a
a @ s d dl Z d dlZd dlZd dlZd dlZd dlmZ d dlmZ d dlm Z
d dl m Z m
Z
d dlmZ d dlmZ d dlmZmZ d d lmZ d d
lmZmZmZmZm Z m Z m Z m Z m Z d d l!m"Z"m#Z# d d l$m%Z%m&Z&m'Z'm(Z( ej)d
ddZ*ee+dddZ,e-dddZ.G dd de/Z0G dd de/Z1G dd de j2dZ3G d d d e4Z5G d d d e3Z6G d d! d!e3Z7G d"d# d#e3Z8G d$d% d%e3Z9G d&d' d'e3Z:G d(d) d)e4Z;G d*d+ d+e3ZG d0d1 d1e3Z?G d2d3 d3e4Z@G d4d5 d5ejAZBeBjCeBjDeBjEeBjFeBjGeBjHeBjIeBjJd6ZKG d7d8 d8e3ZLG d9d: d:e3ZMG d;d< d d>e4ZOG d?d@ d@e4ZPG dAdB dBe3ZQG dCdD dDe3ZRG dEdF dFe3ZSG dGdH dHe3ZTG dIdJ dJejAZUdKdL eUD ZVG dMdN dNe3ZWG dOdP dPe3ZXG dQdR dRe3ZYG dSdT dTejZe* Z[G dUdV dVe4Z\G dWdX dXe3Z]G dYdZ dZe3Z^G d[d\ d\e3Z_G d]d^ d^e3Z`G d_d` d`e3ZaG dadb dbe3ZbG dcdd dde3ZcG dedf dfe3ZdG dgdh dhe3ZeG didj dje3ZfdS )k N)utils)asn1)x509)
constant_time
serialization)EllipticCurvePublicKey) RSAPublicKey) CERTIFICATE_PUBLIC_KEY_TYPESPUBLIC_KEY_TYPES)SignedCertificateTimestamp) DNSName
DirectoryName GeneralName IPAddress OtherName
RFC822Name RegisteredIDUniformResourceIdentifier_IPADDRESS_TYPES)NameRelativeDistinguishedName)CRLEntryExtensionOID ExtensionOIDOCSPExtensionOIDObjectIdentifierExtensionTypeVar
ExtensionType)bound
public_keyreturnc C sl t | tr | tjjtjj}n>t | tr@| tjj tjj
}n | tjjtjj }t
|}t| S N)
isinstancer public_bytesr ZEncodingZDERZ PublicFormatZPKCS1r ZX962ZUncompressedPointZSubjectPublicKeyInfor Zparse_spki_for_datahashlibZsha1digest)r dataZ
serialized r' B/usr/lib64/python3.9/site-packages/cryptography/x509/extensions.py _key_identifier_from_public_key/ s
r)
field_namec s4 t d fdd } fdd} fdd}|||fS )Nr c s t t| S r! )lengetattrselfr* r' r(
len_methodH s z*_make_sequence_methods..len_methodc s t t| S r! )iterr. r/ r* r' r( iter_methodK s z+_make_sequence_methods..iter_methodc s t | | S r! )r. )r0 idxr* r' r( getitem_methodN s z._make_sequence_methods..getitem_method)int)r+ r1 r3 r5 r' r* r( _make_sequence_methodsG s r7 c s& e Zd Zeedd fdd Z ZS )DuplicateExtensionNmsgoidr c s t t| | || _d S r! )superr8 __init__r; r0 r: r; __class__r' r( r= U s zDuplicateExtension.__init____name__
__module__ __qualname__strr r=
__classcell__r' r' r? r( r8 T s r8 c s& e Zd Zeedd fdd Z ZS )ExtensionNotFoundNr9 c s t t| | || _d S r! )r< rG r= r; r> r? r' r( r= [ s zExtensionNotFound.__init__rA r' r' r? r( rG Z s rG c @ s* e Zd ZU eje ed< edddZdS )r r; r, c C s t d| dS )z7
Serializes the extension type to DER.
z8public_bytes is not implemented for extension type {0!r}N)NotImplementedErrorformatr/ r' r' r( r# c s
zExtensionType.public_bytesN) rB rC rD typingClassVarr __annotations__bytesr# r' r' r' r( r ` s
) metaclassc @ sd e Zd Zejd ddddZeddddZeje d d
d d Z
e d
\Z Z
ZedddZdS )
ExtensionszExtension[ExtensionType]N)
extensionsr c C s t || _d S r! )list _extensions)r0 rP r' r' r( r= o s zExtensions.__init__)r; r c C s0 | D ]}|j |kr| S qtd||d S )NNo {} extension was found)r; rG rI )r0 r; extr' r' r( get_extension_for_oidt s
z Extensions.get_extension_for_oidzExtension[ExtensionTypeVar])extclassr c C sD |t u rtd| D ]}t|j|r| S qtd||jd S )Nz|UnrecognizedExtension can't be used with get_extension_for_class because more than one instance of the class may be present.rS )UnrecognizedExtension TypeErrorr" valuerG rI r; )r0 rV rT r' r' r( get_extension_for_class} s
z"Extensions.get_extension_for_classrR r, c C s d | jS )Nz)rI rR r/ r' r' r( __repr__ s zExtensions.__repr__)rB rC rD rJ Iterabler= r rU Typer rZ r7 __len____iter__ __getitem__rE r[ r' r' r' r( rO n s
rO c @ s e Zd ZejZeddddZej e
dddZ ej e
ddd Z ed
d d Z
ed
d
dZeed
ddZed
ddZdS ) CRLNumberN
crl_numberr c C s t |tstd|| _d S Nz crl_number must be an integerr" r6 rX _crl_numberr0 rc r' r' r( r= s
zCRLNumber.__init__otherr c C s t |tstS | j|jkS r! )r" ra NotImplementedrc r0 ri r' r' r( __eq__ s
zCRLNumber.__eq__c C s
| |k S r! r' rk r' r' r( __ne__ s zCRLNumber.__ne__r, c C s
t | jS r! hashrc r/ r' r' r( __hash__ s zCRLNumber.__hash__c C s d | jS )Nz)rI rc r/ r' r' r( r[ s zCRLNumber.__repr__c C s | j S r! rf r/ r' r' r( rc s zCRLNumber.crl_numberc C s
t | S r! rust_x509Zencode_extension_valuer/ r' r' r( r# s zCRLNumber.public_bytes)rB rC rD r Z
CRL_NUMBERr; r6 r= rJ Anyboolrl rm rp rE r[ propertyrc rM r# r' r' r' r( ra s ra c @ s e Zd ZejZeje ejej e
eje ddddZ e
ed dddZe
dd d d
d Zed d
dZejedddZejedddZe d ddZeeje d ddZeejeje
d ddZeeje d ddZ ed d d Z dS ) AuthorityKeyIdentifierN)key_identifierauthority_cert_issuer authority_cert_serial_numberr c C sr |d u |d u krt d|d urBt|}tdd |D sBtd|d ur\t|ts\td|| _|| _|| _d S )NzXauthority_cert_issuer and authority_cert_serial_number must both be present or both Nonec s s | ]}t |tV qd S r! r" r .0xr' r' r( s z2AuthorityKeyIdentifier.__init__..z;authority_cert_issuer must be a list of GeneralName objectsz/authority_cert_serial_number must be an integer)
ValueErrorrQ allrX r" r6 _key_identifier_authority_cert_issuer _authority_cert_serial_number)r0 rx ry rz r' r' r( r= s*
