd S r" )r# r r� r2 r2 r3 r� r� z&TLSFeature.__init__.<locals>.<genexpr>r z@features must be a list of elements from the TLSFeatureType enum)r\ r� r8 rc � _features)r; r r2 r2 r3 rH s � ��zTLSFeature.__init__r r7 c C s d� | �S )Nz$<TLSFeature(features={0._features})>r� r: r2 r2 r3 rf ) s zTLSFeature.__repr__rs c C s t |t�stS | j|jkS r" )r# r ru r rv r2 r2 r3 rw , s zTLSFeature.__eq__c C s t t| j��S r" )ry r� r r: r2 r2 r3 rz 2 s zTLSFeature.__hash__c C s t �| �S r" r| r: r2 r2 r3 r$ 5 s zTLSFeature.public_bytes)rM rN rO r � TLS_FEATURErF rU rg rH rB ri rj rk rP rf r� r� rw rA rz rX r$ r2 r2 r2 r3 r s r c @ s e Zd ZdZdZdS )r r� � N)rM rN rO �status_request�status_request_v2r2 r2 r2 r3 r 9 s r c C s i | ] }|j |�qS r2 �rd r� r2 r2 r3 � <dictcomp>D r� r# c @ sn e Zd ZejZedd�dd�Zed�dd�Z e e d�d d �Z ed�d d �Z eed�d d��Zed�dd�ZdS )�InhibitAnyPolicyN)� skip_certsr! c C s, t |t�std��|dk r"td��|| _d S )Nz skip_certs must be an integerr z)skip_certs must be a non-negative integer)r# rA rc r� � _skip_certs)r; r% r2 r2 r3 rH J s zInhibitAnyPolicy.__init__r7 c C s d� | �S )Nz-<InhibitAnyPolicy(skip_certs={0.skip_certs})>r� r: r2 r2 r3 rf S s zInhibitAnyPolicy.__repr__rs c C s t |t�stS | j|jkS r" )r# r$ ru r% rv r2 r2 r3 rw V s zInhibitAnyPolicy.__eq__c C s t | j�S r" )ry r% r: r2 r2 r3 rz \ s zInhibitAnyPolicy.__hash__c C s | j S r" )r& r: r2 r2 r3 r% _ s zInhibitAnyPolicy.skip_certsc C s t �| �S r" r| r: r2 r2 r3 r$ c s z InhibitAnyPolicy.public_bytes)rM rN rO r �INHIBIT_ANY_POLICYrF rA rH rP rf r� r� rw rz r� r% rX r$ r2 r2 r2 r3 r$ G s r$ c @ s e Zd ZejZeeeeeeeeedd� dd�Zeed�dd��Z eed�dd ��Z eed�d d ��Z eed�d d ��Z eed�dd��Z eed�dd��Zeed�dd��Zeed�dd��Zeed�dd��Zed�dd�Zeed�dd �Zed�d d �Zed�d d �ZdS )!�KeyUsageN) �digital_signature�content_commitment�key_encipherment�data_encipherment� key_agreement� key_cert_sign�crl_sign� encipher_only� decipher_onlyr! c C sN |s|s | rt d��|| _|| _|| _|| _|| _|| _|| _|| _| | _ d S )NzKencipher_only and decipher_only can only be true when key_agreement is true) r� �_digital_signature�_content_commitment�_key_encipherment�_data_encipherment�_key_agreement�_key_cert_sign� _crl_sign�_encipher_only�_decipher_only) r; r) r* r+ r, r- r. r/ r0 r1 r2 r2 r3 rH j s �zKeyUsage.