⚝
One Hat Cyber Team
⚝
Your IP:
216.73.216.69
Server IP:
97.74.87.16
Server:
Linux 16.87.74.97.host.secureserver.net 5.14.0-503.38.1.el9_5.x86_64 #1 SMP PREEMPT_DYNAMIC Fri Apr 18 08:52:10 EDT 2025 x86_64
Server Software:
Apache
PHP Version:
8.2.28
Buat File
|
Buat Folder
Eksekusi
Dir :
~
/
var
/
opt
/
nydus
/
ops
/
cryptography
/
x509
/
__pycache__
/
View File Name :
extensions.cpython-39.pyc
a ���g� � @ s� d dl Z d dlZd dlZd dlZd dlZd dlmZ d dlmZ d dlm Z d dl m Z m Z d dlmZ d dlmZ d dlmZmZ d d lmZ d d lmZmZmZmZm Z m Z m Z m Z m Z d d l!m"Z"m#Z# d d l$m%Z%m&Z&m'Z'm(Z( ej)d ddd�Z*ee+d�dd�Z,e-d�dd�Z.G dd� de/�Z0G dd� de/�Z1G dd� de j2d �Z3G d d � d �Z4G d d � d e3�Z5G d!d"� d"e3�Z6G d#d$� d$e3�Z7G d%d&� d&e3�Z8G d'd(� d(e3�Z9G d)d*� d*�Z:G d+d,� d,e3�Z;G d-d.� d.e3�Z<G d/d0� d0e3�Z=G d1d2� d2e3�Z>G d3d4� d4�Z?G d5d6� d6ej@�ZAeAjBeAjCeAjDeAjEeAjFeAjGeAjHeAjId7�ZJG d8d9� d9e3�ZKG d:d;� d;e3�ZLG d<d=� d=�ZMG d>d?� d?�ZNG d@dA� dA�ZOG dBdC� dCe3�ZPG dDdE� dEe3�ZQG dFdG� dGe3�ZRG dHdI� dIe3�ZSG dJdK� dKej@�ZTdLdM� eTD �ZUG dNdO� dOe3�ZVG dPdQ� dQe3�ZWG dRdS� dSe3�ZXG dTdU� dUejYe* �ZZG dVdW� dW�Z[G dXdY� dYe3�Z\G dZd[� d[e3�Z]G d\d]� d]e3�Z^G d^d_� d_e3�Z_G d`da� dae3�Z`G dbdc� dce3�ZaG ddde� dee3�ZbG dfdg� dge3�ZcG dhdi� die3�ZdG djdk� dke3�ZedS )l� N)�utils)�asn1)�x509)� constant_time� serialization)�EllipticCurvePublicKey)� RSAPublicKey)�#CERTIFICATE_ISSUER_PUBLIC_KEY_TYPES� CERTIFICATE_PUBLIC_KEY_TYPES)�SignedCertificateTimestamp) �DNSName� DirectoryName� GeneralName� IPAddress� OtherName� RFC822Name� RegisteredID�UniformResourceIdentifier�_IPADDRESS_TYPES)�Name�RelativeDistinguishedName)�CRLEntryExtensionOID� ExtensionOID�OCSPExtensionOID�ObjectIdentifier�ExtensionTypeVar� ExtensionTypeT)�bound� covariant�� public_key�returnc C sl t | t�r | �tjjtjj�}n>t | t�r@| �tjj tjj �}n | �tjjtjj �}t � |�}t�|��� S �N)� isinstancer � public_bytesr �EncodingZDERZ PublicFormatZPKCS1r ZX962ZUncompressedPointZSubjectPublicKeyInfor Zparse_spki_for_data�hashlib�sha1�digest)r �dataZ serialized� r* �O/opt/nydus/tmp/pip-target-mke_irhy/lib64/python/cryptography/x509/extensions.py� _key_identifier_from_public_key1 s � �� r, �� field_namec s4 t d�� fdd� }� fdd�}� fdd�}|||fS )N�r! c s t t| � ��S r" )�len�getattr��selfr- r* r+ � len_methodJ s z*_make_sequence_methods.<locals>.len_methodc s t t| � ��S r" )�iterr1 r2 r- r* r+ � iter_methodM s z+_make_sequence_methods.<locals>.iter_methodc s t | � �| S r" )r1 )r3 �idxr- r* r+ �getitem_methodP s z._make_sequence_methods.<locals>.getitem_method)�int)r. r4 r6 r8 r* r- r+ �_make_sequence_methodsI s r: c s& e Zd Zeedd�� fdd� Z� ZS )�DuplicateExtensionN��msg�oidr! c s t t| ��|� || _d S r" )�superr; �__init__r> �r3 r= r> �� __class__r* r+ r@ W s zDuplicateExtension.__init__��__name__� __module__� __qualname__�strr r@ � __classcell__r* r* rB r+ r; V s r; c s& e Zd Zeedd�� fdd� Z� ZS )�ExtensionNotFoundNr< c s t t| ��|� || _d S r" )r? rJ r@ r> rA rB r* r+ r@ ] s zExtensionNotFound.__init__rD r* r* rB r+ rJ \ s rJ c @ s* e Zd ZU eje ed< ed�dd�ZdS )r r> r/ c C s t d�| ���dS )z7 Serializes the extension type to DER. z8public_bytes is not implemented for extension type {0!r}N)�NotImplementedError�formatr2 r* r* r+ r$ e s ��zExtensionType.public_bytesN) rE rF rG �typing�ClassVarr �__annotations__�bytesr$ r* r* r* r+ r b s )� metaclassc @ sd e Zd Zejd dd�dd�Zedd�dd�Zeje d d �d d �Z e d �\Z Z Zed�dd�ZdS )� ExtensionszExtension[ExtensionType]N)� extensionsr! c C s t |�| _d S r" )�list� _extensions)r3 rS r* r* r+ r@ q s zExtensions.__init__)r> r! c C s0 | D ]}|j |kr| S qtd�|�|��d S )N�No {} extension was found)r> rJ rL )r3 r> �extr* r* r+ �get_extension_for_oidv s z Extensions.get_extension_for_oidzExtension[ExtensionTypeVar])�extclassr! c C sD |t u rtd��| D ]}t|j|�r| S qtd�|�|j��d S )Nz|UnrecognizedExtension can't be used with get_extension_for_class because more than one instance of the class may be present.rV )�UnrecognizedExtension� TypeErrorr# �valuerJ rL r> )r3 rY rW r* r* r+ �get_extension_for_class s � �z"Extensions.get_extension_for_classrU r/ c C s d� | j�S )Nz<Extensions({})>)rL rU r2 r* r* r+ �__repr__� s zExtensions.__repr__)rE rF rG rM �Iterabler@ r rX �Typer r] r: �__len__�__iter__� __getitem__rH r^ r* r* r* r+ rR p s � � � rR c @ sn e Zd ZejZedd�dd�Zee d�dd�Z ed�d d �Z e d�d d �Z eed�d d��Zed�dd�ZdS )� CRLNumberN�� crl_numberr! c C s t |t�std��|| _d S �Nz crl_number must be an integer�r# r9 r[ � _crl_number�r3 rf r* r* r+ r@ � s zCRLNumber.__init__��otherr! c C s t |t�stS | j|jkS r" )r# rd �NotImplementedrf �r3 rl r* r* r+ �__eq__� s zCRLNumber.__eq__r/ c C s t | j�S r" ��hashrf r2 r* r* r+ �__hash__� s zCRLNumber.__hash__c C s d� | j�S )Nz<CRLNumber({})>)rL rf r2 r* r* r+ r^ � s zCRLNumber.__repr__c C s | j S r" �ri r2 r* r* r+ rf � s zCRLNumber.crl_numberc C s t �| �S r" �� rust_x509Zencode_extension_valuer2 r* r* r+ r$ � s zCRLNumber.public_bytes)rE rF rG r Z CRL_NUMBERr> r9 r@ �object�boolro rr rH r^ �propertyrf rP r$ r* r* r* r+ rd � s rd c @ s� e Zd ZejZeje ejej e eje dd�dd�Z e ed d�dd��Ze dd d �d d ��Zed �d d�Zeed�dd�Ze d �dd�Zeeje d �dd��Zeejeje d �dd��Zeeje d �dd��Zed �dd�Z dS ) �AuthorityKeyIdentifierN)�key_identifier�authority_cert_issuer� authority_cert_serial_numberr! c C sr |d u |d u krt d��|d urBt|�}tdd� |D ��sBtd��|d ur\t|t�s\td��|| _|| _|| _d S )NzXauthority_cert_issuer and authority_cert_serial_number must both be present or both Nonec s s | ]}t |t�V qd S r" �r# r ��.0�xr* r* r+ � <genexpr>� s z2AuthorityKeyIdentifier.__init__.<locals>.<genexpr>z;authority_cert_issuer must be a list of GeneralName objectsz/authority_cert_serial_number must be an integer) � ValueErrorrT �allr[ r# r9 �_key_identifier�_authority_cert_issuer� _authority_cert_serial_number)r3 rz r{ r| r* r* r+ r@ � s* ���� �z AuthorityKeyIdentifier.__init__r c C s t |�}| |d d d�S �N)rz r{ r| �r, )�clsr r( r* r* r+ �from_issuer_public_key� s �z-AuthorityKeyIdentifier.from_issuer_public_key�SubjectKeyIdentifier)�skir! c C s | |j d d d�S r� )r( )r� r� r* r* r+ �"from_issuer_subject_key_identifier� s �z9AuthorityKeyIdentifier.from_issuer_subject_key_identifierr/ c C s d� | �S )Nz�<AuthorityKeyIdentifier(key_identifier={0.key_identifier!r}, authority_cert_issuer={0.authority_cert_issuer}, authority_cert_serial_number={0.authority_cert_serial_number})>�rL r2 r* r* r+ r^ � s ��z AuthorityKeyIdentifier.__repr__rk c C s2 t |t�stS | j|jko0| j|jko0| j|jkS r" )r# ry rm rz r{ r| rn r* r* r+ ro � s ���z AuthorityKeyIdentifier.__eq__c C s, | j d u rd }n t| j �}t| j|| jf�S r" )r{ �tuplerq rz r| )r3 Zacir* r* r+ rr s �z AuthorityKeyIdentifier.__hash__c C s | j S r" )r� r2 r* r* r+ rz s z%AuthorityKeyIdentifier.key_identifierc C s | j S r" )r� r2 r* r* r+ r{ s z,AuthorityKeyIdentifier.authority_cert_issuerc C s | j S r" )r� r2 r* r* r+ r| s z3AuthorityKeyIdentifier.authority_cert_serial_numberc C s t �| �S r" rt r2 r* r* r+ r$ s z#AuthorityKeyIdentifier.public_bytes) rE rF rG r ZAUTHORITY_KEY_IDENTIFIERr> rM �OptionalrP r_ r r9 r@ � classmethodr r� r� rH r^ rv rw ro rr rx rz �Listr{ r| r$ r* r* r* r+ ry � s2 � &� � �ry c @ s� e Zd ZejZedd�dd�Zee d d�dd��Z e ed�d d ��Z e ed�d d ��Z ed�d d�Zeed�dd�Zed�dd�Zed�dd�ZdS )r� N)r( r! c C s || _ d S r" �Z_digest)r3 r( r* r* r+ r@ # s z SubjectKeyIdentifier.__init__r c C s | t |��S r" r� )r� r r* r* r+ �from_public_key& s z$SubjectKeyIdentifier.from_public_keyr/ c C s | j S r" r� r2 r* r* r+ r( , s zSubjectKeyIdentifier.digestc C s | j S r" r� r2 r* r* r+ rz 0 s z#SubjectKeyIdentifier.key_identifierc C s d� | j�S )Nz$<SubjectKeyIdentifier(digest={0!r})>)rL r( r2 r* r* r+ r^ 4 s z SubjectKeyIdentifier.__repr__rk c C s t |t�stS t�| j|j�S r" )r# r� rm r Zbytes_eqr( rn r* r* r+ ro 7 s zSubjectKeyIdentifier.__eq__c C s t | j�S r" )rq r( r2 r* r* r+ rr = s z SubjectKeyIdentifier.__hash__c C s t �| �S r" rt r2 r* r* r+ r$ @ s z!SubjectKeyIdentifier.public_bytes)rE rF rG r ZSUBJECT_KEY_IDENTIFIERr> rP r@ r� r r� rx r( rz rH r^ rv rw ro r9 rr r$ r* r* r* r+ r� s �r� c @ sp e Zd ZejZejd dd�dd�Ze d�\Z Z Z e d�dd �Zeed �d d �Zed�d d�Zed�dd�ZdS )�AuthorityInformationAccess�AccessDescriptionN�� descriptionsr! c C s, t |�}tdd� |D ��s"td��|| _d S )Nc s s | ]}t |t�V qd S r" �r# r� r~ r* r* r+ r� K � z6AuthorityInformationAccess.__init__.<locals>.<genexpr>�@Every item in the descriptions list must be an AccessDescription�rT r� r[ � _descriptions�r3 r� r* r* r+ r@ G s �z#AuthorityInformationAccess.__init__r� r/ c C s d� | j�S )Nz <AuthorityInformationAccess({})>�rL r� r2 r* r* r+ r^ U s z#AuthorityInformationAccess.__repr__rk c C s t |t�stS | j|jkS r" )r# r� rm r� rn r* r* r+ ro X s z!AuthorityInformationAccess.__eq__c C s t t| j��S r" �rq r� r� r2 r* r* r+ rr ^ s z#AuthorityInformationAccess.__hash__c C s t �| �S r" rt r2 r* r* r+ r$ a s z'AuthorityInformationAccess.public_bytes)rE rF rG r Z AUTHORITY_INFORMATION_ACCESSr> rM r_ r@ r: ra rb rc rH r^ rv rw ro r9 rr rP r$ r* r* r* r+ r� D s � r� c @ sp e Zd ZejZejd dd�dd�Ze d�\Z Z Z e d�dd �Zeed �d d �Zed�d d�Zed�dd�ZdS )�SubjectInformationAccessr� Nr� c C s, t |�}tdd� |D ��s"td��|| _d S )Nc s s | ]}t |t�V qd S r" r� r~ r* r* r+ r� l r� z4SubjectInformationAccess.__init__.<locals>.<genexpr>r� r� r� r* r* r+ r@ h s �z!SubjectInformationAccess.__init__r� r/ c C s d� | j�S )Nz <SubjectInformationAccess({})>r� r2 r* r* r+ r^ v s z!SubjectInformationAccess.__repr__rk c C s t |t�stS | j|jkS r" )r# r� rm r� rn r* r* r+ ro y s z SubjectInformationAccess.__eq__c C s t t| j��S r" r� r2 r* r* r+ rr s z!SubjectInformationAccess.__hash__c C s t �| �S r" rt r2 r* r* r+ r$ � s z%SubjectInformationAccess.public_bytes)rE rF rG r ZSUBJECT_INFORMATION_ACCESSr> rM r_ r@ r: ra rb rc rH r^ rv rw ro r9 rr rP r$ r* r* r* r+ r� e s � r� c @ sn e Zd Zeedd�dd�Zed�dd�Zee d�d d �Z e d�d d �Z e ed�d d��Ze ed�dd��ZdS )r� N)� access_method�access_locationr! c C s4 t |t�std��t |t�s$td��|| _|| _d S )Nz)access_method must be an ObjectIdentifierz%access_location must be a GeneralName)r# r r[ r �_access_method�_access_location)r3 r� r� r* r* r+ r@ � s zAccessDescription.__init__r/ c C s d� | �S )NzY<AccessDescription(access_method={0.access_method}, access_location={0.access_location})>r� r2 r* r* r+ r^ � s ��zAccessDescription.__repr__rk c C s& t |t�stS | j|jko$| j|jkS r" )r# r� rm r� r� rn r* r* r+ ro � s �zAccessDescription.__eq__c C s t | j| jf�S r" )rq r� r� r2 r* r* r+ rr � s zAccessDescription.__hash__c C s | j S r" )r� r2 r* r* r+ r� � s z AccessDescription.access_methodc C s | j S r" )r� r2 r* r* r+ r� � s z!AccessDescription.access_location)rE rF rG r r r@ rH r^ rv rw ro r9 rr rx r� r� r* r* r* r+ r� � s � r� c @ s� e Zd ZejZeeje dd�dd�Z e ed�dd��Z e eje d�dd ��Z ed�d d �Zeed �d d�Ze d�dd�Zed�dd�ZdS )�BasicConstraintsN)�ca� path_lengthr! c C sX t |t�std��|d ur&|s&td��|d urHt |t�r@|dk rHtd��|| _|| _d S )Nzca must be a boolean valuez)path_length must be None when ca is Falser z2path_length must be a non-negative integer or None)r# rw r[ r� r9 �_ca� _path_length)r3 r� r� r* r* r+ r@ � s ���zBasicConstraints.