z AuthorityKeyIdentifier.__init__r c C s t |}| |d d dS N)rx ry rz r) )clsr r% r' r' r( from_issuer_public_key s z-AuthorityKeyIdentifier.from_issuer_public_keySubjectKeyIdentifier)skir c C s | |j d d dS r )r% )r r r' r' r( "from_issuer_subject_key_identifier s
z9AuthorityKeyIdentifier.from_issuer_subject_key_identifierr, c C s
d | S )NzrI r/ r' r' r( r[ s z AuthorityKeyIdentifier.__repr__rh c C s2 t |tstS | j|jko0| j|jko0| j|jkS r! )r" rw rj rx ry rz rk r' r' r( rl s
z AuthorityKeyIdentifier.__eq__c C s
| |k S r! r' rk r' r' r( rm s z AuthorityKeyIdentifier.__ne__c C s, | j d u rd }n
t| j }t| j|| jfS r! )ry tuplero rx rz )r0 Zacir' r' r( rp s
z AuthorityKeyIdentifier.__hash__c C s | j S r! )r r/ r' r' r( rx s z%AuthorityKeyIdentifier.key_identifierc C s | j S r! )r r/ r' r' r( ry s z,AuthorityKeyIdentifier.authority_cert_issuerc C s | j S r! )r r/ r' r' r( rz s z3AuthorityKeyIdentifier.authority_cert_serial_numberc C s
t | S r! rr r/ r' r' r( r# s z#AuthorityKeyIdentifier.public_bytes) rB rC rD r ZAUTHORITY_KEY_IDENTIFIERr; rJ OptionalrM r\ r r6 r= classmethodr
r r rE r[ rt ru rl rm rp rv rx Listry rz r# r' r' r' r( rw s4 &
rw c @ s e Zd ZejZeddddZee d dddZ
e edd d
Z e edd d Z
edd
dZejedddZejedddZedddZedddZdS )r N)r% r c C s
|| _ d S r! Z_digest)r0 r% r' r' r( r= ' s z SubjectKeyIdentifier.__init__r c C s | t |S r! r )r r r' r' r( from_public_key* s z$SubjectKeyIdentifier.from_public_keyr, c C s | j S r! r r/ r' r' r( r% 0 s zSubjectKeyIdentifier.digestc C s | j S r! r r/ r' r' r( rx 4 s z#SubjectKeyIdentifier.key_identifierc C s d | jS )Nz$)rI r% r/ r' r' r( r[ 8 s z SubjectKeyIdentifier.__repr__rh c C s t |tstS t| j|jS r! )r" r rj r Zbytes_eqr% rk r' r' r( rl ; s
zSubjectKeyIdentifier.__eq__c C s
| |k S r! r' rk r' r' r( rm A s zSubjectKeyIdentifier.__ne__c C s
t | jS r! )ro r% r/ r' r' r( rp D s z SubjectKeyIdentifier.__hash__c C s
t | S r! rr r/ r' r' r( r# G s z!SubjectKeyIdentifier.public_bytes)rB rC rD r ZSUBJECT_KEY_IDENTIFIERr; rM r= r r r rv r% rx rE r[ rJ rt ru rl rm r6 rp r# r' r' r' r( r $ s r c @ s e Zd ZejZejd ddddZe d\Z
Z Z e
ddd Zejed
d d Zejed
d
dZedddZedddZdS )AuthorityInformationAccessAccessDescriptionN descriptionsr c C s, t |}tdd |D s"td|| _d S )Nc s s | ]}t |tV qd S r! r" r r| r' r' r( r R z6AuthorityInformationAccess.__init__..@Every item in the descriptions list must be an AccessDescriptionrQ r rX
_descriptionsr0 r r' r' r( r= N s z#AuthorityInformationAccess.__init__r r, c C s d | jS )Nz rI r r/ r' r' r( r[ \ s z#AuthorityInformationAccess.__repr__rh c C s t |tstS | j|jkS r! )r" r rj r rk r' r' r( rl _ s
z!AuthorityInformationAccess.__eq__c C s
| |k S r! r' rk r' r' r( rm e s z!AuthorityInformationAccess.__ne__c C s t t| jS r! ro r r r/ r' r' r( rp h s z#AuthorityInformationAccess.__hash__c C s
t | S r! rr r/ r' r' r( r# k s z'AuthorityInformationAccess.public_bytes)rB rC rD r Z AUTHORITY_INFORMATION_ACCESSr; rJ r\ r= r7 r^ r_ r` rE r[ rt ru rl rm r6 rp rM r# r' r' r' r( r K s r c @ s e Zd ZejZejd ddddZe d\Z
Z Z e
ddd Zejed
d d Zejed
d
dZedddZedddZdS )SubjectInformationAccessr Nr c C s, t |}tdd |D s"td|| _d S )Nc s s | ]}t |tV qd S r! r r| r' r' r( r v r z4SubjectInformationAccess.__init__..r r r r' r' r( r= r s z!SubjectInformationAccess.__init__r r, c C s d | jS )Nz r r/ r' r' r( r[ s z!SubjectInformationAccess.__repr__rh c C s t |tstS | j|jkS r! )r" r rj r rk r' r' r( rl s
z SubjectInformationAccess.__eq__c C s
| |k S r! r' rk r' r' r( rm s z SubjectInformationAccess.__ne__c C s t t| jS r! r r/ r' r' r( rp s z!SubjectInformationAccess.__hash__c C s
t | S r! rr r/ r' r' r( r# s z%SubjectInformationAccess.public_bytes)rB rC rD r ZSUBJECT_INFORMATION_ACCESSr; rJ r\ r= r7 r^ r_ r` rE r[ rt ru rl rm r6 rp rM r# r' r' r' r( r o s r c @ s e Zd ZeeddddZedddZej e
dd d
Z ej e
dd d Z e
dd
dZeedddZeedddZdS )r N)
access_methodaccess_locationr c C s4 t |tstdt |ts$td|| _|| _d S )Nz)access_method must be an ObjectIdentifierz%access_location must be a GeneralName)r" r rX r _access_method_access_location)r0 r r r' r' r( r= s
zAccessDescription.__init__r, c C s
d | S )NzYr r/ r' r' r( r[ s zAccessDescription.__repr__rh c C s& t |tstS | j|jko$| j|jkS r! )r" r rj r r rk r' r' r( rl s
zAccessDescription.__eq__c C s
| |k S r! r' rk r' r' r( rm s zAccessDescription.__ne__c C s t | j| jfS r! )ro r r r/ r' r' r( rp s zAccessDescription.__hash__c C s | j S r! )r r/ r' r' r( r s z AccessDescription.access_methodc C s | j S r! )r r/ r' r' r( r s z!AccessDescription.access_location)rB rC rD r r r= rE r[ rJ rt ru rl rm r6 rp rv r r r' r' r' r( r s r c @ s e Zd ZejZeeje ddddZ
e edddZ e eje ddd Z
edd
d Zejed d
dZejed ddZe dddZedddZdS )BasicConstraintsN)ca path_lengthr c C sX t |tstd|d ur&|s&td|d urHt |tr@|dk rHtd|| _|| _d S )Nzca must be a boolean valuez)path_length must be None when ca is Falser z2path_length must be a non-negative integer or None)r" ru rX r r6 _ca _path_length)r0 r r r' r' r( r= s
zBasicConstraints.__init__r, c C s | j S r! )r r/ r' r' r( r s zBasicConstraints.cac C s | j S r! )r r/ r' r' r( r s z BasicConstraints.path_lengthc C s