__init__r7 c C s | j S r" )r2 r: r2 r2 r3 r) � s zKeyUsage.digital_signaturec C s | j S r" )r3 r: r2 r2 r3 r* � s zKeyUsage.content_commitmentc C s | j S r" )r4 r: r2 r2 r3 r+ � s zKeyUsage.key_enciphermentc C s | j S r" )r5 r: r2 r2 r3 r, � s zKeyUsage.data_enciphermentc C s | j S r" )r6 r: r2 r2 r3 r- � s zKeyUsage.key_agreementc C s | j S r" )r7 r: r2 r2 r3 r. � s zKeyUsage.key_cert_signc C s | j S r" )r8 r: r2 r2 r3 r/ � s zKeyUsage.crl_signc C s | j std��n| jS d S )Nz7encipher_only is undefined unless key_agreement is true)r- r� r9 r: r2 r2 r3 r0 � s �zKeyUsage.encipher_onlyc C s | j std��n| jS d S )Nz7decipher_only is undefined unless key_agreement is true)r- r� r: r: r2 r2 r3 r1 � s �zKeyUsage.decipher_onlyc C s: z| j }| j}W n ty* d}d}Y n0 d�| ||�S )NFa- <KeyUsage(digital_signature={0.digital_signature}, content_commitment={0.content_commitment}, key_encipherment={0.key_encipherment}, data_encipherment={0.data_encipherment}, key_agreement={0.key_agreement}, key_cert_sign={0.key_cert_sign}, crl_sign={0.crl_sign}, encipher_only={1}, decipher_only={2})>)r0 r1 r� rT )r; r0 r1 r2 r2 r3 rf � s ��zKeyUsage.__repr__rs c C sz t |t�stS | j|jkox| j|jkox| j|jkox| j|jkox| j|jkox| j|jkox| j |j kox| j |j kox| j |j kS r" ) r# r( ru r) r* r+ r, r- r. r/ r9 r: rv r2 r2 r3 rw � s& � � � � � � � �zKeyUsage.__eq__c C s, t | j| j| j| j| j| j| j| j| j f �S r" ) ry r) r* r+ r, r- r. r/ r9 r: r: r2 r2 r3 rz � s ��zKeyUsage.__hash__c C s t �| �S r" r| r: r2 r2 r3 r$ � s zKeyUsage.public_bytes)rM rN rO r � KEY_USAGErF r� rH r� r) r* r+ r, r- r. r/ r0 r1 rP rf r� rw rA rz rX r$ r2 r2 r2 r3 r( g sD � r( c @ s� e Zd ZejZejeje ejeje dd�dd�Z e e d�dd�Z eje dd�d d �Zed �d d �Zed �dd�Zeejeje d �dd��Zeejeje d �dd��Zed �dd�ZdS )�NameConstraintsN)�permitted_subtrees�excluded_subtreesr! c C s� |d ur@t |�}|s td��tdd� |D ��s6td��| �|� |d ur�t |�}|s\td��tdd� |D ��svtd��| �|� |d u r�|d u r�td��|| _|| _d S ) Nz3permitted_subtrees must be a non-empty list or Nonec s s | ]}t |t�V qd S r" r� r� r2 r2 r3 r� � r� z+NameConstraints.__init__.<locals>.<genexpr>z@permitted_subtrees must be a list of GeneralName objects or Nonez2excluded_subtrees must be a non-empty list or Nonec s s | ]}t |t�V qd S r" r� r� r2 r2 r3 r� r� z?excluded_subtrees must be a list of GeneralName objects or NonezIAt least one of permitted_subtrees and excluded_subtrees must not be None)r\ r� r� rc �_validate_ip_name�_permitted_subtrees�_excluded_subtrees)r; r= r> r2 r2 r3 rH � s8 �� �� �zNameConstraints.__init__rs c C s& t |t�stS | j|jko$| j|jkS r" )r# r< ru r> r= rv r2 r2 r3 rw s �zNameConstraints.__eq__)�treer! c C s t dd� |D ��rtd��d S )Nc s s. | ]&}t |t�o$t |jtjtjf� V qd S r" )r# r rd � ipaddress� IPv4Network� IPv6Network)r� �namer2 r2 r3 r� # s � �z4NameConstraints._validate_ip_name.<locals>.