🔐 Sid Gifari File Manager Pro
v8.0.5 | 2026-08-08 11:31:47 | PHP 8.2.32
📂
/ (Root)
/
opt
/
alt
/
python38
/
lib64
/
python3.8
/
site-packages
/
cryptography
/
x509
/
__pycache__
📍 /opt/alt/python38/lib64/python3.8/site-packages/cryptography/x509/__pycache__
🔄 Refresh
✏️
Editing: base.cpython-38.pyc
Read Only
U v��fِ � @ s� d dl mZ d dlZd dlZd dlZd dlZd dlZd dlmZ d dl m Z d dl m Z mZ d dlmZmZmZmZmZmZmZmZ d dlmZmZmZ d dl m Z m Z m Z m Z d d l!m"Z"m#Z# d d l$m%Z% e�d d d �Z&ej'e j(e j)e j*e j+e j,e j-e j.e j/f Z0G d d� de1�Z2dddd�dd�Z3dddd�dd�Z4ddd�d d �Z5G d d � d �Z6G d d!� d!�Z7G d"d#� d#ej8�Z9G d$d%� d%e1�Z:G d&d'� d'ej;d(�Z<e<�=e j<� G d)d*� d*ej;d(�Z>e>�=e j>� G d+d,� d,e>�Z?G d-d.� d.ej;d(�Z@e@�=e j@� G d/d0� d0ej;d(�ZAeA�=e jA� e jBZBe jCZCe jDZDe jEZEe jFZFe jGZGe jHZHG d1d2� d2�ZIG d3d4� d4�ZJG d5d6� d6�ZKG d7d8� d8�ZLd9d:�d;d<�ZMdS )=� )� annotationsN)�utils)�x509)�hashes� serialization)�dsa�ec�ed448�ed25519�padding�rsa�x448�x25519)� CertificateIssuerPrivateKeyTypes� CertificateIssuerPublicKeyTypes�CertificatePublicKeyTypes)� Extension� Extensions� ExtensionType�_make_sequence_methods)�Name� _ASN1Type)�ObjectIdentifieri� � c s& e Zd Zdddd�� fdd� Z� ZS )�AttributeNotFound�strr �None)�msg�oid�returnc s t � �|� || _d S �N)�super�__init__r )�selfr r �� __class__� �I/opt/alt/python38/lib64/python3.8/site-packages/cryptography/x509/base.pyr" 9 s zAttributeNotFound.__init__��__name__� __module__� __qualname__r" � __classcell__r& r& r$ r' r 8 s r zExtension[ExtensionType]� list[Extension[ExtensionType]]r )� extension� extensionsr c C s" |D ]}|j | j krtd��qd S )Nz$This extension has already been set.)r � ValueError)r. r/ �er& r& r' �_reject_duplicate_extension> s r2 r �0list[tuple[ObjectIdentifier, bytes, int | None]])r � attributesr c C s$ |D ]\}}}|| krt d��qd S )Nz$This attribute has already been set.)r0 )r r4 Zattr_oid�_r& r& r' �_reject_duplicate_attributeH s r6 �datetime.datetime��timer c C s: | j dk r2| �� }|r|nt�� }| jdd�| S | S dS )z�Normalizes a datetime to a naive datetime in UTC. time -- datetime to normalize. Assumed to be in UTC if not timezone aware. N��tzinfo)r; � utcoffset�datetime� timedelta�replace)r9 �offsetr& r& r' �_convert_to_naive_utc_timeR s rA c @ sx e Zd Zejjfddddd�dd�Zedd�d d ��Zedd�d d ��Zd d�dd�Z ddd�dd�Z dd�dd�Z dS )� Attributer �bytes�intr )r �value�_typer c C s || _ || _|| _d S r )�_oid�_valuerF )r# r rE rF r& r& r' r" a s zAttribute.__init__�r c C s | j S r )rG �r# r& r& r' r k s z Attribute.oidc C s | j S r )rH rJ r& r& r' rE o s zAttribute.valuer c C s d| j � d| j�d�S )Nz<Attribute(oid=z, value=�)>)r rE rJ r& r& r' �__repr__s s zAttribute.__repr__�object�bool��otherr c C s2 t |t�stS | j|jko0| j|jko0| j|jkS r )� isinstancerB �NotImplementedr rE rF �r# rP r& r& r' �__eq__v s � �zAttribute.__eq__c C s t | j| j| jf�S r )�hashr rE rF rJ r& r& r' �__hash__� s zAttribute.