d | S )Nz:r r/ r' r' r( r[ s zBasicConstraints.__repr__rh c C s& t |tstS | j|jko$| j|jkS r! )r" r rj r r rk r' r' r( rl s
zBasicConstraints.__eq__c C s
| |k S r! r' rk r' r' r( rm s zBasicConstraints.__ne__c C s t | j| jfS r! )ro r r r/ r' r' r( rp s zBasicConstraints.__hash__c C s
t | S r! rr r/ r' r' r( r# s z BasicConstraints.public_bytes)rB rC rD r ZBASIC_CONSTRAINTSr; ru rJ r r6 r= rv r r rE r[ rt rl rm rp rM r# r' r' r' r( r s r c @ s e Zd ZejZeddddZeedddZ e
j e dd d
Z
e
j e dd d Zedd
dZedddZedddZdS )DeltaCRLIndicatorNrb c C s t |tstd|| _d S rd re rg r' r' r( r= s
zDeltaCRLIndicator.__init__r, c C s | j S r! rq r/ r' r' r( rc s z DeltaCRLIndicator.crl_numberrh c C s t |tstS | j|jkS r! )r" r rj rc rk r' r' r( rl s
zDeltaCRLIndicator.__eq__c C s
| |k S r! r' rk r' r' r( rm s zDeltaCRLIndicator.__ne__c C s
t | jS r! rn r/ r' r' r( rp s zDeltaCRLIndicator.__hash__c C s
d | S )Nz.r r/ r' r' r( r[ s zDeltaCRLIndicator.__repr__c C s
t | S r! rr r/ r' r' r( r# s z DeltaCRLIndicator.public_bytes)rB rC rD r ZDELTA_CRL_INDICATORr; r6 r= rv rc rJ rt ru rl rm rp rE r[ rM r# r' r' r' r( r s r c @ s e Zd ZejZejd ddddZe d\Z
Z Z e
ddd Zejed
d d Zejed
d
dZedddZedddZdS )CRLDistributionPointsDistributionPointNdistribution_pointsr c C s, t |}tdd |D s"td|| _d S )Nc s s | ]}t |tV qd S r! r" r r| r' r' r( r s z1CRLDistributionPoints.__init__..?distribution_points must be a list of DistributionPoint objectsrQ r rX _distribution_pointsr0 r r' r' r( r= s z CRLDistributionPoints.__init__r r, c C s d | jS )NzrI r r/ r' r' r( r[ $ s z CRLDistributionPoints.__repr__rh c C s t |tstS | j|jkS r! )r" r rj r rk r' r' r( rl ' s
z CRLDistributionPoints.__eq__c C s
| |k S r! r' rk r' r' r( rm - s z CRLDistributionPoints.__ne__c C s t t| jS r! ro r r r/ r' r' r( rp 0 s z CRLDistributionPoints.__hash__c C s
t | S r! rr r/ r' r' r( r# 3 s z"CRLDistributionPoints.public_bytes)rB rC rD r ZCRL_DISTRIBUTION_POINTSr; rJ r\ r= r7 r^ r_ r` rE r[ rt ru rl rm r6 rp rM r# r' r' r' r( r s
r c @ s e Zd ZejZejd ddddZe d\Z
Z Z e
ddd Zejed
d d Zejed
d
dZedddZedddZdS ) FreshestCRLr Nr c C s, t |}tdd |D s"td|| _d S )Nc s s | ]}t |tV qd S r! r r| r' r' r( r > s z'FreshestCRL.__init__..r r r r' r' r( r= : s zFreshestCRL.__init__r r, c C s d | jS )Nzr r/ r' r' r( r[ L s zFreshestCRL.__repr__rh c C s t |tstS | j|jkS r! )r" r rj r rk r' r' r( rl O s
zFreshestCRL.__eq__c C s
| |k S r! r' rk r' r' r( rm U s zFreshestCRL.__ne__c C s t t| jS r! r r/ r' r' r( rp X s zFreshestCRL.__hash__c C s
t | S r! rr r/ r' r' r( r# [ s zFreshestCRL.public_bytes)rB rC rD r Z FRESHEST_CRLr; rJ r\ r= r7 r^ r_ r` rE r[ rt ru rl rm r6 rp rM r# r' r' r' r( r 7 s
r c @ s e Zd Zejeje eje ejejd ejeje ddddZ e
dddZ ej e
d d
d Zej e
d d d
ZedddZeejeje dddZeeje dddZeejejd dddZeejeje dddZdS )r ReasonFlagsN) full_name
relative_namereasons
crl_issuerr c C s |r|rt d|d ur:t|}tdd |D s:td|rPt|tsPtd|d urzt|}tdd |D sztd|rt|trtdd |D std |rtj|v stj |v rt d
|r|s|s|st d || _
|| _ || _ || _
d S ) NzOYou cannot provide both full_name and relative_name, at least one must be None.c s s | ]}t |tV qd S r! r{ r| r' r' r( r o r z-DistributionPoint.__init__..z/full_name must be a list of GeneralName objectsz1relative_name must be a RelativeDistinguishedNamec s s | ]}t |tV qd S r! r{ r| r' r' r( r | r z2crl_issuer must be None or a list of general namesc s s | ]}t |tV qd S r! r" r r| r' r' r( r r z0reasons must be None or frozenset of ReasonFlagszLunspecified and remove_from_crl are not valid reasons in a DistributionPointzPYou must supply crl_issuer, full_name, or relative_name when reasons is not None)r rQ r rX r" r frozensetr unspecifiedremove_from_crl
_full_name_relative_name_reasons _crl_issuer)r0 r r r r r' r' r( r= ` sV
zDistributionPoint.__init__r, c C s
d | S )Nz}r r/ r' r' r( r[ s zDistributionPoint.__repr__rh c C s> t |tstS | j|jko<| j|jko<| j|jko<| j|jkS r! )r" r rj r r r r rk r' r' r( rl s
zDistributionPoint.__eq__c C s
| |k S r! r' rk r' r' r( rm s zDistributionPoint.__ne__c C sH | j d urt| j }nd }| jd ur0t| j}nd }t|| j| j|fS r! )r r r ro r r )r0 fnr r' r' r( rp s
zDistributionPoint.__hash__c C s | j S r! r r/ r' r' r( r s zDistributionPoint.full_namec C s | j S r! r r/ r' r' r( r s z DistributionPoint.relative_namec C s | j S r! )r r/ r' r' r( r s zDistributionPoint.reasonsc C s | j S r! )r r/ r' r' r( r s z DistributionPoint.crl_issuer)rB rC rD rJ r r\ r r FrozenSetr= rE r[ rt ru rl rm r6 rp rv r r r r r r' r' r' r( r _ s$ ; r c @ s4 e Zd ZdZdZdZdZdZdZdZ dZ
d Z d
Z d S ) r r Z
keyCompromiseZ cACompromiseZaffiliationChanged
supersededZcessationOfOperationZcertificateHoldZprivilegeWithdrawnZ aACompromiseZ
removeFromCRLN)
rB rC rD r key_compromise
ca_compromiseaffiliation_changedr cessation_of_operationcertificate_holdprivilege_withdrawn
aa_compromiser r' r' r' r( r s r ) c @ s e Zd ZejZeje eje ddddZ e
dddZ ej e
dd d
Zej e
dd d Zedd