<genexpr>zGIPAddress name constraints must be an IPv4Network or IPv6Network object)�anyrc )r; rB r2 r2 r3 r? " s ��z!NameConstraints._validate_ip_namer7 c C s d� | �S )Nze<NameConstraints(permitted_subtrees={0.permitted_subtrees}, excluded_subtrees={0.excluded_subtrees})>r� r: r2 r2 r3 rf / s ��zNameConstraints.__repr__c C s@ | j d urt| j �}nd }| jd ur0t| j�}nd }t||f�S r" )r= r� r> ry )r; �ps�esr2 r2 r3 rz 5 s � �zNameConstraints.__hash__c C s | j S r" )r@ r: r2 r2 r3 r= F s z"NameConstraints.permitted_subtreesc C s | j S r" )rA r: r2 r2 r3 r> L s z!NameConstraints.excluded_subtreesc C s t �| �S r" r| r: r2 r2 r3 r$ R s z NameConstraints.public_bytes)rM rN rO r �NAME_CONSTRAINTSrF rU r� rg r rH r� r� rw r? rP rf rA rz r� r� r= r> rX r$ r2 r2 r2 r3 r< � s � * ��r< c @ s� e Zd Zeeedd�dd�Zeed�dd��Zeed�dd ��Z eed�d d ��Z e d�d d �Z e ed�dd�Zed�dd�ZdS )� ExtensionN)rF �criticalrd r! c C s: t |t�std��t |t�s$td��|| _|| _|| _d S )Nz2oid argument must be an ObjectIdentifier instance.z critical must be a boolean value)r# r rc r� �_oid� _critical�_value)r; rF rL rd r2 r2 r3 rH W s � zExtension.__init__r7 c C s | j S r" �rM r: r2 r2 r3 rF f s z Extension.oidc C s | j S r" )rN r: r2 r2 r3 rL j s zExtension.criticalc C s | j S r" �rO r: r2 r2 r3 rd n s zExtension.valuec C s d� | �S )Nz@<Extension(oid={0.oid}, critical={0.critical}, value={0.value})>r� r: r2 r2 r3 rf r s ��zExtension.__repr__rs c C s2 t |t�stS | j|jko0| j|jko0| j|jkS r" )r# rK ru rF rL rd rv r2 r2 r3 rw x s � �zExtension.__eq__c C s t | j| j| jf�S r" )ry rF rL rd r: r2 r2 r3 rz � s zExtension.__hash__)rM rN rO r r� r rH r� rF rL rd rP rf r� rw rA rz r2 r2 r2 r3 rK V s � rK c @ s� e Zd Zeje dd�dd�Zed�\ZZ Z ej ej ej e ej e ej e f eje d�dd��Zej ej e eje d�d d��Zej ej e eje d�d d��Zej ej e eje d�d d��Zej ej e eje d�d d��Zej ej e ej e ej e ej e ej e ej e ej e f ej eje eje eje eje eje f d�d d�Zed�dd�Ze e d�dd�Z e d�dd�Z dS )� GeneralNamesN�� general_namesr! c C s, t |�}tdd� |D ��s"td��|| _d S )Nc s s | ]}t |t�V qd S r" r� r� r2 r2 r3 r� � r� z(GeneralNames.__init__.<locals>.<genexpr>z^Every item in the general_names list must be an object conforming to the GeneralName interface)r\ r� rc �_general_names�r; rT r2 r2 r3 rH � s �zGeneralNames.__init__rU ��typer! c C s d S r" r2 �r; rX r2 r2 r3 �get_values_for_type� s z GeneralNames.get_values_for_typec C s d S r" r2 rY r2 r2 r3 rZ � s c C s d S r" r2 rY r2 r2 r3 rZ � s c C s d S r" r2 rY r2 r2 r3 rZ � s c C s d S r" r2 rY r2 r2 r3 rZ � s c s0 � fdd�| D �}� t kr(dd� |D �S t|�S )Nc 3 s | ]}t |� �r|V qd S r" )r# �r� �i�rX r2 r3 r� � r� z3GeneralNames.get_values_for_type.