ї 2╩Kє;~ZWЦС≈ddlmZddlZddlZddlZddlmZmZddlm Z ddl mZmZddl mZddlmZmZmZGd└d ejі╚ZGd └dejі╚ZejejejejejfZd$d└ZGd└dejі╚ZGd└dі╚ZGd└dej╛і╚Z Gd└dej╛і╚Z!Gd└dej╛і╚Z"Gd└dі╚Z#Gd└dі╚Z$d%d"└Z%d&d#└Z&dS)'И)зannotationsN)зutilsзx509)зocsp)зhashesз serialization)з CertificateIssuerPrivateKeyTypes)з_EARLIEST_UTC_TIMEз_convert_to_naive_utc_timeз_reject_duplicate_extensioncС≈eZdZdZdZdS)зOCSPResponderEncodingzBy HashzBy NameN)з__name__з __module__з__qualname__зHASHзNAME╘СЗj/builddir/build/BUILD/cloudlinux-venv-1.0.10/venv/lib64/python3.11/site-packages/cryptography/x509/ocsp.pyrrs─────ь─Dь─D─D─DrrcС&≈eZdZdZdZdZdZdZdZdS)зOCSPResponseStatusrИИИИИN) rrrз SUCCESSFULзMALFORMED_REQUESTзINTERNAL_ERRORз TRY_LATERзSIG_REQUIREDзUNAUTHORIZEDrrrrrs-─────ь─Jьпь─Nь─Iь─Lь─L─L─Lrrз algorithmЗhashes.HashAlgorithmзreturnзNonecСN≈t|tі╚stdі╚┌dS)Nz9Algorithm must be SHA1, SHA224, SHA256, SHA384, or SHA512)з isinstanceз_ALLOWED_HASHESз ValueError)r$s rз_verify_algorithmr,/s3─щ░i╔я1т1П щьGЯ Т П П П rcС≈eZdZdZdZdZdS)зOCSPCertStatusrrrN)rrrзGOODзREVOKEDзUNKNOWNrrrr.r.6s─────ь─Dь─Gь─G─G─Grr.cС≈eZdZdd└ZdS)з_SingleResponseзcertЗx509.Certificateзissuerr$r%зcert_statusr.зthis_updateЗdatetime.datetimeзnext_updateЗ"typing.Optional[datetime.datetime]зrevocation_timeзrevocation_reasonЗ!typing.Optional[x509.ReasonFlags]c Сf≈t|tjі╚rt|tjі╚stdі╚┌t |і╚t|t jі╚stdі╚┌|│)t|t jі╚stdі╚┌||_||_||_||_ ||_ t|tі╚stdі╚┌|tjur#|│tdі╚┌|│tdі╚┌n}t|t jі╚stdі╚┌t|і╚}|tkrtdі╚┌|│)t|tjі╚std і╚┌||_||_||_dS) NЗ%cert and issuer must be a Certificatez%this_update must be a datetime objectz-next_update must be a datetime object or Nonez8cert_status must be an item from the OCSPCertStatus enumzBrevocation_time can only be provided if the certificate is revokedzDrevocation_reason can only be provided if the certificate is revokedz)revocation_time must be a datetime objectz7The revocation_time must be on or after 1950 January 1.zCrevocation_reason must be an item from the ReasonFlags enum or None)r)rзCertificateз TypeErrorr,зdatetimeз_certз_issuerз _algorithmз_this_updateз_next_updater.r0r+rr зReasonFlagsз_cert_statusз_revocation_timeз_revocation_reason) зselfr4r6r$r7r8r:r<r=s rз__init__z_SingleResponse.