File: //var/opt/nydus/ops/cryptography/x509/__pycache__/extensions.cpython-39.pyc
a
�,�h� � @ s� d dl Z d dlZd dlZd dlZd dlZd dlmZ d dlmZ d dlm Z
d dl m Z m
Z
d dlmZ d dlmZ d dlmZmZ d d lmZ d d
lmZmZmZmZm Z m Z m Z m Z m Z d d l!m"Z"m#Z# d d l$m%Z%m&Z&m'Z'm(Z( ej)d
ddd�Z*ee+d�dd�Z,e-d�dd�Z.G dd� de/�Z0G dd� de/�Z1G dd� de j2d �Z3G d d � d �Z4G d d � d e3�Z5G d!d"� d"e3�Z6G d#d$� d$e3�Z7G d%d&� d&e3�Z8G d'd(� d(e3�Z9G d)d*� d*�Z:G d+d,� d,e3�Z;G d-d.� d.e3�Z<G d/d0� d0e3�Z=G d1d2� d2e3�Z>G d3d4� d4�Z?G d5d6� d6ej@�ZAeAjBeAjCeAjDeAjEeAjFeAjGeAjHeAjId7�ZJG d8d9� d9e3�ZKG d:d;� d;e3�ZLG d<d=� d=�ZMG d>d?� d?�ZNG d@dA� dA�ZOG dBdC� dCe3�ZPG dDdE� dEe3�ZQG dFdG� dGe3�ZRG dHdI� dIe3�ZSG dJdK� dKej@�ZTdLdM� eTD �ZUG dNdO� dOe3�ZVG dPdQ� dQe3�ZWG dRdS� dSe3�ZXG dTdU� dUejYe* �ZZG dVdW� dW�Z[G dXdY� dYe3�Z\G dZd[� d[e3�Z]G d\d]� d]e3�Z^G d^d_� d_e3�Z_G d`da� dae3�Z`G dbdc� dce3�ZaG ddde� dee3�ZbG dfdg� dge3�ZcG dhdi� die3�ZdG djdk� dke3�ZedS )l� N)�utils)�asn1)�x509)�
constant_time�
serialization)�EllipticCurvePublicKey)� RSAPublicKey)�#CERTIFICATE_ISSUER_PUBLIC_KEY_TYPES� CERTIFICATE_PUBLIC_KEY_TYPES)�SignedCertificateTimestamp) �DNSName�
DirectoryName� GeneralName� IPAddress� OtherName�
RFC822Name� RegisteredID�UniformResourceIdentifier�_IPADDRESS_TYPES)�Name�RelativeDistinguishedName)�CRLEntryExtensionOID� ExtensionOID�OCSPExtensionOID�ObjectIdentifier�ExtensionTypeVar�
ExtensionTypeT)�bound� covariant��
public_key�returnc C sl t | t�r | �tjjtjj�}n>t | t�r@| �tjj tjj
�}n | �tjjtjj �}t �
|�}t�|��� S �N)�
isinstancer � public_bytesr �EncodingZDERZ PublicFormatZPKCS1r ZX962ZUncompressedPointZSubjectPublicKeyInfor Zparse_spki_for_data�hashlib�sha1�digest)r �dataZ
serialized� r* �O/opt/nydus/tmp/pip-target-wkfpz8uv/lib64/python/cryptography/x509/extensions.py� _key_identifier_from_public_key1 s
�
��
r, ��
field_namec s4 t d�� fdd� }� fdd�}� fdd�}|||fS )N�r! c s t t| � ��S r" )�len�getattr��selfr- r* r+ �
len_methodJ s z*_make_sequence_methods.<locals>.len_methodc s t t| � ��S r" )�iterr1 r2 r- r* r+ � iter_methodM s z+_make_sequence_methods.<locals>.iter_methodc s t | � �| S r" )r1 )r3 �idxr- r* r+ �getitem_methodP s z._make_sequence_methods.<locals>.getitem_method)�int)r. r4 r6 r8 r* r- r+ �_make_sequence_methodsI s r: c s& e Zd Zeedd�� fdd� Z� ZS )�DuplicateExtensionN��msg�oidr! c s t t| ��|� || _d S r" )�superr; �__init__r> �r3 r= r> �� __class__r* r+ r@ W s zDuplicateExtension.__init__��__name__�
__module__� __qualname__�strr r@ �
__classcell__r* r* rB r+ r; V s r; c s& e Zd Zeedd�� fdd� Z� ZS )�ExtensionNotFoundNr< c s t t| ��|� || _d S r" )r? rJ r@ r> rA rB r* r+ r@ ] s zExtensionNotFound.__init__rD r* r* rB r+ rJ \ s rJ c @ s* e Zd ZU eje ed< ed�dd�ZdS )r r> r/ c C s t d�| ���dS )z7
Serializes the extension type to DER.
z8public_bytes is not implemented for extension type {0!r}N)�NotImplementedError�formatr2 r* r* r+ r$ e s
��zExtensionType.public_bytesN) rE rF rG �typing�ClassVarr �__annotations__�bytesr$ r* r* r* r+ r b s
)� metaclassc @ sd e Zd Zejd dd�dd�Zedd�dd�Zeje d d
�d d �Z
e d
�\Z Z
Zed�dd�ZdS )�
ExtensionszExtension[ExtensionType]N)�
extensionsr! c C s t |�| _d S r" )�list� _extensions)r3 rS r* r* r+ r@ q s zExtensions.__init__)r> r! c C s0 | D ]}|j |kr| S qtd�|�|��d S )N�No {} extension was found)r> rJ rL )r3 r> �extr* r* r+ �get_extension_for_oidv s
z Extensions.get_extension_for_oidzExtension[ExtensionTypeVar])�extclassr! c C sD |t u rtd��| D ]}t|j|�r| S qtd�|�|j��d S )Nz|UnrecognizedExtension can't be used with get_extension_for_class because more than one instance of the class may be present.rV )�UnrecognizedExtension� TypeErrorr# �valuerJ rL r> )r3 rY rW r* r* r+ �get_extension_for_class s �
�z"Extensions.get_extension_for_classrU r/ c C s d� | j�S )Nz<Extensions({})>)rL rU r2 r* r* r+ �__repr__� s zExtensions.__repr__)rE rF rG rM �Iterabler@ r rX �Typer r] r: �__len__�__iter__� __getitem__rH r^ r* r* r* r+ rR p s � �
� rR c @ sn e Zd ZejZedd�dd�Zee d�dd�Z
ed�d d
�Z e d�d d �Z
eed�d
d��Zed�dd�ZdS )� CRLNumberN��
crl_numberr! c C s t |t�std��|| _d S �Nz crl_number must be an integer�r# r9 r[ � _crl_number�r3 rf r* r* r+ r@ � s
zCRLNumber.__init__��otherr! c C s t |t�stS | j|jkS r" )r# rd �NotImplementedrf �r3 rl r* r* r+ �__eq__� s
zCRLNumber.__eq__r/ c C s
t | j�S r" ��hashrf r2 r* r* r+ �__hash__� s zCRLNumber.__hash__c C s d� | j�S )Nz<CRLNumber({})>)rL rf r2 r* r* r+ r^ � s zCRLNumber.__repr__c C s | j S r" �ri r2 r* r* r+ rf � s zCRLNumber.crl_numberc C s
t �| �S r" �� rust_x509Zencode_extension_valuer2 r* r* r+ r$ � s zCRLNumber.public_bytes)rE rF rG r Z
CRL_NUMBERr> r9 r@ �object�boolro rr rH r^ �propertyrf rP r$ r* r* r* r+ rd � s rd c @ s� e Zd ZejZeje ejej e
eje dd�dd�Z e
ed d�dd��Ze
dd d �d
d ��Zed �d
d�Zeed�dd�Ze d �dd�Zeeje d �dd��Zeejeje
d �dd��Zeeje d �dd��Zed �dd�Z dS ) �AuthorityKeyIdentifierN)�key_identifier�authority_cert_issuer� authority_cert_serial_numberr! c C sr |d u |d u krt d��|d urBt|�}tdd� |D ��sBtd��|d ur\t|t�s\td��|| _|| _|| _d S )NzXauthority_cert_issuer and authority_cert_serial_number must both be present or both Nonec s s | ]}t |t�V qd S r" �r# r ��.0�xr* r* r+ � <genexpr>� s z2AuthorityKeyIdentifier.__init__.<locals>.<genexpr>z;authority_cert_issuer must be a list of GeneralName objectsz/authority_cert_serial_number must be an integer) �
ValueErrorrT �allr[ r# r9 �_key_identifier�_authority_cert_issuer� _authority_cert_serial_number)r3 rz r{ r| r* r* r+ r@ � s* ����
�z AuthorityKeyIdentifier.__init__r c C s t |�}| |d d d�S �N)rz r{ r| �r, )�clsr r( r* r* r+ �from_issuer_public_key� s �z-AuthorityKeyIdentifier.from_issuer_public_key�SubjectKeyIdentifier)�skir! c C s | |j d d d�S r� )r( )r� r� r* r* r+ �"from_issuer_subject_key_identifier� s
�z9AuthorityKeyIdentifier.from_issuer_subject_key_identifierr/ c C s
d� | �S )Nz�<AuthorityKeyIdentifier(key_identifier={0.key_identifier!r}, authority_cert_issuer={0.authority_cert_issuer}, authority_cert_serial_number={0.authority_cert_serial_number})>�rL r2 r* r* r+ r^ � s ��z AuthorityKeyIdentifier.__repr__rk c C s2 t |t�stS | j|jko0| j|jko0| j|jkS r" )r# ry rm rz r{ r| rn r* r* r+ ro � s
���z AuthorityKeyIdentifier.__eq__c C s, | j d u rd }n
t| j �}t| j|| jf�S r" )r{ �tuplerq rz r| )r3 Zacir* r* r+ rr s
�z AuthorityKeyIdentifier.__hash__c C s | j S r" )r� r2 r* r* r+ rz s z%AuthorityKeyIdentifier.key_identifierc C s | j S r" )r� r2 r* r* r+ r{ s z,AuthorityKeyIdentifier.authority_cert_issuerc C s | j S r" )r� r2 r* r* r+ r| s z3AuthorityKeyIdentifier.authority_cert_serial_numberc C s
t �| �S r" rt r2 r* r* r+ r$ s z#AuthorityKeyIdentifier.public_bytes) rE rF rG r ZAUTHORITY_KEY_IDENTIFIERr> rM �OptionalrP r_ r r9 r@ � classmethodr r� r� rH r^ rv rw ro rr rx rz �Listr{ r| r$ r* r* r* r+ ry � s2 � &�
� �ry c @ s� e Zd ZejZedd�dd�Zee d d�dd��Z
e ed�d d
��Z e ed�d d ��Z
ed�d
d�Zeed�dd�Zed�dd�Zed�dd�ZdS )r� N)r( r! c C s
|| _ d S r" �Z_digest)r3 r( r* r* r+ r@ # s z SubjectKeyIdentifier.__init__r c C s | t |��S r" r� )r� r r* r* r+ �from_public_key& s z$SubjectKeyIdentifier.from_public_keyr/ c C s | j S r" r� r2 r* r* r+ r( , s zSubjectKeyIdentifier.digestc C s | j S r" r� r2 r* r* r+ rz 0 s z#SubjectKeyIdentifier.key_identifierc C s d� | j�S )Nz$<SubjectKeyIdentifier(digest={0!r})>)rL r( r2 r* r* r+ r^ 4 s z SubjectKeyIdentifier.__repr__rk c C s t |t�stS t�| j|j�S r" )r# r� rm r Zbytes_eqr( rn r* r* r+ ro 7 s
zSubjectKeyIdentifier.__eq__c C s
t | j�S r" )rq r( r2 r* r* r+ rr = s z SubjectKeyIdentifier.__hash__c C s
t �| �S r" rt r2 r* r* r+ r$ @ s z!SubjectKeyIdentifier.public_bytes)rE rF rG r ZSUBJECT_KEY_IDENTIFIERr> rP r@ r� r
r� rx r( rz rH r^ rv rw ro r9 rr r$ r* r* r* r+ r� s �r� c @ sp e Zd ZejZejd dd�dd�Ze d�\Z
Z Z e
d�dd �Zeed
�d d �Zed�d
d�Zed�dd�ZdS )�AuthorityInformationAccess�AccessDescriptionN�� descriptionsr! c C s, t |�}tdd� |D ��s"td��|| _d S )Nc s s | ]}t |t�V qd S r" �r# r� r~ r* r* r+ r� K � z6AuthorityInformationAccess.__init__.<locals>.<genexpr>�@Every item in the descriptions list must be an AccessDescription�rT r� r[ �
_descriptions�r3 r� r* r* r+ r@ G s �z#AuthorityInformationAccess.__init__r� r/ c C s d� | j�S )Nz <AuthorityInformationAccess({})>�rL r� r2 r* r* r+ r^ U s z#AuthorityInformationAccess.__repr__rk c C s t |t�stS | j|jkS r" )r# r� rm r� rn r* r* r+ ro X s
z!AuthorityInformationAccess.__eq__c C s t t| j��S r" �rq r� r� r2 r* r* r+ rr ^ s z#AuthorityInformationAccess.__hash__c C s
t �| �S r" rt r2 r* r* r+ r$ a s z'AuthorityInformationAccess.public_bytes)rE rF rG r Z AUTHORITY_INFORMATION_ACCESSr> rM r_ r@ r: ra rb rc rH r^ rv rw ro r9 rr rP r$ r* r* r* r+ r� D s � r� c @ sp e Zd ZejZejd dd�dd�Ze d�\Z
Z Z e
d�dd �Zeed
�d d �Zed�d
d�Zed�dd�ZdS )�SubjectInformationAccessr� Nr� c C s, t |�}tdd� |D ��s"td��|| _d S )Nc s s | ]}t |t�V qd S r" r� r~ r* r* r+ r� l r� z4SubjectInformationAccess.__init__.<locals>.<genexpr>r� r� r� r* r* r+ r@ h s �z!SubjectInformationAccess.__init__r� r/ c C s d� | j�S )Nz <SubjectInformationAccess({})>r� r2 r* r* r+ r^ v s z!SubjectInformationAccess.__repr__rk c C s t |t�stS | j|jkS r" )r# r� rm r� rn r* r* r+ ro y s
z SubjectInformationAccess.__eq__c C s t t| j��S r" r� r2 r* r* r+ rr s z!SubjectInformationAccess.__hash__c C s
t �| �S r" rt r2 r* r* r+ r$ � s z%SubjectInformationAccess.public_bytes)rE rF rG r ZSUBJECT_INFORMATION_ACCESSr> rM r_ r@ r: ra rb rc rH r^ rv rw ro r9 rr rP r$ r* r* r* r+ r� e s � r� c @ sn e Zd Zeedd�dd�Zed�dd�Zee d�d d
�Z
e d�d d �Z e
ed�d
d��Ze
ed�dd��ZdS )r� N)�
access_method�access_locationr! c C s4 t |t�std��t |t�s$td��|| _|| _d S )Nz)access_method must be an ObjectIdentifierz%access_location must be a GeneralName)r# r r[ r �_access_method�_access_location)r3 r� r� r* r* r+ r@ � s
zAccessDescription.__init__r/ c C s
d� | �S )NzY<AccessDescription(access_method={0.access_method}, access_location={0.access_location})>r� r2 r* r* r+ r^ � s ��zAccessDescription.__repr__rk c C s& t |t�stS | j|jko$| j|jkS r" )r# r� rm r� r� rn r* r* r+ ro � s
�zAccessDescription.__eq__c C s t | j| jf�S r" )rq r� r� r2 r* r* r+ rr � s zAccessDescription.__hash__c C s | j S r" )r� r2 r* r* r+ r� � s z AccessDescription.access_methodc C s | j S r" )r� r2 r* r* r+ r� � s z!AccessDescription.access_location)rE rF rG r r r@ rH r^ rv rw ro r9 rr rx r� r� r* r* r* r+ r� � s � r� c @ s� e Zd ZejZeeje dd�dd�Z
e ed�dd��Z e eje d�dd ��Z
ed�d
d �Zeed �d
d�Ze d�dd�Zed�dd�ZdS )�BasicConstraintsN)�ca� path_lengthr! c C sX t |t�std��|d ur&|s&td��|d urHt |t�r@|dk rHtd��|| _|| _d S )Nzca must be a boolean valuez)path_length must be None when ca is Falser z2path_length must be a non-negative integer or None)r# rw r[ r� r9 �_ca� _path_length)r3 r� r� r* r* r+ r@ � s
���zBasicConstraints.__init__r/ c C s | j S r" )r� r2 r* r* r+ r� � s zBasicConstraints.cac C s | j S r" )r� r2 r* r* r+ r� � s z BasicConstraints.path_lengthc C s
