관리-도구
편집 파일: extensions.cpython-39.opt-1.pyc
a �a� � @ s� d dl Z d dlZd dlZd dlZd dlZd dlmZ d dlmZ d dlm Z d dl m Z m Z d dlmZ d dlmZ d dlmZmZ d d lmZ d d lmZmZmZmZm Z m Z m Z m Z m Z d d l!m"Z"m#Z# d d l$m%Z%m&Z&m'Z'm(Z( ej)d dd�Z*ee+d�dd�Z,e-d�dd�Z.G dd� de/�Z0G dd� de/�Z1G dd� de j2d�Z3G d d � d e4�Z5G d d � d e3�Z6G d d!� d!e3�Z7G d"d#� d#e3�Z8G d$d%� d%e3�Z9G d&d'� d'e3�Z:G d(d)� d)e4�Z;G d*d+� d+e3�Z<G d,d-� d-e3�Z=G d.d/� d/e3�Z>G d0d1� d1e3�Z?G d2d3� d3e4�Z@G d4d5� d5ejA�ZBeBjCeBjDeBjEeBjFeBjGeBjHeBjIeBjJd6�ZKG d7d8� d8e3�ZLG d9d:� d:e3�ZMG d;d<� d<e4�ZNG d=d>� d>e4�ZOG d?d@� d@e4�ZPG dAdB� dBe3�ZQG dCdD� dDe3�ZRG dEdF� dFe3�ZSG dGdH� dHe3�ZTG dIdJ� dJejA�ZUdKdL� eUD �ZVG dMdN� dNe3�ZWG dOdP� dPe3�ZXG dQdR� dRe3�ZYG dSdT� dTejZe* �Z[G dUdV� dVe4�Z\G dWdX� dXe3�Z]G dYdZ� dZe3�Z^G d[d\� d\e3�Z_G d]d^� d^e3�Z`G d_d`� d`e3�ZaG dadb� dbe3�ZbG dcdd� dde3�ZcG dedf� dfe3�ZdG dgdh� dhe3�ZeG didj� dje3�ZfdS )k� N)�utils)�asn1)�x509)� constant_time� serialization)�EllipticCurvePublicKey)� RSAPublicKey)� CERTIFICATE_PUBLIC_KEY_TYPES�PUBLIC_KEY_TYPES)�SignedCertificateTimestamp) �DNSName� DirectoryName� GeneralName� IPAddress� OtherName� RFC822Name� RegisteredID�UniformResourceIdentifier�_IPADDRESS_TYPES)�Name�RelativeDistinguishedName)�CRLEntryExtensionOID� ExtensionOID�OCSPExtensionOID�ObjectIdentifier�ExtensionTypeVar� ExtensionType)�bound�� public_key�returnc C sl t | t�r | �tjjtjj�}n>t | t�r@| �tjj tjj �}n | �tjjtjj �}t � |�}t�|��� S �N)� isinstancer � public_bytesr ZEncodingZDERZ PublicFormatZPKCS1r ZX962ZUncompressedPointZSubjectPublicKeyInfor Zparse_spki_for_data�hashlibZsha1�digest)r �dataZ serialized� r' �B/usr/lib64/python3.9/site-packages/cryptography/x509/extensions.py� _key_identifier_from_public_key/ s � �� r) �� field_namec s4 t d�� fdd� }� fdd�}� fdd�}|||fS )N�r c s t t| � ��S r! )�len�getattr��selfr* r' r( � len_methodH s z*_make_sequence_methods.<locals>.len_methodc s t t| � ��S r! )�iterr. r/ r* r' r( � iter_methodK s z+_make_sequence_methods.<locals>.iter_methodc s t | � �| S r! )r. )r0 �idxr* r' r( �getitem_methodN s z._make_sequence_methods.<locals>.getitem_method)�int)r+ r1 r3 r5 r' r* r( �_make_sequence_methodsG s r7 c s& e Zd Zeedd�� fdd� Z� ZS )�DuplicateExtensionN��msg�oidr c s t t| ��|� || _d S r! )�superr8 �__init__r; �r0 r: r; �� __class__r' r( r= U s zDuplicateExtension.__init__��__name__� __module__� __qualname__�strr r= � __classcell__r' r' r? r( r8 T s r8 c s& e Zd Zeedd�� fdd� Z� ZS )�ExtensionNotFoundNr9 c s t t| ��|� || _d S r! )r< rG r= r; r> r? r' r( r= [ s zExtensionNotFound.__init__rA r' r' r? r( rG Z s rG c @ s* e Zd ZU eje ed< ed�dd�ZdS )r r; r, c C s t d�| ���dS )z7 Serializes the extension type to DER. z8public_bytes is not implemented for extension type {0!r}N)�NotImplementedError�formatr/ r' r' r( r# c s ��zExtensionType.public_bytesN) rB rC rD �typing�ClassVarr �__annotations__�bytesr# r' r' r' r( r ` s )� metaclassc @ sd e Zd Zejd dd�dd�Zedd�dd�Zeje d d �d d �Z e d �\Z Z Zed�dd�ZdS )� ExtensionszExtension[ExtensionType]N)� extensionsr c C s t |�| _d S r! )�list� _extensions)r0 rP r' r' r( r= o s zExtensions.__init__)r; r c C s0 | D ]}|j |kr| S qtd�|�|��d S )N�No {} extension was found)r; rG rI )r0 r; �extr' r' r( �get_extension_for_oidt s z Extensions.get_extension_for_oidzExtension[ExtensionTypeVar])�extclassr c C sD |t u rtd��| D ]}t|j|�r| S qtd�|�|j��d S )Nz|UnrecognizedExtension can't be used with get_extension_for_class because more than one instance of the class may be present.rS )�UnrecognizedExtension� TypeErrorr" �valuerG rI r; )r0 rV rT r' r' r( �get_extension_for_class} s � �z"Extensions.get_extension_for_classrR r, c C s d� | j�S )Nz<Extensions({})>)rI rR r/ r' r' r( �__repr__� s zExtensions.__repr__)rB rC rD rJ �Iterabler= r rU �Typer rZ r7 �__len__�__iter__� __getitem__rE r[ r' r' r' r( rO n s � � � rO c @ s� e Zd ZejZedd�dd�Zej e d�dd�Z ej e d�dd �Z ed �d d �Z ed �d d�Zeed �dd��Zed �dd�ZdS )� CRLNumberN�� crl_numberr c C s t |t�std��|| _d S �Nz crl_number must be an integer�r" r6 rX � _crl_number�r0 rc r' r' r( r= � s zCRLNumber.__init__��otherr c C s t |t�stS | j|jkS r! )r" ra �NotImplementedrc �r0 ri r' r' r( �__eq__� s zCRLNumber.__eq__c C s | |k S r! r' rk r' r' r( �__ne__� s zCRLNumber.__ne__r, c C s t | j�S r! ��hashrc r/ r' r' r( �__hash__� s zCRLNumber.__hash__c C s d� | j�S )Nz<CRLNumber({})>)rI rc r/ r' r' r( r[ � s zCRLNumber.__repr__c C s | j S r! �rf r/ r' r' r( rc � s zCRLNumber.crl_numberc C s t �| �S r! �� rust_x509Zencode_extension_valuer/ r' r' r( r# � s zCRLNumber.public_bytes)rB rC rD r Z CRL_NUMBERr; r6 r= rJ �Any�boolrl rm rp rE r[ �propertyrc rM r# r' r' r' r( ra � s ra c @ s e Zd ZejZeje ejej e eje dd�dd�Z e ed d�dd��Ze dd d �d d ��Zed �d d�Zejed�dd�Zejed�dd�Ze d �dd�Zeeje d �dd��Zeejeje d �dd��Zeeje d �dd��Z ed �d d �Z dS ) �AuthorityKeyIdentifierN)�key_identifier�authority_cert_issuer� authority_cert_serial_numberr c C sr |d u |d u krt d��|d urBt|�}tdd� |D ��sBtd��|d ur\t|t�s\td��|| _|| _|| _d S )NzXauthority_cert_issuer and authority_cert_serial_number must both be present or both Nonec s s | ]}t |t�V qd S r! �r" r ��.0�xr' r' r( � <genexpr>� s z2AuthorityKeyIdentifier.__init__.<locals>.<genexpr>z;authority_cert_issuer must be a list of GeneralName objectsz/authority_cert_serial_number must be an integer) � ValueErrorrQ �allrX r" r6 �_key_identifier�_authority_cert_issuer� _authority_cert_serial_number)r0 rx ry rz r' r' r( r= � s* ���� �z AuthorityKeyIdentifier.