cҳgi ddlmZddlZddlZddlZddlZddlZddlmZddl m Z ddl m Z ddlmZmZmZmZmZmZmZmZddlmZmZddlmZmZmZmZdd lm Z m!Z!dd l"m#Z#ejd d d Z$ej%e j&e j'e j(e j)e j*e j+e j,e j-fZ.Gd de/Z0d5dZ1d6dZ2d7dZ3GddZ4Gd d!Z5Gd"d#ej6Z7Gd$d%e/Z8e j9Z9Gd&d'ej:(Z;e;<e j;Gd)d*e;Z=e j>Z>e j?Z?e j@Z@e jAZAe jBZBe jCZCe jDZDe jEZEe jFZFGd+d,ZGGd-d.ZHGd/d0ZIGd1d2ZJd8d4ZKdS)9) annotationsN)utils)x509)hashes)dsaeced448ed25519paddingrsax448x25519) CertificateIssuerPrivateKeyTypesCertificatePublicKeyTypes) Extension Extensions ExtensionType_make_sequence_methods)Name _ASN1Type)ObjectIdentifieric eZdZdfd ZxZS) AttributeNotFoundmsgstroidrreturnNonecXt|||_dSN)super__init__r)selfrr __class__s T/var/www/html/mpstechhub/venv/lib/python3.11/site-packages/cryptography/x509/base.pyr#zAttributeNotFound.__init__8s& )rrrrrr__name__ __module__ __qualname__r# __classcell__r%s@r&rr7s=r'r extensionExtension[ExtensionType] extensionslist[Extension[ExtensionType]]rrcN|D]!}|j|jkrtd"dS)Nz$This extension has already been set.)r ValueError)r.r0es r&_reject_duplicate_extensionr5=sD EE 5IM ! !CDD D "EEr'rr attributes0list[tuple[ObjectIdentifier, bytes, int | None]]cB|D]\}}}||krtddS)Nz$This attribute has already been set.)r3)rr6attr_oid_s r&_reject_duplicate_attributer;GsD %EE!Q s??CDD D EEr'timedatetime.datetimec|jD|}|r|ntj}|d|z S|S)zNormalizes a datetime to a naive datetime in UTC. time -- datetime to normalize. Assumed to be in UTC if not timezone aware. Ntzinfo)r@ utcoffsetdatetime timedeltareplace)r<offsets r&_convert_to_naive_utc_timerFQsP  {!!!;x'9';';||4|((611 r'cveZdZejjfdd Zedd Zedd Zdd Z ddZ ddZ dS) Attributerrvaluebytes_typeintrrc0||_||_||_dSr!)_oid_valuerK)r$rrIrKs r&r#zAttribute.__init__`s    r'c|jSr!)rNr$s r&rz Attribute.oidjs yr'c|jSr!)rOrQs r&rIzAttribute.valuens {r'rc(d|jd|jdS)Nz)rrIrQs r&__repr__zAttribute.__repr__rsCCC4:CCCCr'otherobjectboolct|tstS|j|jko|j|jko|j|jkSr!) isinstancerHNotImplementedrrIrK)r$rVs r&__eq__zAttribute.__eq__usO%++ "! ! H ! * ek) * ek) r'cDt|j|j|jfSr!)hashrrIrKrQs r&__hash__zAttribute.__hash__sTXtz4:6777r'N)rrrIrJrKrLrr)rr)rrJrr)rVrWrrXrrL) r)r*r+r UTF8StringrIr#propertyrrUr\r_r'r&rHrH_s )/ XXDDDD    888888r'rHcDeZdZddZed\ZZZddZdd Z d S) Attributesr6typing.Iterable[Attribute]rrc.t||_dSr!)list _attributes)r$r6s r&r#zAttributes.__init__s ++r'rjrcd|jdS)Nz > >%'' 3122 2  JtY$?$? 344 4#C)9:::  *CCC/     2d 2eS 1 2   r' rsa_padding private_keyr algorithm_AllowedHashTypes | Nonebackend typing.Anyr%padding.PSS | padding.PKCS1v15 | NoneCertificateSigningRequestc|jtd|^t|tjtjfst dt|tjst dtj ||||S)zF Signs the request using the requestor's private key. Nz/A CertificateSigningRequest must have a subjectPadding must be PSS or PKCS1v15&Padding is only supported for RSA keys) rr3rZr PSSPKCS1v15rr RSAPrivateKey rust_x509create_x509_csrr$rrrrs r&signz%CertificateSigningRequestBuilder.signFs   %NOO O  "kGK9I+JKK C ABBBk3+<== J HIII( +y+   r')rrr0r1r6r7)rrrr)rrrrXrr)rrrIrJrrrrr!) rrrrrrrrrr)r)r*r+r#rrrrrdr'r&rrs%)57GI & & & & &         ."