File: //opt/alt/python37/lib/python3.7/site-packages/asn1crypto/__pycache__/crl.cpython-37.opt-1.pyc
B
��+VY? � @ sX d Z ddlmZmZmZmZ ddlZddlmZ ddl m
Z
m Z m Z m
Z
mZmZmZmZmZ ddlmZmZmZmZmZmZmZmZ G dd � d e
�Z G d
d � d e�Z G d d
� d
e�Z G dd� de�Z G dd� de�Z G dd� de �Z!G dd� de�Z"G dd� de�Z#G dd� de�Z$G dd� de�Z%G d d � d e�Z&G d d � d e�Z'G d d!� d!e�Z(dS )"z�
ASN.1 type classes for certificate revocation lists (CRL). Exports the
following items:
- CertificateList()
Other type classes are defined that help compose the types listed above.
� )�unicode_literals�division�absolute_import�print_functionN� )�SignedDigestAlgorithm) �Boolean�
Enumerated�GeneralizedTime�Integer�ObjectIdentifier�OctetBitString�ParsableOctetString�Sequence�
SequenceOf)�AuthorityInfoAccessSyntax�AuthorityKeyIdentifier�CRLDistributionPoints�DistributionPointName� GeneralNames�Name� ReasonFlags�Timec @ s e Zd Zdddd�ZdS )�VersionZv1Zv2Zv3)r r � N)�__name__�
__module__� __qualname__�_map� r r �?/opt/alt/python37/lib/python3.7/site-packages/asn1crypto/crl.pyr + s r c @ sp e Zd Zdedddd�fdeddd d
�fd edd d d
�fd
edddd�fdeddd d
�fdeddd d
�fgZdS )�IssuingDistributionPoint�distribution_point�explicitr T)�tag_type�tag�optionalZonly_contains_user_certsZimplicitr F)r$ r% �defaultZonly_contains_ca_certsr Zonly_some_reasons� Z indirect_crl� Z only_contains_attribute_certs� N)r r r r r r �_fieldsr r r r r! 3 s r! c @ s e Zd Zdddddddd�Zd S )
�TBSCertListExtensionId�issuer_alt_name�
crl_number�delta_crl_indicator�issuing_distribution_point�authority_key_identifier� freshest_crl� authority_information_access)z 2.5.29.18z 2.5.29.20z 2.5.29.27z 2.5.29.28z 2.5.29.35z 2.5.29.46z1.3.6.1.5.5.7.1.1N)r r r r r r r r r, > s r, c @ s@ e Zd ZdefdeddifdefgZdZee e e
e e e
d�ZdS ) �TBSCertListExtension�extn_id�criticalr' F�
extn_value)r5 r7 )r- r. r/ r0 r1 r2 r3 N)r r r r, r r r+ � _oid_pairr r r! r r r �
_oid_specsr r r r r4 J s
r4 c @ s e Zd ZeZdS )�TBSCertListExtensionsN)r r r r4 � _child_specr r r r r: ] s r: c @ s2 e Zd Zddddddddd d
d �
Zed d
� �ZdS )� CRLReason� unspecified�key_compromise�
ca_compromise�affiliation_changed�
superseded�cessation_of_operation�certificate_hold�remove_from_crl�privilege_withdrawn�
aa_compromise)
r r r r( r) r* � � � �
c C s ddddddddd d
d �
| j S ) a
:return:
A unicode string with revocation description that is suitable to
show to end-users. Starts with a lower case letter and phrased in
such a way that it makes sense after the phrase "because of" or
"due to".