__init__r/ c C s | j S r" )r� r2 r* r* r+ r� � s zBasicConstraints.cac C s | j S r" )r� r2 r* r* r+ r� � s z BasicConstraints.path_lengthc C s d� | �S )Nz:<BasicConstraints(ca={0.ca}, path_length={0.path_length})>r� r2 r* r* r+ r^ � s ��zBasicConstraints.__repr__rk c C s& t |t�stS | j|jko$| j|jkS r" )r# r� rm r� r� rn r* r* r+ ro � s zBasicConstraints.__eq__c C s t | j| jf�S r" )rq r� r� r2 r* r* r+ rr � s zBasicConstraints.__hash__c C s t �| �S r" rt r2 r* r* r+ r$ � s z BasicConstraints.public_bytes)rE rF rG r ZBASIC_CONSTRAINTSr> rw rM r� r9 r@ rx r� r� rH r^ rv ro rr rP r$ r* r* r* r+ r� � s r� c @ sn e Zd ZejZedd�dd�Zeed�dd��Z e e d�d d �Z ed�d d �Z ed�d d�Zed�dd�ZdS )�DeltaCRLIndicatorNre c C s t |t�std��|| _d S rg rh rj r* r* r+ r@ � s zDeltaCRLIndicator.__init__r/ c C s | j S r" rs r2 r* r* r+ rf � s z DeltaCRLIndicator.crl_numberrk c C s t |t�stS | j|jkS r" )r# r� rm rf rn r* r* r+ ro � s zDeltaCRLIndicator.__eq__c C s t | j�S r" rp r2 r* r* r+ rr � s zDeltaCRLIndicator.__hash__c C s d� | �S )Nz.<DeltaCRLIndicator(crl_number={0.crl_number})>r� r2 r* r* r+ r^ � s zDeltaCRLIndicator.__repr__c C s t �| �S r" rt r2 r* r* r+ r$ � s z DeltaCRLIndicator.public_bytes)rE rF rG r ZDELTA_CRL_INDICATORr> r9 r@ rx rf rv rw ro rr rH r^ rP r$ r* r* r* r+ r� � s r� c @ sp e Zd ZejZejd dd�dd�Ze d�\Z Z Z e d�dd �Zeed �d d �Zed�d d�Zed�dd�ZdS )�CRLDistributionPoints�DistributionPointN��distribution_pointsr! c C s, t |�}tdd� |D ��s"td��|| _d S )Nc s s | ]}t |t�V qd S r" �r# r� r~ r* r* r+ r� s z1CRLDistributionPoints.__init__.<locals>.<genexpr>�?distribution_points must be a list of DistributionPoint objects�rT r� r[ �_distribution_points�r3 r� r* r* r+ r@ � s ��z CRLDistributionPoints.__init__r� r/ c C s d� | j�S )Nz<CRLDistributionPoints({})>�rL r� r2 r* r* r+ r^ s z CRLDistributionPoints.__repr__rk c C s t |t�stS | j|jkS r" )r# r� rm r� rn r* r* r+ ro s z CRLDistributionPoints.__eq__c C s t t| j��S r" �rq r� r� r2 r* r* r+ rr s z CRLDistributionPoints.__hash__c C s t �| �S r" rt r2 r* r* r+ r$ s z"CRLDistributionPoints.public_bytes)rE rF rG r ZCRL_DISTRIBUTION_POINTSr> rM r_ r@ r: ra rb rc rH r^ rv rw ro r9 rr rP r$ r* r* r* r+ r� � s � � r� c @ sp e Zd ZejZejd dd�dd�Ze d�\Z Z Z e d�dd �Zeed �d d �Zed�d d�Zed�dd�ZdS )� FreshestCRLr� Nr� c C s, t |�}tdd� |D ��s"td��|| _d S )Nc s s | ]}t |t�V qd S r" r� r~ r* r* r+ r� % s z'FreshestCRL.__init__.<locals>.<genexpr>r� r� r� r* r* r+ r@ ! s ��zFreshestCRL.__init__r� r/ c C s d� | j�S )Nz<FreshestCRL({})>r� r2 r* r* r+ r^ 3 s zFreshestCRL.__repr__rk c C s t |t�stS | j|jkS r" )r# r� rm r� rn r* r* r+ ro 6 s zFreshestCRL.__eq__c C s t t| j��S r" r� r2 r* r* r+ rr < s zFreshestCRL.__hash__c C s t �| �S r" rt r2 r* r* r+ r$ ? s zFreshestCRL.public_bytes)rE rF rG r Z FRESHEST_CRLr> rM r_ r@ r: ra rb rc rH r^ rv rw ro r9 rr rP r$ r* r* r* r+ r� s � � r� c @ s� e Zd Zejeje eje ejejd ejeje dd�dd�Z e d�dd�Z e e d �d d �Zed�d d �Zeejeje d�dd��Zeeje d�dd��Zeejejd d�dd��Zeejeje d�dd��ZdS )r� � ReasonFlagsN)� full_name� relative_name�reasons� crl_issuerr! c C s� |r|rt d��|d ur:t|�}tdd� |D ��s:td��|rPt|t�sPtd��|d urzt|�}tdd� |D ��sztd��|r�t|t�r�tdd� |D ��s�td ��|r�tj|v s�tj |v r�t d ��|r�|s�|s�|s�t d ��|| _ || _ || _ || _ d S ) NzOYou cannot provide both full_name and relative_name, at least one must be None.c s s | ]}t |t�V qd S r" r} r~ r* r* r+ r� S r� z-DistributionPoint.__init__.<locals>.<genexpr>z/full_name must be a list of GeneralName objectsz1relative_name must be a RelativeDistinguishedNamec s s | ]}t |t�V qd S r" r} r~ r* r* r+ r� ` r� z2crl_issuer must be None or a list of general namesc s s | ]}t |t�V qd S r" �r# r� r~ r* r* r+ r� g r� z0reasons must be None or frozenset of ReasonFlagszLunspecified and remove_from_crl are not valid reasons in a DistributionPointzPYou must supply crl_issuer, full_name, or relative_name when reasons is not None)r� rT r� r[ r# r � frozensetr� � unspecified�remove_from_crl� _full_name�_relative_name�_reasons� _crl_issuer)r3 r� r� r� r� r* r* r+ r@ D sV �� ��������zDistributionPoint.__init__r/ c C s d� | �S )Nz}<DistributionPoint(full_name={0.full_name}, relative_name={0.relative_name}, reasons={0.reasons}, crl_issuer={0.crl_issuer})>r� r2 r* r* r+ r^ s ��zDistributionPoint.__repr__rk c C s> t |t�stS | j|jko<| j|jko<| j|jko<| j|jkS r" )r# r� rm r� r� r� r� rn r* r* r+ ro � s � � �zDistributionPoint.__eq__c C sH | j d urt| j �}nd }| jd ur0t| j�}nd }t|| j| j|f�S r" )r� r� r� rq r� r� )r3 �fnr� r* r* r+ rr � s � �zDistributionPoint.__hash__c C s | j S r" �r� r2 r* r* r+ r� � s zDistributionPoint.full_namec C s | j S r" �r� r2 r* r* r+ r� � s z DistributionPoint.relative_namec C s | j S r" )r� r2 r* r* r+ r� � s zDistributionPoint.reasonsc C s | j S r" )r� r2 r* r* r+ r� � s z DistributionPoint.crl_issuer)rE rF rG rM r� r_ r r � FrozenSetr@ rH r^ rv rw ro r9 rr rx r� r� r� r� r� r* r* r* r+ r� C s" � ; r� c @ s4 e Zd ZdZdZdZdZdZdZdZ dZ d Z d Z d S ) r� r� Z keyCompromiseZ cACompromiseZaffiliationChanged� supersededZcessationOfOperationZcertificateHoldZprivilegeWithdrawnZ aACompromiseZ removeFromCRLN) rE rF rG r� �key_compromise� ca_compromise�affiliation_changedr� �cessation_of_operation�certificate_hold�privilege_withdrawn� aa_compromiser� r* r* r* r+ r� � s r� )� � � � � � � � c @ s� e Zd ZejZeje eje dd�dd�Z e d�dd�Z e e d�d d �Zed�d d �Zeeje d�d d��Zeeje d�dd��Zed�dd�ZdS )�PolicyConstraintsN)�require_explicit_policy�inhibit_policy_mappingr! c C s\ |d urt |t�std��|d ur4t |t�s4td��|d u rL|d u rLtd��|| _|| _d S )Nz>require_explicit_policy must be a non-negative integer or Nonez=inhibit_policy_mapping must be a non-negative integer or NonezSAt least one of require_explicit_policy and inhibit_policy_mapping must not be None)r# r9 r[ r� �_require_explicit_policy�_inhibit_policy_mapping)r3 r� r� r* r* r+ r@ � s$ �� ���zPolicyConstraints.