Dashboard
PHP:
8.1.34
OS:
Linux
User:
uid288609
/
/
usr
/
lib
/
python3
/
dist-packages
/
cryptography
/
x509
/
__pycache__
📤 Upload
📝 New File
📁 New Folder
Close
Editing: ocsp.cpython-39.pyc
a � `�3 � @ sp d dl mZmZmZ d dlZd dlZd dlmZ d dlZd dl m Z d dl m Z d dl mZmZmZ e �� e �� e �� e �� e �� d�ZG dd � d e�ZG d d � d e�Zd d � eD �Ze je je je je jfZdd� ZG dd� de�Z dd � e D �Z dd� Z dd� Z G dd� de �Z!G dd� de �Z"G dd � d e �Z#e�$ej%�G d d � d e ��Z&e�$ej%�G d d � d e ��Z'dS )!� )�absolute_import�division�print_functionN)�Enum)�x509)�hashes)�_EARLIEST_UTC_TIME�_convert_to_naive_utc_time�_reject_duplicate_extension)z 1.3.14.3.2.26z2.16.840.1.101.3.4.2.4z2.16.840.1.101.3.4.2.1z2.16.840.1.101.3.4.2.2z2.16.840.1.101.3.4.2.3c @ s e Zd ZdZdZdS )�OCSPResponderEncodingzBy HashzBy NameN)�__name__� __module__� __qualname__ZHASH�NAME� r r �8/usr/lib/python3/dist-packages/cryptography/x509/ocsp.pyr s r c @ s$ e Zd ZdZdZdZdZdZdZdS )�OCSPResponseStatusr � � � � � N) r r r � SUCCESSFULZMALFORMED_REQUESTZINTERNAL_ERRORZ TRY_LATERZ SIG_REQUIREDZ UNAUTHORIZEDr r r r r $ s r c C s i | ] }|j |�qS r ��value��.0�xr r r � <dictcomp>- � r c C s t | t�std��d S )Nz9Algorithm must be SHA1, SHA224, SHA256, SHA384, or SHA512)� isinstance�_ALLOWED_HASHES� ValueError)� algorithmr r r �_verify_algorithm7 s �r$ c @ s e Zd ZdZdZdZdS )�OCSPCertStatusr r r N)r r r ZGOOD�REVOKEDZUNKNOWNr r r r r% > s r% c C s i | ] }|j |�qS r r r r r r r D r c C s ddl m} |�| �S �Nr ��backend)�,cryptography.hazmat.backends.openssl.backendr) �load_der_ocsp_request��datar) r r r r+ G s r+ c C s ddl m} |�| �S r' )r* r) �load_der_ocsp_responser, r r r r. M s r. c @ s2 e Zd Zdg fdd�Zdd� Zdd� Zdd � ZdS ) �OCSPRequestBuilderNc C s || _ || _d S �N)�_request� _extensions)�selfZrequest� extensionsr r r �__init__T s zOCSPRequestBuilder.__init__c C sL | j d urtd��t|� t|tj�r2t|tj�s:td��t|||f| j�S )Nz.Only one certificate can be added to a request�%cert and issuer must be a Certificate) r1 r" r$ r r � Certificate� TypeErrorr/ r2 )r3 �cert�issuerr# r r r �add_certificateX s �z"OCSPRequestBuilder.add_certificatec C sD t |tj�std��t�|j||�}t|| j� t| j | j|g �S �Nz"extension must be an ExtensionType) r r � ExtensionTyper8 � Extension�oidr r2 r/ r1 �r3 � extensionZcriticalr r r � add_extensiond s �z OCSPRequestBuilder.add_extensionc C s( ddl m} | jd u r td��|�| �S )Nr r( z*You must add a certificate before building)r* r) r1 r" Zcreate_ocsp_request)r3 r) r r r �buildo s zOCSPRequestBuilder.build)r r r r5 r; rB rC r r r r r/ S s r/ c @ s e Zd Zdd� ZdS )�_SingleResponsec C s t |tj�rt |tj�s td��t|� t |tj�s<td��|d urXt |tj�sXtd��|| _|| _|| _|| _ || _ t |t �s�td��|t j ur�|d ur�t d��|d ur�t d��nHt |tj�s�td��t|�}|tk r�t d��|d ur�t |tj�s�td ��|| _|| _|| _d S ) Nr6 z%this_update must be a datetime objectz-next_update must be a datetime object or Nonez8cert_status must be an item from the OCSPCertStatus enumzBrevocation_time can only be provided if the certificate is revokedzDrevocation_reason can only be provided if the certificate is revokedz)revocation_time must be a datetime objectz7The revocation_time must be on or after 1950 January 1.zCrevocation_reason must be an item from the ReasonFlags enum or None)r r r7 r8 r$ �datetimeZ_certZ_issuerZ _algorithmZ _this_updateZ _next_updater% r& r" r r Z ReasonFlagsZ _cert_statusZ_revocation_timeZ_revocation_reason) r3 r9 r: r# � cert_status� this_update� next_update�revocation_time�revocation_reasonr r r r5 y sZ � � � �� � ��z_SingleResponse.