__hash__N) r) r* r+ r Z UTF8StringrE r" �propertyr rL rT rV r& r& r& r' rB ` s � rB c @ sH e Zd Zddd�dd�Zed�\ZZZdd�d d �Zd d d �dd�Z dS )� Attributesztyping.Iterable[Attribute]r )r4 r c C s t |�| _d S r )�list� _attributes)r# r4 r& r& r' r" � s zAttributes.__init__rZ r rI c C s d| j � d�S )Nz <Attributes(rK )rZ rJ r& r& r' rL � s zAttributes.__repr__r rB �r r c C s2 | D ]}|j |kr| S qtd|� d�|��d S )NzNo z attribute was found)r r )r# r �attrr& r& r' �get_attribute_for_oid� s z Attributes.get_attribute_for_oidN) r) r* r+ r" r �__len__�__iter__� __getitem__rL r] r& r& r& r' rX � s rX c @ s e Zd ZdZdZdS )�Versionr � N)r) r* r+ �v1�v3r& r& r& r' ra � s ra c s& e Zd Zdddd�� fdd� Z� ZS )�InvalidVersionr rD r )r �parsed_versionr c s t � �|� || _d S r )r! r" rf )r# r rf r$ r& r' r" � s zInvalidVersion.__init__r( r& r& r$ r' re � s re c @ s e Zd Zejddd�dd��Zeejdd�dd ���Zeejd d�d d ���Zejd d�dd��Z eejdd�dd���Z eejdd�dd���Z eejdd�dd���Z eejdd�dd���Z eejdd�dd���Zeejd d�d d ���Zeejd d�d d ���Zeejd!d�d"d#���Zeejdd�d$d%���Zeejd&d�d'd(���Zeejd)d�d*d+���Zeejdd�d,d-���Zeejdd�d.d/���Zeejdd�d0d1���Zejd2d3d4�d5d6��Zejdd�d7d8��Zejd9dd:�d;d<��Zejd d=d>�d?d@��ZdAS )B� Certificate�hashes.HashAlgorithmrC �� algorithmr c C s dS �z4 Returns bytes using digest passed. Nr& �r# rj r& r& r' � fingerprint� s zCertificate.fingerprintrD rI c C s dS )z3 Returns certificate serial number Nr& rJ r& r& r' � serial_number� s zCertificate.serial_numberra c C s dS )z1 Returns the certificate version Nr& rJ r& r& r' �version� s zCertificate.versionr c C s dS �z( Returns the public key Nr& rJ r& r& r' � public_key� s zCertificate.public_keyr c C s dS )zA Returns the ObjectIdentifier of the public key. Nr& rJ r& r& r' �public_key_algorithm_oid� s z$Certificate.public_key_algorithm_oidr7 c C s dS )z? Not before time (represented as UTC datetime) Nr& rJ r& r& r' �not_valid_before� s z Certificate.not_valid_beforec C s dS )zK Not before time (represented as a non-naive UTC datetime) Nr& rJ r& r& r' �not_valid_before_utc� s z Certificate.not_valid_before_utcc C s dS )z> Not after time (represented as UTC datetime) Nr& rJ r& r& r' �not_valid_after� s zCertificate.not_valid_afterc C s dS )zJ Not after time (represented as a non-naive UTC datetime) Nr& rJ r& r& r' �not_valid_after_utc� s z Certificate.not_valid_after_utcr c C s dS )z1 Returns the issuer name object. Nr& rJ r& r& r' �issuer� s zCertificate.issuerc C s dS �z2 Returns the subject name object. Nr& rJ r& r& r' �subject� s zCertificate.subject�hashes.HashAlgorithm | Nonec C s dS �zt Returns a HashAlgorithm corresponding to the type of the digest signed in the certificate. Nr& rJ r& r& r' �signature_hash_algorithm� s z$Certificate.signature_hash_algorithmc C s dS �zJ Returns the ObjectIdentifier of the signature algorithm. Nr& rJ r& r& r' �signature_algorithm_oid� s z#Certificate.signature_algorithm_oid�0None | padding.PSS | padding.PKCS1v15 | ec.ECDSAc C s dS �z= Returns