__init__r/ c C s d� | �S )Nz{<PolicyConstraints(require_explicit_policy={0.require_explicit_policy}, inhibit_policy_mapping={0.inhibit_policy_mapping})>r� r2 r* r* r+ r^ � s ��zPolicyConstraints.__repr__rk c C s& t |t�stS | j|jko$| j|jkS r" )r# r� rm r� r� rn r* r* r+ ro � s �zPolicyConstraints.__eq__c C s t | j| jf�S r" )rq r� r� r2 r* r* r+ rr s �zPolicyConstraints.__hash__c C s | j S r" )r� r2 r* r* r+ r� s z)PolicyConstraints.require_explicit_policyc C s | j S r" )r� r2 r* r* r+ r� s z(PolicyConstraints.inhibit_policy_mappingc C s t �| �S r" rt r2 r* r* r+ r$ s z PolicyConstraints.public_bytes)rE rF rG r ZPOLICY_CONSTRAINTSr> rM r� r9 r@ rH r^ rv rw ro rr rx r� r� rP r$ r* r* r* r+ r� � s � r� c @ sp e Zd ZejZejd dd�dd�Ze d�\Z Z Z e d�dd �Zeed �d d �Zed�d d�Zed�dd�ZdS )�CertificatePolicies�PolicyInformationN)�policiesr! c C s, t |�}tdd� |D ��s"td��|| _d S )Nc s s | ]}t |t�V qd S r" )r# r� r~ r* r* r+ r� r� z/CertificatePolicies.__init__.<locals>.<genexpr>z;Every item in the policies list must be a PolicyInformation)rT r� r[ � _policies)r3 r� r* r* r+ r@ s �z CertificatePolicies.__init__r� r/ c C s d� | j�S )Nz<CertificatePolicies({})>)rL r� r2 r* r* r+ r^ ( s z CertificatePolicies.__repr__rk c C s t |t�stS | j|jkS r" )r# r� rm r� rn r* r* r+ ro + s zCertificatePolicies.__eq__c C s t t| j��S r" )rq r� r� r2 r* r* r+ rr 1 s z CertificatePolicies.__hash__c C s t �| �S r" rt r2 r* r* r+ r$ 4 s z CertificatePolicies.public_bytes)rE rF rG r ZCERTIFICATE_POLICIESr> rM r_ r@ r: ra rb rc rH r^ rv rw ro r9 rr rP r$ r* r* r* r+ r� s r� c @ s� e Zd Zeejejejedf dd�dd�Z ed�dd�Z e e d �d d �Z ed�d d �Zeed�dd��Zeejejejedf d�dd��ZdS )r� � UserNoticeN)�policy_identifier�policy_qualifiersr! c C sL t |t�std��|| _|d urBt|�}tdd� |D ��sBtd��|| _d S )Nz-policy_identifier must be an ObjectIdentifierc s s | ]}t |ttf�V qd S r" )r# rH r� r~ r* r* r+ r� G s z-PolicyInformation.__init__.<locals>.<genexpr>zMpolicy_qualifiers must be a list of strings and/or UserNotice objects or None)r# r r[ �_policy_identifierrT r� �_policy_qualifiers)r3 r� r� r* r* r+ r@ 9 s ��zPolicyInformation.__init__r/ c C s d� | �S )Nze<PolicyInformation(policy_identifier={0.policy_identifier}, policy_qualifiers={0.policy_qualifiers})>r� r2 r* r* r+ r^ Q s ��zPolicyInformation.__repr__rk c C s& t |t�stS | j|jko$| j|jkS r" )r# r� rm r� r� rn r* r* r+ ro W s �zPolicyInformation.__eq__c C s( | j d urt| j �}nd }t| j|f�S r" )r� r� rq r� )r3 Zpqr* r* r+ rr ` s �zPolicyInformation.__hash__c C s | j S r" )r� r2 r* r* r+ r� j s z#PolicyInformation.policy_identifierc C s | j S r" )r� r2 r* r* r+ r� n s z#PolicyInformation.policy_qualifiers)rE rF rG r rM r� r_ �UnionrH r@ r^ rv rw ro r9 rr rx r� r� r� r* r* r* r+ r� 8 s �� �r� c @ s� e Zd Zejd eje dd�dd�Zed�dd�Zee d �d d �Z e d�d d �Z e ejd d�dd��Ze eje d�dd��ZdS )r� �NoticeReferenceN)�notice_reference� explicit_textr! c C s& |rt |t�std��|| _|| _d S )Nz2notice_reference must be None or a NoticeReference)r# r� r[ �_notice_reference�_explicit_text)r3 r� r� r* r* r+ r@ v s ��zUserNotice.__init__r/ c C s d� | �S )NzV<UserNotice(notice_reference={0.notice_reference}, explicit_text={0.explicit_text!r})>r� r2 r* r* r+ r^ � s ��zUserNotice.__repr__rk c C s& t |t�stS | j|jko$| j|jkS r" )r# r� rm r� r� rn r* r* r+ ro � s �zUserNotice.__eq__c C s t | j| jf�S r" )rq r� r� r2 r* r* r+ rr � s zUserNotice.__hash__c C s | j S r" )r� r2 r* r* r+ r� � s zUserNotice.notice_referencec C s | j S r" )r� r2 r* r* r+ r� � s zUserNotice.explicit_text)rE rF rG rM r� rH r@ r^ rv rw ro r9 rr rx r� r� r* r* r* r+ r� u s � r� c @ s� e Zd Zeje eje dd�dd�Zed�dd�Z e e d�d d �Z ed�d d �Z eeje d�d d��Zeeje d�dd��ZdS )r� N)� organization�notice_numbersr! c C s2 || _ t|�}tdd� |D ��s(td��|| _d S )Nc s s | ]}t |t�V qd S r" )r# r9 r~ r* r* r+ r� � r� z+NoticeReference.__init__.<locals>.<genexpr>z)notice_numbers must be a list of integers)� _organizationrT r� r[ �_notice_numbers)r3 r� r� r* r* r+ r@ � s zNoticeReference.__init__r/ c C s d� | �S )NzU<NoticeReference(organization={0.organization!r}, notice_numbers={0.notice_numbers})>r� r2 r* r* r+ r^ � s ��zNoticeReference.__repr__rk c C s& t |t�stS | j|jko$| j|jkS r" )r# r� rm r� r� rn r* r* r+ ro � s �zNoticeReference.__eq__c C s t | jt| j�f�S r" )rq r� r� r� r2 r* r* r+ rr � s zNoticeReference.__hash__c C s | j S r" )r� r2 r* r* r+ r� � s z NoticeReference.organizationc C s | j S r" )r� r2 r* r* r+ r� � s z NoticeReference.notice_numbers)rE rF rG rM r� rH r_ r9 r@ r^ rv rw ro rr rx r� r� r� r* r* r* r+ r� � s � r� c @ sp e Zd ZejZeje dd�dd�Z e d�\Z Z Z ed�dd�Zeed �d d �Zed�d d �Zed�dd�ZdS )�ExtendedKeyUsageN)�usagesr! c C s, t |�}tdd� |D ��s"td��|| _d S )Nc s s | ]}t |t�V qd S r" )r# r r~ r* r* r+ r� � r� z,ExtendedKeyUsage.__init__.<locals>.