/var/opt/nydus/ops/cryptography/x509/__pycache__
Edit: /var/opt/nydus/ops/cryptography/x509/__pycache__/ocsp.cpython-312.pyc (26451B)
O jKH \ d dl Z d dlZd dlZd dlmZmZ d dlmZ d dlm Z m
Z
d dl m Z d dl
mZmZmZ G d dej" Z G d d
ej" Ze j( e j* e j, e j. e j0 fZd e j4 d dfd
Z G d dej" Z G d d Z G d de j< Z G d de j< Z G d de j< Z! G d d Z" G d d Z#d e$d e fd Z%d e$d e!fd Z&y) N)utilsx509)ocsp)hashes
serialization) CERTIFICATE_PRIVATE_KEY_TYPES)_EARLIEST_UTC_TIME_convert_to_naive_utc_time_reject_duplicate_extensionc e Zd ZdZdZy)OCSPResponderEncodingzBy HashzBy NameN)__name__
__module__ __qualname__HASHNAME G/opt/nydus/tmp/pip-target-a90h98xg/lib/python/cryptography/x509/ocsp.pyr
r
s D Dr r
c $ e Zd ZdZdZdZdZdZdZy)OCSPResponseStatusr N) r r r
SUCCESSFULMALFORMED_REQUESTINTERNAL_ERROR TRY_LATER SIG_REQUIRED UNAUTHORIZEDr r r r r s! JNILLr r algorithmreturnc : t | t s t d y )Nz9Algorithm must be SHA1, SHA224, SHA256, SHA384, or SHA512)
isinstance_ALLOWED_HASHES
ValueError)r# s r _verify_algorithmr) . s! i 1 G
2r c e Zd ZdZdZdZy)OCSPCertStatusr r r N)r r r GOODREVOKEDUNKNOWNr r r r+ r+ 5 s DGGr r+ c e Zd Zdej dej dej dedej de j ej de j ej de j ej fd Z y
) _SingleResponsecertissuerr# cert_status this_update next_updaterevocation_timerevocation_reasonc t |t j rt |t j s t d t | t |t
j
s t d |%t |t
j
s t d || _ || _ || _ || _ || _
t |t s t d |t j ur| t d |vt d t |t
j
s t d t | }|t k r t d |%t |t j s t d || _ || _ || _ y )
N%cert and issuer must be a Certificatez%this_update must be a datetime objectz-next_update must be a datetime object or Nonez8cert_status must be an item from the OCSPCertStatus enumzBrevocation_time can only be provided if the certificate is revokedzDrevocation_reason can only be provided if the certificate is revokedz)revocation_time must be a datetime objectz7The revocation_time must be on or after 1950 January 1.zCrevocation_reason must be an item from the ReasonFlags enum or None)r& r Certificate TypeErrorr) datetime_cert_issuer
_algorithm _this_update _next_updater+ r- r( r
r ReasonFlags _cert_status_revocation_time_revocation_reason) selfr1 r2 r# r3 r4 r5 r6 r7 s r __init__z_SingleResponse.__init__< s $ 0 01 D$$:
CD D)$+x'8'89 CD D ": **,
KL L
# ' '+~6J
n 4 4 4 * ! !, "
ox/@/@A KLL 8 IO !33 '
!,Z!4#3#36 #
( / "3 r N)
r r r r r: r
HashAlgorithmr+ r< typingOptionalrB rG r r r r0 r0 ; s B4 B4 B4 '' B4
$ B4 &&
B4 __X%6%67B4 ):):;B4 "??4+;+;<B4r r0 c z e Zd Zeej
defd Zeej
defd Zeej
de j fd Z eej
de fd Z
ej
dej defd Zeej
dej$ fd Zy )
OCSPRequestr$ c yz3
The hash of the issuer public key
Nr rF s r issuer_key_hashzOCSPRequest.issuer_key_hash r c yz-
The hash of the issuer name
Nr rO s r issuer_name_hashz OCSPRequest.issuer_name_hash rQ r c yzK
The hash algorithm used in the issuer name and key hashes
Nr rO s r hash_algorithmzOCSPRequest.hash_algorithm rQ r c yzM
The serial number of the cert whose status is being checked
Nr rO s r
serial_numberzOCSPRequest.serial_number rQ r encodingc y)z/
Serializes the request to DER
Nr rF r[ s r public_byteszOCSPRequest.public_bytes rQ r c y)zP
The list of request extensions. Not single request extensions.