d� | �S )Nz:<BasicConstraints(ca={0.ca}, path_length={0.path_length})>r� r2 r* r* r+ r^ � s ��zBasicConstraints.__repr__rk c C s& t |t�stS | j|jko$| j|jkS r" )r# r� rm r� r� rn r* r* r+ ro � s
zBasicConstraints.__eq__c C s t | j| jf�S r" )rq r� r� r2 r* r* r+ rr � s zBasicConstraints.__hash__c C s
t �| �S r" rt r2 r* r* r+ r$ � s z BasicConstraints.public_bytes)rE rF rG r ZBASIC_CONSTRAINTSr> rw rM r� r9 r@ rx r� r� rH r^ rv ro rr rP r$ r* r* r* r+ r� � s r� c @ sn e Zd ZejZedd�dd�Zeed�dd��Z e
e d�d d
�Z ed�d d �Z
ed�d
d�Zed�dd�ZdS )�DeltaCRLIndicatorNre c C s t |t�std��|| _d S rg rh rj r* r* r+ r@ � s
zDeltaCRLIndicator.__init__r/ c C s | j S r" rs r2 r* r* r+ rf � s z DeltaCRLIndicator.crl_numberrk c C s t |t�stS | j|jkS r" )r# r� rm rf rn r* r* r+ ro � s
zDeltaCRLIndicator.__eq__c C s
t | j�S r" rp r2 r* r* r+ rr � s zDeltaCRLIndicator.__hash__c C s
d� | �S )Nz.<DeltaCRLIndicator(crl_number={0.crl_number})>r� r2 r* r* r+ r^ � s zDeltaCRLIndicator.__repr__c C s
t �| �S r" rt r2 r* r* r+ r$ � s z DeltaCRLIndicator.public_bytes)rE rF rG r ZDELTA_CRL_INDICATORr> r9 r@ rx rf rv rw ro rr rH r^ rP r$ r* r* r* r+ r� � s r� c @ sp e Zd ZejZejd dd�dd�Ze d�\Z
Z Z e
d�dd �Zeed
�d d �Zed�d
d�Zed�dd�ZdS )�CRLDistributionPoints�DistributionPointN��distribution_pointsr! c C s, t |�}tdd� |D ��s"td��|| _d S )Nc s s | ]}t |t�V qd S r" �r# r� r~ r* r* r+ r� s z1CRLDistributionPoints.__init__.<locals>.<genexpr>�?distribution_points must be a list of DistributionPoint objects�rT r� r[ �_distribution_points�r3 r� r* r* r+ r@ � s ��z CRLDistributionPoints.__init__r� r/ c C s d� | j�S )Nz<CRLDistributionPoints({})>�rL r� r2 r* r* r+ r^ s z CRLDistributionPoints.__repr__rk c C s t |t�stS | j|jkS r" )r# r� rm r� rn r* r* r+ ro s
z CRLDistributionPoints.__eq__c C s t t| j��S r" �rq r� r� r2 r* r* r+ rr s z CRLDistributionPoints.__hash__c C s
t �| �S r" rt r2 r* r* r+ r$ s z"CRLDistributionPoints.public_bytes)rE rF rG r ZCRL_DISTRIBUTION_POINTSr> rM r_ r@ r: ra rb rc rH r^ rv rw ro r9 rr rP r$ r* r* r* r+ r� � s � �
r� c @ sp e Zd ZejZejd dd�dd�Ze d�\Z
Z Z e
d�dd �Zeed
�d d �Zed�d
d�Zed�dd�ZdS )� FreshestCRLr� Nr� c C s, t |�}tdd� |D ��s"td��|| _d S )Nc s s | ]}t |t�V qd S r" r� r~ r* r* r+ r� % s z'FreshestCRL.__init__.<locals>.<genexpr>r� r� r� r* r* r+ r@ ! s ��zFreshestCRL.__init__r� r/ c C s d� | j�S )Nz<FreshestCRL({})>r� r2 r* r* r+ r^ 3 s zFreshestCRL.__repr__rk c C s t |t�stS | j|jkS r" )r# r� rm r� rn r* r* r+ ro 6 s
zFreshestCRL.__eq__c C s t t| j��S r" r� r2 r* r* r+ rr < s zFreshestCRL.__hash__c C s
t �| �S r" rt r2 r* r* r+ r$ ? s zFreshestCRL.public_bytes)rE rF rG r Z FRESHEST_CRLr> rM r_ r@ r: ra rb rc rH r^ rv rw ro r9 rr rP r$ r* r* r* r+ r� s � �
r� c @ s� e Zd Zejeje eje ejejd ejeje dd�dd�Z e
d�dd�Z e e
d �d
d �Zed�d d
�Zeejeje d�dd��Zeeje d�dd��Zeejejd d�dd��Zeejeje d�dd��ZdS )r� � ReasonFlagsN)� full_name�
relative_name�reasons�
crl_issuerr! c C s� |r|rt d��|d ur:t|�}tdd� |D ��s:td��|rPt|t�sPtd��|d urzt|�}tdd� |D ��sztd��|r�t|t�r�tdd� |D ��s�td ��|r�tj|v s�tj |v r�t d
��|r�|s�|s�|s�t d ��|| _
|| _ || _ || _
d S ) NzOYou cannot provide both full_name and relative_name, at least one must be None.c s s | ]}t |t�V qd S r" r} r~ r* r* r+ r� S r� z-DistributionPoint.__init__.<locals>.<genexpr>z/full_name must be a list of GeneralName objectsz1relative_name must be a RelativeDistinguishedNamec s s | ]}t |t�V qd S r" r} r~ r* r* r+ r� ` r� z2crl_issuer must be None or a list of general namesc s s | ]}t |t�V qd S r" �r# r� r~ r* r* r+ r� g r� z0reasons must be None or frozenset of ReasonFlagszLunspecified and remove_from_crl are not valid reasons in a DistributionPointzPYou must supply crl_issuer, full_name, or relative_name when reasons is not None)r� rT r� r[ r# r � frozensetr� � unspecified�remove_from_crl�
_full_name�_relative_name�_reasons� _crl_issuer)r3 r� r� r� r� r* r* r+ r@ D sV ��
��������zDistributionPoint.__init__r/ c C s
d� | �S )Nz}<DistributionPoint(full_name={0.full_name}, relative_name={0.relative_name}, reasons={0.reasons}, crl_issuer={0.crl_issuer})>r� r2 r* r* r+ r^ s ��zDistributionPoint.__repr__rk c C s> t |t�stS | j|jko<| j|jko<| j|jko<| j|jkS r" )r# r� rm r� r� r� r� rn r* r* r+ ro � s
�
�
�zDistributionPoint.__eq__c C sH | j d urt| j �}nd }| jd ur0t| j�}nd }t|| j| j|f�S r" )r� r� r� rq r� r� )r3 �fnr� r* r* r+ rr � s
�
�zDistributionPoint.__hash__c C s | j S r" �r� r2 r* r* r+ r� � s zDistributionPoint.full_namec C s | j S r" �r� r2 r* r* r+ r� � s z DistributionPoint.relative_namec C s | j S r" )r� r2 r* r* r+ r� � s zDistributionPoint.reasonsc C s | j S r" )r� r2 r* r* r+ r� � s z DistributionPoint.crl_issuer)rE rF rG rM r� r_ r r � FrozenSetr@ rH r^ rv rw ro r9 rr rx r� r� r� r� r� r* r* r* r+ r� C s" � ; r� c @ s4 e Zd ZdZdZdZdZdZdZdZ dZ
d Z d
Z d S ) r� r� Z
keyCompromiseZ cACompromiseZaffiliationChanged�
supersededZcessationOfOperationZcertificateHoldZprivilegeWithdrawnZ aACompromiseZ
removeFromCRLN)
rE rF rG r� �key_compromise�
ca_compromise�affiliation_changedr� �cessation_of_operation�certificate_hold�privilege_withdrawn�
aa_compromiser� r* r* r* r+ r� � s r� )� � � � � � � � c @ s� e Zd ZejZeje eje dd�dd�Z e
d�dd�Z e e
d�d d
�Zed�d d �Zeeje d�d
