a
a8 @ s6 d dl Z d dlZd dlZd dlmZ d dlmZ d dlmZ d dlm Z m
Z
d dl m Z m
Z
mZmZ G dd dejZG d d
d
ejZe je je je je jfZd d ZG d
d dejZG dd deZ G dd de j dZ G dd de j dZ G dd deZ G dd deZ!e"e ddd Z#e"e dd d Z$dS ) N)utils)x509)ocsp)hashes
serialization)PRIVATE_KEY_TYPES_EARLIEST_UTC_TIME_convert_to_naive_utc_time_reject_duplicate_extensionc @ s e Zd ZdZdZdS )OCSPResponderEncodingzBy HashzBy NameN)__name__
__module__ __qualname__ZHASHNAME r r r
Extensionsr? r r r r r/ s r/ ) metaclassc @ s e Zd ZejedddZejejdddZ eje
j e j
dddZejeddd Zejedd
d Zeje
jej dd d
Zeje
j e dddZeje
j ej dddZejejdddZejedddZeje
j ej dddZ eje
j ej dddZ ejejdddZ eje
j ej dd d Z ejedd d Z!ejedd d!Z"eje j
dd"d#Z#eje$dd$d%Z%ejej&dd&d'Z'ejej&dd(d)Z(ej)e*j+ed*d+d,Z,d-S ). OCSPResponser0 c C s dS )zm
The status of the response. This is a value from the OCSPResponseStatus
enumeration
Nr r3 r r r response_status s z OCSPResponse.response_statusc C s dS )zA
The ObjectIdentifier of the signature algorithm
Nr r3 r r r signature_algorithm_oid s z$OCSPResponse.signature_algorithm_oidc C s dS )zX
Returns a HashAlgorithm corresponding to the type of the digest signed
Nr r3 r r r signature_hash_algorithm s z%OCSPResponse.signature_hash_algorithmc C s dS )z%
The signature bytes
Nr r3 r r r signature s zOCSPResponse.signaturec C s dS )z+
The tbsResponseData bytes
Nr r3 r r r tbs_response_bytes s z OCSPResponse.tbs_response_bytesc C s dS )z
A list of certificates used to help build a chain to verify the OCSP
response. This situation occurs when the OCSP responder uses a delegate
certificate.
Nr r3 r r r certificates s zOCSPResponse.certificatesc C s dS )z2
The responder's key hash or None
Nr r3 r r r responder_key_hash s z OCSPResponse.responder_key_hashc C s dS )z.
The responder's Name or None
Nr r3 r r r responder_name s zOCSPResponse.responder_namec C s dS )z4
The time the response was produced
Nr r3 r r r produced_at s zOCSPResponse.produced_atc C s dS )zY
The status of the certificate (an element from the OCSPCertStatus enum)
Nr r3 r r r certificate_status s z OCSPResponse.certificate_statusc C s dS )z^
The date of when the certificate was revoked or None if not
revoked.
Nr r3 r r r r, s z OCSPResponse.revocation_timec C s dS )zi
The reason the certificate was revoked or None if not specified or
not revoked.
Nr r3 r r r r- s z OCSPResponse.revocation_reasonc C s dS )z
The most recent time at which the status being indicated is known by
the responder to have been correct
Nr r3 r r r r* s zOCSPResponse.this_updatec C s dS )zC
The time when newer information will be available
Nr r3 r r r r+ s zOCSPResponse.next_updatec C s dS r2 r r3 r r r r4 s z OCSPResponse.issuer_key_hashc C s dS r5 r r3 r r r r6 s z OCSPResponse.issuer_name_hashc C s dS r7 r r3 r r r r8 s zOCSPResponse.hash_algorithmc C s dS r9 r r3 r r r r: s zOCSPResponse.serial_numberc C s dS )zR
The list of response extensions. Not single response extensions.
Nr r3 r r r r? s zOCSPResponse.extensionsc C s dS )zR
The list of single response extensions. Not response extensions.