the signature algorithm parameters. Nr& rJ r& r& r' � signature_algorithm_parameters s z*Certificate.signature_algorithm_parametersr c C s dS )z/ Returns an Extensions object. Nr& rJ r& r& r' r/ s zCertificate.extensionsc C s dS �z. Returns the signature bytes. Nr& rJ r& r& r' � signature s zCertificate.signaturec C s dS )zR Returns the tbsCertificate payload bytes as defined in RFC 5280. Nr& rJ r& r& r' �tbs_certificate_bytes s z!Certificate.tbs_certificate_bytesc C s dS )zh Returns the tbsCertificate payload bytes with the SCT list extension stripped. Nr& rJ r& r& r' �tbs_precertificate_bytes s z$Certificate.tbs_precertificate_bytesrM rN rO c C s dS �z" Checks equality. Nr& rS r& r& r' rT & s zCertificate.__eq__c C s dS �z" Computes a hash. Nr& rJ r& r& r' rV , s zCertificate.__hash__�serialization.Encoding��encodingr c C s dS )zB Serializes the certificate to PEM or DER format. Nr& �r# r� r& r& r' � public_bytes2 s zCertificate.public_bytesr )rw r c C s dS )z� This method verifies that certificate issuer name matches the issuer subject name and that the certificate is signed by the issuer's private key. No other validation is performed. Nr& )r# rw r& r& r' �verify_directly_issued_by8 s z%Certificate.verify_directly_issued_byN) r) r* r+ �abc�abstractmethodrm rW rn ro rq rr rs rt ru rv rw ry r| r~ r� r/ r� r� r� rT rV r� r� r& r& r& r' rg � sx rg )� metaclassc @ sl e Zd Zeejdd�dd���Zeejdd�dd���Zeejdd�dd ���Zeejd d�d d ���Z d S )�RevokedCertificaterD rI c C s dS )zG Returns the serial number of the revoked certificate. Nr& rJ r& r& r' rn F s z RevokedCertificate.serial_numberr7 c C s dS )zH Returns the date of when this certificate was revoked. Nr& rJ r& r& r' �revocation_dateM s z"RevokedCertificate.revocation_datec C s dS )zl Returns the date of when this certificate was revoked as a non-naive UTC datetime. Nr& rJ r& r& r' �revocation_date_utcT s z&RevokedCertificate.revocation_date_utcr c C s dS )zW Returns an Extensions object containing a list of Revoked extensions. Nr& rJ r& r& r' r/ \ s z RevokedCertificate.extensionsN) r) r* r+ rW r� r� rn r� r� r/ r& r& r& r' r� E s r� c @ sf e Zd Zdddd�dd�Zedd�dd ��Zedd�d d ��Zedd�d d ��Zedd�dd��ZdS )�_RawRevokedCertificaterD r7 r �rn r� r/ c C s || _ || _|| _d S r ��_serial_number�_revocation_date� _extensions�r# rn r� r/ r& r& r' r" i s z _RawRevokedCertificate.__init__rI c C s | j S r )r� rJ r& r& r' rn s s z$_RawRevokedCertificate.serial_numberc C s t jdtjdd� | jS )Nuk Properties that return a naïve datetime object have been deprecated. Please switch to revocation_date_utc.rb )� stacklevel)�warnings�warnr ZDeprecatedIn42r� rJ r& r& r' r� w s �z&_RawRevokedCertificate.revocation_datec C s | j jtjjd�S )Nr: )r� r? r= �timezone�utcrJ r& r& r' r� � s z*_RawRevokedCertificate.revocation_date_utcc C s | j S r )r� rJ r& r& r' r/ � s z!