?n] x d dl mZ d dlZd dlZd dlZd dlZd dlZd dlmZ d dl m
Z d dl m
Z
mZ d dlmZmZmZmZmZmZmZmZ d dlmZmZmZ d dl m Z m Z m Z m Z d d l!m"Z"m#Z# d d
l$m%Z% ej d d d Z&ej' e
j( e
j) e
j* e
j+ e
j, e
j- e
j. e
j/ f Z0 G d
de1 Z2d;dZ3de>= e j> G d+ d,e> Z? G d- d.ej; ( Z@e@= e j@ G d/ d0ej; ( ZAeA= e jA e jB ZBe jC ZCe jD ZDe jE ZEe jF ZFe jG ZGe jH ZH G d1 d2 ZI G d3 d4 ZJ G d5 d6 ZK G d7 d8 ZLd>d:ZMdS )? ) annotationsN)utils)x509)hashes
serialization)dsaeced448ed25519paddingrsax448x25519) CertificateIssuerPrivateKeyTypes CertificateIssuerPublicKeyTypesCertificatePublicKeyTypes) Extension
Extensions
ExtensionType_make_sequence_methods)Name _ASN1Type)ObjectIdentifieri c e Zd Zd fd Z xZS ) AttributeNotFoundmsgstroidr returnNonec X t | || _ d S N)super__init__r )selfr r __class__s x/builddir/build/BUILD/imunify360-venv-2.6.2/opt/imunify360/venv/lib64/python3.11/site-packages/cryptography/x509/base.pyr% zAttributeNotFound.__init__9 s&
)r r r r r r! __name__
__module__ __qualname__r%
__classcell__r' s @r( r r 8 s= r) r extensionExtension[ExtensionType]
extensions list[Extension[ExtensionType]]r r! c N |D ]!}|j | j k rt d "d S )Nz$This extension has already been set.)r
ValueError)r0 r2 es r( _reject_duplicate_extensionr7 > sD
E E 5IM ! ! CDD D "E Er) r r
attributes0list[tuple[ObjectIdentifier, bytes, int | None]]c B |D ]\ }}}|| k rt d d S )Nz$This attribute has already been set.)r5 )r r8 attr_oid_s r( _reject_duplicate_attributer= H sD
% E E!Q s?? CDD D E Er) timedatetime.datetimec | j D| }|r|nt j }| d |z
S | S )zNormalizes a datetime to a naive datetime in UTC.
time -- datetime to normalize. Assumed to be in UTC if not timezone
aware.
Ntzinfo)rB utcoffsetdatetime timedeltareplace)r> offsets r( _convert_to_naive_utc_timerH R sP { !!!;x'9';';||4|((611 r) c v e Zd Zej j fdd Zedd
Zedd Zdd
Z ddZ
ddZ dS ) Attributer r valuebytes_typeintr r! c 0 || _ || _ || _ d S r# )_oid_valuerM )r& r rK rM s r( r% zAttribute.__init__a s
r) c | j S r# )rP r& s r( r z
Attribute.oidk s
yr) c | j S r# )rQ rS s r( rK zAttribute.valueo s
{r) r c ( d| j d| j dS )Nz)r rK rS s r( __repr__zAttribute.__repr__s s CCC4:CCCCr) otherobjectboolc t |t st S | j |j k o | j |j k o| j |j k S r# )
isinstancerJ NotImplementedr rK rM r& rX s r( __eq__zAttribute.__eq__v sO %++ "! !
H !
*
ek)
*
ek)
r) c D t | j | j | j f S r# )hashr rK rM rS s r( __hash__zAttribute.__hash__ s TXtz4:6777r) N)r r rK rL rM rN r r! r r r rL r r rX rY r rZ r rN ) r+ r, r- r
UTF8StringrK r% propertyr rW r_ rb r) r( rJ rJ ` s
)/ X XD D D D
8 8 8 8 8 8r) rJ c D e Zd ZddZ ed \ ZZZddZdd Z d
S )
Attributesr8 typing.Iterable[Attribute]r r! c . t | | _ d S r# )list _attributes)r& r8 s r( r% zAttributes.__init__ s
++r) rp r c d| j dS )Nz
Not after time (represented as UTC datetime)
Nrj rS s r( not_valid_afterzCertificate.not_valid_after r r) c dS )zJ
Not after time (represented as a non-naive UTC datetime)
Nrj rS s r( not_valid_after_utcz Certificate.not_valid_after_utc r r) r c dS )z1
Returns the issuer name object.
Nrj rS s r( issuerzCertificate.issuer r r) c dS z2
Returns the subject name object.
Nrj rS s r( subjectzCertificate.subject r r) hashes.HashAlgorithm | Nonec dS zt
Returns a HashAlgorithm corresponding to the type of the digest signed
in the certificate.
Nrj rS s r( signature_hash_algorithmz$Certificate.signature_hash_algorithm r r) c dS zJ
Returns the ObjectIdentifier of the signature algorithm.
Nrj rS s r( signature_algorithm_oidz#Certificate.signature_algorithm_oid r r) 0None | padding.PSS | padding.PKCS1v15 | ec.ECDSAc dS z=
Returns the signature algorithm parameters.
Nrj rS s r( signature_algorithm_parametersz*Certificate.signature_algorithm_parameters r r) r c dS )z/
Returns an Extensions object.
Nrj rS s r( r2 zCertificate.extensions r r) c dS z.
Returns the signature bytes.
Nrj rS s r( signaturezCertificate.signature r r) c dS )zR
Returns the tbsCertificate payload bytes as defined in RFC 5280.
Nrj rS s r( tbs_certificate_bytesz!Certificate.tbs_certificate_bytes r r) c dS )zh
Returns the tbsCertificate payload bytes with the SCT list extension
stripped.
Nrj rS s r( tbs_precertificate_bytesz$Certificate.tbs_precertificate_bytes r r) rX rY rZ c dS z"
Checks equality.
Nrj r^ s r( r_ zCertificate.__eq__& r r) c dS z"
Computes a hash.
Nrj rS s r( rb zCertificate.__hash__, r r) encodingserialization.Encodingc dS )zB
Serializes the certificate to PEM or DER format.
Nrj r& r s r( public_byteszCertificate.public_bytes2 r r) r r! c dS )z
This method verifies that certificate issuer name matches the
issuer subject name and that the certificate is signed by the
issuer's private key. No other validation is performed.
Nrj )r& r s r( verify_directly_issued_byz%Certificate.verify_directly_issued_by8 r r) Nr r r rL rg )r ry r r rc r r? r r r r r r r r rd rf r r r rL )r r r r! ) r+ r, r- abcabstractmethodr ri r r r r r r r r r r r r r r2 r r r r_ rb r r rj r) r( r r s
X
X
X
X
X
X
X
X
X
X X
X X
X
X
X
r) r ) metaclassc e Zd Zeej d
d Zeej d d Zeej d d Zeej d d Z d S )
RevokedCertificater rN c dS )zG
Returns the serial number of the revoked certificate.
Nrj rS s r( r z RevokedCertificate.serial_numberF r r) r? c dS )zH
Returns the date of when this certificate was revoked.
Nrj rS s r( revocation_datez"RevokedCertificate.revocation_dateM r r) c dS )zl
Returns the date of when this certificate was revoked as a non-naive
UTC datetime.
Nrj rS s r( revocation_date_utcz&RevokedCertificate.revocation_date_utcT r r) r c dS )zW
Returns an Extensions object containing a list of Revoked extensions.