__init__=sР─У≤$╔т 0я1т1П EҐь∙Dт$Я: Т: П EУпCяDтDпDЕ≤)я$т$п$щ≤+╔xт'8я9т9П EщпCяDтDпDьп"ґ:ь²т*Я, Т, п"УпKяLтLпLЮ┬▄ ь┬▄ь#┬▄ь'┬ть'┬тЕ≤+╔~я6т6П щьJЯТП П²nт4п4п4ьп*щ П!ЯТПП!п,щ П"ЯТПП-У≤oґxт/@яAтAП Mщп KяLтLпLЕ8╦яIтI┬Oьу!3р3п3щ П'ЯТПП !п,╣Zь!╔4т#3Я6Т6п,У П#ЯТПП (┬ть /┬ть"3┬тппrN)r4r5r6r5r$r%r7r.r8r9r:r;r<r;r=r>)rrrrNrrrr3r3<s.─────ПB4ПB4ПB4ПB4ПB4ПB4rr3cС*≈eZdZeejdd└і╚і╚Zeejdd└і╚і╚Zeejdd└і╚і╚Zeejdd└і╚і╚Z ejdd└і╚Z eejdd └і╚і╚ZdS)зOCSPRequestr&зbytescС≈dS╘z3 The hash of the issuer public key Nr╘rMs rзissuer_key_hashzOCSPRequest.issuer_key_hash┐С───rcС≈dS╘z- The hash of the issuer name NrrTs rзissuer_name_hashzOCSPRequest.issuer_name_hash┼rVrr%cС≈dS╘zK The hash algorithm used in the issuer name and key hashes NrrTs rзhash_algorithmzOCSPRequest.hash_algorithm▒rVrзintcС≈dS╘zM The serial number of the cert whose status is being checked NrrTs rз serial_numberzOCSPRequest.serial_number≤rVrзencodingЗserialization.EncodingcС≈dS)z/ Serializes the request to DER Nr╘rMras rзpublic_byteszOCSPRequest.public_bytes÷rVrЗx509.ExtensionscС≈dS)zP The list of request extensions. Not single request extensions. NrrTs rз extensionszOCSPRequest.extensions╔rVrN╘r&rQ╘r&r%╘r&r]╘rarbr&rQ╘r&rf)rrrзpropertyзabcзabstractmethodrUrYr\r`rerhrrrrPrP┌s─────ь ьтПППЯтЯ└XПП ьтПППЯтЯ└XПП ьтПППЯтЯ└XПП ьтПППЯтЯ└XПП тПППЯтПП ьтПППЯтЯ└XПППrrP)з metaclasscСп≈eZdZeejdd└і╚і╚Zeejdd└і╚і╚Zeejdd└і╚і╚Zeejdd └і╚і╚Z eejdd └і╚і╚Z eejdd└і╚і╚Zeejdd └і╚і╚Zeejdd└і╚і╚Z eejdd└і╚і╚ZdS)зOCSPSingleResponser&r.cС≈dS╘zY The status of the certificate (an element from the OCSPCertStatus enum) NrrTs rзcertificate_statusz%OCSPSingleResponse.certificate_statusўrVrr;cС≈dS╘z^ The date of when the certificate was revoked or None if not revoked. NrrTs rr<z"OCSPSingleResponse.revocation_time╣rVrr>cС≈dS╘zi The reason the certificate was revoked or None if not specified or not revoked. NrrTs rr=z$OCSPSingleResponse.revocation_reasonҐrVrr9cС≈dS╘z│ The most recent time at which the status being indicated is known by the responder to have been correct NrrTs rr8zOCSPSingleResponse.this_updateеrVrcС≈dS╘zC The time when newer information will be available NrrTs rr:zOCSPSingleResponse.next_updateмrVrrQcС≈dSrSrrTs rrUz"OCSPSingleResponse.issuer_key_hashтrVrcС≈dSrXrrTs rrYz#OCSPSingleResponse.issuer_name_hashшrVrr%cС≈dSr[rrTs rr\z!OCSPSingleResponse.hash_algorithmБrVrr]cС≈dSr_rrTs rr`z OCSPSingleResponse.serial_numberИrVrN╘r&r.