_RawRevokedCertificate.extensionsN) r) r* r+ r" rW rn r� r� r/ r& r& r& r' r� h s r� c @ s� e Zd Zejddd�dd��Zejddd�dd ��Zejd d d �d d��Zeejdd�dd���Z eejdd�dd���Z eejdd�dd���Z eejdd�dd���Z eejd d�d d ���Z eejd d�d d ���Zeejd!d�d"d#���Zeejd!d�d$d%���Zeejd&d�d'd(���Zeejdd�d)d*���Zeejdd�d+d,���Zejd-d.d/�d0d1��Zejd d�d2d3��Zejd d4d5�d6d7��Zejd8d9d5�d:d7��Zejd;d<d5�d=d7��Zejd>d�d?d@��ZejdAd.dB�dCdD��ZdES )F�CertificateRevocationListr� rC r� c C s dS )z: Serializes the CRL to PEM or DER format. Nr& r� r& r& r' r� � s z&CertificateRevocationList.public_bytesrh ri c C s dS rk r& rl r& r& r' rm � s z%CertificateRevocationList.fingerprintrD zRevokedCertificate | None)rn r c C s dS )zs Returns an instance of RevokedCertificate or None if the serial_number is not in the CRL. Nr& )r# rn r& r& r' �(get_revoked_certificate_by_serial_number� s zBCertificateRevocationList.get_revoked_certificate_by_serial_numberrz rI c C s dS r{ r& rJ r& r& r' r| � s z2CertificateRevocationList.signature_hash_algorithmr c C s dS r} r& rJ r& r& r' r~ � s z1CertificateRevocationList.signature_algorithm_oidr c C s dS r� r& rJ r& r& r' r� � s z8CertificateRevocationList.signature_algorithm_parametersr c C s dS )zC Returns the X509Name with the issuer of this CRL. Nr& rJ r& r& r' rw � s z CertificateRevocationList.issuer�datetime.datetime | Nonec C s dS )z? Returns the date of next update for this CRL. Nr& rJ r& r& r' � next_update� s z%CertificateRevocationList.next_updatec C s dS )zc Returns the date of next update for this CRL as a non-naive UTC datetime. Nr& rJ r& r& r' �next_update_utc� s z)CertificateRevocationList.next_update_utcr7 c C s dS )z? Returns the date of last update for this CRL. Nr& rJ r& r& r' � last_update� s z%CertificateRevocationList.last_updatec C s dS )zc Returns the date of last update for this CRL as a non-naive UTC datetime. Nr& rJ r& r& r' �last_update_utc� s z)CertificateRevocationList.last_update_utcr c C s dS )zS Returns an Extensions object containing a list of CRL extensions. Nr& rJ r& r& r' r/ � s z$CertificateRevocationList.extensionsc C s dS r� r& rJ r& r& r' r� � s z#CertificateRevocationList.signaturec C s dS )zO Returns the tbsCertList payload bytes as defined in RFC 5280. Nr& rJ r& r& r' �tbs_certlist_bytes� s z,CertificateRevocationList.tbs_certlist_bytesrM rN rO c C s dS r� r& rS r& r& r' rT � s z CertificateRevocationList.__eq__c C s dS )z< Number of revoked certificates in the CRL. Nr& rJ r& r& r' r^ � s z!CertificateRevocationList.__len__r� )�idxr c C s d S r r& �r# r� r& r& r' r` s z%CertificateRevocationList.__getitem__�slice�list[RevokedCertificate]c C s d S r r& r� r& r& r' r` s z int | slicez-RevokedCertificate | list[RevokedCertificate]c C s dS )zS Returns a revoked certificate (or slice of revoked certificates). Nr& r� r& r& r' r` s z#typing.Iterator[RevokedCertificate]c C s dS )z8 Iterator over the revoked certificates Nr& rJ r& r& r' r_ s z"CertificateRevocationList.