Nrj rS s r( r2 z RevokedCertificate.extensions\ r r) Nrg r r )
r+ r, r- ri r r r r r r2 rj r) r( r r E s
X
X
X X r) r c v e Zd ZddZedd Zedd
Zedd Zedd Zd
S )_RawRevokedCertificater rN r r? r2 r c 0 || _ || _ || _ d S r# _serial_number_revocation_date _extensionsr& r r r2 s r( r% z _RawRevokedCertificate.__init__i " , / %r) r c | j S r# )r rS s r( r z$_RawRevokedCertificate.serial_numbers s ""r) c R t j dt j d | j S )Nuk Properties that return a naïve datetime object have been deprecated. Please switch to revocation_date_utc.rz )
stacklevel)warningswarnr DeprecatedIn42r rS s r( r z&_RawRevokedCertificate.revocation_datew s5
@
$$r) c V | j t j j S )NrA )r rF rD timezoneutcrS s r( r z*_RawRevokedCertificate.revocation_date_utc s" $,,H4E4I,JJJr) c | j S r# )r rS s r( r2 z!_RawRevokedCertificate.extensions s r) N)r rN r r? r2 r rg r r ) r+ r, r- r% ri r r r r2 rj r) r( r r h s & & & & # # # X# % % % X% K K K XK X r) r c e Zd Zej d3d Zej d4d Zej d5d Zeej d6d Z eej d7d Z
eej d8d Z eej d9d Z eej d:d Z
eej d:d Zeej d;d Zeej d;d Zeej dd" Zej d?d# Zej d@d& Zej dAd) Zej dBd, Zej dCd. Zej dDd1 Zd2S )ECertificateRevocationListr r r rL c dS )z:
Serializes the CRL to PEM or DER format.
Nrj r s r( r z&CertificateRevocationList.public_bytes r r) r r c dS r rj r s r( r z%CertificateRevocationList.fingerprint r r) r rN RevokedCertificate | Nonec dS )zs
Returns an instance of RevokedCertificate or None if the serial_number
is not in the CRL.
Nrj )r& r s r( (get_revoked_certificate_by_serial_numberzBCertificateRevocationList.get_revoked_certificate_by_serial_number r r) r c dS r rj rS s r( r z2CertificateRevocationList.signature_hash_algorithm r r) r c dS r rj rS s r( r z1CertificateRevocationList.signature_algorithm_oid r r) r c dS r rj rS s r( r z8CertificateRevocationList.signature_algorithm_parameters r r) r c dS )zC
Returns the X509Name with the issuer of this CRL.
Nrj rS s r( r z CertificateRevocationList.issuer r r) datetime.datetime | Nonec dS )z?
Returns the date of next update for this CRL.
Nrj rS s r( next_updatez%CertificateRevocationList.next_update r r) c dS )zc
Returns the date of next update for this CRL as a non-naive UTC
datetime.
Nrj rS s r( next_update_utcz)CertificateRevocationList.next_update_utc r r) r? c dS )z?
Returns the date of last update for this CRL.
Nrj rS s r( last_updatez%CertificateRevocationList.last_update r r) c dS )zc
Returns the date of last update for this CRL as a non-naive UTC
datetime.
Nrj rS s r( last_update_utcz)CertificateRevocationList.last_update_utc r r) r c dS )zS
Returns an Extensions object containing a list of CRL extensions.
Nrj rS s r( r2 z$CertificateRevocationList.extensions r r) c dS r rj rS s r( r z#CertificateRevocationList.signature r r) c dS )zO
Returns the tbsCertList payload bytes as defined in RFC 5280.
Nrj rS s r( tbs_certlist_bytesz,CertificateRevocationList.tbs_certlist_bytes r r) rX rY rZ c dS r rj r^ s r( r_ z CertificateRevocationList.__eq__ r r) c dS )z<
Number of revoked certificates in the CRL.
Nrj rS s r( ru z!CertificateRevocationList.__len__ r r) idxr c d S r# rj r& r s r( rw z%CertificateRevocationList.__getitem__ s ;>3r) slicelist[RevokedCertificate]c d S r# rj r s r( rw z%CertificateRevocationList.__getitem__ s CF3r) int | slice-RevokedCertificate | list[RevokedCertificate]c dS )zS
Returns a revoked certificate (or slice of revoked certificates).
Nrj r s r( rw z%CertificateRevocationList.__getitem__ r r) #typing.Iterator[RevokedCertificate]c dS )z8
Iterator over the revoked certificates
Nrj rS s r( rv z"CertificateRevocationList.__iter__ r r) r r c dS )zQ
Verifies signature of revocation list against given public key.
