.Ph]m ddlmZddlZddlZddlZddlZddlZddlmZddl m Z ddl m Z ddlmZddlmZmZmZmZmZmZmZmZddlmZmZdd lmZmZmZm Z dd l!m"Z"m#Z#dd l$m%Z%ejd d d Z&ej'ej(ej)ej*ej+ej,ej-ej.ej/fZ0Gdde1Z2d6dZ3d7dZ4d8dZ5Gdd Z6Gd!d"Z7Gd#d$e j8Z9Gd%d&e1Z:e j;Z;Gd'd(ej<)Z=e=>e j=Gd*d+e=Z?e j@Z@e jAZAe jBZBe jCZCe jDZDe jEZEe jFZFe jGZGe jHZHGd,d-ZIGd.d/ZJGd0d1ZKGd2d3ZLd9d5ZMdS):) annotationsN)Iterable)utils)x509)hashes)dsaeced448ed25519paddingrsax448x25519) CertificateIssuerPrivateKeyTypesCertificatePublicKeyTypes) Extension Extensions ExtensionType_make_sequence_methods)Name _ASN1Type)ObjectIdentifieric eZdZdfd ZxZS) AttributeNotFoundmsgstroidrreturnNonecXt|||_dSN)super__init__r)selfrr __class__s V/var/www/html/test/jupyter/venv/lib/python3.11/site-packages/cryptography/x509/base.pyr$zAttributeNotFound.__init__9s& )rrrrrr __name__ __module__ __qualname__r$ __classcell__r&s@r'rr8s=r(r extensionExtension[ExtensionType] extensionslist[Extension[ExtensionType]]rr cN|D]!}|j|jkrtd"dS)Nz$This extension has already been set.)r ValueError)r/r1es r'_reject_duplicate_extensionr6>sD EE 5IM ! !CDD D "EEr(rr attributes0list[tuple[ObjectIdentifier, bytes, int | None]]cB|D]\}}}||krtddS)Nz$This attribute has already been set.)r4)rr7attr_oid_s r'_reject_duplicate_attributer<HsD %EE!Q s??CDD D EEr(timedatetime.datetimec|jD|}|r|ntj}|d|z S|S)zNormalizes a datetime to a naive datetime in UTC. time -- datetime to normalize. Assumed to be in UTC if not timezone aware. Ntzinfo)rA utcoffsetdatetime timedeltareplace)r=offsets r'_convert_to_naive_utc_timerGRsP  {!!!;x'9';';||4|((611 r(cveZdZejjfdd Zedd Zedd Zdd Z ddZ ddZ dS) Attributerrvaluebytes_typeintrr c0||_||_||_dSr")_oid_valuerL)r%rrJrLs r'r$zAttribute.__init__as    r(c|jSr")rOr%s r'rz Attribute.oidks yr(c|jSr")rPrRs r'rJzAttribute.valueos {r(rc(d|jd|jdS)Nz)rrJrRs r'__repr__zAttribute.__repr__ssCCC4:CCCCr(otherobjectboolct|tstS|j|jko|j|jko|j|jkSr") isinstancerINotImplementedrrJrL)r%rWs r'__eq__zAttribute.__eq__vsO%++ "! ! H ! * ek) * ek) r(cDt|j|j|jfSr")hashrrJrLrRs r'__hash__zAttribute.__hash__sTXtz4:6777r(N)rrrJrKrLrMrr )rr)rrKrr)rWrXrrYrrM) r*r+r,r UTF8StringrJr$propertyrrVr]r`r(r'rIrI`s )/ XXDDDD    888888r(rIcDeZdZddZed\ZZZddZdd Z d S) Attributesr7Iterable[Attribute]rr c.t||_dSr")list _attributes)r%r7s r'r$zAttributes.__init__s ++r(rkrcd|jdS)Nz cdS)zH Returns the date of when this certificate was revoked. NrerRs r'revocation_datez"RevokedCertificate.revocation_daterr(cdS)zl Returns the date of when this certificate was revoked as a non-naive UTC datetime. NrerRs r'revocation_date_utcz&RevokedCertificate.revocation_date_utcrr(rcdS)zW Returns an Extensions object containing a list of Revoked extensions. NrerRs r'r1zRevokedCertificate.extensionsrr(Nrbrr>rr) r*r+r,rdabcabstractmethodrrrr1rer(r'r}r}s    X    X    X    X   r(r}) metaclasscveZdZddZedd Zedd Zedd Zedd Zd S)_RawRevokedCertificaterrMrr>r1rc0||_||_||_dSr"_serial_number_revocation_date _extensionsr%rrr1s r'r$z_RawRevokedCertificate.