Dashboard
PHP:
8.1.34
OS:
Linux
User:
uid288609
/
/
usr
/
lib
/
python3
/
dist-packages
/
cryptography
/
hazmat
/
backends
/
openssl
/
__pycache__
📤 Upload
📝 New File
📁 New Folder
Close
Editing: x509.cpython-39.pyc
a � `tT � @ s. d dl mZmZmZ d dlZd dlZd dlmZmZ d dl m Z d dl m Z m Z mZmZmZ d dlmZmZ d dlmZmZ d dlmZmZmZ d d lm Z e� ej �G d d � d e ��Z e� ej!�G d d � d e ��Z"e� ej#�G dd� de ��Z$e� ej%�G dd� de ��Z&e� ej'j(�G dd� de ��Z)dS )� )�absolute_import�division�print_functionN)�utils�x509)�UnsupportedAlgorithm)�_asn1_integer_to_int�_asn1_string_to_bytes�_decode_x509_name�_obj2txt�_parse_asn1_time)�_encode_asn1_int_gc� _txt2obj_gc)�hashes� serialization)�dsa�ec�rsa)� _ASN1Typec @ s� e Zd Zdd� Zdd� Zdd� Zdd� Zd d � Zd d � Zd d� Z e � d�Z e dd� �Zdd� Ze dd� �Ze dd� �Ze dd� �Ze dd� �Ze d d � �Ze d d � �Ze jd d!� �Ze d"d#� �Ze d$d%� �Zd&d'� Zd(S ))� _Certificatec C sZ || _ || _| j j�| j�}|dkr0tjj| _n&|dkrDtjj| _nt� d� |�|��d S )Nr � z {} is not a valid X509 version) �_backend�_x509�_libZX509_get_versionr �Version�v1�_versionZv3ZInvalidVersion�format)�self�backendZ x509_cert�version� r! �K/usr/lib/python3/dist-packages/cryptography/hazmat/backends/openssl/x509.py�__init__ s �z_Certificate.__init__c C s d� | j�S )Nz <Certificate(subject={}, ...)>)r �subject�r r! r! r" �__repr__, s z_Certificate.__repr__c C s, t |tj�stS | jj�| j|j�}|dkS �Nr )� isinstancer � Certificate�NotImplementedr r ZX509_cmpr �r �other�resr! r! r" �__eq__/ s z_Certificate.__eq__c C s | |k S �Nr! �r r, r! r! r" �__ne__6 s z_Certificate.__ne__c C s t | �tjj��S r/ ��hash� public_bytesr �Encoding�DERr% r! r! r" �__hash__9 s z_Certificate.__hash__c C s | S r/ r! )r �memor! r! r" � __deepcopy__< s z_Certificate.__deepcopy__c C s* t �|| j�}|�| �tjj�� |�� S r/ ) r �Hashr �updater4 r r5 r6 �finalize)r � algorithm�hr! r! r" � fingerprint? s z_Certificate.fingerprintr c C s2 | j j�| j�}| j �|| j jjk� t| j |�S r/ )r r ZX509_get_serialNumberr �openssl_assert�_ffi�NULLr �r �asn1_intr! r! r" � serial_numberF s z_Certificate.serial_numberc C sR | j j�| j�}|| j jjkr0| j �� td��| j j�|| j jj �}| j � |�S )Nz,Certificate public key is of an unknown type) r r ZX509_get_pubkeyr rA rB �_consume_errors� ValueError�gc� EVP_PKEY_free�_evp_pkey_to_public_key�r �pkeyr! r! r" � public_keyL s z_Certificate.public_keyc C s | j j�| j�}t| j |�S r/ )r r ZX509_getm_notBeforer r �r Z asn1_timer! r! r" �not_valid_beforeW s z _Certificate.not_valid_beforec C s | j j�| j�}t| j |�S r/ )r r ZX509_getm_notAfterr r rN r! r! r" �not_valid_after\ s z _Certificate.not_valid_afterc C s2 | j j�| j�}| j �|| j jjk� t| j |�S r/ )r r ZX509_get_issuer_namer r@ rA rB r �r �issuerr! r! r" rR a s z_Certificate.issuerc C s2 | j j�| j�}| j �|| j jjk� t| j |�S r/ )r r ZX509_get_subject_namer r@ rA rB r �r r$ r! r! r" r$ g s z_Certificate.subjectc C