Nrj )r& r s r( is_signature_validz,CertificateRevocationList.is_signature_valid r r) Nr r )r rN r r r rc r r )r r r r rd rf rg )r rN r r )r r r r )r r r r )r r )r r r rZ )r+ r, r- r r r r r ri r r r r r r r r r2 r r r_ ru typingoverloadrw rv r
rj r) r( r r s\
X X
X X
X
X X
X X
X
X
_>>> _> _FFF _F
r) r c z e Zd Zej d d Zej d!d Zej d"d Zeej d#d Z eej d$d
Z
eej d%d Z eej d&d Z eej d'd Z
eej d(d Zej d)d Zeej d*d Zeej d*d Zeej d+d Zej d,d Zd S )-CertificateSigningRequestrX rY r rZ c dS r rj r^ s r( r_ z CertificateSigningRequest.__eq__! r r) rN c dS r rj rS s r( rb z"CertificateSigningRequest.__hash__' r r) r c dS r rj rS s r( r z$CertificateSigningRequest.public_key- r r) r c dS r rj rS s r( r z!CertificateSigningRequest.subject3 r r) r c dS r rj rS s r( r z2CertificateSigningRequest.signature_hash_algorithm: r r) r c dS r rj rS s r( r z1CertificateSigningRequest.signature_algorithm_oidD r r) r c dS r rj rS s r( r z8CertificateSigningRequest.signature_algorithm_parametersK r r) r c dS )z@
Returns the extensions in the signing request.
Nrj rS s r( r2 z$CertificateSigningRequest.extensionsT r r) rl c dS )z/
Returns an Attributes object.
Nrj rS s r( r8 z$CertificateSigningRequest.attributes[ r r) r r rL c dS )z;
Encodes the request to PEM or DER format.
Nrj r s r( r z&CertificateSigningRequest.public_bytesb r r) c dS r rj rS s r( r z#CertificateSigningRequest.signatureh r r) c dS )zd
Returns the PKCS#10 CertificationRequestInfo bytes as defined in RFC
2986.
Nrj rS s r( tbs_certrequest_bytesz/CertificateSigningRequest.tbs_certrequest_byteso r r) c dS )z8
Verifies signature of signing request.
Nrj rS s r( r
z,CertificateSigningRequest.is_signature_validw r r) r c dS )z:
Get the attribute value for a given OID.
Nrj )r& r s r( rt z/CertificateSigningRequest.get_attribute_for_oid~ r r) Nrf rg r r r rc r r )r rl r rd )r rZ )r r r rL )r+ r, r- r r r_ rb r ri r r r r r2 r8 r r r r
rt rj r) r( r r sd
X
X X
X X
X
X
X X
r) r c N e Zd Zdg g fd%dZd&d Zd'dZddd(dZ d)ddd*d$ZdS )+ CertificateSigningRequestBuilderN subject_name Name | Noner2 r3 r8 r9 c 0 || _ || _ || _ dS )zB
Creates an empty X.509 certificate request (v1).
N)
_subject_namer rp )r& r r2 r8 s r( r% z)CertificateSigningRequestBuilder.__init__ s" *%%r) namer r c t |t st d | j t d t || j | j S )zF
Sets the certificate requestor's distinguished name.
Expecting x509.Name object.N&The subject name may only be set once.)r\ r TypeErrorr# r5 r r rp r& r$ s r( r z-CertificateSigningRequestBuilder.subject_name s\ $%% ; 9:: : ) EFF F/ $"D$4
r) extvalr criticalrZ c t |t st d t |j || }t || j t | j g | j || j S )zE
Adds an X.509 extension to the certificate request.
"extension must be an ExtensionType)
r\ r r( r r r7 r r r# rp r& r* r+ r0 s r(
add_extensionz.CertificateSigningRequestBuilder.add_extension sz &-00 B @AA A fj(F;; #It/?@@@/ *d * *
r) )_tagr r rK rL r0 _ASN1Type | Nonec n t |t st d t |t st d |$t |t st d t || j ||j }nd}t | j | j
g | j |||f S )zK
Adds an X.509 attribute with an OID and associated value.
z oid must be an ObjectIdentifierzvalue must be bytesNztag must be _ASN1Type) r\ r r( rL r r= rp rK r r# r )r& r rK r0 tags r(
add_attributez.CertificateSigningRequestBuilder.add_attribute s # /00 ? =>> >%'' 3 122 2 JtY$?$? 344 4#C)9::: *CCC/ 2d 2eS 1 2
r) rsa_padding private_keyr r _AllowedHashTypes | Nonebackend
typing.Anyr6 %padding.PSS | padding.PKCS1v15 | Noner c | j t d |^t |t j t j f st
d t |t j st
d t j
| ||| S )zF
Signs the request using the requestor's private key.