__init__r c C s t |�}| |d d d�S �N)rx ry rz �r) )�clsr r% r' r' r( �from_issuer_public_key� s �z-AuthorityKeyIdentifier.from_issuer_public_key�SubjectKeyIdentifier)�skir c C s | |j d d d�S r� )r% )r� r� r' r' r( �"from_issuer_subject_key_identifier� s �z9AuthorityKeyIdentifier.from_issuer_subject_key_identifierr, c C s d� | �S )Nz�<AuthorityKeyIdentifier(key_identifier={0.key_identifier!r}, authority_cert_issuer={0.authority_cert_issuer}, authority_cert_serial_number={0.authority_cert_serial_number})>�rI r/ r' r' r( r[ � s ��z AuthorityKeyIdentifier.__repr__rh c C s2 t |t�stS | j|jko0| j|jko0| j|jkS r! )r" rw rj rx ry rz rk r' r' r( rl � s ���z AuthorityKeyIdentifier.__eq__c C s | |k S r! r' rk r' r' r( rm s z AuthorityKeyIdentifier.__ne__c C s, | j d u rd }n t| j �}t| j|| jf�S r! )ry �tuplero rx rz )r0 Zacir' r' r( rp s �z AuthorityKeyIdentifier.__hash__c C s | j S r! )r� r/ r' r' r( rx s z%AuthorityKeyIdentifier.key_identifierc C s | j S r! )r� r/ r' r' r( ry s z,AuthorityKeyIdentifier.authority_cert_issuerc C s | j S r! )r� r/ r' r' r( rz s z3AuthorityKeyIdentifier.authority_cert_serial_numberc C s t �| �S r! rr r/ r' r' r( r# s z#AuthorityKeyIdentifier.public_bytes) rB rC rD r ZAUTHORITY_KEY_IDENTIFIERr; rJ �OptionalrM r\ r r6 r= � classmethodr r� r� rE r[ rt ru rl rm rp rv rx �Listry rz r# r' r' r' r( rw � s4 � &� � �rw c @ s� e Zd ZejZedd�dd�Zee d d�dd��Z e ed�d d ��Z e ed�d d ��Z ed�d d�Zejed�dd�Zejed�dd�Zed�dd�Zed�dd�ZdS )r� N)r% r c C s || _ d S r! �Z_digest)r0 r% r' r' r( r= ' s z SubjectKeyIdentifier.__init__r c C s | t |��S r! r� )r� r r' r' r( �from_public_key* s z$SubjectKeyIdentifier.from_public_keyr, c C s | j S r! r� r/ r' r' r( r% 0 s zSubjectKeyIdentifier.digestc C s | j S r! r� r/ r' r' r( rx 4 s z#SubjectKeyIdentifier.key_identifierc C s d� | j�S )Nz$<SubjectKeyIdentifier(digest={0!r})>)rI r% r/ r' r' r( r[ 8 s z SubjectKeyIdentifier.__repr__rh c C s t |t�stS t�| j|j�S r! )r" r� rj r Zbytes_eqr% rk r' r' r( rl ; s zSubjectKeyIdentifier.__eq__c C s | |k S r! r' rk r' r' r( rm A s zSubjectKeyIdentifier.__ne__c C s t | j�S r! )ro r% r/ r' r' r( rp D s z SubjectKeyIdentifier.__hash__c C s t �| �S r! rr r/ r' r' r( r# G s z!SubjectKeyIdentifier.public_bytes)rB rC rD r ZSUBJECT_KEY_IDENTIFIERr; rM r= r� r r� rv r% rx rE r[ rJ rt ru rl rm r6 rp r# r' r' r' r( r� $ s �r� c @ s� e Zd ZejZejd dd�dd�Ze d�\Z Z Z e d�dd �Zejed �d d �Zejed �d d�Zed�dd�Zed�dd�ZdS )�AuthorityInformationAccess�AccessDescriptionN�� descriptionsr c C s, t |�}tdd� |D ��s"td��|| _d S )Nc s s | ]}t |t�V qd S r! �r" r� r| r' r' r( r R � z6AuthorityInformationAccess.__init__.<locals>.<genexpr>�@Every item in the descriptions list must be an AccessDescription�rQ r� rX � _descriptions�r0 r� r' r' r( r= N s �z#AuthorityInformationAccess.__init__r� r, c C s d� | j�S )Nz <AuthorityInformationAccess({})>�rI r� r/ r' r' r( r[ \ s z#AuthorityInformationAccess.__repr__rh c C s t |t�stS | j|jkS r! )r" r� rj r� rk r' r' r( rl _ s z!AuthorityInformationAccess.__eq__c C s | |k S r! r' rk r' r' r( rm e s z!AuthorityInformationAccess.__ne__c C s t t| j��S r! �ro r� r� r/ r' r' r( rp h s z#AuthorityInformationAccess.__hash__c C s t �| �S r! rr r/ r' r' r( r# k s z'AuthorityInformationAccess.public_bytes)rB rC rD r Z AUTHORITY_INFORMATION_ACCESSr; rJ r\ r= r7 r^ r_ r` rE r[ rt ru rl rm r6 rp rM r# r' r' r' r( r� K s � r� c @ s� e Zd ZejZejd dd�dd�Ze d�\Z Z Z e d�dd �Zejed �d d �Zejed �d d�Zed�dd�Zed�dd�ZdS )�SubjectInformationAccessr� Nr� c C s, t |�}tdd� |D ��s"td��|| _d S )Nc s s | ]}t |t�V qd S r! r� r| r' r' r( r v r� z4SubjectInformationAccess.__init__.<locals>.<genexpr>r� r� r� r' r' r( r= r s �z!SubjectInformationAccess.__init__r� r, c C s d� | j�S )Nz <SubjectInformationAccess({})>r� r/ r' r' r( r[ � s z!SubjectInformationAccess.__repr__rh c C s t |t�stS | j|jkS r! )r" r� rj r� rk r' r' r( rl � s z SubjectInformationAccess.__eq__c C s | |k S r! r' rk r' r' r( rm � s z SubjectInformationAccess.__ne__c C s t t| j��S r! r� r/ r' r' r( rp � s z!SubjectInformationAccess.__hash__c C s t �| �S r! rr r/ r' r' r( r# � s z%SubjectInformationAccess.public_bytes)rB rC rD r ZSUBJECT_INFORMATION_ACCESSr; rJ r\ r= r7 r^ r_ r` rE r[ rt ru rl rm r6 rp rM r# r' r' r' r( r� o s � r� c @ s� e Zd Zeedd�dd�Zed�dd�Zej e d�d d �Z ej e d�d d �Z e d�d d�Zeed�dd��Zeed�dd��ZdS )r� N)� access_method�access_locationr c C s4 t |t�std��t |t�s$td��|| _|| _d S )Nz)access_method must be an ObjectIdentifierz%access_location must be a GeneralName)r" r rX r �_access_method�_access_location)r0 r� r� r' r' r( r= � s zAccessDescription.__init__r, c C s d� | �S )NzY<AccessDescription(access_method={0.access_method}, access_location={0.access_location})>r� r/ r' r' r( r[ � s ��zAccessDescription.__repr__rh c C s& t |t�stS | j|jko$| j|jkS r! )r" r� rj r� r� rk r' r' r( rl � s �zAccessDescription.__eq__c C s | |k S r! r' rk r' r' r( rm � s zAccessDescription.__ne__c C s t | j| jf�S r! )ro r� r� r/ r' r' r( rp � s zAccessDescription.__hash__c C s | j S r! )r� r/ r' r' r( r� � s z AccessDescription.access_methodc C s | j S r! )r� r/ r' r' r( r� � s z!AccessDescription.access_location)rB rC rD r r r= rE r[ rJ rt ru rl rm r6 rp rv r� r� r' r' r' r( r� � s � r� c @ s� e Zd ZejZeeje dd�dd�Z e ed�dd��Z e eje d�dd ��Z ed�d d �Zejed �d d�Zejed �dd�Ze d�dd�Zed�dd�ZdS )�BasicConstraintsN)�ca� path_lengthr c C sX t |t�std��|d ur&|s&td��|d urHt |t�r@|dk rHtd��|| _|| _d S )Nzca must be a boolean valuez)path_length must be None when ca is Falser z2path_length must be a non-negative integer or None)r" ru rX r� r6 �_ca� _path_length)r0 r� r� r' r' r( r= � s ���zBasicConstraints.__init__r, c C s | j S r! )r� r/ r' r' r( r� � s zBasicConstraints.cac C s | j S r! )r� r/ r' r' r( r� � s z BasicConstraints.path_lengthc C s d� | �S )Nz:<BasicConstraints(ca={0.ca}, path_length={0.path_length})>r� r/ r' r' r( r[ � s ��zBasicConstraints.