d��Zeeje d�dd��Zed�dd�ZdS )�PolicyConstraintsN)�require_explicit_policy�inhibit_policy_mappingr! c C s\ |d urt |t�std��|d ur4t |t�s4td��|d u rL|d u rLtd��|| _|| _d S )Nz>require_explicit_policy must be a non-negative integer or Nonez=inhibit_policy_mapping must be a non-negative integer or NonezSAt least one of require_explicit_policy and inhibit_policy_mapping must not be None)r# r9 r[ r� �_require_explicit_policy�_inhibit_policy_mapping)r3 r� r� r* r* r+ r@ � s$
��
���zPolicyConstraints.__init__r/ c C s
d� | �S )Nz{<PolicyConstraints(require_explicit_policy={0.require_explicit_policy}, inhibit_policy_mapping={0.inhibit_policy_mapping})>r� r2 r* r* r+ r^ � s ��zPolicyConstraints.__repr__rk c C s& t |t�stS | j|jko$| j|jkS r" )r# r� rm r� r� rn r* r* r+ ro � s
�zPolicyConstraints.__eq__c C s t | j| jf�S r" )rq r� r� r2 r* r* r+ rr s
�zPolicyConstraints.__hash__c C s | j S r" )r� r2 r* r* r+ r�
s z)PolicyConstraints.require_explicit_policyc C s | j S r" )r� r2 r* r* r+ r� s z(PolicyConstraints.inhibit_policy_mappingc C s
t �| �S r" rt r2 r* r* r+ r$ s z PolicyConstraints.public_bytes)rE rF rG r ZPOLICY_CONSTRAINTSr> rM r� r9 r@ rH r^ rv rw ro rr rx r� r� rP r$ r* r* r* r+ r� � s � r� c @ sp e Zd ZejZejd dd�dd�Ze d�\Z
Z Z e
d�dd �Zeed
�d d �Zed�d
d�Zed�dd�ZdS )�CertificatePolicies�PolicyInformationN)�policiesr! c C s, t |�}tdd� |D ��s"td��|| _d S )Nc s s | ]}t |t�V qd S r" )r# r� r~ r* r* r+ r� r� z/CertificatePolicies.__init__.<locals>.<genexpr>z;Every item in the policies list must be a PolicyInformation)rT r� r[ � _policies)r3 r� r* r* r+ r@ s �z CertificatePolicies.__init__r� r/ c C s d� | j�S )Nz<CertificatePolicies({})>)rL r� r2 r* r* r+ r^ ( s z CertificatePolicies.__repr__rk c C s t |t�stS | j|jkS r" )r# r� rm r� rn r* r* r+ ro + s
zCertificatePolicies.__eq__c C s t t| j��S r" )rq r� r� r2 r* r* r+ rr 1 s z CertificatePolicies.__hash__c C s
t �| �S r" rt r2 r* r* r+ r$ 4 s z CertificatePolicies.public_bytes)rE rF rG r ZCERTIFICATE_POLICIESr> rM r_ r@ r: ra rb rc rH r^ rv rw ro r9 rr rP r$ r* r* r* r+ r� s
r� c @ s� e Zd Zeejejejedf dd�dd�Z ed�dd�Z
e e d �d
d �Z
ed�d d
�Zeed�dd��Zeejejejedf d�dd��ZdS )r� �
UserNoticeN)�policy_identifier�policy_qualifiersr! c C sL t |t�std��|| _|d urBt|�}tdd� |D ��sBtd��|| _d S )Nz-policy_identifier must be an ObjectIdentifierc s s | ]}t |ttf�V qd S r" )r# rH r� r~ r* r* r+ r� G s z-PolicyInformation.__init__.<locals>.<genexpr>zMpolicy_qualifiers must be a list of strings and/or UserNotice objects or None)r# r r[ �_policy_identifierrT r� �_policy_qualifiers)r3 r� r� r* r* r+ r@ 9 s
��zPolicyInformation.__init__r/ c C s
d� | �S )Nze<PolicyInformation(policy_identifier={0.policy_identifier}, policy_qualifiers={0.policy_qualifiers})>r� r2 r* r* r+ r^ Q s ��zPolicyInformation.__repr__rk c C s& t |t�stS | j|jko$| j|jkS r" )r# r� rm r� r� rn r* r* r+ ro W s
�zPolicyInformation.__eq__c C s( | j d urt| j �}nd }t| j|f�S r" )r� r� rq r� )r3 Zpqr* r* r+ rr ` s
�zPolicyInformation.__hash__c C s | j S r" )r� r2 r* r* r+ r� j s z#PolicyInformation.policy_identifierc C s | j S r" )r� r2 r* r* r+ r� n s z#PolicyInformation.policy_qualifiers)rE rF rG r rM r� r_ �UnionrH r@ r^ rv rw ro r9 rr rx r� r� r� r* r* r* r+ r� 8 s ��
�r� c @ s� e Zd Zejd eje dd�dd�Zed�dd�Zee d �d
d �Z
e d�d d
�Z e
ejd d�dd��Ze
eje d�dd��ZdS )r� �NoticeReferenceN)�notice_reference�
explicit_textr! c C s& |rt |t�std��|| _|| _d S )Nz2notice_reference must be None or a NoticeReference)r# r� r[ �_notice_reference�_explicit_text)r3 r� r� r* r* r+ r@ v s ��zUserNotice.__init__r/ c C s
d� | �S )NzV<UserNotice(notice_reference={0.notice_reference}, explicit_text={0.explicit_text!r})>r� r2 r* r* r+ r^ � s ��zUserNotice.__repr__rk c C s& t |t�stS | j|jko$| j|jkS r" )r# r� rm r� r� rn r* r* r+ ro � s
�zUserNotice.__eq__c C s t | j| jf�S r" )rq r� r� r2 r* r* r+ rr � s zUserNotice.__hash__c C s | j S r" )r� r2 r* r* r+ r� � s zUserNotice.notice_referencec C s | j S r" )r� r2 r* r* r+ r� � s zUserNotice.explicit_text)rE rF rG rM r� rH r@ r^ rv rw ro r9 rr rx r� r� r* r* r* r+ r� u s � r� c @ s� e Zd Zeje eje dd�dd�Zed�dd�Z e
e d�d d
�Z ed�d d �Z
eeje d�d
d��Zeeje d�dd��ZdS )r� N)� organization�notice_numbersr! c C s2 || _ t|�}tdd� |D ��s(td��|| _d S )Nc s s | ]}t |t�V qd S r" )r# r9 r~ r* r* r+ r� � r� z+NoticeReference.__init__.<locals>.<genexpr>z)notice_numbers must be a list of integers)�
_organizationrT r� r[ �_notice_numbers)r3 r� r� r* r* r+ r@ � s
zNoticeReference.__init__r/ c C s
d� | �S )NzU<NoticeReference(organization={0.organization!r}, notice_numbers={0.notice_numbers})>r� r2 r* r* r+ r^ � s ��zNoticeReference.__repr__rk c C s& t |t�stS | j|jko$| j|jkS r" )r# r� rm r� r� rn r* r* r+ ro � s
�zNoticeReference.__eq__c C s t | jt| j�f�S r" )rq r� r� r� r2 r* r* r+ rr � s zNoticeReference.__hash__c C s | j S r" )r� r2 r* r* r+ r� � s z NoticeReference.organizationc C s | j S r" )r� r2 r* r* r+ r� � s z NoticeReference.notice_numbers)rE rF rG rM r� rH r_ r9 r@ r^ rv rw ro rr rx r� r� r� r* r* r* r+ r� � s � r� c @ sp e Zd ZejZeje dd�dd�Z e
d�\Z Z Z
ed�dd�Zeed �d
d �Zed�d d
�Zed�dd�ZdS )�ExtendedKeyUsageN)�usagesr! c C s, t |�}tdd� |D ��s"td��|| _d S )Nc s s | ]}t |t�V qd S r" )r# r r~ r* r* r+ r� � r� z,ExtendedKeyUsage.__init__.<locals>.<genexpr>z9Every item in the usages list must be an ObjectIdentifier)rT r� r[ �_usages)r3 r� r* r* r+ r@ � s �zExtendedKeyUsage.__init__r� r/ c C s d� | j�S )Nz<ExtendedKeyUsage({})>)rL r� r2 r* r* r+ r^ � s zExtendedKeyUsage.__repr__rk c C s t |t�stS | j|jkS r" )r# r� rm r� rn r* r* r+ ro � s