__init__" , /%r(rc|jSr")rrRs r'rz$_RawRevokedCertificate.serial_numbers ""r(cRtjdtjd|jS)NukProperties that return a naïve datetime object have been deprecated. Please switch to revocation_date_utc.ru) stacklevel)warningswarnrDeprecatedIn42rrRs r'rz&_RawRevokedCertificate.revocation_dates5  @       $$r(cV|jtjjS)Nr@)rrErCtimezoneutcrRs r'rz*_RawRevokedCertificate.revocation_date_utcs"$,,H4E4I,JJJr(c|jSr")rrRs r'r1z!_RawRevokedCertificate.extensionss r(N)rrMrr>r1rrbrr) r*r+r,r$rdrrrr1rer(r'rrs&&&&###X#%%%X%KKKXK   X   r(rcPeZdZdggfd'dZd(d Zd)dZddd*dZ d+dddd,d&ZdS)- CertificateSigningRequestBuilderN subject_name Name | Noner1r2r7r8c0||_||_||_dS)zB Creates an empty X.509 certificate request (v1). N) _subject_namerrk)r%rr1r7s r'r$z)CertificateSigningRequestBuilder.__init__s"*%%r(namerrct|tstd|jt dt ||j|jS)zF Sets the certificate requestor's distinguished name. Expecting x509.Name object.N&The subject name may only be set once.)r[r TypeErrorrr4rrrkr%rs r'rz-CertificateSigningRequestBuilder.subject_name s\$%% ;9:: :   )EFF F/ $"D$4   r(extvalrcriticalrYct|tstdt|j||}t ||jt|jg|j||j S)zE Adds an X.509 extension to the certificate request. "extension must be an ExtensionType) r[rrrrr6rrrrkr%rrr/s r' add_extensionz.CertificateSigningRequestBuilder.add_extensionsz &-00 B@AA Afj(F;; #It/?@@@/   *d * *     r()_tagrrrJrKr_ASN1Type | Nonecnt|tstdt|tstd|$t|tstdt ||j||j}nd}t|j |j g|j|||fS)zK Adds an X.509 attribute with an OID and associated value. zoid must be an ObjectIdentifierzvalue must be bytesNztag must be _ASN1Type) r[rrrKrr<rkrJrrr)r%rrJrtags r' add_attributez.CertificateSigningRequestBuilder.add_attribute's#/00 ?=>> >%'' 3122 2  JtY$?$? 344 4#C)9:::  *CCC/     2d 2eS 1 2   r( rsa_paddingecdsa_deterministic private_keyr algorithm_AllowedHashTypes | Nonebackend typing.Anyr%padding.PSS | padding.PKCS1v15 | Noner bool | NoneCertificateSigningRequestct|jtd|^t|tjtjfst dt|tjst d|)t|tj st dtj |||||S)zF Signs the request using the requestor's private key. Nz/A CertificateSigningRequest must have a subjectPadding must be PSS or PKCS1v15&Padding is only supported for RSA keys1Deterministic ECDSA is only supported for EC keys) rr4r[r PSSPKCS1v15rr RSAPrivateKeyr EllipticCurvePrivateKey rust_x509create_x509_csrr%rrrrrs r'signz%CertificateSigningRequestBuilder.signGs   %NOO O  "kGK9I+JKK C ABBBk3+<== J HIII  *k2+EFF G(         r()rrr1r2r7r8)rrrr)rrrrYrr)rrrJrKrrrrr") rrrrrrrrrrrr)r*r+r,r$rrrrrer(r'rrs%)57GI & & & & &         ."&       H# ! >B+/! ! ! ! ! ! ! ! r(rc~eZdZUded<ddddddgfd2dZd3dZd3dZd4dZd5dZd6dZ d6dZ d7d$Z d8ddd%d9d1Z dS):CertificateBuilderr2rN issuer_namerr public_key CertificatePublicKeyTypes | Noner int | Nonenot_valid_beforedatetime.datetime | Nonenot_valid_afterr1rr ctj|_||_||_||_||_||_||_||_ dSr") rtrw_version _issuer_namer _public_keyr_not_valid_before_not_valid_afterr)r%rrrrrrr1s r'r$zCertificateBuilder.__init__nsK  ')%+!1 /%r(rrc t|tstd|jt dt ||j|j|j|j |j |j S)z3 Sets the CA's distinguished name. rN%The issuer name may only be set once.) r[rrrr4rrrrrrrrs r'rzCertificateBuilder.issuer_namesv$%% ;9:: :   (DEE E!         "  !     r(c t|tstd|jt dt |j||j|j|j |j |j S)z: Sets the requestor's distinguished name. rNr) r[rrrr4rrrrrrrrs r'rzCertificateBuilder.subject_namesv$%% ;9:: :   )EFF F!         "  !     r(keyrc lt|tjtjt jtjtj tj tjfstd|jt#dt%|j|j||j|j|j|jS)zT Sets the requestor's public key (as found in the signing request). zExpecting one of DSAPublicKey, RSAPublicKey, EllipticCurvePublicKey, Ed25519PublicKey, Ed448PublicKey, X25519PublicKey, or X448PublicKey.Nz$The public key may only be set once.)r[r DSAPublicKeyr RSAPublicKeyr EllipticCurvePublicKeyr Ed25519PublicKeyr Ed448PublicKeyrX25519PublicKeyr X448PublicKeyrrr4rrrrrrr)r%rs r'rzCertificateBuilder.public_keys   )($&"     !    'CDD D!         "  !     r(numberrMc Tt|tstd|jt d|dkrt d|dkrt dt |j|j|j ||j |j |j S)z5 Sets the certificate serial number. 'Serial number must be of integral type.N'The serial number may only be set once.rz%The serial number should be positive.3The serial number should not be more than 159 bits.) r[rMrrr4 bit_lengthrrrrrrrr%rs r'rz CertificateBuilder.serial_numbers&#&& GEFF F   *FGG G Q;;DEE E     # % %E "         "  !     r(r=r>c zt|tjstd|jt dt |}|t krt d|j||jkrt dt|j |j |j |j ||j|j S)z7 Sets the certificate activation time. Expecting datetime object.Nz*The not valid before may only be set once.z>The not valid before date must be on or after 1950 January 1).zBThe not valid before date must be before the not valid after date.)r[rCrrr4rG_EARLIEST_UTC_TIMErrrrrrrr%r=s r'rz#CertificateBuilder.not_valid_befores$ 122 :899 9  ! -IJJ J)$// $ $ $$   ,8M1M1M "           !     r(c zt|tjstd|jt dt |}|t krt d|j||jkrt dt|j |j |j |j |j||j S)z7 Sets the certificate expiration time. rNz)The not valid after may only be set once.zrr)rrrrYrrr") rrrrrrrrrrrr) r*r+r,__annotations__r$rrrrrrrrrer(r'rrks////$($(7;$(594857&&&&&&    $    $# # # # J    6    :    >    4# 0 >B+/0 0 0 0 0 0 0 0 r(rcteZdZUded<ded<dddggfd)d Zd*dZd+dZd,dZd-dZd.dZ d/dddd0d(Z dS)1 CertificateRevocationListBuilderr2rlist[RevokedCertificate]_revoked_certificatesNrr last_updater next_updater1revoked_certificatescL||_||_||_||_||_dSr")r _last_update _next_updaterr)r%rrrr1rs r'r$z)CertificateRevocationListBuilder.__init__ns2(''%%9"""r(rrct|tstd|jt dt ||j|j|j|j S)Nrr) r[rrrr4rrrrr)r%rs r'rz,CertificateRevocationListBuilder.issuer_name|sj+t,, ;9:: :   (DEE E/         &    r(r>cbt|tjstd|jt dt |}|t krt d|j||jkrt dt|j ||j|j |j S)Nr!Last update may only be set once.8The last update date must be on or after 1950 January 1.z9The last update date must be before the next update date.) r[rCrrr4rGrrrrrr)r%rs r'rz,CertificateRevocationListBuilder.last_updates+x'899 :899 9   (@AA A0== + + +J    ([4;L-L-LK 0         &    r(cbt|tjstd|jt dt |}|t krt d|j||jkrt dt|j |j||j |j S)Nrrrz8The next update date must be after the last update date.) r[rCrrr4rGrrrrrr)r%rs r'rz,CertificateRevocationListBuilder.next_updates+x'899 :899 9   (@AA A0== + + +J    ([4;L-L-LJ 0         &    r(rrrrYct|tstdt|j||}t ||jt|j|j |j g|j||j S)zM Adds an X.509 extension to the certificate revocation list. r) r[rrrrr6rrrrrrrs r'rz.CertificateRevocationListBuilder.add_extensions &-00 B@AA Afj(F;; #It/?