__repr__rh c C s& t |t�stS | j|jko$| j|jkS r! )r" r� rj r� r� rk r' r' r( rl � s zBasicConstraints.__eq__c C s | |k S r! r' rk r' r' r( rm � s zBasicConstraints.__ne__c C s t | j| jf�S r! )ro r� r� r/ r' r' r( rp � s zBasicConstraints.__hash__c C s t �| �S r! rr r/ r' r' r( r# � s z BasicConstraints.public_bytes)rB rC rD r ZBASIC_CONSTRAINTSr; ru rJ r� r6 r= rv r� r� rE r[ rt rl rm rp rM r# r' r' r' r( r� � s r� c @ s� e Zd ZejZedd�dd�Zeed�dd��Z e j e d�d d �Z e j e d�d d �Zed�d d�Zed�dd�Zed�dd�ZdS )�DeltaCRLIndicatorNrb c C s t |t�std��|| _d S rd re rg r' r' r( r= � s zDeltaCRLIndicator.__init__r, c C s | j S r! rq r/ r' r' r( rc � s z DeltaCRLIndicator.crl_numberrh c C s t |t�stS | j|jkS r! )r" r� rj rc rk r' r' r( rl � s zDeltaCRLIndicator.__eq__c C s | |k S r! r' rk r' r' r( rm s zDeltaCRLIndicator.__ne__c C s t | j�S r! rn r/ r' r' r( rp s zDeltaCRLIndicator.__hash__c C s d� | �S )Nz.<DeltaCRLIndicator(crl_number={0.crl_number})>r� r/ r' r' r( r[ s zDeltaCRLIndicator.__repr__c C s t �| �S r! rr r/ r' r' r( r# s z DeltaCRLIndicator.public_bytes)rB rC rD r ZDELTA_CRL_INDICATORr; r6 r= rv rc rJ rt ru rl rm rp rE r[ rM r# r' r' r' r( r� � s r� c @ s� e Zd ZejZejd dd�dd�Ze d�\Z Z Z e d�dd �Zejed �d d �Zejed �d d�Zed�dd�Zed�dd�ZdS )�CRLDistributionPoints�DistributionPointN��distribution_pointsr c C s, t |�}tdd� |D ��s"td��|| _d S )Nc s s | ]}t |t�V qd S r! �r" r� r| r' r' r( r s z1CRLDistributionPoints.__init__.<locals>.<genexpr>�?distribution_points must be a list of DistributionPoint objects�rQ r� rX �_distribution_points�r0 r� r' r' r( r= s ��z CRLDistributionPoints.__init__r� r, c C s d� | j�S )Nz<CRLDistributionPoints({})>�rI r� r/ r' r' r( r[ $ s z CRLDistributionPoints.__repr__rh c C s t |t�stS | j|jkS r! )r" r� rj r� rk r' r' r( rl ' s z CRLDistributionPoints.__eq__c C s | |k S r! r' rk r' r' r( rm - s z CRLDistributionPoints.__ne__c C s t t| j��S r! �ro r� r� r/ r' r' r( rp 0 s z CRLDistributionPoints.__hash__c C s t �| �S r! rr r/ r' r' r( r# 3 s z"CRLDistributionPoints.public_bytes)rB rC rD r ZCRL_DISTRIBUTION_POINTSr; rJ r\ r= r7 r^ r_ r` rE r[ rt ru rl rm r6 rp rM r# r' r' r' r( r� s � � r� c @ s� e Zd ZejZejd dd�dd�Ze d�\Z Z Z e d�dd �Zejed �d d �Zejed �d d�Zed�dd�Zed�dd�ZdS )� FreshestCRLr� Nr� c C s, t |�}tdd� |D ��s"td��|| _d S )Nc s s | ]}t |t�V qd S r! r� r| r' r' r( r > s z'FreshestCRL.__init__.<locals>.<genexpr>r� r� r� r' r' r( r= : s ��zFreshestCRL.__init__r� r, c C s d� | j�S )Nz<FreshestCRL({})>r� r/ r' r' r( r[ L s zFreshestCRL.__repr__rh c C s t |t�stS | j|jkS r! )r" r� rj r� rk r' r' r( rl O s zFreshestCRL.__eq__c C s | |k S r! r' rk r' r' r( rm U s zFreshestCRL.__ne__c C s t t| j��S r! r� r/ r' r' r( rp X s zFreshestCRL.__hash__c C s t �| �S r! rr r/ r' r' r( r# [ s zFreshestCRL.public_bytes)rB rC rD r Z FRESHEST_CRLr; rJ r\ r= r7 r^ r_ r` rE r[ rt ru rl rm r6 rp rM r# r' r' r' r( r� 7 s � � r� c @ s� e Zd Zejeje eje ejejd ejeje dd�dd�Z e d�dd�Z ej e d �d d �Zej e d �d d �Zed�dd�Zeejeje d�dd��Zeeje d�dd��Zeejejd d�dd��Zeejeje d�dd��ZdS )r� � ReasonFlagsN)� full_name� relative_name�reasons� crl_issuerr c C s� |r|rt d��|d ur:t|�}tdd� |D ��s:td��|rPt|t�sPtd��|d urzt|�}tdd� |D ��sztd��|r�t|t�r�tdd� |D ��s�td ��|r�tj|v s�tj |v r�t d ��|r�|s�|s�|s�t d ��|| _ || _ || _ || _ d S ) NzOYou cannot provide both full_name and relative_name, at least one must be None.c s s | ]}t |t�V qd S r! r{ r| r' r' r( r o r� z-DistributionPoint.__init__.<locals>.<genexpr>z/full_name must be a list of GeneralName objectsz1relative_name must be a RelativeDistinguishedNamec s s | ]}t |t�V qd S r! r{ r| r' r' r( r | r� z2crl_issuer must be None or a list of general namesc s s | ]}t |t�V qd S r! �r" r� r| r' r' r( r � r� z0reasons must be None or frozenset of ReasonFlagszLunspecified and remove_from_crl are not valid reasons in a DistributionPointzPYou must supply crl_issuer, full_name, or relative_name when reasons is not None)r� rQ r� rX r" r � frozensetr� � unspecified�remove_from_crl� _full_name�_relative_name�_reasons� _crl_issuer)r0 r� r� r� r� r' r' r( r= ` sV �� ��������zDistributionPoint.__init__r, c C s d� | �S )Nz}<DistributionPoint(full_name={0.full_name}, relative_name={0.relative_name}, reasons={0.reasons}, crl_issuer={0.crl_issuer})>r� r/ r' r' r( r[ � s ��zDistributionPoint.__repr__rh c C s> t |t�stS | j|jko<| j|jko<| j|jko<| j|jkS r! )r" r� rj r� r� r� r� rk r' r' r( rl � s � � �zDistributionPoint.__eq__c C s | |k S r! r' rk r' r' r( rm � s zDistributionPoint.__ne__c C sH | j d urt| j �}nd }| jd ur0t| j�}nd }t|| j| j|f�S r! )r� r� r� ro r� r� )r0 �fnr� r' r' r( rp � s � �zDistributionPoint.__hash__c C s | j S r! �r� r/ r' r' r( r� � s zDistributionPoint.full_namec C s | j S r! �r� r/ r' r' r( r� � s z DistributionPoint.relative_namec C s | j S r! )r� r/ r' r' r( r� � s zDistributionPoint.reasonsc C s | j S r! )r� r/ r' r' r( r� � s z DistributionPoint.crl_issuer)rB rC rD rJ r� r\ r r � FrozenSetr= rE r[ rt ru rl rm r6 rp rv r� r� r� r� r� r' r' r' r( r� _ s$ � ; r� c @ s4 e Zd ZdZdZdZdZdZdZdZ dZ d Z d Z d S ) r� r� Z keyCompromiseZ cACompromiseZaffiliationChanged� supersededZcessationOfOperationZcertificateHoldZprivilegeWithdrawnZ aACompromiseZ removeFromCRLN) rB rC rD r� �key_compromise� ca_compromise�affiliation_changedr� �cessation_of_operation�certificate_hold�privilege_withdrawn� aa_compromiser� r' r' r' r( r� � s r� )� � � � � � � � c @ s� e Zd ZejZeje eje dd�dd�Z e d�dd�Z ej e d�d d �Zej e d�d d �Zed�d d�Zeeje d�dd��Zeeje d�dd��Zed�dd�ZdS )�PolicyConstraintsN)�require_explicit_policy�inhibit_policy_mappingr c C s\ |d urt |t�std��|d ur4t |t�s4td��|d u rL|d u rLtd��|| _|| _d S )Nz>require_explicit_policy must be a non-negative integer or Nonez=inhibit_policy_mapping must be a non-negative integer or NonezSAt least one of require_explicit_policy and inhibit_policy_mapping must not be None)r" r6 rX r� �_require_explicit_policy�_inhibit_policy_mapping)r0 r� r� r' r' r( r= � s$ �� ���zPolicyConstraints.