<locals>.<genexpr>c S s g | ] }|j �qS r2 r" r[ r2 r2 r3 � <listcomp>� r� z4GeneralNames.get_values_for_type.<locals>.<listcomp>)r r\ )r; rX �objsr2 r] r3 rZ � s r7 c C s d� | j�S )Nz<GeneralNames({})>�rT rU r: r2 r2 r3 rf � s zGeneralNames.__repr__rs c C s t |t�stS | j|jkS r" )r# rR ru rU rv r2 r2 r3 rw � s zGeneralNames.__eq__c C s t t| j��S r" )ry r� rU r: r2 r2 r3 rz � s zGeneralNames.__hash__)!rM rN rO rU rg r rH rB ri rj rk �overloadr rh r r r r� rP rZ r r r r r r r rf r� r� rw rA rz r2 r2 r2 r3 rR � sb ��� ������ ��� rR c @ s� e Zd ZejZeje dd�dd�Z e d�\Z Z Z ejejeje eje eje f eje d�dd��Zejeje eje d�d d��Zejeje eje d�d d��Zejeje eje d�d d��Zejeje eje d�d d��Zejeje eje eje eje eje eje eje f ejeje eje eje eje eje f d�d d�Zed�dd�Z e e d�dd�Z!e"d�dd�Z#e$d�dd�Z%dS )�SubjectAlternativeNameNrS c C s t |�| _d S r" �rR rU rV r2 r2 r3 rH � s z SubjectAlternativeName.__init__rU rW c C s d S r" r2 rY r2 r2 r3 rZ � s z*SubjectAlternativeName.get_values_for_typec C s d S r" r2 rY r2 r2 r3 rZ � s c C s d S r" r2 rY r2 r2 r3 rZ � s c C s d S r" r2 rY r2 r2 r3 rZ s c C s d S r" r2 rY r2 r2 r3 rZ s c C s | j �|�S r" �rU rZ rY r2 r2 r3 rZ s r7 c C s d� | j�S )Nz <SubjectAlternativeName({})>r` r: r2 r2 r3 rf s z SubjectAlternativeName.__repr__rs c C s t |t�stS | j|jkS r" )r# rb ru rU rv r2 r2 r3 rw # s z SubjectAlternativeName.__eq__c C s t | j�S r" �ry rU r: r2 r2 r3 rz ) s z SubjectAlternativeName.__hash__c C s t �| �S r" r| r: r2 r2 r3 r$ , s z#SubjectAlternativeName.public_bytes)&rM rN rO r �SUBJECT_ALTERNATIVE_NAMErF rU rg r rH rB ri rj rk ra r rh r r r r� rP rZ r r r r r r r rf r� r� rw rA rz rX r$ r2 r2 r2 r3 rb � sf ��� ������ ��� rb c @ s� e Zd ZejZeje dd�dd�Z e d�\Z Z Z ejejeje eje eje f eje d�dd��Zejeje eje d�d d��Zejeje eje d�d d��Zejeje eje d�d d��Zejeje eje d�d d��Zejeje eje eje eje eje eje eje f ejeje eje eje eje eje f d�d d�Zed�dd�Z e e d�dd�Z!e"d�dd�Z#e$d�dd�Z%dS )�IssuerAlternativeNameNrS c C s t |�| _d S r" rc rV r2 r2 r3 rH 3 s z IssuerAlternativeName.__init__rU rW c C s d S r" r2 rY r2 r2 r3 rZ 8 s z)IssuerAlternativeName.get_values_for_typec C s d S r" r2 rY r2 r2 r3 rZ C s c C s d S r" r2 rY r2 r2 r3 rZ J s c C s d S r" r2 rY r2 r2 r3 rZ Q s c C s d S r" r2 rY r2 r2 r3 rZ W s c C s | j �|�S r" rd rY r2 r2 r3 rZ ] s r7 c C s d� | j�S )Nz<IssuerAlternativeName({})>r` r: r2 r2 r3 rf q s z IssuerAlternativeName.__repr__rs c C s t |t�stS | j|jkS r" )r# rg ru rU rv r2 r2 r3 rw t s z IssuerAlternativeName.