<genexpr>z9Every item in the usages list must be an ObjectIdentifier)rT r� r[ �_usages)r3 r� r* r* r+ r@ � s �zExtendedKeyUsage.__init__r� r/ c C s d� | j�S )Nz<ExtendedKeyUsage({})>)rL r� r2 r* r* r+ r^ � s zExtendedKeyUsage.__repr__rk c C s t |t�stS | j|jkS r" )r# r� rm r� rn r* r* r+ ro � s zExtendedKeyUsage.__eq__c C s t t| j��S r" )rq r� r� r2 r* r* r+ rr � s zExtendedKeyUsage.__hash__c C s t �| �S r" rt r2 r* r* r+ r$ � s z ExtendedKeyUsage.public_bytes)rE rF rG r ZEXTENDED_KEY_USAGEr> rM r_ r r@ r: ra rb rc rH r^ rv rw ro r9 rr rP r$ r* r* r* r+ r� � s r� c @ sL e Zd ZejZeed�dd�Ze d�dd�Z e d�dd�Z e d�d d �Zd S ) � OCSPNoCheckrk c C s t |t�stS dS �NT)r# r� rm rn r* r* r+ ro � s zOCSPNoCheck.__eq__r/ c C s t t�S r" )rq r� r2 r* r* r+ rr � s zOCSPNoCheck.__hash__c C s dS )Nz<OCSPNoCheck()>r* r2 r* r* r+ r^ � s zOCSPNoCheck.__repr__c C s t �| �S r" rt r2 r* r* r+ r$ � s zOCSPNoCheck.public_bytesN)rE rF rG r Z OCSP_NO_CHECKr> rv rw ro r9 rr rH r^ rP r$ r* r* r* r+ r� � s r� c @ sL e Zd ZejZeed�dd�Ze d�dd�Z e d�dd�Z e d�d d �Zd S ) � PrecertPoisonrk c C s t |t�stS dS r� )r# r� rm rn r* r* r+ ro � s zPrecertPoison.__eq__r/ c C s t t�S r" )rq r� r2 r* r* r+ rr s zPrecertPoison.__hash__c C s dS )Nz<PrecertPoison()>r* r2 r* r* r+ r^ s zPrecertPoison.__repr__c C s t �| �S r" rt r2 r* r* r+ r$ s zPrecertPoison.public_bytesN)rE rF rG r ZPRECERT_POISONr> rv rw ro r9 rr rH r^ rP r$ r* r* r* r+ r� � s r� c @ sp e Zd ZejZejd dd�dd�Ze d�\Z Z Z e d�dd �Zeed �d d �Zed�d d�Zed�dd�ZdS )� TLSFeature�TLSFeatureTypeN)�featuresr! c C s8 t |�}tdd� |D ��r&t|�dkr.td��|| _d S )Nc s s | ]}t |t�V qd S r" )r# r� r~ r* r* r+ r� r� z&TLSFeature.__init__.<locals>.<genexpr>r z@features must be a list of elements from the TLSFeatureType enum)rT r� r0 r[ � _features)r3 r� r* r* r+ r@ s � ��zTLSFeature.__init__r� r/ c C s d� | �S )Nz$<TLSFeature(features={0._features})>r� r2 r* r* r+ r^ s zTLSFeature.__repr__rk c C s t |t�stS | j|jkS r" )r# r� rm r� rn r* r* r+ ro ! s zTLSFeature.__eq__c C s t t| j��S r" )rq r� r� r2 r* r* r+ rr ' s zTLSFeature.__hash__c C s t �| �S r" rt r2 r* r* r+ r$ * s zTLSFeature.public_bytes)rE rF rG r Z TLS_FEATUREr> rM r_ r@ r: ra rb rc rH r^ rv rw ro r9 rr rP r$ r* r* r* r+ r� s r� c @ s e Zd ZdZdZdS )r� r� � N)rE rF rG Zstatus_requestZstatus_request_v2r* r* r* r+ r� . s r� c C s i | ] }|j |�qS r* �r\ r~ r* r* r+ � <dictcomp>9 r� r� c @ sn e Zd ZejZedd�dd�Zed�dd�Z e e d�d d �Z ed�d d �Z eed�d d��Zed�dd�ZdS )�InhibitAnyPolicyN)� skip_certsr! c C s, t |t�std��|dk r"td��|| _d S )Nz skip_certs must be an integerr z)skip_certs must be a non-negative integer)r# r9 r[ r� � _skip_certs)r3 r� r* r* r+ r@ ? s zInhibitAnyPolicy.__init__r/ c C s d� | �S )Nz-<InhibitAnyPolicy(skip_certs={0.skip_certs})>r� r2 r* r* r+ r^ H s zInhibitAnyPolicy.__repr__rk c C s t |t�stS | j|jkS r" )r# r� rm r� rn r* r* r+ ro K s zInhibitAnyPolicy.__eq__c C s t | j�S r" )rq r� r2 r* r* r+ rr Q s zInhibitAnyPolicy.__hash__c C s | j S r" )r r2 r* r* r+ r� T s zInhibitAnyPolicy.skip_certsc C s t �| �S r" rt r2 r* r* r+ r$ X s z InhibitAnyPolicy.public_bytes)rE rF rG r ZINHIBIT_ANY_POLICYr> r9 r@ rH r^ rv rw ro rr rx r� rP r$ r* r* r* r+ r� < s r� c @ s e Zd ZejZeeeeeeeeedd� dd�Zeed�dd��Z eed�dd ��Z eed�d d ��Z eed�d d ��Z eed�dd��Z eed�dd��Zeed�dd��Zeed�dd��Zeed�dd��Zed�dd�Zeed�dd �Zed�d d �Zed�d d �ZdS )!�KeyUsageN) �digital_signature�content_commitment�key_encipherment�data_encipherment� key_agreement� key_cert_sign�crl_sign� encipher_only� decipher_onlyr! c C sN |s|s | rt d��|| _|| _|| _|| _|| _|| _|| _|| _| | _ d S )NzKencipher_only and decipher_only can only be true when key_agreement is true) r� �_digital_signature�_content_commitment�_key_encipherment�_data_encipherment�_key_agreement�_key_cert_sign� _crl_sign�_encipher_only�_decipher_only) r3 r r r r r r r r r r* r* r+ r@ _ s �zKeyUsage.__init__r/ c C s | j S r" )r r2 r* r* r+ r { s zKeyUsage.digital_signaturec C s | j S r" )r r2 r* r* r+ r s zKeyUsage.content_commitmentc C s | j S r" )r r2 r* r* r+ r � s zKeyUsage.key_enciphermentc C s | j S r" )r r2 r* r* r+ r � s zKeyUsage.data_enciphermentc C s | j S r" )r r2 r* r* r+ r � s zKeyUsage.key_agreementc C s | j S r" )r r2 r* r* r+ r � s zKeyUsage.key_cert_signc C s | j S r" )r r2 r* r* r+ r � s zKeyUsage.crl_signc C s | j std��n| jS d S )Nz7encipher_only is undefined unless key_agreement is true)r r� r r2 r* r* r+ r � s �zKeyUsage.encipher_onlyc C s | j std��n| jS d S )Nz7decipher_only is undefined unless key_agreement is true)r r� r r2 r* r* r+ r � s �zKeyUsage.decipher_onlyc C s: z| j }| j}W n ty* d}d}Y n0 d�| ||�S )NFa- <KeyUsage(digital_signature={0.digital_signature}, content_commitment={0.content_commitment}, key_encipherment={0.key_encipherment}, data_encipherment={0.data_encipherment}, key_agreement={0.key_agreement}, key_cert_sign={0.key_cert_sign}, crl_sign={0.crl_sign}, encipher_only={1}, decipher_only={2})>)r r r� rL )r3 r r r* r* r+ r^ � s ��zKeyUsage.__repr__rk c C sz t |t�stS | j|jkox| j|jkox| j|jkox| j|jkox| j|jkox| j|jkox| j |j kox| j |j kox| j |j kS r" ) r# r rm r r r r r r r r r rn r* r* r+ ro � s& � � � � � � � �zKeyUsage.__eq__c C s, t | j| j| j| j| j| j| j| j| j f �S r" ) rq r r r r r r r r r r2 r* r* r+ rr � s ��zKeyUsage.