@@@/       *d * *  &    r(revoked_certificater}ct|tstdt|j|j|j|jg|j|S)z8 Adds a revoked certificate to the CRL. z)Must be an instance of RevokedCertificate) r[r}rrrrrrr)r%r s r'add_revoked_certificatez8CertificateRevocationListBuilder.add_revoked_certificatesc -/ABB IGHH H/         >d( >*= >    r(rrrrrrrrrrrCertificateRevocationListc|jtd|jtd|jtd|^t |t jt jfstdt |tj std|)t |tj stdtj|||||S)NzA CRL must have an issuer namez"A CRL must have a last update timez"A CRL must have a next update timerrr)rr4rrr[r rrrr rr rrcreate_x509_crlrs r'rz%CertificateRevocationListBuilder.signs   $=>> >   $ABB B   $ABB B  "kGK9I+JKK C ABBBk3+<== J HIII  *k2+EFF G(         r() rrrrrrr1r2rr)rrrr)rr>rr)rr>rr)rrrrYrr)r r}rrr") rrrrrrrrrrrr ) r*r+r,rr$rrrrr rrer(r'rrjs////3333$(0404579; : : : : :         0    0    &    *# $ >B+/$ $ $ $ $ $ $ $ r(rc@eZdZddgfddZdd ZddZddZdddZdS)RevokedCertificateBuilderNrrrrr1r2c0||_||_||_dSr"rrs r'r$z"RevokedCertificateBuilder.__init__rr(rrMrc$t|tstd|jt d|dkrt d|dkrt dt ||j|jS)Nrrrz$The serial number should be positiverr) r[rMrrr4rrrrrs r'rz'RevokedCertificateBuilder.serial_numbers&#&& GEFF F   *FGG G Q;;CDD D     # % %E ) D)4+;   r(r=r>ct|tjstd|jt dt |}|t krt dt|j||j S)Nrz)The revocation date may only be set once.z7The revocation date must be on or after 1950 January 1.) r[rCrrr4rGrrrrrs r'rz)RevokedCertificateBuilder.revocation_date#s$ 122 :899 9  ,HII I)$// $ $ $I )  t'7   r(rrrrYct|tstdt|j||}t ||jt|j|j g|j|S)Nr) r[rrrrr6rrrrrs r'rz'RevokedCertificateBuilder.add_extension3sz&-00 B@AA Afj(F;; #It/?@@@(    ! *d * *   r(rrr}c|jtd|jtdt|j|jt |jS)Nz/A revoked certificate must have a serial numberz1A revoked certificate must have a revocation date)rr4rrrr)r%rs r'buildzRevokedCertificateBuilder.buildAsf   &NOO O  (C &    ! t' ( (   r()rrrrr1r2)rrMrr)r=r>rr)rrrrYrrr")rrrr})r*r+r,r$rrrrrer(r'rrs%)4857 &&&&&    $                r(rrMcbttjdddz S)Nbigr)rM from_bytesosurandomrer(r'random_serial_numberrOs# >>"*R..% 0 0A 55r()r/r0r1r2rr )rrr7r8rr )r=r>rr>rb)N __future__rrrCrtypingrcollections.abcr cryptographyr"cryptography.hazmat.bindings._rustrrcryptography.hazmat.primitivesr)cryptography.hazmat.primitives.asymmetricrr r r r r rr/cryptography.hazmat.primitives.asymmetric.typesrrcryptography.x509.extensionsrrrrcryptography.x509.namerrcryptography.x509.oidrrUnionSHA224SHA256SHA384SHA512SHA3_224SHA3_256SHA3_384SHA3_512_AllowedHashTypes Exceptionrr6r<rGrIrgEnumrtryrABCMetar}registerrr rload_pem_x509_certificateload_der_x509_certificateload_pem_x509_certificatesload_pem_x509_csrload_der_x509_csrload_pem_x509_crlload_der_x509_crlrrrrrrer(r'r>s #"""""  $$$$$$@@@@@@111111                     32222222222222&X&tQ22L M M M M O O O O   EEEEEEEE    !8!8!8!8!8!8!8!8HFFFFFFFF(     ej   -----Y--- #      3;    @I8999     /   D&?%?&?%?&A////m m m m m m m m `| | | | | | | | ~Y Y Y Y Y Y Y Y xF F F F F F F F R666666r(