Nz/A CertificateSigningRequest must have a subject Padding must be PSS or PKCS1v15&Padding is only supported for RSA keys) r# r5 r\ r PSSPKCS1v15r( r
RSAPrivateKey rust_x509create_x509_csrr& r7 r r9 r6 s r( signz%CertificateSigningRequestBuilder.sign s % NOO O " kGK9I+JKK
C ABBB k3+<==
J HIII( +y+
r) )r r! r2 r3 r8 r9 )r$ r r r )r* r r+ rZ r r )r r rK rL r0 r1 r r r# )
r7 r r r8 r9 r: r6 r; r r )r+ r, r- r% r r/ r4 rE rj r) r( r r s %)57GI & & & & &
. "&
H #
>B
r) r c | e Zd ZU ded< ddddddg fd0dZd1dZd1dZd2dZd3dZd4d Z d4d Z
d5d$Z d6dd%d7d/Z dS )8CertificateBuilderr3 r N issuer_namer! r r CertificatePublicKeyTypes | Noner
int | Noner r r r2 r r! c t j | _ || _ || _ || _ || _ || _ || _ || _ d S r# )
ry r| _version _issuer_namer# _public_keyr _not_valid_before_not_valid_afterr )r& rH r r r r r r2 s r( r% zCertificateBuilder.__init__ sK
' )% +!1 / %r) r$ r c t |t st d | j t d t || j | j | j | j | j
| j S )z3
Sets the CA's distinguished name.
r& N%The issuer name may only be set once.) r\ r r( rM r5 rG r# rN r rO rP r r) s r( rH z CertificateBuilder.issuer_name sv $%% ; 9:: : ( DEE E! " !
r) c t |t st d | j t d t | j || j | j | j | j
| j S )z:
Sets the requestor's distinguished name.
r& Nr' ) r\ r r( r# r5 rG rM rN r rO rP r r) s r( r z CertificateBuilder.subject_name" sv $%% ; 9:: : ) EFF F! " !
r) keyr c
l t |t j t j t
j t j t j
t j t j f st d | j t# d t% | j | j || j | j | j | j S )zT
Sets the requestor's public key (as found in the signing request).
zExpecting one of DSAPublicKey, RSAPublicKey, EllipticCurvePublicKey, Ed25519PublicKey, Ed448PublicKey, X25519PublicKey, or X448PublicKey.Nz$The public key may only be set once.)r\ r DSAPublicKeyr
RSAPublicKeyr EllipticCurvePublicKeyr Ed25519PublicKeyr
Ed448PublicKeyr X25519PublicKeyr
X448PublicKeyr( rN r5 rG rM r# r rO rP r )r& rT s r( r z CertificateBuilder.public_key4 s )($&"
!
' CDD D! " !
r) numberrN c T t |t st d | j t d |dk rt d | dk rt d t
| j | j | j || j
| j | j S )z5
Sets the certificate serial number.
'Serial number must be of integral type.N'The serial number may only be set once.r z%The serial number should be positive. 3The serial number should not be more than 159 bits.)
r\ rN r( r r5
bit_lengthrG rM r# rN rO rP r r& r] s r( r z CertificateBuilder.serial_numberY s &#&& G EFF F * FGG G Q;; DEE E # % % E
" " !
r) r> r? c z t |t j st d | j t d t | }|t k rt d | j || j k rt d t | j | j
| j | j || j | j
S )z7
Sets the certificate activation time.