__eq__c C s t | j�S r" re r: r2 r2 r3 rz z s z IssuerAlternativeName.__hash__c C s t �| �S r" r| r: r2 r2 r3 r$ } s z"IssuerAlternativeName.public_bytes)&rM rN rO r �ISSUER_ALTERNATIVE_NAMErF rU rg r rH rB ri rj rk ra r rh r r r r� rP rZ r r r r r r r rf r� r� rw rA rz rX r$ r2 r2 r2 r3 rg 0 sf ��� ������ ��� rg c @ s� e Zd ZejZeje dd�dd�Z e d�\Z Z Z ejejeje eje eje f eje d�dd��Zejeje eje d�d d��Zejeje eje d�d d��Zejeje eje d�d d��Zejeje eje d�d d��Zejeje eje eje eje eje eje eje f ejeje eje eje eje eje f d�d d�Zed�dd�Z e e d�dd�Z!e"d�dd�Z#e$d�dd�Z%dS )�CertificateIssuerNrS c C s t |�| _d S r" rc rV r2 r2 r3 rH � s zCertificateIssuer.__init__rU rW c C s d S r" r2 rY r2 r2 r3 rZ � s z%CertificateIssuer.get_values_for_typec C s d S r" r2 rY r2 r2 r3 rZ � s c C s d S r" r2 rY r2 r2 r3 rZ � s c C s d S r" r2 rY r2 r2 r3 rZ � s c C s d S r" r2 rY r2 r2 r3 rZ � s c C s | j �|�S r" rd rY r2 r2 r3 rZ � s r7 c C s d� | j�S )Nz<CertificateIssuer({})>r` r: r2 r2 r3 rf � s zCertificateIssuer.__repr__rs c C s t |t�stS | j|jkS r" )r# ri ru rU rv r2 r2 r3 rw � s zCertificateIssuer.__eq__c C s t | j�S r" re r: r2 r2 r3 rz � s zCertificateIssuer.__hash__c C s t �| �S r" r| r: r2 r2 r3 r$ � s z CertificateIssuer.public_bytes)&rM rN rO r �CERTIFICATE_ISSUERrF rU rg r rH rB ri rj rk ra r rh r r r r� rP rZ r r r r r r r rf r� r� rw rA rz rX r$ r2 r2 r2 r3 ri � sf ��� ������ ��� ri c @ sn e Zd ZejZedd�dd�Zed�dd�Z e e d�d d �Z e d�d d �Zeed�d d��Zed�dd�ZdS )� CRLReasonN)�reasonr! c C s t |t�std��|| _d S )Nz*reason must be an element from ReasonFlags)r# r� rc �_reason)r; rl r2 r2 r3 rH � s zCRLReason.__init__r7 c C s d� | j�S )Nz<CRLReason(reason={})>)rT rm r: r2 r2 r3 rf � s zCRLReason.__repr__rs c C s t |t�stS | j|jkS r" )r# rk ru rl rv r2 r2 r3 rw � s zCRLReason.__eq__c C s t | j�S r" )ry rl r: r2 r2 r3 rz � s zCRLReason.__hash__c C s | j S r" )rm r: r2 r2 r3 rl � s zCRLReason.reasonc C s t �| �S r" r| r: r2 r2 r3 r$ � s zCRLReason.public_bytes)rM rN rO r � CRL_REASONrF r� rH rP rf r� r� rw rA rz r� rl rX r$ r2 r2 r2 r3 rk � s rk c @ sr e Zd ZejZejdd�dd�Zed�dd�Z e e d�d d �Z e d�d d �Zeejd�d d��Zed�dd�ZdS )�InvalidityDateN)�invalidity_dater! c C s t |tj�std��|| _d S )Nz+invalidity_date must be a datetime.datetime)r# �datetimerc �_invalidity_date)r; rp r2 r2 r3 rH � s zInvalidityDate.__init__r7 c C s d� | j�S )Nz$<InvalidityDate(invalidity_date={})>)rT rr r: r2 r2 r3 rf � s �zInvalidityDate.__repr__rs c C s t |t�stS | j|jkS r" )r# ro ru rp rv r2 r2 r3 rw � s zInvalidityDate.