o Th]m @s&ddlmZddlZddlZddlZddlZddlZddlmZddl m Z ddl m Z ddlmZddlmZmZmZmZmZmZmZmZddlmZmZdd lmZmZmZm Z dd l!m"Z"m#Z#dd l$m%Z%ed d d Z&ej'ej(ej)ej*ej+ej,ej-ej.ej/fZ0Gddde1Z2d:ddZ3d;ddZ4de j=Gd-d.d.e=Z?e j@Z@e jAZAe jBZBe jCZCe jDZDe jEZEe jFZFe jGZGe jHZHGd/d0d0ZIGd1d2d2ZJGd3d4d4ZKGd5d6d6ZLd=d8d9ZMdS)>) annotationsN)Iterable)utils)x509)hashes)dsaeced448ed25519paddingrsax448x25519) CertificateIssuerPrivateKeyTypesCertificatePublicKeyTypes) Extension Extensions ExtensionType_make_sequence_methods)Name _ASN1Type)ObjectIdentifiericeZdZd fdd ZZS) AttributeNotFoundmsgstroidrreturnNonect|||_dSN)super__init__r)selfrr __class__V/home/air/segue/gpt/backup/venv/lib/python3.10/site-packages/cryptography/x509/base.pyr#9  zAttributeNotFound.__init__)rrrrrr__name__ __module__ __qualname__r# __classcell__r'r'r%r(r8r extensionExtension[ExtensionType] extensionslist[Extension[ExtensionType]]rrcCs"|D] }|j|jkrtdqdS)Nz$This extension has already been set.)r ValueError)r0r2er'r'r(_reject_duplicate_extension>s  r6rr attributes0list[tuple[ObjectIdentifier, bytes, int | None]]cCs$|D] \}}}||krtdqdS)Nz$This attribute has already been set.)r4)rr7attr_oid_r'r'r(_reject_duplicate_attributeHs r;timedatetime.datetimecCs6|jdur|}|r |nt}|jdd|S|S)zNormalizes a datetime to a naive datetime in UTC. time -- datetime to normalize. Assumed to be in UTC if not timezone aware. Ntzinfo)r? utcoffsetdatetime timedeltareplace)r<offsetr'r'r(_convert_to_naive_utc_timeRs rEc@sXeZdZejjfdd d Zedd d Zedd dZdddZ dddZ dddZ dS) Attributerrvaluebytes_typeintrrcC||_||_||_dSr!)_oid_valuerI)r$rrGrIr'r'r(r#a zAttribute.__init__cC|jSr!)rLr$r'r'r(rkz Attribute.oidcCrOr!)rMrPr'r'r(rGorQzAttribute.valuercCsd|jd|jdS)Nz)rrGrPr'r'r(__repr__szAttribute.__repr__otherobjectboolcCs2t|tstS|j|jko|j|jko|j|jkSr!) isinstancerFNotImplementedrrGrI)r$rUr'r'r(__eq__vs    zAttribute.__eq__cCst|j|j|jfSr!)hashrrGrIrPr'r'r(__hash__szAttribute.__hash__N)rrrGrHrIrJrr)rr)rrHrr)rUrVrrWrrJ) r+r,r-r UTF8StringrGr#propertyrrSrZr\r'r'r'r(rF`s      rFc@s8eZdZdddZed\ZZZdd d ZdddZ dS) Attributesr7Iterable[Attribute]rrcCst||_dSr!)list _attributes)r$r7r'r'r(r#szAttributes.__init__rdrcCsd|jdS)Nz )r~rCrAtimezoneutcrPr'r'r(rusz*_RawRevokedCertificate.revocation_date_utccCrOr!)rrPr'r'r(r2rQz!_RawRevokedCertificate.extensionsN)rrrJrtr=r2rr^rvrw) r+r,r-r#r`rrrtrur2r'r'r'r(r{s    r{c@sXeZdZdggfd,dd Zd-d dZd.ddZddd/ddZ d0dddd1d*d+ZdS)2 CertificateSigningRequestBuilderN subject_name Name | Noner2r3r7r8cCs||_||_||_dS)zB Creates an empty X.509 certificate request (v1). N) _subject_namerrd)r$rr2r7r'r'r(r#s  z)CertificateSigningRequestBuilder.__init__namerrcCs4t|ts td|jdurtdt||j|jS)zF Sets the certificate requestor's distinguished name. Expecting x509.Name object.N&The subject name may only be set once.)rXr TypeErrorrr4rrrdr$rr'r'r(r s   z-CertificateSigningRequestBuilder.subject_nameextvalrcriticalrWcCsFt|ts tdt|j||}t||jt|jg|j||j S)zE Adds an X.509 extension to the certificate request. "extension must be an ExtensionType) rXrrrrr6rrrrdr$rrr0r'r'r( add_extensions   z.CertificateSigningRequestBuilder.add_extension)_tagrrrGrHr_ASN1Type | NonecCs~t|ts tdt|tstd|durt|tstdt||j|dur-|j}nd}t|j |j g|j|||fS)zK Adds an X.509 attribute with an OID and associated value. zoid must be an ObjectIdentifierzvalue must be bytesNztag must be _ASN1Type) rXrrrHrr;rdrGrrr)r$rrGrtagr'r'r( add_attribute's   z.CertificateSigningRequestBuilder.add_attribute rsa_paddingecdsa_deterministic private_keyr algorithm_AllowedHashTypes | Nonebackend typing.Anyr%padding.PSS | padding.PKCS1v15 | Noner bool | NoneCertificateSigningRequestcCsv|jdur td|dur$t|tjtjfstdt|tjs$td|dur2t|t j s2tdt |||||S)zF Signs the request using the requestor's private key. Nz/A CertificateSigningRequest must have a subjectPadding must be PSS or PKCS1v15&Padding is only supported for RSA keys1Deterministic ECDSA is only supported for EC keys) rr4rXr PSSPKCS1v15rr RSAPrivateKeyrEllipticCurvePrivateKey rust_x509create_x509_csrr$rrrrrr'r'r(signGs&   z%CertificateSigningRequestBuilder.sign)rrr2r3r7r8)rrrr)rrrrWrr)rrrGrHrrrrr!) rrrrrrrrrrrr)r+r,r-r#rrrrr'r'r'r(rs $rc@seZdZUded<ddddddgfd;ddZddd Zd?d#d$Z d?d%d&Z d@d+d,Z dAddd-dBd9d:Z dS)CCertificateBuilderr3rN issuer_namerr public_key CertificatePublicKeyTypes | Nonerr int | Nonenot_valid_beforedatetime.datetime | Nonenot_valid_afterr2rrcCs6tj|_||_||_||_||_||_||_||_ dSr!) rjrm_version _issuer_namer _public_keyr}_not_valid_before_not_valid_afterr)r$rrrrrrrr2r'r'r(r#ns  zCertificateBuilder.__init__rrcCsDt|ts td|jdurtdt||j|j|j|j |j |j S)z3 Sets the CA's distinguished name. rN%The issuer name may only be set once.) rXrrrr4rrrr}rrrrr'r'r(rs  zCertificateBuilder.issuer_namecCsDt|ts td|jdurtdt|j||j|j|j |j |j S)z: Sets the requestor's distinguished name. rNr) rXrrrr4rrrr}rrrrr'r'r(rs  zCertificateBuilder.subject_namekeyrc Cs`t|tjtjtjtjt j t j t jfstd|jdur tdt|j|j||j|j|j|jS)zT Sets the requestor's public key (as found in the signing request). zExpecting one of DSAPublicKey, RSAPublicKey, EllipticCurvePublicKey, Ed25519PublicKey, Ed448PublicKey, X25519PublicKey, or X448PublicKey.Nz$The public key may only be set once.)rXr DSAPublicKeyr RSAPublicKeyrEllipticCurvePublicKeyr Ed25519PublicKeyr Ed448PublicKeyrX25519PublicKeyr X448PublicKeyrrr4rrrr}rrr)r$rr'r'r(rs2  zCertificateBuilder.public_keynumberrJcCsht|ts td|jdurtd|dkrtd|dkr$tdt|j|j|j ||j |j |j S)z5 Sets the certificate serial number. 'Serial number must be of integral type.N'The serial number may only be set once.rz%The serial number should be positive.3The serial number should not be more than 159 bits.) rXrJrr}r4 bit_lengthrrrrrrrr$rr'r'r(rrs&   z CertificateBuilder.serial_numberr<r=cCszt|tjs td|jdurtdt|}|tkrtd|jdur-||jkr-tdt|j |j |j |j ||j|j S)z7 Sets the certificate activation time. Expecting datetime object.Nz*The not valid before may only be set once.z>The not valid before date must be on or after 1950 January 1).zBThe not valid before date must be before the not valid after date.)rXrArrr4rE_EARLIEST_UTC_TIMErrrrrr}rr$r<r'r'r(rs,  z#CertificateBuilder.not_valid_beforecCszt|tjs td|jdurtdt|}|tkrtd|jdur-||jkr-tdt|j |j |j |j |j||j S)z7 Sets the certificate expiration time. rNz)The not valid after may only be set once.zsp     (    $ "pI