U
vf9 @ s U d dl mZ d dlZd dlZd dlZd dlZd dlZd dlmZ d dl m
Z d dl m
Z
mZ G dd dejZdd eD Ze
jeje
jeje
jeje
jeje
jeje
jejiZd
ed < ej ee f Z ej e ef Z e
j d e
j!d
e
j"de
j#de
j$de
jde
j%de
jde
j&di Z'ded< dd e'( D Z)e
jde
jde
j diZ*ddd d d Z+ddd d d Z,G d!d" d"Z-G d#d$ d$Z.G d%d& d&Z/G d'd( d(Z0dS )) ) annotationsN)utils)x509)NameOIDObjectIdentifierc @ s< e Zd ZdZdZdZdZdZdZdZ dZ
d Z d
Z d Z
d Zd
S ) _ASN1Type N)__name__
__module__ __qualname__ BitStringZ OctetString
UTF8StringZ
NumericStringPrintableStringZ T61String IA5StringZUTCTimeZGeneralizedTimeZ
VisibleStringZUniversalStringZ BMPString r r I/opt/alt/python38/lib64/python3.8/site-packages/cryptography/x509/name.pyr s r c C s i | ] }|j |qS r )value.0ir r r
! s r! z!dict[ObjectIdentifier, _ASN1Type]_NAMEOID_DEFAULT_TYPEZCNLZSTOZOUCZSTREETZDCUID _OidNameMap_NAMEOID_TO_NAMEc C s i | ]\}}||qS r r )r kvr r r r! < s ) r+ ) @ str | bytesstr)valreturnc C s | sdS t | tr&dt| d S | dd} | dd} | dd } | d
d } | d d
} | dd} | dd} | dd} | d dkrd| } | d dkr| dd d } | S )z>Escape special characters in RFC4514 Distinguished Name value. #utf8\z\\"z\"+z\+,z\,;z\;z\> z\00r )r3 r= Nz\ )
isinstancebytesbinasciihexlifydecodereplace)r0 r r r _escape_dn_valueE s"
rE c C s | sdS dd }t j|| S )Nr2 c S s( | d}t|dkr|S tt|dS )Nr, )grouplenchrint)mr0 r r r subj s
z _unescape_dn_value..sub)_RFC4514NameParser_PAIR_RErL )r0 rL r r r _unescape_dn_valueb s rO c @ s e Zd Zd!dddddddd d
d Zedd d
dZedd ddZedd ddZd"dddddZdddddZ d d d d Z
dd d d Z dS )#
NameAttributeNT) _validater r. z_ASN1Type | NoneboolNone)oidr _typerQ r1 c
C s t |tstd|tjkrB|tjkr.tdt |tsTtdnt |tsTtdt
|}|d k r|\}}t |ts|t t |
d}||k s||krd| d| d| } |d krt| ntj| d
d |d krt
|tj}t |tstd || _|| _|| _d S )
Nz2oid argument must be an ObjectIdentifier instance.z6oid must be X500_UNIQUE_IDENTIFIER for BitString type.z!value must be bytes for BitStringz value argument must be a strr4 z Attribute's length must be >= z and <= z
, but it was Tr+ )
stacklevelz%_type must be from the _ASN1Type enum)r? r TypeErrorr r r ZX500_UNIQUE_IDENTIFIERr@ r/ _NAMEOID_LENGTH_LIMITgetAssertionErrorrH encode
ValueErrorwarningswarnr" r _oid_valuerU )
selfrT r rU rQ Z
length_limitsZ
min_length
max_lengthZc_lenmsgr r r __init__v s>
zNameAttribute.__init__r1 c C s | j S N)r_ ra r r r rT s zNameAttribute.oidc C s | j S rf )r` rg r r r r s zNameAttribute.valuer/ c C s t | j| jjS )zt
The short attribute name (for example "CN") if available,
otherwise the OID dotted string.
)r( rY rT Z
dotted_stringrg r r r rfc4514_attribute_name s z$NameAttribute.rfc4514_attribute_name_OidNameMap | Noneattr_name_overridesr1 c C s6 |r| | jnd}|dkr"| j}| dt| j S )z
Format as RFC4514 Distinguished Name string.