dZeeje dddZeeje dddZedddZdS )PolicyConstraintsN)require_explicit_policyinhibit_policy_mappingr c C s\ |d urt |tstd|d ur4t |ts4td|d u rL|d u rLtd|| _|| _d S )Nz>require_explicit_policy must be a non-negative integer or Nonez=inhibit_policy_mapping must be a non-negative integer or NonezSAt least one of require_explicit_policy and inhibit_policy_mapping must not be None)r" r6 rX r _require_explicit_policy_inhibit_policy_mapping)r0 r r r' r' r( r= s$
zPolicyConstraints.__init__r, c C s
d | S )Nz{r r/ r' r' r( r[ s zPolicyConstraints.__repr__rh c C s& t |tstS | j|jko$| j|jkS r! )r" r rj r r rk r' r' r( rl s
zPolicyConstraints.__eq__c C s
| |k S r! r' rk r' r' r( rm ' s zPolicyConstraints.__ne__c C s t | j| jfS r! )ro r r r/ r' r' r( rp * s
zPolicyConstraints.__hash__c C s | j S r! )r r/ r' r' r( r / s z)PolicyConstraints.require_explicit_policyc C s | j S r! )r r/ r' r' r( r 3 s z(PolicyConstraints.inhibit_policy_mappingc C s
t | S r! rr r/ r' r' r( r# 7 s z PolicyConstraints.public_bytes)rB rC rD r ZPOLICY_CONSTRAINTSr; rJ r r6 r= rE r[ rt ru rl rm rp rv r r rM r# r' r' r' r( r s r c @ s e Zd ZejZejd ddddZe d\Z
Z Z e
ddd Zejed
d d Zejed
d
dZedddZedddZdS )CertificatePoliciesPolicyInformationN)policiesr c C s, t |}tdd |D s"td|| _d S )Nc s s | ]}t |tV qd S r! )r" r r| r' r' r( r @ r z/CertificatePolicies.__init__..z;Every item in the policies list must be a PolicyInformation)rQ r rX _policies)r0 r r' r' r( r= > s z CertificatePolicies.__init__r r, c C s d | jS )Nz)rI r r/ r' r' r( r[ J s z CertificatePolicies.__repr__rh c C s t |tstS | j|jkS r! )r" r rj r rk r' r' r( rl M s
zCertificatePolicies.__eq__c C s
| |k S r! r' rk r' r' r( rm S s zCertificatePolicies.__ne__c C s t t| jS r! )ro r r r/ r' r' r( rp V s z CertificatePolicies.__hash__c C s
t | S r! rr r/ r' r' r( r# Y s z CertificatePolicies.public_bytes)rB rC rD r ZCERTIFICATE_POLICIESr; rJ r\ r= r7 r^ r_ r` rE r[ rt ru rl rm r6 rp rM r# r' r' r' r( r ; s
r c @ s e Zd Zeejejejedf ddddZ edddZ
ej e d d
d Z
ej e d d d
ZedddZeedddZeejejejedf dddZdS )r
UserNoticeN)policy_identifierpolicy_qualifiersr c C sL t |tstd|| _|d urBt|}tdd |D sBtd|| _d S )Nz-policy_identifier must be an ObjectIdentifierc s s | ]}t |ttfV qd S r! )r" rE r r| r' r' r( r l s z-PolicyInformation.__init__..zMpolicy_qualifiers must be a list of strings and/or UserNotice objects or None)r" r rX _policy_identifierrQ r _policy_qualifiers)r0 r r r' r' r( r= ^ s
zPolicyInformation.__init__r, c C s
d | S )Nzer r/ r' r' r( r[ v s zPolicyInformation.__repr__rh c C s& t |tstS | j|jko$| j|jkS r! )r" r rj r r rk r' r' r( rl | s
zPolicyInformation.__eq__c C s
| |k S r! r' rk r' r' r( rm s zPolicyInformation.__ne__c C s( | j d urt| j }nd }t| j|fS r! )r r ro r )r0 Zpqr' r' r( rp s
zPolicyInformation.__hash__c C s | j S r! )r r/ r' r' r( r s z#PolicyInformation.policy_identifierc C s | j S r! )r r/ r' r' r( r s z#PolicyInformation.policy_qualifiers)rB rC rD r rJ r r\ UnionrE r= r[ rt ru rl rm r6 rp rv r r r r' r' r' r( r ] s
r c @ s e Zd Zejd eje ddddZedddZeje d d
d Z
eje d d d
Z e dddZ
eejd dddZeeje dddZdS )r NoticeReferenceN)notice_reference
explicit_textr c C s& |rt |tstd|| _|| _d S )Nz2notice_reference must be None or a NoticeReference)r" r rX _notice_reference_explicit_text)r0 r r r' r' r( r= s zUserNotice.__init__r, c C s
d | S )NzVr r/ r' r' r( r[ s zUserNotice.__repr__rh c C s& t |tstS | j|jko$| j|jkS r! )r" r rj r r rk r' r' r( rl s
zUserNotice.__eq__c C s
| |k S r! r' rk r' r' r( rm s zUserNotice.__ne__c C s t | j| jfS r! )ro r r r/ r' r' r( rp s zUserNotice.__hash__c C s | j S r! )r r/ r' r' r( r s zUserNotice.notice_referencec C s | j S r! )r r/ r' r' r( r s zUserNotice.explicit_text)rB rC rD rJ r rE r= r[ rt ru rl rm r6 rp rv r r r' r' r' r( r s r c @ s e Zd Zeje eje ddddZedddZ ej
e dd d
Z ej
e dd d Z
edd
dZeeje dddZeeje dddZdS )r N) organizationnotice_numbersr c C s2 || _ t|}tdd |D s(td|| _d S )Nc s s | ]}t |tV qd S r! )r" r6 r| r' r' r( r r z+NoticeReference.__init__..z)notice_numbers must be a list of integers)
_organizationrQ r rX _notice_numbers)r0 r r r' r' r( r= s
zNoticeReference.__init__r, c C s
d | S )NzUr r/ r' r' r( r[ s zNoticeReference.__repr__rh c C s& t |tstS | j|jko$| j|jkS r! )r" r rj r r rk r' r' r( rl s
zNoticeReference.__eq__c C s
| |k S r! r' rk r' r' r( rm s zNoticeReference.__ne__c C s t | jt| jfS r! )ro r r r r/ r' r' r( rp s zNoticeReference.__hash__c C s | j S r! )r r/ r' r' r( r s z NoticeReference.organizationc C s | j S r! )r r/ r' r' r( r s z NoticeReference.notice_numbers)rB rC rD rJ r rE r\ r6 r= r[ rt ru rl rm rp rv r r r r' r' r' r( r s r c @ s e Zd ZejZeje ddddZ e
d\Z Z Z
edddZejed d
d Zejed d d
ZedddZedddZdS )ExtendedKeyUsageN)usagesr c C s, t |}tdd |D s"td|| _d S )Nc s s | ]}t |tV qd S r! )r" r r| r' r' r( r r z,ExtendedKeyUsage.__init__..z9Every item in the usages list must be an ObjectIdentifier)rQ r rX _usages)r0 r r' r' r( r= s zExtendedKeyUsage.__init__r r, c C s d | jS )Nz)rI r r/ r' r' r( r[ s zExtendedKeyUsage.__repr__rh c C s t |tstS | j|jkS r! )r" r rj r rk r' r' r( rl s
zExtendedKeyUsage.__eq__c C s
| |k S r! r' rk r' r' r( rm
s zExtendedKeyUsage.__ne__c C s t t| jS r! )ro r r r/ r' r' r( rp s zExtendedKeyUsage.__hash__c C s
