File: //usr/lib/python3/dist-packages/cryptography/x509/__pycache__/ocsp.cpython-39.pyc
a
� `�3 � @ sp d dl mZmZmZ d dlZd dlZd dlmZ d dlZd dl m
Z
d dl m Z d dl
mZmZmZ e �� e �� e �� e �� e �� d�ZG dd � d e�ZG d
d � d e�Zd d
� eD �Ze je je je je jfZdd� ZG dd� de�Z dd
� e D �Z dd� Z dd� Z G dd� de �Z!G dd� de �Z"G dd � d e �Z#e�$ej%�G d d � d e ��Z&e�$ej%�G d d � d e ��Z'dS )!� )�absolute_import�division�print_functionN)�Enum)�x509)�hashes)�_EARLIEST_UTC_TIME�_convert_to_naive_utc_time�_reject_duplicate_extension)z
1.3.14.3.2.26z2.16.840.1.101.3.4.2.4z2.16.840.1.101.3.4.2.1z2.16.840.1.101.3.4.2.2z2.16.840.1.101.3.4.2.3c @ s e Zd ZdZdZdS )�OCSPResponderEncodingzBy HashzBy NameN)�__name__�
__module__� __qualname__�HASH�NAME� r r �8/usr/lib/python3/dist-packages/cryptography/x509/ocsp.pyr s r c @ s$ e Zd ZdZdZdZdZdZdZdS )�OCSPResponseStatusr � � � � � N) r r
r �
SUCCESSFULZMALFORMED_REQUEST�INTERNAL_ERRORZ TRY_LATERZ SIG_REQUIRED� UNAUTHORIZEDr r r r r $ s r c C s i | ] }|j |�qS r ��value��.0�xr r r �
<dictcomp>- � r! c C s t | t�std��d S )Nz9Algorithm must be SHA1, SHA224, SHA256, SHA384, or SHA512)�
isinstance�_ALLOWED_HASHES�
ValueError)� algorithmr r r �_verify_algorithm7 s
�r' c @ s e Zd ZdZdZdZdS )�OCSPCertStatusr r r N)r r
r ZGOOD�REVOKED�UNKNOWNr r r r r( > s r( c C s i | ] }|j |�qS r r r r r r r! D r" c C s ddl m} |�| �S �Nr ��backend)�,cryptography.hazmat.backends.openssl.backendr- �load_der_ocsp_request��datar- r r r r/ G s r/ c C s ddl m} |�| �S r+ )r. r- �load_der_ocsp_responser0 r r r r2 M s r2 c @ s2 e Zd Zdg fdd�Zdd� Zdd� Zdd � ZdS )
�OCSPRequestBuilderNc C s || _ || _d S �N)�_request� _extensions)�self�request�
extensionsr r r �__init__T s zOCSPRequestBuilder.__init__c C sL | j d urtd��t|� t|tj�r2t|tj�s:td��t|||f| j�S )Nz.Only one certificate can be added to a request�%cert and issuer must be a Certificate) r5 r% r' r# r � Certificate� TypeErrorr3 r6 )r7 �cert�issuerr& r r r �add_certificateX s
�z"OCSPRequestBuilder.add_certificatec C sD t |tj�std��t�|j||�}t|| j� t| j | j|g �S �Nz"extension must be an ExtensionType)
r# r �
ExtensionTyper= � Extension�oidr
r6 r3 r5 �r7 � extension�criticalr r r �
add_extensiond s �z OCSPRequestBuilder.add_extensionc C s( ddl m} | jd u r td��|�| �S )Nr r, z*You must add a certificate before building)r. r- r5 r% �create_ocsp_request)r7 r- r r r �buildo s
zOCSPRequestBuilder.build)r r
r r: r@ rH rJ r r r r r3 S s r3 c @ s e Zd Zdd� ZdS )�_SingleResponsec C s t |tj�rt |tj�s td��t|� t |tj�s<td��|d urXt |tj�sXtd��|| _|| _|| _|| _ || _
t |t �s�td��|t j ur�|d ur�t
d��|d ur�t
d��nHt |tj�s�td��t|�}|tk r�t
d��|d ur�t |tj�s�td ��|| _|| _|| _d S )
Nr; z%this_update must be a datetime objectz-next_update must be a datetime object or Nonez8cert_status must be an item from the OCSPCertStatus enumzBrevocation_time can only be provided if the certificate is revokedzDrevocation_reason can only be provided if the certificate is revokedz)revocation_time must be a datetime objectz7The revocation_time must be on or after 1950 January 1.zCrevocation_reason must be an item from the ReasonFlags enum or None)r# r r< r= r' �datetime�_cert�_issuer�
_algorithm� _this_update� _next_updater( r) r% r r � ReasonFlags� _cert_status�_revocation_time�_revocation_reason) r7 r> r? r& � cert_status� this_update� next_update�revocation_time�revocation_reasonr r r r: y sZ �
�
�
�� �
��z_SingleResponse.__init__N)r r
r r: r r r r rK x s rK c @ sR e Zd Zdddg fdd�Zdd� Zdd� Zdd � Zd
d � Zd d
� Ze dd� �Z
dS )�OCSPResponseBuilderNc C s || _ || _|| _|| _d S r4 )� _response�
_responder_id�_certsr6 )r7 �response� responder_id�certsr9 r r r r: � s z OCSPResponseBuilder.__init__c
C s< | j d urtd��t||||||||�} t| | j| j| j�S )Nz#Only one response per OCSPResponse.)r\ r% rK r[ r] r^ r6 )
r7 r> r? r& rV rW rX rY rZ Z
singlerespr r r � add_response� s$
�
�z OCSPResponseBuilder.add_responsec C sP | j d urtd��t|tj�s&td��t|t�s8td��t| j||f| j | j
�S )Nz!responder_id can only be set oncez$responder_cert must be a Certificatez6encoding must be an element from OCSPResponderEncoding) r] r% r# r r< r= r r[ r\ r^ r6 )r7 �encoding�responder_certr r r r` � s
��z OCSPResponseBuilder.responder_idc C s\ | j d urtd��t|�}t|�dkr.td��tdd� |D ��sHtd��t| j| j|| j �S )Nz!certificates may only be set oncer z certs must not be an empty listc s s | ]}t |tj�V qd S r4 )r# r r< r r r r � <genexpr>� r" z3OCSPResponseBuilder.certificates.<locals>.<genexpr>z$certs must be a list of Certificates)
r^ r% �list�len�allr= r[ r\ r] r6 )r7 ra r r r � certificates� s
�z OCSPResponseBuilder.certificatesc C sL t |tj�std��t�|j||�}t|| j� t| j | j
| j | j|g �S rA ) r# r rB r= rC rD r
r6 r[ r\ r] r^ rE r r r rH s
�z!OCSPResponseBuilder.add_extensionc C sB ddl m} | jd u r td��| jd u r0td��|�tj| ||�S )Nr r, z&You must add a response before signingz*You must add a responder_id before signing)r. r- r\ r% r] �create_ocsp_responser r )r7 � private_keyr& r- r r r �sign s
�zOCSPResponseBuilder.signc C s@ ddl m} t|t�s td��|tju r0td��|�|d d d �S )Nr r, z7response_status must be an item from OCSPResponseStatusz$response_status cannot be SUCCESSFUL)r. r- r# r r= r r% rj )�cls�response_statusr- r r r �build_unsuccessful s
�
z&OCSPResponseBuilder.build_unsuccessful) r r
r r: rb r` ri rH rl � classmethodro r r r r r[ � s �
r[ c @ s` e Zd Zejdd� �Zejdd� �Zejdd� �Zejdd� �Zej d d
� �Z
ejd d � �Z d
S )� OCSPRequestc C s dS �z3
The hash of the issuer public key
Nr �r7 r r r �issuer_key_hash0 s zOCSPRequest.issuer_key_hashc C s dS �z-
The hash of the issuer name
Nr rs r r r �issuer_name_hash6 s z OCSPRequest.issuer_name_hashc C s dS �zK
The hash algorithm used in the issuer name and key hashes
Nr rs r r r �hash_algorithm< s zOCSPRequest.hash_algorithmc C s dS �zM
The serial number of the cert whose status is being checked
Nr rs r r r �
serial_numberB s zOCSPRequest.serial_numberc C s dS )z/
Serializes the request to DER
Nr )r7 rc r r r � public_bytesH s zOCSPRequest.public_bytesc C s dS )zP
The list of request extensions. Not single request extensions.
