3
ê…h>� � @ s� d dl mZmZmZ d dlZd dlZd dlZd dlZd dlm Z d dl
Z
d dl m Z d dl
mZmZmZmZ d dlmZmZ d dlmZ d dlmZ d d lmZ d d
lm Z m Z m Z d d l m Z d d l!m"Z"m#Z#m$Z$m%Z% d
d� Z&dd� Z'G dd� de(�Z)G dd� de(�Z*e
j+ej,�G dd� de-��Z.G dd� de-�Z/e j0e.�G dd� de-��Z1e j0e.�G dd � d e-��Z2e j0e.�G d d � d e-��Z3e j0e.�G d d � d e-��Z4e j0e.�G d!d"� d"e-��Z5G d#d$� d$e-�Z6e j0e.�G d%d&� d&e-��Z7e j0e.�G d'd(� d(e-��Z8e j0e.�G d)d*� d*e-��Z9e j0e.�G d+d,� d,e-��Z:G d-d.� d.e-�Z;G d/d0� d0e �ZG d5d6� d6e-�Z?G d7d8� d8e-�Z@G d9d:� d:e-�ZAe j0e.�G d;d<� d� d>e-��ZCe j0e.�G d?d@� d@e-��ZDe j0e.�G dAdB� dBe-��ZEG dCdD� dDe �ZFdEdF� eFD �ZGe j0e.�G dGdH� dHe-��ZHe j0e.�G dIdJ� dJe-��ZIe j0e.�G dKdL� dLe-��ZJG dMdN� dNe-�ZKG dOdP� dPe-�ZLe j0e.�G dQdR� dRe-��ZMe j0e.�G dSdT� dTe-��ZNe j0e.�G dUdV� dVe-��ZOe j0e.�G dWdX� dXe-��ZPe j0e.�G dYdZ� dZe-��ZQe j0e.�G d[d\� d\e-��ZRe j0e.�G d]d^� d^e-��ZSe j0e.�G d_d`� d`e-��ZTe j0e.�G dadb� dbe-��ZUe j0e.�G dcdd� dde-��ZVdS )e� )�absolute_import�division�print_functionN)�Enum)�utils)�
BIT_STRING� DERReader�OBJECT_IDENTIFIER�SEQUENCE)�
constant_time�
serialization)�EllipticCurvePublicKey)� RSAPublicKey)�SignedCertificateTimestamp)� GeneralName� IPAddress� OtherName)�RelativeDistinguishedName)�CRLEntryExtensionOID� ExtensionOID�OCSPExtensionOID�ObjectIdentifierc C s� t | t�r | jtjjtjj�}n�t | t�r@| jtjj tjj
�}n�| jtjjtjj �}t |�}|j
t��}|jt�}|jt�} W d Q R X |� |jt� |j� s�|j� W d Q R X | j� dkr�td��| j}tj|�j� S )Nr zInvalid public key encoding)�
isinstancer Z public_bytesr ZEncodingZDERZ PublicFormatZPKCS1r
ZX962ZUncompressedPointZSubjectPublicKeyInfor Zread_single_elementr
Z read_elementr r Zis_emptyZread_any_elementZ read_byte�
ValueError�data�hashlibZsha1�digest)�
public_keyr Z
serialized�readerZpublic_key_info� algorithm� r �"/usr/lib64/python3.6/extensions.py� _key_identifier_from_public_key& s.
r" c s. � fdd�}� fdd�}� fdd�}|||fS )Nc s t t| � ��S )N)�len�getattr)�self)�
field_namer r! �
len_methodO s z*_make_sequence_methods..len_methodc s t t| � ��S )N)�iterr$ )r% )r& r r! � iter_methodR s z+_make_sequence_methods..iter_methodc s t | � �| S )N)r$ )r% �idx)r& r r! �getitem_methodU s z._make_sequence_methods..getitem_methodr )r& r' r) r+ r )r& r! �_make_sequence_methodsN s r, c s e Zd Z� fdd�Z� ZS )�DuplicateExtensionc s t t| �j|� || _d S )N)�superr- �__init__�oid)r% �msgr0 )� __class__r r! r/ \ s zDuplicateExtension.__init__)�__name__�
__module__� __qualname__r/ �
__classcell__r r )r2 r! r- [ s r- c s e Zd Z� fdd�Z� ZS )�ExtensionNotFoundc s t t| �j|� || _d S )N)r. r7 r/ r0 )r% r1 r0 )r2 r r! r/ b s zExtensionNotFound.__init__)r3 r4 r5 r/ r6 r r )r2 r! r7 a s r7 c @ s e Zd Zejdd� �ZdS )�
ExtensionTypec C s dS )zK
Returns the oid associated with the given extension type.