t | S r! rr r/ r' r' r( r# s z ExtendedKeyUsage.public_bytes)rB rC rD r ZEXTENDED_KEY_USAGEr; rJ r\ r r= r7 r^ r_ r` rE r[ rt ru rl rm r6 rp rM r# r' r' r' r( r s r c @ s` e Zd ZejZejedddZ ejedddZ
e dddZ e
dd d
Zedd d Zd
S ) OCSPNoCheckrh c C s t |tstS dS NT)r" r rj rk r' r' r( rl s
zOCSPNoCheck.__eq__c C s
| |k S r! r' rk r' r' r( rm s zOCSPNoCheck.__ne__r, c C s t tS r! )ro r r/ r' r' r( rp # s zOCSPNoCheck.__hash__c C s dS )Nzr' r/ r' r' r( r[ & s zOCSPNoCheck.__repr__c C s
t | S r! rr r/ r' r' r( r# ) s zOCSPNoCheck.public_bytesN)rB rC rD r Z
OCSP_NO_CHECKr; rJ rt ru rl rm r6 rp rE r[ rM r# r' r' r' r( r s r c @ s` e Zd ZejZejedddZ ejedddZ
e dddZ e
dd d
Zedd d Zd
S )
PrecertPoisonrh c C s t |tstS dS r )r" r rj rk r' r' r( rl 0 s
zPrecertPoison.__eq__c C s
| |k S r! r' rk r' r' r( rm 6 s zPrecertPoison.__ne__r, c C s t tS r! )ro r r/ r' r' r( rp 9 s zPrecertPoison.__hash__c C s dS )Nzr' r/ r' r' r( r[ < s zPrecertPoison.__repr__c C s
t | S r! rr r/ r' r' r( r# ? s zPrecertPoison.public_bytesN)rB rC rD r ZPRECERT_POISONr; rJ rt ru rl rm r6 rp rE r[ rM r# r' r' r' r( r - s r c @ s e Zd ZejZejd ddddZe d\Z
Z Z e
ddd Zejed
d d Zejed
d
dZedddZedddZdS )
TLSFeatureTLSFeatureTypeN)featuresr c C s8 t |}tdd |D r&t|dkr.td|| _d S )Nc s s | ]}t |tV qd S r! )r" r r| r' r' r( r I r z&TLSFeature.__init__..r z@features must be a list of elements from the TLSFeatureType enum)rQ r r- rX _features)r0 r r' r' r( r= F s
zTLSFeature.__init__r r, c C s
d | S )Nz$r r/ r' r' r( r[ U s zTLSFeature.__repr__rh c C s t |tstS | j|jkS r! )r" r rj r rk r' r' r( rl X s
zTLSFeature.__eq__c C s
| |k S r! r' rk r' r' r( rm ^ s zTLSFeature.__ne__c C s t t| jS r! )ro r r r/ r' r' r( rp a s zTLSFeature.__hash__c C s
t | S r! rr r/ r' r' r( r# d s zTLSFeature.public_bytes)rB rC rD r Z TLS_FEATUREr; rJ r\ r= r7 r^ r_ r` rE r[ rt ru rl rm r6 rp rM r# r' r' r' r( r C s
r c @ s e Zd ZdZdZdS )r r N)rB rC rD Zstatus_requestZstatus_request_v2r' r' r' r( r h s r c C s i | ] }|j |qS r' rY r| r' r' r(
s r r c @ s e Zd ZejZeddddZedddZ e
j e dd d
Z
e
j e dd d Zedd
dZeedddZedddZdS )InhibitAnyPolicyN)
skip_certsr c C s, t |tstd|dk r"td|| _d S )Nz skip_certs must be an integerr z)skip_certs must be a non-negative integer)r" r6 rX r _skip_certs)r0 r r' r' r( r= y s
zInhibitAnyPolicy.__init__r, c C s
d | S )Nz-r r/ r' r' r( r[ s zInhibitAnyPolicy.__repr__rh c C s t |tstS | j|jkS r! )r" r rj r rk r' r' r( rl s
zInhibitAnyPolicy.__eq__c C s
| |k S r! r' rk r' r' r( rm s zInhibitAnyPolicy.__ne__c C s
t | jS r! )ro r r/ r' r' r( rp s zInhibitAnyPolicy.__hash__c C s | j S r! )r r/ r' r' r( r s zInhibitAnyPolicy.skip_certsc C s
t | S r! rr r/ r' r' r( r# s z InhibitAnyPolicy.public_bytes)rB rC rD r ZINHIBIT_ANY_POLICYr; r6 r= rE r[ rJ rt ru rl rm rp rv r rM r# r' r' r' r( r v s r c @ s" e Zd ZejZeeeeeeeeedd
ddZeedddZ eeddd Z
eedd
d Z eedd d
Z eedddZ
eedddZeedddZeedddZeedddZedddZejeddd Zejedd d Zedd d Zedd!d"ZdS )#KeyUsageN)
digital_signaturecontent_commitmentkey_enciphermentdata_encipherment
key_agreement
key_cert_signcrl_sign
encipher_only
decipher_onlyr c
C sN |s|s | rt d|| _|| _|| _|| _|| _|| _|| _|| _| | _ d S )NzKencipher_only and decipher_only can only be true when key_agreement is true)
r _digital_signature_content_commitment_key_encipherment_data_encipherment_key_agreement_key_cert_sign _crl_sign_encipher_only_decipher_only)
r0 r r r r r r r r r r' r' r( r= s zKeyUsage.__init__r, c C s | j S r! )r r/ r' r' r( r s zKeyUsage.digital_signaturec C s | j S r! )r
r/ r' r' r( r s zKeyUsage.content_commitmentc C s | j S r! )r r/ r' r' r( r s zKeyUsage.key_enciphermentc C s | j S r! )r r/ r' r' r( r s zKeyUsage.data_enciphermentc C s | j S r! )r
r/ r' r' r( r s zKeyUsage.key_agreementc C s | j S r! )r r/ r' r' r( r s zKeyUsage.key_cert_signc C s | j S r! )r r/ r' r' r( r s zKeyUsage.crl_signc C s | j stdn| jS d S )Nz7encipher_only is undefined unless key_agreement is true)r r r r/ r' r' r( r s
zKeyUsage.encipher_onlyc C s | j stdn| jS d S )Nz7decipher_only is undefined unless key_agreement is true)r r r r/ r' r' r( r s
zKeyUsage.decipher_onlyc C s: z| j }| j}W n ty* d}d}Y n0 d| ||S )NFa- )r r r rI )r0 r r r' r' r( r[ s
zKeyUsage.__repr__rh c C sz t |tstS | j|jkox| j|jkox| j|jkox| j|jkox| j|jkox| j|jkox| j |j kox| j
|j
kox| j |j kS r! ) r" r rj r r r r r r r r r rk r' r' r( rl s&
zKeyUsage.__eq__c C s
| |k S r! r' rk r' r' r( rm s zKeyUsage.__ne__c
C s, t | j| j| j| j| j| j| j| j| j f S r! )
ro r r r r r r r r r r/ r' r' r( rp s zKeyUsage.__hash__c C s
t | S r! rr r/ r' r' r( r# s zKeyUsage.public_bytes) rB rC rD r Z KEY_USAGEr; ru r= rv r r r r r r r r r rE r[ rJ rt rl rm r6 rp rM r# r' r' r' r( r sF r c @ s e Zd ZejZejeje ejeje ddddZ
ej e dddZ
ej e ddd Zeje dd
d d Zed
ddZed
ddZeejeje d
ddZeejeje d
ddZed
