Current File : //opt/alt/python38/lib64/python3.8/site-packages/cryptography/x509/__pycache__/base.cpython-38.pyc
U
e�_�\ � @ s� d dl mZmZmZ d dlZd dlZd dlZd dlmZ d dl Z d dl
m Z d dl m
Z
mZmZ d dlmZmZ d dlmZ e�dd d �Zd
d � ZG d d
� d
e�Zdd� Zdd� Zdd� Zdd� Zdd� Z dd� Z G dd� de �Z e � ej!�G d d � d e"��Z#e � ej!�G d d � d e"��Z$e � ej!�G d d!� d!e"��Z%e � ej!�G d"d#� d#e"��Z&G d$d%� d%e"�Z'G d&d'� d'e"�Z(G d(d)� d)e"�Z)G d*d+� d+e"�Z*d,d-� Z+dS ).� )�absolute_import�division�print_functionN)�Enum)�utils)�dsa�ec�rsa)� Extension�
ExtensionType)�Namei� � c C s: | j dk r2| �� }|r|nt�� }| jdd�| S | S dS )z�Normalizes a datetime to a naive datetime in UTC.
time -- datetime to normalize. Assumed to be in UTC if not timezone
aware.
N)�tzinfo)r Z utcoffset�datetimeZ timedelta�replace)�time�offset� r �/base.py�_convert_to_naive_utc_time s
r c @ s e Zd ZdZdZdS )�Versionr � N)�__name__�
__module__� __qualname__Zv1�v3r r r r r % s r c C s
|� | �S �N)�load_pem_x509_certificate��data�backendr r r r * s r c C s
|� | �S r )�load_der_x509_certificater r r r r! . s r! c C s
|� | �S r )�load_pem_x509_csrr r r r r" 2 s r" c C s
|� | �S r )�load_der_x509_csrr r r r r# 6 s r# c C s
|� | �S r )�load_pem_x509_crlr r r r r$ : s r$ c C s
|� | �S r )�load_der_x509_crlr r r r r% > s r% c s e Zd Z� fdd�Z� ZS )�InvalidVersionc s t t| ��|� || _d S r )�superr& �__init__�parsed_version)�self�msgr) �� __class__r r r( C s zInvalidVersion.__init__)r r r r( �
__classcell__r r r, r r& B s r& c @ s� e Zd Zejdd� �Zejdd� �Zejdd� �Zejdd� �Z ejd d
� �Z
ejd d � �Z ejd
d� �Z ejdd� �Z
ejdd� �Zejdd� �Zejdd� �Zejdd� �Zejdd� �Zejdd � �Zejd d � �Zejd d � �Zejd!d"� �Zd#S )$� Certificatec C s dS �z4
Returns bytes using digest passed.
Nr �r* � algorithmr r r � fingerprintJ s zCertificate.fingerprintc C s dS )z3
Returns certificate serial number
Nr �r* r r r �
serial_numberP s zCertificate.serial_numberc C s dS )z1
Returns the certificate version
Nr r4 r r r �versionV s zCertificate.versionc C s dS �z(
Returns the public key
Nr r4 r r r �
public_key\ s zCertificate.public_keyc C s dS )z?
Not before time (represented as UTC datetime)
Nr r4 r r r �not_valid_beforeb s z Certificate.not_valid_beforec C s dS )z>
Not after time (represented as UTC datetime)
Nr r4 r r r �not_valid_afterh s zCertificate.not_valid_afterc C s dS )z1
Returns the issuer name object.
Nr r4 r r r �issuern s zCertificate.issuerc C s dS �z2
Returns the subject name object.
Nr r4 r r r �subjectt s zCertificate.subjectc C s dS �zt
Returns a HashAlgorithm corresponding to the type of the digest signed
in the certificate.
Nr r4 r r r �signature_hash_algorithmz s z$Certificate.signature_hash_algorithmc C s dS �zJ
Returns the ObjectIdentifier of the signature algorithm.
Nr r4 r r r �signature_algorithm_oid� s z#Certificate.signature_algorithm_oidc C s dS )z/
Returns an Extensions object.
