File: //lib/python3/dist-packages/cryptography/hazmat/backends/openssl/__pycache__/x509.cpython-38.pyc
U
�e�]�N � @ s2 d dl mZmZmZ d dlZd dlZd dlmZmZ d dl m
Z
d dl m Z m
Z
mZmZmZmZmZmZmZmZ d dlmZ d dlmZmZ d dlm Z m Z m Z e� ej �G d d
� d
e!��Z"e� ej#�G d d � d e!��Z$e� ej%�G d
d� de!��Z&e� ej'�G dd� de!��Z(e� ej)j*�G dd� de!��Z+dS )� )�absolute_import�division�print_functionN)�utils�x509)�UnsupportedAlgorithm)
� _CERTIFICATE_EXTENSION_PARSER�$_CERTIFICATE_EXTENSION_PARSER_NO_SCT�_CRL_EXTENSION_PARSER�_CSR_EXTENSION_PARSER�%_REVOKED_CERTIFICATE_EXTENSION_PARSER�_asn1_integer_to_int�_asn1_string_to_bytes�_decode_x509_name�_obj2txt�_parse_asn1_time)�_encode_asn1_int_gc)�hashes�
serialization)�dsa�ec�rsac @ s� e Zd Zdd� Zdd� Zdd� Zdd� Zd d
� Zd d � Ze d
d� �Z
e dd� �Z dd� Z e dd� �Z
e dd� �Ze dd� �Ze dd� �Ze dd � �Ze d d � �Zejd d � �Ze d!d"� �Ze d#d$� �Zd%d&� Zd'S )(� _Certificatec C s || _ || _d S �N)�_backend�_x509)�self�backendr � r �K/usr/lib/python3/dist-packages/cryptography/hazmat/backends/openssl/x509.py�__init__ s z_Certificate.__init__c C s d� | j�S )Nz <Certificate(subject={}, ...)>)�format�subject�r r r r �__repr__ s z_Certificate.__repr__c C s, t |tj�stS | jj�| j|j�}|dkS �Nr )�
isinstancer � Certificate�NotImplementedr �_libZX509_cmpr �r �other�resr r r �__eq__" s z_Certificate.__eq__c C s
| |k S r r �r r+ r r r �__ne__) s z_Certificate.__ne__c C s t | �tjj��S r ��hash� public_bytesr �Encoding�DERr# r r r �__hash__, s z_Certificate.__hash__c C s* t �|| j�}|�| �tjj�� |�� S r ) r �Hashr �updater2 r r3 r4 �finalize)r � algorithm�hr r r � fingerprint/ s z_Certificate.fingerprintc C sF | j j�| j�}|dkr tjjS |dkr0tjjS t�d� |�|��d S )Nr � z {} is not a valid X509 version)
r r) ZX509_get_versionr r �Version�v1Zv3ZInvalidVersionr! �r �versionr r r r@ 4 s �z_Certificate.versionc C s2 | j j�| j�}| j �|| j jjk� t| j |�S r )r r) ZX509_get_serialNumberr �openssl_assert�_ffi�NULLr
�r �asn1_intr r r �
serial_number@ s z_Certificate.serial_numberc C sR | j j�| j�}|| j jjkr0| j �� td��| j j�|| j jj �}| j �
|�S )Nz,Certificate public key is of an unknown type) r r) ZX509_get_pubkeyr rB rC �_consume_errors�
ValueError�gc�
EVP_PKEY_free�_evp_pkey_to_public_key�r �pkeyr r r �
public_keyF s
z_Certificate.public_keyc C s | j j�| j�}t| j |�S r )r r) ZX509_getm_notBeforer r �r Z asn1_timer r r �not_valid_beforeQ s z _Certificate.not_valid_beforec C s | j j�| j�}t| j |�S r )r r) ZX509_getm_notAfterr r rO r r r �not_valid_afterV s z _Certificate.not_valid_afterc C s2 | j j�| j�}| j �|| j jjk� t| j |�S r )r r) ZX509_get_issuer_namer rA rB rC r �r �issuerr r r rS [ s z_Certificate.issuerc C s2 | j j�| j�}| j �|| j jjk� t| j |�S r )r r) ZX509_get_subject_namer rA rB rC r �r r" r r r r" a s z_Certificate.subjectc C s: | j }z tj| W S tk