zan unspecified reasonza compromised keyzthe CA being compromisedzan affiliation changezcertificate supersessionza cessation of operationza certificate holdzremoval from the CRLzprivilege withdrawlzthe AA being compromised)
r= r> r? r@ rA rB rC rD rE rF )�native)�selfr r r �human_friendlyo s zCRLReason.human_friendlyN)r r r r �propertyrM r r r r r< a s r< c @ s e Zd Zddddd�ZdS )�CRLEntryExtensionId�
crl_reason�hold_instruction_code�invalidity_date�certificate_issuer)z 2.5.29.21z 2.5.29.23z 2.5.29.24z 2.5.29.29N)r r r r r r r r rO � s rO c @ s: e Zd ZdefdeddifdefgZdZee e
e d�Z dS ) �CRLEntryExtensionr5 r6 r' Fr7 )r5 r7 )rP rQ rR rS N)
r r r rO r r r+ r8 r< r r
r r9 r r r r rT � s
rT c @ s e Zd ZeZdS )�CRLEntryExtensionsN)r r r rT r; r r r r rU � s rU c @ s� e Zd ZdefdefdeddifgZdZdZdZ dZ
dZ dZ dd � Z
ed
d � �Zed d
� �Zedd� �Zedd� �Zedd� �ZdS )�RevokedCertificateZuser_certificateZrevocation_date�crl_entry_extensionsr& TFNc C sh t � | _xT| d D ]H}|d j}d| }t| |�rDt| ||d j� |d jr| j�|� qW d| _dS )zv
Sets common named extensions to private attributes and creates a list
of critical extensions
rW r5 z _%s_valuer7 r6 TN)�set�_critical_extensionsrK �hasattr�setattr�parsed�add�_processed_extensions)rL � extension�name�attribute_namer r r �_set_extensions� s
z"RevokedCertificate._set_extensionsc C s | j s| �� | jS )z�
Returns a set of the names (or OID if not a known extension) of the
extensions marked as critical
:return:
A set of unicode strings
)r^ rb rY )rL r r r �critical_extensions� s
z&RevokedCertificate.critical_extensionsc C s | j dkr| �� | jS )z�
This extension indicates the reason that a certificate was revoked.
:return:
None or a CRLReason object
F)r^ rb �_crl_reason_value)rL r r r �crl_reason_value� s
z#RevokedCertificate.crl_reason_valuec C s | j dkr| �� | jS )a=
This extension indicates the suspected date/time the private key was
compromised or the certificate became invalid. This would usually be
before the revocation date, which is when the CA processed the
revocation.
:return:
None or a GeneralizedTime object
F)r^ rb �_invalidity_date_value)rL r r r �invalidity_date_value� s
z(RevokedCertificate.invalidity_date_valuec C s | j dkr| �� | jS )a
This extension indicates the issuer of the certificate in question,
and is used in indirect CRLs. CRL entries without this extension are
for certificates issued from the last seen issuer.
:return:
None or an x509.GeneralNames object
F)r^ rb �_certificate_issuer_value)rL r r r �certificate_issuer_value� s
z+RevokedCertificate.certificate_issuer_valuec C s@ | j dkr:d| _ | jr:x"| jD ]}|jdkr |j| _ P q W | j S )zi
:return:
None, or an asn1crypto.x509.Name object for the issuer of the cert
FNZdirectory_name)� _issuer_nameri r` �chosen)rL � general_namer r r � issuer_name� s
z RevokedCertificate.issuer_name)r r r r r rU r+ r^ rY rd rf rh rj rb rN rc re rg ri rm r r r r rV � s
rV c @ s e Zd ZeZdS )�RevokedCertificatesN)r r r rV r; r r r r rn s rn c @ sP e Zd Zdeddifdefdefdefdefdeddifd ed
d dd �fgZ d
S )� TbsCertList�versionr& T� signature�issuerZ this_updateZ next_updateZrevoked_certificates�crl_extensionsr# r )r$ r% r& N)
r r r r r r r rn r: r+ r r r r ro s ro c @ s e Zd ZdefdefdefgZdZdZdZ dZ
dZ dZ dZ
dZdZdZdZdZdZdd� Zedd � �Zed
d � �Zed d
� �Zedd� �Zedd� �Zedd� �Zedd� �Z edd� �Z edd� �Z edd� �Z ed d � �Z ed d � �Z!ed d!� �Z"ed"d#� �Z#ed$d%� �Z$dS )&�CertificateList�
tbs_cert_listZsignature_algorithmrq FNc C sl t � | _xX| d d D ]H}|d j}d| }t| |�rHt| ||d j� |d jr| j�|� qW d| _dS ) zv
Sets common named extensions to private attributes and creates a list
of critical extensions
ru rs r5 z _%s_valuer7 r6 TN)rX rY rK rZ r[ r\ r] r^ )rL r_ r` ra r r r rb 4 s
z CertificateList._set_extensionsc C s | j s| �� | jS )z�
Returns a set of the names (or OID if not a known extension) of the
extensions marked as critical
:return:
A set of unicode strings
)r^ rb rY )rL r r r rc F s
z#CertificateList.critical_extensionsc C s | j dkr| �� | jS )z�
This extension allows associating one or more alternative names with
the issuer of the CRL.
:return:
None or an x509.GeneralNames object
F)r^ rb �_issuer_alt_name_value)rL r r r �issuer_alt_name_valueT s
z%CertificateList.issuer_alt_name_valuec C s | j dkr| �� | jS )z�
This extension adds a monotonically increasing number to the CRL and is
used to distinguish different versions of the CRL.