Use short attribute name if available, otherwise fall back to OID
dotted string.
N=)rY rT rh rE r )ra rk attr_namer r r rfc4514_string s
z NameAttribute.rfc4514_stringobjectotherr1 c C s& t |tstS | j|jko$| j|jkS rf )r? rP NotImplementedrT r ra rq r r r __eq__ s
zNameAttribute.__eq__rJ c C s t | j| jfS rf )hashrT r rg r r r __hash__ s zNameAttribute.__hash__c C s d| j d| jdS )Nz)rT r rg r r r __repr__ s zNameAttribute.__repr__)N)N) r r r rd propertyrT r rh rn rt rv rx r r r r rP u s 6 rP c @ s e Zd ZddddZddddd Zd d d d
ddZdddddZddddZddddZddd d Z d dd d Z
d
S )!RelativeDistinguishedName typing.Iterable[NameAttribute])
attributesc C s\ t |}|stdtdd |D s.td|| _t|| _t| jt|krXtdd S )Nz-a relative distinguished name cannot be emptyc s s | ]}t |tV qd S rf r? rP r xr r r s z5RelativeDistinguishedName.__init__..z/attributes must be an iterable of NameAttributez$duplicate attributes are not allowed)listr\ allrW _attributes frozenset_attribute_setrH ra r| r r r rd s
z"RelativeDistinguishedName.__init__r list[NameAttribute]rT r1 c s fdd| D S )Nc s g | ]}|j kr|qS r rT r r r r
s
zDRelativeDistinguishedName.get_attributes_for_oid..r ra rT r r r get_attributes_for_oid s z0RelativeDistinguishedName.get_attributes_for_oidNri r/ rj c s d fdd| jD S )z
Format as RFC4514 Distinguished Name string.
Within each RDN, attributes are joined by '+', although that is rarely
used in certificates.
r7 c 3 s | ]}| V qd S rf rn r attrrk r r r s z;RelativeDistinguishedName.rfc4514_string..joinr ra rk r r r rn s z(RelativeDistinguishedName.rfc4514_stringro rR rp c C s t |tstS | j|jkS rf )r? rz rr r rs r r r rt s
z RelativeDistinguishedName.__eq__rJ re c C s
t | jS rf )ru r rg r r r rv s z"RelativeDistinguishedName.__hash__ typing.Iterator[NameAttribute]c C s
t | jS rf )iterr rg r r r __iter__ s z"RelativeDistinguishedName.__iter__c C s
t | jS rf )rH r rg r r r __len__ s z!RelativeDistinguishedName.__len__c C s d| dS )Nz.c S s g | ]}t tt|gqS r )rz typingcastrP r~ r r r r s z!Name.__init__..c s s | ]}t |tV qd S rf )r? rz r~ r r r r " s zNattributes must be a list of NameAttribute or a list RelativeDistinguishedName)r r r r r Listrz rW r r r r rd s
Nr/ z_NameOidMap | Nonedatark r1 c C s t ||p
i S rf )rM parse)clsr rk r r r from_rfc4514_string, s zName.from_rfc4514_stringri rj c s d fddt| jD S )a
Format as RFC4514 Distinguished Name string.
For example 'CN=foobar.com,O=Foo Corp,C=US'
An X.509 name is a two-level structure: a list of sets of attributes.
Each list element is separated by ',' and within each list element, set
elements are separated by '+'. The latter is almost never used in
real world certificates. According to RFC4514 section 2.1 the
RDNSequence must be reversed when converting to string representation.