Nr )r% r r r! r0 i s zExtensionType.oidN)r3 r4 r5 �abc�abstractpropertyr0 r r r r! r8 g s r8 c @ s: e Zd Zdd� Zdd� Zdd� Zed�\ZZZ dd � Z
d
S ) �
Extensionsc C s
|| _ d S )N)� _extensions)r% �
extensionsr r r! r/ q s zExtensions.__init__c C s0 x| D ]}|j |kr|S qW tdj|�|��d S )NzNo {} extension was found)r0 r7 �format)r% r0 �extr r r! �get_extension_for_oidt s
z Extensions.get_extension_for_oidc C sD |t krtd��x | D ]}t|j|�r|S qW tdj|�|j��d S )Nz|UnrecognizedExtension can't be used with get_extension_for_class because more than one instance of the class may be present.zNo {} extension was found)�UnrecognizedExtension� TypeErrorr �valuer7 r> r0 )r% Zextclassr? r r r! �get_extension_for_class{ s
z"Extensions.get_extension_for_classr< c C s dj | j�S )Nz)r> r< )r% r r r! �__repr__� s zExtensions.__repr__N) r3 r4 r5 r/ r@ rD r, �__len__�__iter__� __getitem__rE r r r r! r; p s
r; c @ sD e Zd ZejZdd� Zdd� Zdd� Zdd� Z d d
� Z
e j d �Z
d S )
� CRLNumberc C s t |tj�std��|| _d S )Nz crl_number must be an integer)r �six�
integer_typesrB � _crl_number)r% �
crl_numberr r r! r/ � s zCRLNumber.__init__c C s t |t�stS | j|jkS )N)r rI �NotImplementedrM )r% �otherr r r! �__eq__� s
zCRLNumber.__eq__c C s
| |k S )Nr )r% rO r r r! �__ne__� s zCRLNumber.__ne__c C s
t | j�S )N)�hashrM )r% r r r! �__hash__� s zCRLNumber.__hash__c C s dj | j�S )Nz)r> rM )r% r r r! rE � s zCRLNumber.__repr__rL N)r3 r4 r5 r Z
CRL_NUMBERr0 r/ rP rQ rS rE r �read_only_propertyrM r r r r! rI � s rI c @ sp e Zd ZejZdd� Zedd� �Zedd� �Z dd� Z
d d
� Z d d � Z d
d� Z
ejd�Zejd�Zejd�ZdS )�AuthorityKeyIdentifierc C sv |d k|d kkrt d��|d k rBt|�}tdd� |D ��sBtd��|d k r`t|tj� r`td��|| _|| _|| _ d S )NzXauthority_cert_issuer and authority_cert_serial_number must both be present or both Nonec s s | ]}t |t�V qd S )N)r r )�.0�xr r r! � � s z2AuthorityKeyIdentifier.__init__..z;authority_cert_issuer must be a list of GeneralName objectsz/authority_cert_serial_number must be an integer)
r �list�allrB r rJ rK �_key_identifier�_authority_cert_issuer� _authority_cert_serial_number)r% �key_identifier�authority_cert_issuer� authority_cert_serial_numberr r r! r/ � s
z AuthorityKeyIdentifier.__init__c C s t |�}| |d d d�S )N)r^ r_ r` )r" )�clsr r r r r! �from_issuer_public_key� s
z-AuthorityKeyIdentifier.from_issuer_public_keyc C s( t |t�r|j}n|jj}| |d d d�S )N)r^ r_ r` )r �SubjectKeyIdentifierr rC )ra Zskir r r r! �"from_issuer_subject_key_identifier� s
z9AuthorityKeyIdentifier.from_issuer_subject_key_identifierc C s
dj | �S )Nz�)r> )r% r r r! rE � s z AuthorityKeyIdentifier.__repr__c C s2 t |t�stS | j|jko0| j|jko0| j|jkS )N)r rU rN r^ r_ r` )r% rO r r r! rP � s
z AuthorityKeyIdentifier.__eq__c C s
| |k S )Nr )r% rO r r r! rQ � s z AuthorityKeyIdentifier.__ne__c C s, | j d krd }n
t| j �}t| j|| jf�S )N)r_ �tuplerR r^ r` )r% Zacir r r! rS � s
z AuthorityKeyIdentifier.__hash__r[ r\ r] N)r3 r4 r5 r ZAUTHORITY_KEY_IDENTIFIERr0 r/ � classmethodrb rd rE rP rQ rS r rT r^ r_ r` r r r r! rU � s !
rU c @ sP e Zd ZejZdd� Zedd� �Ze j
d�Z dd� Z dd � Z
d
d � Zd d
� ZdS )rc c C s
|| _ d S )N)�_digest)r% r r r r! r/ s z SubjectKeyIdentifier.__init__c C s | t |��S )N)r" )ra r r r r! �from_public_key s z$SubjectKeyIdentifier.from_public_keyrg c C s dj | j�S )Nz$)r> r )r% r r r! rE s z SubjectKeyIdentifier.__repr__c C s t |t�stS tj| j|j�S )N)r rc rN r Zbytes_eqr )r% rO r r r! rP s
zSubjectKeyIdentifier.__eq__c C s
| |k S )Nr )r% rO r r r! rQ # s zSubjectKeyIdentifier.__ne__c C s
t | j�S )N)rR r )r% r r r! rS & s z SubjectKeyIdentifier.__hash__N)r3 r4 r5 r ZSUBJECT_KEY_IDENTIFIERr0 r/ rf rh r rT r rE rP rQ rS r r r r! rc
s
rc c @ sH e Zd ZejZdd� Zed�\ZZ Z
dd� Z dd� Z dd � Z
d
d � Zd S )
�AuthorityInformationAccessc C s, t |�}tdd� |D ��s"td��|| _d S )Nc s s | ]}t |t�V qd S )N)r �AccessDescription)rV rW r r r! rX 0 s z6AuthorityInformationAccess.__init__..z@Every item in the descriptions list must be an AccessDescription)rY rZ rB �
_descriptions)r% � descriptionsr r r! r/ . s
z#AuthorityInformationAccess.__init__rk c C s dj | j�S )Nz )r> rk )r% r r r! rE : s z#AuthorityInformationAccess.__repr__c C s t |t�stS | j|jkS )N)r ri rN rk )r% rO r r r! rP = s
z!AuthorityInformationAccess.__eq__c C s
| |k S )Nr )r% rO r r r! rQ C s z!AuthorityInformationAccess.__ne__c C s t t| j��S )N)rR re rk )r% r r r! rS F s z#AuthorityInformationAccess.__hash__N)r3 r4 r5 r Z AUTHORITY_INFORMATION_ACCESSr0 r/ r, rF rG rH rE rP rQ rS r r r r! ri * s