__init__r, c C s d� | �S )Nz{<PolicyConstraints(require_explicit_policy={0.require_explicit_policy}, inhibit_policy_mapping={0.inhibit_policy_mapping})>r� r/ r' r' r( r[ s ��zPolicyConstraints.__repr__rh c C s& t |t�stS | j|jko$| j|jkS r! )r" r� rj r� r� rk r' r' r( rl s �zPolicyConstraints.__eq__c C s | |k S r! r' rk r' r' r( rm ' s zPolicyConstraints.__ne__c C s t | j| jf�S r! )ro r� r� r/ r' r' r( rp * s �zPolicyConstraints.__hash__c C s | j S r! )r� r/ r' r' r( r� / s z)PolicyConstraints.require_explicit_policyc C s | j S r! )r� r/ r' r' r( r� 3 s z(PolicyConstraints.inhibit_policy_mappingc C s t �| �S r! rr r/ r' r' r( r# 7 s z PolicyConstraints.public_bytes)rB rC rD r ZPOLICY_CONSTRAINTSr; rJ r� r6 r= rE r[ rt ru rl rm rp rv r� r� rM r# r' r' r' r( r� � s � r� c @ s� e Zd ZejZejd dd�dd�Ze d�\Z Z Z e d�dd �Zejed �d d �Zejed �d d�Zed�dd�Zed�dd�ZdS )�CertificatePolicies�PolicyInformationN)�policiesr c C s, t |�}tdd� |D ��s"td��|| _d S )Nc s s | ]}t |t�V qd S r! )r" r� r| r' r' r( r @ r� z/CertificatePolicies.__init__.<locals>.<genexpr>z;Every item in the policies list must be a PolicyInformation)rQ r� rX � _policies)r0 r� r' r' r( r= > s �z CertificatePolicies.__init__r� r, c C s d� | j�S )Nz<CertificatePolicies({})>)rI r� r/ r' r' r( r[ J s z CertificatePolicies.__repr__rh c C s t |t�stS | j|jkS r! )r" r� rj r� rk r' r' r( rl M s zCertificatePolicies.__eq__c C s | |k S r! r' rk r' r' r( rm S s zCertificatePolicies.__ne__c C s t t| j��S r! )ro r� r� r/ r' r' r( rp V s z CertificatePolicies.__hash__c C s t �| �S r! rr r/ r' r' r( r# Y s z CertificatePolicies.public_bytes)rB rC rD r ZCERTIFICATE_POLICIESr; rJ r\ r= r7 r^ r_ r` rE r[ rt ru rl rm r6 rp rM r# r' r' r' r( r� ; s r� c @ s� e Zd Zeejejejedf dd�dd�Z ed�dd�Z ej e d �d d �Z ej e d �d d �Zed�dd�Zeed�dd��Zeejejejedf d�dd��ZdS )r� � UserNoticeN)�policy_identifier�policy_qualifiersr c C sL t |t�std��|| _|d urBt|�}tdd� |D ��sBtd��|| _d S )Nz-policy_identifier must be an ObjectIdentifierc s s | ]}t |ttf�V qd S r! )r" rE r� r| r' r' r( r l s z-PolicyInformation.__init__.<locals>.<genexpr>zMpolicy_qualifiers must be a list of strings and/or UserNotice objects or None)r" r rX �_policy_identifierrQ r� �_policy_qualifiers)r0 r� r� r' r' r( r= ^ s ��zPolicyInformation.__init__r, c C s d� | �S )Nze<PolicyInformation(policy_identifier={0.policy_identifier}, policy_qualifiers={0.policy_qualifiers})>r� r/ r' r' r( r[ v s ��zPolicyInformation.__repr__rh c C s& t |t�stS | j|jko$| j|jkS r! )r" r� rj r� r� rk r' r' r( rl | s �zPolicyInformation.__eq__c C s | |k S r! r' rk r' r' r( rm � s zPolicyInformation.__ne__c C s( | j d urt| j �}nd }t| j|f�S r! )r� r� ro r� )r0 Zpqr' r' r( rp � s �zPolicyInformation.__hash__c C s | j S r! )r� r/ r' r' r( r� � s z#PolicyInformation.policy_identifierc C s | j S r! )r� r/ r' r' r( r� � s z#PolicyInformation.policy_qualifiers)rB rC rD r rJ r� r\ �UnionrE r= r[ rt ru rl rm r6 rp rv r� r� r� r' r' r' r( r� ] s �� �r� c @ s� e Zd Zejd eje dd�dd�Zed�dd�Zeje d �d d �Z eje d �d d �Z e d�dd�Z eejd d�dd��Zeeje d�dd��ZdS )r� �NoticeReferenceN)�notice_reference� explicit_textr c C s& |rt |t�std��|| _|| _d S )Nz2notice_reference must be None or a NoticeReference)r" r� rX �_notice_reference�_explicit_text)r0 r� r� r' r' r( r= � s ��zUserNotice.__init__r, c C s d� | �S )NzV<UserNotice(notice_reference={0.notice_reference}, explicit_text={0.explicit_text!r})>r� r/ r' r' r( r[ � s ��zUserNotice.__repr__rh c C s& t |t�stS | j|jko$| j|jkS r! )r" r� rj r� r� rk r' r' r( rl � s �zUserNotice.__eq__c C s | |k S r! r' rk r' r' r( rm � s zUserNotice.__ne__c C s t | j| jf�S r! )ro r� r� r/ r' r' r( rp � s zUserNotice.__hash__c C s | j S r! )r� r/ r' r' r( r� � s zUserNotice.notice_referencec C s | j S r! )r� r/ r' r' r( r� � s zUserNotice.explicit_text)rB rC rD rJ r� rE r= r[ rt ru rl rm r6 rp rv r� r� r' r' r' r( r� � s � r� c @ s� e Zd Zeje eje dd�dd�Zed�dd�Z ej e d�d d �Z ej e d�d d �Z ed�d d�Zeeje d�dd��Zeeje d�dd��ZdS )r� N)� organization�notice_numbersr c C s2 || _ t|�}tdd� |D ��s(td��|| _d S )Nc s s | ]}t |t�V qd S r! )r" r6 r| r' r' r( r � r� z+NoticeReference.__init__.<locals>.<genexpr>z)notice_numbers must be a list of integers)� _organizationrQ r� rX �_notice_numbers)r0 r� r� r' r' r( r= � s zNoticeReference.__init__r, c C s d� | �S )NzU<NoticeReference(organization={0.organization!r}, notice_numbers={0.notice_numbers})>r� r/ r' r' r( r[ � s ��zNoticeReference.__repr__rh c C s& t |t�stS | j|jko$| j|jkS r! )r" r� rj r� r� rk r' r' r( rl � s �zNoticeReference.__eq__c C s | |k S r! r' rk r' r' r( rm � s zNoticeReference.__ne__c C s t | jt| j�f�S r! )ro r� r� r� r/ r' r' r( rp � s zNoticeReference.__hash__c C s | j S r! )r� r/ r' r' r( r� � s z NoticeReference.organizationc C s | j S r! )r� r/ r' r' r( r� � s z NoticeReference.notice_numbers)rB rC rD rJ r� rE r\ r6 r= r[ rt ru rl rm rp rv r� r� r� r' r' r' r( r� � s � r� c @ s� e Zd ZejZeje dd�dd�Z e d�\Z Z Z ed�dd�Zejed �d d �Zejed �d d �Zed�dd�Zed�dd�ZdS )�ExtendedKeyUsageN)�usagesr c C s, t |�}tdd� |D ��s"td��|| _d S )Nc s s | ]}t |t�V qd S r! )r" r r| r' r' r( r � r� z,ExtendedKeyUsage.__init__.<locals>.<genexpr>z9Every item in the usages list must be an ObjectIdentifier)rQ r� rX �_usages)r0 r� r' r' r( r= � s �zExtendedKeyUsage.__init__r� r, c C s d� | j�S )Nz<ExtendedKeyUsage({})>)rI r� r/ r' r' r( r[ s zExtendedKeyUsage.__repr__rh c C s t |t�stS | j|jkS r! )r" r� rj r� rk r' r' r( rl s zExtendedKeyUsage.