Nr r4 r r r �
extensions� s zCertificate.extensionsc C s dS �z.
Returns the signature bytes.
Nr r4 r r r � signature� s zCertificate.signaturec C s dS )zR
Returns the tbsCertificate payload bytes as defined in RFC 5280.
Nr r4 r r r �tbs_certificate_bytes� s z!Certificate.tbs_certificate_bytesc C s dS �z"
Checks equality.
Nr �r* �otherr r r �__eq__� s zCertificate.__eq__c C s dS �z#
Checks not equal.
Nr rG r r r �__ne__� s zCertificate.__ne__c C s dS �z"
Computes a hash.
Nr r4 r r r �__hash__� s zCertificate.__hash__c C s dS )zB
Serializes the certificate to PEM or DER format.
Nr �r* �encodingr r r � public_bytes� s zCertificate.public_bytesN)r r r �abc�abstractmethodr3 �abstractpropertyr5 r6 r8 r9 r: r; r= r? rA rB rD rE rI rK rM rP r r r r r/ H sD
r/ c @ s� e Zd Zejdd� �Zejdd� �Zejdd� �Zejdd� �Z ejd d
� �Z
ejd d � �Z ejd
d� �Z ejdd� �Z
ejdd� �Zejdd� �Zejdd� �Zejdd� �Zejdd� �Zejdd � �Zd S ) �CertificateRevocationListc C s dS )z:
Serializes the CRL to PEM or DER format.
Nr rN r r r rP � s z&CertificateRevocationList.public_bytesc C s dS r0 r r1 r r r r3 � s z%CertificateRevocationList.fingerprintc C s dS )zs
Returns an instance of RevokedCertificate or None if the serial_number
is not in the CRL.
Nr )r* r5 r r r �(get_revoked_certificate_by_serial_number� s zBCertificateRevocationList.get_revoked_certificate_by_serial_numberc C s dS r> r r4 r r r r? � s z2CertificateRevocationList.signature_hash_algorithmc C s dS r@ r r4 r r r rA � s z1CertificateRevocationList.signature_algorithm_oidc C s dS )zC
Returns the X509Name with the issuer of this CRL.
Nr r4 r r r r; � s z CertificateRevocationList.issuerc C s dS )z?
Returns the date of next update for this CRL.
Nr r4 r r r � next_update� s z%CertificateRevocationList.next_updatec C s dS )z?
Returns the date of last update for this CRL.
Nr r4 r r r � last_update� s z%CertificateRevocationList.last_updatec C s dS )zS
Returns an Extensions object containing a list of CRL extensions.
Nr r4 r r r rB � s z$CertificateRevocationList.extensionsc C s dS rC r r4 r r r rD � s z#CertificateRevocationList.signaturec C s dS )zO
Returns the tbsCertList payload bytes as defined in RFC 5280.
Nr r4 r r r �tbs_certlist_bytes� s z,CertificateRevocationList.tbs_certlist_bytesc C s dS rF r rG r r r rI � s z CertificateRevocationList.__eq__c C s dS rJ r rG r r r rK � s z CertificateRevocationList.__ne__c C s dS )zQ
Verifies signature of revocation list against given public key.
Nr )r* r8 r r r �is_signature_valid s z,CertificateRevocationList.is_signature_validN)r r r rQ rR rP r3 rU rS r? rA r; rV rW rB rD rX rI rK rY r r r r rT � s8
rT c @ s� e Zd Zejdd� �Zejdd� �Zejdd� �Zejdd� �Zej d d
� �Z
ej d d � �Z ej d
d� �Z ej dd� �Z
ejdd� �Zej dd� �Zej dd� �Zej dd� �ZdS )�CertificateSigningRequestc C s dS rF r rG r r r rI
s z CertificateSigningRequest.__eq__c C s dS rJ r rG r r r rK s z CertificateSigningRequest.__ne__c C s dS rL r r4 r r r rM s z"CertificateSigningRequest.__hash__c C s dS r7 r r4 r r r r8 s z$CertificateSigningRequest.public_keyc C s dS r< r r4 r r r r= % s z!CertificateSigningRequest.subjectc C s dS r> r r4 r r r r? + s z2CertificateSigningRequest.signature_hash_algorithmc C s dS r@ r r4 r r r rA 2 s z1CertificateSigningRequest.signature_algorithm_oidc C s dS )z@
Returns the extensions in the signing request.