Nr rs r r r r9 N s zOCSPRequest.extensionsN) r r
r �abc�abstractpropertyrt rv rx rz �abstractmethodr{ r9 r r r r rq . s
rq c @ s$ e Zd Zejdd� �Zejdd� �Zejdd� �Zejdd� �Zejd d
� �Z ejd d � �Z
ejd
d� �Z ejdd� �Z ejdd� �Z
ejdd� �Zejdd� �Zejdd� �Zejdd� �Zejdd � �Zejd d � �Zejd d � �Zejd!d"� �Zejd#d$� �Zejd%d&� �Zejd'd(� �Zd)S )*� OCSPResponsec C s dS )zm
The status of the response. This is a value from the OCSPResponseStatus
enumeration
Nr rs r r r rn W s z OCSPResponse.response_statusc C s dS )zA
The ObjectIdentifier of the signature algorithm
Nr rs r r r �signature_algorithm_oid^ s z$OCSPResponse.signature_algorithm_oidc C s dS )zX
Returns a HashAlgorithm corresponding to the type of the digest signed
Nr rs r r r �signature_hash_algorithmd s z%OCSPResponse.signature_hash_algorithmc C s dS )z%
The signature bytes
Nr rs r r r � signaturej s zOCSPResponse.signaturec C s dS )z+
The tbsResponseData bytes
Nr rs r r r �tbs_response_bytesp s z OCSPResponse.tbs_response_bytesc C s dS )z�
A list of certificates used to help build a chain to verify the OCSP
response. This situation occurs when the OCSP responder uses a delegate
certificate.
Nr rs r r r ri v s zOCSPResponse.certificatesc C s dS )z2
The responder's key hash or None
Nr rs r r r �responder_key_hash~ s z OCSPResponse.responder_key_hashc C s dS )z.
The responder's Name or None
Nr rs r r r �responder_name� s zOCSPResponse.responder_namec C s dS )z4
The time the response was produced
Nr rs r r r � produced_at� s zOCSPResponse.produced_atc C s dS )zY
The status of the certificate (an element from the OCSPCertStatus enum)
Nr rs r r r �certificate_status� s z OCSPResponse.certificate_statusc C s dS )z^
The date of when the certificate was revoked or None if not
revoked.
Nr rs r r r rY � s z OCSPResponse.revocation_timec C s dS )zi
The reason the certificate was revoked or None if not specified or
not revoked.
Nr rs r r r rZ � s z OCSPResponse.revocation_reasonc C s dS )z�
The most recent time at which the status being indicated is known by
the responder to have been correct
Nr rs r r r rW � s zOCSPResponse.this_updatec C s dS )zC
The time when newer information will be available
Nr rs r r r rX � s zOCSPResponse.next_updatec C s dS rr r rs r r r rt � s z OCSPResponse.issuer_key_hashc C s dS ru r rs r r r rv � s z OCSPResponse.issuer_name_hashc C s dS rw r rs r r r rx � s zOCSPResponse.hash_algorithmc C s dS ry r rs r r r rz � s zOCSPResponse.serial_numberc C s dS )zR
The list of response extensions. Not single response extensions.
Nr rs r r r r9 � s zOCSPResponse.extensionsc C s dS )zR
The list of single response extensions. Not response extensions.
Nr rs r r r �single_extensions� s z OCSPResponse.single_extensionsN)r r
r r| r} rn r� r� r� r� ri r� r� r� r� rY rZ rW rX rt rv rx rz r9 r� r r r r r U sP
r )(�
__future__r r r r| rL �enumr �six� cryptographyr � cryptography.hazmat.primitivesr �cryptography.x509.baser r r
�SHA1�SHA224�SHA256�SHA384�SHA512�
_OIDS_TO_HASHr r �_RESPONSE_STATUS_TO_ENUMr$ r' r( �_CERT_STATUS_TO_ENUMr/ r2 �objectr3 rK r[ �
add_metaclass�ABCMetarq r r r r r �<module> sD � � %Fp
&