s8 | j }z tj| W S ty2 td�|���Y n0 d S �Nz)Signature algorithm OID:{} not recognized��signature_algorithm_oidr Z_SIG_OIDS_TO_HASH�KeyErrorr r �r �oidr! r! r" �signature_hash_algorithmm s �z%_Certificate.signature_hash_algorithmc C s^ | j j�d�}| j j�| j jj|| j� | j �|d | j jjk� t| j |d j �}t � |�S �Nz X509_ALGOR **r ) r rA �newr �X509_get0_signaturerB r r@ r r= r �ObjectIdentifier�r ZalgrY r! r! r" rV w s �z$_Certificate.signature_algorithm_oidc C s | j j�| j�S r/ )r Z _certificate_extension_parser�parser r% r! r! r" � extensions� s z_Certificate.extensionsc C sR | j j�d�}| j j�|| j jj| j� | j �|d | j jjk� t| j |d �S �NzASN1_BIT_STRING **r ) r rA r\ r r] rB r r@ r �r Zsigr! r! r" � signature� s �z_Certificate.signaturec sd � j j�d�}� j j�� j|�}� j �|dk� � j j�|� fdd��}� j j�|d |�d d � S )N�unsigned char **r c s � j j�| d �S r' �r r Z OPENSSL_free�Zpointerr% r! r" �<lambda>� � z4_Certificate.tbs_certificate_bytes.<locals>.<lambda>) r rA r\ r Zi2d_re_X509_tbsr r@ rH �buffer�r Zppr- r! r% r" �tbs_certificate_bytes� s �z"_Certificate.tbs_certificate_bytesc C sn | j �� }|tjju r*| j j�|| j�}n(|tjju rJ| j j� || j�}nt d��| j � |dk� | j � |�S �Nz/encoding must be an item from the Encoding enum� ) r �_create_mem_bio_gcr r5 �PEMr ZPEM_write_bio_X509r r6 Z i2d_X509_bio� TypeErrorr@ � _read_mem_bio�r �encoding�bior- r! r! r" r4 � s z_Certificate.public_bytesN)�__name__� __module__� __qualname__r# r& r. r1 r7 r9 r? r Zread_only_propertyr �propertyrE rM rO rP rR r$ rZ rV �cached_propertyra rd rl r4 r! r! r! r" r s< r c @ s: e Zd Zdd� Zedd� �Zedd� �Zejdd� �Z d S ) �_RevokedCertificatec C s || _ || _|| _d S r/ )r Z_crl� _x509_revoked)r r ZcrlZ x509_revokedr! r! r" r# � s z _RevokedCertificate.__init__c C s2 | j j�| j�}| j �|| j jjk� t| j |�S r/ )r r Z X509_REVOKED_get0_serialNumberr| r@ rA rB r rC r! r! r" rE � s �z!_RevokedCertificate.serial_numberc C s t | j| jj�| j��S r/ )r r r Z X509_REVOKED_get0_revocationDater| r% r! r! r" �revocation_date� s ��z#_RevokedCertificate.revocation_datec C s | j j�| j�S r/ )r Z _revoked_cert_extension_parserr` r| r% r! r! r" ra � s �z _RevokedCertificate.extensionsN) rv rw rx r# ry rE r} r rz ra r! r! r! r" r{ � s r{ c @ s� e Zd Zdd� Zdd� Zdd� Zdd� Zejd d � �Z d d � Z e d d� �Z e dd� �Z e dd� �Ze dd� �Ze dd� �Ze dd� �Ze dd� �Zdd � Zd d � Zd d � Zd!d"� Zd#d$� Zejd%d&� �Zd'd(� Zd)S )*�_CertificateRevocationListc C s || _ || _d S r/ )r � _x509_crl)r r Zx509_crlr! r! r" r# � s z#_CertificateRevocationList.__init__c C s, t |tj�stS | jj�| j|j�}|dkS r' )r( r �CertificateRevocationListr* r r Z X509_CRL_cmpr r+ r! r! r" r. � s z!_CertificateRevocationList.__eq__c C s | |k S r/ r! r0 r! r! r" r1 � s z!_CertificateRevocationList.