gi ,ddlmZddlZddlZddlZddlZddlZddlmZddl m Z ddl m Z ddlmZmZmZmZmZmZmZmZddlmZmZddlmZmZmZmZdd lm Z m!Z!dd l"m#Z#ejd d d Z$ejJe jLe jNe jPe jRe jTe jVe jXe jZfZ.Gd de/Z0 d(dZ1 d)dZ2d*dZ3GddZ4GddZ5GddejlZ7Gdde/Z8e jrZ9GddejtZ;e;jye jvGdde;Z=e j|Z>e j~Z?e jZ@e jZAe jZBe jZCe jZDe jZEe jZFGdd ZGGd!d"ZHGd#d$ZIGd%d&ZJd+d'ZKy),) annotationsN)utils)x509)hashes)dsaeced448ed25519paddingrsax448x25519) CertificateIssuerPrivateKeyTypesCertificatePublicKeyTypes) Extension Extensions ExtensionType_make_sequence_methods)Name _ASN1Type)ObjectIdentifieric eZdZdfd ZxZS)AttributeNotFoundc2t||||_yN)super__init__oid)selfmsgr __class__s K/var/www/openai/venv/lib/python3.12/site-packages/cryptography/x509/base.pyrzAttributeNotFound.__init__8s )r!strrrreturnNone__name__ __module__ __qualname__r __classcell__r"s@r#rr7s r$rcZ|D]&}|j|jk(stdy)Nz$This extension has already been set.)r ValueError) extension extensionses r#_reject_duplicate_extensionr3=s*  55IMM !CD Dr$c:|D]\}}}||k(s tdy)Nz$This attribute has already been set.)r/)r attributesattr_oid_s r#_reject_duplicate_attributer8Gs' %!Q s?CD D%r$c|j=|j}|r|ntj}|j d|z S|S)zNormalizes a datetime to a naive datetime in UTC. time -- datetime to normalize. Assumed to be in UTC if not timezone aware. Ntzinfo)r; utcoffsetdatetime timedeltareplace)timeoffsets r#_convert_to_naive_utc_timerBQsG  {{!!x'9'9';||4|(611 r$ceZdZejj f ddZed dZed dZd dZ d dZ d dZ y) Attributec.||_||_||_yr)_oid_value_type)r rvaluerHs r#rzAttribute.__init__`s    r$c|jSr)rFr s r#rz Attribute.oidjs yyr$c|jSr)rGrKs r#rIzAttribute.valuens {{r$c<d|jd|jdS)Nz)rrIrKs r#__repr__zAttribute.__repr__rs  (4::.CCr$ct|tstS|j|jk(xr4|j|jk(xr|j |j k(Sr) isinstancerDNotImplementedrrIrH)r others r#__eq__zAttribute.__eq__usS%+! ! HH ! * ekk) * ekk) r$cZt|j|j|jfSr)hashrrIrHrKs r#__hash__zAttribute.__hash__s TXXtzz4::677r$N)rrrIbytesrHintr&r')r&r)r&rXr&r%)rSobjectr&boolr&rY) r)r*r+r UTF8StringrIrpropertyrrOrTrWr$r#rDrD_sv ))//     D 8r$rDcDeZdZ ddZed\ZZZddZddZ y) Attributesc$t||_yr)list _attributes)r r5s r#rzAttributes.__init__s +r$rec"d|jdS)Nz ?EEr$N)r5ztyping.Iterable[Attribute]r&r'rZ)rrr&rD) r)r*r+rr__len____iter__ __getitem__rOrir`r$r#rbrbs7,., , & >%'12 2  JtY$?34 4#C)9)9:  **CC/       2d 2eS 1 2  r$ rsa_paddingc|j td|Zt|tjtj fs t dt|tjs t dtj||||S)zF Signs the request using the requestor's private key. z/A CertificateSigningRequest must have a subjectPadding must be PSS or PKCS1v15&Padding is only supported for RSA keys) rr/rQr PSSPKCS1v15rr RSAPrivateKey rust_x509create_x509_csrr private_key algorithmbackendrs r#signz%CertificateSigningRequestBuilder.signFs    %NO O  "kGKK9I9I+JK ABBk3+<+<= HII(( +y+  r$)r Name | Noner1list[Extension[ExtensionType]]r50list[tuple[ObjectIdentifier, bytes, int | None]])rrr&r)rrrr\r&r)rrrIrXrz_ASN1Type | Noner&rr) rrr_AllowedHashTypes | Noner typing.Anyr%padding.PSS | padding.PKCS1v15 | Noner&CertificateSigningRequest)r)r*r+rrrrrr`r$r#rrs%)57GI &! &3 &E &   # /3 ) ."