&       H#  >B         r'rc|eZdZUded<ddddddgfd0dZd1dZd1dZd2dZd3dZd4dZ d4dZ d5d$Z d6dd%d7d/Z dS)8CertificateBuilderr1rN issuer_namerr public_key CertificatePublicKeyTypes | Noner~ int | Nonenot_valid_beforedatetime.datetime | Nonenot_valid_afterr0rrctj|_||_||_||_||_||_||_||_ dSr!) rsrv_version _issuer_namer _public_keyr_not_valid_before_not_valid_afterr)r$rrrr~rrr0s r&r#zCertificateBuilder.__init__bsK  ')%+!1 /%r'rrc t|tstd|jt dt ||j|j|j|j |j |j S)z3 Sets the CA's distinguished name. rN%The issuer name may only be set once.) rZrrrr3rrrrrrrrs r&rzCertificateBuilder.issuer_nameusv$%% ;9:: :   (DEE E!         "  !     r'c t|tstd|jt dt |j||j|j|j |j |j S)z: Sets the requestor's distinguished name. rNr) rZrrrr3rrrrrrrrs r&rzCertificateBuilder.subject_namesv$%% ;9:: :   )EFF F!         "  !     r'keyrc lt|tjtjt jtjtj tj tjfstd|jt#dt%|j|j||j|j|j|jS)zT Sets the requestor's public key (as found in the signing request). zExpecting one of DSAPublicKey, RSAPublicKey, EllipticCurvePublicKey, Ed25519PublicKey, Ed448PublicKey, X25519PublicKey, or X448PublicKey.Nz$The public key may only be set once.)rZr DSAPublicKeyr RSAPublicKeyrEllipticCurvePublicKeyr Ed25519PublicKeyr Ed448PublicKeyrX25519PublicKeyr X448PublicKeyrrr3rrrrrrr)r$rs r&rzCertificateBuilder.public_keys   )($&"     !    'CDD D!         "  !     r'numberrLc Tt|tstd|jt d|dkrt d|dkrt dt |j|j|j ||j |j |j S)z5 Sets the certificate serial number. 'Serial number must be of integral type.N'The serial number may only be set once.rz%The serial number should be positive.3The serial number should not be more than 159 bits.) rZrLrrr3 bit_lengthrrrrrrrr$rs r&r~z CertificateBuilder.serial_numbers&#&& GEFF F   *FGG G Q;;DEE E     # % %E "         "  !     r'r<r=c zt|tjstd|jt dt |}|t krt d|j||jkrt dt|j |j |j |j ||j|j S)z7 Sets the certificate activation time. Expecting datetime object.Nz*The not valid before may only be set once.z>The not valid before date must be on or after 1950 January 1).zBThe not valid before date must be before the not valid after date.)rZrBrrr3rF_EARLIEST_UTC_TIMErrrrrrrr$r<s r&rz#CertificateBuilder.not_valid_befores$ 122 :899 9  ! -IJJ J)$// $ $ $$   ,8M1M1M "           !     r'c zt|tjstd|jt dt |}|t krt d|j||jkrt dt|j |j |j |j |j||j S)z7 Sets the certificate expiration time. rNz)The not valid after may only be set once.zB % % % % % % % % r'rcreZdZUded<ded<dddggfd'd Zd(dZd)dZd*dZd+dZd,dZ d-ddd.d&Z dS)/ CertificateRevocationListBuilderr1rlist[RevokedCertificate]_revoked_certificatesNrr last_updater next_updater0revoked_certificatescL||_||_||_||_||_dSr!)r _last_update _next_updaterr)r$rrrr0rs r&r#z)CertificateRevocationListBuilder.__init__Xs2(''%%9"""r'rrct|tstd|jt dt ||j|j|j|j S)Nrr) rZrrrr3rrrrr)r$rs r&rz,CertificateRevocationListBuilder.issuer_namefsj+t,, ;9:: :   (DEE E/         &    r'r=cbt|tjstd|jt dt |}|t krt d|j||jkrt dt|j ||j|j |j S)Nr!Last update may only be set once.8The last update date must be on or after 1950 January 1.z9The last update date must be before the next update date.) rZrBrrr3rFrrrrrr)r$rs r&rz,CertificateRevocationListBuilder.last_updateus+x'899 :899 9   (@AA A0== + + +J    ([4;L-L-LK 0         &    r'cbt|tjstd|jt dt |}|t krt d|j||jkrt dt|j |j||j |j S)Nrrrz8The next update date must be after the last update date.) rZrBrrr3rFrrrrrr)r$rs r&rz,CertificateRevocationListBuilder.next_updates+x'899 :899 9   (@AA A0== + + +J    ([4;L-L-LJ 0         &    r'rrrrXct|tstdt|j||}t ||jt|j|j |j g|j||j S)zM Adds an X.509 extension to the certificate revocation list. r) rZrrrrr5rrrrrrrs r&rz.CertificateRevocationListBuilder.add_extensions &-00 B@AA Afj(F;; #It/?