__eq__c C s t | j�S r" )ry rp r: r2 r2 r3 rz s zInvalidityDate.__hash__c C s | j S r" )rr r: r2 r2 r3 rp s z InvalidityDate.invalidity_datec C s t �| �S r" r| r: r2 r2 r3 r$ s zInvalidityDate.public_bytes)rM rN rO r �INVALIDITY_DATErF rq rH rP rf r� r� rw rA rz r� rp rX r$ r2 r2 r2 r3 ro � s ro c @ sp e Zd ZejZeje dd�dd�Z e d�\Z Z Z ed�dd�Zed�d d �Zeed �d d �Zed�dd�ZdS )�)PrecertificateSignedCertificateTimestampsN�� signed_certificate_timestampsr! c C s, t |�}tdd� |D ��s"td��|| _d S )Nc s s | ]}t |t�V qd S r" �r# r �r� �sctr2 r2 r3 r� s �zEPrecertificateSignedCertificateTimestamps.__init__.<locals>.<genexpr>�YEvery item in the signed_certificate_timestamps list must be a SignedCertificateTimestamp�r\ r� rc � _signed_certificate_timestamps�r; rv r2 r2 r3 rH s ��z2PrecertificateSignedCertificateTimestamps.__init__r| r7 c C s d� t| ��S )Nz/<PrecertificateSignedCertificateTimestamps({})>�rT r\ r: r2 r2 r3 rf & s �z2PrecertificateSignedCertificateTimestamps.__repr__c C s t t| j��S r" �ry r� r| r: r2 r2 r3 rz + s z2PrecertificateSignedCertificateTimestamps.__hash__rs c C s t |t�stS | j|jkS r" )r# rt ru r| rv r2 r2 r3 rw . s ��z0PrecertificateSignedCertificateTimestamps.__eq__c C s t �| �S r" r| r: r2 r2 r3 r$ 7 s z6PrecertificateSignedCertificateTimestamps.public_bytes)rM rN rO r �%PRECERT_SIGNED_CERTIFICATE_TIMESTAMPSrF rU rg r rH rB ri rj rk rP rf rA rz r� r� rw rX r$ r2 r2 r2 r3 rt s �� � rt c @ sp e Zd ZejZeje dd�dd�Z e d�\Z Z Z ed�dd�Zed�d d �Zeed �d d �Zed�dd�ZdS )�SignedCertificateTimestampsNru c C s, t |�}tdd� |D ��s"td��|| _d S )Nc s s | ]}t |t�V qd S r" rw rx r2 r2 r3 r� E s �z7SignedCertificateTimestamps.__init__.<locals>.<genexpr>rz r{ r} r2 r2 r3 rH > s ��z$SignedCertificateTimestamps.__init__r| r7 c C s d� t| ��S )Nz!<SignedCertificateTimestamps({})>r~ r: r2 r2 r3 rf S s z$SignedCertificateTimestamps.__repr__c C s t t| j��S r" r r: r2 r2 r3 rz V s z$SignedCertificateTimestamps.__hash__rs c C s t |t�stS | j|jkS r" )r# r� ru r| rv r2 r2 r3 rw Y s ��z"SignedCertificateTimestamps.__eq__c C s t �| �S r" r| r: r2 r2 r3 r$ b s z(SignedCertificateTimestamps.public_bytes)rM rN rO r � SIGNED_CERTIFICATE_TIMESTAMPSrF rU rg r rH rB ri rj rk rP rf rA rz r� r� rw rX r$ r2 r2 r2 r3 r� ; s �� � r� c @ sn e Zd ZejZedd�dd�Zee d�dd�Z e d�d d �Z e d�d d �Zeed�d d��Zed�dd�ZdS )� OCSPNonceN)�noncer! c C s t |t�std��|| _d S )Nznonce must be bytes)r# rX rc �_nonce)r; r� r2 r2 r3 rH i s zOCSPNonce.__init__rs c C s t |t�stS | j|jkS r" )r# r� ru r� rv r2 r2 r3 rw o s zOCSPNonce.