Nr r3 r r r single_extensions! s z OCSPResponse.single_extensionsr; c C s dS )z0
Serializes the response to DER
Nr r= r r r r> ' s zOCSPResponse.public_bytesN)-r r
r r@ rA r rJ r ZObjectIdentifierrK typingOptionalr rC rL rB rM rN Listr" rO rP NamerQ r$ rR r rS r, r% r- r* r+ r4 r6 r8 rD r: rG r? rT rE r rF r> r r r r rI sV
rI c @ s e Zd Zdg fejejejejej f ej
ej ej ddddZ
ejejej d dddZej ed dd d
Zed d d
ZdS )OCSPRequestBuilderN)requestr? r1 c C s || _ || _d S N)_request _extensions)r& rZ r? r r r r. / s zOCSPRequestBuilder.__init__)r' r( r r1 c C sL | j d urtdt| t|tjr2t|tjs:tdt|||f| jS )Nz.Only one certificate can be added to a requestr! ) r\ r r r r r" r# rY r] )r& r' r( r r r r add_certificate; s
z"OCSPRequestBuilder.add_certificateextvalcriticalr1 c C sD t |tjstdt|j||}t|| j t| j | j|g S Nz"extension must be an ExtensionType)
r r
ExtensionTyper# Extensionoidr
r] rY r\ r& r` ra extensionr r r
add_extensionL s z OCSPRequestBuilder.add_extensionr0 c C s | j d u rtdt| S )Nz*You must add a certificate before building)r\ r r Zcreate_ocsp_requestr3 r r r buildY s
zOCSPRequestBuilder.build)r r
r rU rV Tupler r" r rC rW rd rc r. r^ boolrh r/ ri r r r r rY . s(
rY c
@ s
e Zd Zdddg feje ejejeje f ejej
ej ej
ej ej dddZ
ejejejeejejej ejej ejej d d ddZe ejd dd d
Zejej d d d d
Zej ed dddZeejej edddZe e edddZ dS )OCSPResponseBuilderN)response responder_idcertsr? c C s || _ || _|| _|| _d S r[ ) _response
_responder_id_certsr] )r& rm rn ro r? r r r r. a s z OCSPResponseBuilder.__init__) r' r( r r) r* r+ r, r- r1 c
C s< | j d urtdt||||||||} t| | j| j| jS )Nz#Only one response per OCSPResponse.)rp r r rl rq rr r] )
r& r' r( r r) r* r+ r, r- Z
singlerespr r r add_responseo s$
z OCSPResponseBuilder.add_response)r< responder_certr1 c C sP | j d urtdt|tjs&tdt|ts8tdt| j||f| j | j
S )Nz!responder_id can only be set oncez$responder_cert must be a Certificatez6encoding must be an element from OCSPResponderEncoding) rq r r r r" r# r rl rp rr r] )r& r< rt r r r rn s
z OCSPResponseBuilder.responder_id)ro r1 c C s\ | j d urtdt|}t|dkr.tdtdd |D sHtdt| j| j|| j S )Nz!certificates may only be set oncer z certs must not be an empty listc s s | ]}t |tjV qd S r[ )r r r" ).0xr r r z3OCSPResponseBuilder.certificates..z$certs must be a list of Certificates)
rr r listlenallr# rl rp rq r] )r& ro r r r rO s
z OCSPResponseBuilder.certificatesr_ c C sL t |tjstdt|j||}t|| j t| j | j
| j | j|g S rb ) r r rc r# rd re r
r] rl rp rq rr rf r r r rh s
z!OCSPResponseBuilder.add_extension) private_keyr r1 c C s6 | j d u rtd| jd u r$tdttj| ||S )Nz&You must add a response before signingz*You must add a responder_id before signing)rp r rq r create_ocsp_responser r )r& r| r r r r sign s
zOCSPResponseBuilder.sign)rJ r1 c C s4 t |tstd|tju r$tdt|d d d S )Nz7response_status must be an item from OCSPResponseStatusz$response_status cannot be SUCCESSFUL)r r r# r r r r} )clsrJ r r r build_unsuccessful s
z&OCSPResponseBuilder.build_unsuccessful) r r
r rU rV r rj r r" r rW rd rc r. r rC r r$ r% rs rn IterablerO rk rh r rI r~ classmethodr r r r r r rl ` sN
rl )datar1 c C s
t | S r[ )r load_der_ocsp_requestr r r r r s r c C s
t | S r[ )r load_der_ocsp_responser r r r r s r )%r@ r$ rU Z cryptographyr r Z"cryptography.hazmat.bindings._rustr Z cryptography.hazmat.primitivesr r Zcryptography.x509.baser r r r
Enumr r ZSHA1ZSHA224ZSHA256ZSHA384ZSHA512r r r objectr ABCMetar/ rI rY rl rB r r r r r r s2
F& 2~