⚝
One Hat Cyber Team
⚝
Your IP:
216.73.216.69
Server IP:
97.74.87.16
Server:
Linux 16.87.74.97.host.secureserver.net 5.14.0-503.38.1.el9_5.x86_64 #1 SMP PREEMPT_DYNAMIC Fri Apr 18 08:52:10 EDT 2025 x86_64
Server Software:
Apache
PHP Version:
8.2.28
Buat File
|
Buat Folder
Eksekusi
Dir :
~
/
var
/
opt
/
nydus
/
ops
/
cryptography
/
x509
/
__pycache__
/
View File Name :
ocsp.cpython-39.pyc
a ���g3A � @ sV d dl Z d dlZd dlZd dlmZ d dlmZ d dlmZ d dlm Z m Z d dl m Z d dl mZmZmZ G dd � d ej�ZG d d � d ej�Ze je je je je jfZe jdd �d d�ZG dd� dej�Z G dd� d�Z G dd� de j d�Z G dd� de j d�Z G dd� de j d�Z!G dd� d�Z"G d d � d �Z#e$e d �d d �Z%e$e!d �d!d"�Z&dS )#� N)�utils)�x509)�ocsp)�hashes� serialization)� CERTIFICATE_PRIVATE_KEY_TYPES)�_EARLIEST_UTC_TIME�_convert_to_naive_utc_time�_reject_duplicate_extensionc @ s e Zd ZdZdZdS )�OCSPResponderEncodingzBy HashzBy NameN)�__name__� __module__� __qualname__�HASH�NAME� r r �I/opt/nydus/tmp/pip-target-mke_irhy/lib64/python/cryptography/x509/ocsp.pyr s r c @ s$ e Zd ZdZdZdZdZdZdZdS )�OCSPResponseStatusr � � � � � N) r r r � SUCCESSFULZMALFORMED_REQUEST�INTERNAL_ERRORZ TRY_LATERZ SIG_REQUIRED� UNAUTHORIZEDr r r r r s r )� algorithm�returnc C s t | t�std��d S )Nz9Algorithm must be SHA1, SHA224, SHA256, SHA384, or SHA512)� isinstance�_ALLOWED_HASHES� ValueError)r r r r �_verify_algorithm/ s �r! c @ s e Zd ZdZdZdZdS )�OCSPCertStatusr r r N)r r r ZGOOD�REVOKED�UNKNOWNr r r r r" 6 s r" c @ sH e Zd Zejejejeeje j ej e j ej e j ej d�dd�Z dS )�_SingleResponse)�cert�issuerr � cert_status� this_update� next_update�revocation_time�revocation_reasonc C s t |tj�rt |tj�s td��t|� t |tj�s<td��|d urXt |tj�sXtd��|| _|| _|| _|| _ || _ t |t �s�td��|t j ur�|d ur�t d��|d ur�t d��nHt |tj�s�td��t|�}|tk r�t d��|d ur�t |tj�s�td ��|| _|| _|| _d S ) N�%cert and issuer must be a Certificatez%this_update must be a datetime objectz-next_update must be a datetime object or Nonez8cert_status must be an item from the OCSPCertStatus enumzBrevocation_time can only be provided if the certificate is revokedzDrevocation_reason can only be provided if the certificate is revokedz)revocation_time must be a datetime objectz7The revocation_time must be on or after 1950 January 1.zCrevocation_reason must be an item from the ReasonFlags enum or None)r r � Certificate� TypeErrorr! �datetimeZ_certZ_issuer� _algorithmZ _this_updateZ _next_updater" r# r r r � ReasonFlagsZ _cert_statusZ_revocation_timeZ_revocation_reason) �selfr& r' r r( r) r* r+ r, r r r �__init__= sZ � � � �� � ��z_SingleResponse.__init__N) r r r r r. r � HashAlgorithmr" r0 �typing�Optionalr2 r4 r r r r r% < s �r% c @ s� e Zd Zejed�dd��Zejed�dd��Zejej d�dd��Z eje d�dd ��Z ej ejed �d d ��Zejejd�d d��ZdS )� OCSPRequest�r c C s dS �z3 The hash of the issuer public key Nr �r3 r r r �issuer_key_hash� s zOCSPRequest.issuer_key_hashc C s dS �z- The hash of the issuer name Nr r; r r r �issuer_name_hash� s z OCSPRequest.issuer_name_hashc C s dS �zK The hash algorithm used in the issuer name and key hashes Nr r; r r r �hash_algorithm� s zOCSPRequest.hash_algorithmc C s dS �zM The serial number of the cert whose status is being checked Nr r; r r r � serial_number� s zOCSPRequest.serial_number��encodingr c C s dS )z/ Serializes the request to DER Nr �r3 rD r r r � public_bytes� s zOCSPRequest.public_bytesc C s dS )zP The list of request extensions. Not single request extensions. Nr r; r r r � extensions� s zOCSPRequest.extensionsN)r r r �abc�abstractproperty�bytesr< r> r r5 r@ �intrB �abstractmethodr �EncodingrF r � ExtensionsrG r r r r r8 � s r8 )� metaclassc @ s� e Zd Zejed�dd��Zejeje j d�dd��Z ejeje j d�dd��Z eje j d�dd ��Zejeje j d�d d ��Zejed�d d ��Zejed�dd��Zejejd�dd��Zejed�dd��ZdS )�OCSPSingleResponser9 c C s dS �zY The status of the certificate (an element from the OCSPCertStatus enum) Nr r; r r r �certificate_status� s z%OCSPSingleResponse.certificate_statusc C s dS �z^ The date of when the certificate was revoked or None if not revoked. Nr r; r r r r+ � s z"OCSPSingleResponse.revocation_timec C s dS �zi The reason the certificate was revoked or None if not specified or not revoked. Nr r; r r r r, � s z$OCSPSingleResponse.revocation_reasonc C s dS �z� The most recent time at which the status being indicated is known by the responder to have been correct Nr r; r r r r) � s z OCSPSingleResponse.this_updatec C s dS �zC The time when newer information will be available Nr r; r r r r* � s z OCSPSingleResponse.next_updatec C s dS r: r r; r r r r< � s z"OCSPSingleResponse.issuer_key_hashc C s dS r= r r; r r r r> � s z#OCSPSingleResponse.issuer_name_hashc C s dS r? r r; r r r r@ � s z!OCSPSingleResponse.hash_algorithmc C s dS rA r r; r r r rB � s z OCSPSingleResponse.serial_numberN)r r r rH rI r" rR r6 r7 r0 r+ r r2 r, r) r* rJ r< r> r r5 r@ rK rB r r r r rP � s$ rP c @ s e Zd Zejeje d�dd��Zeje d�dd��Z eje j d�dd��Z ejejej d�dd ��Zejed�d d ��Zejed�d d ��Zejeje j d�dd��Zejeje d�dd��Zejeje j d�dd��Zejejd�dd��Z eje d�dd��Z ejejej d�dd��Z ejeje j d�dd��Z!ejejd�d d ��Z"ejejej d�d d ��Z#ejed�d d!��Z$ejed�d"d#��Z%ejejd�d$d%��Z&eje'd�d&d'��Z(eje j)d�d(d)��Z*eje j)d�d*d+��Z+ej,e-j.ed,�d-d.��Z/d/S )0� OCSPResponser9 c C s dS )z_ An iterator over the individual SINGLERESP structures in the response Nr r; r r r � responses� s zOCSPResponse.responsesc C s dS )zm The status of the response. This is a value from the OCSPResponseStatus enumeration Nr r; r r r �response_status� s z OCSPResponse.response_statusc C s dS )zA The ObjectIdentifier of the signature algorithm Nr r; r r r �signature_algorithm_oid� s z$OCSPResponse.signature_algorithm_oidc C s dS )zX Returns a HashAlgorithm corresponding to the type of the digest signed Nr r; r r r �signature_hash_algorithm� s z%OCSPResponse.signature_hash_algorithmc C s dS )z% The signature bytes Nr r; r r r � signature s zOCSPResponse.signaturec C s dS )z+ The tbsResponseData bytes Nr r; r r r �tbs_response_bytes s z OCSPResponse.tbs_response_bytesc C s dS )z� A list of certificates used to help build a chain to verify the OCSP response. This situation occurs when the OCSP responder uses a delegate certificate. Nr r; r r r � certificates s zOCSPResponse.certificatesc C s dS )z2 The responder's key hash or None Nr r; r r r �responder_key_hash s z OCSPResponse.responder_key_hashc C s dS )z. The responder's Name or None Nr r; r r r �responder_name s zOCSPResponse.responder_namec C s dS )z4 The time the response was produced Nr r; r r r � produced_at s zOCSPResponse.produced_atc C s dS rQ r r; r r r rR & s z OCSPResponse.certificate_statusc C s dS rS r r; r r r r+ , s z OCSPResponse.revocation_timec C s dS rT r r; r r r r, 3 s z OCSPResponse.revocation_reasonc C s dS rU r r; r r r r) : s zOCSPResponse.this_updatec C s dS rV r r; r r r r* A s zOCSPResponse.next_updatec C s dS r: r r; r r r r< G s z OCSPResponse.issuer_key_hashc C s dS r= r r; r r r r> M s z OCSPResponse.issuer_name_hashc C s dS r? r r; r r r r@ S s zOCSPResponse.hash_algorithmc C s dS rA r r; r r r rB Y s zOCSPResponse.serial_numberc C s dS )zR The list of response extensions. Not single response extensions. Nr r; r r r rG _ s zOCSPResponse.extensionsc C s dS )zR The list of single response extensions. Not response extensions. Nr r; r r r �single_extensionse s z OCSPResponse.single_extensionsrC c C s dS )z0 Serializes the response to DER Nr rE r r r rF k s zOCSPResponse.public_bytesN)0r r r rH rI r6 �IteratorrP rX r rY r ZObjectIdentifierrZ r7 r r5 r[ rJ r\ r] �Listr. r^ r_ �Namer` r0 ra r" rR r+ r2 r, r) r* r< r> r@ rK rB rN rG rb rL r rM rF r r r r rW � sZ �rW c @ s� e Zd Zdg fejejejejej f ej ej ej dd�dd�Z ejejej d d�dd�Zej ed d�d d �Zed �d d �ZdS )�OCSPRequestBuilderN)�requestrG r c C s || _ || _d S �N)�_request� _extensions)r3 rg rG r r r r4 s s zOCSPRequestBuilder.