ddZdS )NameConstraintsN)permitted_subtreesexcluded_subtreesr c C s |d ur4t |}tdd |D s*td| | |d urht |}tdd |D s^td| | |d u r|d u rtd|| _|| _d S )Nc s s | ]}t |tV qd S r! r{ r| r' r' r( r + r z+NameConstraints.__init__..z@permitted_subtrees must be a list of GeneralName objects or Nonec s s | ]}t |tV qd S r! r{ r| r' r' r( r 5 r z?excluded_subtrees must be a list of GeneralName objects or NonezIAt least one of permitted_subtrees and excluded_subtrees must not be None)rQ r rX _validate_ip_namer _permitted_subtrees_excluded_subtrees)r0 r r r' r' r( r= $ s(
zNameConstraints.__init__rh c C s& t |tstS | j|jko$| j|jkS r! )r" r rj r r rk r' r' r( rl F s
zNameConstraints.__eq__c C s
| |k S r! r' rk r' r' r( rm O s zNameConstraints.__ne__)treer c C s t dd |D rtdd S )Nc s s. | ]&}t |to$t |jtjtjf V qd S r! )r" r rY ipaddress IPv4Network IPv6Network)r} namer' r' r( r S s
z4NameConstraints._validate_ip_name..zGIPAddress name constraints must be an IPv4Network or IPv6Network object)anyrX )r0 r r' r' r( r R s z!NameConstraints._validate_ip_namer, c C s
d | S )Nzer r/ r' r' r( r[ _ s zNameConstraints.__repr__c C s@ | j d urt| j }nd }| jd ur0t| j}nd }t||fS r! )r r r ro )r0 Zpsesr' r' r( rp e s
zNameConstraints.__hash__c C s | j S r! )r r/ r' r' r( r v s z"NameConstraints.permitted_subtreesc C s | j S r! )r r/ r' r' r( r | s z!NameConstraints.excluded_subtreesc C s
t | S r! rr r/ r' r' r( r# s z NameConstraints.public_bytes)rB rC rD r ZNAME_CONSTRAINTSr; rJ r r\ r r= rt ru rl rm r rE r[ r6 rp rv r r r rM r# r' r' r' r( r ! s" "
r c @ s e Zd ZeeeddddZeedddZeeddd Z eedd
d Z
e dd d
Z e
jedddZe
jedddZedddZdS ) ExtensionN)r; criticalrY r c C s: t |tstdt |ts$td|| _|| _|| _d S )Nz2oid argument must be an ObjectIdentifier instance.z critical must be a boolean value)r" r rX ru _oid _critical_value)r0 r; r rY r' r' r( r= s
zExtension.__init__r, c C s | j S r! r! r/ r' r' r( r; s z
Extension.oidc C s | j S r! )r" r/ r' r' r( r s zExtension.criticalc C s | j S r! r# r/ r' r' r( rY s zExtension.valuec C s
d | S )Nz@r r/ r' r' r( r[ s zExtension.__repr__rh c C s2 t |tstS | j|jko0| j|jko0| j|jkS r! )r" r rj r; r rY rk r' r' r( rl s
zExtension.__eq__c C s
| |k S r! r' rk r' r' r( rm s zExtension.__ne__c C s t | j| j| jfS r! )ro r; r rY r/ r' r' r( rp s zExtension.__hash__)rB rC rD r ru r r= rv r; r rY rE r[ rJ rt rl rm r6 rp r' r' r' r( r s
r c @ s e Zd Zeje ddddZed\ZZ Z
ej ej ej
e ej
e ej
e f eje dddZej ej
e eje dd dZej ej
e eje dd
dZej ej
e eje dd dZej ej
e eje dd dZej ej
e ej
e ej
e ej
e ej
e ej
e ej
e f ej eje eje eje eje eje f dd
dZedddZej e dddZ ej e dddZ e dddZ!dS ) GeneralNamesN
general_namesr c C s, t |}tdd |D s"td|| _d S )Nc s s | ]}t |tV qd S r! r{ r| r' r' r( r r z(GeneralNames.__init__..z^Every item in the general_names list must be an object conforming to the GeneralName interface)rQ r rX _general_namesr0 r( r' r' r( r= s zGeneralNames.__init__r) typer c C s d S r! r' r0 r, r' r' r( get_values_for_type s z GeneralNames.get_values_for_typec C s d S r! r' r- r' r' r( r. s c C s d S r! r' r- r' r' r( r. s c C s d S r! r' r- r' r' r( r. s c C s d S r! r' r- r' r' r( r. s c s0 fdd| D } t kr(dd |D S t|S )Nc 3 s | ]}t | r|V qd S r! )r" r} ir, r' r( r r z3GeneralNames.get_values_for_type..c S s g | ]
}|j qS r' r r/ r' r' r(
r z4GeneralNames.get_values_for_type..)r rQ )r0 r, Zobjsr' r1 r( r. s r, c C s d | jS )NzrI r) r/ r' r' r( r[ s zGeneralNames.__repr__rh c C s t |tstS | j|jkS r! )r" r& rj r) rk r' r' r( rl s
zGeneralNames.__eq__c C s
| |k S r! r' rk r' r' r( rm s zGeneralNames.__ne__c C s t t| jS r! )ro r r) r/ r' r' r( rp s zGeneralNames.__hash__)"rB rC rD rJ r\ r r= r7 r^ r_ r` overloadr r] r r r r rE r. r
r r r r r r r[ rt ru rl rm r6 rp r' r' r' r( r& sd
r& c @ s e Zd ZejZeje ddddZ e
d\Z Z Z
ejejeje eje eje f eje dddZejeje eje dd dZejeje eje dd
dZejeje eje dd dZejeje eje dd dZejeje eje eje eje eje eje eje f ejeje eje eje eje eje f dd
dZedddZ ej e dddZ!ej e dddZ"e#dddZ$e%dddZ&dS )SubjectAlternativeNameNr' c C s t || _d S r! r& r) r* r' r' r( r= s z SubjectAlternativeName.__init__r) r+ c C s d S r! r' r- r' r' r( r. s z*SubjectAlternativeName.get_values_for_typec C s d S r! r' r- r' r' r( r. ( s c C s d S r! r' r- r' r' r( r. / s c C s d S r! r' r- r' r' r( r. 6 s c C s d S r! r' r- r' r' r( r. < s c C s | j |S r! r) r. r- r' r' r( r. B s r, c C s d | jS )Nz r3 r/ r' r' r( r[ V s z SubjectAlternativeName.__repr__rh c C s t |tstS | j|jkS r! )r" r5 rj r) rk r' r' r( rl Y s
z SubjectAlternativeName.__eq__c C s
| |k S r! r' rk r' r' r( rm _ s z SubjectAlternativeName.__ne__c C s
t | jS r! ro r) r/ r' r' r( rp b s z SubjectAlternativeName.__hash__c C s
t | S r! rr r/ r' r' r( r# e s z#SubjectAlternativeName.public_bytes)'rB rC rD r ZSUBJECT_ALTERNATIVE_NAMEr; rJ r\ r r= r7 r^ r_ r` r4 r r] r r r r rE r. r
r r r r r r r[ rt ru rl rm r6 rp rM r# r' r' r' r( r5 sh
r5 c @ s e Zd ZejZeje ddddZ e
d\Z Z Z
ejejeje eje eje f eje dddZejeje eje dd dZejeje eje dd
dZejeje eje dd dZejeje eje dd dZejeje eje eje eje eje eje eje f ejeje eje eje eje eje f dd
