U
vf#N @ sh d dl mZ d dlZd dlZd dlZd dlmZmZ d dlm Z d dl
m Z m Z d dl
mZ d dlmZmZmZ G dd d ejZG d
d d ejZe je je je je jfZd d
dddZ G dd dejZ G dd dZ G dd dej dZ G dd dej dZ!G dd dej dZ"e #e j e"#e j" e!#e j! G d d d Z$G d d d Z%e j&Z&e j'Z'dS ) ) annotationsN)utilsx509)ocsp)hashes
serialization) CertificateIssuerPrivateKeyTypes)_EARLIEST_UTC_TIME_convert_to_naive_utc_time_reject_duplicate_extensionc @ s e Zd ZdZdZdS )OCSPResponderEncodingzBy HashzBy NameN)__name__
__module__ __qualname__HASHNAME r r I/opt/alt/python38/lib64/python3.8/site-packages/cryptography/x509/ocsp.pyr s r c @ s$ e Zd ZdZdZdZdZdZdZdS )OCSPResponseStatusr N) r
r r
SUCCESSFULZMALFORMED_REQUESTINTERNAL_ERRORZ TRY_LATERZ SIG_REQUIRED UNAUTHORIZEDr r r r r s r hashes.HashAlgorithmNone) algorithmreturnc C s t | tstdd S )Nz9Algorithm must be SHA1, SHA224, SHA256, SHA384, or SHA512)
isinstance_ALLOWED_HASHES
ValueError)r r r r _verify_algorithm/ s
r$ c @ s e Zd ZdZdZdZdS )OCSPCertStatusr r r N)r
r r ZGOODREVOKEDUNKNOWNr r r r r% 6 s r% c @ s( e Zd Zddddddddddd Zd
S ) _SingleResponsex509.Certificater r% datetime.datetimedatetime.datetime | Nonex509.ReasonFlags | None)certissuerr cert_status this_update next_updaterevocation_timerevocation_reasonc C s t |tjrt |tjs tdt| t |tjs r r? r r r r@ s z"OCSPSingleResponse.issuer_key_hashc C s dS rA r r? r r r rB s z#OCSPSingleResponse.issuer_name_hashr c C s dS rC r r? r r r rD s z!OCSPSingleResponse.hash_algorithmrE c C s dS rF r r? r r r rG s z OCSPSingleResponse.serial_numberN)r
r r rO rP rQ rU r2 rX r3 r0 r\ r1 r_ r@ rB rD rG r r r r rS sH rS c @ sz e Zd ZeejddddZeejddddZeejddd d
Zeejd dd d
Z eejddddZ
eejddddZ eejddddZ eejddddZ
eejddddZeejd dd d Zeejd dd d Zeejd!dd"d#Zeejd$dd%d&Zeejd$dd'd(Zeejd)dd*d+Zeejd dd,d-Zeejd dd.d/Zeejd$dd0d1Zeejd$dd2d3Zeejddd4d5Zeejddd6d7Zeejd8dd9d:Zeejd;dddd?d@Z eejd>ddAdBZ ejdCddDdEdFZ dGS )H OCSPResponsez#typing.Iterator[OCSPSingleResponse]r= c C s dS )z_
An iterator over the individual SINGLERESP structures in the
response
Nr r? r r r responses s zOCSPResponse.responsesr c C s dS )zm
The status of the response. This is a value from the OCSPResponseStatus
enumeration
Nr r? r r r response_status s z OCSPResponse.response_statuszx509.ObjectIdentifierc C s dS )zA
The ObjectIdentifier of the signature algorithm
Nr r? r r r signature_algorithm_oid s z$OCSPResponse.signature_algorithm_oidhashes.HashAlgorithm | Nonec C s dS )zX
Returns a HashAlgorithm corresponding to the type of the digest signed
Nr r? r r r signature_hash_algorithm" s z%OCSPResponse.signature_hash_algorithmr< c C s dS )z%
The signature bytes
Nr r? r r r signature+ s zOCSPResponse.signaturec C s dS )z+
The tbsResponseData bytes
Nr r? r r r tbs_response_bytes2 s z OCSPResponse.tbs_response_byteszlist[x509.Certificate]c C s dS )z
A list of certificates used to help build a chain to verify the OCSP
response. This situation occurs when the OCSP responder uses a delegate
certificate.
Nr r? r r r certificates9 s zOCSPResponse.certificatesz bytes | Nonec C s dS )z2
The responder's key hash or None
Nr r? r r r responder_key_hashB s z OCSPResponse.responder_key_hashzx509.Name | Nonec C s dS )z.
The responder's Name or None
Nr r? r r r responder_nameI s zOCSPResponse.responder_namer* c C s dS )z4
The time the response was produced
Nr r? r r r produced_atP s zOCSPResponse.produced_atc C s dS )zf
The time the response was produced. Represented as a non-naive UTC
datetime.
Nr r? r r r produced_at_utcW s z OCSPResponse.produced_at_utcr% c C s dS rT r r? r r r rU _ s z OCSPResponse.certificate_statusr+ c C s dS rV r r? r r r r2 f s z OCSPResponse.revocation_timec C s dS rW r r? r r r rX n s z OCSPResponse.revocation_time_utcr, c C s dS rY r r? r r r r3 v s z OCSPResponse.revocation_reasonc C s dS rZ r r? r r r r0 ~ s zOCSPResponse.this_updatec C s dS r[ r r? r r r r\ s z OCSPResponse.this_update_utcc C s dS r] r r? r r r r1 s zOCSPResponse.next_updatec C s dS r^ r r? r r r r_ s z OCSPResponse.next_update_utcc C s dS r> r r? r r r r@ s z OCSPResponse.issuer_key_hashc C s dS rA r r? r r r rB s z OCSPResponse.issuer_name_hashr c C s dS rC r r? r r r rD s zOCSPResponse.hash_algorithmrE c C s dS rF r r? r r r rG s zOCSPResponse.serial_numberrM c C s dS )zR
The list of response extensions. Not single response extensions.
Nr r? r r r rN s zOCSPResponse.extensionsc C s dS )zR
The list of single response extensions. Not response extensions.
Nr r? r r r single_extensions s z OCSPResponse.single_extensionsrH rI c C s dS )z0
Serializes the response to DER
Nr rK r r r rL s zOCSPResponse.public_bytesN) r
r r rO rP rQ ra rb rc re rf rg rh ri rj rk rl rU r2 rX r3 r0 r\ r1 r_ r@ rB rD rG rN rm rL r r r r r`
s r` c @ sr e Zd Zddg fdddddddZd d d
d d d d
Zdddd
d dddZddd dddZddddZdS ) OCSPRequestBuilderNzFtuple[x509.Certificate, x509.Certificate, hashes.HashAlgorithm] | Nonez5tuple[bytes, bytes, int, hashes.HashAlgorithm] | None(list[x509.Extension[x509.ExtensionType]]r )request request_hashrN r c C s || _ || _|| _d S N)_request
_request_hash _extensions)r9 rp rq rN r r r r: s
zOCSPRequestBuilder.__init__r) r )r- r. r r c C sZ | j d k s| jd k r tdt| t|tjrp s z3OCSPResponseBuilder.certificates..z$certs must be a list of Certificates)
r r# listrz allr6 r r r ru )r9 r r r r rh h s
z OCSPResponseBuilder.certificatesr| r} r~ c C sL t |tjstdt|j||}t|| j t| j | j
| j | j|fS r ) r! r r r6 r r r ru r r r r r r r r r y s
z!OCSPResponseBuilder.add_extensionr rd r` ) private_keyr r c C s6 | j d krtd| jd kr$tdttj| ||S )Nz&You must add a response before signingz*You must add a responder_id before signing)r r# r r create_ocsp_responser r )r9 r r r r r sign s
zOCSPResponseBuilder.signr )rb r c C s4 t |tstd|tjkr$tdt|d d d S )Nz7response_status must be an item from OCSPResponseStatusz$response_status cannot be SUCCESSFUL)r! r r6 r r# r r )clsrb r r r build_unsuccessful s
z&OCSPResponseBuilder.build_unsuccessful) r
r r r: r r rh r r classmethodr r r r r r ( s
r )(
__future__r rP r7 typingZ cryptographyr r Z"cryptography.hazmat.bindings._rustr Z cryptography.hazmat.primitivesr r Z/cryptography.hazmat.primitives.asymmetric.typesr Zcryptography.x509.baser r
r Enumr r SHA1SHA224SHA256SHA384SHA512r" r$ r% r( ABCMetar; rS r` registerrn r Zload_der_ocsp_requestZload_der_ocsp_responser r r r s<
F+] F T}