r4 td�|���Y nX d S �Nz)Signature algorithm OID:{} not recognized��signature_algorithm_oidr Z_SIG_OIDS_TO_HASH�KeyErrorr r! �r �oidr r r �signature_hash_algorithmg s �z%_Certificate.signature_hash_algorithmc C s^ | j j�d�}| j j�| j jj|| j� | j �|d | j jjk� t| j |d j �}t
� |�S �Nz
X509_ALGOR **r ) r rB �newr) �X509_get0_signaturerC r rA r r9 r �ObjectIdentifier�r ZalgrZ r r r rW q s �z$_Certificate.signature_algorithm_oidc C s. | j jjrt�| j | j�S t�| j | j�S d S r )r r) Z#CRYPTOGRAPHY_OPENSSL_110_OR_GREATERr �parser r r# r r r �
extensions{ s
� �z_Certificate.extensionsc C sR | j j�d�}| j j�|| j jj| j� | j �|d | j jjk� t| j |d �S �NzASN1_BIT_STRING **r ) r rB r] r) r^ rC r rA r �r Zsigr r r � signature� s �z_Certificate.signaturec sd � j j�d�}� j j�� j|�}� j �|dk� � j j�|� fdd��}� j j�|d |�d d � S )N�unsigned char **r c s � j j�| d �S r% �r r) Z OPENSSL_free�Zpointerr# r r �<lambda>� � z4_Certificate.tbs_certificate_bytes.<locals>.<lambda>) r rB r] r) Zi2d_re_X509_tbsr rA rI �buffer�r Zppr, r r# r �tbs_certificate_bytes� s
�z"_Certificate.tbs_certificate_bytesc C sn | j �� }|tjjkr*| j j�|| j�}n(|tjjkrJ| j j� || j�}nt
d��| j � |dk� | j � |�S �Nz/encoding must be an item from the Encoding enum� )
r �_create_mem_bio_gcr r3 �PEMr) ZPEM_write_bio_X509r r4 Z i2d_X509_bio� TypeErrorrA �
_read_mem_bio�r �encoding�bior, r r r r2 � s
z_Certificate.public_bytesN)�__name__�
__module__� __qualname__r r$ r- r/ r5 r; �propertyr@ rF rN rP rQ rS r" r[ rW r �cached_propertyrb re rm r2 r r r r r s<
r c @ s: e Zd Zdd� Zedd� �Zedd� �Zejdd� �Z d S )
�_RevokedCertificatec C s || _ || _|| _d S r )r Z_crl�
_x509_revoked)r r ZcrlZ x509_revokedr r r r � s z _RevokedCertificate.__init__c C s2 | j j�| j�}| j �|| j jjk� t| j |�S r )r r) Z X509_REVOKED_get0_serialNumberr} rA rB rC r
rD r r r rF � s
�z!_RevokedCertificate.serial_numberc C s t | j| jj�| j��S r )r r r) Z X509_REVOKED_get0_revocationDater} r# r r r �revocation_date� s ��z#_RevokedCertificate.revocation_datec C s t �| j| j�S r )r ra r r} r# r r r rb � s �z _RevokedCertificate.extensionsN)
rw rx ry r rz rF r~ r r{ rb r r r r r| � s
r| c @ s� e Zd Zdd� Zdd� Zdd� Zdd� Zejd d
� �Z d d � Z
e d
d� �Z e dd� �Z
e dd� �Ze dd� �Ze dd� �Ze dd� �Ze dd� �Zdd � Zd d � Zd d � Zd!d"� Zd#d$� Zejd%d&� �Zd'd(� Zd)S )*�_CertificateRevocationListc C s || _ || _d S r )r � _x509_crl)r r Zx509_crlr r r r � s z#_CertificateRevocationList.__init__c C s, t |tj�stS | jj�| j|j�}|dkS r% )r& r �CertificateRevocationListr( r r) Z X509_CRL_cmpr� r* r r r r- � s z!_CertificateRevocationList.__eq__c C s