ri c @ sH e Zd ZejZdd� Zed�\ZZ Z
dd� Z dd� Z dd � Z
d
d � Zd S )
�SubjectInformationAccessc C s, t |�}tdd� |D ��s"td��|| _d S )Nc s s | ]}t |t�V qd S )N)r rj )rV rW r r r! rX P s z4SubjectInformationAccess.__init__..z@Every item in the descriptions list must be an AccessDescription)rY rZ rB rk )r% rl r r r! r/ N s
z!SubjectInformationAccess.__init__rk c C s dj | j�S )Nz )r> rk )r% r r r! rE Z s z!SubjectInformationAccess.__repr__c C s t |t�stS | j|jkS )N)r rm rN rk )r% rO r r r! rP ] s
z SubjectInformationAccess.__eq__c C s
| |k S )Nr )r% rO r r r! rQ c s z SubjectInformationAccess.__ne__c C s t t| j��S )N)rR re rk )r% r r r! rS f s z!SubjectInformationAccess.__hash__N)r3 r4 r5 r ZSUBJECT_INFORMATION_ACCESSr0 r/ r, rF rG rH rE rP rQ rS r r r r! rm J s
rm c @ sH e Zd Zdd� Zdd� Zdd� Zdd� Zd d
� Zej d �Z
ej d �Z d
S )rj c C s4 t |t�std��t |t�s$td��|| _|| _d S )Nz)access_method must be an ObjectIdentifierz%access_location must be a GeneralName)r r rB r �_access_method�_access_location)r% �
access_method�access_locationr r r! r/ k s
zAccessDescription.__init__c C s
dj | �S )NzY)r> )r% r r r! rE u s zAccessDescription.__repr__c C s& t |t�stS | j|jko$| j|jkS )N)r rj rN rp rq )r% rO r r r! rP { s
zAccessDescription.__eq__c C s
| |k S )Nr )r% rO r r r! rQ � s zAccessDescription.__ne__c C s t | j| jf�S )N)rR rp rq )r% r r r! rS � s zAccessDescription.__hash__rn ro N) r3 r4 r5 r/ rE rP rQ rS r rT rp rq r r r r! rj j s
rj c @ sN e Zd ZejZdd� Zejd�Z ejd�Z
dd� Z dd� Z d d
� Z
d d � Zd
S )�BasicConstraintsc C s^ t |t�std��|d k r(| r(td��|d k rNt |tj� sF|dk rNtd��|| _|| _d S )Nzca must be a boolean valuez)path_length must be None when ca is Falser z2path_length must be a non-negative integer or None)r �boolrB r rJ rK �_ca� _path_length)r% �ca� path_lengthr r r! r/ � s
zBasicConstraints.__init__rt ru c C s
dj | �S )Nz:)r> )r% r r r! rE � s zBasicConstraints.__repr__c C s& t |t�stS | j|jko$| j|jkS )N)r rr rN rv rw )r% rO r r r! rP � s
zBasicConstraints.__eq__c C s
| |k S )Nr )r% rO r r r! rQ � s zBasicConstraints.__ne__c C s t | j| jf�S )N)rR rv rw )r% r r r! rS � s zBasicConstraints.__hash__N)r3 r4 r5 r ZBASIC_CONSTRAINTSr0 r/ r rT rv rw rE rP rQ rS r r r r! rr � s
rr c @ sD e Zd ZejZdd� Zejd�Z dd� Z
dd� Z dd � Z d
d � Z
d S )
�DeltaCRLIndicatorc C s t |tj�std��|| _d S )Nz crl_number must be an integer)r rJ rK rB rL )r% rM r r r! r/ � s zDeltaCRLIndicator.__init__rL c C s t |t�stS | j|jkS )N)r rx rN rM )r% rO r r r! rP � s
zDeltaCRLIndicator.__eq__c C s
| |k S )Nr )r% rO r r r! rQ � s zDeltaCRLIndicator.__ne__c C s
t | j�S )N)rR rM )r% r r r! rS � s zDeltaCRLIndicator.__hash__c C s
dj | �S )Nz.)r> )r% r r r! rE � s zDeltaCRLIndicator.__repr__N)r3 r4 r5 r ZDELTA_CRL_INDICATORr0 r/ r rT rM rP rQ rS rE r r r r! rx � s
rx c @ sH e Zd ZejZdd� Zed�\ZZ Z
dd� Z dd� Z dd � Z
d
d � Zd S )
�CRLDistributionPointsc C s, t |�}tdd� |D ��s"td��|| _d S )Nc s s | ]}t |t�V qd S )N)r �DistributionPoint)rV rW r r r! rX � s z1CRLDistributionPoints.__init__..z?distribution_points must be a list of DistributionPoint objects)rY rZ rB �_distribution_points)r% �distribution_pointsr r r! r/ � s z CRLDistributionPoints.__init__r{ c C s dj | j�S )Nz)r> r{ )r% r r r! rE � s z CRLDistributionPoints.__repr__c C s t |t�stS | j|jkS )N)r ry rN r{ )r% rO r r r! rP � s
z CRLDistributionPoints.__eq__c C s
| |k S )Nr )r% rO r r r! rQ � s z CRLDistributionPoints.__ne__c C s t t| j��S )N)rR re r{ )r% r r r! rS � s z CRLDistributionPoints.__hash__N)r3 r4 r5 r ZCRL_DISTRIBUTION_POINTSr0 r/ r, rF rG rH rE rP rQ rS r r r r! ry � s ry c @ sH e Zd ZejZdd� Zed�\ZZ Z
dd� Z dd� Z dd � Z
d
d � Zd S )
� FreshestCRLc C s, t |�}tdd� |D ��s"td��|| _d S )Nc s s | ]}t |t�V qd S )N)r rz )rV rW r r r! rX � s z'FreshestCRL.__init__..z?distribution_points must be a list of DistributionPoint objects)rY rZ rB r{ )r% r| r r r! r/ � s zFreshestCRL.__init__r{ c C s dj | j�S )Nz)r> r{ )r% r r r! rE s zFreshestCRL.__repr__c C s t |t�stS | j|jkS )N)r r} rN r{ )r% rO r r r! rP s
zFreshestCRL.__eq__c C s
| |k S )Nr )r% rO r r r! rQ s zFreshestCRL.__ne__c C s t t| j��S )N)rR re r{ )r% r r r! rS s zFreshestCRL.__hash__N)r3 r4 r5 r Z FRESHEST_CRLr0 r/ r, rF rG rH rE rP rQ rS r r r r! r} � s r} c @ s\ e Zd Zdd� Zdd� Zdd� Zdd� Zd d