@@@/       *d * *  &    r'revoked_certificater|ct|tstdt|j|j|j|jg|j|S)z8 Adds a revoked certificate to the CRL. z)Must be an instance of RevokedCertificate) rZr|rrrrrrr)r$rs r&add_revoked_certificatez8CertificateRevocationListBuilder.add_revoked_certificatesc -/ABB IGHH H/         >d( >*= >    r'rrrrrrrrrCertificateRevocationListct|jtd|jtd|jtd|^t |t jt jfstdt |tj stdtj ||||S)NzA CRL must have an issuer namez"A CRL must have a last update timez"A CRL must have a next update timerr) rr3rrrZr rrrr rrcreate_x509_crlrs r&rz%CertificateRevocationListBuilder.signs   $=>> >   $ABB B   $ABB B  "kGK9I+JKK C ABBBk3+<== J HIII( +y+   r') rrrrrrr0r1rr)rrrr)rr=rr)rr=rr)rrrrXrr)rr|rrr!) rrrrrrrrrr) r)r*r+rr#rrrrrrrdr'r&rrTs////3333$(0404579; : : : : :         0    0    &    *#  >B         r'rc@eZdZddgfddZdd ZddZddZdddZdS)RevokedCertificateBuilderNr~rrrr0r1c0||_||_||_dSr!rrs r&r#z"RevokedCertificateBuilder.__init__rr'rrLrc$t|tstd|jt d|dkrt d|dkrt dt ||j|jS)Nrrrz$The serial number should be positiverr) rZrLrrr3rr rrrs r&r~z'RevokedCertificateBuilder.serial_numbers&#&& GEFF F   *FGG G Q;;CDD D     # % %E ) D)4+;   r'r<r=ct|tjstd|jt dt |}|t krt dt|j||j S)Nrz)The revocation date may only be set once.z7The revocation date must be on or after 1950 January 1.) rZrBrrr3rFrr rrrs r&rz)RevokedCertificateBuilder.revocation_dates$ 122 :899 9  ,HII I)$// $ $ $I )  t'7   r'rrrrXct|tstdt|j||}t ||jt|j|j g|j|S)Nr) rZrrrrr5rr rrrs r&rz'RevokedCertificateBuilder.add_extensionsz&-00 B@AA Afj(F;; #It/?@@@(    ! *d * *   r'rrr|c|jtd|jtdt|j|jt |jS)Nz/A revoked certificate must have a serial numberz1A revoked certificate must have a revocation date)rr3rrrr)r$rs r&buildzRevokedCertificateBuilder.build sf   &NOO O  (C &    ! t' ( (   r')r~rrrr0r1)rrLrr )r<r=rr )rrrrXrr r!)rrrr|)r)r*r+r#r~rrrrdr'r&r r s%)4857 &&&&&    $                r'r rLcbttjdddz S)Nbigr)rL from_bytesosurandomrdr'r&random_serial_numberr.s# >>"*R..% 0 0A 55r')r.r/r0r1rr)rrr6r7rr)r<r=rr=ra)L __future__rrrBrtypingr cryptographyr"cryptography.hazmat.bindings._rustrrcryptography.hazmat.primitivesr)cryptography.hazmat.primitives.asymmetricrrr r r r r r/cryptography.hazmat.primitives.asymmetric.typesrrcryptography.x509.extensionsrrrrcryptography.x509.namerrcryptography.x509.oidrrUnionSHA224SHA256SHA384SHA512SHA3_224SHA3_256SHA3_384SHA3_512_AllowedHashTypes Exceptionrr5r;rFrHrfEnumrsrxrABCMetar|registerrrrload_pem_x509_certificateload_der_x509_certificateload_pem_x509_certificatesload_pem_x509_csrload_der_x509_csrload_pem_x509_crlload_der_x509_crlrrrr rrdr'r&r8s #"""""  @@@@@@111111                     32222222222222&X&tQ22L M M M M O O O O   EEEEEEEE    !8!8!8!8!8!8!8!8HFFFFFFFF(     ej   -----Y--- #      3;    @I8999     /   D&?%?&?%?&A////b b b b b b b b Jr r r r r r r r jN N N N N N N N bF F F F F F F F R666666r'