zExtendedKeyUsage.__eq__c C s t t| j��S r" )rq r� r� r2 r* r* r+ rr � s zExtendedKeyUsage.__hash__c C s
t �| �S r" rt r2 r* r* r+ r$ � s z ExtendedKeyUsage.public_bytes)rE rF rG r ZEXTENDED_KEY_USAGEr> rM r_ r r@ r: ra rb rc rH r^ rv rw ro r9 rr rP r$ r* r* r* r+ r� � s r� c @ sL e Zd ZejZeed�dd�Ze d�dd�Z
e d�dd�Z e
d�d d
�Zd S ) � OCSPNoCheckrk c C s t |t�stS dS �NT)r# r� rm rn r* r* r+ ro � s
zOCSPNoCheck.__eq__r/ c C s t t�S r" )rq r� r2 r* r* r+ rr � s zOCSPNoCheck.__hash__c C s dS )Nz<OCSPNoCheck()>r* r2 r* r* r+ r^ � s zOCSPNoCheck.__repr__c C s
t �| �S r" rt r2 r* r* r+ r$ � s zOCSPNoCheck.public_bytesN)rE rF rG r Z
OCSP_NO_CHECKr> rv rw ro r9 rr rH r^ rP r$ r* r* r* r+ r� � s
r� c @ sL e Zd ZejZeed�dd�Ze d�dd�Z
e d�dd�Z e
d�d d
�Zd S ) �
PrecertPoisonrk c C s t |t�stS dS r� )r# r� rm rn r* r* r+ ro � s
zPrecertPoison.__eq__r/ c C s t t�S r" )rq r� r2 r* r* r+ rr s zPrecertPoison.__hash__c C s dS )Nz<PrecertPoison()>r* r2 r* r* r+ r^ s zPrecertPoison.__repr__c C s
t �| �S r" rt r2 r* r* r+ r$ s zPrecertPoison.public_bytesN)rE rF rG r ZPRECERT_POISONr> rv rw ro r9 rr rH r^ rP r$ r* r* r* r+ r� � s
r� c @ sp e Zd ZejZejd dd�dd�Ze d�\Z
Z Z e
d�dd �Zeed
�d d �Zed�d
d�Zed�dd�ZdS )�
TLSFeature�TLSFeatureTypeN)�featuresr! c C s8 t |�}tdd� |D ��r&t|�dkr.td��|| _d S )Nc s s | ]}t |t�V qd S r" )r# r� r~ r* r* r+ r� r� z&TLSFeature.__init__.<locals>.<genexpr>r z@features must be a list of elements from the TLSFeatureType enum)rT r� r0 r[ � _features)r3 r� r* r* r+ r@ s �
��zTLSFeature.__init__r� r/ c C s
d� | �S )Nz$<TLSFeature(features={0._features})>r� r2 r* r* r+ r^ s zTLSFeature.__repr__rk c C s t |t�stS | j|jkS r" )r# r� rm r� rn r* r* r+ ro ! s
zTLSFeature.__eq__c C s t t| j��S r" )rq r� r� r2 r* r* r+ rr ' s zTLSFeature.__hash__c C s
t �| �S r" rt r2 r* r* r+ r$ * s zTLSFeature.public_bytes)rE rF rG r Z TLS_FEATUREr> rM r_ r@ r: ra rb rc rH r^ rv rw ro r9 rr rP r$ r* r* r* r+ r� s
r� c @ s e Zd ZdZdZdS )r� r� � N)rE rF rG Zstatus_requestZstatus_request_v2r* r* r* r+ r� . s r� c C s i | ] }|j |�qS r* �r\ r~ r* r* r+ �
<dictcomp>9 r� r� c @ sn e Zd ZejZedd�dd�Zed�dd�Z e
e d�d d
�Z ed�d d �Z
eed�d
d��Zed�dd�ZdS )�InhibitAnyPolicyN)�
skip_certsr! c C s, t |t�std��|dk r"td��|| _d S )Nz skip_certs must be an integerr z)skip_certs must be a non-negative integer)r# r9 r[ r� � _skip_certs)r3 r� r* r* r+ r@ ? s
zInhibitAnyPolicy.__init__r/ c C s
d� | �S )Nz-<InhibitAnyPolicy(skip_certs={0.skip_certs})>r� r2 r* r* r+ r^ H s zInhibitAnyPolicy.__repr__rk c C s t |t�stS | j|jkS r" )r# r� rm r� rn r* r* r+ ro K s
zInhibitAnyPolicy.__eq__c C s
t | j�S r" )rq r� r2 r* r* r+ rr Q s zInhibitAnyPolicy.__hash__c C s | j S r" )r r2 r* r* r+ r� T s zInhibitAnyPolicy.skip_certsc C s
t �| �S r" rt r2 r* r* r+ r$ X s z InhibitAnyPolicy.public_bytes)rE rF rG r ZINHIBIT_ANY_POLICYr> r9 r@ rH r^ rv rw ro rr rx r� rP r$ r* r* r* r+ r� < s r� c @ s e Zd ZejZeeeeeeeeedd�
dd�Zeed�dd��Z eed�dd ��Z
eed�d
d ��Z eed�d d
��Z eed�dd��Z
eed�dd��Zeed�dd��Zeed�dd��Zeed�dd��Zed�dd�Zeed�dd �Zed�d d �Zed�d d �ZdS )!�KeyUsageN)
�digital_signature�content_commitment�key_encipherment�data_encipherment�
key_agreement�
key_cert_sign�crl_sign�
encipher_only�
decipher_onlyr! c
C sN |s|s | rt d��|| _|| _|| _|| _|| _|| _|| _|| _| | _ d S )NzKencipher_only and decipher_only can only be true when key_agreement is true)
r� �_digital_signature�_content_commitment�_key_encipherment�_data_encipherment�_key_agreement�_key_cert_sign� _crl_sign�_encipher_only�_decipher_only)
r3 r r r r r r r r r
r* r* r+ r@ _ s �zKeyUsage.__init__r/ c C s | j S r" )r r2 r* r* r+ r { s zKeyUsage.digital_signaturec C s | j S r" )r r2 r* r* r+ r s zKeyUsage.content_commitmentc C s | j S r" )r
r2 r* r* r+ r � s zKeyUsage.key_enciphermentc C s | j S r" )r r2 r* r* r+ r � s zKeyUsage.data_enciphermentc C s | j S r" )r r2 r* r* r+ r � s zKeyUsage.key_agreementc C s | j S r" )r r2 r* r* r+ r � s zKeyUsage.key_cert_signc C s | j S r" )r r2 r* r* r+ r � s zKeyUsage.crl_signc C s | j std��n| jS d S )Nz7encipher_only is undefined unless key_agreement is true)r r� r r2 r* r* r+ r � s
�zKeyUsage.encipher_onlyc C s | j std��n| jS d S )Nz7decipher_only is undefined unless key_agreement is true)r r� r r2 r* r* r+ r
� s
�zKeyUsage.decipher_onlyc C s: z| j }| j}W n ty* d}d}Y n0 d�| ||�S )NFa- <KeyUsage(digital_signature={0.digital_signature}, content_commitment={0.content_commitment}, key_encipherment={0.key_encipherment}, data_encipherment={0.data_encipherment}, key_agreement={0.key_agreement}, key_cert_sign={0.key_cert_sign}, crl_sign={0.crl_sign}, encipher_only={1}, decipher_only={2})>)r r
r� rL )r3 r r
r* r* r+ r^ � s
��zKeyUsage.__repr__rk c C sz t |t�stS | j|jkox| j|jkox| j|jkox| j|jkox| j|jkox| j|jkox| j |j kox| j
|j
kox| j |j kS r" ) r# r rm r r r r r r r r r rn r* r* r+ ro � s&
�
�
�
�
�
�
�
�zKeyUsage.__eq__c
C s, t | j| j| j| j| j| j| j| j| j f �S r" )
rq r r r r r r r r r r2 r* r* r+ rr � s ��zKeyUsage.__hash__c C s
t �| �S r" rt r2 r* r* r+ r$ � s zKeyUsage.public_bytes)rE rF rG r Z KEY_USAGEr> rw r@ rx r r r r r r r r r
rH r^ rv ro r9 rr rP r$ r* r* r* r+ r \ sD � r c @ s� e Zd ZejZejeje ejeje dd�dd�Z
e e d�dd�Z
eje dd�d d
�Zed �d d
