|
Server : LiteSpeed System : Linux server51.dnsbootclub.com 4.18.0-553.62.1.lve.el8.x86_64 #1 SMP Mon Jul 21 17:50:35 UTC 2025 x86_64 User : nandedex ( 1060) PHP Version : 8.1.33 Disable Function : NONE Directory : /opt/cppython/lib/python3.8/site-packages/cryptography/x509/__pycache__/ |
U
O��g~, � @ s d dl mZ d dlZd dlZd dlmZmZ d dlmZ d dl m
Z
d dl m Z d dl
mZmZmZ G dd � d ej�ZG d
d � d ej�Ze
je
je
je
je
jfZd d
d�dd�ZG dd� dej�ZG dd� d�Z ej Z ej Z ej Z G dd� d�Z G dd� d�Z!ej"Z"ej#Z#dS )� )� annotationsN)�utils�x509)�ocsp)�hashes)� CertificateIssuerPrivateKeyTypes)�_EARLIEST_UTC_TIME�_convert_to_naive_utc_time�_reject_duplicate_extensionc @ s e Zd ZdZdZdS )�OCSPResponderEncodingzBy HashzBy NameN)�__name__�
__module__� __qualname__�HASH�NAME� r r �C/opt/cppython/lib/python3.8/site-packages/cryptography/x509/ocsp.pyr s r c @ s$ e Zd ZdZdZdZdZdZdZdS )�OCSPResponseStatusr � � � � � N) r r
r �
SUCCESSFULZMALFORMED_REQUEST�INTERNAL_ERRORZ TRY_LATERZ SIG_REQUIRED� UNAUTHORIZEDr r r r r s r �hashes.HashAlgorithm�None)� algorithm�returnc C s t | t�std��d S )Nz9Algorithm must be SHA1, SHA224, SHA256, SHA384, or SHA512)�
isinstance�_ALLOWED_HASHES�
ValueError)r r r r �_verify_algorithm. s
�r# c @ s e Zd ZdZdZdZdS )�OCSPCertStatusr r r N)r r
r ZGOOD�REVOKED�UNKNOWNr r r r r$ 5 s r$ c @ s( e Zd Zddddddddd�dd �Zd
S ) �_SingleResponse�x509.Certificater r$ �datetime.datetime�datetime.datetime | None�x509.ReasonFlags | None)�cert�issuerr � cert_status� this_update� next_update�revocation_time�revocation_reasonc C s t |tj�rt |tj�s td��t|� t |tj�s<td��|d k rXt |tj�sXtd��|| _|| _|| _|| _ || _
t |t �s�td��|t j k r�|d k r�t
d��|d k r�t
d��nHt |tj�s�td��t|�}|tk r�t
d��|d k r�t |tj�s�td ��|| _|| _|| _d S )
N�%cert and issuer must be a Certificatez%this_update must be a datetime objectz-next_update must be a datetime object or Nonez8cert_status must be an item from the OCSPCertStatus enumzBrevocation_time can only be provided if the certificate is revokedzDrevocation_reason can only be provided if the certificate is revokedz)revocation_time must be a datetime objectz7The revocation_time must be on or after 1950 January 1.zCrevocation_reason must be an item from the ReasonFlags enum or None)r r � Certificate� TypeErrorr# �datetimeZ_certZ_issuer�
_algorithmZ _this_updateZ _next_updater$ r% r" r r Z ReasonFlagsZ _cert_statusZ_revocation_timeZ_revocation_reason) �selfr, r- r r. r/ r0 r1 r2 r r r �__init__< s` �
�
�
�� �
��z_SingleResponse.__init__N)r r
r r9 r r r r r' ; s r' c @ sr e Zd Zddg fddddd�dd�Zd d d
d d �d d
�Zdddd
d d�dd�Zddd d�dd�Zdd�dd�ZdS ) �OCSPRequestBuilderNzFtuple[x509.Certificate, x509.Certificate, hashes.HashAlgorithm] | Nonez5tuple[bytes, bytes, int, hashes.HashAlgorithm] | None�(list[x509.Extension[x509.ExtensionType]]r )�request� request_hash�
extensionsr c C s || _ || _|| _d S �N)�_request�
_request_hash� _extensions)r8 r< r= r> r r r r9 � s
zOCSPRequestBuilder.__init__r( r )r, r- r r c C sZ | j d k s| jd k r td��t|� t|tj�r<t|tj�sDtd��t|||f| j| j �S )N�.Only one certificate can be added to a requestr3 )
r@ rA r" r# r r r4 r5 r: rB )r8 r, r- r r r r �add_certificate� s � �z"OCSPRequestBuilder.add_certificate�bytes�int)�issuer_name_hash�issuer_key_hash�
serial_numberr r c C s� | j d k s| jd k r td��t|t�s.td��t|� t�d|� t�d|� |j t
|�ksj|j t
