File: //lib/python3/dist-packages/cryptography/hazmat/backends/openssl/__pycache__/ocsp.cpython-38.pyc
U
�e�]V5 � @ s� d dl mZmZmZ d dlZd dlmZmZ d dlm Z d dl
m Z m Z m
Z
mZmZmZmZmZ d dlmZ d dlmZ d dlmZmZmZmZm Z m Z m Z d d
� Z d d � Z d
d� Z!dd� Z"dd� Z#e�$e�G dd� de%��Z&e�$e�G dd� de%��Z'dS )� )�absolute_import�division�print_functionN)�utils�x509)�UnsupportedAlgorithm)� _CRL_ENTRY_REASON_CODE_TO_ENUM�_OCSP_BASICRESP_EXT_PARSER�_OCSP_REQ_EXT_PARSER�_asn1_integer_to_int�_asn1_string_to_bytes�_decode_x509_name�_obj2txt� _parse_asn1_generalized_time)� _Certificate)�
serialization)�OCSPCertStatus� OCSPRequest� OCSPResponse�OCSPResponseStatus�_CERT_STATUS_TO_ENUM�
_OIDS_TO_HASH�_RESPONSE_STATUS_TO_ENUMc s t �� �� fdd��}|S )Nc s( | j tjkrtd��n� | f|�� S d S )NzCOCSP response status is not successful so the property has no value)�response_statusr �
SUCCESSFUL�
ValueError)�self�args��func� �K/usr/lib/python3/dist-packages/cryptography/hazmat/backends/openssl/ocsp.py�wrapper s
�z._requires_successful_response.<locals>.wrapper)� functools�wraps)r r" r r r! � _requires_successful_response s r% c C s^ | j �d�}| j�| j j| j j|| j j|�}| �|dk� | �|d | j jk� t| |d �S �N�ASN1_OCTET_STRING **� r ��_ffi�new�_lib�OCSP_id_get0_info�NULL�openssl_assertr )�backend�cert_idZkey_hash�resr r r! �_issuer_key_hash' s �r3 c C s^ | j �d�}| j�|| j j| j j| j j|�}| �|dk� | �|d | j jk� t| |d �S r& r) )r0 r1 Z name_hashr2 r r r! �_issuer_name_hash2 s �r4 c C s^ | j �d�}| j�| j j| j j| j j||�}| �|dk� | �|d | j jk� t| |d �S )NzASN1_INTEGER **r( r )r* r+ r, r- r. r/ r )r0 r1 �numr2 r r r! �_serial_number= s �r6 c C s� | j �d�}| j�| j j|| j j| j j|�}| �|dk� | �|d | j jk� t| |d �}z
t| W S tk
r� t d�
|���Y nX d S )NzASN1_OBJECT **r( r z*Signature algorithm OID: {} not recognized) r* r+ r, r- r. r/ r r �KeyErrorr �format)r0 r1 Zasn1objr2 �oidr r r! �_hash_algorithmH s" �
�r: c @ sP e Zd Zdd� Ze�d�Zeedd� ��Z eedd� ��Z
eedd � ��Z eed
d � ��Z eed d
� ��Z
eedd� ��Zeedd� ��Zdd� Zeedd� ��Zeedd� ��Zeedd� ��Zeedd� ��Zeed d � ��Zeed d � ��Zeed d!� ��Zeed"d#� ��Zeed$d%� ��Zeed&d'� ��Zejed(d)� ��Z d*d+� Z d,S )-�
_OCSPResponsec C s� || _ || _| j j�| j�}| j �|tk� t| | _| jtjkr�| j j� | j�}| j �|| j j
j k� | j j
� || j jj
�| _| j �| j j�| j�dk� | j j�| jd�| _| j �| j| j j
j k� | j j�| j�| _| j �| j| j j
j k� d S )Nr( r )�_backend�_ocsp_responser, ZOCSP_response_statusr/ r �_statusr r ZOCSP_response_get1_basicr* r. �gcZOCSP_BASICRESP_free�_basicZOCSP_resp_countZOCSP_resp_get0�_singleZOCSP_SINGLERESP_get0_id�_cert_id)r r0 Z