__ne__c C sX t �|| j�}| j�� }| jj�|| j�}| j�|dk� | j�|�}|� |� |� � S )Nrn ) r r: r ro r �i2d_X509_CRL_bior r@ rr r; r< )r r= r> ru r- Zderr! r! r" r? � s z&_CertificateRevocationList.fingerprintc C s@ | j j�| j�}| j �|| j jjk� | j j�|| j jj�}|S r/ ) r r Z X509_CRL_dupr r@ rA rB rH Z X509_CRL_free)r �dupr! r! r" � _sorted_crl� s z&_CertificateRevocationList._sorted_crlc C sl | j j�d�}t| j |�}| j j�| j||�}|dkr:d S | j �|d | j jjk� t | j | j|d �S d S )NzX509_REVOKED **r ) r rA r\ r r ZX509_CRL_get0_by_serialr� r@ rB r{ )r rE �revokedrD r- r! r! r" �(get_revoked_certificate_by_serial_number� s ��zC_CertificateRevocationList.get_revoked_certificate_by_serial_numberc C s8 | j }z tj| W S ty2 td�|���Y n0 d S rT rU rX r! r! r" rZ � s �z3_CertificateRevocationList.signature_hash_algorithmc C s^ | j j�d�}| j j�| j| j jj|� | j �|d | j jjk� t| j |d j �}t � |�S r[ ) r rA r\ r �X509_CRL_get0_signaturer rB r@ r r= r r^ r_ r! r! r" rV s �z2_CertificateRevocationList.signature_algorithm_oidc C s2 | j j�| j�}| j �|| j jjk� t| j |�S r/ )r r ZX509_CRL_get_issuerr r@ rA rB r rQ r! r! r" rR s z!_CertificateRevocationList.issuerc C s2 | j j�| j�}| j �|| j jjk� t| j |�S r/ )r r ZX509_CRL_get_nextUpdater r@ rA rB r )r Znur! r! r" � next_update s z&_CertificateRevocationList.next_updatec C s2 | j j�| j�}| j �|| j jjk� t| j |�S r/ )r r ZX509_CRL_get_lastUpdater r@ rA rB r )r Zlur! r! r" � last_update s z&_CertificateRevocationList.last_updatec C sR | j j�d�}| j j�| j|| j jj� | j �|d | j jjk� t| j |d �S rb ) r rA r\ r r� r rB r@ r rc r! r! r" rd " s �z$_CertificateRevocationList.signaturec sd � j j�d�}� j j�� j|�}� j �|dk� � j j�|� fdd��}� j j�|d |�d d � S )Nre r c s � j j�| d �S r' rf rg r% r! r" rh 1 ri z?_CertificateRevocationList.tbs_certlist_bytes.<locals>.<lambda>) r rA r\ r Zi2d_re_X509_CRL_tbsr r@ rH rj rk r! r% r" �tbs_certlist_bytes+ s �z-_CertificateRevocationList.tbs_certlist_bytesc C sn | j �� }|tjju r*| j j�|| j�}n(|tjju rJ| j j� || j�}nt d��| j � |dk� | j � |�S rm ) r ro r r5 rp r ZPEM_write_bio_X509_CRLr r6 r� rq r@ rr rs r! r! r" r4 5 s � z'_CertificateRevocationList.public_bytesc C sD | j j�| j�}| j j�||�}| j �|| j jjk� t| j | |�S r/ ) r r �X509_CRL_get_REVOKEDr Zsk_X509_REVOKED_valuer@ rA rB r{ )r �idxr� �rr! r! r" � _revoked_certC s z(_CertificateRevocationList._revoked_certc c s" t t| ��D ]}| �|�V q d S r/ )�range�lenr� )r �ir! r! r" �__iter__I s z#_CertificateRevocationList.__iter__c s� t |t�r8|�t� ��\}}}� fdd�t|||�D �S t�|�}|dk rV|t� �7 }d| krnt� �k stn t�� �|�S d S )Nc s g | ]}� � |��qS r! )r� )�.0r� r% r! r" � <listcomp>P ri z:_CertificateRevocationList.__getitem__.<locals>.<listcomp>r ) r( �slice�indicesr� r� �operator�index� IndexErrorr� )r r� �start�stop�stepr! r% r" � __getitem__M s z&_CertificateRevocationList.__getitem__c C s4 | j j�| j�}|| j jjkr"dS | j j�|�S d S r' )r r r� r rA rB Zsk_X509_REVOKED_num)r r� r! r! r" �__len__Y s z"_CertificateRevocationList.