__iter__r )rq r c C s dS )zQ Verifies signature of revocation list against given public key. Nr& )r# rq r& r& r' �is_signature_valid s z,CertificateRevocationList.is_signature_validN)r) r* r+ r� r� r� rm r� rW r| r~ r� rw r� r� r� r� r/ r� r� rT r^ �typing�overloadr` r_ r� r& r& r& r' r� � sj r� c @ sN e Zd Zejddd�dd��Zejdd�dd ��Zejd d�d d ��Zeejd d�dd���Z eejdd�dd���Z eejdd�dd���Z eejdd�dd���Z eejdd�dd���Z eejd d�d d ���Zejd d d!�d"d#��Zeejd d�d$d%���Zeejd d�d&d'���Zeejdd�d(d)���Zejdd d*�d+d,��Zd-S ).�CertificateSigningRequestrM rN rO c C s dS r� r& rS r& r& r' rT ! s z CertificateSigningRequest.__eq__rD rI c C s dS r� r& rJ r& r& r' rV ' s z"CertificateSigningRequest.__hash__r c C s dS rp r& rJ r& r& r' rq - s z$CertificateSigningRequest.public_keyr c C s dS rx r& rJ r& r& r' ry 3 s z!CertificateSigningRequest.subjectrz c C s dS r{ r& rJ r& r& r' r| : s z2CertificateSigningRequest.signature_hash_algorithmr c C s dS r} r& rJ r& r& r' r~ D s z1CertificateSigningRequest.signature_algorithm_oidr c C s dS r� r& rJ r& r& r' r� K s z8CertificateSigningRequest.signature_algorithm_parametersr c C s dS )z@ Returns the extensions in the signing request. Nr& rJ r& r& r' r/ T s z$CertificateSigningRequest.extensionsrX c C s dS )z/ Returns an Attributes object. Nr& rJ r& r& r' r4 [ s z$CertificateSigningRequest.attributesr� rC r� c C s dS )z; Encodes the request to PEM or DER format. Nr& r� r& r& r' r� b s z&CertificateSigningRequest.public_bytesc C s dS r� r& rJ r& r& r' r� h s z#CertificateSigningRequest.signaturec C s dS )zd Returns the PKCS#10 CertificationRequestInfo bytes as defined in RFC 2986. Nr& rJ r& r& r' �tbs_certrequest_byteso s z/CertificateSigningRequest.tbs_certrequest_bytesc C s dS )z8 Verifies signature of signing request. Nr& rJ r& r& r' r� w s z,CertificateSigningRequest.is_signature_validr[ c C s dS )z: Get the attribute value for a given OID. Nr& )r# r r& r& r' r] ~ s z/CertificateSigningRequest.get_attribute_for_oidN)r) r* r+ r� r� rT rV rq rW ry r| r~ r� r/ r4 r� r� r� r� r] r& r& r& r' r� sJ r� c @ s� e Zd Zdg g fdddd�dd�Zdd d �d d �Zd d d d�dd�Zdd�dddd d�dd�Zd!dd�dddd d d �d d �ZdS )"� CertificateSigningRequestBuilderN� Name | Noner- r3 )� subject_namer/ r4 c C s || _ || _|| _dS )zB Creates an empty X.509 certificate request (v1). N)� _subject_namer� rZ )r# r� r/ r4 r& r& r' r" � s z)CertificateSigningRequestBuilder.__init__r ��namer c C s4 t |t�std��| jdk r$td��t|| j| j�S )zF Sets the certificate requestor's distinguished name. �Expecting x509.Name object.N�&The subject name may only be set once.)rQ r � TypeErrorr� r0 r� r� rZ �r# r� r& r& r' r� � s �z-CertificateSigningRequestBuilder.subject_namer rN ��extval�criticalr c C sD t |t�std��t|j||�}t|| j� t| j| j|f�| j �S )zE Adds an X.509 extension to the certificate request. �"extension must be an ExtensionType) rQ r r� r r r2 r� r� r� rZ �r# r� r� r. r& r& r' � add_extension� s �z.CertificateSigningRequestBuilder.add_extension)�_tagr rC z_ASN1Type | None)r rE r� r c C s| t |t�std��t |t�s$td��|dk r>t |t�s>td��t|| j� |dk rZ|j}nd}t| j | j | j|||ff��S )zK Adds an X.509 attribute with an OID and associated value. z oid must be an ObjectIdentifierzvalue must be bytesNztag must be _ASN1Type) rQ r r� rC r r6 rZ rE r� r� r� )r# r rE r� �tagr& r& r' � add_attribute� s �z.CertificateSigningRequestBuilder.add_attribute�� rsa_paddingr �_AllowedHashTypes | None� typing.Any�%padding.PSS | padding.PKCS1v15 | Noner� �� private_keyrj �backendr� r c C sX | j dkrtd��|dk rHt|tjtjf�s4td��t|tj�sHtd��t � | |||�S )zF Signs the request using the requestor's private key. Nz/A CertificateSigningRequest must have a subject� Padding must be PSS or PKCS1v15�&Padding is only supported for RSA keys) r� r0 rQ r �PSS�PKCS1v15r� r � RSAPrivateKey� rust_x509Zcreate_x509_csr�r# r� rj r� r� r& r& r' �sign� s �z%CertificateSigningRequestBuilder.sign)N)r) r* r+ r" r� r� r� r� r& r& r& r' r� � s � �$ ��r� c @ s� e Zd ZU ded< ddddddg fddddddddd �d d �Zd d d �dd�Zd d d �dd�Zdd d�dd�Zdd d�dd�Zdd d�d d �Z dd d�d d �Z d d!d d"�d#d$�Z d.dd%�d&d'd(d)d*d+�d,d-�Z dS )/�CertificateBuilderr- r� Nr� z CertificatePublicKeyTypes | None� int | Noner� r )� issuer_namer� rq rn rs ru r/ r c C s6 t j| _|| _|| _|| _|| _|| _|| _|| _ d S r ) ra rd �_version� _issuer_namer� � _public_keyr� �_not_valid_before�_not_valid_afterr� )r# r� r� rq rn rs ru r/ r& r& r' r" � s zCertificateBuilder.__init__r r� c C sD t |t�std��| jdk r$td��t|| j| j| j| j | j | j �S )z3 Sets the CA's distinguished name. r� N�%The issuer name may only be set once.) rQ r r� r� r0 r� r� r� r� r� r� r� r� r& r& r' r� s �z CertificateBuilder.issuer_namec C sD t |t�std��| jdk r$td��t| j|| j| j| j | j | j �S )z: Sets the requestor's distinguished name. r� Nr� ) rQ r r� r� r0 r� r� r� r� r� r� r� r� r& r& r' r� " s �z CertificateBuilder.subject_namer )�keyr c C s` t |tjtjtjtjt j t j t jf�s.td��| jdk r@td��t| j| j|| j| j| j| j�S )zT Sets the requestor's public key (as found in the signing request). z�Expecting one of DSAPublicKey, RSAPublicKey, EllipticCurvePublicKey, Ed25519PublicKey, Ed448PublicKey, X25519PublicKey, or X448PublicKey.Nz$The public key may only be set once.)rQ r Z DSAPublicKeyr Z RSAPublicKeyr ZEllipticCurvePublicKeyr ZEd25519PublicKeyr ZEd448PublicKeyr ZX25519PublicKeyr Z X448PublicKeyr� r� r0 r� r� r� r� r� r� r� )r# r� r& r& r' rq 4 s2 �� � �z CertificateBuilder.public_keyrD ��numberr c C sh t |t�std��| jdk r$td��|dkr4td��|�� dkrHtd��t| j| j| j || j | j | j �S )z5 Sets the certificate serial number. �'Serial number must be of integral type.N�'The serial number may only be set once.r z%The serial number should be positive.