3
l_c @ s d dl mZmZmZ d dlmZ d dlZd dlmZ d dl m
Z
d dl m Z m
Z
G dd deZd d
eD Ze Ze jeje jeje jeje jeje jeje jejiZe jd e j d e j d
e j de j de jde j de jde j!di Z"dd Z#G dd deZ$G dd deZ%G dd deZ&dS ) )absolute_importdivisionprint_function)EnumN)utils) _get_backend)NameOIDObjectIdentifierc @ s4 e Zd ZdZdZdZdZdZdZdZ dZ
d Z d
Z d S ) _ASN1Type N)
__name__
__module__ __qualname__
UTF8StringZ
NumericStringPrintableStringZ T61String IA5StringZUTCTimeZGeneralizedTimeZ
VisibleStringZUniversalStringZ BMPString r r /usr/lib64/python3.6/name.pyr
s r
c C s i | ] }||j qS r )value).0ir r r
s r ZCNLZSTOZOUCZSTREETZDCZUIDc C s | sdS | j dd} | j dd} | j dd} | j dd } | j d
d } | j d d
} | j dd} | j dd} | d dkr|d| } | d dkr| dd d } | S )z>Escape special characters in RFC4514 Distinguished Name value. \z\\"z\"+z\+,z\,;z\;z\> z\00r # Nz\ )r- r. r0 )replace)valr r r _escape_dn_value7 s r3 c @ sT e Zd ZefddZejdZejdZdd Z dd Z
d d
Z d d Z d
d Z
dS )
NameAttributec C s t |tstdt |tjs&td|tjks:|tjkrTt|j ddkrTt
d|t krjt j
|tj}t |ts|td|| _|| _|| _d S )Nz2oid argument must be an ObjectIdentifier instance.z#value argument must be a text type.utf8 z/Country name must be a 2 character country codez%_type must be from the _ASN1Type enum)
isinstancer TypeErrorsixZ text_typer COUNTRY_NAMEJURISDICTION_COUNTRY_NAMElenencode
ValueError _SENTINEL_NAMEOID_DEFAULT_TYPEgetr
r _oid_value_type)selfoidr rD r r r __init__P s"
zNameAttribute.__init__rB rC c C s$ t j| j| jj}d|t| jf S )z
Format as RFC4514 Distinguished Name string.
Use short attribute name if available, otherwise fall back to OID
dotted string.
z%s=%s)_NAMEOID_TO_NAMErA rF Z
dotted_stringr3 r )rE keyr r r rfc4514_stringu s z NameAttribute.rfc4514_stringc C s& t |tstS | j|jko$| j|jkS )N)r7 r4 NotImplementedrF r )rE otherr r r __eq__ s
zNameAttribute.__eq__c C s
| |k S )Nr )rE rL r r r __ne__ s zNameAttribute.__ne__c C s t | j| jfS )N)hashrF r )rE r r r __hash__ s zNameAttribute.__hash__c C s
dj | S )Nz/)format)rE r r r __repr__ s zNameAttribute.__repr__N)r r r r? rG r Zread_only_propertyrF r rJ rM rN rP rR r r r r r4 O s "
r4 c @ sT e Zd Zdd Zdd Zdd Zdd Zd d
Zd d Zd
d Z dd Z
dd Z dS )RelativeDistinguishedNamec C s\ t |}|stdtdd |D s.td|| _t|| _t| jt|krXtdd S )Nz-a relative distinguished name cannot be emptyc s s | ]}t |tV qd S )N)r7 r4 )r xr r r s z5RelativeDistinguishedName.__init__..z/attributes must be an iterable of NameAttributez$duplicate attributes are not allowed)listr> allr8 _attributes frozenset_attribute_setr< )rE
attributesr r r rG s
z"RelativeDistinguishedName.__init__c s fdd| D S )Nc s g | ]}|j kr|qS r )rF )r r )rF r r
s zDRelativeDistinguishedName.get_attributes_for_oid..r )rE rF r )rF r get_attributes_for_oid s z0RelativeDistinguishedName.get_attributes_for_oidc C s dj dd | jD S )z
Format as RFC4514 Distinguished Name string.
Within each RDN, attributes are joined by '+', although that is rarely
used in certificates.
r' c s s | ]}|j V qd S )N)rJ )r attrr r r rU s z;RelativeDistinguishedName.rfc4514_string..)joinrX )rE r r r rJ s z(RelativeDistinguishedName.rfc4514_stringc C s t |tstS | j|jkS )N)r7 rS rK rZ )rE rL r r r rM s
z RelativeDistinguishedName.__eq__c C s
| |k S )Nr )rE rL r r r rN s z RelativeDistinguishedName.__ne__c C s
t | jS )N)rO rZ )rE r r r rP s z"RelativeDistinguishedName.__hash__c C s
t | jS )N)iterrX )rE r r r __iter__ s z"RelativeDistinguishedName.__iter__c C s
t | jS )N)r< rX )rE r r r __len__ s z!RelativeDistinguishedName.__len__c C s dj | j S )Nz )rQ rJ )rE r r r rR s z"RelativeDistinguishedName.__repr__N) r r r rG r] rJ rM rN rP ra rb rR r r r r rS s rS c @ sj e Zd Zdd Zdd Zdd Zedd Zdd
d Zd d
Z dd Z
dd Z dd Z dd Z
dd Zd S )Namec C sR t |}tdd |D r,dd |D | _n"tdd |D rF|| _ntdd S )Nc s s | ]}t |tV qd S )N)r7 r4 )r rT r r r rU s z Name.__init__..c S s g | ]}t |gqS r )rS )r rT r r r r\ s z!Name.__init__..c s s | ]}t |tV qd S )N)r7 rS )r rT r r r rU s zNattributes must be a list of NameAttribute or a list RelativeDistinguishedName)rV rW rX r8 )rE r[ r r r rG s z
Name.__init__c C s dj dd t| jD S )a
Format as RFC4514 Distinguished Name string.
For example 'CN=foobar.com,O=Foo Corp,C=US'
An X.509 name is a two-level structure: a list of sets of attributes.
Each list element is separated by ',' and within each list element, set
elements are separated by '+'. The latter is almost never used in
real world certificates. According to RFC4514 section 2.1 the
RDNSequence must be reversed when converting to string representation.
r( c s s | ]}|j V qd S )N)rJ )r r^ r r r rU s z&Name.rfc4514_string..)r_ reversedrX )rE r r r rJ s zName.rfc4514_stringc s fdd| D S )Nc s g | ]}|j kr|qS r )rF )r r )rF r r r\ s z/Name.get_attributes_for_oid..r )rE rF r )rF r r] s zName.get_attributes_for_oidc C s | j S )N)rX )rE r r r rdns s z Name.rdnsNc C s t |}|j| S )N)r Zx509_name_bytes)rE Zbackendr r r public_bytes s zName.public_bytesc C s t |tstS | j|jkS )N)r7 rc rK rX )rE rL r r r rM s
z Name.__eq__c C s
| |k S )Nr )rE rL r r r rN s z Name.__ne__c C s t t| jS )N)rO tuplerX )rE r r r rP s z
Name.__hash__c c s( x"| j D ]}x|D ]
}|V qW qW d S )N)rX )rE rdnZavar r r ra s
z
Name.__iter__c C s t dd | jD S )Nc s s | ]}t |V qd S )N)r< )r rh r r r rU s z Name.__len__..)sumrX )rE r r r rb s z Name.__len__c C s: dj dd | jD }tjr,dj|jdS dj|S d S )Nr( c s s | ]}|j V qd S )N)rJ )r r^ r r r rU s z Name.__repr__..z
r5 )r_ rX r9 ZPY2rQ r= )rE re r r r rR s z
Name.__repr__)N)r r r rG rJ r] propertyre rf rM rN rP ra rb rR r r r r rc s
rc )'Z
__future__r r r enumr r9 Z cryptographyr Z cryptography.hazmat.backendsr Zcryptography.x509.oidr r r
Z_ASN1_TYPE_TO_ENUMobjectr? r: r r; Z
SERIAL_NUMBERZ DN_QUALIFIERZ
EMAIL_ADDRESSr ZDOMAIN_COMPONENTr@ Z COMMON_NAMEZ
LOCALITY_NAMEZSTATE_OR_PROVINCE_NAMEZORGANIZATION_NAMEZORGANIZATIONAL_UNIT_NAMEZSTREET_ADDRESSZUSER_IDrH r3 r4 rS rc r r r r s6
@1