&      *  H#  >B  5 ,   ;   # r$rceZdZUded<ddddddgf ddZddZddZ ddZddZdd Z dd Z dd Z ddd  dd Z y)CertificateBuilderrrNctj|_||_||_||_||_||_||_||_ yr) rnrq_version _issuer_namer _public_keyr_not_valid_before_not_valid_afterr)r issuer_namer public_keyrynot_valid_beforenot_valid_afterr1s r#rzCertificateBuilder.__init__bsG  ')%+!1 /%r$c t|ts td|j t dt ||j |j|j|j|j|jS)z3 Sets the CA's distinguished name. r%The issuer name may only be set once.) rQrrrr/rrrrrrrrs r#rzCertificateBuilder.issuer_nameusx$%9: :    (DE E!            " "  ! !     r$c t|ts td|j t dt |j ||j|j|j|j|jS)z: Sets the requestor's distinguished name. rr) rQrrrr/rrrrrrrrs r#rzCertificateBuilder.subject_namesx$%9: :    )EF F!            " "  ! !     r$c t|tjtjt j tjtjtjtjfs td|j t#dt%|j&|j(||j*|j,|j.|j0S)zT Sets the requestor's public key (as found in the signing request). zExpecting one of DSAPublicKey, RSAPublicKey, EllipticCurvePublicKey, Ed25519PublicKey, Ed448PublicKey, X25519PublicKey, or X448PublicKey.z$The public key may only be set once.)rQr DSAPublicKeyr RSAPublicKeyrEllipticCurvePublicKeyr Ed25519PublicKeyr Ed448PublicKeyrX25519PublicKeyr X448PublicKeyrrr/rrrrrrr)r keys r#rzCertificateBuilder.public_keys     ))(($$&&""   !     'CD D!            " "  ! !     r$c \t|ts td|j t d|dkr t d|j dk\r t dt |j|j|j||j|j|jS)z5 Sets the certificate serial number. 'Serial number must be of integral type.'The serial number may only be set once.rz%The serial number should be positive.3The serial number should not be more than 159 bits.) rQrYrrr/ bit_lengthrrrrrrrr numbers r#ryz CertificateBuilder.serial_numbers&#&EF F    *FG G Q;DE E    # %E "            " "  ! !     r$c t|tjs td|j t dt |}|t kr t d|j||jkDr t dt|j|j|j|j||j|jS)z7 Sets the certificate activation time. Expecting datetime object.z*The not valid before may only be set once.z>The not valid before date must be on or after 1950 January 1).zBThe not valid before date must be before the not valid after date.)rQr=rrr/rB_EARLIEST_UTC_TIMErrrrrrrr r@s r#rz#CertificateBuilder.not_valid_befores$ 1 1289 9  ! ! -IJ J)$/ $ $$   ,8M8M1M "               ! !     r$c t|tjs td|j t dt |}|t kr t d|j||jkr t dt|j|j|j|j|j||jS)z7 Sets the certificate expiration time. rz)The not valid after may only be set once.zB % 5% ,%  % ; %  % r$rceZdZUded<ded<dddggf ddZ ddZ ddZ dd Z dd Z dd Z ddd  dd Z y) CertificateRevocationListBuilderrrlist[RevokedCertificate]_revoked_certificatesNcJ||_||_||_||_||_yr)r _last_update _next_updaterr)r r last_update next_updater1revoked_certificatess r#rz)CertificateRevocationListBuilder.__init__Xs,(''%%9"r$ct|ts td|j t dt ||j |j|j|jS)Nrr) rQrrrr/rrrrr)r rs r#rz,CertificateRevocationListBuilder.issuer_namefsf+t,9: :    (DE E/            & &   r$crt|tjs td|j t dt |}|t kr t d|j||jkDr t dt|j||j|j|jS)Nr!Last update may only be set once.8The last update date must be on or after 1950 January 1.z9The last update date must be before the next update date.) rQr=rrr/rBrrrrrr)r rs r#rz,CertificateRevocationListBuilder.last_updateus+x'8'8989 9    (@A A0= + +J     ([4;L;L-LK 0            & &   r$crt|tjs td|j t dt |}|t kr t d|j||jkr t dt|j|j||j|jS)Nrrrz8The next update date must be after the last update date.) rQr=rrr/rBrrrrrr)r rs r#rz,CertificateRevocationListBuilder.next_updates+x'8'8989 9    (@A A0= + +J     ([4;L;L-LJ 0            & &   r$ct|ts tdt|j||}t ||j t|j|j|jg|j ||jS)zM Adds an X.509 extension to the certificate revocation list. r) rQrrrrr3rrrrrrrs r#rz.CertificateRevocationListBuilder.add_extensions &-0@A Afjj(F; #It/?