__hash__c C s t �| �S r" rt r2 r* r* r+ r$ � s zKeyUsage.public_bytes)rE rF rG r Z KEY_USAGEr> rw r@ rx r r r r r r r r r rH r^ rv ro r9 rr rP r$ r* r* r* r+ r \ sD � r c @ s� e Zd ZejZejeje ejeje dd�dd�Z e e d�dd�Z eje dd�d d �Zed �d d �Zed �dd�Zeejeje d �dd��Zeejeje d �dd��Zed �dd�ZdS )�NameConstraintsN)�permitted_subtrees�excluded_subtreesr! c C s� |d ur@t |�}|s td��tdd� |D ��s6td��| �|� |d ur�t |�}|s\td��tdd� |D ��svtd��| �|� |d u r�|d u r�td��|| _|| _d S ) Nz3permitted_subtrees must be a non-empty list or Nonec s s | ]}t |t�V qd S r" r} r~ r* r* r+ r� � r� z+NameConstraints.__init__.<locals>.<genexpr>z@permitted_subtrees must be a list of GeneralName objects or Nonez2excluded_subtrees must be a non-empty list or Nonec s s | ]}t |t�V qd S r" r} r~ r* r* r+ r� � r� z?excluded_subtrees must be a list of GeneralName objects or NonezIAt least one of permitted_subtrees and excluded_subtrees must not be None)rT r� r� r[ �_validate_ip_name�_permitted_subtrees�_excluded_subtrees)r3 r r r* r* r+ r@ � s8 �� �� �zNameConstraints.__init__rk c C s& t |t�stS | j|jko$| j|jkS r" )r# r rm r r rn r* r* r+ ro s �zNameConstraints.__eq__)�treer! c C s t dd� |D ��rtd��d S )Nc s s. | ]&}t |t�o$t |jtjtjf� V qd S r" )r# r r\ � ipaddress� IPv4Network� IPv6Network)r �namer* r* r+ r� s � �z4NameConstraints._validate_ip_name.<locals>.<genexpr>zGIPAddress name constraints must be an IPv4Network or IPv6Network object)�anyr[ )r3 r r* r* r+ r s ��z!NameConstraints._validate_ip_namer/ c C s d� | �S )Nze<NameConstraints(permitted_subtrees={0.permitted_subtrees}, excluded_subtrees={0.excluded_subtrees})>r� r2 r* r* r+ r^ $ s ��zNameConstraints.__repr__c C s@ | j d urt| j �}nd }| jd ur0t| j�}nd }t||f�S r" )r r� r rq )r3 Zps�esr* r* r+ rr * s � �zNameConstraints.__hash__c C s | j S r" )r r2 r* r* r+ r ; s z"NameConstraints.permitted_subtreesc C s | j S r" )r r2 r* r* r+ r A s z!NameConstraints.excluded_subtreesc C s t �| �S r" rt r2 r* r* r+ r$ G s z NameConstraints.public_bytes)rE rF rG r ZNAME_CONSTRAINTSr> rM r� r_ r r@ rv rw ro r rH r^ r9 rr rx r� r r rP r$ r* r* r* r+ r � s � * ��r c @ s� e Zd Zeeedd�dd�Zeed�dd��Zeed�dd ��Z eed�d d ��Z e d�d d �Z e ed�dd�Zed�dd�ZdS )� ExtensionN)r> �criticalr\ r! c C s: t |t�std��t |t�s$td��|| _|| _|| _d S )Nz2oid argument must be an ObjectIdentifier instance.z critical must be a boolean value)r# r r[ rw �_oid� _critical�_value)r3 r> r" r\ r* r* r+ r@ L s � zExtension.__init__r/ c C s | j S r" �r# r2 r* r* r+ r> [ s z Extension.oidc C s | j S r" )r$ r2 r* r* r+ r" _ s zExtension.criticalc C s | j S r" �r% r2 r* r* r+ r\ c s zExtension.valuec C s d� | �S )Nz@<Extension(oid={0.oid}, critical={0.critical}, value={0.value})>r� r2 r* r* r+ r^ g s ��zExtension.__repr__rk c C s2 t |t�stS | j|jko0| j|jko0| j|jkS r" )r# r! rm r> r" r\ rn r* r* r+ ro m s � �zExtension.__eq__c C s t | j| j| jf�S r" )rq r> r" r\ r2 r* r* r+ rr w s zExtension.__hash__)rE rF rG r rw r r@ rx r> r" r\ rH r^ rv ro r9 rr r* r* r* r+ r! K s � r! c @ s� e Zd Zeje dd�dd�Zed�\ZZ Z ej ej ej e ej e ej e f eje d�dd��Zej ej e eje d�d d��Zej ej e eje d�d d��Zej ej e eje d�d d��Zej ej e eje d�d d��Zej ej e ej e ej e ej e ej e ej e ej e f ej eje eje eje eje eje f d�d d�Zed�dd�Ze e d�dd�Z e d�dd�Z dS )� GeneralNamesN�� general_namesr! c C s, t |�}tdd� |D ��s"td��|| _d S )Nc s s | ]}t |t�V qd S r" r} r~ r* r* r+ r� ~ r� z(GeneralNames.__init__.<locals>.<genexpr>z^Every item in the general_names list must be an object conforming to the GeneralName interface)rT r� r[ �_general_names�r3 r* r* r* r+ r@ | s �zGeneralNames.__init__r+ ��typer! c C s d S r" r* �r3 r. r* r* r+ �get_values_for_type� s z GeneralNames.get_values_for_typec C s d S r" r* r/ r* r* r+ r0 � s c C s d S r" r* r/ r* r* r+ r0 � s c C s d S r" r* r/ r* r* r+ r0 � s c C s d S r" r* r/ r* r* r+ r0 � s c s0 � fdd�| D �}� t kr(dd� |D �S t|�S )Nc 3 s | ]}t |� �r|V qd S r" )r# �r �i�r. r* r+ r� � r� z3GeneralNames.get_values_for_type.<locals>.<genexpr>c S s g | ] }|j �qS r* r� r1 r* r* r+ � <listcomp>� r� z4GeneralNames.get_values_for_type.<locals>.<listcomp>)r rT )r3 r. �objsr* r3 r+ r0 � s r/ c C s d� | j�S )Nz<GeneralNames({})>�rL r+ r2 r* r* r+ r^ � s zGeneralNames.__repr__rk c C s t |t�stS | j|jkS r" )r# r( rm r+ rn r* r* r+ ro � s zGeneralNames.__eq__c C s t t| j��S r" )rq r� r+ r2 r* r* r+ rr � s zGeneralNames.__hash__)!rE rF rG rM r_ r r@ r: ra rb rc �overloadr� r` r r r r� rH r0 r r r r r r r r^ rv rw ro r9 rr r* r* r* r+ r( { sb ��� ������ ��� r( c @ s� e Zd ZejZeje dd�dd�Z e d�\Z Z Z ejejeje eje eje f eje d�dd��Zejeje eje d�d d��Zejeje eje d�d d��Zejeje eje d�d d��Zejeje eje d�d d��Zejeje eje eje eje eje eje eje f ejeje eje eje eje eje f d�d d�Zed�dd�Z e e d�dd�Z!e"d�dd�Z#e$d�dd�Z%dS )�SubjectAlternativeNameNr) c C s t |�| _d S r" �r( r+ r, r* r* r+ r@ � s z SubjectAlternativeName.__init__r+ r- c C s d S r" r* r/ r* r* r+ r0 � s z*SubjectAlternativeName.get_values_for_typec C s d S r" r* r/ r* r* r+ r0 � s c C s d S r" r* r/ r* r* r+ r0 � s c C s d S r" r* r/ r* r* r+ r0 � s c C s d S r" r* r/ r* r* r+ r0 � s c C s | j �|�S r" �r+ r0 r/ r* r* r+ r0 s r/ c C s d� | j�S )Nz <SubjectAlternativeName({})>r6 r2 r* r* r+ r^ s z SubjectAlternativeName.__repr__rk c C s t |t�stS | j|jkS r" )r# r8 rm r+ rn r* r* r+ ro s z SubjectAlternativeName.__eq__c C s t | j�S r" �rq r+ r2 r* r* r+ rr s z SubjectAlternativeName.