| |k S r r r. r r r r/ � s z!_CertificateRevocationList.__ne__c C sX t �|| j�}| j�� }| jj�|| j�}| j�|dk� | j�|�}|� |� |�
� S )Nro ) r r6 r rp r) �i2d_X509_CRL_bior� rA rs r7 r8 )r r9 r: rv r, Zderr r r r; � s
�
z&_CertificateRevocationList.fingerprintc C s@ | j j�| j�}| j �|| j jjk� | j j�|| j jj�}|S r ) r r) Z X509_CRL_dupr� rA rB rC rI Z
X509_CRL_free)r �dupr r r � _sorted_crl� s z&_CertificateRevocationList._sorted_crlc C sl | j j�d�}t| j |�}| j j�| j||�}|dkr:d S | j �|d | j jjk� t | j | j|d �S d S )NzX509_REVOKED **r )
r rB r] r r) ZX509_CRL_get0_by_serialr� rA rC r| )r rF �revokedrE r, r r r �(get_revoked_certificate_by_serial_number� s" �� �zC_CertificateRevocationList.get_revoked_certificate_by_serial_numberc C s: | j }z tj| W S tk
r4 td�|���Y nX d S rU rV rY r r r r[ s �z3_CertificateRevocationList.signature_hash_algorithmc C s^ | j j�d�}| j j�| j| j jj|� | j �|d | j jjk� t| j |d j �}t
� |�S r\ ) r rB r] r) �X509_CRL_get0_signaturer� rC rA r r9 r r_ r` r r r rW s �z2_CertificateRevocationList.signature_algorithm_oidc C s2 | j j�| j�}| j �|| j jjk� t| j |�S r )r r) ZX509_CRL_get_issuerr� rA rB rC r rR r r r rS s z!_CertificateRevocationList.issuerc C s2 | j j�| j�}| j �|| j jjk� t| j |�S r )r r) ZX509_CRL_get_nextUpdater� rA rB rC r )r Znur r r � next_update s z&_CertificateRevocationList.next_updatec C s2 | j j�| j�}| j �|| j jjk� t| j |�S r )r r) ZX509_CRL_get_lastUpdater� rA rB rC r )r Zlur r r � last_update! s z&_CertificateRevocationList.last_updatec C sR | j j�d�}| j j�| j|| j jj� | j �|d | j jjk� t| j |d �S rc ) r rB r] r) r� r� rC rA r rd r r r re ' s �z$_CertificateRevocationList.signaturec sd � j j�d�}� j j�� j|�}� j �|dk� � j j�|� fdd��}� j j�|d |�d d � S )Nrf r c s � j j�| d �S r% rg rh r# r r ri 6 rj z?_CertificateRevocationList.tbs_certlist_bytes.<locals>.<lambda>) r rB r] r) Zi2d_re_X509_CRL_tbsr� rA rI rk rl r r# r �tbs_certlist_bytes0 s
�z-_CertificateRevocationList.tbs_certlist_bytesc C sn | j �� }|tjjkr*| j j�|| j�}n(|tjjkrJ| j j� || j�}nt
d��| j � |dk� | j � |�S rn )
r rp r r3 rq r) ZPEM_write_bio_X509_CRLr� r4 r� rr rA rs rt r r r r2 : s
� z'_CertificateRevocationList.public_bytesc C sD | j j�| j�}| j j�||�}| j �|| j jjk� t| j | |�S r ) r r) �X509_CRL_get_REVOKEDr� Zsk_X509_REVOKED_valuerA rB rC r| )r �idxr� �rr r r �
_revoked_certH s z(_CertificateRevocationList._revoked_certc c s" t t| ��D ]}| �|�V q d S r )�range�lenr� )r �ir r r �__iter__N s z#_CertificateRevocationList.__iter__c s� t |t�r8|�t� ��\}}}� fdd�t|||�D �S t�|�}|dk rV|t� �7 }d| krnt� �k stn t�� �|�S d S )Nc s g | ]}� � |��qS r )r� )�.0r� r# r r �
<listcomp>U s z:_CertificateRevocationList.__getitem__.<locals>.<listcomp>r ) r& �slice�indicesr� r� �operator�index�
IndexErrorr� )r r� �start�stop�stepr r# r � __getitem__R s
z&_CertificateRevocationList.__getitem__c C s4 | j j�| j�}|| j jjkr"dS | j j�|�S d S r% )r r) r� r� rB rC Zsk_X509_REVOKED_num)r r� r r r �__len__^ s z"_CertificateRevocationList.__len__c C s t �| j| j�S r )r
ra r r� r# r r r rb e s z%_CertificateRevocationList.extensionsc C sL t |tjtjtjf�s td��| jj �
| j |j �}|dkrH| j�
� dS dS )NzGExpecting one of DSAPublicKey, RSAPublicKey, or EllipticCurvePublicKey.ro FT)r& r Z DSAPublicKeyr Z RSAPublicKeyr ZEllipticCurvePublicKeyrr r r) ZX509_CRL_verifyr� Z _evp_pkeyrG )r rN r, r r r �is_signature_validi s � �
z-_CertificateRevocationList.is_signature_validN)rw rx ry r r- r/ r; r r{ r� r� rz r[ rW rS r� r� re r� r2 r� r� r� r� rb r� r r r r r � s:
r c @ s� e Zd Zdd� Zdd� Zdd� Zdd� Zd d
� Zed d � �Z ed
d� �Z
edd� �Z e j
dd� �Zdd� Zedd� �Zedd� �Zedd� �ZdS ) �_CertificateSigningRequestc C s || _ || _d S r )r � _x509_req)r r Zx509_reqr r r r { s z#_CertificateSigningRequest.__init__c C s2 t |t�stS | �tjj�}|�tjj�}||kS r )r& r� r( r2 r r3 r4 )r r+ Z
self_bytesZ other_bytesr r r r- s
z!_CertificateSigningRequest.__eq__c C s
| |k S r r r. r r r r/ � s z!_CertificateSigningRequest.__ne__c C s t | �tjj��S r r0 r# r r r r5 � s z#_CertificateSigningRequest.__hash__c C sH | j j�| j�}| j �|| j jjk� | j j�|| j jj�}| j � |�S r )
r r) �X509_REQ_get_pubkeyr� rA rB rC rI rJ rK rL r r r rN � s z%_CertificateSigningRequest.public_keyc C s2 | j j�| j�}| j �|| j jjk� t| j |�S r )r r) ZX509_REQ_get_subject_namer� rA rB rC r rT r r r r" � s z"_CertificateSigningRequest.subjectc C s: | j }z tj| W S tk
r4 td�|���Y nX d S rU rV rY r r r r[ � s �z3_CertificateSigningRequest.signature_hash_algorithmc C s^ | j j�d�}| j j�| j| j jj|� | j �|d | j jjk� t| j |d j �}t
� |�S r\ ) r rB r] r) �X509_REQ_get0_signaturer� rC rA r r9 r r_ r` r r r rW � s �z2_CertificateSigningRequest.signature_algorithm_oidc s6 � j j�� j�}� j j�|� fdd��}t�� j |�S )Nc s" � j j�| � j j�� j jjd��S )NZX509_EXTENSION_free)r r) Zsk_X509_EXTENSION_pop_freerB Z addressofZ
_original_lib)�xr# r r ri � s ��z7_CertificateSigningRequest.extensions.<locals>.<lambda>)r r) ZX509_REQ_get_extensionsr� rB rI r ra )r Z x509_extsr r# r rb � s
�z%_CertificateSigningRequest.extensionsc C sn | j �� }|tjjkr*| j j�|| j�}n(|tjjkrJ| j j� || j�}nt
d��| j � |dk� | j � |�S rn )
r rp r r3 rq r) ZPEM_write_bio_X509_REQr� r4 Zi2d_X509_REQ_biorr rA rs rt r r r r2 � s
