File manager - Edit - /opt/saltstack/salt/lib/python3.10/site-packages/cryptography/x509/__pycache__/ocsp.cpython-310.pyc
Back
o ;j�1 � @ s d dl mZ d dlZd dlmZ d dlmZmZ d dlm Z d dl m Z d dl m Z d dlmZ G d d � d ej�ZG d d � d ej�Ze je je je je jfZddd�ZG dd� dej�ZG dd� d�Ze j Z e j Z e j Z G dd� d�Z G dd� d�Z e j!Z!e j"Z"dS ) � )� annotationsN)�Iterable)�utils�x509)�ocsp)�hashes)� CertificateIssuerPrivateKeyTypes)�_reject_duplicate_extensionc @ s e Zd ZdZdZdS )�OCSPResponderEncodingzBy HashzBy NameN)�__name__� __module__� __qualname__�HASH�NAME� r r �J/opt/saltstack/salt/lib/python3.10/site-packages/cryptography/x509/ocsp.pyr s r c @ s$ e Zd ZdZdZdZdZdZdZdS )�OCSPResponseStatusr � � � � � N) r r r � SUCCESSFULZMALFORMED_REQUEST�INTERNAL_ERRORZ TRY_LATERZ SIG_REQUIRED� UNAUTHORIZEDr r r r r s r � algorithm�hashes.HashAlgorithm�return�Nonec C s t | t�s td��d S )Nz9Algorithm must be SHA1, SHA224, SHA256, SHA384, or SHA512)� isinstance�_ALLOWED_HASHES� ValueError)r r r r �_verify_algorithm* s ��r" c @ s e Zd ZdZdZdZdS )�OCSPCertStatusr r r N)r r r ZGOOD�REVOKED�UNKNOWNr r r r r# 1 s r# c @ s e Zd Zddd�ZdS )�_SingleResponse�resp�0tuple[x509.Certificate, x509.Certificate] | None� resp_hash� tuple[bytes, bytes, int] | Noner r � cert_statusr# � this_update�datetime.datetime� next_update�datetime.datetime | None�revocation_time�revocation_reason�x509.ReasonFlags | Nonec C s� t |� t|tj�std��|d ur t|tj�s td��|| _|| _|| _|| _|| _t|t �s4td��|t j urJ|d urAt d��|d urIt d��nt|tj�sTtd��|d urbt|t j �sbtd��|| _|| _|| _d S )Nz%this_update must be a datetime objectz-next_update must be a datetime object or Nonez8cert_status must be an item from the OCSPCertStatus enumzBrevocation_time can only be provided if the certificate is revokedzDrevocation_reason can only be provided if the certificate is revokedz)revocation_time must be a datetime objectzCrevocation_reason must be an item from the ReasonFlags enum or None)r" r �datetime� TypeErrorZ_respZ _resp_hashZ _algorithmZ _this_updateZ _next_updater# r$ r! r Z ReasonFlagsZ _cert_statusZ_revocation_timeZ_revocation_reason) �selfr' r) r r+ r, r. r0 r1 r r r �__init__8 sJ � � ��� �� z_SingleResponse.__init__N)r' r( r) r* r r r+ r# r, r- r. r/ r0 r/ r1 r2 )r r r r6 r r r r r& 7 s r& c @ sF e Zd Zddg fd#d d �Zd$dd�Zd%dd�Zd&d d �Zd'd!d"�ZdS )(�OCSPRequestBuilderN�request�Ftuple[x509.Certificate, x509.Certificate, hashes.HashAlgorithm] | None� request_hash�5tuple[bytes, bytes, int, hashes.HashAlgorithm] | None� extensions�(list[x509.Extension[x509.ExtensionType]]r r c C s || _ || _|| _d S �N)�_request� _request_hash� _extensions)r5 r8 r: r< r r r r6 w s zOCSPRequestBuilder.__init__�cert�x509.Certificate�issuerr r c C sZ | j d us | jd urtd��t|� t|tj�r t|tj�s"td��t|||f| j| j �S )N�.Only one certificate can be added to a request�%cert and issuer must be a Certificate) r? r@ r! r" r r � Certificater4 r7 rA )r5 rB rD r r r r �add_certificate� s ��z"OCSPRequestBuilder.add_certificate�issuer_name_hash�bytes�issuer_key_hash� serial_number�intc C s� | j d us | jd urtd��t|t�std��t|� t�d|� t�d|� |j t |�ks5|j t |�kr9td��t | j ||||f| j �S )NrE � serial_number must be an integerrI rK �`issuer_name_hash and issuer_key_hash must be the same length as the digest size of the algorithm) r? r@ r! r rM r4 r" r � _check_bytes� digest_size�lenr7 rA )r5 rI rK rL r r r r �add_certificate_by_hash� s& �� �z*OCSPRequestBuilder.add_certificate_by_hash�extval�x509.ExtensionType�critical�boolc C sJ t |tj�s td��t�|j||�}t|| j� t| j | j g | j�|��S �Nz"extension must be an ExtensionType) r r � ExtensionTyper4 � Extension�oidr rA r7 r? r@ �r5 rT rV � extensionr r r � add_extension� s �z OCSPRequestBuilder.add_extension� OCSPRequestc C s& | j d u r| jd u rtd��t�| �S )Nz*You must add a certificate before building)r? r@ r! r Zcreate_ocsp_request)r5 r r r �build� s zOCSPRequestBuilder.build)r8 r9 r: r; r< r= r r )rB rC rD rC r r r r7 ) rI rJ rK rJ rL rM r r r r7 )rT rU rV rW r r7 )r r_ )r r r r6 rH rS r^ r` r r r r r7 v s � r7 c @ sj e Zd Zdddg fd<d d �Zd=dd �Zd>d"d#�Zd?d'd(�Zd@d*d+�ZdAd0d1�ZdBd6d7�Z e dCd:d;��Z dS )D�OCSPResponseBuilderN�response�_SingleResponse | None� responder_id�5tuple[x509.Certificate, OCSPResponderEncoding] | None�certs� list[x509.Certificate] | Noner< r= c C s || _ || _|| _|| _d S r> )� _response� _responder_id�_certsrA )r5 rb rd rf r< r r r r6 � s z OCSPResponseBuilder.__init__rB rC rD r r r+ r# r, r- r. r/ r0 r1 r2 r c C s` | j d ur td��t|tj�rt|tj�std��t||fd ||||||�} t| | j| j | j �S )N�#Only one response per OCSPResponse.rF ) rh r! r r rG r4 r& ra ri rj rA ) r5 rB rD r r+ r, r. r0 r1 � singlerespr r r � add_response� s, �� �z OCSPResponseBuilder.add_responserI rJ rK rL rM c C s� | j d ur td��t|t�std��t�d|� t�d|� t|� |jt |�ks0|jt |�kr4td��t d |||f|||||| �} t | | j | j | j�S )Nrk rN rI rK rO )rh r! r rM r4 r rP r" rQ rR r& ra ri rj rA ) r5 rI rK rL r r+ r, r. r0 r1 rl r r r �add_response_by_hash� s< ��� �z(OCSPResponseBuilder.add_response_by_hash�encodingr �responder_certc C sP | j d ur td��t|tj�std��t|t�s td��t| j||f| j | j �S )Nz!responder_id can only be set oncez$responder_cert must be a Certificatez6encoding must be an element from OCSPResponderEncoding) ri r! r r rG r4 r ra rh rj rA )r5 ro rp r r r rd * s ��z OCSPResponseBuilder.responder_id�Iterable[x509.Certificate]c C s\ | j d ur td��t|�}t|�dkrtd��tdd� |D ��s$td��t| j| j|| j �S )Nz!certificates may only be set oncer z certs must not be an empty listc s s � | ] }t |tj�V qd S r> )r r rG )�.0�xr r r � <genexpr>E s � z3OCSPResponseBuilder.certificates.<locals>.<genexpr>z$certs must be a list of Certificates) rj r! �listrR �allr4 ra rh ri rA )r5 rf r r r � certificates= s �z OCSPResponseBuilder.certificatesrT rU rV rW c C sN t |tj�s td��t�|j||�}t|| j� t| j | j | j g | j�|��S rX ) r r rY r4 rZ r[ r rA ra rh ri rj r\ r r r r^ N s �z!OCSPResponseBuilder.add_extension� private_keyr �hashes.HashAlgorithm | None� OCSPResponsec C s6 | j d u r td��| jd u rtd��t�tj| ||�S )Nz&You must add a response before signingz*You must add a responder_id before signing)rh r! ri r �create_ocsp_responser r )r5 rx r r r r �sign^ s �zOCSPResponseBuilder.sign�response_statusr c C s4 t |t�s td��|tju rtd��t�|d d d �S )Nz7response_status must be an item from OCSPResponseStatusz$response_status cannot be SUCCESSFUL)r r r4 r r! r r{ )�clsr} r r r �build_unsuccessfull s � z&OCSPResponseBuilder.build_unsuccessful)rb rc rd re rf rg r< r= )rB rC rD rC r r r+ r# r, r- r. r/ r0 r/ r1 r2 r ra )rI rJ rK rJ rL rM r r r+ r# r, r- r. r/ r0 r/ r1 r2 r ra )ro r rp rC r ra )rf rq r ra )rT rU rV rW r ra )rx r r ry r rz )r} r r rz ) r r r r6 rm rn rd rw r^ r| � classmethodr r r r r ra � s � $ . ra )r r r r )#� __future__r r3 �collections.abcr Z cryptographyr r Z"cryptography.hazmat.bindings._rustr Z cryptography.hazmat.primitivesr Z/cryptography.hazmat.primitives.asymmetric.typesr Zcryptography.x509.baser �Enumr r �SHA1�SHA224�SHA256�SHA384�SHA512r r" r# r& r_ rz ZOCSPSingleResponser7 ra Zload_der_ocsp_requestZload_der_ocsp_responser r r r �<module> s6 � :T 1
| ver. 1.4 |
Github
|
.
| PHP 8.2.30 | Generation time: 0 |
proxy
|
phpinfo
|
Settings