dZedddZ ej e dddZ!ej e dddZ"e#dddZ$e%dddZ&dS )IssuerAlternativeNameNr' c C s t || _d S r! r6 r* r' r' r( r= l s z IssuerAlternativeName.__init__r) r+ c C s d S r! r' r- r' r' r( r. q s z)IssuerAlternativeName.get_values_for_typec C s d S r! r' r- r' r' r( r. | s c C s d S r! r' r- r' r' r( r. s c C s d S r! r' r- r' r' r( r. s c C s d S r! r' r- r' r' r( r. s c C s | j |S r! r7 r- r' r' r( r. s r, c C s d | jS )Nzr3 r/ r' r' r( r[ s z IssuerAlternativeName.__repr__rh c C s t |tstS | j|jkS r! )r" r9 rj r) rk r' r' r( rl s
z IssuerAlternativeName.__eq__c C s
| |k S r! r' rk r' r' r( rm s z IssuerAlternativeName.__ne__c C s
t | jS r! r8 r/ r' r' r( rp s z IssuerAlternativeName.__hash__c C s
t | S r! rr r/ r' r' r( r# s z"IssuerAlternativeName.public_bytes)'rB rC rD r ZISSUER_ALTERNATIVE_NAMEr; rJ r\ r r= r7 r^ r_ r` r4 r r] r r r r rE r. r
r r r r r r r[ rt ru rl rm r6 rp rM r# r' r' r' r( r9 i sh
r9 c @ s e Zd ZejZeje ddddZ e
d\Z Z Z
ejejeje eje eje f eje dddZejeje eje dd dZejeje eje dd
dZejeje eje dd dZejeje eje dd dZejeje eje eje eje eje eje eje f ejeje eje eje eje eje f dd
dZedddZ ej e dddZ!ej e dddZ"e#dddZ$e%dddZ&dS )CertificateIssuerNr' c C s t || _d S r! r6 r* r' r' r( r= s zCertificateIssuer.__init__r) r+ c C s d S r! r' r- r' r' r( r. s z%CertificateIssuer.get_values_for_typec C s d S r! r' r- r' r' r( r. s c C s d S r! r' r- r' r' r( r. s c C s d S r! r' r- r' r' r( r. s c C s d S r! r' r- r' r' r( r. s c C s | j |S r! r7 r- r' r' r( r. s r, c C s d | jS )Nzr3 r/ r' r' r( r[ s zCertificateIssuer.__repr__rh c C s t |tstS | j|jkS r! )r" r: rj r) rk r' r' r( rl s
zCertificateIssuer.__eq__c C s
| |k S r! r' rk r' r' r( rm s zCertificateIssuer.__ne__c C s
t | jS r! r8 r/ r' r' r( rp
s zCertificateIssuer.__hash__c C s
t | S r! rr r/ r' r' r( r#
s z CertificateIssuer.public_bytes)'rB rC rD r ZCERTIFICATE_ISSUERr; rJ r\ r r= r7 r^ r_ r` r4 r r] r r r r rE r. r
r r r r r r r[ rt ru rl rm r6 rp rM r# r' r' r' r( r: sh
r: c @ s e Zd ZejZeddddZedddZ e
j e dd d
Z
e
j e dd d Zedd
dZeedddZedddZdS ) CRLReasonN)reasonr c C s t |tstd|| _d S )Nz*reason must be an element from ReasonFlags)r" r rX _reason)r0 r< r' r' r( r= s
zCRLReason.__init__r, c C s d | jS )Nz)rI r= r/ r' r' r( r[ s zCRLReason.__repr__rh c C s t |tstS | j|jkS r! )r" r; rj r< rk r' r' r( rl s
zCRLReason.__eq__c C s
| |k S r! r' rk r' r' r( rm # s zCRLReason.__ne__c C s
t | jS r! )ro r< r/ r' r' r( rp & s zCRLReason.__hash__c C s | j S r! )r= r/ r' r' r( r< ) s zCRLReason.reasonc C s
t | S r! rr r/ r' r' r( r# - s zCRLReason.public_bytes)rB rC rD r Z
CRL_REASONr; r r= rE r[ rJ rt ru rl rm r6 rp rv r< rM r# r' r' r' r( r; s r; c @ s e Zd ZejZejddddZedddZ e
j e dd d
Z
e
j e dd d Zedd
dZeejdddZedddZdS )InvalidityDateN)invalidity_dater c C s t |tjstd|| _d S )Nz+invalidity_date must be a datetime.datetime)r" datetimerX _invalidity_date)r0 r? r' r' r( r= 4 s zInvalidityDate.__init__r, c C s d | jS )Nz$)rI rA r/ r' r' r( r[ : s zInvalidityDate.__repr__rh c C s t |tstS | j|jkS r! )r" r> rj r? rk r' r' r( rl ? s
zInvalidityDate.__eq__c C s
| |k S r! r' rk r' r' r( rm E s zInvalidityDate.__ne__c C s
t | jS r! )ro r? r/ r' r' r( rp H s zInvalidityDate.__hash__c C s | j S r! )rA r/ r' r' r( r? K s z InvalidityDate.invalidity_datec C s
t | S r! rr r/ r' r' r( r# O s zInvalidityDate.public_bytes)rB rC rD r ZINVALIDITY_DATEr; r@ r= rE r[ rJ rt ru rl rm r6 rp rv r? rM r# r' r' r' r( r> 1 s r> c @ s e Zd ZejZeje ddddZ e
d\Z Z Z
edddZedd d
Zejed d d
Zejed ddZedddZdS ))PrecertificateSignedCertificateTimestampsN signed_certificate_timestampsr c C s, t |}tdd |D s"td|| _d S )Nc s s | ]}t |tV qd S r! r" r r} Zsctr' r' r( r ] s zEPrecertificateSignedCertificateTimestamps.__init__..YEvery item in the signed_certificate_timestamps list must be a SignedCertificateTimestamprQ r rX _signed_certificate_timestampsr0 rD r' r' r( r= V s z2PrecertificateSignedCertificateTimestamps.__init__rI r, c C s d t| S )Nz/rI rQ r/ r' r' r( r[ k s z2PrecertificateSignedCertificateTimestamps.__repr__c C s t t| jS r! ro r rI r/ r' r' r( rp p s z2PrecertificateSignedCertificateTimestamps.__hash__rh c C s t |tstS | j|jkS r! )r" rB rj rI rk r' r' r( rl s s
z0PrecertificateSignedCertificateTimestamps.__eq__c C s
| |k S r! r' rk r' r' r( rm | s z0PrecertificateSignedCertificateTimestamps.__ne__c C s
t | S r! rr r/ r' r' r( r# s z6PrecertificateSignedCertificateTimestamps.public_bytes)rB rC rD r Z%PRECERT_SIGNED_CERTIFICATE_TIMESTAMPSr; rJ r\ r r= r7 r^ r_ r` rE r[ r6 rp rt ru rl rm rM r# r' r' r' r( rB S s
rB c @ s e Zd ZejZeje ddddZ e
d\Z Z Z
edddZedd d
Zejed d d
Zejed ddZedddZdS )SignedCertificateTimestampsNrC c C s, t |}tdd |D s"td|| _d S )Nc s s | ]}t |tV qd S r! rE rF r' r' r( r s z7SignedCertificateTimestamps.__init__..rG rH rJ r' r' r( r= s z$SignedCertificateTimestamps.__init__rI r, c C s d t| S )Nz!rK r/ r' r' r( r[ s z$SignedCertificateTimestamps.__repr__c C s t t| jS r! rL r/ r' r' r( rp s z$SignedCertificateTimestamps.__hash__rh c C s t |tstS | j|jkS r! )r" rM rj rI rk r' r' r( rl s
z"SignedCertificateTimestamps.__eq__c C s
| |k S r! r' rk r' r' r( rm s z"SignedCertificateTimestamps.__ne__c C s