Expecting datetime object.Nz*The not valid before may only be set once.z>The not valid before date must be on or after 1950 January 1).zBThe not valid before date must be before the not valid after date.)r\ rD r( rO r5 rH _EARLIEST_UTC_TIMErP rG rM r# rN r r r& r> s r( r z#CertificateBuilder.not_valid_beforet s $ 122 : 899 9 ! - IJJ J)$// $ $ $ $
,8M1M1M
" !
r) c z t |t j st d | j t d t | }|t k rt d | j || j k rt d t | j | j
| j | j | j || j
S )z7
Sets the certificate expiration time.
rf Nz)The not valid after may only be set once.z )r# r5 rM r rO rP rN r\ r r? r@ r( r
rA rB create_x509_certificaterD s r( rE zCertificateBuilder.sign s % EFF F $ EFF F & FGG G ! ) NOO O ( MNN N # CDD D " kGK9I+JKK
C ABBB k3+<==
J HIII0 +y+
r) )rH r! r r! r rI r rJ r r r r r2 r3 r r! )r$ r r rG )rT r r rG )r] rN r rG )r> r? r rG )r* r r+ rZ r rG r# )
r7 r r r8 r9 r: r6 r; r r )
r+ r, r- __annotations__r% rH r r r r r r/ rE rj r) r( rG rG s //// $($(7;$(594857& & & & &&
$
$#
#
#
#
J
6
:
@
4 # %
>B
%
%
%
%
%
%
%
%
r) rG c r e Zd ZU ded< ded< dddg g fd'd
Zd(dZd)dZd*dZd+dZd,dZ d-dd d.d&Z
dS )/ CertificateRevocationListBuilderr3 r r _revoked_certificatesNrH r! r r r r2 revoked_certificatesc L || _ || _ || _ || _ || _ d S r# )rM _last_update _next_updater rp )r& rH r r r2 rq s r( r% z)CertificateRevocationListBuilder.__init__ s2 ( ' '%%9"""r) r r c t |t st d | j t d t || j | j | j | j S )Nr& rR )
r\ r r( rM r5 ro rs rt r rp )r& rH s r( rH z,CertificateRevocationListBuilder.issuer_name sj +t,, ; 9:: : ( DEE E/ &
r) r? c b t |t j st d | j t d t | }|t k rt d | j || j k rt d t | j || j | j
| j S )Nrf !Last update may only be set once.8The last update date must be on or after 1950 January 1.z9The last update date must be before the next update date.) r\ rD r( rs r5 rH rg rt ro rM r rp )r& r s r( r z,CertificateRevocationListBuilder.last_update s +x'899 : 899 9 ( @AA A0== + + + J
([4;L-L-L K
0 &
r) c b t |t j st d | j t d t | }|t k rt d | j || j k rt d t | j | j || j
| j S )Nrf rw rx z8The next update date must be after the last update date.) r\ rD r( rt r5 rH rg rs ro rM r rp )r& r s r( r z,CertificateRevocationListBuilder.next_update( s +x'899 : 899 9 ( @AA A0== + + + J
([4;L-L-L J
0 &
r) r* r r+ rZ c t |t st d t |j || }t || j t | j | j | j
g | j || j S )zM
Adds an X.509 extension to the certificate revocation list.
r- ) r\ r r( r r r7 r ro rM rs rt rp r. s r( r/ z.CertificateRevocationListBuilder.add_extension@ s &-00 B @AA A fj(F;; #It/?@@@/ *d * * &
r) revoked_certificater c t |t st d t | j | j | j | j g | j | S )z8
Adds a revoked certificate to the CRL.