Nr r4 r r r rB 8 s z$CertificateSigningRequest.extensionsc C s dS )z;
Encodes the request to PEM or DER format.
Nr rN r r r rP > s z&CertificateSigningRequest.public_bytesc C s dS rC r r4 r r r rD D s z#CertificateSigningRequest.signaturec C s dS )zd
Returns the PKCS#10 CertificationRequestInfo bytes as defined in RFC
2986.
Nr r4 r r r �tbs_certrequest_bytesJ s z/CertificateSigningRequest.tbs_certrequest_bytesc C s dS )z8
Verifies signature of signing request.
Nr r4 r r r rY Q s z,CertificateSigningRequest.is_signature_validN)r r r rQ rR rI rK rM r8 rS r= r? rA rB rP rD r[ rY r r r r rZ s0
rZ c @ s6 e Zd Zejdd� �Zejdd� �Zejdd� �ZdS )�RevokedCertificatec C s dS )zG
Returns the serial number of the revoked certificate.
Nr r4 r r r r5 Z s z RevokedCertificate.serial_numberc C s dS )zH
Returns the date of when this certificate was revoked.
Nr r4 r r r �revocation_date` s z"RevokedCertificate.revocation_datec C s dS )zW
Returns an Extensions object containing a list of Revoked extensions.
Nr r4 r r r rB f s z RevokedCertificate.extensionsN)r r r rQ rS r5 r] rB r r r r r\ X s
r\ c @ s2 e Zd Zdg fdd�Zdd� Zdd� Zdd � ZdS )
� CertificateSigningRequestBuilderNc C s || _ || _dS )zB
Creates an empty X.509 certificate request (v1).
N)�
_subject_name� _extensions)r* � subject_namerB r r r r( n s z)CertificateSigningRequestBuilder.__init__c C s0 t |t�std��| jdk r$td��t|| j�S )zF
Sets the certificate requestor's distinguished name.
�Expecting x509.Name object.N�&The subject name may only be set once.)�
isinstancer � TypeErrorr_ �
ValueErrorr^ r` �r* �namer r r ra u s
z-CertificateSigningRequestBuilder.subject_namec C sT t |t�std��t|j||�}| jD ]}|j|jkr&td��q&t| j| j|g �S )zE
Adds an X.509 extension to the certificate request.
�"extension must be an ExtensionType�$This extension has already been set.) rd r re r
�oidr` rf r^ r_ �r* � extensionZcritical�er r r �
add_extension s
�z.CertificateSigningRequestBuilder.add_extensionc C s | j dkrtd��|�| ||�S )zF
Signs the request using the requestor's private key.
Nz/A CertificateSigningRequest must have a subject)r_ rf Zcreate_x509_csr�r* Z private_keyr2 r r r r �sign� s
z%CertificateSigningRequestBuilder.sign)r r r r( ra ro rq r r r r r^ m s
r^ c @ sd e Zd Zddddddg fdd�Zdd� Zdd� Zdd � Zd
d � Zd d
� Zdd� Z dd� Z
dd� Z dS )�CertificateBuilderNc C s6 t j| _|| _|| _|| _|| _|| _|| _|| _ d S r )
r r Z_version� _issuer_namer_ � _public_key�_serial_number�_not_valid_before�_not_valid_afterr` )r* � issuer_namera r8 r5 r9 r: rB r r r r( � s zCertificateBuilder.__init__c C sD t |t�std��| jdk r$td��t|| j| j| j| j | j
| j �S )z3
Sets the CA's distinguished name.