╘r&r;╘r&r>╘r&r9rirjrk)rrrrnrorprvr<r=r8r:rUrYr\r`rrrrsrsґs╟─────ь ьтПППЯтЯ└XПП ьтПППЯтЯ└XППьтПППЯтЯ└XППьтПППЯтЯ└XППьтПППЯтЯ└XПП ьтПППЯтЯ└XПП ьтПППЯтЯ└XПП ьтПППЯтЯ└XПП ьтПППЯтЯ└XПППrrscСJ≈eZdZeejd*d└і╚і╚Zeejd+d└і╚і╚Zeejd,d└і╚і╚Zeejd-d └і╚і╚Z eejd.d└і╚і╚Z eejd.d└і╚і╚Zeejd/d└і╚і╚Zeejd0d└і╚і╚Z eejd1d└і╚і╚Zeejd2d└і╚і╚Zeejd3d└і╚і╚Zeejd4d└і╚і╚Zeejd5d└і╚і╚Zeejd2d└і╚і╚Zeejd4d└і╚і╚Zeejd.d└і╚і╚Zeejd.d└і╚і╚Zeejd6d └і╚і╚Zeejd7d"└і╚і╚Zeejd8d$└і╚і╚Zeejd8d%└і╚і╚Zejd9d(└і╚Zd)S):зOCSPResponser&З#typing.Iterator[OCSPSingleResponse]cС≈dS)z_ An iterator over the individual SINGLERESP structures in the response NrrTs rз responseszOCSPResponse.responsesРrVrrcС≈dS)zm The status of the response. This is a value from the OCSPResponseStatus enumeration NrrTs rзresponse_statuszOCSPResponse.response_statusЗrVrЗx509.ObjectIdentifiercС≈dS)zA The ObjectIdentifier of the signature algorithm NrrTs rзsignature_algorithm_oidz$OCSPResponse.signature_algorithm_oidrVrЗ%typing.Optional[hashes.HashAlgorithm]cС≈dS)zX Returns a HashAlgorithm corresponding to the type of the digest signed NrrTs rзsignature_hash_algorithmz%OCSPResponse.signature_hash_algorithm rVrrQcС≈dS)z% The signature bytes NrrTs rз signaturezOCSPResponse.signaturerVrcС≈dS)z+ The tbsResponseData bytes NrrTs rзtbs_response_byteszOCSPResponse.tbs_response_bytesrVrЗtyping.List[x509.Certificate]cС≈dS)z╩ A list of certificates used to help build a chain to verify the OCSP response. This situation occurs when the OCSP responder uses a delegate certificate. NrrTs rзcertificateszOCSPResponse.certificates rVrЗtyping.Optional[bytes]cС≈dS)z2 The responder's key hash or None NrrTs rзresponder_key_hashzOCSPResponse.responder_key_hash)rVrЗtyping.Optional[x509.Name]cС≈dS)z. The responder's Name or None NrrTs rзresponder_namezOCSPResponse.responder_name0rVrr9cС≈dS)z4 