__hash__c C s t �| �S r" rt r2 r* r* r+ r$ ! s z#SubjectAlternativeName.public_bytes)&rE rF rG r ZSUBJECT_ALTERNATIVE_NAMEr> rM r_ r r@ r: ra rb rc r7 r� r` r r r r� rH r0 r r r r r r r r^ rv rw ro r9 rr rP r$ r* r* r* r+ r8 � sf ��� ������ ��� r8 c @ s� e Zd ZejZeje dd�dd�Z e d�\Z Z Z ejejeje eje eje f eje d�dd��Zejeje eje d�d d��Zejeje eje d�d d��Zejeje eje d�d d��Zejeje eje d�d d��Zejeje eje eje eje eje eje eje f ejeje eje eje eje eje f d�d d�Zed�dd�Z e e d�dd�Z!e"d�dd�Z#e$d�dd�Z%dS )�IssuerAlternativeNameNr) c C s t |�| _d S r" r9 r, r* r* r+ r@ ( s z IssuerAlternativeName.__init__r+ r- c C s d S r" r* r/ r* r* r+ r0 - s z)IssuerAlternativeName.get_values_for_typec C s d S r" r* r/ r* r* r+ r0 8 s c C s d S r" r* r/ r* r* r+ r0 ? s c C s d S r" r* r/ r* r* r+ r0 F s c C s d S r" r* r/ r* r* r+ r0 L s c C s | j �|�S r" r: r/ r* r* r+ r0 R s r/ c C s d� | j�S )Nz<IssuerAlternativeName({})>r6 r2 r* r* r+ r^ f s z IssuerAlternativeName.__repr__rk c C s t |t�stS | j|jkS r" )r# r< rm r+ rn r* r* r+ ro i s z IssuerAlternativeName.__eq__c C s t | j�S r" r; r2 r* r* r+ rr o s z IssuerAlternativeName.__hash__c C s t �| �S r" rt r2 r* r* r+ r$ r s z"IssuerAlternativeName.public_bytes)&rE rF rG r ZISSUER_ALTERNATIVE_NAMEr> rM r_ r r@ r: ra rb rc r7 r� r` r r r r� rH r0 r r r r r r r r^ rv rw ro r9 rr rP r$ r* r* r* r+ r< % sf ��� ������ ��� r< c @ s� e Zd ZejZeje dd�dd�Z e d�\Z Z Z ejejeje eje eje f eje d�dd��Zejeje eje d�d d��Zejeje eje d�d d��Zejeje eje d�d d��Zejeje eje d�d d��Zejeje eje eje eje eje eje eje f ejeje eje eje eje eje f d�d d�Zed�dd�Z e e d�dd�Z!e"d�dd�Z#e$d�dd�Z%dS )�CertificateIssuerNr) c C s t |�| _d S r" r9 r, r* r* r+ r@ y s zCertificateIssuer.__init__r+ r- c C s d S r" r* r/ r* r* r+ r0 ~ s z%CertificateIssuer.get_values_for_typec C s d S r" r* r/ r* r* r+ r0 � s c C s d S r" r* r/ r* r* r+ r0 � s c C s d S r" r* r/ r* r* r+ r0 � s c C s d S r" r* r/ r* r* r+ r0 � s c C s | j �|�S r" r: r/ r* r* r+ r0 � s r/ c C s d� | j�S )Nz<CertificateIssuer({})>r6 r2 r* r* r+ r^ � s zCertificateIssuer.__repr__rk c C s t |t�stS | j|jkS r" )r# r= rm r+ rn r* r* r+ ro � s zCertificateIssuer.__eq__c C s t | j�S r" r; r2 r* r* r+ rr � s zCertificateIssuer.__hash__c C s t �| �S r" rt r2 r* r* r+ r$ � s z CertificateIssuer.public_bytes)&rE rF rG r ZCERTIFICATE_ISSUERr> rM r_ r r@ r: ra rb rc r7 r� r` r r r r� rH r0 r r r r r r r r^ rv rw ro r9 rr rP r$ r* r* r* r+ r= v sf ��� ������ ��� r= c @ sn e Zd ZejZedd�dd�Zed�dd�Z e e d�d d �Z e d�d d �Zeed�d d��Zed�dd�ZdS )� CRLReasonN)�reasonr! c C s t |t�std��|| _d S )Nz*reason must be an element from ReasonFlags)r# r� r[ �_reason)r3 r? r* r* r+ r@ � s zCRLReason.__init__r/ c C s d� | j�S )Nz<CRLReason(reason={})>)rL r@ r2 r* r* r+ r^ � s zCRLReason.__repr__rk c C s t |t�stS | j|jkS r" )r# r> rm r? rn r* r* r+ ro � s zCRLReason.__eq__c C s t | j�S r" )rq r? r2 r* r* r+ rr � s zCRLReason.__hash__c C s | j S r" )r@ r2 r* r* r+ r? � s zCRLReason.reasonc C s t �| �S r" rt r2 r* r* r+ r$ � s zCRLReason.public_bytes)rE rF rG r Z CRL_REASONr> r� r@ rH r^ rv rw ro r9 rr rx r? rP r$ r* r* r* r+ r> � s r> c @ sr e Zd ZejZejdd�dd�Zed�dd�Z e e d�d d �Z e d�d d �Zeejd�d d��Zed�dd�ZdS )�InvalidityDateN)�invalidity_dater! c C s t |tj�std��|| _d S )Nz+invalidity_date must be a datetime.datetime)r# �datetimer[ �_invalidity_date)r3 rB r* r* r+ r@ � s zInvalidityDate.__init__r/ c C s d� | j�S )Nz$<InvalidityDate(invalidity_date={})>)rL rD r2 r* r* r+ r^ � s �zInvalidityDate.__repr__rk c C s t |t�stS | j|jkS r" )r# rA rm rB rn r* r* r+ ro � s zInvalidityDate.__eq__c C s t | j�S r" )rq rB r2 r* r* r+ rr � s zInvalidityDate.__hash__c C s | j S r" )rD r2 r* r* r+ rB � s z InvalidityDate.invalidity_datec C s t �| �S r" rt r2 r* r* r+ r$ � s zInvalidityDate.public_bytes)rE rF rG r ZINVALIDITY_DATEr> rC r@ rH r^ rv rw ro r9 rr rx rB rP r$ r* r* r* r+ rA � s rA c @ sp e Zd ZejZeje dd�dd�Z e d�\Z Z Z ed�dd�Zed�d d �Zeed �d d �Zed�dd�ZdS )�)PrecertificateSignedCertificateTimestampsN�� signed_certificate_timestampsr! c C s, t |�}tdd� |D ��s"td��|| _d S )Nc s s | ]}t |t�V qd S r" �r# r �r Zsctr* r* r+ r� s �zEPrecertificateSignedCertificateTimestamps.__init__.<locals>.<genexpr>�YEvery item in the signed_certificate_timestamps list must be a SignedCertificateTimestamp�rT r� r[ � _signed_certificate_timestamps�r3 rG r* r* r+ r@ s ��z2PrecertificateSignedCertificateTimestamps.__init__rL r/ c C s d� t| ��S )Nz/<PrecertificateSignedCertificateTimestamps({})>�rL rT r2 r* r* r+ r^ s �z2PrecertificateSignedCertificateTimestamps.__repr__c C s t t| j��S r" �rq r� rL r2 r* r* r+ rr s z2PrecertificateSignedCertificateTimestamps.__hash__rk c C s t |t�stS | j|jkS r" )r# rE rm rL rn r* r* r+ ro # s ��z0PrecertificateSignedCertificateTimestamps.__eq__c C s t �| �S r" rt r2 r* r* r+ r$ , s z6PrecertificateSignedCertificateTimestamps.public_bytes)rE rF rG r Z%PRECERT_SIGNED_CERTIFICATE_TIMESTAMPSr> rM r_ r r@ r: ra rb rc rH r^ r9 rr rv rw ro rP r$ r* r* r* r+ rE s �� � rE c @ sp e Zd ZejZeje dd�dd�Z e d�\Z Z Z ed�dd�Zed�d d �Zeed �d d �Zed�dd�ZdS )�SignedCertificateTimestampsNrF c C s, t |�}tdd� |D ��s"td��|| _d S )Nc s s | ]}t |t�V qd S r" rH rI r* r* r+ r� : s �z7SignedCertificateTimestamps.__init__.<locals>.<genexpr>rJ rK rM r* r* r+ r@ 3 s ��z$SignedCertificateTimestamps.__init__rL r/ c C s d� t| ��S )Nz!<SignedCertificateTimestamps({})>rN r2 r* r* r+ r^ H s z$SignedCertificateTimestamps.__repr__c C s t t| j��S r" rO r2 r* r* r+ rr K s z$SignedCertificateTimestamps.__hash__rk c C s t |t�stS | j|jkS r" )r# rP rm rL rn r* r* r+ ro N s ��z"SignedCertificateTimestamps.