rb N�%The issuer name may only be set once.) rd r re rs rf rr r_ rt ru rv rw r` rg r r r rx � s
�z CertificateBuilder.issuer_namec C sD t |t�std��| jdk r$td��t| j|| j| j| j | j
| j �S )z:
Sets the requestor's distinguished name.
rb Nrc ) rd r re r_ rf rr rs rt ru rv rw r` rg r r r ra � s
�z CertificateBuilder.subject_namec C sP t |tjtjtjf�s td��| jdk r0t d��t
| j | j || j
| j| j| j�S )zT
Sets the requestor's public key (as found in the signing request).
zGExpecting one of DSAPublicKey, RSAPublicKey, or EllipticCurvePublicKey.Nz$The public key may only be set once.)rd r Z DSAPublicKeyr Z RSAPublicKeyr ZEllipticCurvePublicKeyre rt rf rr rs r_ ru rv rw r` )r* �keyr r r r8 � s �
�z CertificateBuilder.public_keyc C sj t |tj�std��| jdk r&td��|dkr6td��|�� dkrJtd��t| j| j | j
|| j | j | j
�S )z5
Sets the certificate serial number.
�'Serial number must be of integral type.N�'The serial number may only be set once.r z%The serial number should be positive.� �3The serial number should not be more than 159 bits.)rd �six�
integer_typesre ru rf �
bit_lengthrr rs r_ rt rv rw r` �r* Znumberr r r r5 � s"
�z CertificateBuilder.serial_numberc C sz t |tj�std��| jdk r&td��t|�}|tkr>td��| jdk rZ|| jkrZtd��t| j | j
| j | j || j| j
�S )z7
Sets the certificate activation time.
�Expecting datetime object.Nz*The not valid before may only be set once.zHThe not valid before date must be after the unix epoch (1970 January 1).zBThe not valid before date must be before the not valid after date.)rd r re rv rf r � _UNIX_EPOCHrw rr rs r_ rt ru r` �r* r r r r r9 � s(
� �z#CertificateBuilder.not_valid_beforec C sz t |tj�std��| jdk r&td��t|�}|tkr>td��| jdk rZ|| jk rZtd��t| j | j
| j | j | j|| j
�S )z7
Sets the certificate expiration time.
r� Nz)The not valid after may only be set once.zGThe not valid after date must be after the unix epoch (1970 January 1).zAThe not valid after date must be after the not valid before date.)rd r re rw rf r r� rv rr rs r_ rt ru r` r� r r r r: � s,
�� �z"CertificateBuilder.not_valid_afterc C sh t |t�std��t|j||�}| jD ]}|j|jkr&td��q&t| j| j | j
| j | j | j
| j|g �S )z=
Adds an X.509 extension to the certificate.
ri rj )rd r re r
rk r` rf rr rs r_ rt ru rv rw rl r r r ro s
�z CertificateBuilder.add_extensionc C sz | j dkrtd��| jdkr$td��| jdkr6td��| jdkrHtd��| jdkrZtd��| jdkrltd��|�| ||�S )zC
Signs the certificate using the CA's private key.
