3
l�_c � @ s d dl mZmZmZ d dlmZ d dlZd dlmZ d dl m
Z
d dl m Z m
Z
G dd� de�Zd d
� eD �Ze� Ze jeje jeje jeje jeje jeje jejiZe jd e j d e j d
e j de j de jde j de jde j!di Z"dd� Z#G dd� de�Z$G dd� de�Z%G dd� de�Z&dS ) � )�absolute_import�division�print_function)�EnumN)�utils)� _get_backend)�NameOID�ObjectIdentifierc @ s4 e Zd ZdZdZdZdZdZdZdZ dZ
d Z d
Z d S ) � _ASN1Type� � � � � � � � � � N)
�__name__�
__module__� __qualname__�
UTF8StringZ
NumericString�PrintableStringZ T61String� IA5StringZUTCTimeZGeneralizedTimeZ
VisibleStringZUniversalStringZ BMPString� r r � /usr/lib64/python3.6/name.pyr
s r
c C s i | ] }||j �qS r )�value)�.0�ir r r �
s r ZCN�LZST�OZOU�CZSTREETZDCZUIDc C s� | sdS | j dd�} | j dd�} | j dd�} | j dd �} | j d
d �} | j d d
�} | j dd�} | j dd�} | d dkr|d| } | d dkr�| dd� d } | S )z>Escape special characters in RFC4514 Distinguished Name value.� �\z\\�"z\"�+z\+�,z\,�;z\;�z\>� z\00r �#� � Nz\ )r- r. �����r0 )�replace)�valr r r �_escape_dn_value7 s r3 c @ sT e Zd Zefdd�Zejd�Zejd�Zdd� Z dd� Z
d d
� Z d d � Z d
d� Z
dS )�
NameAttributec C s� t |t�std��t |tj�s&td��|tjks:|tjkrTt|j d��dkrTt
d��|t krjt j
|tj�}t |t�s|td��|| _|| _|| _d S )Nz2oid argument must be an ObjectIdentifier instance.z#value argument must be a text type.�utf8� z/Country name must be a 2 character country codez%_type must be from the _ASN1Type enum)�
isinstancer � TypeError�sixZ text_typer � COUNTRY_NAME�JURISDICTION_COUNTRY_NAME�len�encode�
ValueError� _SENTINEL�_NAMEOID_DEFAULT_TYPE�getr
r �_oid�_value�_type)�self�oidr rD r r r �__init__P s"
zNameAttribute.__init__rB rC c C s$ t j| j| jj�}d|t| j�f S )z�
Format as RFC4514 Distinguished Name string.
Use short attribute name if available, otherwise fall back to OID
dotted string.
z%s=%s)�_NAMEOID_TO_NAMErA rF Z
dotted_stringr3 r )rE �keyr r r �rfc4514_stringu s z NameAttribute.rfc4514_stringc C s& t |t�stS | j|jko$| j|jkS )N)r7 r4 �NotImplementedrF r )rE �otherr r r �__eq__ s
zNameAttribute.__eq__c C s
| |k S )Nr )rE rL r r r �__ne__� s zNameAttribute.__ne__c C s t | j| jf�S )N)�hashrF r )rE r r r �__hash__� s zNameAttribute.__hash__c C s
dj | �S )Nz/)�format)rE r r r �__repr__� s zNameAttribute.__repr__N)r r r r? rG r Zread_only_propertyrF r rJ rM rN rP rR r r r r r4 O s "
r4 c @ sT e Zd Zdd� Zdd� Zdd� Zdd� Zd d
� Zd d � Zd
d� Z dd� Z
dd� Z dS )�RelativeDistinguishedNamec C s\ t |�}|std��tdd� |D ��s.td��|| _t|�| _t| j�t|�krXtd��d S )Nz-a relative distinguished name cannot be emptyc s s | ]}t |t�V qd S )N)r7 r4 )r �xr r r � � s z5RelativeDistinguishedName.__init__..z/attributes must be an iterable of NameAttributez$duplicate attributes are not allowed)�listr> �allr8 � _attributes� frozenset�_attribute_setr< )rE �
attributesr r r rG � s
z"RelativeDistinguishedName.__init__c s � fdd�| D �S )Nc s g | ]}|j � kr|�qS r )rF )r r )rF r r �
� s zDRelativeDistinguishedName.get_attributes_for_oid..r )rE rF r )rF r �get_attributes_for_oid� s z0RelativeDistinguishedName.get_attributes_for_oidc C s dj dd� | jD ��S )z�
Format as RFC4514 Distinguished Name string.