:return:
None or an Integer object
F)r^ rb �_crl_number_value)rL r r r �crl_number_valueb s
z CertificateList.crl_number_valuec C s | j dkr| �� | jS )z�
This extension indicates a CRL is a delta CRL, and contains the CRL
number of the base CRL that it is a delta from.
:return:
None or an Integer object
F)r^ rb �_delta_crl_indicator_value)rL r r r �delta_crl_indicator_valuep s
z)CertificateList.delta_crl_indicator_valuec C s | j dkr| �� | jS )z�
This extension includes information about what types of revocations
and certificates are part of the CRL.
:return:
None or an IssuingDistributionPoint object
F)r^ rb �!_issuing_distribution_point_value)rL r r r � issuing_distribution_point_value~ s
z0CertificateList.issuing_distribution_point_valuec C s | j dkr| �� | jS )z�
This extension helps in identifying the public key with which to
validate the authenticity of the CRL.
:return:
None or an AuthorityKeyIdentifier object
F)r^ rb � _authority_key_identifier_value)rL r r r � authority_key_identifier_value� s
z.CertificateList.authority_key_identifier_valuec C s | j dkr| �� | jS )z�
This extension is used in complete CRLs to indicate where a delta CRL
may be located.
:return:
None or a CRLDistributionPoints object
F)r^ rb �_freshest_crl_value)rL r r r �freshest_crl_value� s
z"CertificateList.freshest_crl_valuec C s | j dkr| �� | jS )z�
This extension is used to provide a URL with which to download the
certificate used to sign this CRL.
:return:
None or an AuthorityInfoAccessSyntax object
F)r^ rb �#_authority_information_access_value)rL r r r �"authority_information_access_value� s
z2CertificateList.authority_information_access_valuec C s | d d S )z_
:return:
An asn1crypto.x509.Name object for the issuer of the CRL
ru rr r )rL r r r rr � s zCertificateList.issuerc C s | j s
dS | j d jS )z�
:return:
None or a byte string of the key_identifier from the authority key
identifier extension
NZkey_identifier)r rK )rL r r r r1 � s z(CertificateList.authority_key_identifierc C st | j dkrng | _ | jrnxV| jD ]L}|d jdkr |d }|jdkrDq |j}|�� dd� dkr | j �|� q W | j S ) z�
:return:
A list of unicode strings that are URLs that should contain either
an individual DER-encoded X.509 certificate, or a DER-encoded CMS
message containing multiple certificates
NZ
access_methodZ
ca_issuersZaccess_location�uniform_resource_identifierr � zhttp://)�_issuer_cert_urlsr� rK r` �lower�append)rL �entry�locationZurlr r r �issuer_cert_urls� s
z CertificateList.issuer_cert_urlsc C sj | j dkrdg | _ | jdk rdxH| jD ]>}|d }|jdkr:q"x$|jD ]}|jdkrB| j �|� qBW q"W | j S )z�
Returns delta CRL URLs - only applies to complete CRLs
:return:
A list of zero or more DistributionPoint objects
Nr" Zname_relative_to_crl_issuerr� )� _delta_crl_distribution_pointsr� r` rk r� )rL r" Zdistribution_point_namerl r r r � delta_crl_distribution_points� s
z-CertificateList.delta_crl_distribution_pointsc C s
| d j S )zE
:return:
A byte string of the signature
rq )rK )rL r r r rq � s zCertificateList.signaturec C s$ | j dkr t�| �� ��� | _ | j S )zf
:return:
The SHA1 hash of the DER-encoded bytes of this certificate list
N)�_sha1�hashlib�sha1�dump�digest)rL r r r r� s
zCertificateList.sha1c C s$ | j dkr t�| �� ��� | _ | j S )zi
:return:
The SHA-256 hash of the DER-encoded bytes of this certificate list
N)�_sha256r� �sha256r� r� )rL r r r r� s
zCertificateList.sha256)%r r r ro r r
r+ r^ rY rv rx rz r| r~ r� r� r� r� r� r� rb rN rc rw ry r{ r} r r� r� rr r1 r� r� rq r� r� r r r r rt s@
rt ))�__doc__Z
__future__r r r r r� Zalgosr Zcorer r r
r r r
r r r Zx509r r r r r r r r r r! r, r4 r: r< rO rT rU rV rn ro rt r r r r �<module>
s$ , ( & k