�Zed �dd�Zeejeje d �dd��Zeejeje d �dd��Zed �dd�ZdS )�NameConstraintsN)�permitted_subtrees�excluded_subtreesr! c C s� |d ur@t |�}|s td��tdd� |D ��s6td��| �|� |d ur�t |�}|s\td��tdd� |D ��svtd��| �|� |d u r�|d u r�td��|| _|| _d S ) Nz3permitted_subtrees must be a non-empty list or Nonec s s | ]}t |t�V qd S r" r} r~ r* r* r+ r� � r� z+NameConstraints.__init__.<locals>.<genexpr>z@permitted_subtrees must be a list of GeneralName objects or Nonez2excluded_subtrees must be a non-empty list or Nonec s s | ]}t |t�V qd S r" r} r~ r* r* r+ r� � r� z?excluded_subtrees must be a list of GeneralName objects or NonezIAt least one of permitted_subtrees and excluded_subtrees must not be None)rT r� r� r[ �_validate_ip_name�_permitted_subtrees�_excluded_subtrees)r3 r r r* r* r+ r@ � s8 ��
��
�zNameConstraints.__init__rk c C s& t |t�stS | j|jko$| j|jkS r" )r# r rm r r rn r* r* r+ ro s
�zNameConstraints.__eq__)�treer! c C s t dd� |D ��rtd��d S )Nc s s. | ]&}t |t�o$t |jtjtjf� V qd S r" )r# r r\ � ipaddress� IPv4Network� IPv6Network)r �namer* r* r+ r� s
�
�z4NameConstraints._validate_ip_name.<locals>.<genexpr>zGIPAddress name constraints must be an IPv4Network or IPv6Network object)�anyr[ )r3 r r* r* r+ r s ��z!NameConstraints._validate_ip_namer/ c C s
d� | �S )Nze<NameConstraints(permitted_subtrees={0.permitted_subtrees}, excluded_subtrees={0.excluded_subtrees})>r� r2 r* r* r+ r^ $ s ��zNameConstraints.__repr__c C s@ | j d urt| j �}nd }| jd ur0t| j�}nd }t||f�S r" )r r� r rq )r3 Zps�esr* r* r+ rr * s
�
�zNameConstraints.__hash__c C s | j S r" )r r2 r* r* r+ r ; s z"NameConstraints.permitted_subtreesc C s | j S r" )r r2 r* r* r+ r A s z!NameConstraints.excluded_subtreesc C s
t �| �S r" rt r2 r* r* r+ r$ G s z NameConstraints.public_bytes)rE rF rG r ZNAME_CONSTRAINTSr> rM r� r_ r r@ rv rw ro r rH r^ r9 rr rx r� r r rP r$ r* r* r* r+ r � s � *
��r c @ s� e Zd Zeeedd�dd�Zeed�dd��Zeed�dd ��Z eed�d
d ��Z
e d�d d
�Z e
ed�dd�Zed�dd�ZdS )� ExtensionN)r> �criticalr\ r! c C s: t |t�std��t |t�s$td��|| _|| _|| _d S )Nz2oid argument must be an ObjectIdentifier instance.z critical must be a boolean value)r# r r[ rw �_oid� _critical�_value)r3 r> r" r\ r* r* r+ r@ L s
�
zExtension.__init__r/ c C s | j S r" �r# r2 r* r* r+ r> [ s z
Extension.oidc C s | j S r" )r$ r2 r* r* r+ r" _ s zExtension.criticalc C s | j S r" �r% r2 r* r* r+ r\ c s zExtension.valuec C s
d� | �S )Nz@<Extension(oid={0.oid}, critical={0.critical}, value={0.value})>r� r2 r* r* r+ r^ g s ��zExtension.__repr__rk c C s2 t |t�stS | j|jko0| j|jko0| j|jkS r" )r# r! rm r> r" r\ rn r* r* r+ ro m s
�
�zExtension.__eq__c C s t | j| j| jf�S r" )rq r> r" r\ r2 r* r* r+ rr w s zExtension.__hash__)rE rF rG r rw r r@ rx r> r" r\ rH r^ rv ro r9 rr r* r* r* r+ r! K s �
r! c @ s� e Zd Zeje dd�dd�Zed�\ZZ Z
ej ej ej
e ej
e ej
e f eje d�dd��Zej ej
e eje d�d d��Zej ej
e eje d�d
d��Zej ej
e eje d�d d��Zej ej
e eje d�d d��Zej ej
e ej
e ej
e ej
e ej
e ej
e ej
e f ej eje eje eje eje eje f d�d
d�Zed�dd�Ze e d�dd�Z e d�dd�Z dS )� GeneralNamesN��
general_namesr! c C s, t |�}tdd� |D ��s"td��|| _d S )Nc s s | ]}t |t�V qd S r" r} r~ r* r* r+ r� ~ r� z(GeneralNames.__init__.<locals>.<genexpr>z^Every item in the general_names list must be an object conforming to the GeneralName interface)rT r� r[ �_general_names�r3 r* r* r* r+ r@ | s �zGeneralNames.__init__r+ ��typer! c C s d S r" r* �r3 r. r* r* r+ �get_values_for_type� s z GeneralNames.get_values_for_typec C s d S r" r* r/ r* r* r+ r0 � s c C s d S r" r* r/ r* r* r+ r0 � s c C s d S r" r* r/ r* r* r+ r0 � s c C s d S r" r* r/ r* r* r+ r0 � s c s0 � fdd�| D �}� t kr(dd� |D �S t|�S )Nc 3 s | ]}t |� �r|V qd S r" )r# �r �i�r. r* r+ r� � r� z3GeneralNames.get_values_for_type.<locals>.<genexpr>c S s g | ]
}|j �qS r* r� r1 r* r* r+ �
<listcomp>� r� z4GeneralNames.get_values_for_type.<locals>.<listcomp>)r rT )r3 r. �objsr* r3 r+ r0 � s r/ c C s d� | j�S )Nz<GeneralNames({})>�rL r+ r2 r* r* r+ r^ � s zGeneralNames.__repr__rk c C s t |t�stS | j|jkS r" )r# r( rm r+ rn r* r* r+ ro � s
zGeneralNames.__eq__c C s t t| j��S r" )rq r� r+ r2 r* r* r+ rr � s zGeneralNames.__hash__)!rE rF rG rM r_ r r@ r: ra rb rc �overloadr� r` r r r r� rH r0 r
r r r r r r r^ rv rw ro r9 rr r* r* r* r+ r( { sb
���
������ ��� r( c @ s� e Zd ZejZeje dd�dd�Z e
d�\Z Z Z
ejejeje eje eje f eje d�dd��Zejeje eje d�d d��Zejeje eje d�d
d��Zejeje eje d�d d��Zejeje eje d�d d��Zejeje eje eje eje eje eje eje f ejeje eje eje eje eje f d�d
d�Zed�dd�Z e e d�dd�Z!e"d�dd�Z#e$d�dd�Z%dS )�SubjectAlternativeNameNr) c C s t |�| _d S r" �r( r+ r, r* r* r+ r@ � s z SubjectAlternativeName.__init__r+ r- c C s d S r" r* r/ r* r* r+ r0 � s z*SubjectAlternativeName.get_values_for_typec C s d S r" r* r/ r* r* r+ r0 � s c C s d S r" r* r/ r* r* r+ r0 � s c C s d S r" r* r/ r* r* r+ r0 � s c C s d S r" r* r/ r* r* r+ r0 � s c C s | j �|�S r" �r+ r0 r/ r* r* r+ r0 s r/ c C s d� | j�S )Nz <SubjectAlternativeName({})>r6 r2 r* r* r+ r^ s z SubjectAlternativeName.__repr__rk c C s t |t�stS | j|jkS r" )r# r8 rm r+ rn r* r* r+ ro s
z SubjectAlternativeName.__eq__c C s
t | j�S r" �rq r+ r2 r* r* r+ rr s z SubjectAlternativeName.__hash__c C s
t �| �S r" rt r2 r* r* r+ r$ ! s z#SubjectAlternativeName.public_bytes)&rE rF rG r ZSUBJECT_ALTERNATIVE_NAMEr> rM r_ r r@ r: ra rb rc r7 r� r` r r r r� rH r0 r
r r r r r r r^ rv rw ro r9 rr rP r$ r* r* r* r+ r8 � sf ���
������ ��� r8 c @ s� e Zd ZejZeje dd�dd�Z e
d�\Z Z Z
ejejeje eje eje f eje d�dd��Zejeje eje d�d d��Zejeje eje d�d