Within each RDN, attributes are joined by '+', although that is rarely
used in certificates.
r' c s s | ]}|j � V qd S )N)rJ )r �attrr r r rU � s z;RelativeDistinguishedName.rfc4514_string..)�joinrX )rE r r r rJ � s z(RelativeDistinguishedName.rfc4514_stringc C s t |t�stS | j|jkS )N)r7 rS rK rZ )rE rL r r r rM � s
z RelativeDistinguishedName.__eq__c C s
| |k S )Nr )rE rL r r r rN � s z RelativeDistinguishedName.__ne__c C s
t | j�S )N)rO rZ )rE r r r rP � s z"RelativeDistinguishedName.__hash__c C s
t | j�S )N)�iterrX )rE r r r �__iter__� s z"RelativeDistinguishedName.__iter__c C s
t | j�S )N)r< rX )rE r r r �__len__� s z!RelativeDistinguishedName.__len__c C s dj | j� �S )Nz )rQ rJ )rE r r r rR � s z"RelativeDistinguishedName.__repr__N) r r r rG r] rJ rM rN rP ra rb rR r r r r rS � s rS c @ sj e Zd Zdd� Zdd� Zdd� Zedd� �Zdd
d �Zd d
� Z dd� Z
dd� Z dd� Z dd� Z
dd� Zd S )�Namec C sR t |�}tdd� |D ��r,dd� |D �| _n"tdd� |D ��rF|| _ntd��d S )Nc s s | ]}t |t�V qd S )N)r7 r4 )r rT r r r rU � s z Name.__init__..c S s g | ]}t |g��qS r )rS )r rT r r r r\ � s z!Name.__init__..c s s | ]}t |t�V qd S )N)r7 rS )r rT r r r rU � s zNattributes must be a list of NameAttribute or a list RelativeDistinguishedName)rV rW rX r8 )rE r[ r r r rG � s z
Name.__init__c C s dj dd� t| j�D ��S )a�
Format as RFC4514 Distinguished Name string.
For example 'CN=foobar.com,O=Foo Corp,C=US'
An X.509 name is a two-level structure: a list of sets of attributes.
Each list element is separated by ',' and within each list element, set
elements are separated by '+'. The latter is almost never used in
real world certificates. According to RFC4514 section 2.1 the
RDNSequence must be reversed when converting to string representation.
r( c s s | ]}|j � V qd S )N)rJ )r r^ r r r rU � s z&Name.rfc4514_string..)r_ �reversedrX )rE r r r rJ � s zName.rfc4514_stringc s � fdd�| D �S )Nc s g | ]}|j � kr|�qS r )rF )r r )rF r r r\ � s z/Name.get_attributes_for_oid..r )rE rF r )rF r r] � s zName.get_attributes_for_oidc C s | j S )N)rX )rE r r r �rdns� s z Name.rdnsNc C s t |�}|j| �S )N)r Zx509_name_bytes)rE Zbackendr r r � public_bytes� s zName.public_bytesc C s t |t�stS | j|jkS )N)r7 rc rK rX )rE rL r r r rM � s
z Name.__eq__c C s
| |k S )Nr )rE rL r r r rN � s z Name.__ne__c C s t t| j��S )N)rO �tuplerX )rE r r r rP � s z
Name.__hash__c c s( x"| j D ]}x|D ]
}|V qW qW d S )N)rX )rE �rdnZavar r r ra � s
z
Name.__iter__c C s t dd� | jD ��S )Nc s s | ]}t |�V qd S )N)r< )r rh r r r rU � s z Name.__len__..)�sumrX )rE r r r rb � s z Name.__len__c C s: dj dd� | jD ��}tjr,dj|jd��S dj|�S d S )Nr( c s s | ]}|j � V qd S )N)rJ )r r^ r r r rU s z Name.__repr__..z
r5 )r_ rX r9 ZPY2rQ r= )rE re r r r rR � s z
Name.__repr__)N)r r r rG rJ r] �propertyre rf rM rN rP ra rb rR r r r r rc � s
rc )'Z
__future__r r r �enumr r9 Z cryptographyr Z cryptography.hazmat.backendsr Zcryptography.x509.oidr r r
Z_ASN1_TYPE_TO_ENUM�objectr? r: r r; Z
SERIAL_NUMBERZ DN_QUALIFIERZ
EMAIL_ADDRESSr ZDOMAIN_COMPONENTr@ Z COMMON_NAMEZ
LOCALITY_NAMEZSTATE_OR_PROVINCE_NAMEZORGANIZATION_NAMEZORGANIZATIONAL_UNIT_NAMEZSTREET_ADDRESSZUSER_IDrH r3 r4 rS rc r r r r � s6
@1