__eq__c C s | |k S r! r' rk r' r' r( rm s zExtendedKeyUsage.__ne__c C s t t| j��S r! )ro r� r� r/ r' r' r( rp s zExtendedKeyUsage.__hash__c C s t �| �S r! rr r/ r' r' r( r# s z ExtendedKeyUsage.public_bytes)rB rC rD r ZEXTENDED_KEY_USAGEr; rJ r\ r r= r7 r^ r_ r` rE r[ rt ru rl rm r6 rp rM r# r' r' r' r( r� � s r� c @ s` e Zd ZejZejed�dd�Z ejed�dd�Z e d�dd�Z e d�d d �Zed�d d �Zd S )� OCSPNoCheckrh c C s t |t�stS dS �NT)r" r� rj rk r' r' r( rl s zOCSPNoCheck.__eq__c C s | |k S r! r' rk r' r' r( rm s zOCSPNoCheck.__ne__r, c C s t t�S r! )ro r� r/ r' r' r( rp # s zOCSPNoCheck.__hash__c C s dS )Nz<OCSPNoCheck()>r' r/ r' r' r( r[ & s zOCSPNoCheck.__repr__c C s t �| �S r! rr r/ r' r' r( r# ) s zOCSPNoCheck.public_bytesN)rB rC rD r Z OCSP_NO_CHECKr; rJ rt ru rl rm r6 rp rE r[ rM r# r' r' r' r( r� s r� c @ s` e Zd ZejZejed�dd�Z ejed�dd�Z e d�dd�Z e d�d d �Zed�d d �Zd S )� PrecertPoisonrh c C s t |t�stS dS r� )r" r� rj rk r' r' r( rl 0 s zPrecertPoison.__eq__c C s | |k S r! r' rk r' r' r( rm 6 s zPrecertPoison.__ne__r, c C s t t�S r! )ro r� r/ r' r' r( rp 9 s zPrecertPoison.__hash__c C s dS )Nz<PrecertPoison()>r' r/ r' r' r( r[ < s zPrecertPoison.__repr__c C s t �| �S r! rr r/ r' r' r( r# ? s zPrecertPoison.public_bytesN)rB rC rD r ZPRECERT_POISONr; rJ rt ru rl rm r6 rp rE r[ rM r# r' r' r' r( r� - s r� c @ s� e Zd ZejZejd dd�dd�Ze d�\Z Z Z e d�dd �Zejed �d d �Zejed �d d�Zed�dd�Zed�dd�ZdS )� TLSFeature�TLSFeatureTypeN)�featuresr c C s8 t |�}tdd� |D ��r&t|�dkr.td��|| _d S )Nc s s | ]}t |t�V qd S r! )r" r� r| r' r' r( r I r� z&TLSFeature.__init__.<locals>.<genexpr>r z@features must be a list of elements from the TLSFeatureType enum)rQ r� r- rX � _features)r0 r� r' r' r( r= F s � ��zTLSFeature.__init__r� r, c C s d� | �S )Nz$<TLSFeature(features={0._features})>r� r/ r' r' r( r[ U s zTLSFeature.__repr__rh c C s t |t�stS | j|jkS r! )r" r� rj r� rk r' r' r( rl X s zTLSFeature.__eq__c C s | |k S r! r' rk r' r' r( rm ^ s zTLSFeature.__ne__c C s t t| j��S r! )ro r� r� r/ r' r' r( rp a s zTLSFeature.__hash__c C s t �| �S r! rr r/ r' r' r( r# d s zTLSFeature.public_bytes)rB rC rD r Z TLS_FEATUREr; rJ r\ r= r7 r^ r_ r` rE r[ rt ru rl rm r6 rp rM r# r' r' r' r( r� C s r� c @ s e Zd ZdZdZdS )r� r� � N)rB rC rD Zstatus_requestZstatus_request_v2r' r' r' r( r� h s r� c C s i | ] }|j |�qS r' �rY r| r' r' r( � <dictcomp>s r� r� c @ s� e Zd ZejZedd�dd�Zed�dd�Z e j e d�d d �Z e j e d�d d �Zed�d d�Zeed�dd��Zed�dd�ZdS )�InhibitAnyPolicyN)� skip_certsr c C s, t |t�std��|dk r"td��|| _d S )Nz skip_certs must be an integerr z)skip_certs must be a non-negative integer)r" r6 rX r� � _skip_certs)r0 r� r' r' r( r= y s zInhibitAnyPolicy.__init__r, c C s d� | �S )Nz-<InhibitAnyPolicy(skip_certs={0.skip_certs})>r� r/ r' r' r( r[ � s zInhibitAnyPolicy.__repr__rh c C s t |t�stS | j|jkS r! )r" r� rj r� rk r' r' r( rl � s zInhibitAnyPolicy.__eq__c C s | |k S r! r' rk r' r' r( rm � s zInhibitAnyPolicy.__ne__c C s t | j�S r! )ro r� r/ r' r' r( rp � s zInhibitAnyPolicy.__hash__c C s | j S r! )r� r/ r' r' r( r� � s zInhibitAnyPolicy.skip_certsc C s t �| �S r! rr r/ r' r' r( r# � s z InhibitAnyPolicy.public_bytes)rB rC rD r ZINHIBIT_ANY_POLICYr; r6 r= rE r[ rJ rt ru rl rm rp rv r� rM r# r' r' r' r( r� v s r� c @ s" e Zd ZejZeeeeeeeeedd� dd�Zeed�dd��Z eed�dd ��Z eed�d d ��Z eed�d d ��Z eed�dd��Z eed�dd��Zeed�dd��Zeed�dd��Zeed�dd��Zed�dd�Zejed�dd �Zejed�d d �Zed�d d �Zed�d!d"�ZdS )#�KeyUsageN) �digital_signature�content_commitment�key_encipherment�data_encipherment� key_agreement� key_cert_sign�crl_sign� encipher_only� decipher_onlyr c C sN |s|s | rt d��|| _|| _|| _|| _|| _|| _|| _|| _| | _ d S )NzKencipher_only and decipher_only can only be true when key_agreement is true) r� �_digital_signature�_content_commitment�_key_encipherment�_data_encipherment�_key_agreement�_key_cert_sign� _crl_sign�_encipher_only�_decipher_only) r0 r r r r r r r r r r' r' r( r= � s �zKeyUsage.__init__r, c C s | j S r! )r r/ r' r' r( r � s zKeyUsage.digital_signaturec C s | j S r! )r r/ r' r' r( r � s zKeyUsage.content_commitmentc C s | j S r! )r r/ r' r' r( r � s zKeyUsage.key_enciphermentc C s | j S r! )r r/ r' r' r( r � s zKeyUsage.data_enciphermentc C s | j S r! )r r/ r' r' r( r � s zKeyUsage.key_agreementc C s | j S r! )r r/ r' r' r( r � s zKeyUsage.key_cert_signc C s | j S r! )r r/ r' r' r( r � s zKeyUsage.crl_signc C s | j std��n| jS d S )Nz7encipher_only is undefined unless key_agreement is true)r r� r r/ r' r' r( r � s �zKeyUsage.encipher_onlyc C s | j std��n| jS d S )Nz7decipher_only is undefined unless key_agreement is true)r r� r r/ r' r' r( r � s �zKeyUsage.decipher_onlyc C s: z| j }| j}W n ty* d}d}Y n0 d�| ||�S )NFa- <KeyUsage(digital_signature={0.digital_signature}, content_commitment={0.content_commitment}, key_encipherment={0.key_encipherment}, data_encipherment={0.data_encipherment}, key_agreement={0.key_agreement}, key_cert_sign={0.key_cert_sign}, crl_sign={0.crl_sign}, encipher_only={1}, decipher_only={2})>)r r r� rI )r0 r r r' r' r( r[ � s ��zKeyUsage.__repr__rh c C sz t |t�stS | j|jkox| j|jkox| j|jkox| j|jkox| j|jkox| j|jkox| j |j kox| j |j kox| j |j kS r! ) r" r� rj r r r r r r r r r rk r' r' r( rl � s& � � � � � � � �zKeyUsage.__eq__c C s | |k S r! r' rk r' r' r( rm s zKeyUsage.__ne__c C s, t | j| j| j| j| j| j| j| j| j f �S r! ) ro r r r r r r r r r r/ r' r' r( rp s ��zKeyUsage.__hash__c C s t �| �S r! rr r/ r' r' r( r# s zKeyUsage.public_bytes) rB rC rD r Z KEY_USAGEr; ru r= rv r r r r r r r r r rE r[ rJ rt rl rm r6 rp rM r# r' r' r' r( r� � sF � r� c @ s� e Zd ZejZejeje ejeje dd�dd�Z ej e d�dd�Z ej e d�dd �Zeje dd �d d �Zed �dd�Zed �dd�Zeejeje d �dd��Zeejeje d �dd��Zed �dd�ZdS )�NameConstraintsN)�permitted_subtrees�excluded_subtreesr c C s� |d ur4t |�}tdd� |D ��s*td��| �|� |d urht |�}tdd� |D ��s^td��| �|� |d u r�|d u r�td��|| _|| _d S )Nc s s | ]}t |t�V qd S r! r{ r| r' r' r( r + r� z+NameConstraints.