__eq__r7 c C s t | j�S r" )ry r� r: r2 r2 r3 rz u s zOCSPNonce.__hash__c C s d� | �S )Nz <OCSPNonce(nonce={0.nonce!r})>r� r: r2 r2 r3 rf x s zOCSPNonce.__repr__c C s | j S r" )r� r: r2 r2 r3 r� { s zOCSPNonce.noncec C s t �| �S r" r| r: r2 r2 r3 r$ s zOCSPNonce.public_bytes)rM rN rO r �NONCErF rX rH r� r� rw rA rz rP rf r� r� r$ r2 r2 r2 r3 r� f s r� c @ s" e Zd ZejZejeje eje e e ejej e e e dd�dd�Zed�dd�Zee d�d d �Zed�d d �Zeejeje d�d d��Zeeje d�dd��Zee d�dd��Zee d�dd��Zeejej e d�dd��Zee d�dd��Z ee d�dd��Z e d�dd �Z dS ) �IssuingDistributionPointN)r� r� �only_contains_user_certs�only_contains_ca_certs�only_some_reasons� indirect_crl� only_contains_attribute_certsr! c C s� |d urt |�}|r8t|t�r0tdd� |D ��s8td��|rXtj|v sPtj|v rXtd��t|t �r�t|t �r�t|t �r�t|t �s�td��||||g}t dd� |D ��dkr�td ��t |||||||g�s�td ��|| _ || _ || _|| _|| _|| _|| _d S ) Nc s s | ]}t |t�V qd S r" r� r� r2 r2 r3 r� � r� z4IssuingDistributionPoint.__init__.<locals>.<genexpr>z:only_some_reasons must be None or frozenset of ReasonFlagszTunspecified and remove_from_crl are not valid reasons in an IssuingDistributionPointzuonly_contains_user_certs, only_contains_ca_certs, indirect_crl and only_contains_attribute_certs must all be boolean.c S s g | ] }|r|�qS r2 r2 r� r2 r2 r3 r^ � r� z5IssuingDistributionPoint.__init__.<locals>.<listcomp>r� z�Only one of the following can be set to True: only_contains_user_certs, only_contains_ca_certs, indirect_crl, only_contains_attribute_certsz�Cannot create empty extension: if only_contains_user_certs, only_contains_ca_certs, indirect_crl, and only_contains_attribute_certs are all False, then either full_name, relative_name, or only_some_reasons must have a value.)r\ r# r� r� rc r� r� r� r� r� r8 rG �_only_contains_user_certs�_only_contains_ca_certs� _indirect_crl� _only_contains_attribute_certs�_only_some_reasonsr� r� ) r; r� r� r� r� r� r� r� �crl_constraintsr2 r2 r3 rH � st ��������������� �z!IssuingDistributionPoint.__init__r7 c C s d� | �S )NaG <IssuingDistributionPoint(full_name={0.full_name}, relative_name={0.relative_name}, only_contains_user_certs={0.only_contains_user_certs}, only_contains_ca_certs={0.only_contains_ca_certs}, only_some_reasons={0.only_some_reasons}, indirect_crl={0.indirect_crl}, only_contains_attribute_certs={0.only_contains_attribute_certs})>r� r: r2 r2 r3 rf � s ��z!IssuingDistributionPoint.__repr__rs c C sb t |t�stS | j|jko`| j|jko`| j|jko`| j|jko`| j|jko`| j|jko`| j |j kS r" ) r# r� ru r� r� r� r� r� r� r� rv r2 r2 r3 rw � s" � � � � ���z IssuingDistributionPoint.