� Zej d �Z
ej d �Z ej d
�Z ej d�Z
dS )rz c C s� |r|rt d��|r6t|�}tdd� |D ��s6td��|rLt|t�sLtd��|rrt|�}tdd� |D ��srtd��|r�t|t� s�tdd� |D �� r�td ��|r�tj|ks�tj |kr�t d
��|r�| r�|p�| r�t d ��|| _
|| _ || _ || _
d S ) NzOYou cannot provide both full_name and relative_name, at least one must be None.c s s | ]}t |t�V qd S )N)r r )rV rW r r r! rX & s z-DistributionPoint.__init__..z/full_name must be a list of GeneralName objectsz1relative_name must be a RelativeDistinguishedNamec s s | ]}t |t�V qd S )N)r r )rV rW r r r! rX 3 s z2crl_issuer must be None or a list of general namesc s s | ]}t |t�V qd S )N)r � ReasonFlags)rV rW r r r! rX : s z0reasons must be None or frozenset of ReasonFlagszLunspecified and remove_from_crl are not valid reasons in a DistributionPointzPYou must supply crl_issuer, full_name, or relative_name when reasons is not None)r rY rZ rB r r � frozensetr~ � unspecified�remove_from_crl�
_full_name�_relative_name�_reasons� _crl_issuer)r% � full_name�
relative_name�reasons�
crl_issuerr r r! r/ sB
zDistributionPoint.__init__c C s
dj | �S )Nz})r> )r% r r r! rE R s zDistributionPoint.__repr__c C s> t |t�stS | j|jko<| j|jko<| j|jko<| j|jkS )N)r rz rN r� r� r� r� )r% rO r r r! rP Y s
zDistributionPoint.__eq__c C s
| |k S )Nr )r% rO r r r! rQ d s zDistributionPoint.__ne__c C sH | j d k rt| j �}nd }| jd k r0t| j�}nd }t|| j| j|f�S )N)r� re r� rR r� r� )r% �fnr� r r r! rS g s
zDistributionPoint.__hash__r� r� r� r� N)r3 r4 r5 r/ rE rP rQ rS r rT r� r� r� r� r r r r! rz s 5
rz c @ s4 e Zd ZdZdZdZdZdZdZdZ dZ
d Z d
Z d S ) r~ r� Z
keyCompromiseZ cACompromiseZaffiliationChanged�
supersededZcessationOfOperationZcertificateHoldZprivilegeWithdrawnZ aACompromiseZ
removeFromCRLN)
r3 r4 r5 r� Zkey_compromiseZ
ca_compromiseZaffiliation_changedr� Zcessation_of_operationZcertificate_holdZprivilege_withdrawnZ
aa_compromiser� r r r r! r~ z s r~ c @ sN e Zd ZejZdd� Zdd� Zdd� Zdd� Z d d
� Z
e j d �Z
e j d �Zd
S )�PolicyConstraintsc C sd |d k r t |tj� r td��|d k rrequire_explicit_policy must be a non-negative integer or Nonez=inhibit_policy_mapping must be a non-negative integer or NonezSAt least one of require_explicit_policy and inhibit_policy_mapping must not be None)r rJ rK rB r �_require_explicit_policy�_inhibit_policy_mapping)r% �require_explicit_policy�inhibit_policy_mappingr r r! r/ � s
zPolicyConstraints.__init__c C s
dj | �S )Nz{)r> )r% r r r! rE � s zPolicyConstraints.__repr__c C s& t |t�stS | j|jko$| j|jkS )N)r r� rN r� r� )r% rO r r r! rP � s
zPolicyConstraints.__eq__c C s
| |k S )Nr )r% rO r r r! rQ � s zPolicyConstraints.__ne__c C s t | j| jf�S )N)rR r� r� )r% r r r! rS � s zPolicyConstraints.__hash__r� r� N)r3 r4 r5 r ZPOLICY_CONSTRAINTSr0 r/ rE rP rQ rS r rT r� r� r r r r! r� � s r� c @ sH e Zd ZejZdd� Zed�\ZZ Z
dd� Z dd� Z dd � Z
d
d � Zd S )
�CertificatePoliciesc C s, t |�}tdd� |D ��s"td��|| _d S )Nc s s | ]}t |t�V qd S )N)r �PolicyInformation)rV rW r r r! rX � s z/CertificatePolicies.__init__..z;Every item in the policies list must be a PolicyInformation)rY rZ rB � _policies)r% Zpoliciesr r r! r/ � s
z CertificatePolicies.__init__r� c C s dj | j�S )Nz)r> r� )r% r r r! rE � s z CertificatePolicies.__repr__c C s t |t�stS | j|jkS )N)r r� rN r� )r% rO r r r! rP � s
zCertificatePolicies.__eq__c C s
| |k S )Nr )r% rO r r r! rQ � s zCertificatePolicies.__ne__c C s t t| j��S )N)rR re r� )r% r r r! rS � s z CertificatePolicies.__hash__N)r3 r4 r5 r ZCERTIFICATE_POLICIESr0 r/ r, rF rG rH rE rP rQ rS r r r r! r� � s
r� c @ sH e Zd Zdd� Zdd� Zdd� Zdd� Zd d
� Zej d �Z
ej d �Z d
S )r� c C sH t |t�std��|| _|r>t|�}tdd� |D ��s>td��|| _d S )Nz-policy_identifier must be an ObjectIdentifierc s s | ]}t |tjtf�V qd S )N)r rJ Z text_type�
UserNotice)rV rW r r r! rX � s z-PolicyInformation.__init__..zMpolicy_qualifiers must be a list of strings and/or UserNotice objects or None)r r rB �_policy_identifierrY rZ �_policy_qualifiers)r% �policy_identifier�policy_qualifiersr r r! r/ � s
zPolicyInformation.__init__c C s
dj | �S )Nze)r> )r% r r r! rE � s zPolicyInformation.__repr__c C s& t |t�stS | j|jko$| j|jkS )N)r r� rN r� r� )r% rO r r r! rP � s
zPolicyInformation.__eq__c C s
| |k S )Nr )r% rO r r r! rQ s zPolicyInformation.__ne__c C s( | j d k rt| j �}nd }t| j|f�S )N)r� re rR r� )r% Zpqr r r! rS
s