__init__.<locals>.<genexpr>z@permitted_subtrees must be a list of GeneralName objects or Nonec s s | ]}t |t�V qd S r! r{ r| r' r' r( r 5 r� z?excluded_subtrees must be a list of GeneralName objects or NonezIAt least one of permitted_subtrees and excluded_subtrees must not be None)rQ r� rX �_validate_ip_namer� �_permitted_subtrees�_excluded_subtrees)r0 r r r' r' r( r= $ s( � � �zNameConstraints.__init__rh c C s& t |t�stS | j|jko$| j|jkS r! )r" r rj r r rk r' r' r( rl F s �zNameConstraints.__eq__c C s | |k S r! r' rk r' r' r( rm O s zNameConstraints.__ne__)�treer c C s t dd� |D ��rtd��d S )Nc s s. | ]&}t |t�o$t |jtjtjf� V qd S r! )r" r rY � ipaddressZ IPv4NetworkZ IPv6Network)r} �namer' r' r( r S s � �z4NameConstraints._validate_ip_name.<locals>.<genexpr>zGIPAddress name constraints must be an IPv4Network or IPv6Network object)�anyrX )r0 r r' r' r( r R s ��z!NameConstraints._validate_ip_namer, c C s d� | �S )Nze<NameConstraints(permitted_subtrees={0.permitted_subtrees}, excluded_subtrees={0.excluded_subtrees})>r� r/ r' r' r( r[ _ s ��zNameConstraints.__repr__c C s@ | j d urt| j �}nd }| jd ur0t| j�}nd }t||f�S r! )r r� r ro )r0 Zps�esr' r' r( rp e s � �zNameConstraints.__hash__c C s | j S r! )r r/ r' r' r( r v s z"NameConstraints.permitted_subtreesc C s | j S r! )r r/ r' r' r( r | s z!NameConstraints.excluded_subtreesc C s t �| �S r! rr r/ r' r' r( r# � s z NameConstraints.public_bytes)rB rC rD r ZNAME_CONSTRAINTSr; rJ r� r\ r r= rt ru rl rm r rE r[ r6 rp rv r� r r rM r# r' r' r' r( r ! s" � " ��r c @ s� e Zd Zeeedd�dd�Zeed�dd��Zeed�dd ��Z eed�d d ��Z e d�d d �Z e jed�dd�Ze jed�dd�Zed�dd�ZdS )� ExtensionN)r; �criticalrY r c C s: t |t�std��t |t�s$td��|| _|| _|| _d S )Nz2oid argument must be an ObjectIdentifier instance.z critical must be a boolean value)r" r rX ru �_oid� _critical�_value)r0 r; r rY r' r' r( r= � s � zExtension.__init__r, c C s | j S r! �r r/ r' r' r( r; � s z Extension.oidc C s | j S r! )r r/ r' r' r( r � s zExtension.criticalc C s | j S r! �r! r/ r' r' r( rY � s zExtension.valuec C s d� | �S )Nz@<Extension(oid={0.oid}, critical={0.critical}, value={0.value})>r� r/ r' r' r( r[ � s ��zExtension.__repr__rh c C s2 t |t�stS | j|jko0| j|jko0| j|jkS r! )r" r rj r; r rY rk r' r' r( rl � s � �zExtension.__eq__c C s | |k S r! r' rk r' r' r( rm � s zExtension.__ne__c C s t | j| j| jf�S r! )ro r; r rY r/ r' r' r( rp � s zExtension.__hash__)rB rC rD r ru r r= rv r; r rY rE r[ rJ rt rl rm r6 rp r' r' r' r( r � s � r c @ s� e Zd Zeje dd�dd�Zed�\ZZ Z ej ej ej e ej e ej e f eje d�dd��Zej ej e eje d�d d��Zej ej e eje d�d d��Zej ej e eje d�d d��Zej ej e eje d�d d��Zej ej e ej e ej e ej e ej e ej e ej e f ej eje eje eje eje eje f d�d d�Zed�dd�Zej e d�dd�Z ej e d�dd�Z e d�dd�Z!dS )� GeneralNamesN�� general_namesr c C s, t |�}tdd� |D ��s"td��|| _d S )Nc s s | ]}t |t�V qd S r! r{ r| r' r' r( r � r� z(GeneralNames.__init__.<locals>.<genexpr>z^Every item in the general_names list must be an object conforming to the GeneralName interface)rQ r� rX �_general_names�r0 r& r' r' r( r= � s �zGeneralNames.__init__r' ��typer c C s d S r! r' �r0 r* r' r' r( �get_values_for_type� s z GeneralNames.get_values_for_typec C s d S r! r' r+ r' r' r( r, � s c C s d S r! r' r+ r' r' r( r, � s c C s d S r! r' r+ r' r' r( r, � s c C s d S r! r' r+ r' r' r( r, � s c s0 � fdd�| D �}� t kr(dd� |D �S t|�S )Nc 3 s | ]}t |� �r|V qd S r! )r" �r} �i�r* r' r( r r� z3GeneralNames.get_values_for_type.<locals>.<genexpr>c S s g | ] }|j �qS r' r� r- r' r' r( � <listcomp> r� z4GeneralNames.get_values_for_type.<locals>.<listcomp>)r rQ )r0 r* Zobjsr' r/ r( r, � s r, c C s d� | j�S )Nz<GeneralNames({})>�rI r' r/ r' r' r( r[ s zGeneralNames.__repr__rh c C s t |t�stS | j|jkS r! )r" r$ rj r' rk r' r' r( rl s zGeneralNames.__eq__c C s | |k S r! r' rk r' r' r( rm s zGeneralNames.__ne__c C s t t| j��S r! )ro r� r' r/ r' r' r( rp s zGeneralNames.__hash__)"rB rC rD rJ r\ r r= r7 r^ r_ r` �overloadr� r] r r r r� rE r, r r r r r r r r[ rt ru rl rm r6 rp r' r' r' r( r$ � sd ��� ������ ��� r$ c @ s� e Zd ZejZeje dd�dd�Z e d�\Z Z Z ejejeje eje eje f eje d�dd��Zejeje eje d�d d��Zejeje eje d�d d��Zejeje eje d�d d��Zejeje eje d�d d��Zejeje eje eje eje eje eje eje f ejeje eje eje eje eje f d�d d�Zed�dd�Z ej e d�dd�Z!ej e d�dd�Z"e#d�dd�Z$e%d�dd�Z&dS )�SubjectAlternativeNameNr% c C s t |�| _d S r! �r$ r' r( r' r' r( r= s z SubjectAlternativeName.__init__r' r) c C s d S r! r' r+ r' r' r( r, s z*SubjectAlternativeName.get_values_for_typec C s d S r! r' r+ r' r' r( r, ( s c C s d S r! r' r+ r' r' r( r, / s c C s d S r! r' r+ r' r' r( r, 6 s c C s d S r! r' r+ r' r' r( r, < s c C s | j �|�S r! �r' r, r+ r' r' r( r, B s r, c C s d� | j�S )Nz <SubjectAlternativeName({})>r1 r/ r' r' r( r[ V s z SubjectAlternativeName.__repr__rh c C s t |t�stS | j|jkS r! )r" r3 rj r' rk r' r' r( rl Y s z SubjectAlternativeName.__eq__c C s | |k S r! r' rk r' r' r( rm _ s z SubjectAlternativeName.__ne__c C s t | j�S r! �ro r' r/ r' r' r( rp b s z SubjectAlternativeName.__hash__c C s t �| �S r! rr r/ r' r' r( r# e s z#SubjectAlternativeName.public_bytes)'rB rC rD r ZSUBJECT_ALTERNATIVE_NAMEr; rJ r\ r r= r7 r^ r_ r` r2 r� r] r r r r� rE r, r r r r r r r r[ rt ru rl rm r6 rp rM r# r' r' r' r( r3 sh ��� ������ ��� r3 c @ s� e Zd ZejZeje dd�dd�Z e d�\Z Z Z ejejeje eje eje f eje d�dd��Zejeje eje d�d d��Zejeje eje d�d d��Zejeje eje d�d d��Zejeje eje d�d d��Zejeje eje eje eje eje eje eje f ejeje eje eje eje eje f d�d d�Zed�dd�Z ej e d�dd�Z!ej e d�dd�Z"e#d�dd�Z$e%d�dd�Z&dS )�IssuerAlternativeNameNr% c C s t |�| _d S r! r4 r( r' r' r( r= l s z IssuerAlternativeName.