__init__)r& r' r r c C sL | j d urtd��t|� t|tj�r2t|tj�s:td��t|||f| j�S )Nz.Only one certificate can be added to a requestr- ) ri r r! r r r. r/ rf rj )r3 r& r' r r r r �add_certificate s �z"OCSPRequestBuilder.add_certificate��extval�criticalr c C sD t |tj�std��t�|j||�}t|| j� t| j | j|g �S �Nz"extension must be an ExtensionType) r r � ExtensionTyper/ � Extension�oidr rj rf ri �r3 rm rn � extensionr r r � add_extension� s �z OCSPRequestBuilder.add_extensionr9 c C s | j d u rtd��t�| �S )Nz*You must add a certificate before building)ri r r Zcreate_ocsp_requestr; r r r �build� s zOCSPRequestBuilder.build)r r r r6 r7 �Tupler r. r r5 rd rq rp r4 rk �boolru r8 rv r r r r rf r s( ���� � � rf c @ s e Zd Zdddg feje ejejeje f ejej ej ej ej ej d�dd�Z ejejejeejejej ejej ejej d d� dd�Ze ejd d�d d �Zejej d d �d d �Zej ed d�dd�Zeejej ed�dd�Ze e ed�dd��Z dS )�OCSPResponseBuilderN)�response� responder_id�certsrG c C s || _ || _|| _|| _d S rh )� _response� _responder_id�_certsrj )r3 rz r{ r| rG r r r r4 � s z OCSPResponseBuilder.__init__) r& r' r r( r) r* r+ r, r c C s< | j d urtd��t||||||||�} t| | j| j| j�S )Nz#Only one response per OCSPResponse.)r} r r% ry r~ r rj ) r3 r& r' r r( r) r* r+ r, Z singlerespr r r � add_response� s$ � �z OCSPResponseBuilder.add_response)rD �responder_certr c C sP | j d urtd��t|tj�s&td��t|t�s8td��t| j||f| j | j �S )Nz!responder_id can only be set oncez$responder_cert must be a Certificatez6encoding must be an element from OCSPResponderEncoding) r~ r r r r. r/ r ry r} r rj )r3 rD r� r r r r{ � s ��z OCSPResponseBuilder.responder_id)r| r c C s\ | j d urtd��t|�}t|�dkr.td��tdd� |D ��sHtd��t| j| j|| j �S )Nz!certificates may only be set oncer z certs must not be an empty listc s s | ]}t |tj�V qd S rh )r r r. )�.0�xr r r � <genexpr>� � z3OCSPResponseBuilder.certificates.<locals>.<genexpr>z$certs must be a list of Certificates) r r �list�len�allr/ ry r} r~ rj )r3 r| r r r r^ � s �z OCSPResponseBuilder.certificatesrl c C sL t |tj�std��t�|j||�}t|| j� t| j | j | j | j|g �S ro ) r r rp r/ rq rr r rj ry r} r~ r rs r r r ru � s �z!OCSPResponseBuilder.add_extension)� private_keyr r c C s6 | j d u rtd��| jd u r$td��t�tj| ||�S )Nz&You must add a response before signingz*You must add a responder_id before signing)r} r r~ r �create_ocsp_responser r )r3 r� r r r r �sign s �zOCSPResponseBuilder.sign)rY r c C s4 t |t�std��|tju r$td��t�|d d d �S )Nz7response_status must be an item from OCSPResponseStatusz$response_status cannot be SUCCESSFUL)r r r/ r r r r� )�clsrY r r r �build_unsuccessful s � z&OCSPResponseBuilder.build_unsuccessful) r r r r6 r7 r% rw r r. r rd rq rp r4 r r5 r" r0 r2 r� r{ �Iterabler^ rx ru r rW r� � classmethodr r� r r r r ry � sN ��� � � � � � �ry )�datar c C s t �| �S rh )r �load_der_ocsp_request�r� r r r r� " s r� c C s t �| �S rh )r �load_der_ocsp_responser� r r r r� & s r� )'rH r0 r6 Z cryptographyr r Z"cryptography.hazmat.bindings._rustr Z cryptography.hazmat.primitivesr r Z/cryptography.hazmat.primitives.asymmetric.typesr Zcryptography.x509.baser r r �Enumr r �SHA1�SHA224�SHA256�SHA384�SHA512r r5 r! r" r% �ABCMetar8 rP rW rf ry rJ r� r� r r r r �<module> s6 � F&; 2~