The time the response was produced NrrTs rзproduced_atzOCSPResponse.produced_at7rVrr.cС≈dSrurrTs rrvzOCSPResponse.certificate_status>rVrr;cС≈dSrxrrTs rr<zOCSPResponse.revocation_timeErVrr>cС≈dSrzrrTs rr=zOCSPResponse.revocation_reasonMrVrcС≈dSr|rrTs rr8zOCSPResponse.this_updateUrVrcС≈dSr~rrTs rr:zOCSPResponse.next_update]rVrcС≈dSrSrrTs rrUzOCSPResponse.issuer_key_hashdrVrcС≈dSrXrrTs rrYzOCSPResponse.issuer_name_hashkrVrr%cС≈dSr[rrTs rr\zOCSPResponse.hash_algorithmrrVrr]cС≈dSr_rrTs rr`zOCSPResponse.serial_numberyrVrrfcС≈dS)zR The list of response extensions. Not single response extensions. NrrTs rrhzOCSPResponse.extensions─rVrcС≈dS)zR The list of single response extensions. Not response extensions. NrrTs rзsingle_extensionszOCSPResponse.single_extensions┤rVrrarbcС≈dS)z0 Serializes the response to DER Nrrds rrezOCSPResponse.public_bytes▌rVrN)r&r┴)r&r)r&r▌)r&r▒ri)r&r≤)r&r⌡)r&r·r├r┐r└r┘rjrkrmrl)rrrrnrorpr▀r█r░r⌠r∙r≈r r²r═r╒rvr<r=r8r:rUrYr\r`rhrўrerrrr┬r┬ЯsЭ─────ь ьтПППЯтЯ└XППьтПППЯтЯ└XППьтПППЯтЯ└XПП ьтПППЯтЯ└XППьтПППЯтЯ└XПП ьтПППЯтЯ└XПП ьтПППЯтЯ└XППьтПППЯтЯ└XПП ьтПППЯтЯ└XПП ьтПППЯтЯ└XПП ьтПППЯтЯ└XПП ьтПППЯтЯ└XППьтПППЯтЯ└XППьтПППЯтЯ└XППьтПППЯтЯ└XПП ьтПППЯтЯ└XПП ьтПППЯтЯ└XПП ьтПППЯтЯ└XПП ьтПППЯтЯ└XПП ьтПППЯтЯ└XПП ьтПППЯтЯ└XПП тПППЯтПППrr┬cС>≈eZdZddgfdd └Zdd└Zd d└Zd!d└Zd"d└ZdS)#зOCSPRequestBuilderNзrequestЗWtyping.Optional[typing.Tuple[x509.Certificate, x509.Certificate, hashes.HashAlgorithm]]зrequest_hashЗFtyping.Optional[typing.Tuple[bytes, bytes, int, hashes.HashAlgorithm]]rhЗ/typing.List[x509.Extension[x509.ExtensionType]]r&r'cС0≈||_||_||_dS╘N)з_requestз _request_hashз_extensions)rMr╡rЄrhs rrNzOCSPRequestBuilder.__init__√s!─П ┬▄ ь)┬ть%┬тппrr4r5r6r$r%cС≈|j─|j│tdі╚┌t|і╚t |t jі╚rt |t jі╚stdі╚┌t|||f|j|j і╚S)NЗ.Only one certificate can be added to a requestr@) r╧r╨r+r,r)rrArBr╠r╩)rMr4r6r$s rзadd_certificatez"OCSPRequestBuilder.add_certificateіs≤─П▄=п$╗т(:п(FщпMяNтNпNЕ≤)я$т$п$щ≤$╔т 0я1т1П EҐь∙Dт$Я: Т: П EУпCяDтDпDЕ!