__init__r' r) c C s d S r! r' r+ r' r' r( r, q s z)IssuerAlternativeName.get_values_for_typec C s d S r! r' r+ r' r' r( r, | s c C s d S r! r' r+ r' r' r( r, � s c C s d S r! r' r+ r' r' r( r, � s c C s d S r! r' r+ r' r' r( r, � s c C s | j �|�S r! r5 r+ r' r' r( r, � s r, c C s d� | j�S )Nz<IssuerAlternativeName({})>r1 r/ r' r' r( r[ � s z IssuerAlternativeName.__repr__rh c C s t |t�stS | j|jkS r! )r" r7 rj r' rk r' r' r( rl � s z IssuerAlternativeName.__eq__c C s | |k S r! r' rk r' r' r( rm � s z IssuerAlternativeName.__ne__c C s t | j�S r! r6 r/ r' r' r( rp � s z IssuerAlternativeName.__hash__c C s t �| �S r! rr r/ r' r' r( r# � s z"IssuerAlternativeName.public_bytes)'rB rC rD r ZISSUER_ALTERNATIVE_NAMEr; rJ r\ r r= r7 r^ r_ r` r2 r� r] r r r r� rE r, r r r r r r r r[ rt ru rl rm r6 rp rM r# r' r' r' r( r7 i sh ��� ������ ��� r7 c @ s� e Zd ZejZeje dd�dd�Z e d�\Z Z Z ejejeje eje eje f eje d�dd��Zejeje eje d�d d��Zejeje eje d�d d��Zejeje eje d�d d��Zejeje eje d�d d��Zejeje eje eje eje eje eje eje f ejeje eje eje eje eje f d�d d�Zed�dd�Z ej e d�dd�Z!ej e d�dd�Z"e#d�dd�Z$e%d�dd�Z&dS )�CertificateIssuerNr% c C s t |�| _d S r! r4 r( r' r' r( r= � s zCertificateIssuer.__init__r' r) c C s d S r! r' r+ r' r' r( r, � s z%CertificateIssuer.get_values_for_typec C s d S r! r' r+ r' r' r( r, � s c C s d S r! r' r+ r' r' r( r, � s c C s d S r! r' r+ r' r' r( r, � s c C s d S r! r' r+ r' r' r( r, � s c C s | j �|�S r! r5 r+ r' r' r( r, � s r, c C s d� | j�S )Nz<CertificateIssuer({})>r1 r/ r' r' r( r[ � s zCertificateIssuer.__repr__rh c C s t |t�stS | j|jkS r! )r" r8 rj r' rk r' r' r( rl s zCertificateIssuer.__eq__c C s | |k S r! r' rk r' r' r( rm s zCertificateIssuer.__ne__c C s t | j�S r! r6 r/ r' r' r( rp s zCertificateIssuer.__hash__c C s t �| �S r! rr r/ r' r' r( r# s z CertificateIssuer.public_bytes)'rB rC rD r ZCERTIFICATE_ISSUERr; rJ r\ r r= r7 r^ r_ r` r2 r� r] r r r r� rE r, r r r r r r r r[ rt ru rl rm r6 rp rM r# r' r' r' r( r8 � sh ��� ������ ��� r8 c @ s� e Zd ZejZedd�dd�Zed�dd�Z e j e d�d d �Z e j e d�d d �Zed�d d�Zeed�dd��Zed�dd�ZdS )� CRLReasonN)�reasonr c C s t |t�std��|| _d S )Nz*reason must be an element from ReasonFlags)r" r� rX �_reason)r0 r: r' r' r( r= s zCRLReason.__init__r, c C s d� | j�S )Nz<CRLReason(reason={})>)rI r; r/ r' r' r( r[ s zCRLReason.__repr__rh c C s t |t�stS | j|jkS r! )r" r9 rj r: rk r' r' r( rl s zCRLReason.__eq__c C s | |k S r! r' rk r' r' r( rm # s zCRLReason.__ne__c C s t | j�S r! )ro r: r/ r' r' r( rp & s zCRLReason.__hash__c C s | j S r! )r; r/ r' r' r( r: ) s zCRLReason.reasonc C s t �| �S r! rr r/ r' r' r( r# - s zCRLReason.public_bytes)rB rC rD r Z CRL_REASONr; r� r= rE r[ rJ rt ru rl rm r6 rp rv r: rM r# r' r' r' r( r9 s r9 c @ s� e Zd ZejZejdd�dd�Zed�dd�Z e j e d�d d �Z e j e d�d d �Zed�d d�Zeejd�dd��Zed�dd�ZdS )�InvalidityDateN)�invalidity_dater c C s t |tj�std��|| _d S )Nz+invalidity_date must be a datetime.datetime)r" �datetimerX �_invalidity_date)r0 r= r' r' r( r= 4 s zInvalidityDate.__init__r, c C s d� | j�S )Nz$<InvalidityDate(invalidity_date={})>)rI r? r/ r' r' r( r[ : s �zInvalidityDate.__repr__rh c C s t |t�stS | j|jkS r! )r" r< rj r= rk r' r' r( rl ? s zInvalidityDate.__eq__c C s | |k S r! r' rk r' r' r( rm E s zInvalidityDate.__ne__c C s t | j�S r! )ro r= r/ r' r' r( rp H s zInvalidityDate.__hash__c C s | j S r! )r? r/ r' r' r( r= K s z InvalidityDate.invalidity_datec C s t �| �S r! rr r/ r' r' r( r# O s zInvalidityDate.public_bytes)rB rC rD r ZINVALIDITY_DATEr; r> r= rE r[ rJ rt ru rl rm r6 rp rv r= rM r# r' r' r' r( r< 1 s r< c @ s� e Zd ZejZeje dd�dd�Z e d�\Z Z Z ed�dd�Zed�d d �Zejed �d d �Zejed �dd�Zed�dd�ZdS )�)PrecertificateSignedCertificateTimestampsN�� signed_certificate_timestampsr c C s, t |�}tdd� |D ��s"td��|| _d S )Nc s s | ]}t |t�V qd S r! �r" r �r} Zsctr' r' r( r ] s �zEPrecertificateSignedCertificateTimestamps.__init__.<locals>.<genexpr>�YEvery item in the signed_certificate_timestamps list must be a SignedCertificateTimestamp�rQ r� rX � _signed_certificate_timestamps�r0 rB r' r' r( r= V s ��z2PrecertificateSignedCertificateTimestamps.__init__rG r, c C s d� t| ��S )Nz/<PrecertificateSignedCertificateTimestamps({})>�rI rQ r/ r' r' r( r[ k s �z2PrecertificateSignedCertificateTimestamps.__repr__c C s t t| j��S r! �ro r� rG r/ r' r' r( rp p s z2PrecertificateSignedCertificateTimestamps.__hash__rh c C s t |t�stS | j|jkS r! )r" r@ rj rG rk r' r' r( rl s s ��z0PrecertificateSignedCertificateTimestamps.__eq__c C s | |k S r! r' rk r' r' r( rm | s z0PrecertificateSignedCertificateTimestamps.__ne__c C s t �| �S r! rr r/ r' r' r( r# s z6PrecertificateSignedCertificateTimestamps.public_bytes)rB rC rD r Z%PRECERT_SIGNED_CERTIFICATE_TIMESTAMPSr; rJ r\ r r= r7 r^ r_ r` rE r[ r6 rp rt ru rl rm rM r# r' r' r' r( r@ S s �� � r@ c @ s� e Zd ZejZeje dd�dd�Z e d�\Z Z Z ed�dd�Zed�d d �Zejed �d d �Zejed �dd�Zed�dd�ZdS )�SignedCertificateTimestampsNrA c C s, t |�}tdd� |D ��s"td��|| _d S )Nc s s | ]}t |t�V qd S r! rC rD r' r' r( r � s �z7SignedCertificateTimestamps.__init__.<locals>.<genexpr>rE rF rH r' r' r( r= � s ��z$SignedCertificateTimestamps.__init__rG r, c C s d� t| ��S )Nz!<SignedCertificateTimestamps({})>rI r/ r' r' r( r[ � s z$SignedCertificateTimestamps.__repr__c C s t t| j��S r! rJ r/ r' r' r( rp � s z$SignedCertificateTimestamps.__hash__rh c C s t |t�stS | j|jkS r! )r" rK rj rG rk r' r' r( rl � s ��z"SignedCertificateTimestamps.__eq__c C s | |k S r! r' rk r' r' r( rm � s z"SignedCertificateTimestamps.