__eq__c C s$ t | j| j| j| j| j| j| jf�S r" )ry r� r� r� r� r� r� r� r: r2 r2 r3 rz � s ��z!IssuingDistributionPoint.__hash__c C s | j S r" r� r: r2 r2 r3 r� s z"IssuingDistributionPoint.full_namec C s | j S r" r� r: r2 r2 r3 r� s z&IssuingDistributionPoint.relative_namec C s | j S r" )r� r: r2 r2 r3 r� s z1IssuingDistributionPoint.only_contains_user_certsc C s | j S r" )r� r: r2 r2 r3 r� s z/IssuingDistributionPoint.only_contains_ca_certsc C s | j S r" )r� r: r2 r2 r3 r� s z*IssuingDistributionPoint.only_some_reasonsc C s | j S r" )r� r: r2 r2 r3 r� s z%IssuingDistributionPoint.indirect_crlc C s | j S r" )r� r: r2 r2 r3 r� s z6IssuingDistributionPoint.only_contains_attribute_certsc C s t �| �S r" r| r: r2 r2 r3 r$ s z%IssuingDistributionPoint.public_bytes) rM rN rO r �ISSUING_DISTRIBUTION_POINTrF rU r� rg r r r� r� r� rH rP rf r� rw rA rz r� r� r� r� r� r� r� r� r� rX r$ r2 r2 r2 r3 r� � s: � S �r� c @ s| e Zd Zeedd�dd�Zeed�dd��Zeed�dd ��Ze d�d d �Z e e d �d d�Z ed�dd�Zed�dd�ZdS )rb N)rF rd r! c C s" t |t�std��|| _|| _d S )Nz oid must be an ObjectIdentifier)r# r rc rM rO )r; rF rd r2 r2 r3 rH $ s z UnrecognizedExtension.__init__r7 c C s | j S r" rP r: r2 r2 r3 rF * s zUnrecognizedExtension.oidc C s | j S r" rQ r: r2 r2 r3 rd . s zUnrecognizedExtension.valuec C s d� | �S )Nz7<UnrecognizedExtension(oid={0.oid}, value={0.value!r})>r� r: r2 r2 r3 rf 2 s ��z UnrecognizedExtension.__repr__rs c C s& t |t�stS | j|jko$| j|jkS r" )r# rb ru rF rd rv r2 r2 r3 rw 8 s z UnrecognizedExtension.__eq__c C s t | j| jf�S r" )ry rF rd r: r2 r2 r3 rz > s z UnrecognizedExtension.__hash__c C s | j S r" r" r: r2 r2 r3 r$ A s z"UnrecognizedExtension.public_bytes)rM rN rO r rX rH r� rF rd rP rf r� r� rw rA rz r$ r2 r2 r2 r3 rb # s rb )g�abcrq r- rC rU � cryptographyr �"cryptography.hazmat.bindings._rustr r r} � cryptography.hazmat.primitivesr r �,cryptography.hazmat.primitives.asymmetric.ecr �-cryptography.hazmat.primitives.asymmetric.rsar �/cryptography.hazmat.primitives.asymmetric.typesr r �*cryptography.x509.certificate_transparencyr � cryptography.x509.general_namer r r r r r r r r �cryptography.x509.namer r �cryptography.x509.oidr r r r �TypeVarr rX r4 rP rB � ExceptionrC rR �ABCMetar rZ rl r� r� r� r� r� r� r� r� r� r� �Enumr� r� r� r� r� r� r� r� r� �_REASON_BIT_MAPPING�_CRLREASONFLAGSr� r� r� r r r r r r r �_TLS_FEATURE_TYPE_TO_ENUMr$ r( r< �GenericrK rR rb rg ri rk ro rt r� r� r� rb r2 r2 r2 r3 �<module> s� , �� ' l$!!(. %%p� � A =+( " j0YQQQ -+ !
cải xoăn