z)Must be an instance of RevokedCertificate) r\ r r( ro rM rs rt r rp )r& r{ s r( add_revoked_certificatez8CertificateRevocationListBuilder.add_revoked_certificateS sc -/ABB I GHH H/ >d( >*= >
r) r5 r7 r r r8 r9 r: r6 r; r c t | j t d | j t d | j t d |^t |t
j t
j f st d t |t j
st d t j | ||| S )Nz A CRL must have an issuer namez"A CRL must have a last update timez"A CRL must have a next update timer= r> )
rM r5 rs rt r\ r r? r@ r( r
rA rB create_x509_crlrD s r( rE z%CertificateRevocationListBuilder.signd s $ =>> > $ ABB B $ ABB B " kGK9I+JKK
C ABBB k3+<==
J HIII( +y+
r) )
rH r! r r r r r2 r3 rq r )rH r r ro )r r? r ro )r r? r ro )r* r r+ rZ r ro )r{ r r ro r# )
r7 r r r8 r9 r: r6 r; r r ) r+ r, r- rm r% rH r r r/ r} rE rj r) r( ro ro s ////3333 $(0404579;
: : : : :
0
0
&
* #
>B
r) ro c @ e Zd Zddg fddZdd ZddZd dZd d dZdS ) RevokedCertificateBuilderNr rJ r r r2 r3 c 0 || _ || _ || _ d S r# r r s r( r% z"RevokedCertificateBuilder.__init__ r r) r] rN r c $ t |t st d | j t d |dk rt d | dk rt d t
|| j | j S )Nr_ r` r z$The serial number should be positivera rb ) r\ rN r( r r5 rc r r r rd s r( r z'RevokedCertificateBuilder.serial_number s &#&& G EFF F * FGG G Q;; CDD D # % % E
) D)4+;
r) r> r? c t |t j st d | j t d t | }|t k rt d t | j || j S )Nrf z)The revocation date may only be set once.z7The revocation date must be on or after 1950 January 1.)
r\ rD r( r r5 rH rg r r r rh s r( r z)RevokedCertificateBuilder.revocation_date s $ 122 : 899 9 , HII I)$// $ $ $ I
) t'7
r) r* r r+ rZ c t |t st d t |j || }t || j t | j | j g | j | S )Nr- )
r\ r r( r r r7 r r r r r. s r( r/ z'RevokedCertificateBuilder.add_extension sz &-00 B @AA A fj(F;; #It/?@@@( ! *d * *
r) r9 r: r c | j t d | j t d t | j | j t | j S )Nz/A revoked certificate must have a serial numberz1A revoked certificate must have a revocation date)r r5 r r r r )r& r9 s r( buildz RevokedCertificateBuilder.build sf & NOO O ( C
& ! t' ( (
r) )r rJ r r r2 r3 )r] rN r r )r> r? r r )r* r r+ rZ r r r# )r9 r: r r )r+ r, r- r% r r r/ r rj r) r( r r s %)4857 & & & & &
$
r) r rN c b t t j d d dz S )N bigr )rN
from_bytesosurandomrj r) r( random_serial_numberr s# >>"*R..% 0 0A 55r) )r0 r1 r2 r3 r r! )r r r8 r9 r r! )r> r? r r? rg )N
__future__r r rD r r r cryptographyr "cryptography.hazmat.bindings._rustr rB cryptography.hazmat.primitivesr r )cryptography.hazmat.primitives.asymmetricr r r
r r r
r r /cryptography.hazmat.primitives.asymmetric.typesr r r cryptography.x509.extensionsr r r r cryptography.x509.namer r cryptography.x509.oidr rg UnionSHA224SHA256SHA384SHA512SHA3_224SHA3_256SHA3_384SHA3_512_AllowedHashTypes Exceptionr r7 r= rH rJ rl Enumry r~ ABCMetar registerr r r r load_pem_x509_certificateload_der_x509_certificateload_pem_x509_certificatesload_pem_x509_csrload_der_x509_csrload_pem_x509_crlload_der_x509_crlr rG ro r r rj r) r( r s
# " " " " "
@ @ @ @ @ @ @ @ @ @ @ @ @ @
3 2 2 2 2 2 2 2 2 2 2 2 2 2&X&tQ22 L
M
M
M
M
O
O
O
O E E E EE E E E !8 !8 !8 !8 !8 !8 !8 !8HF F F F F F F F( ej
- - - - -Y - - - [ [ [ [ [ CK [ [ [ [ ~ Y* + + + 3; @ I 8 9 9 9 / DP P P P P #+ P P P P f " "9#F G G Gb b b b b #+ b b b b L " "9#F G G G & ? % ? & A / / / / b
b
b
b
b
b
b
b
Jr
r
r
r
r
r
r
r
jN
N
N
N
N
N
N
N
bF
F
F
F
F
F
F
F
R6 6 6 6 6 6r)