� �3The serial number should not be more than 159 bits.) rQ rD r� r� r0 � bit_lengthr� r� r� r� r� r� r� �r# r� r& r& r' rn Y s& ��z CertificateBuilder.serial_numberr7 r8 c C sz t |tj�std��| jdk r&td��t|�}|tk r>td��| jdk rZ|| jkrZtd��t| j | j | j | j || j| j �S )z7 Sets the certificate activation time. �Expecting datetime object.Nz*The not valid before may only be set once.z>The not valid before date must be on or after 1950 January 1).zBThe not valid before date must be before the not valid after date.)rQ r= r� r� r0 rA �_EARLIEST_UTC_TIMEr� r� r� r� r� r� r� �r# r9 r& r& r' rs t s, ���z#CertificateBuilder.not_valid_beforec C sz t |tj�std��| jdk r&td��t|�}|tk r>td��| jdk rZ|| jk rZtd��t| j | j | j | j | j|| j �S )z7 Sets the certificate expiration time. r� Nz)The not valid after may only be set once.z<The not valid after date must be on or after 1950 January 1.zAThe not valid after date must be after the not valid before date.)rQ r= r� r� r0 rA r� r� r� r� r� r� r� r� r� r& r& r' ru � s2 �����z"CertificateBuilder.not_valid_afterr rN r� c C sT t |t�std��t|j||�}t|| j� t| j| j | j | j | j | j | j|f��S )z= Adds an X.509 extension to the certificate. r� )rQ r r� r r r2 r� r� r� r� r� r� r� r� r� r& r& r' r� � s �z CertificateBuilder.add_extensionr� r r� r� r� rg r� c C s� | j dkrtd��| jdkr$td��| jdkr6td��| jdkrHtd��| jdkrZtd��| jdkrltd��|dk r�t|tj tj f�s�t d��t|t j �s�t d ��t�| |||�S ) zC Signs the certificate using the CA's private key. Nz&A certificate must have a subject namez&A certificate must have an issuer namez'A certificate must have a serial numberz/A certificate must have a not valid before timez.A certificate must have a not valid after timez$A certificate must have a public keyr� r� )r� r0 r� r� r� r� r� rQ r r� r� r� r r� r� Zcreate_x509_certificater� r& r& r' r� � s. �zCertificateBuilder.sign)N) r) r* r+ �__annotations__r" r� r� rq rn rs ru r� r� r& r& r& r' r� � s( � % ��r� c @ s� e Zd ZU ded< ded< dddg g fdddddd�d d �Zd d d �d d�Zdd d�dd�Zdd d�dd�Zddd d�dd�Zdd d �d d �Z d(dd �d d!d"d#d$d%�d&d'�Z dS ))� CertificateRevocationListBuilderr- r� r� �_revoked_certificatesNr� r� )r� r� r� r/ �revoked_certificatesc C s" || _ || _|| _|| _|| _d S r )r� � _last_update� _next_updater� r� )r# r� r� r� r/ r� r& r& r' r" � s z)CertificateRevocationListBuilder.__init__r )r� r c C s< t |t�std��| jd k r$td��t|| j| j| j| j �S )Nr� r� ) rQ r r� r� r0 r� r� r� r� r� )r# r� r& r& r' r� s �z,CertificateRevocationListBuilder.issuer_namer7 )r� r c C sr t |tj�std��| jd k r&td��t|�}|tk r>td��| jd k rZ|| jkrZtd��t| j || j| j | j �S )Nr� �!Last update may only be set once.�8The last update date must be on or after 1950 January 1.z9The last update date must be before the next update date.) rQ r= r� r� r0 rA r� r� r� r� r� r� )r# r� r& r& r' r� s( ���z,CertificateRevocationListBuilder.last_update)r� r c C sr t |tj�std��| jd k r&td��t|�}|tk r>td��| jd k rZ|| jk rZtd��t| j | j|| j | j �S )Nr� r� r� z8The next update date must be after the last update date.) rQ r= r� r� r0 rA r� r� r� r� r� r� )r# r� r& r& r' r� ( s( ���z,CertificateRevocationListBuilder.next_updater