__init__N)r r r r5 r r r r rD x s rD c @ sR e Zd Zdddg fdd�Zdd� Zdd� Zdd � Zd d � Zd d � Ze dd� �Z dS )�OCSPResponseBuilderNc C s || _ || _|| _|| _d S r0 )� _response� _responder_id�_certsr2 )r3 Zresponse� responder_id�certsr4 r r r r5 � s z OCSPResponseBuilder.__init__c C s< | j d urtd��t||||||||�} t| | j| j| j�S )Nz#Only one response per OCSPResponse.)rL r" rD rK rM rN r2 ) r3 r9 r: r# rF rG rH rI rJ Z singlerespr r r � add_response� s$ � �z OCSPResponseBuilder.add_responsec C sP | j d urtd��t|tj�s&td��t|t�s8td��t| j||f| j | j �S )Nz!responder_id can only be set oncez$responder_cert must be a Certificatez6encoding must be an element from OCSPResponderEncoding) rM r" r r r7 r8 r rK rL rN r2 )r3 �encodingZresponder_certr r r rO � s ��z OCSPResponseBuilder.responder_idc C s\ | j d urtd��t|�}t|�dkr.td��tdd� |D ��sHtd��t| j| j|| j �S )Nz!certificates may only be set oncer z certs must not be an empty listc s s | ]}t |tj�V qd S r0 )r r r7 r r r r � <genexpr>� r z3OCSPResponseBuilder.certificates.<locals>.<genexpr>z$certs must be a list of Certificates) rN r" �list�len�allr8 rK rL rM r2 )r3 rP r r r � certificates� s �z OCSPResponseBuilder.certificatesc C sL t |tj�std��t�|j||�}t|| j� t| j | j | j | j|g �S r< ) r r r= r8 r> r? r r2 rK rL rM rN r@ r r r rB s �z!OCSPResponseBuilder.add_extensionc C sB ddl m} | jd u r td��| jd u r0td��|�tj| ||�S )Nr r( z&You must add a response before signingz*You must add a responder_id before signing)r* r) rL r" rM �create_ocsp_responser r )r3 Z private_keyr# r) r r r �sign s �zOCSPResponseBuilder.signc C s@ ddl m} t|t�s td��|tju r0td��|�|d d d �S )Nr r( z7response_status must be an item from OCSPResponseStatusz$response_status cannot be SUCCESSFUL)r* r) r r r8 r r" rX )�cls�response_statusr) r r r �build_unsuccessful s � z&OCSPResponseBuilder.build_unsuccessful) r r r r5 rQ rO rW rB rY � classmethodr\ r r r r rK � s � rK c @ s` e Zd Zejdd� �Zejdd� �Zejdd� �Zejdd� �Zej d d � �Z ejd d � �Z d S )� OCSPRequestc C s dS �z3 The hash of the issuer public key Nr �r3 r r r �issuer_key_hash0 s zOCSPRequest.issuer_key_hashc C s dS �z- The hash of the issuer name Nr r` r r r �issuer_name_hash6 s z OCSPRequest.issuer_name_hashc C s dS �zK The hash algorithm used in the issuer name and key hashes Nr r` r r r �hash_algorithm< s zOCSPRequest.hash_algorithmc C s dS �zM The serial number of the cert whose status is being checked Nr r` r r r � serial_numberB s zOCSPRequest.serial_numberc C s dS )z/ Serializes the request to DER Nr )r3 rR r r r � public_bytesH s zOCSPRequest.public_bytesc C s dS )zP The list of request extensions. Not single request extensions. Nr r` r r r r4 N s zOCSPRequest.extensionsN) r r