t | S r! rr r/ r' r' r( r# s z(SignedCertificateTimestamps.public_bytes)rB rC rD r Z SIGNED_CERTIFICATE_TIMESTAMPSr; rJ r\ r r= r7 r^ r_ r` rE r[ r6 rp rt ru rl rm rM r# r' r' r' r( rM s
rM c @ s e Zd ZejZeddddZej e
dddZ ej e
ddd Z e
d
d d Zed
d
dZeed
ddZed
ddZdS ) OCSPNonceN)noncer c C s t |tstd|| _d S )Nznonce must be bytes)r" rM rX _nonce)r0 rO r' r' r( r= s
zOCSPNonce.__init__rh c C s t |tstS | j|jkS r! )r" rN rj rO rk r' r' r( rl s
zOCSPNonce.__eq__c C s
| |k S r! r' rk r' r' r( rm s zOCSPNonce.__ne__r, c C s
t | jS r! )ro rO r/ r' r' r( rp s zOCSPNonce.__hash__c C s
d | S )Nz r r/ r' r' r( r[ s zOCSPNonce.__repr__c C s | j S r! )rP r/ r' r' r( rO s zOCSPNonce.noncec C s
t | S r! rr r/ r' r' r( r# s zOCSPNonce.public_bytes)rB rC rD r ZNONCEr; rM r= rJ rt ru rl rm r6 rp rE r[ rv rO r# r' r' r' r( rN s rN c @ s6 e Zd ZejZejeje eje
e e ejej e
e e ddddZedddZeje dd d
Zeje dd d Zedd
dZeejeje dddZeeje
dddZee dddZee dddZeejej e
dddZ ee dddZ ee ddd Z e dd d Z dS ) IssuingDistributionPointN)r r only_contains_user_certsonly_contains_ca_certsonly_some_reasons indirect_crl only_contains_attribute_certsr c C s |d urt |}|r8t|tr0tdd |D s8td|rXtj|v sPtj|v rXtdt|t rt|t rt|t rt|t std||||g}t
dd |D dkrtd t |||||||gstd
|| _ || _
|| _|| _|| _|| _|| _d S ) Nc s s | ]}t |tV qd S r! r r| r' r' r( r r z4IssuingDistributionPoint.__init__..z:only_some_reasons must be None or frozenset of ReasonFlagszTunspecified and remove_from_crl are not valid reasons in an IssuingDistributionPointzuonly_contains_user_certs, only_contains_ca_certs, indirect_crl and only_contains_attribute_certs must all be boolean.c S s g | ] }|r|qS r' r' r| r' r' r( r2 r z5IssuingDistributionPoint.__init__..r zOnly one of the following can be set to True: only_contains_user_certs, only_contains_ca_certs, indirect_crl, only_contains_attribute_certszCannot create empty extension: if only_contains_user_certs, only_contains_ca_certs, indirect_crl, and only_contains_attribute_certs are all False, then either full_name, relative_name, or only_some_reasons must have a value.)rQ r" r r rX r r r r ru r- r _only_contains_user_certs_only_contains_ca_certs
_indirect_crl _only_contains_attribute_certs_only_some_reasonsr r ) r0 r r rR rS rT rU rV Zcrl_constraintsr' r' r( r= st
z!IssuingDistributionPoint.__init__r, c C s
d | S )NaG r r/ r' r' r( r[ ' s z!IssuingDistributionPoint.__repr__rh c C sb t |tstS | j|jko`| j|jko`| j|jko`| j|jko`| j|jko`| j|jko`| j |j kS r! )
r" rQ rj r r rR rS rT rU rV rk r' r' r( rl 3 s"
z IssuingDistributionPoint.__eq__c C s
| |k S r! r' rk r' r' r( rm B s z IssuingDistributionPoint.__ne__c C s$ t | j| j| j| j| j| j| jfS r! )ro r r rR rS rT rU rV r/ r' r' r( rp E s z!IssuingDistributionPoint.__hash__c C s | j S r! r r/ r' r' r( r R s z"IssuingDistributionPoint.full_namec C s | j S r! r r/ r' r' r( r V s z&IssuingDistributionPoint.relative_namec C s | j S r! )rW r/ r' r' r( rR Z s z1IssuingDistributionPoint.only_contains_user_certsc C s | j S r! )rX r/ r' r' r( rS ^ s z/IssuingDistributionPoint.only_contains_ca_certsc C s | j S r! )r[ r/ r' r' r( rT b s z*IssuingDistributionPoint.only_some_reasonsc C s | j S r! )rY r/ r' r' r( rU h s z%IssuingDistributionPoint.indirect_crlc C s | j S r! )rZ r/ r' r' r( rV l s z6IssuingDistributionPoint.only_contains_attribute_certsc C s
t | S r! rr r/ r' r' r( r# p s z%IssuingDistributionPoint.public_bytes)!rB rC rD r ZISSUING_DISTRIBUTION_POINTr; rJ r r\ r r ru r r r= rE r[ rt rl rm r6 rp rv r r r rR rS rT rU rV rM r# r' r' r' r( rQ s< S
rQ c @ s e Zd ZeeddddZeedddZeeddd Ze dd
d Z
e j e
d d
dZe j e
d ddZedddZedddZdS )rW N)r; rY r c C s" t |tstd|| _|| _d S )Nz oid must be an ObjectIdentifier)r" r rX r! r# )r0 r; rY r' r' r( r= u s
z UnrecognizedExtension.__init__r, c C s | j S r! r$ r/ r' r' r( r; { s zUnrecognizedExtension.oidc C s | j S r! r% r/ r' r' r( rY s zUnrecognizedExtension.valuec C s
d | S )Nz7r r/ r' r' r( r[ s z UnrecognizedExtension.__repr__rh c C s& t |tstS | j|jko$| j|jkS r! )r" rW rj r; rY rk r' r' r( rl s
z UnrecognizedExtension.__eq__c C s
| |k S r! r' rk r' r' r( rm s z UnrecognizedExtension.__ne__c C s t | j| jfS r! )ro r; rY r/ r' r' r( rp s z UnrecognizedExtension.__hash__c C s | j S r! r r/ r' r' r( r# s z"UnrecognizedExtension.public_bytes)rB rC rD r rM r= rv r; rY rE r[ rJ rt ru rl rm r6 rp r# r' r' r' r( rW t s rW )gabcr@ r$ r rJ Z cryptographyr Z"cryptography.hazmat.bindings._rustr r rs Z cryptography.hazmat.primitivesr r Z,cryptography.hazmat.primitives.asymmetric.ecr Z-cryptography.hazmat.primitives.asymmetric.rsar Z/cryptography.hazmat.primitives.asymmetric.typesr r
Z*cryptography.x509.certificate_transparencyr Z cryptography.x509.general_namer r
r r r r r r r Zcryptography.x509.namer r Zcryptography.x509.oidr r r r TypeVarr rM r) rE r7 Exceptionr8 rG ABCMetar objectrO ra rw r r r r r r r r r Enumr r r r r r r r r Z_REASON_BIT_MAPPINGr r r r r r r r r r Z_TLS_FEATURE_TYPE_TO_ENUMr r r Genericr r& r5 r9 r: r; r> rB rM rN rQ rW r' r' r' r( s ,
' o'$$+1 ((s D"@.+!% # e3\TTT "0. $