__ne__c C s t �| �S r! rr r/ r' r' r( r# � s z(SignedCertificateTimestamps.public_bytes)rB rC rD r Z SIGNED_CERTIFICATE_TIMESTAMPSr; rJ r\ r r= r7 r^ r_ r` rE r[ r6 rp rt ru rl rm rM r# r' r' r' r( rK � s �� � rK c @ s� e Zd ZejZedd�dd�Zej e d�dd�Z ej e d�dd �Z e d �d d �Zed �d d�Zeed �dd��Zed �dd�ZdS )� OCSPNonceN)�noncer c C s t |t�std��|| _d S )Nznonce must be bytes)r" rM rX �_nonce)r0 rM r' r' r( r= � s zOCSPNonce.__init__rh c C s t |t�stS | j|jkS r! )r" rL rj rM rk r' r' r( rl � s zOCSPNonce.__eq__c C s | |k S r! r' rk r' r' r( rm � s zOCSPNonce.__ne__r, c C s t | j�S r! )ro rM r/ r' r' r( rp � s zOCSPNonce.__hash__c C s d� | �S )Nz <OCSPNonce(nonce={0.nonce!r})>r� r/ r' r' r( r[ � s zOCSPNonce.__repr__c C s | j S r! )rN r/ r' r' r( rM � s zOCSPNonce.noncec C s t �| �S r! rr r/ r' r' r( r# � s zOCSPNonce.public_bytes)rB rC rD r ZNONCEr; rM r= rJ rt ru rl rm r6 rp rE r[ rv rM r# r' r' r' r( rL � s rL c @ s6 e Zd ZejZejeje eje e e ejej e e e dd�dd�Zed�dd�Zeje d�d d �Zeje d�d d �Zed�d d�Zeejeje d�dd��Zeeje d�dd��Zee d�dd��Zee d�dd��Zeejej e d�dd��Z ee d�dd��Z ee d�dd ��Z e d�d d �Z dS ) �IssuingDistributionPointN)r� r� �only_contains_user_certs�only_contains_ca_certs�only_some_reasons� indirect_crl� only_contains_attribute_certsr c C s� |d urt |�}|r8t|t�r0tdd� |D ��s8td��|rXtj|v sPtj|v rXtd��t|t �r�t|t �r�t|t �r�t|t �s�td��||||g}t dd� |D ��dkr�td ��t |||||||g�s�td ��|| _ || _ || _|| _|| _|| _|| _d S ) Nc s s | ]}t |t�V qd S r! r� r| r' r' r( r � r� z4IssuingDistributionPoint.__init__.<locals>.<genexpr>z:only_some_reasons must be None or frozenset of ReasonFlagszTunspecified and remove_from_crl are not valid reasons in an IssuingDistributionPointzuonly_contains_user_certs, only_contains_ca_certs, indirect_crl and only_contains_attribute_certs must all be boolean.c S s g | ] }|r|�qS r' r' r| r' r' r( r0 r� z5IssuingDistributionPoint.__init__.<locals>.<listcomp>r� z�Only one of the following can be set to True: only_contains_user_certs, only_contains_ca_certs, indirect_crl, only_contains_attribute_certsz�Cannot create empty extension: if only_contains_user_certs, only_contains_ca_certs, indirect_crl, and only_contains_attribute_certs are all False, then either full_name, relative_name, or only_some_reasons must have a value.)rQ r" r� r� rX r� r� r� r� ru r- r �_only_contains_user_certs�_only_contains_ca_certs� _indirect_crl� _only_contains_attribute_certs�_only_some_reasonsr� r� ) r0 r� r� rP rQ rR rS rT Zcrl_constraintsr' r' r( r= � st ��������������� �z!IssuingDistributionPoint.__init__r, c C s d� | �S )NaG <IssuingDistributionPoint(full_name={0.full_name}, relative_name={0.relative_name}, only_contains_user_certs={0.only_contains_user_certs}, only_contains_ca_certs={0.only_contains_ca_certs}, only_some_reasons={0.only_some_reasons}, indirect_crl={0.indirect_crl}, only_contains_attribute_certs={0.only_contains_attribute_certs})>r� r/ r' r' r( r[ ' s ��z!IssuingDistributionPoint.__repr__rh c C sb t |t�stS | j|jko`| j|jko`| j|jko`| j|jko`| j|jko`| j|jko`| j |j kS r! ) r" rO rj r� r� rP rQ rR rS rT rk r' r' r( rl 3 s" � � � � ���z IssuingDistributionPoint.__eq__c C s | |k S r! r' rk r' r' r( rm B s z IssuingDistributionPoint.__ne__c C s$ t | j| j| j| j| j| j| jf�S r! )ro r� r� rP rQ rR rS rT r/ r' r' r( rp E s ��z!IssuingDistributionPoint.__hash__c C s | j S r! r� r/ r' r' r( r� R s z"IssuingDistributionPoint.full_namec C s | j S r! r� r/ r' r' r( r� V s z&IssuingDistributionPoint.relative_namec C s | j S r! )rU r/ r' r' r( rP Z s z1IssuingDistributionPoint.only_contains_user_certsc C s | j S r! )rV r/ r' r' r( rQ ^ s z/IssuingDistributionPoint.only_contains_ca_certsc C s | j S r! )rY r/ r' r' r( rR b s z*IssuingDistributionPoint.only_some_reasonsc C s | j S r! )rW r/ r' r' r( rS h s z%IssuingDistributionPoint.indirect_crlc C s | j S r! )rX r/ r' r' r( rT l s z6IssuingDistributionPoint.only_contains_attribute_certsc C s t �| �S r! rr r/ r' r' r( r# p s z%IssuingDistributionPoint.public_bytes)!rB rC rD r ZISSUING_DISTRIBUTION_POINTr; rJ r� r\ r r ru r� r� r= rE r[ rt rl rm r6 rp rv r� r� r� rP rQ rR rS rT rM r# r' r' r' r( rO � s< � S �rO c @ s� e Zd Zeedd�dd�Zeed�dd��Zeed�dd ��Ze d�d d �Z e j e d �d d�Ze j e d �dd�Zed�dd�Zed�dd�ZdS )rW N)r; rY r c C s" t |t�std��|| _|| _d S )Nz oid must be an ObjectIdentifier)r" r rX r r! )r0 r; rY r' r' r( r= u s z UnrecognizedExtension.__init__r, c C s | j S r! r" r/ r' r' r( r; { s zUnrecognizedExtension.oidc C s | j S r! r# r/ r' r' r( rY s zUnrecognizedExtension.valuec C s d� | �S )Nz7<UnrecognizedExtension(oid={0.oid}, value={0.value!r})>r� r/ r' r' r( r[ � s ��z UnrecognizedExtension.__repr__rh c C s& t |t�stS | j|jko$| j|jkS r! )r" rW rj r; rY rk r' r' r( rl � s z UnrecognizedExtension.__eq__c C s | |k S r! r' rk r' r' r( rm � s z UnrecognizedExtension.__ne__c C s t | j| jf�S r! )ro r; rY r/ r' r' r( rp � s z UnrecognizedExtension.__hash__c C s | j S r! r� r/ r' r' r( r# � s z"UnrecognizedExtension.public_bytes)rB rC rD r rM r= rv r; rY rE r[ rJ rt ru rl rm r6 rp r# r' r' r' r( rW t s rW )g�abcr> r$ r rJ Z cryptographyr Z"cryptography.hazmat.bindings._rustr r rs Z cryptography.hazmat.primitivesr r Z,cryptography.hazmat.primitives.asymmetric.ecr Z-cryptography.hazmat.primitives.asymmetric.rsar Z/cryptography.hazmat.primitives.asymmetric.typesr r Z*cryptography.x509.certificate_transparencyr Z cryptography.x509.general_namer r r r r r r r r Zcryptography.x509.namer r Zcryptography.x509.oidr r r r �TypeVarr rM r) rE r7 � Exceptionr8 rG �ABCMetar �objectrO ra rw r� r� r� r� r� r� r� r� r� �Enumr� r� r� r� r� r� r� r� r� Z_REASON_BIT_MAPPINGr� r� r� r� r� r� r� r� r� r� Z_TLS_FEATURE_TYPE_TO_ENUMr� r� r �Genericr r$ r3 r7 r8 r9 r< r@ rK rL rO rW r' r' r' r( �<module> s� , � ' o'$$+1 ((s� D"@.+!% # e3\TTT "0. $