ь ░6≤9п%═tт'9╦4т;KЯ Т П rrYrQrUr`r]cС╡≈|j─|j│tdі╚┌t|tі╚stdі╚┌t |і╚tjd|і╚tjd|і╚|j t|і╚ks|j t|і╚krtdі╚┌t|j||||f|jі╚S)NrҐz serial_number must be an integerrYrUz`issuer_name_hash and issuer_key_hash must be the same length as the digest size of the algorithm) r╧r╨r+r)r]rBr,rз_check_bytesзdigest_sizeзlenr╠r╩)rMrYrUr`r$s rзadd_certificate_by_hashz*OCSPRequestBuilder.add_certificate_by_hash╧sС─П▄=п$╗т(:п(FщпMяNтNпNЕ≤-ґя-т-П @щп>я?т?п?Е≤)я$т$п$щ тп-п/?я@т@п@щ тп,╗oя>т>п>ьт ╔CьЯ% Т% Р П Ю т "╔c╗/я&:т&:р :п :щП6ЯТП У "ь▄Mь ≤╟ ╦yпIьтЯ Т П rзextvalЗx509.ExtensionTypeзcriticalзboolcСЭ≈t|tjі╚stdі╚┌tj|j||і╚}t ||jі╚t|j |j |j|gzі╚S╘Nz"extension must be an ExtensionType)r)rз ExtensionTyperBз Extensionзoidrr╩r╠r╧r╨╘rMrдrфз extensions rз add_extensionz OCSPRequestBuilder.add_extensionвsy─У≤&╔$т"4я5т5П Bщп@яAтAпAЕ■N═6є:╗x╦я@т@┬ щ#═I╗tт/?я@т@п@Е!ь▄M≤4т-╗tт/?ю9ю+я/MЯ Т П rrPcСd≈|j─|j─tdі╚┌tj|і╚S)Nz*You must add a certificate before building)r╧r╨r+rзcreate_ocsp_requestrTs rзbuildzOCSPRequestBuilder.buildДs2─ь▄=п ═Tт%7п%?щпIяJтJпJЕт'╗я-т-п-r)r╡rЁrЄr╣rhrІr&r')r4r5r6r5r$r%r&r╠) rYrQrUrQr`r]r$r%r&r╠)rдrеrфrгr&r╠)r&rP)rrrrNrЎrцrоrрrrrr╠r╠∙s┼─────П П ьFHП&П&П&П&П&П П П П П& П П П П< П П П П.П.П.П.П.П.rr╠cС`≈eZdZdddgfd.d └Zd/d└Zd0d└Zd1d └Zd2d%└Zd3d*└Ze d4d-└і╚Z dS)5зOCSPResponseBuilderNзresponseЗ typing.Optional[_SingleResponse]зresponder_idЗFtyping.Optional[typing.Tuple[x509.Certificate, OCSPResponderEncoding]]зcertsЗ.typing.Optional[typing.List[x509.Certificate]]rhrІcС>≈||_||_||_||_dSr╦)з _responseз _responder_idз_certsr╩)rMrуrвrыrhs rrNzOCSPResponseBuilder.__init__Лs(─П"┬▄ь)┬ть┬▄ь%┬тппrr4r5r6r$r%r7r.r8r9r:r;r<r=r>r&c С°≈|j│tdі╚┌t||||||||і╚} t| |j|j|jі╚S)Nz#Only one response per OCSPResponse.)rэr+r3rтrщrчr╩) rMr4r6r$r7r8r:r<r=з singleresps rзadd_responsez OCSPResponseBuilder.add_responseЗsj─П▄>п%щпBяCтCпCЕ$ььььььььЯ Т ┬ У#ььть▄KьтЯ Т П rrarзresponder_certcС≈|j│tdі╚┌t|tjі╚stdі╚┌t|tі╚stdі╚┌t|j||f|j |j і╚S)Nz!responder_id can only be set oncez$responder_cert must be a Certificatez6encoding must be an element from OCSPResponderEncoding)rщr+r)rrArBrrтrэrчr╩)rMrarБs rrвz OCSPResponseBuilder.responder_ids∙─Птп)щп@яAтAпAщ≤.