r8 c 3 s | ]}| V qd S rf r r r r r r A s z&Name.rfc4514_string..)r reversedr r r r r rn 4 s
zName.rfc4514_stringr r r c s fdd| D S )Nc s g | ]}|j kr|qS r r r r r r r I s
z/Name.get_attributes_for_oid..r r r r r r F s zName.get_attributes_for_oidz list[RelativeDistinguishedName]re c C s | j S rf r rg r r r rdnsK s z Name.rdnsz
typing.Anyr@ )backendr1 c C s
t | S rf ) rust_x509Zencode_name_bytes)ra r r r r public_bytesO s zName.public_bytesro rR rp c C s t |tstS | j|jkS rf )r? r rr r rs r r r rt R s
z Name.__eq__rJ c C s t t| jS rf )ru tupler rg r r r rv X s z
Name.__hash__r c c s | j D ]}|E d H qd S rf r )ra rdnr r r r ] s
z
Name.__iter__c C s t dd | jD S )Nc s s | ]}t |V qd S rf )rH )r r r r r r b s z Name.__len__..)sumr rg r r r r a s z Name.__len__c C s" d dd | jD }d| dS )Nr8 c s s | ]}| V qd S rf r r r r r r e s z Name.__repr__..z]|[\da-zA-Z]{2})z7[\x01-\x1f\x21\x24-\x2A\x2D-\x3A\x3D\x3F-\x5B\x5D-\x7F]z3[\x01-\x21\x23-\x2A\x2D-\x3A\x3D\x3F-\x5B\x5D-\x7F]z7[\x01-\x1F\x21\x23-\x2A\x2D-\x3A\x3D\x3F-\x5B\x5D-\x7F]z[\x80-]|z
(
(z!)
(
(z)*
(z$)
)?
)?
z#([\da-zA-Z]{2})+r/ _NameOidMaprS r c C s || _ d| _|| _d S )Nr )_data_idx_attr_name_overrides)ra r rk r r r rd s z_RFC4514NameParser.__init__rR re c C s | j t| jk S rf )r rH r rg r r r _has_data s z _RFC4514NameParser._has_dataz
str | Nonec C s | r| j| j S d S rf )r r r rg r r r _peek s z_RFC4514NameParser._peek)chr1 c C s" | |krt| jd7 _d S )Nr, )r r\ r )ra r r r r
_read_char s z _RFC4514NameParser._read_charc C s< |j | j| jd}|d kr t| }| jt|7 _|S )N)pos)matchr r r\ rG rH )ra patr r0 r r r _read_re s z_RFC4514NameParser._read_rer c C sH | stg S | g}| r<| d || qtt|S )a'
Parses the `data` string and converts it to a Name.
According to RFC4514 section 2.1 the RDNSequence must be
reversed when converting to string representation. So, when
we parse it, we need to reverse again to get the RDNs on the
correct order.
r8 )r r
_parse_rdnr appendr r r r r r s
z_RFC4514NameParser.parserz c C s8 | g}| dkr0| d || q
t|S )Nr7 ) _parse_nar r r rz )ra Znasr r r r s
z _RFC4514NameParser._parse_rdnrP c C s z| | j}W n@ tk
rP | | j}| j|t|}|d krLtY n
X t|}| d | dkr| | j
}t |dd
}n| | j}t|}t||S )Nrl r3 r, )r _OID_REr\ _DESCR_REr rY _NAME_TO_NAMEOIDr r r
_HEXSTRING_RErA unhexlifyrC
_STRING_RErO rP )ra Z oid_valuenamerT r Z raw_valuer r r r s$
z _RFC4514NameParser._parse_naN) r r r recompiler r Z_PAIRrN Z_LUTF1Z_SUTF1Z_TUTF1rI sys
maxunicodeZ_UTFMBZ _LEADCHARZ _STRINGCHARZ
_TRAILCHARVERBOSEr r rd r r r r r r r r r r r rM i sH
rM )1
__future__r rA r r r r] Z cryptographyr Z"cryptography.hazmat.bindings._rustr r Zcryptography.x509.oidr r Enumr Z_ASN1_TYPE_TO_ENUMZ COUNTRY_NAMEr ZJURISDICTION_COUNTRY_NAMEZ
SERIAL_NUMBERZ DN_QUALIFIERZ
EMAIL_ADDRESSr ZDOMAIN_COMPONENTr" __annotations__Mappingr/ r' r Z COMMON_NAMEZ
LOCALITY_NAMEZSTATE_OR_PROVINCE_NAMEZORGANIZATION_NAMEZORGANIZATIONAL_UNIT_NAMEZSTREET_ADDRESSZUSER_IDr( itemsr rX rE rO rP rz r rM r r r r sv
e5Z