r �abc�abstractpropertyra rc re rg �abstractmethodrh r4 r r r r r^ . s r^ c @ s$ e Zd Zejdd� �Zejdd� �Zejdd� �Zejdd� �Zejd d � �Z ejd d � �Z ejd d� �Z ejdd� �Z ejdd� �Z ejdd� �Zejdd� �Zejdd� �Zejdd� �Zejdd � �Zejd d � �Zejd d � �Zejd!d"� �Zejd#d$� �Zejd%d&� �Zejd'd(� �Zd)S )*� OCSPResponsec C s dS )zm The status of the response. This is a value from the OCSPResponseStatus enumeration Nr r` r r r r[ W s z OCSPResponse.response_statusc C s dS )zA The ObjectIdentifier of the signature algorithm Nr r` r r r �signature_algorithm_oid^ s z$OCSPResponse.signature_algorithm_oidc C s dS )zX Returns a HashAlgorithm corresponding to the type of the digest signed Nr r` r r r �signature_hash_algorithmd s z%OCSPResponse.signature_hash_algorithmc C s dS )z% The signature bytes Nr r` r r r � signaturej s zOCSPResponse.signaturec C s dS )z+ The tbsResponseData bytes Nr r` r r r �tbs_response_bytesp s z OCSPResponse.tbs_response_bytesc C s dS )z� A list of certificates used to help build a chain to verify the OCSP response. This situation occurs when the OCSP responder uses a delegate certificate. Nr r` r r r rW v s zOCSPResponse.certificatesc C s dS )z2 The responder's key hash or None Nr r` r r r �responder_key_hash~ s z OCSPResponse.responder_key_hashc C s dS )z. The responder's Name or None Nr r` r r r �responder_name� s zOCSPResponse.responder_namec C s dS )z4 The time the response was produced Nr r` r r r � produced_at� s zOCSPResponse.produced_atc C s dS )zY The status of the certificate (an element from the OCSPCertStatus enum) Nr r` r r r �certificate_status� s z OCSPResponse.certificate_statusc C s dS )z^ The date of when the certificate was revoked or None if not revoked. Nr r` r r r rI � s z OCSPResponse.revocation_timec C s dS )zi The reason the certificate was revoked or None if not specified or not revoked. Nr r` r r r rJ � s z OCSPResponse.revocation_reasonc C s dS )z� The most recent time at which the status being indicated is known by the responder to have been correct Nr r` r r r rG � s zOCSPResponse.this_updatec C s dS )zC The time when newer information will be available Nr r` r r r rH � s zOCSPResponse.next_updatec C s dS r_ r r` r r r ra � s z OCSPResponse.issuer_key_hashc C s dS rb r r` r r r rc � s z OCSPResponse.issuer_name_hashc C s dS rd r r` r r r re � s zOCSPResponse.hash_algorithmc C s dS rf r r` r r r rg � s zOCSPResponse.serial_numberc C s dS )zR The list of response extensions. Not single response extensions. Nr r` r r r r4 � s zOCSPResponse.extensionsc C s dS )zR The list of single response extensions. Not response extensions. Nr r` r r r �single_extensions� s z OCSPResponse.single_extensionsN)r r r ri rj r[ rm rn ro rp rW rq rr rs rt rI rJ rG rH ra rc re rg r4 ru r r r r rl U sP rl )(Z __future__r r r ri rE �enumr ZsixZ cryptographyr Z cryptography.hazmat.primitivesr Zcryptography.x509.baser r r ZSHA1ZSHA224ZSHA256ZSHA384ZSHA512Z _OIDS_TO_HASHr r Z_RESPONSE_STATUS_TO_ENUMr! r$ r% Z_CERT_STATUS_TO_ENUMr+ r. �objectr/ rD rK Z add_metaclass�ABCMetar^ rl r r r r �<module> sD � � %Fp &
Save
Cancel