ґ$т*:я;т;П DщпBяCтCпCщ≤(у$9я:т:П щьHЯТП У#ь▄Nь ≤Xп&ь▄KьтЯ Т П rЗ!typing.Iterable[x509.Certificate]cС"≈|j│tdі╚┌t|і╚}t|і╚dkrtdі╚┌t d└|Dі╚і╚stdі╚┌t |j|j||j і╚S)Nz!certificates may only be set oncerzcerts must not be an empty listc3СJK≈|]}t|tjі╚V≈▄dSr╦)r)rrA)з.0зxs rЗ z3OCSPResponseBuilder.certificates..4s/ХХ─пBпB╟q∙:≤a╔т!1я2т2пBпBпBпBпBпBrz$certs must be a list of Certificates) rчr+зlistrбзallrBrтrэrщr╩)rMrыs rr z OCSPResponseBuilder.certificates,s≥─П▄;п"щп@яAтAпAщ░U▒■┬щ┬u┴:▄:≤┼?┬?щп>я?т?п?щпBпB╦EпBяBтBяBтBП DщпBяCтCпCщ"ь▄NьтььтЯ Т П rrдrеrфrгcС≈t|tjі╚stdі╚┌tj|j||і╚}t ||jі╚t|j |j |j|j|gzі╚Srи)r)rrйrBrкrлrr╩rтrэrщrчrмs rrоz!OCSPResponseBuilder.add_extension=s──У≤&╔$т"4я5т5П Bщп@яAтAпAЕ■N═6є:╗x╦я@т@┬ щ#═I╗tт/?я@т@п@Е"ь▄Nьть▄Kьт═ ≤{я*Я Т П rзprivate_keyr r▒r┬cС°≈|j─tdі╚┌|j─tdі╚┌tjt j|||і╚S)Nz&You must add a response before signingz*You must add a responder_id before signing)rэr+rщrзcreate_ocsp_responserr)rMrМr$s rзsignzOCSPResponseBuilder.signMsT─П ▄>п!щпEяFтFпFьтп%щпIяJтJпJЕт(щт)╗4╟╦iЯ Т П rr█rcС╡≈t|tі╚stdі╚┌|tjurt dі╚┌tj|dddі╚S)Nz7response_status must be an item from OCSPResponseStatusz$response_status cannot be SUCCESSFUL)r)rrBrr+rrО)зclsr█s rзbuild_unsuccessfulz&OCSPResponseBuilder.build_unsuccessful[sc─У≤/у+=я>т>П щьIЯТП Пу0т;п;п;щпCяDтDпDЕт(╗╦$ююdяKтKпKr)rуrжrвrьrыrзrhrІ)r4r5r6r5r$r%r7r.r8r9r:r;r<r;r=r>r&rт)rarrБr5r&rт)rыrДr&rт)rдrеrфrгr&rт)rМr r$r▒r&r┬)r█rr&r┬)rrrrNrАrвr rоrПзclassmethodrСrrrrтrтКsг─────П6:П ь@DьFHП&П&П&П&П&П П П П П> П П П П& П П П П" П П П П П П П ПП LП LП LЯ└[П LП LП LrrтзdatarQcС*≈tj|і╚Sr╦)rзload_der_ocsp_request╘rУs rrВrВis─щт%═dя+т+п+rcС*≈tj|і╚Sr╦)rзload_der_ocsp_responserЬs rrЗrЗms─щт&═tя,т,п,r)r$r%r&r')rУrQr&rP)rУrQr&r┬)'з __future__rrorCзtypingзcryptographyrrз"cryptography.hazmat.bindings._rustrзcryptography.hazmat.primitivesrrз/cryptography.hazmat.primitives.asymmetric.typesr зcryptography.x509.baser rrзEnumrrзSHA1зSHA224зSHA256зSHA384зSHA512r*r,r.r3зABCMetarPrsr┬r╠rтrВrЗrrrЗr sУПП #п"п"п"п"п"Ю ─ ─ ─ ь───ь ─ ─ ─ Ю$п$п$п$п$п$п$п$ь3п3п3п3п3п3ь@п@п@п@п@п@п@п@ППППППППППППППППППППП≤E°JЯТПП ПППП≤°ЯТПП└Kь └Mь └Mь └Mь └MП─П П П П ППППП░U■ZЯТППC4ПC4ПC4ПC4ПC4ЯC4ТC4ПC4ПL(П(П(П(П(≤C°KП(Я(Т(П(ПVAПAПAПAПA═3є;ПAЯAТAПAПHaПaПaПaПa≤S°[ПaЯaТaПaПHS.ПS.ПS.ПS.ПS.ЯS.ТS.ПS.Пl{LП{LП{LП{LП{LЯ{LТ{LП{LП|,П,П,П,П-П-П-П-П-П-r