/?@/          *d * *  & &   r$ct|ts tdt|j|j |j |jg|j|S)z8 Adds a revoked certificate to the CRL. z)Must be an instance of RevokedCertificate) rQrwrrrrrrr)r revoked_certificates r#add_revoked_certificatez8CertificateRevocationListBuilder.add_revoked_certificatesa -/ABGH H/             >d(( >*= >   r$rct|j td|j td|j td|Zt |t j t jfs tdt |tjs tdtj||||S)NzA CRL must have an issuer namez"A CRL must have a last update timez"A CRL must have a next update timerr) rr/rrrQr rrrr rrcreate_x509_crlrs r#rz%CertificateRevocationListBuilder.signs    $=> >    $AB B    $AB B  "kGKK9I9I+JK ABBk3+<+<= HII(( +y+  r$) rrrrrrr1rrr)rrr&r)rrr&r)rrr&r)rrrr\r&r)rrwr&rr) rrrrrrrrr&CertificateRevocationList) r)r*r+rrrrrrrrr`r$r#rrTs //33$(0404579; :  :. :. : 3 : 7 :    )   , ) 0 , ) 0 # /3 ) & #5 ) *#  >B  5 ,   ;   # r$rc\eZdZddgf ddZddZ d dZ d dZd d dZy) RevokedCertificateBuilderNc.||_||_||_yrrrs r#rz"RevokedCertificateBuilder.__init__rr$ct|ts td|j t d|dkr t d|j dk\r t dt ||j|jS)Nrrrz$The serial number should be positiverr) rQrYrrr/rrrrrs r#ryz'RevokedCertificateBuilder.serial_numbers&#&EF F    *FG G Q;CD D    # %E ) D))4+;+;  r$ct|tjs td|j t dt |}|t kr t dt|j||jS)Nrz)The revocation date may only be set once.z7The revocation date must be on or after 1950 January 1.) rQr=rrr/rBrrrrrs r#r|z)RevokedCertificateBuilder.revocation_dates}$ 1 1289 9  ,HI I)$/ $ $I )   t'7'7  r$ct|ts tdt|j||}t ||j t|j|jg|j |S)Nr) rQrrrrr3rrrrrs r#rz'RevokedCertificateBuilder.add_extensionsn&-0@A Afjj(F; #It/?/?@(     ! ! *d * *  r$c|j td|j tdt|j|jt |j S)Nz/A revoked certificate must have a serial numberz1A revoked certificate must have a revocation date)rr/rrrr)r rs r#buildzRevokedCertificateBuilder.build se    &NO O  (C &     ! ! t'' (  r$)ryrr|rr1r)rrYr&r)r@rr&r)rrrr\r&rr)rrr&rw)r)r*r+rryr|rr r`r$r#rrsj%)4857 &!&2&3 & $ % "  #  /3  "    r$rcZtjtjdddz S)Nbigr)rY from_bytesosurandomr`r$r#random_serial_numberr.s >>"**R.% 0A 55r$)r0zExtension[ExtensionType]r1rr&r')rrr5rr&r')r@rr&rr])L __future__rrr=rtypingr cryptographyr"cryptography.hazmat.bindings._rustrrcryptography.hazmat.primitivesr)cryptography.hazmat.primitives.asymmetricrrr r r r r r/cryptography.hazmat.primitives.asymmetric.typesrrcryptography.x509.extensionsrrrrcryptography.x509.namerrcryptography.x509.oidrrUnionSHA224SHA256SHA384SHA512SHA3_224SHA3_256SHA3_384SHA3_512_AllowedHashTypes Exceptionrr3r8rBrDrbEnumrnrsrABCMetarwregisterrrrload_pem_x509_certificateload_der_x509_certificateload_pem_x509_certificatesload_pem_x509_csrload_der_x509_csrload_pem_x509_crlload_der_x509_crlrrrrrr`r$r#r4s" #  @1    32&X&&tQ2LL MM MM MM MM OO OO OO OO   E'E.E EE E@E E !8!8HFF( ejj -Y- ##  3;; @I889 / D&??%??&??%??&AA////////b b Jr r jN N bF F R6r$