zPolicyInformation.__hash__r� r� N) r3 r4 r5 r/ rE rP rQ rS r rT r� r� r r r r! r� � s
r� c @ sH e Zd Zdd� Zdd� Zdd� Zdd� Zd d
� Zej d �Z
ej d �Z d
S )r� c C s( |rt |t� rtd��|| _|| _d S )Nz2notice_reference must be None or a NoticeReference)r �NoticeReferencerB �_notice_reference�_explicit_text)r% �notice_reference�
explicit_textr r r! r/ s
zUserNotice.__init__c C s
dj | �S )NzV)r> )r% r r r! rE " s zUserNotice.__repr__c C s& t |t�stS | j|jko$| j|jkS )N)r r� rN r� r� )r% rO r r r! rP ( s
zUserNotice.__eq__c C s
| |k S )Nr )r% rO r r r! rQ 1 s zUserNotice.__ne__c C s t | j| jf�S )N)rR r� r� )r% r r r! rS 4 s zUserNotice.__hash__r� r� N) r3 r4 r5 r/ rE rP rQ rS r rT r� r� r r r r! r� s
r� c @ sH e Zd Zdd� Zdd� Zdd� Zdd� Zd d
� Zej d �Z
ej d �Z d
S )r� c C s2 || _ t|�}tdd� |D ��s(td��|| _d S )Nc s s | ]}t |t�V qd S )N)r �int)rV rW r r r! rX ? s z+NoticeReference.__init__..z)notice_numbers must be a list of integers)�
_organizationrY rZ rB �_notice_numbers)r% � organization�notice_numbersr r r! r/ < s
zNoticeReference.__init__c C s
dj | �S )NzU)r> )r% r r r! rE D s zNoticeReference.__repr__c C s& t |t�stS | j|jko$| j|jkS )N)r r� rN r� r� )r% rO r r r! rP J s
zNoticeReference.__eq__c C s
| |k S )Nr )r% rO r r r! rQ S s zNoticeReference.__ne__c C s t | jt| j�f�S )N)rR r� re r� )r% r r r! rS V s zNoticeReference.__hash__r� r� N) r3 r4 r5 r/ rE rP rQ rS r rT r� r� r r r r! r� ; s
r� c @ sH e Zd ZejZdd� Zed�\ZZ Z
dd� Z dd� Z dd � Z
d
d � Zd S )
�ExtendedKeyUsagec C s, t |�}tdd� |D ��s"td��|| _d S )Nc s s | ]}t |t�V qd S )N)r r )rV rW r r r! rX c s z,ExtendedKeyUsage.__init__..z9Every item in the usages list must be an ObjectIdentifier)rY rZ rB �_usages)r% Zusagesr r r! r/ a s
zExtendedKeyUsage.__init__r� c C s dj | j�S )Nz)r> r� )r% r r r! rE l s zExtendedKeyUsage.__repr__c C s t |t�stS | j|jkS )N)r r� rN r� )r% rO r r r! rP o s
zExtendedKeyUsage.__eq__c C s
| |k S )Nr )r% rO r r r! rQ u s zExtendedKeyUsage.__ne__c C s t t| j��S )N)rR re r� )r% r r r! rS x s zExtendedKeyUsage.__hash__N)r3 r4 r5 r ZEXTENDED_KEY_USAGEr0 r/ r, rF rG rH rE rP rQ rS r r r r! r� ] s r� c @ s2 e Zd ZejZdd� Zdd� Zdd� Zdd� Z d S )
� OCSPNoCheckc C s t |t�stS dS )NT)r r� rN )r% rO r r r! rP � s
zOCSPNoCheck.__eq__c C s
| |k S )Nr )r% rO r r r! rQ � s zOCSPNoCheck.__ne__c C s t t�S )N)rR r� )r% r r r! rS � s zOCSPNoCheck.__hash__c C s dS )Nzr )r% r r r! rE � s zOCSPNoCheck.__repr__N)
r3 r4 r5 r Z
OCSP_NO_CHECKr0 rP rQ rS rE r r r r! r� | s
r� c @ s2 e Zd ZejZdd� Zdd� Zdd� Zdd� Z d S )
�
PrecertPoisonc C s t |t�stS dS )NT)r r� rN )r% rO r r r! rP � s
zPrecertPoison.__eq__c C s
| |k S )Nr )r% rO r r r! rQ � s zPrecertPoison.__ne__c C s t t�S )N)rR r� )r% r r r! rS � s zPrecertPoison.__hash__c C s dS )Nzr )r% r r r! rE � s zPrecertPoison.__repr__N)
r3 r4 r5 r ZPRECERT_POISONr0 rP rQ rS rE r r r r! r� � s
r� c @ sH e Zd ZejZdd� Zed�\ZZ Z
dd� Z dd� Z dd � Z
d
d � Zd S )
�
TLSFeaturec C s: t |�}tdd� |D �� s(t|�dkr0td��|| _d S )Nc s s | ]}t |t�V qd S )N)r �TLSFeatureType)rV rW r r r! rX � s z&TLSFeature.__init__..r z@features must be a list of elements from the TLSFeatureType enum)rY rZ r# rB � _features)r% Zfeaturesr r r! r/ � s zTLSFeature.__init__r� c C s
dj | �S )Nz$)r> )r% r r r! rE � s zTLSFeature.__repr__c C s t |t�stS | j|jkS )N)r r� rN r� )r% rO r r r! rP � s
zTLSFeature.__eq__c C s
| |k S )Nr )r% rO r r r! rQ � s zTLSFeature.__ne__c C s t t| j��S )N)rR re r� )r% r r r! rS � s zTLSFeature.__hash__N)r3 r4 r5 r Z TLS_FEATUREr0 r/ r, rF rG rH rE rP rQ rS r r r r! r� � s
r� c @ s e Zd ZdZdZdS )r� � � N)r3 r4 r5 Zstatus_requestZstatus_request_v2r r r r! r� � s r� c C s i | ] }||j �qS r )rC )rV rW r r r! �
� s r� c @ sD e Zd ZejZdd� Zdd� Zdd� Zdd� Z d d
� Z
e j d �Z
d S )
�InhibitAnyPolicyc C s. t |tj�std��|dk r$td��|| _d S )Nz skip_certs must be an integerr z)skip_certs must be a non-negative integer)r rJ rK rB r � _skip_certs)r% �
skip_certsr r r! r/ � s
zInhibitAnyPolicy.__init__c C s
dj | �S )Nz-)r> )r% r r r! rE � s zInhibitAnyPolicy.__repr__c C s t |t�stS | j|jkS )N)r r� rN r� )r% rO r r r! rP � s
zInhibitAnyPolicy.__eq__c C s
| |k S )Nr )r% rO r r r! rQ � s zInhibitAnyPolicy.__ne__c C s
t | j�S )N)rR r� )r% r r r! rS � s zInhibitAnyPolicy.__hash__r� N)r3 r4 r5 r ZINHIBIT_ANY_POLICYr0 r/ rE rP rQ rS r rT r� r r r r! r� � s r� c @ s� e Zd ZejZdd� Zejd�Z ejd�Z
