File: //var/opt/nydus/ops/cryptography/hazmat/primitives/serialization/__pycache__/pkcs7.cpython-39.pyc
a
�,�h� � @ s� d dl Z d dlmZ d dlmZ d dlmZmZ d dlmZm Z d dl
m Z e e j
ej d�dd �Ze e j
ej d�d
d �Ze j
ej eje d �d
d�Ze jejejejejejf Ze je jejf Z G dd� dej �Z G dd� d�Z dS )� N)�utils)�x509)�hashes�
serialization)�ec�rsa)�_check_byteslike��data�returnc C s ddl m} |�| �S �Nr ��backend)�,cryptography.hazmat.backends.openssl.backendr �load_pem_pkcs7_certificates�r
r � r �e/opt/nydus/tmp/pip-target-wkfpz8uv/lib64/python/cryptography/hazmat/primitives/serialization/pkcs7.pyr s r c C s ddl m} |�| �S r )r r �load_der_pkcs7_certificatesr r r r r s r )�certs�encodingr c C s ddl m} |�| |�S r )r r Z pkcs7_serialize_certificates)r r r r r r �serialize_certificates s r c @ s$ e Zd ZdZdZdZdZdZdZdS )� PKCS7OptionszAdd text/plain MIME typez5Don't translate input data into canonical MIME formatz'Don't embed data in the PKCS7 structurez Don't embed SMIME capabilitiesz#Don't embed authenticatedAttributesz Don't embed signer certificateN) �__name__�
__module__� __qualname__�Text�Binary�DetachedSignature�NoCapabilities� NoAttributesZNoCertsr r r r r 0 s r c @ s� e Zd Zdg g feje ejejej e
e f ejej d�dd�Z ed d�dd�Z
ej e
e d d�d d
�Zej d d �d d
�Zdejeje ejed�dd�ZdS )�PKCS7SignatureBuilderN)r
�signers�additional_certsc C s || _ || _|| _d S �N)�_data�_signers�_additional_certs)�selfr
r" r# r r r �__init__: s z PKCS7SignatureBuilder.__init__r c C s( t d|� | jd ur td��t|| j�S )Nr
zdata may only be set once)r r% �
ValueErrorr! r& )r( r
r r r �set_dataJ s
z PKCS7SignatureBuilder.set_data)� certificate� private_key�hash_algorithmr c C sn t |tjtjtjtjtjf�s&td��t |tj �s:td��t |t
j t j
f�sTtd��t| j| j|||fg �S )NzLhash_algorithm must be one of hashes.SHA1, SHA224, SHA256, SHA384, or SHA512�&certificate must be a x509.Certificatez.Only RSA & EC keys are supported at this time.)�
isinstancer �SHA1�SHA224�SHA256�SHA384�SHA512� TypeErrorr � Certificater �
RSAPrivateKeyr �EllipticCurvePrivateKeyr! r% r& )r( r, r- r. r r r �
add_signerQ s, ��
� ��z PKCS7SignatureBuilder.add_signer)r, r c C s, t |tj�std��t| j| j| j|g �S )Nr/ )r0 r r7 r6 r! r% r& r' )r( r, r r r �add_certificater s
�z%PKCS7SignatureBuilder.add_certificate)r �optionsr r c C s� t | j�dkrtd��| jd u r(td��t|�}tdd� |D ��sJtd��|tjjtjj tjj
fvrltd��t j |v r�t j
|vr�td��t j |v r�|tjj tjjfv r�td ��t j|v r�t j|v r�td
��dd lm} |�| ||�S ) Nr z Must have at least one signerzYou must add data to signc s s | ]}t |t�V qd S r$ )r0 r )�.0�xr r r � <genexpr>� � z-PKCS7SignatureBuilder.sign.<locals>.<genexpr>z*options must be from the PKCS7Options enumz1Must be PEM, DER, or SMIME from the Encoding enumzAWhen passing the Text option you must also pass DetachedSignaturez9The Text option is only available for SMIME serializationzFNoAttributes is a superset of NoCapabilities. Do not pass both values.r
)�lenr& r* r% �list�allr �EncodingZPEMZDERZSMIMEr r r r r r r Z
pkcs7_sign)r( r r< r Zosslr r r �sign| sL
����� ����� zPKCS7SignatureBuilder.sign)N)r r r �typing�Optional�bytes�List�Tupler r7 �_ALLOWED_PRIVATE_KEY_TYPES�_ALLOWED_PKCS7_HASH_TYPESr) r+ r: r; r rD �Iterabler �AnyrE r r r r r! 9 s> ����
� � "� ��r! ) rF Z cryptographyr r Z cryptography.hazmat.primitivesr r Z)cryptography.hazmat.primitives.asymmetricr r Zcryptography.utilsr rH rI r7 r r rD r �Unionr1 r2 r3 r4 r5 rL r8 r9 rK �Enumr r! r r r r �<module> s0
� ��
