File manager - Edit - /opt/saltstack/salt/lib/python3.10/site-packages/cryptography/x509/__pycache__/base.cpython-310.pyc
Back
o ;j�e � @ s� d dl mZ d dlZd dlZd dlZd dlmZ d dlmZ d dl m Z d dl m Z d dlmZmZmZmZmZmZmZmZ d dlmZmZ d d lmZm Z m Z d d l m Z m Z d d l!m"Z" e�d d d �Z#ej$e j%e j&e j'e j(e j)e j*e j+e j,f Z-G dd� de.�Z/d5dd�Z0d6d d �Z1d7d d!�Z2G d"d#� d#�Z3G d$d%� d%�Z4G d&d'� d'ej5�Z6G d(d)� d)e.�Z7e j8Z8e j9Z9e j:Z:e j;Z;e j<Z<e j=Z=e j>Z>e j?Z?e j@Z@e jAZAe jBZBG d*d+� d+�ZCG d,d-� d-�ZDG d.d/� d/�ZEG d0d1� d1�ZFd8d3d4�ZGdS )9� )� annotationsN)�Iterable)�utils)�x509)�hashes)�dsa�ec�ed448�ed25519�padding�rsa�x448�x25519)� CertificateIssuerPrivateKeyTypes�CertificatePublicKeyTypes)� Extension� ExtensionType�_make_sequence_methods)�Name� _ASN1Type)�ObjectIdentifieri� � c � e Zd Zd � fdd� Z� ZS ) �AttributeNotFound�msg�str�oidr �return�Nonec � t � �|� || _d S �N)�super�__init__r )�selfr r �� __class__� �J/opt/saltstack/salt/lib/python3.10/site-packages/cryptography/x509/base.pyr" 6 � zAttributeNotFound.__init__)r r r r r r ��__name__� __module__� __qualname__r" � __classcell__r& r& r$ r' r 5 � r � extension�Extension[ExtensionType]� extensions� list[Extension[ExtensionType]]r r c C s" |D ] }|j | j krtd��qd S )Nz$This extension has already been set.)r � ValueError)r/ r1 �er& r& r' �_reject_duplicate_extension; s ��r5 r r � attributes�0list[tuple[ObjectIdentifier, bytes, int | None]]c C s$ |D ] \}}}|| krt d��qd S )Nz$This attribute has already been set.)r3 )r r6 Zattr_oid�_r& r& r' �_reject_duplicate_attributeE s ��r9 �time�datetime.datetimec C s6 | j dur| �� }|r |nt�� }| jdd�| S | S )z�Normalizes a datetime to a naive datetime in UTC. time -- datetime to normalize. Assumed to be in UTC if not timezone aware. N)�tzinfo)r< � utcoffset�datetime� timedelta�replace)r: �offsetr& r& r' �_convert_to_naive_utc_timeO s rB c @ sX e Zd Zejjfdd d �Zedd d ��Zed d d��Zd dd�Z d dd�Z d dd�Z dS ) � Attributer r �value�bytes�_type�intr r c C � || _ || _|| _d S r )�_oid�_valuerF )r# r rD rF r& r& r' r" ^ � zAttribute.__init__c C � | j S r )rI �r# r& r& r' r h � z Attribute.oidc C rL r )rJ rM r& r& r' rD l rN zAttribute.valuer c C s d| j � d| j�d�S )Nz<Attribute(oid=z, value=�)>)r rD rM r& r& r' �__repr__p � zAttribute.__repr__�other�object�boolc C s2 t |t�stS | j|jko| j|jko| j|jkS r )� isinstancerC �NotImplementedr rD rF )r# rR r& r& r' �__eq__s s � �zAttribute.__eq__c C s t | j| j| jf�S r )�hashr rD rF rM r& r& r' �__hash__} s zAttribute.__hash__N)r r rD rE rF rG r r )r r )r rE �r r )rR rS r rT �r rG ) r* r+ r, r Z UTF8StringrD r" �propertyr rP rW rY r& r& r& r' rC ] s � rC c @ s8 e Zd Zddd�Zed�\ZZZdd d �Zddd�Z dS )� Attributesr6 �Iterable[Attribute]r r c C s t |�| _d S r )�list� _attributes)r# r6 r& r& r' r" � s zAttributes.__init__r` r c C s d| j � d�S )Nz <Attributes(rO )r` rM r& r& r' rP � s zAttributes.__repr__r r rC c C s. | D ] }|j |kr | S qtd|� d�|��)NzNo z attribute was found)r r )r# r �attrr& r& r' �get_attribute_for_oid� s �z Attributes.get_attribute_for_oidN)r6 r^ r r rZ )r r r rC ) r* r+ r, r" r �__len__�__iter__� __getitem__rP rb r& r& r& r' r] � s r] c @ s e Zd ZdZdZdS )�Versionr � N)r* r+ r, Zv1�v3r& r& r& r' rf � s rf c r ) �InvalidVersionr r �parsed_versionrG r r c r r )r! r" rj )r# r rj r$ r& r' r" � r( zInvalidVersion.__init__)r r rj rG r r r) r& r& r$ r' ri � r. ri c @ sX e Zd Zdg g fd,dd �Zd-d d�Zd.dd�Zdd�d/d d �Z d0ddd �d1d*d+�ZdS )2� CertificateSigningRequestBuilderN� subject_name� Name | Noner1 r2 r6 r7 c C s || _ || _|| _dS )zB Creates an empty X.509 certificate request (v1). N)� _subject_name� _extensionsr` )r# rl r1 r6 r& r& r' r" � s z)CertificateSigningRequestBuilder.__init__�namer r c C s4 t |t�s td��| jdurtd��t|| j| j�S )zF Sets the certificate requestor's distinguished name. �Expecting x509.Name object.N�&The subject name may only be set once.)rU r � TypeErrorrn r3 rk ro r` �r# rp r& r& r' rl � s �z-CertificateSigningRequestBuilder.subject_name�extvalr �criticalrT c C sF t |t�s td��t|j||�}t|| j� t| jg | j�|�| j �S )zE Adds an X.509 extension to the certificate request. �"extension must be an ExtensionType) rU r rs r r r5 ro rk rn r` �r# ru rv r/ r& r& r' � add_extension� s �z.CertificateSigningRequestBuilder.add_extension)�_tagr r rD rE rz �_ASN1Type | Nonec C s~ t |t�s td��t |t�std��|dur t |t�s td��t|| j� |dur-|j}nd}t| j | j g | j�|||f��S )zK Adds an X.509 attribute with an OID and associated value. z oid must be an ObjectIdentifierzvalue must be bytesNztag must be _ASN1Type) rU r rs rE r r9 r` rD rk rn ro )r# r rD rz �tagr& r& r' � add_attribute� s �z.CertificateSigningRequestBuilder.add_attribute�� rsa_padding�ecdsa_deterministic� private_keyr � algorithm�_AllowedHashTypes | None�backend� typing.Anyr �%padding.PSS | padding.PKCS1v15 | Noner� � bool | None�CertificateSigningRequestc C sv | j du r td��|dur$t|tjtjf�std��t|tj�s$td��|dur2t|t j �s2td��t � | ||||�S )zF Signs the request using the requestor's private key. Nz/A CertificateSigningRequest must have a subject� Padding must be PSS or PKCS1v15�&Padding is only supported for RSA keys�1Deterministic ECDSA is only supported for EC keys) rn r3 rU r �PSS�PKCS1v15rs r � RSAPrivateKeyr �EllipticCurvePrivateKey� rust_x509Zcreate_x509_csr�r# r� r� r� r r� r& r& r' �sign s& ��z%CertificateSigningRequestBuilder.sign)rl rm r1 r2 r6 r7 )rp r r rk )ru r rv rT r rk )r r rD rE rz r{ r rk r ) r� r r� r� r� r� r r� r� r� r r� )r* r+ r, r" rl ry r} r� r& r& r& r' rk � s � �$��rk c @ s� e Zd ZU ded< ddddddg fd;dd�Zd<dd�Zd<dd�Zd=dd �Zd>d d �Zd?d#d$�Z d?d%d&�Z d@d+d,�Z dAddd-�dBd9d:�Z dS )C�CertificateBuilderr2 ro N� issuer_namerm rl � public_key� CertificatePublicKeyTypes | None� serial_number� int | None�not_valid_before�datetime.datetime | None�not_valid_afterr1 r r c C s6 t j| _|| _|| _|| _|| _|| _|| _|| _ d S r ) rf rh �_version� _issuer_namern � _public_key�_serial_number�_not_valid_before�_not_valid_afterro )r# r� rl r� r� r� r� r1 r& r& r' r" ' s zCertificateBuilder.__init__rp r c C sD t |t�s td��| jdurtd��t|| j| j| j| j | j | j �S )z3 Sets the CA's distinguished name. rq N�%The issuer name may only be set once.) rU r rs r� r3 r� rn r� r� r� r� ro rt r& r& r' r� : s �z CertificateBuilder.issuer_namec C sD t |t�s td��| jdurtd��t| j|| j| j| j | j | j �S )z: Sets the requestor's distinguished name. rq Nrr ) rU r rs rn r3 r� r� r� r� r� r� ro rt r& r& r' rl L s �z CertificateBuilder.subject_name�keyr c C s` t |tjtjtjtjt j t j t jf�std��| jdur td��t| j| j|| j| j| j| j�S )zT Sets the requestor's public key (as found in the signing request). z�Expecting one of DSAPublicKey, RSAPublicKey, EllipticCurvePublicKey, Ed25519PublicKey, Ed448PublicKey, X25519PublicKey, or X448PublicKey.Nz$The public key may only be set once.)rU r Z DSAPublicKeyr Z RSAPublicKeyr ZEllipticCurvePublicKeyr ZEd25519PublicKeyr ZEd448PublicKeyr ZX25519PublicKeyr Z X448PublicKeyrs r� r3 r� r� rn r� r� r� ro )r# r� r& r& r' r� ^ s2 �� � �z CertificateBuilder.public_key�numberrG c C sh t |t�s td��| jdurtd��|dkrtd��|�� dkr$td��t| j| j| j || j | j | j �S )z5 Sets the certificate serial number. �'Serial number must be of integral type.N�'The serial number may only be set once.r z%The serial number should be positive.� �3The serial number should not be more than 159 bits.) rU rG rs r� r3 � bit_lengthr� r� rn r� r� r� ro �r# r� r& r& r' r� � s& ��z CertificateBuilder.serial_numberr: r; c C sz t |tj�s td��| jdurtd��t|�}|tk r td��| jdur-|| jkr-td��t| j | j | j | j || j| j �S )z7 Sets the certificate activation time. �Expecting datetime object.Nz*The not valid before may only be set once.z>The not valid before date must be on or after 1950 January 1).zBThe not valid before date must be before the not valid after date.)rU r> rs r� r3 rB �_EARLIEST_UTC_TIMEr� r� r� rn r� r� ro �r# r: r& r& r' r� � s, ���z#CertificateBuilder.not_valid_beforec C sz t |tj�s td��| jdurtd��t|�}|tk r td��| jdur-|| jk r-td��t| j | j | j | j | j|| j �S )z7 Sets the certificate expiration time. r� Nz)The not valid after may only be set once.z<The not valid after date must be on or after 1950 January 1.zAThe not valid after date must be after the not valid before date.)rU r> rs r� r3 rB r� r� r� r� rn r� r� ro r� r& r& r' r� � s. � ��z"CertificateBuilder.not_valid_afterru r rv rT c C sV t |t�s td��t|j||�}t|| j� t| j| j | j | j | j | j g | j�|��S )z= Adds an X.509 extension to the certificate. rw )rU r rs r r r5 ro r� r� rn r� r� r� r� rx r& r& r' ry � s �z CertificateBuilder.add_extensionr~ r� r r� r� r� r� r r� r� r� � Certificatec C s� | j du r td��| jdu rtd��| jdu rtd��| jdu r$td��| jdu r-td��| jdu r6td��|durQt|tj tj f�sGt d��t|t j �sQt d ��|dur_t|tj�s_t d ��t�| ||||�S ) zC Signs the certificate using the CA's private key. Nz&A certificate must have a subject namez&A certificate must have an issuer namez'A certificate must have a serial numberz/A certificate must have a not valid before timez.A certificate must have a not valid after timez$A certificate must have a public keyr� r� r� )rn r3 r� r� r� r� r� rU r r� r� rs r r� r r� r� Zcreate_x509_certificater� r& r& r' r� � s: ��zCertificateBuilder.sign)r� rm rl rm r� r� r� r� r� r� r� r� r1 r2 r r )rp r r r� )r� r r r� )r� rG r r� )r: r; r r� )ru r rv rT r r� r ) r� r r� r� r� r� r r� r� r� r r� ) r* r+ r, �__annotations__r" r� rl r� r� r� r� ry r� r& r& r& r' r� $ s, � % ��r� c @ s| e Zd ZU ded< ded< dddg g fd0d d�Zd1dd�Zd2dd�Zd3dd�Zd4d d �Zd5d d!�Z d6ddd"�d7d.d/�Z dS )8� CertificateRevocationListBuilderr2 ro �list[RevokedCertificate]�_revoked_certificatesNr� rm � last_updater� � next_updater1 �revoked_certificatesc C s" || _ || _|| _|| _|| _d S r )r� � _last_update� _next_updatero r� )r# r� r� r� r1 r� r& r& r' r" ' s z)CertificateRevocationListBuilder.__init__r r c C s< t |t�s td��| jd urtd��t|| j| j| j| j �S )Nrq r� ) rU r rs r� r3 r� r� r� ro r� )r# r� r& r& r' r� 5 s �z,CertificateRevocationListBuilder.issuer_namer; c C sr t |tj�s td��| jd urtd��t|�}|tk r td��| jd ur-|| jkr-td��t| j || j| j | j �S )Nr� �!Last update may only be set once.�8The last update date must be on or after 1950 January 1.z9The last update date must be before the next update date.) rU r> rs r� r3 rB r� r� r� r� ro r� )r# r� r& r& r' r� D s( ���z,CertificateRevocationListBuilder.last_updatec C sr t |tj�s td��| jd urtd��t|�}|tk r td��| jd ur-|| jk r-td��t| j | j|| j | j �S )Nr� r� r� z8The next update date must be after the last update date.) rU r> rs r� r3 rB r� r� r� r� ro r� )r# r� r& r& r' r� \ s( ���z,CertificateRevocationListBuilder.next_updateru r rv rT c C sN t |t�s td��t|j||�}t|| j� t| j| j | j g | j�|�| j �S )zM Adds an X.509 extension to the certificate revocation list. rw ) rU r rs r r r5 ro r� r� r� r� r� rx r& r& r' ry t s �z.CertificateRevocationListBuilder.add_extension�revoked_certificate�RevokedCertificatec C s4 t |t�s td��t| j| j| j| jg | j�|��S )z8 Adds a revoked certificate to the CRL. z)Must be an instance of RevokedCertificate) rU r� rs r� r� r� r� ro r� )r# r� r& r& r' �add_revoked_certificate� s �z8CertificateRevocationListBuilder.add_revoked_certificater~ r� r r� r� r� r� r r� r� r� �CertificateRevocationListc C s� | j d u r td��| jd u rtd��| jd u rtd��|d ur6t|tjtjf�s,td��t|t j �s6td��|d urDt|t j �sDtd��t �| ||||�S )Nz A CRL must have an issuer namez"A CRL must have a last update timez"A CRL must have a next update timer� r� r� )r� r3 r� r� rU r r� r� rs r r� r r� r� Zcreate_x509_crlr� r& r& r' r� � s. ��z%CertificateRevocationListBuilder.sign) r� rm r� r� r� r� r1 r2 r� r� )r� r r r� )r� r; r r� )r� r; r r� )ru r rv rT r r� )r� r� r r� r ) r� r r� r� r� r� r r� r� r� r r� ) r* r+ r, r� r" r� r� r� ry r� r� r& r& r& r' r� # s& � ��r� c @ sH e Zd Zddg fd dd �Zd d d�Zd dd�Zd!dd�Zd"d#d d �ZdS )$�RevokedCertificateBuilderNr� r� �revocation_dater� r1 r2 c C rH r )r� �_revocation_datero )r# r� r� r1 r& r& r' r" � rK z"RevokedCertificateBuilder.__init__r� rG r c C sX t |t�s td��| jd urtd��|dkrtd��|�� dkr$td��t|| j| j�S )Nr� r� r z$The serial number should be positiver� r� ) rU rG rs r� r3 r� r� r� ro r� r& r& r' r� � s � �z'RevokedCertificateBuilder.serial_numberr: r; c C sN t |tj�s td��| jd urtd��t|�}|tk r td��t| j|| j �S )Nr� z)The revocation date may only be set once.z7The revocation date must be on or after 1950 January 1.) rU r> rs r� r3 rB r� r� r� ro r� r& r& r' r� � s � �z)RevokedCertificateBuilder.revocation_dateru r rv rT c C sF t |t�s td��t|j||�}t|| j� t| j| j g | j�|��S )Nrw ) rU r rs r r r5 ro r� r� r� rx r& r& r' ry � s �z'RevokedCertificateBuilder.add_extensionr� r� r� c C s. | j d u r td��| jd u rtd��t�| �S )Nz/A revoked certificate must have a serial numberz1A revoked certificate must have a revocation date)r� r3 r� r� Zcreate_revoked_certificate)r# r� r& r& r' �build� s � z RevokedCertificateBuilder.build)r� r� r� r� r1 r2 )r� rG r r� )r: r; r r� )ru r rv rT r r� r )r� r� r r� )r* r+ r, r" r� r� ry r� r& r& r& r' r� � s � r� rG c C s t �t�d�d�d? S )N� �bigr )rG � from_bytes�os�urandomr& r& r& r' �random_serial_number rQ r� )r/ r0 r1 r2 r r )r r r6 r7 r r )r: r; r r; r[ )H� __future__r r> r� �typing�collections.abcr Z cryptographyr Z"cryptography.hazmat.bindings._rustr r� Z cryptography.hazmat.primitivesr Z)cryptography.hazmat.primitives.asymmetricr r r r r r r r Z/cryptography.hazmat.primitives.asymmetric.typesr r Z cryptography.x509.extensionsr r r Zcryptography.x509.namer r Zcryptography.x509.oidr r� �Union�SHA224�SHA256�SHA384�SHA512ZSHA3_224ZSHA3_256ZSHA3_384ZSHA3_512Z_AllowedHashTypes� Exceptionr r5 r9 rB rC r] �Enumrf ri r� r� r� r� Zload_pem_x509_certificateZload_der_x509_certificateZload_pem_x509_certificatesZload_pem_x509_csrZload_der_x509_csrZload_pem_x509_crlZload_der_x509_crlrk r� r� r� r� r& r& r& r' �<module> sh ( �� $p E
| ver. 1.4 |
Github
|
.
| PHP 8.2.30 | Generation time: 0 |
proxy
|
phpinfo
|
Settings