Nz&A certificate must have a subject namez&A certificate must have an issuer namez'A certificate must have a serial numberz/A certificate must have a not valid before timez.A certificate must have a not valid after timez$A certificate must have a public key)r_ rf rs ru rv rw rt Zcreate_x509_certificaterp r r r rq + s
zCertificateBuilder.sign) r r r r( rx ra r8 r5 r9 r: ro rq r r r r rr � s �
rr c @ sP e Zd Zdddg g fdd�Zdd� Zdd� Zdd � Zd
d � Zd d
� Zdd� Z dS )� CertificateRevocationListBuilderNc C s" || _ || _|| _|| _|| _d S r )rs � _last_update� _next_updater` �_revoked_certificates)r* rx rW rV rB Zrevoked_certificatesr r r r( E s
z)CertificateRevocationListBuilder.__init__c C s< t |t�std��| jd k r$td��t|| j| j| j| j �S )Nrb ry )
rd r re rs rf r� r� r� r` r� )r* rx r r r rx M s
�z,CertificateRevocationListBuilder.issuer_namec C sr t |tj�std��| jd k r&td��t|�}|tkr>td��| jd k rZ|| jkrZtd��t| j || j| j
| j �S )Nr� �!Last update may only be set once.�CThe last update date must be after the unix epoch (1970 January 1).z9The last update date must be before the next update date.) rd r re r� rf r r� r� r� rs r` r� )r* rW r r r rW W s$
� �z,CertificateRevocationListBuilder.last_updatec C sr t |tj�std��| jd k r&td��t|�}|tkr>td��| jd k rZ|| jk rZtd��t| j | j|| j
| j �S )Nr� r� r� z8The next update date must be after the last update date.) rd r re r� rf r r� r� r� rs r` r� )r* rV r r r rV i s$
� �z,CertificateRevocationListBuilder.next_updatec C s` t |t�std��t|j||�}| jD ]}|j|jkr&td��q&t| j| j | j
| j|g | j �S )zM
Adds an X.509 extension to the certificate revocation list.
ri rj ) rd r re r
rk r` rf r� rs r� r� r� rl r r r ro { s
�z.CertificateRevocationListBuilder.add_extensionc C s2 t |t�std��t| j| j| j| j| j|g �S )z8
Adds a revoked certificate to the CRL.
z)Must be an instance of RevokedCertificate) rd r\ re r� rs r� r� r` r� )r* Zrevoked_certificater r r �add_revoked_certificate� s
�z8CertificateRevocationListBuilder.add_revoked_certificatec C sD | j d krtd��| jd kr$td��| jd kr6td��|�| ||�S )Nz A CRL must have an issuer namez"A CRL must have a last update timez"A CRL must have a next update time)rs rf r� r� Zcreate_x509_crlrp r r r rq � s
z%CertificateRevocationListBuilder.sign)
r r r r( rx rW rV ro r� rq r r r r r� D s �
r� c @ s< e Zd Zddg fdd�Zdd� Zdd� Zdd � Zd
d � ZdS ) �RevokedCertificateBuilderNc C s || _ || _|| _d S r )ru �_revocation_dater` )r* r5 r] rB r r r r( � s z"RevokedCertificateBuilder.__init__c C sZ t |tj�std��| jd k r&td��|dkr6td��|�� dkrJtd��t|| j| j �S )Nr{ r| r z$The serial number should be positiver} r~ )
rd r r� re ru rf r� r� r� r` r� r r r r5 � s
�z'RevokedCertificateBuilder.serial_numberc C sN t |tj�std��| jd k r&td��t|�}|tkr>td��t| j|| j �S )Nr� z)The revocation date may only be set once.zBThe revocation date must be after the unix epoch (1970 January 1).)
rd r re r� rf r r� r� ru r` r� r r r r] � s
�z)RevokedCertificateBuilder.revocation_datec C sX t |t�std��t|j||�}| jD ]}|j|jkr&td��q&t| j| j | j|g �S )Nri rj )
rd r re r
rk r` rf r� ru r� rl r r r ro � s
�z'RevokedCertificateBuilder.add_extensionc C s. | j d krtd��| jd kr$td��|�| �S )Nz/A revoked certificate must have a serial numberz1A revoked certificate must have a revocation date)ru rf r� Z create_x509_revoked_certificate)r* r r r r �build� s
�z RevokedCertificateBuilder.build)r r r r( r5 r] ro r� r r r r r� � s �
r� c C s t �t�d�d�d? S )N� Zbigr
)r Zint_from_bytes�os�urandomr r r r �random_serial_number� s r� ),Z
__future__r r r rQ r r� �enumr r Z cryptographyr Z)cryptography.hazmat.primitives.asymmetricr r r Z cryptography.x509.extensionsr
r Zcryptography.x509.namer r� r r r r! r" r# r$ r% � Exceptionr& Z
add_metaclass�ABCMeta�objectr/ rT rZ r\ r^ rr r� r� r� r r r r �<module> sB
i
X
L
, ,c?
Mini Shell