__eq__c C s t �| �S r" rt r2 r* r* r+ r$ W s z(SignedCertificateTimestamps.public_bytes)rE rF rG r Z SIGNED_CERTIFICATE_TIMESTAMPSr> rM r_ r r@ r: ra rb rc rH r^ r9 rr rv rw ro rP r$ r* r* r* r+ rP 0 s �� � rP c @ sn e Zd ZejZedd�dd�Zee d�dd�Z e d�d d �Z e d�d d �Zeed�d d��Zed�dd�ZdS )� OCSPNonceN)�noncer! c C s t |t�std��|| _d S )Nznonce must be bytes)r# rP r[ �_nonce)r3 rR r* r* r+ r@ ^ s zOCSPNonce.__init__rk c C s t |t�stS | j|jkS r" )r# rQ rm rR rn r* r* r+ ro d s zOCSPNonce.__eq__r/ c C s t | j�S r" )rq rR r2 r* r* r+ rr j s zOCSPNonce.__hash__c C s d� | �S )Nz <OCSPNonce(nonce={0.nonce!r})>r� r2 r* r* r+ r^ m s zOCSPNonce.__repr__c C s | j S r" )rS r2 r* r* r+ rR p s zOCSPNonce.noncec C s t �| �S r" rt r2 r* r* r+ r$ t s zOCSPNonce.public_bytes)rE rF rG r ZNONCEr> rP r@ rv rw ro r9 rr rH r^ rx rR r$ r* r* r* r+ rQ [ s rQ c @ s" e Zd ZejZejeje eje e e ejej e e e dd�dd�Zed�dd�Zee d�d d �Zed�d d �Zeejeje d�d d��Zeeje d�dd��Zee d�dd��Zee d�dd��Zeejej e d�dd��Zee d�dd��Z ee d�dd��Z e d�dd �Z dS ) �IssuingDistributionPointN)r� r� �only_contains_user_certs�only_contains_ca_certs�only_some_reasons� indirect_crl� only_contains_attribute_certsr! c C s� |d urt |�}|r8t|t�r0tdd� |D ��s8td��|rXtj|v sPtj|v rXtd��t|t �r�t|t �r�t|t �r�t|t �s�td��||||g}t dd� |D ��dkr�td ��t |||||||g�s�td ��|| _ || _ || _|| _|| _|| _|| _d S ) Nc s s | ]}t |t�V qd S r" r� r~ r* r* r+ r� � r� z4IssuingDistributionPoint.__init__.<locals>.<genexpr>z:only_some_reasons must be None or frozenset of ReasonFlagszTunspecified and remove_from_crl are not valid reasons in an IssuingDistributionPointzuonly_contains_user_certs, only_contains_ca_certs, indirect_crl and only_contains_attribute_certs must all be boolean.c S s g | ] }|r|�qS r* r* r~ r* r* r+ r4 � r� z5IssuingDistributionPoint.__init__.<locals>.<listcomp>r� z�Only one of the following can be set to True: only_contains_user_certs, only_contains_ca_certs, indirect_crl, only_contains_attribute_certsz�Cannot create empty extension: if only_contains_user_certs, only_contains_ca_certs, indirect_crl, and only_contains_attribute_certs are all False, then either full_name, relative_name, or only_some_reasons must have a value.)rT r# r� r� r[ r� r� r� r� rw r0 r �_only_contains_user_certs�_only_contains_ca_certs� _indirect_crl� _only_contains_attribute_certs�_only_some_reasonsr� r� ) r3 r� r� rU rV rW rX rY Zcrl_constraintsr* r* r+ r@ { st ��������������� �z!IssuingDistributionPoint.__init__r/ c C s d� | �S )NaG <IssuingDistributionPoint(full_name={0.full_name}, relative_name={0.relative_name}, only_contains_user_certs={0.only_contains_user_certs}, only_contains_ca_certs={0.only_contains_ca_certs}, only_some_reasons={0.only_some_reasons}, indirect_crl={0.indirect_crl}, only_contains_attribute_certs={0.only_contains_attribute_certs})>r� r2 r* r* r+ r^ � s ��z!IssuingDistributionPoint.__repr__rk c C sb t |t�stS | j|jko`| j|jko`| j|jko`| j|jko`| j|jko`| j|jko`| j |j kS r" ) r# rT rm r� r� rU rV rW rX rY rn r* r* r+ ro � s" � � � � ���z IssuingDistributionPoint.__eq__c C s$ t | j| j| j| j| j| j| jf�S r" )rq r� r� rU rV rW rX rY r2 r* r* r+ rr � s ��z!IssuingDistributionPoint.__hash__c C s | j S r" r� r2 r* r* r+ r� � s z"IssuingDistributionPoint.full_namec C s | j S r" r� r2 r* r* r+ r� � s z&IssuingDistributionPoint.relative_namec C s | j S r" )rZ r2 r* r* r+ rU � s z1IssuingDistributionPoint.only_contains_user_certsc C s | j S r" )r[ r2 r* r* r+ rV s z/IssuingDistributionPoint.only_contains_ca_certsc C s | j S r" )r^ r2 r* r* r+ rW s z*IssuingDistributionPoint.only_some_reasonsc C s | j S r" )r\ r2 r* r* r+ rX s z%IssuingDistributionPoint.indirect_crlc C s | j S r" )r] r2 r* r* r+ rY s z6IssuingDistributionPoint.only_contains_attribute_certsc C s t �| �S r" rt r2 r* r* r+ r$ s z%IssuingDistributionPoint.public_bytes) rE rF rG r ZISSUING_DISTRIBUTION_POINTr> rM r� r_ r r rw r� r� r@ rH r^ rv ro r9 rr rx r� r� r� rU rV rW rX rY rP r$ r* r* r* r+ rT x s: � S �rT c @ s| e Zd Zeedd�dd�Zeed�dd��Zeed�dd ��Ze d�d d �Z e e d �d d�Z ed�dd�Zed�dd�ZdS )rZ N)r> r\ r! c C s" t |t�std��|| _|| _d S )Nz oid must be an ObjectIdentifier)r# r r[ r# r% )r3 r> r\ r* r* r+ r@ s z UnrecognizedExtension.__init__r/ c C s | j S r" r& r2 r* r* r+ r> s zUnrecognizedExtension.oidc C s | j S r" r' r2 r* r* r+ r\ # s zUnrecognizedExtension.valuec C s d� | �S )Nz7<UnrecognizedExtension(oid={0.oid}, value={0.value!r})>r� r2 r* r* r+ r^ ' s ��z UnrecognizedExtension.__repr__rk c C s& t |t�stS | j|jko$| j|jkS r" )r# rZ rm r> r\ rn r* r* r+ ro - s z UnrecognizedExtension.__eq__c C s t | j| jf�S r" )rq r> r\ r2 r* r* r+ rr 3 s z UnrecognizedExtension.__hash__c C s | j S r" r� r2 r* r* r+ r$ 6 s z"UnrecognizedExtension.public_bytes)rE rF rG r rP r@ rx r> r\ rH r^ rv rw ro r9 rr r$ r* r* r* r+ rZ s rZ )f�abcrC r& r rM Z cryptographyr Z"cryptography.hazmat.bindings._rustr r ru Z cryptography.hazmat.primitivesr r Z,cryptography.hazmat.primitives.asymmetric.ecr Z-cryptography.hazmat.primitives.asymmetric.rsar Z/cryptography.hazmat.primitives.asymmetric.typesr r Z*cryptography.x509.certificate_transparencyr Z cryptography.x509.general_namer r r r r r r r r Zcryptography.x509.namer r Zcryptography.x509.oidr r r r �TypeVarr rP r, rH r: � Exceptionr; rJ �ABCMetar rR rd ry r� r� r� r� r� r� r� r� r� �Enumr� r� r� r� r� r� r� r� r� Z_REASON_BIT_MAPPINGr� r� r� r� r� r� r� r� r� r� Z_TLS_FEATURE_TYPE_TO_ENUMr� r r �Genericr! r( r8 r< r= r> rA rE rP rQ rT rZ r* r* r* r+ �<module> s� , �� ' l$!!(. %%p� A =+( " j0YQQQ -+ !