� z'_CertificateSigningRequest.public_bytesc sd � j j�d�}� j j�� j|�}� j �|dk� � j j�|� fdd��}� j j�|d |�d d � S )Nrf r c s � j j�| d �S r% rg rh r# r r ri � rj zB_CertificateSigningRequest.tbs_certrequest_bytes.<locals>.<lambda>) r rB r] r) Zi2d_re_X509_REQ_tbsr� rA rI rk rl r r# r �tbs_certrequest_bytes� s
�z0_CertificateSigningRequest.tbs_certrequest_bytesc C sR | j j�d�}| j j�| j|| j jj� | j �|d | j jjk� t| j |d �S rc ) r rB r] r) r� r� rC rA r rd r r r re � s �z$_CertificateSigningRequest.signaturec C sh | j j�| j�}| j �|| j jjk� | j j�|| j jj�}| j j� | j|�}|dkrd| j �
� dS dS )Nro FT) r r) r� r� rA rB rC rI rJ ZX509_REQ_verifyrG )r rM r, r r r r� � s
z-_CertificateSigningRequest.is_signature_validN)rw rx ry r r- r/ r5 rN rz r" r[ rW r r{ rb r2 r� re r� r r r r r� y s(
r� c @ sh e Zd Zdd� Zedd� �Zedd� �Zedd� �Zed d
� �Zed d � �Z d
d� Z
dd� Z dd� Z dS )�_SignedCertificateTimestampc C s || _ || _|| _d S r )r Z _sct_list�_sct)r r Zsct_listZsctr r r r � s z$_SignedCertificateTimestamp.__init__c C s, | j j�| j�}|| j jjks"t�tjjj S r )
r r) ZSCT_get_versionr� ZSCT_VERSION_V1�AssertionErrorr �certificate_transparencyr= r> r? r r r r@ � s z#_SignedCertificateTimestamp.versionc C sH | j j�d�}| j j�| j|�}|dks,t�| j j�|d |�d d � S �Nrf r )r rB r] r) ZSCT_get0_log_idr� r� rk )r �outZ
log_id_lengthr r r �log_id� s z"_SignedCertificateTimestamp.log_idc C s4 | j j�| j�}|d }tj�|d �j|d d�S )Ni� )Z microsecond)r r) ZSCT_get_timestampr� �datetimeZutcfromtimestamp�replace)r � timestampZ millisecondsr r r r� s ��z%_SignedCertificateTimestamp.timestampc C s, | j j�| j�}|| j jjks"t�tjjj S r )
r r) ZSCT_get_log_entry_typer� ZCT_LOG_ENTRY_TYPE_PRECERTr� r r� Z LogEntryTypeZPRE_CERTIFICATE)r �
entry_typer r r r� s z&_SignedCertificateTimestamp.entry_typec C sf | j j�d�}| j j�| j|�}| j �|dk� | j �|d | j jjk� | j j�|d |�d d � S r� ) r rB r] r) ZSCT_get0_signaturer� rA rC rk )r Zptrptrr, r r r �
_signature s
z&_SignedCertificateTimestamp._signaturec C s
t | j�S r )r1 r� r# r r r r5 s z$_SignedCertificateTimestamp.__hash__c C s t |t�stS | j|jkS r )r& r� r( r� r. r r r r- s
z"_SignedCertificateTimestamp.__eq__c C s
| |k S r r r. r r r r/ ! s z"_SignedCertificateTimestamp.__ne__N)
rw rx ry r rz r@ r� r� r� r� r5 r- r/ r r r r r� � s
r� ),Z
__future__r r r r� r� Z cryptographyr r Zcryptography.exceptionsr Z0cryptography.hazmat.backends.openssl.decode_asn1r r r
r r r
r r r r Z0cryptography.hazmat.backends.openssl.encode_asn1r Z cryptography.hazmat.primitivesr r Z)cryptography.hazmat.primitives.asymmetricr r r Zregister_interfacer' �objectr ZRevokedCertificater| r� r ZCertificateSigningRequestr� r� ZSignedCertificateTimestampr� r r r r �<module> s, 0
%
-
o