ejd�Z ejd�Z ejd�Z
ejd�Zejd �Zed
d � �Zed d
� �Zdd� Zdd� Zdd� Zdd� ZdS )�KeyUsagec
C sP | r|s| rt d��|| _|| _|| _|| _|| _|| _|| _|| _| | _ d S )NzKencipher_only and decipher_only can only be true when key_agreement is true)
r �_digital_signature�_content_commitment�_key_encipherment�_data_encipherment�_key_agreement�_key_cert_sign� _crl_sign�_encipher_only�_decipher_only)
r% �digital_signature�content_commitment�key_encipherment�data_encipherment�
key_agreement�
key_cert_sign�crl_sign�
encipher_only�
decipher_onlyr r r! r/ � s zKeyUsage.__init__r� r� r� r� r� r� r� c C s | j std��n| jS d S )Nz7encipher_only is undefined unless key_agreement is true)r� r r� )r% r r r! r� s zKeyUsage.encipher_onlyc C s | j std��n| jS d S )Nz7decipher_only is undefined unless key_agreement is true)r� r r� )r% r r r! r� % s zKeyUsage.decipher_onlyc C s< y| j }| j}W n tk
r, d}d}Y nX dj| ||�S )NFa- )r� r� r r> )r% r� r� r r r! rE . s
zKeyUsage.__repr__c C sz t |t�stS | j|jkox| j|jkox| j|jkox| j|jkox| j|jkox| j|jkox| j |j kox| j
|j
kox| j |j kS )N) r r� rN r� r� r� r� r� r� r� r� r� )r% rO r r r! rP C s
zKeyUsage.__eq__c C s
| |k S )Nr )r% rO r r r! rQ S s zKeyUsage.__ne__c
C s, t | j| j| j| j| j| j| j| j| j f �S )N)
rR r� r� r� r� r� r� r� r� r� )r% r r r! rS V s zKeyUsage.__hash__N)r3 r4 r5 r Z KEY_USAGEr0 r/ r rT r� r� r� r� r� r� r� �propertyr� r� rE rP rQ rS r r r r! r� � s
r� c @ sV e Zd ZejZdd� Zdd� Zdd� Zdd� Z d d
� Z
d d � Z e j
d
�Ze j
d�ZdS )�NameConstraintsc C s� |d k r4t |�}tdd� |D ��s*td��| j|� |d k rht |�}tdd� |D ��s^td��| j|� |d kr�|d kr�td��|| _|| _d S )Nc s s | ]}t |t�V qd S )N)r r )rV rW r r r! rX m s z+NameConstraints.__init__..z@permitted_subtrees must be a list of GeneralName objects or Nonec s s | ]}t |t�V qd S )N)r r )rV rW r r r! rX w s z?excluded_subtrees must be a list of GeneralName objects or NonezIAt least one of permitted_subtrees and excluded_subtrees must not be None)rY rZ rB �_validate_ip_namer �_permitted_subtrees�_excluded_subtrees)r% �permitted_subtrees�excluded_subtreesr r r! r/ j s"
zNameConstraints.__init__c C s& t |t�stS | j|jko$| j|jkS )N)r r� rN r� r� )r% rO r r r! rP � s
zNameConstraints.__eq__c C s
| |k S )Nr )r% rO r r r! rQ � s zNameConstraints.__ne__c C s t dd� |D ��rtd��d S )Nc s s. | ]&}t |t�o$t |jtjtjf� V qd S )N)r r rC � ipaddressZ IPv4NetworkZ IPv6Network)rV �namer r r! rX � s z4NameConstraints._validate_ip_name..zGIPAddress name constraints must be an IPv4Network or IPv6Network object)�anyrB )r% Ztreer r r! r� � s
z!NameConstraints._validate_ip_namec C s
dj | �S )Nze)r> )r% r r r! rE � s zNameConstraints.__repr__c C s@ | j d k rt| j �}nd }| jd k r0t| j�}nd }t||f�S )N)r� re r� rR )r% ZpsZesr r r! rS � s
zNameConstraints.__hash__r� r� N)r3 r4 r5 r ZNAME_CONSTRAINTSr0 r/ rP rQ r� rE rS r rT r� r� r r r r! r� f s
r� c @ sR e Zd Zdd� Zejd�Zejd�Zejd�Zdd� Z dd � Z
d
d � Z d d
� Z dS )� Extensionc C s: t |t�std��t |t�s$td��|| _|| _|| _d S )Nz2oid argument must be an ObjectIdentifier instance.z critical must be a boolean value)r r rB rs �_oid� _critical�_value)r% r0 �criticalrC r r r! r/ � s
zExtension.__init__r� r� r� c C s
dj | �S )Nz@)r> )r% r r r! rE � s zExtension.__repr__c C s2 t |t�stS | j|jko0| j|jko0| j|jkS )N)r r� rN r0 r� rC )r% rO r r r! rP � s
zExtension.__eq__c C s
| |k S )Nr )r% rO r r r! rQ � s zExtension.__ne__c C s t | j| j| jf�S )N)rR r0 r� rC )r% r r r! rS � s zExtension.__hash__N)
r3 r4 r5 r/ r rT r0 r� rC rE rP rQ rS r r r r! r� � s
r� c @ sJ e Zd Zdd� Zed�\ZZZdd� Zdd� Z dd � Z
d
d � Z d d
� Z dS )� GeneralNamesc C s, t |�}tdd� |D ��s"td��|| _d S )Nc s s | ]}t |t�V qd S )N)r r )rV rW r r r! rX � s z(GeneralNames.__init__..z^Every item in the general_names list must be an object conforming to the GeneralName interface)rY rZ rB �_general_names)r% �
general_namesr r r! r/ � s
zGeneralNames.__init__r� c s0 � fdd�| D �}� t kr(dd� |D �}t|�S )Nc 3 s | ]}t |� �r|V qd S )N)r )rV �i)�typer r! rX � s z3GeneralNames.get_values_for_type..c s s | ] }|j V qd S )N)rC )rV r� r r r! rX � s )r rY )r% r� Zobjsr )r� r! �get_values_for_type� s z GeneralNames.get_values_for_typec C s dj | j�S )Nz)r> r� )r% r r r! rE � s zGeneralNames.__repr__c C s t |t�stS | j|jkS )N)r r� rN r� )r% rO r r r! rP � s
zGeneralNames.__eq__c C s
| |k S )Nr )r% rO r r r! rQ s zGeneralNames.__ne__c C s t t| j��S )N)rR re r� )r% r r r! rS s zGeneralNames.__hash__N)