__len__c C s | j j�| j�S r/ )r Z_crl_extension_parserr` r r% r! r! r" ra ` s z%_CertificateRevocationList.extensionsc C sL t |tjtjtjf�s td��| jj � | j |j �}|dkrH| j� � dS dS )NzGExpecting one of DSAPublicKey, RSAPublicKey, or EllipticCurvePublicKey.rn FT)r( r Z DSAPublicKeyr Z RSAPublicKeyr ZEllipticCurvePublicKeyrq r r ZX509_CRL_verifyr Z _evp_pkeyrF )r rM r- r! r! r" �is_signature_validd s ��� z-_CertificateRevocationList.is_signature_validN)rv rw rx r# r. r1 r? r rz r� r� ry rZ rV rR r� r� rd r� r4 r� r� r� r� ra r� r! r! r! r" r~ � s: r~ c @ s� e Zd Zdd� Zdd� Zdd� Zdd� Zd d � Zed d � �Z ed d� �Z edd� �Z e j dd� �Zdd� Zedd� �Zedd� �Zedd� �Zdd � Zd S ) �_CertificateSigningRequestc C s || _ || _d S r/ )r � _x509_req)r r Zx509_reqr! r! r" r# z s z#_CertificateSigningRequest.__init__c C s2 t |t�stS | �tjj�}|�tjj�}||kS r/ )r( r� r* r4 r r5 r6 )r r, Z self_bytesZ other_bytesr! r! r" r. ~ s z!_CertificateSigningRequest.__eq__c C s | |k S r/ r! r0 r! r! r" r1 � s z!_CertificateSigningRequest.__ne__c C s t | �tjj��S r/ r2 r% r! r! r" r7 � s z#_CertificateSigningRequest.__hash__c C sH | j j�| j�}| j �|| j jjk� | j j�|| j jj�}| j � |�S r/ ) r r �X509_REQ_get_pubkeyr� r@ rA rB rH rI rJ rK r! r! r" rM � s z%_CertificateSigningRequest.public_keyc C s2 | j j�| j�}| j �|| j jjk� t| j |�S r/ )r r ZX509_REQ_get_subject_namer� r@ rA rB r rS r! r! r" r$ � s z"_CertificateSigningRequest.subjectc C s8 | j }z tj| W S ty2 td�|���Y n0 d S rT rU rX r! r! r" rZ � s �z3_CertificateSigningRequest.signature_hash_algorithmc C s^ | j j�d�}| j j�| j| j jj|� | j �|d | j jjk� t| j |d j �}t � |�S r[ ) r rA r\ r �X509_REQ_get0_signaturer� rB r@ r r= r r^ r_ r! r! r" rV � s �z2_CertificateSigningRequest.signature_algorithm_oidc s6 � j j�� j�}� j j�|� fdd��}� j j�|�S )Nc s" � j j�| � j j�� j jjd��S )NZX509_EXTENSION_free)r r Zsk_X509_EXTENSION_pop_freerA Z addressofZ _original_lib)�xr% r! r" rh � s ��z7_CertificateSigningRequest.extensions.<locals>.<lambda>)r r ZX509_REQ_get_extensionsr� rA rH Z_csr_extension_parserr` )r Z x509_extsr! r% r" ra � s � z%_CertificateSigningRequest.extensionsc C sn | j �� }|tjju r*| j j�|| j�}n(|tjju rJ| j j� || j�}nt d��| j � |dk� | j � |�S rm ) r ro r r5 rp r ZPEM_write_bio_X509_REQr� r6 Zi2d_X509_REQ_biorq r@ rr rs r! r! r" r4 � s � z'_CertificateSigningRequest.public_bytesc sd � j j�d�}� j j�� j|�}� j �|dk� � j j�|� fdd��}� j j�|d |�d d � S )Nre r c s � j j�| d �S r' rf rg r% r! r" rh � ri zB_CertificateSigningRequest.tbs_certrequest_bytes.<locals>.