|�krrtd��t | j ||||f| j �S )NrC z serial_number must be an integerrG rH z`issuer_name_hash and issuer_key_hash must be the same length as the digest size of the algorithm)
r@ rA r" r rF r5 r# r � _check_bytes� digest_size�lenr: rB )r8 rG rH rI r r r r �add_certificate_by_hash� s(
� ��
�z*OCSPRequestBuilder.add_certificate_by_hash�x509.ExtensionType�bool��extval�criticalr c C sH t |tj�std��t�|j||�}t|| j� t| j | j
| j|f��S �Nz"extension must be an ExtensionType) r r �
ExtensionTyper5 � Extension�oidr
rB r: r@ rA �r8 rQ rR � extensionr r r �
add_extension� s
�z OCSPRequestBuilder.add_extension� OCSPRequest)r c C s& | j d kr | jd kr td��t�| �S )Nz*You must add a certificate before building)r@ rA r" r Zcreate_ocsp_request)r8 r r r �build� s zOCSPRequestBuilder.build)r r
r r9 rD rM rY r[ r r r r r: � s �
r: c
@ s� e Zd Zdddg fddddd�dd�Zd d d
d d d
d
dd d� dd�Zdd d d�dd�Zdd d�dd�Zddd d �d d �Zd d d!d"�d#d$�Ze d%d!d&�d'd(��Z
dS ))�OCSPResponseBuilderNz_SingleResponse | Nonez5tuple[x509.Certificate, OCSPResponderEncoding] | Nonez list[x509.Certificate] | Noner; )�response� responder_id�certsr> c C s || _ || _|| _|| _d S r? )� _response�
_responder_id�_certsrB )r8 r] r^ r_ r> r r r r9 � s z OCSPResponseBuilder.__init__r( r r$ r) r* r+ ) r, r- r r. r/ r0 r1 r2 r c
C s< | j d k rtd��t||||||||�} t| | j| j| j�S )Nz#Only one response per OCSPResponse.)r` r" r' r\ ra rb rB )
r8 r, r- r r. r/ r0 r1 r2 Z
singlerespr r r � add_response� s$
�
�z OCSPResponseBuilder.add_responser )�encoding�responder_certr c C sP | j d k rtd��t|tj�s&td��t|t�s8td��t| j||f| j | j
�S )Nz!responder_id can only be set oncez$responder_cert must be a Certificatez6encoding must be an element from OCSPResponderEncoding) ra r" r r r4 r5 r r\ r` rb rB )r8 rd re r r r r^ s
��z OCSPResponseBuilder.responder_idz!typing.Iterable[x509.Certificate])r_ r c C s\ | j d k rtd��t|�}t|�dkr.td��tdd� |D ��sHtd��t| j| j|| j �S )Nz!certificates may only be set oncer z certs must not be an empty listc s s | ]}t |tj�V qd S r? )r r r4 )�.0�xr r r � <genexpr>" s z3OCSPResponseBuilder.certificates.<locals>.<genexpr>z$certs must be a list of Certificates)
rb r" �listrL �allr5 r\ r` ra rB )r8 r_ r r r � certificates s
�z OCSPResponseBuilder.certificatesrN rO rP c C sL t |tj�std��t�|j||�}t|| j� t| j | j
| j | j|f��S rS ) r r rT r5 rU rV r
rB r\ r` ra rb rW r r r rY + s
�z!OCSPResponseBuilder.add_extensionr zhashes.HashAlgorithm | None� OCSPResponse)� private_keyr r c C s6 | j d krtd��| jd kr$td��t�tj| ||�S )Nz&You must add a response before signingz*You must add a responder_id before signing)r` r" ra r �create_ocsp_responser r )r8 rm r r r r �sign; s
�zOCSPResponseBuilder.signr )�response_statusr c C s4 t |t�std��|tjkr$td��t�|d d d �S )Nz7response_status must be an item from OCSPResponseStatusz$response_status cannot be SUCCESSFUL)r r r5 r r" r rn )�clsrp r r r �build_unsuccessfulI s
�
z&OCSPResponseBuilder.build_unsuccessful) r r
r r9 rc r^ rk rY ro � classmethodrr r r r r r\ � s �
r\ )$�
__future__r r6 �typingZ cryptographyr r Z"cryptography.hazmat.bindings._rustr Z cryptography.hazmat.primitivesr Z/cryptography.hazmat.primitives.asymmetric.typesr Zcryptography.x509.baser r r
�Enumr r �SHA1�SHA224�SHA256�SHA384�SHA512r! r# r$ r' rZ rl ZOCSPSingleResponser: r\ Zload_der_ocsp_requestZload_der_ocsp_responser r r r �<module> s2
� FT}