ocsp_response�statusZbasicr r r! �__init__[ s6
� �����z_OCSPResponse.__init__r> c C s> | j j�| j�}| j �|| j jjk� t| j |j�}t �
|�S �N) r< r, ZOCSP_resp_get0_tbs_sigalgr@ r/ r* r. r � algorithmr ZObjectIdentifier)r Zalgr9 r r r! �signature_algorithm_oidy s z%_OCSPResponse.signature_algorithm_oidc C s: | j }z tj| W S tk
r4 td�|���Y nX d S )Nz)Signature algorithm OID:{} not recognized)rG r Z_SIG_OIDS_TO_HASHr7 r r8 )r r9 r r r! �signature_hash_algorithm� s �z&_OCSPResponse.signature_hash_algorithmc C s2 | j j�| j�}| j �|| j jjk� t| j |�S rE )r< r, ZOCSP_resp_get0_signaturer@ r/ r* r. r )r Zsigr r r! � signature� s z_OCSPResponse.signaturec s� � j j�� j�}� j �|� j jjk� � j j�d�}� j j�||�}� j �|d � j jjk� � j j� |� fdd��}� j �|dk� � j j�
|d |�d d � S )Nzunsigned char **r c s � j j�| d �S )Nr )r< r, Z OPENSSL_free)Zpointer�r r r! �<lambda>� � z2_OCSPResponse.tbs_response_bytes.<locals>.<lambda>) r< r, ZOCSP_resp_get0_respdatar@ r/ r* r. r+ Zi2d_OCSP_RESPDATAr? �buffer)r ZrespdataZppr2 r rJ r! �tbs_response_bytes� s
�z _OCSPResponse.tbs_response_bytesc C sv | j j�| j�}| j j�|�}g }t|�D ]F}| j j�||�}| j �|| j jj k� t
| j |�}| |_ |� |� q*|S rE )
r< r, ZOCSP_resp_get0_certsr@ Z sk_X509_num�rangeZ
sk_X509_valuer/ r* r. r Z
_ocsp_resp�append)r Zsk_x509r5 Zcerts�ir Zcertr r r! � certificates� s z_OCSPResponse.certificatesc C s. | � � \}}|| jjjkr d S t| j|�S d S rE )�_responder_key_namer< r* r. r )r �_� asn1_stringr r r! �responder_key_hash� s z _OCSPResponse.responder_key_hashc C s. | � � \}}|| jjjkr d S t| j|�S d S rE )rS r< r* r. r
)r � x509_namerT r r r! �responder_name� s z _OCSPResponse.responder_namec C sP | j j�d�}| j j�d�}| j j�| j||�}| j �|dk� |d |d fS )Nr' z X509_NAME **r( r )r< r* r+ r, ZOCSP_resp_get0_idr@ r/ )r rU rW r2 r r r! rS � s �z!_OCSPResponse._responder_key_namec C s | j j�| j�}t| j |�S rE )r< r, ZOCSP_resp_get0_produced_atr@ r )r � produced_atr r r! rY � s �z_OCSPResponse.produced_atc C sH | j j�| j| j jj| j jj| j jj| j jj�}| j �|tk� t| S rE )r< r, �OCSP_single_get0_statusrA r* r. r/ r )r rC r r r! �certificate_status� s �z _OCSPResponse.certificate_statusc C sr | j tjk rd S | jj�d�}| jj�| j| jjj || jjj | jjj � | j�
|d | jjj k� t | j|d �S �NzASN1_GENERALIZEDTIME **r ) r[ r �REVOKEDr< r* r+ r, rZ rA r. r/ r �r Z asn1_timer r r! �revocation_time� s �z _OCSPResponse.revocation_timec C s| | j tjk rd S | jj�d�}| jj�| j|| jjj | jjj | jjj � |d dkrXd S | j�
|d t k� t |d S d S )Nzint *r ���) r[ r r] r< r* r+ r, rZ rA r. r/ r )r Z
reason_ptrr r r! �revocation_reason� s �
�z _OCSPResponse.revocation_reasonc C sb | j j�d�}| j j�| j| j jj| j jj|| j jj� | j �|d | j jjk� t| j |d �S r\ ) r< r* r+ r, rZ rA r. r/ r r^ r r r! � this_update s �z_OCSPResponse.this_updatec C sb | j j�d�}| j j�| j| j jj| j jj| j jj|� |d | j jjkrZt| j |d �S d S d S r\ )r< r* r+ r, rZ rA r. r r^ r r r! � next_update s �z_OCSPResponse.next_updatec C s t | j| j�S rE �r3 r< rB rJ r r r! �issuer_key_hash) s z _OCSPResponse.issuer_key_hashc C s t | j| j�S rE �r4 r< rB rJ r r r! �issuer_name_hash. s z _OCSPResponse.issuer_name_hashc C s t | j| j�S rE �r: r< rB rJ r r r! �hash_algorithm3 s z _OCSPResponse.hash_algorithmc C s t | j| j�S rE �r6 r< rB rJ r r r! �
serial_number8 s z_OCSPResponse.serial_numberc C s t �| j| j�S rE )r �parser< r@ rJ r r r! �
extensions= s z_OCSPResponse.extensionsc C sL |t jjk rtd��| j�� }| jj�|| j�}| j� |dk� | j�
|�S �Nz/The only allowed encoding value is Encoding.DERr ) r �Encoding�DERr r< �_create_mem_bio_gcr, Zi2d_OCSP_RESPONSE_bior= r/ �
_read_mem_bio�r �encodingZbior2 r r r! � public_bytesB s �
�z_OCSPResponse.public_bytesN) �__name__�
__module__� __qualname__rD r Zread_only_propertyr �propertyr% rG rH rI rN rR rV rX rS rY r[ r_ ra rb rc re rg ri rk �cached_propertyrm ru r r r r! r; Y st
r; c @ sZ e Zd Zdd� Zedd� �Zedd� �Zedd� �Zed d
� �Ze j
d d � �Z d
d� Z dS )� _OCSPRequestc C s~ |j �|�dkrtd��|| _|| _| jj �| jd�| _| j�| j| jjj k� | jj �
| j�| _ | j�| j | jjj k� d S )Nr( z+OCSP request contains more than one requestr ) r, ZOCSP_request_onereq_count�NotImplementedErrorr< �
_ocsp_requestZOCSP_request_onereq_get0Z_requestr/ r* r. ZOCSP_onereq_get0_idrB )r r0 Z ocsp_requestr r r! rD R s � �z_OCSPRequest.__init__c C s t | j| j�S rE rd rJ r r r! re ` s z _OCSPRequest.issuer_key_hashc C s t | j| j�S rE rf rJ r r r! rg d s z _OCSPRequest.issuer_name_hashc C s t | j| j�S rE rj rJ r r r! rk h s z_OCSPRequest.serial_numberc C s t | j| j�S rE rh rJ r r r! ri l s z_OCSPRequest.hash_algorithmc C s t �| j| j�S rE )r
rl r< r} rJ r r r! rm p s z_OCSPRequest.extensionsc C sL |t jjk rtd��| j�� }| jj�|| j�}| j� |dk� | j�
|�S rn ) r ro rp r r< rq r, Zi2d_OCSP_REQUEST_bior} r/ rr rs r r r! ru t s �
z_OCSPRequest.public_bytesN)
rv rw rx rD ry re rg rk ri r rz rm ru r r r r! r{ P s
r{ )(Z
__future__r r r r# Z cryptographyr r Zcryptography.exceptionsr Z0cryptography.hazmat.backends.openssl.decode_asn1r r r
r r r
r r Z)cryptography.hazmat.backends.openssl.x509r Z cryptography.hazmat.primitivesr Zcryptography.x509.ocspr r r r r r r r% r3 r4 r6 r: Zregister_interface�objectr; r{ r r r r! �<module> s" ( $ w