<lambda>) r rA r\ r Zi2d_re_X509_REQ_tbsr� r@ rH rj rk r! r% r" �tbs_certrequest_bytes� s �z0_CertificateSigningRequest.tbs_certrequest_bytesc C sR | j j�d�}| j j�| j|| j jj� | j �|d | j jjk� t| j |d �S rb ) r rA r\ r r� r� rB r@ r rc r! r! r" rd � s �z$_CertificateSigningRequest.signaturec C sh | j j�| j�}| j �|| j jjk� | j j�|| j jj�}| j j� | j|�}|dkrd| j � � dS dS )Nrn FT) r r r� r� r@ rA rB rH rI ZX509_REQ_verifyrF )r rL r- r! r! r" r� � s z-_CertificateSigningRequest.is_signature_validc C s t | j|j�}| jj�| j|d�}|dkr<t�d�|�|��| jj� | j|�}| j� || jj j k� | j� | jj� |�dk� | jj�|d�}| j� || jj j k� |jtjjtjjtjjfvr�td�||j���| jj�|d|j| jj j �}| j� || jj j k� | jj �d|�}t| j|�S )N���zNo {} attribute was foundrn r z&OID {} has a disallowed ASN.1 type: {}z ASN1_STRING *)r r Z dotted_stringr ZX509_REQ_get_attr_by_OBJr� r ZAttributeNotFoundr ZX509_REQ_get_attrr@ rA rB ZX509_ATTRIBUTE_countZX509_ATTRIBUTE_get0_type�typer Z UTF8String�valueZPrintableStringZ IA5StringrG ZX509_ATTRIBUTE_get0_data�castr )r rY �obj�pos�attrZ asn1_type�datar! r! r" �get_attribute_for_oid� s> � ������z0_CertificateSigningRequest.get_attribute_for_oidN)rv rw rx r# r. r1 r7 rM ry r$ rZ rV r rz ra r4 r� rd r� r� r! r! r! r" r� x s* r� c @ sh e Zd Zdd� Zedd� �Zedd� �Zedd� �Zed d � �Zed d � �Z d d� Z dd� Z dd� Z dS )�_SignedCertificateTimestampc C s || _ || _|| _d S r/ )r Z _sct_list�_sct)r r Zsct_listZsctr! r! r" r# s z$_SignedCertificateTimestamp.__init__c C s, | j j�| j�}|| j jjks"J �tjjjS r/ ) r r ZSCT_get_versionr� ZSCT_VERSION_V1r �certificate_transparencyr r )r r r! r! r" r s z#_SignedCertificateTimestamp.versionc C sH | j j�d�}| j j�| j|�}|dks,J �| j j�|d |�d d � S �Nre r )r rA r\ r ZSCT_get0_log_idr� rj )r �outZ log_id_lengthr! r! r" �log_id" s z"_SignedCertificateTimestamp.log_idc C s4 | j j�| j�}|d }tj�|d �j|d d�S )Ni� )Z microsecond)r r ZSCT_get_timestampr� �datetimeZutcfromtimestamp�replace)r � timestampZ millisecondsr! r! r" r� ) s �z%_SignedCertificateTimestamp.timestampc C s, | j j�| j�}|| j jjks"J �tjjjS r/ ) r r ZSCT_get_log_entry_typer� ZCT_LOG_ENTRY_TYPE_PRECERTr r� Z LogEntryTypeZPRE_CERTIFICATE)r � entry_typer! r! r" r� 1 s z&_SignedCertificateTimestamp.entry_typec C sf | j j�d�}| j j�| j|�}| j �|dk� | j �|d | j jjk� | j j�|d |�d d � S r� ) r rA r\ r ZSCT_get0_signaturer� r@ rB rj )r Zptrptrr- r! r! r" � _signature9 s z&_SignedCertificateTimestamp._signaturec C s t | j�S r/ )r3 r� r% r! r! r" r7 A s z$_SignedCertificateTimestamp.__hash__c C s t |t�stS | j|jkS r/ )r( r� r* r� r0 r! r! r" r. D s z"_SignedCertificateTimestamp.__eq__c C s | |k S r/ r! r0 r! r! r" r1 J s z"_SignedCertificateTimestamp.__ne__N) rv rw rx r# ry r r� r� r� r� r7 r. r1 r! r! r! r" r� s r� )*Z __future__r r r r� r� Z cryptographyr r Zcryptography.exceptionsr Z0cryptography.hazmat.backends.openssl.decode_asn1r r r r r Z0cryptography.hazmat.backends.openssl.encode_asn1r r Z cryptography.hazmat.primitivesr r Z)cryptography.hazmat.primitives.asymmetricr r r Zcryptography.x509.namer Zregister_interfacer) �objectr ZRevokedCertificater{ r� r~ ZCertificateSigningRequestr� r� ZSignedCertificateTimestampr� r! r! r! r" �<module> s0 % - �
Save
Cancel