rN r� c C sL t |t�std��t|j||�}t|| j� t| j| j | j | j|f�| j �S )zM Adds an X.509 extension to the certificate revocation list. r� ) rQ r r� r r r2 r� r� r� r� r� r� r� r& r& r' r� @ s �z.CertificateRevocationListBuilder.add_extensionr� )�revoked_certificater c C s2 t |t�std��t| j| j| j| j| j|f��S )z8 Adds a revoked certificate to the CRL. z)Must be an instance of RevokedCertificate) rQ r� r� r� r� r� r� r� r� )r# r� r& r& r' �add_revoked_certificateS s �z8CertificateRevocationListBuilder.add_revoked_certificater� r r� r� r� r� r� c C s| | j d krtd��| jd kr$td��| jd kr6td��|d k rlt|tjtjf�sXtd��t|t j �sltd��t � | |||�S )Nz A CRL must have an issuer namez"A CRL must have a last update timez"A CRL must have a next update timer� r� ) r� r0 r� r� rQ r r� r� r� r r� r� Zcreate_x509_crlr� r& r& r' r� d s" �z%CertificateRevocationListBuilder.sign)N) r) r* r+ r� r" r� r� r� r� r� r� r& r& r& r' r� � s" � ��r� c @ sj e Zd Zddg fdddd�dd�Zdd d �d d �Zd d d �dd�Zddd d�dd�Zdddd�dd�ZdS )�RevokedCertificateBuilderNr� r� r- r� c C s || _ || _|| _d S r r� r� r& r& r' r" � s z"RevokedCertificateBuilder.__init__rD r� c C sX t |t�std��| jd k r$td��|dkr4td��|�� dkrHtd��t|| j| j�S )Nr� r� r z$The serial number should be positiver� r� ) rQ rD r� r� r0 r� r� r� r� r� r& r& r' rn � s � �z'RevokedCertificateBuilder.serial_numberr7 r8 c C sN t |tj�std��| jd k r&td��t|�}|tk r>td��t| j|| j �S )Nr� z)The revocation date may only be set once.z7The revocation date must be on or after 1950 January 1.) rQ r= r� r� r0 rA r� r� r� r� r� r& r& r' r� � s � �z)RevokedCertificateBuilder.revocation_dater rN r� c C sD t |t�std��t|j||�}t|| j� t| j| j | j|f��S )Nr� ) rQ r r� r r r2 r� r� r� r� r� r& r& r' r� � s �z'RevokedCertificateBuilder.add_extensionr� r� )r� r c C s: | j d krtd��| jd kr$td��t| j | jt| j��S )Nz/A revoked certificate must have a serial numberz1A revoked certificate must have a revocation date)r� r0 r� r� r r� )r# r� r& r& r' �build� s ��z RevokedCertificateBuilder.build)N)r) r* r+ r" rn r� r� r� r& r& r& r' r� � s � r� rD rI c C s t �t�d�d�d? S )N� �bigr )rD � from_bytes�os�urandomr& r& r& r' �random_serial_number� s r� )N� __future__r r� r= r� r� r� Z cryptographyr Z"cryptography.hazmat.bindings._rustr r� Z cryptography.hazmat.primitivesr r Z)cryptography.hazmat.primitives.asymmetricr r r r r r r r Z/cryptography.hazmat.primitives.asymmetric.typesr r r Z cryptography.x509.extensionsr r r r Zcryptography.x509.namer r Zcryptography.x509.oidr r� �Union�SHA224�SHA256�SHA384�SHA512ZSHA3_224ZSHA3_256ZSHA3_384ZSHA3_512Z_AllowedHashTypes� Exceptionr r2 r6 rA rB rX �Enumra re �ABCMetarg �registerr� r� r� r� Zload_pem_x509_certificateZload_der_x509_certificateZload_pem_x509_certificatesZload_pem_x509_csrZload_der_x509_csrZload_pem_x509_crlZload_der_x509_crlr� r� r� r� r� r& r& r& r' �<module> st ( �� $ " f e v I
💾 Save Changes
❌ Cancel