d��Zejeje eje d�d d��Zejeje eje d�d d��Zejeje eje eje eje eje eje eje f ejeje eje eje eje eje f d�d
d�Zed�dd�Z e e d�dd�Z!e"d�dd�Z#e$d�dd�Z%dS )�IssuerAlternativeNameNr) c C s t |�| _d S r" r9 r, r* r* r+ r@ ( s z IssuerAlternativeName.__init__r+ r- c C s d S r" r* r/ r* r* r+ r0 - s z)IssuerAlternativeName.get_values_for_typec C s d S r" r* r/ r* r* r+ r0 8 s c C s d S r" r* r/ r* r* r+ r0 ? s c C s d S r" r* r/ r* r* r+ r0 F s c C s d S r" r* r/ r* r* r+ r0 L s c C s | j �|�S r" r: r/ r* r* r+ r0 R s r/ c C s d� | j�S )Nz<IssuerAlternativeName({})>r6 r2 r* r* r+ r^ f s z IssuerAlternativeName.__repr__rk c C s t |t�stS | j|jkS r" )r# r< rm r+ rn r* r* r+ ro i s
z IssuerAlternativeName.__eq__c C s
t | j�S r" r; r2 r* r* r+ rr o s z IssuerAlternativeName.__hash__c C s
t �| �S r" rt r2 r* r* r+ r$ r s z"IssuerAlternativeName.public_bytes)&rE rF rG r ZISSUER_ALTERNATIVE_NAMEr> rM r_ r r@ r: ra rb rc r7 r� r` r r r r� rH r0 r
r r r r r r r^ rv rw ro r9 rr rP r$ r* r* r* r+ r< % sf ���
������ ��� r< c @ s� e Zd ZejZeje dd�dd�Z e
d�\Z Z Z
ejejeje eje eje f eje d�dd��Zejeje eje d�d d��Zejeje eje d�d
d��Zejeje eje d�d d��Zejeje eje d�d d��Zejeje eje eje eje eje eje eje f ejeje eje eje eje eje f d�d
d�Zed�dd�Z e e d�dd�Z!e"d�dd�Z#e$d�dd�Z%dS )�CertificateIssuerNr) c C s t |�| _d S r" r9 r, r* r* r+ r@ y s zCertificateIssuer.__init__r+ r- c C s d S r" r* r/ r* r* r+ r0 ~ s z%CertificateIssuer.get_values_for_typec C s d S r" r* r/ r* r* r+ r0 � s c C s d S r" r* r/ r* r* r+ r0 � s c C s d S r" r* r/ r* r* r+ r0 � s c C s d S r" r* r/ r* r* r+ r0 � s c C s | j �|�S r" r: r/ r* r* r+ r0 � s r/ c C s d� | j�S )Nz<CertificateIssuer({})>r6 r2 r* r* r+ r^ � s zCertificateIssuer.__repr__rk c C s t |t�stS | j|jkS r" )r# r= rm r+ rn r* r* r+ ro � s
zCertificateIssuer.__eq__c C s
t | j�S r" r; r2 r* r* r+ rr � s zCertificateIssuer.__hash__c C s
t �| �S r" rt r2 r* r* r+ r$ � s z CertificateIssuer.public_bytes)&rE rF rG r ZCERTIFICATE_ISSUERr> rM r_ r r@ r: ra rb rc r7 r� r` r r r r� rH r0 r
r r r r r r r^ rv rw ro r9 rr rP r$ r* r* r* r+ r= v sf ���
������ ��� r= c @ sn e Zd ZejZedd�dd�Zed�dd�Z e
e d�d d
�Z e
d�d d �Zeed�d
d��Zed�dd�ZdS )� CRLReasonN)�reasonr! c C s t |t�std��|| _d S )Nz*reason must be an element from ReasonFlags)r# r� r[ �_reason)r3 r? r* r* r+ r@ � s
zCRLReason.__init__r/ c C s d� | j�S )Nz<CRLReason(reason={})>)rL r@ r2 r* r* r+ r^ � s zCRLReason.__repr__rk c C s t |t�stS | j|jkS r" )r# r> rm r? rn r* r* r+ ro � s
zCRLReason.__eq__c C s
t | j�S r" )rq r? r2 r* r* r+ rr � s zCRLReason.__hash__c C s | j S r" )r@ r2 r* r* r+ r? � s zCRLReason.reasonc C s
t �| �S r" rt r2 r* r* r+ r$ � s zCRLReason.public_bytes)rE rF rG r Z
CRL_REASONr> r� r@ rH r^ rv rw ro r9 rr rx r? rP r$ r* r* r* r+ r> � s r> c @ sr e Zd ZejZejdd�dd�Zed�dd�Z e
e d�d d
�Z e
d�d d �Zeejd�d
d��Zed�dd�ZdS )�InvalidityDateN)�invalidity_dater! c C s t |tj�std��|| _d S )Nz+invalidity_date must be a datetime.datetime)r# �datetimer[ �_invalidity_date)r3 rB r* r* r+ r@ � s zInvalidityDate.__init__r/ c C s d� | j�S )Nz$<InvalidityDate(invalidity_date={})>)rL rD r2 r* r* r+ r^ � s �zInvalidityDate.__repr__rk c C s t |t�stS | j|jkS r" )r# rA rm rB rn r* r* r+ ro � s
zInvalidityDate.__eq__c C s
t | j�S r" )rq rB r2 r* r* r+ rr � s zInvalidityDate.__hash__c C s | j S r" )rD r2 r* r* r+ rB � s z InvalidityDate.invalidity_datec C s
t �| �S r" rt r2 r* r* r+ r$ � s zInvalidityDate.public_bytes)rE rF rG r ZINVALIDITY_DATEr> rC r@ rH r^ rv rw ro r9 rr rx rB rP r$ r* r* r* r+ rA � s rA c @ sp e Zd ZejZeje dd�dd�Z e
d�\Z Z Z
ed�dd�Zed�d d
�Zeed �d d
�Zed�dd�ZdS )�)PrecertificateSignedCertificateTimestampsN�� signed_certificate_timestampsr! c C s, t |�}tdd� |D ��s"td��|| _d S )Nc s s | ]}t |t�V qd S r" �r# r �r Zsctr* r* r+ r�
s �zEPrecertificateSignedCertificateTimestamps.__init__.<locals>.<genexpr>�YEvery item in the signed_certificate_timestamps list must be a SignedCertificateTimestamp�rT r� r[ � _signed_certificate_timestamps�r3 rG r* r* r+ r@ s ��z2PrecertificateSignedCertificateTimestamps.__init__rL r/ c C s d� t| ��S )Nz/<PrecertificateSignedCertificateTimestamps({})>�rL rT r2 r* r* r+ r^ s �z2PrecertificateSignedCertificateTimestamps.__repr__c C s t t| j��S r" �rq r� rL r2 r* r* r+ rr s z2PrecertificateSignedCertificateTimestamps.__hash__rk c C s t |t�stS | j|jkS r" )r# rE rm rL rn r* r* r+ ro # s
��z0PrecertificateSignedCertificateTimestamps.__eq__c C s
t �| �S r" rt r2 r* r* r+ r$ , s z6PrecertificateSignedCertificateTimestamps.public_bytes)rE rF rG r Z%PRECERT_SIGNED_CERTIFICATE_TIMESTAMPSr> rM r_ r r@ r: ra rb rc rH r^ r9 rr rv rw ro rP r$ r* r* r* r+ rE s �� �
rE c @ sp e Zd ZejZeje dd�dd�Z e
d�\Z Z Z
ed�dd�Zed�d d
�Zeed �d d
�Zed�dd�ZdS )�SignedCertificateTimestampsNrF c C s, t |�}tdd� |D ��s"td��|| _d S )Nc s s | ]}t |t�V qd S r" rH rI r* r* r+ r� : s �z7SignedCertificateTimestamps.__init__.<locals>.<genexpr>rJ rK rM r* r* r+ r@ 3 s ��z$SignedCertificateTimestamps.__init__rL r/ c C s d� t| ��S )Nz!<SignedCertificateTimestamps({})>rN r2 r* r* r+ r^ H s z$SignedCertificateTimestamps.__repr__c C s t t| j��S r" rO r2 r* r* r+ rr K s z$SignedCertificateTimestamps.__hash__rk c C s t |t�stS | j|jkS r" )r# rP rm rL rn r* r* r+ ro N s
��z"SignedCertificateTimestamps.__eq__c C s
t �| �S r" rt r2 r* r* r+ r$ W s z(SignedCertificateTimestamps.public_bytes)rE rF rG r Z SIGNED_CERTIFICATE_TIMESTAMPSr> rM r_ r r@ r: ra rb rc rH r^ r9 rr rv rw ro rP r$ r* r* r* r+ rP 0 s �� �
rP c @ sn e Zd ZejZedd�dd�Zee d�dd�Z
e d�d d
�Z e
d�d d �Zeed�d
d��Zed�dd�ZdS )� OCSPNonceN)�noncer! c C s t |t�std��|| _d S )Nznonce must be bytes)r# rP r[ �_nonce)r3 rR r* r* r+ r@ ^ s
zOCSPNonce.__init__rk c C s t |t�stS | j|jkS r" )r# rQ rm rR rn r* r* r+ ro d s
zOCSPNonce.__eq__r/ c C s
t | j�S r" )rq rR r2 r* r* r+ rr j s zOCSPNonce.__hash__c C s
d� | �S )Nz <OCSPNonce(nonce={0.nonce!r})>r� r2 r* r* r+ r^ m s zOCSPNonce.__repr__c C s | j S r" )rS r2 r* r* r+ rR p s zOCSPNonce.noncec C s
t �| �S r" rt r2 r* r* r+ r$ t s zOCSPNonce.public_bytes)rE rF rG r ZNONCEr> rP r@ rv rw ro r9 rr rH r^ rx rR r$ r* r* r* r+ rQ [ s rQ c @ s" e Zd ZejZejeje eje
e e ejej e
e e dd�dd�Zed�dd�Zee d�d d
�Zed�d d �Zeejeje d�d
d��Zeeje
d�dd��Zee d�dd��Zee d�dd��Zeejej e
d�dd��Zee d�dd��Z ee d�dd��Z e d�dd �Z dS ) �IssuingDistributionPointN)r� r� �only_contains_user_certs�only_contains_ca_certs�only_some_reasons� indirect_crl� only_contains_attribute_certsr! c C s� |d urt |�}|r8t|t�r0tdd� |D ��s8td��|rXtj|v sPtj|v rXtd��t|t �r�t|t �r�t|t �r�t|t �s�td��||||g}t
dd� |D ��dkr�td ��t |||||||g�s�td
��|| _ || _
|| _|| _|| _|| _|| _d S ) Nc s s | ]}t |t�V qd S r" r� r~ r* r* r+ r� � r� z4IssuingDistributionPoint.__init__.<locals>.<genexpr>z:only_some_reasons must be None or frozenset of ReasonFlagszTunspecified and remove_from_crl are not valid reasons in an IssuingDistributionPointzuonly_contains_user_certs, only_contains_ca_certs, indirect_crl and only_contains_attribute_certs must all be boolean.c S s g | ] }|r|�qS r* r* r~ r* r* r+ r4 � r� z5IssuingDistributionPoint.__init__.<locals>.<listcomp>r� z�Only one of the following can be set to True: only_contains_user_certs, only_contains_ca_certs, indirect_crl, only_contains_attribute_certsz�Cannot create empty extension: if only_contains_user_certs, only_contains_ca_certs, indirect_crl, and only_contains_attribute_certs are all False, then either full_name, relative_name, or only_some_reasons must have a value.)rT r# r� r� r[ r� r� r� r� rw r0 r �_only_contains_user_certs�_only_contains_ca_certs�
_indirect_crl� _only_contains_attribute_certs�_only_some_reasonsr� r� ) r3 r� r� rU rV rW rX rY Zcrl_constraintsr* r* r+ r@ { st
��������������� �z!IssuingDistributionPoint.__init__r/ c C s
d� | �S )NaG <IssuingDistributionPoint(full_name={0.full_name}, relative_name={0.relative_name}, only_contains_user_certs={0.only_contains_user_certs}, only_contains_ca_certs={0.only_contains_ca_certs}, only_some_reasons={0.only_some_reasons}, indirect_crl={0.indirect_crl}, only_contains_attribute_certs={0.only_contains_attribute_certs})>r� r2 r* r* r+ r^ � s ��z!IssuingDistributionPoint.__repr__rk c C sb t |t�stS | j|jko`| j|jko`| j|jko`| j|jko`| j|jko`| j|jko`| j |j kS r" )
r# rT rm r� r� rU rV rW rX rY rn r* r* r+ ro � s"
�
�
�
�
���z IssuingDistributionPoint.__eq__c C s$ t | j| j| j| j| j| j| jf�S r" )rq r� r� rU rV rW rX rY r2 r* r* r+ rr � s ��z!IssuingDistributionPoint.__hash__c C s | j S r" r� r2 r* r* r+ r� � s z"IssuingDistributionPoint.full_namec C s | j S r" r� r2 r* r* r+ r� � s z&IssuingDistributionPoint.relative_namec C s | j S r" )rZ r2 r* r* r+ rU � s z1IssuingDistributionPoint.only_contains_user_certsc C s | j S r" )r[ r2 r* r* r+ rV s z/IssuingDistributionPoint.only_contains_ca_certsc C s | j S r" )r^ r2 r* r* r+ rW s z*IssuingDistributionPoint.only_some_reasonsc C s | j S r" )r\ r2 r* r* r+ rX s z%IssuingDistributionPoint.indirect_crlc C s | j S r" )r] r2 r* r* r+ rY s z6IssuingDistributionPoint.only_contains_attribute_certsc C s
t �| �S r" rt r2 r* r* r+ r$ s z%IssuingDistributionPoint.public_bytes) rE rF rG r ZISSUING_DISTRIBUTION_POINTr> rM r� r_ r r rw r� r� r@ rH r^ rv ro r9 rr rx r� r� r� rU rV rW rX rY rP r$ r* r* r* r+ rT x s: � S
�rT c @ s| e Zd Zeedd�dd�Zeed�dd��Zeed�dd ��Ze d�d
d �Z
e e d �d
d�Z
ed�dd�Zed�dd�ZdS )rZ N)r> r\ r! c C s" t |t�std��|| _|| _d S )Nz oid must be an ObjectIdentifier)r# r r[ r# r% )r3 r> r\ r* r* r+ r@ s
z UnrecognizedExtension.__init__r/ c C s | j S r" r& r2 r* r* r+ r> s zUnrecognizedExtension.oidc C s | j S r" r' r2 r* r* r+ r\ # s zUnrecognizedExtension.valuec C s
d� | �S )Nz7<UnrecognizedExtension(oid={0.oid}, value={0.value!r})>r� r2 r* r* r+ r^ ' s ��z UnrecognizedExtension.__repr__rk c C s& t |t�stS | j|jko$| j|jkS r" )r# rZ rm r> r\ rn r* r* r+ ro - s
z UnrecognizedExtension.__eq__c C s t | j| jf�S r" )rq r> r\ r2 r* r* r+ rr 3 s z UnrecognizedExtension.__hash__c C s | j S r" r� r2 r* r* r+ r$ 6 s z"UnrecognizedExtension.public_bytes)rE rF rG r rP r@ rx r> r\ rH r^ rv rw ro r9 rr r$ r* r* r* r+ rZ s rZ )f�abcrC r& r rM Z cryptographyr Z"cryptography.hazmat.bindings._rustr r ru Z cryptography.hazmat.primitivesr r Z,cryptography.hazmat.primitives.asymmetric.ecr Z-cryptography.hazmat.primitives.asymmetric.rsar Z/cryptography.hazmat.primitives.asymmetric.typesr r
Z*cryptography.x509.certificate_transparencyr Z cryptography.x509.general_namer r
r r r r r r r Zcryptography.x509.namer r Zcryptography.x509.oidr r r r �TypeVarr rP r, rH r: � Exceptionr; rJ �ABCMetar rR rd ry r� r� r� r� r� r� r� r� r� �Enumr� r� r� r� r� r� r� r� r� Z_REASON_BIT_MAPPINGr� r� r� r� r� r� r� r� r� r� Z_TLS_FEATURE_TYPE_TO_ENUMr� r r �Genericr! r( r8 r< r= r> rA rE rP rQ rT rZ r* r* r* r+ �<module> s� , ��
' l$!!(. %%p� A =+( " j0YQQQ -+ !