r3 r4 r5 r/ r, rF rG rH r� rE rP rQ rS r r r r! r� � s
r� c @ sP e Zd ZejZdd� Zed�\ZZ Z
dd� Z dd� Z dd � Z
d
d � Zd d
� ZdS )�SubjectAlternativeNamec C s t |�| _d S )N)r� r� )r% r� r r r! r/ s z SubjectAlternativeName.__init__r� c C s | j j|�S )N)r� r� )r% r� r r r! r� s z*SubjectAlternativeName.get_values_for_typec C s dj | j�S )Nz )r> r� )r% r r r! rE s z SubjectAlternativeName.__repr__c C s t |t�stS | j|jkS )N)r r� rN r� )r% rO r r r! rP s
z SubjectAlternativeName.__eq__c C s
| |k S )Nr )r% rO r r r! rQ s z SubjectAlternativeName.__ne__c C s
t | j�S )N)rR r� )r% r r r! rS s z SubjectAlternativeName.__hash__N)r3 r4 r5 r ZSUBJECT_ALTERNATIVE_NAMEr0 r/ r, rF rG rH r� rE rP rQ rS r r r r! r� s r� c @ sP e Zd ZejZdd� Zed�\ZZ Z
dd� Z dd� Z dd � Z
d
d � Zd d
� ZdS )�IssuerAlternativeNamec C s t |�| _d S )N)r� r� )r% r� r r r! r/ ' s z IssuerAlternativeName.__init__r� c C s | j j|�S )N)r� r� )r% r� r r r! r� , s z)IssuerAlternativeName.get_values_for_typec C s dj | j�S )Nz)r> r� )r% r r r! rE / s z IssuerAlternativeName.__repr__c C s t |t�stS | j|jkS )N)r r� rN r� )r% rO r r r! rP 2 s
z IssuerAlternativeName.__eq__c C s
| |k S )Nr )r% rO r r r! rQ 8 s z IssuerAlternativeName.__ne__c C s
t | j�S )N)rR r� )r% r r r! rS ; s z IssuerAlternativeName.__hash__N)r3 r4 r5 r ZISSUER_ALTERNATIVE_NAMEr0 r/ r, rF rG rH r� rE rP rQ rS r r r r! r� # s r� c @ sP e Zd ZejZdd� Zed�\ZZ Z
dd� Z dd� Z dd � Z
d
d � Zd d
� ZdS )�CertificateIssuerc C s t |�| _d S )N)r� r� )r% r� r r r! r/ C s zCertificateIssuer.__init__r� c C s | j j|�S )N)r� r� )r% r� r r r! r� H s z%CertificateIssuer.get_values_for_typec C s dj | j�S )Nz)r> r� )r% r r r! rE K s zCertificateIssuer.__repr__c C s t |t�stS | j|jkS )N)r r� rN r� )r% rO r r r! rP N s
zCertificateIssuer.__eq__c C s
| |k S )Nr )r% rO r r r! rQ T s zCertificateIssuer.__ne__c C s
t | j�S )N)rR r� )r% r r r! rS W s zCertificateIssuer.__hash__N)r3 r4 r5 r ZCERTIFICATE_ISSUERr0 r/ r, rF rG rH r� rE rP rQ rS r r r r! r� ? s r� c @ sD e Zd ZejZdd� Zdd� Zdd� Zdd� Z d d
� Z
e j d �Z
d S )
� CRLReasonc C s t |t�std��|| _d S )Nz*reason must be an element from ReasonFlags)r r~ rB �_reason)r% �reasonr r r! r/ _ s
zCRLReason.__init__c C s dj | j�S )Nz)r> r� )r% r r r! rE e s zCRLReason.__repr__c C s t |t�stS | j|jkS )N)r r� rN r� )r% rO r r r! rP h s
zCRLReason.__eq__c C s
| |k S )Nr )r% rO r r r! rQ n s zCRLReason.__ne__c C s
t | j�S )N)rR r� )r% r r r! rS q s zCRLReason.__hash__r� N)r3 r4 r5 r Z
CRL_REASONr0 r/ rE rP rQ rS r rT r� r r r r! r� [ s r� c @ sD e Zd ZejZdd� Zdd� Zdd� Zdd� Z d d
� Z
e j d �Z
d S )
�InvalidityDatec C s t |tj�std��|| _d S )Nz+invalidity_date must be a datetime.datetime)r �datetimerB �_invalidity_date)r% �invalidity_dater r r! r/ { s zInvalidityDate.__init__c C s dj | j�S )Nz$)r> r� )r% r r r! rE � s zInvalidityDate.__repr__c C s t |t�stS | j|jkS )N)r r� rN r� )r% rO r r r! rP � s
zInvalidityDate.__eq__c C s
| |k S )Nr )r% rO r r r! rQ � s zInvalidityDate.__ne__c C s
t | j�S )N)rR r� )r% r r r! rS � s zInvalidityDate.__hash__r� N)r3 r4 r5 r ZINVALIDITY_DATEr0 r/ rE rP rQ rS r rT r� r r r r! r� w s r� c @ sH e Zd ZejZdd� Zed�\ZZ Z
dd� Z dd� Z dd � Z
d
d � Zd S )
�)PrecertificateSignedCertificateTimestampsc C s, t |�}tdd� |D ��s"td��|| _d S )Nc s s | ]}t |t�V qd S )N)r r )rV �sctr r r! rX � s zEPrecertificateSignedCertificateTimestamps.__init__..zYEvery item in the signed_certificate_timestamps list must be a SignedCertificateTimestamp)rY rZ rB � _signed_certificate_timestamps)r% � signed_certificate_timestampsr r r! r/ � s
z2PrecertificateSignedCertificateTimestamps.__init__r� c C s dj t| ��S )Nz/)r> rY )r% r r r! rE � s z2PrecertificateSignedCertificateTimestamps.__repr__c C s t t| j��S )N)rR re r� )r% r r r! rS � s z2PrecertificateSignedCertificateTimestamps.__hash__c C s t |t�stS | j|jkS )N)r r� rN r� )r% rO r r r! rP � s
z0PrecertificateSignedCertificateTimestamps.__eq__c C s
| |k S )Nr )r% rO r r r! rQ � s z0PrecertificateSignedCertificateTimestamps.__ne__N)r3 r4 r5 r Z%PRECERT_SIGNED_CERTIFICATE_TIMESTAMPSr0 r/ r, rF rG rH rE rS rP rQ r r r r! r� � s r� c @ sH e Zd ZejZdd� Zed�\ZZ Z
dd� Z dd� Z dd � Z
d
d � Zd S )
�SignedCertificateTimestampsc C s, t |�}tdd� |D ��s"td��|| _d S )Nc s s | ]}t |t�V qd S )N)r r )rV r� r r r! rX � s z7SignedCertificateTimestamps.__init__..zYEvery item in the signed_certificate_timestamps list must be a SignedCertificateTimestamp)rY rZ rB r� )r% r� r r r! r/ � s
z$SignedCertificateTimestamps.__init__r� c C s dj t| ��S )Nz!)r> rY )r% r r r! rE � s z$SignedCertificateTimestamps.__repr__c C s t t| j��S )N)rR re r� )r% r r r! rS � s z$SignedCertificateTimestamps.__hash__c C s t |t�stS | j|jkS )N)r r� rN r� )r% rO r r r! rP � s
z"SignedCertificateTimestamps.__eq__c C s
| |k S )Nr )r% rO r r r! rQ � s z"SignedCertificateTimestamps.__ne__N)r3 r4 r5 r Z SIGNED_CERTIFICATE_TIMESTAMPSr0 r/ r, rF rG rH rE rS rP rQ r r r r! r� � s r� c @ sD e Zd ZejZdd� Zdd� Zdd� Zdd� Z d d
� Z
e j d �Z
d S )
� OCSPNoncec C s t |t�std��|| _d S )Nznonce must be bytes)r �bytesrB �_nonce)r% �noncer r r! r/ � s
zOCSPNonce.__init__c C s t |t�stS | j|jkS )N)r r� rN r� )r% rO r r r! rP � s
zOCSPNonce.__eq__c C s
| |k S )Nr )r% rO r r r! rQ � s zOCSPNonce.__ne__c C s
t | j�S )N)rR r� )r% r r r! rS � s zOCSPNonce.__hash__c C s
dj | �S )Nz )r> )r% r r r! rE � s zOCSPNonce.__repr__r� N)r3 r4 r5 r ZNONCEr0 r/ rP rQ rS rE r rT r� r r r r! r� � s r� c @ s� e Zd ZejZdd� Zdd� Zdd� Zdd� Z d d
� Z
e j d �Z
e j d �Ze j d
�Ze j d�Ze j d�Ze j d�Ze j d�ZdS )�IssuingDistributionPointc C s� |r,t |t� s$tdd� |D �� r,td��|rLtj|ksDtj|krLtd��t |t�ort |t�ort |t�ort |t�s|td��||||g}t dd� |D ��dkr�td ��t
|||||||g�s�td
��|| _ || _ || _
|| _|| _|| _|| _d S ) Nc s s | ]}t |t�V qd S )N)r r~ )rV rW r r r! rX s z4IssuingDistributionPoint.__init__..z:only_some_reasons must be None or frozenset of ReasonFlagszTunspecified and remove_from_crl are not valid reasons in an IssuingDistributionPointzuonly_contains_user_certs, only_contains_ca_certs, indirect_crl and only_contains_attribute_certs must all be boolean.c S s g | ] }|r|�qS r r )rV rW r r r! �
3 s z5IssuingDistributionPoint.__init__..� z�Only one of the following can be set to True: only_contains_user_certs, only_contains_ca_certs, indirect_crl, only_contains_attribute_certsz�Cannot create empty extension: if only_contains_user_certs, only_contains_ca_certs, indirect_crl, and only_contains_attribute_certs are all False, then either full_name, relative_name, or only_some_reasons must have a value.)r r rZ rB r~ r� r� r rs r# r� �_only_contains_user_certs�_only_contains_ca_certs�
_indirect_crl� _only_contains_attribute_certs�_only_some_reasonsr� r� ) r% r� r� �only_contains_user_certs�only_contains_ca_certs�only_some_reasons� indirect_crl� only_contains_attribute_certsZcrl_constraintsr r r! r/ sP
z!IssuingDistributionPoint.__init__c C s
dj | �S )NaG )r> )r% r r r! rE U s z!IssuingDistributionPoint.__repr__c C sb t |t�stS | j|jko`| j|jko`| j|jko`| j|jko`| j|jko`| j|jko`| j |j kS )N)
r r� rN r� r� r� r� r� r� r� )r% rO r r r! rP a s
z IssuingDistributionPoint.__eq__c C s
| |k S )Nr )r% rO r r r! rQ p s z IssuingDistributionPoint.__ne__c C s$ t | j| j| j| j| j| j| jf�S )N)rR r� r� r� r� r� r� r� )r% r r r! rS s s z!IssuingDistributionPoint.__hash__r� r� r� r� r� r� r� N)r3 r4 r5 r ZISSUING_DISTRIBUTION_POINTr0 r/ rE rP rQ rS r rT r� r� r� r� r� r� r� r r r r! r� s P
r� c @ sH e Zd Zdd� Zejd�Zejd�Zdd� Zdd� Z d d
� Z
d d � Z d
S )rA c C s" t |t�std��|| _|| _d S )Nz oid must be an ObjectIdentifier)r r rB r� r� )r% r0 rC r r r! r/ � s
z UnrecognizedExtension.__init__r� r� c C s
dj | �S )Nz7)r> )r% r r r! rE � s z UnrecognizedExtension.__repr__c C s& t |t�stS | j|jko$| j|jkS )N)r rA rN r0 rC )r% rO r r r! rP � s
z UnrecognizedExtension.__eq__c C s
| |k S )Nr )r% rO r r r! rQ � s z UnrecognizedExtension.__ne__c C s t | j| jf�S )N)rR r0 rC )r% r r r! rS � s z UnrecognizedExtension.__hash__N) r3 r4 r5 r/ r rT r0 rC rE rP rQ rS r r r r! rA � s
rA )WZ
__future__r r r r9 r� r r� �enumr rJ Z cryptographyr Zcryptography.hazmat._derr r r r
Z cryptography.hazmat.primitivesr r Z,cryptography.hazmat.primitives.asymmetric.ecr
Z-cryptography.hazmat.primitives.asymmetric.rsar Z*cryptography.x509.certificate_transparencyr Z cryptography.x509.general_namer r r Zcryptography.x509.namer Zcryptography.x509.oidr r r r r" r, � Exceptionr- r7 Z
add_metaclass�ABCMeta�objectr8 r; Zregister_interfacerI rU rc ri rm rj rr rx ry r} rz r~ r� r� r� r� r� r� r� r� r� r� Z_TLS_FEATURE_TYPE_TO_ENUMr� r� r� r� r� r� r� r� r� r� r� r� r� r� rA r r r r! � s� (
!_ $)##^
< 2%" " qQ)& (&