Nr rO s r
extensionszOCSPRequest.extensions rQ r N)r r r propertyabcabstractmethodbytesrP rT r rH rW intrZ r Encodingr^ r
Extensionsr` r r r rL rL s
%
4 4
s
]%;%;
DOO r rL ) metaclassc e Zd Zeej
defd Zeej
dej e
j fd Z eej
dej e j fd Zeej
de
j fd Zeej
dej e
j fd Zeej
defd Zeej
defd Zeej
dej* fd Zeej
defd
Zy ) OCSPSingleResponser$ c yzY
The status of the certificate (an element from the OCSPCertStatus enum)
Nr rO s r certificate_statusz%OCSPSingleResponse.certificate_status rQ r c yz^
The date of when the certificate was revoked or None if not
revoked.
Nr rO s r r6 z"OCSPSingleResponse.revocation_time rQ r c yzi
The reason the certificate was revoked or None if not specified or
not revoked.
Nr rO s r r7 z$OCSPSingleResponse.revocation_reason rQ r c yz
The most recent time at which the status being indicated is known by
the responder to have been correct
Nr rO s r r4 z OCSPSingleResponse.this_update rQ r c yzC
The time when newer information will be available
Nr rO s r r5 z OCSPSingleResponse.next_update rQ r c yrN r rO s r rP z"OCSPSingleResponse.issuer_key_hash rQ r c yrS r rO s r rT z#OCSPSingleResponse.issuer_name_hash rQ r c yrV r rO s r rW z!OCSPSingleResponse.hash_algorithm rQ r c yrY r rO s r rZ z OCSPSingleResponse.serial_number rQ r N)r r r ra rb rc r+ rm rI rJ r< r6 r rB r7 r4 r5 rd rP rT r rH rW re rZ r r r rj rj s
N
1B1B!C 6??43C3C#D X . . V__X->-> ?
%
4 4
s r rj c R e Zd Zeej
dej e fd Z eej
de
fd Z eej
de j fd Zeej
dej ej" fd Zeej
defd Zeej
defd Zeej
dej, e j. fd Zeej
dej e fd Zeej
dej e j4 fd
Zeej
de j8 fd Z eej
de fd Z eej
dej e j8 fd
Z eej
dej e jB fd Z"eej
de j8 fd Z#eej
dej e j8 fd Z$eej
defd Z%eej
defd Z&eej
dej" fd Z'eej
de(fd Z)eej
de jT fd Z+eej
de jT fd Z,ej
de-j\ defd Z/y) OCSPResponser$ c y)z_
An iterator over the individual SINGLERESP structures in the
response
Nr rO s r responseszOCSPResponse.responses rQ r c y)zm
The status of the response. This is a value from the OCSPResponseStatus
enumeration
Nr rO s r response_statusz OCSPResponse.response_status rQ r c y)zA
The ObjectIdentifier of the signature algorithm
Nr rO s r signature_algorithm_oidz$OCSPResponse.signature_algorithm_oid rQ r c y)zX
Returns a HashAlgorithm corresponding to the type of the digest signed
Nr rO s r signature_hash_algorithmz%OCSPResponse.signature_hash_algorithm rQ r c y)z%
The signature bytes
Nr rO s r signaturezOCSPResponse.signature rQ r c y)z+
The tbsResponseData bytes
Nr rO s r tbs_response_bytesz OCSPResponse.tbs_response_bytes rQ r c y)z
A list of certificates used to help build a chain to verify the OCSP
response. This situation occurs when the OCSP responder uses a delegate
certificate.
Nr rO s r certificateszOCSPResponse.certificates rQ r c y)z2
The responder's key hash or None
Nr rO s r responder_key_hashz OCSPResponse.responder_key_hash( rQ r c y)z.
The responder's Name or None
Nr rO s r responder_namezOCSPResponse.responder_name/ rQ r c y)z4
The time the response was produced
Nr rO s r produced_atzOCSPResponse.produced_at6 rQ r c yrl r rO s r rm z OCSPResponse.certificate_status= rQ r c yro r rO s r r6 z OCSPResponse.revocation_timeD rQ r c yrq r rO s r r7 z OCSPResponse.revocation_reasonL rQ r c yrs r rO s r r4 zOCSPResponse.this_updateT rQ r c yru r rO s r r5 zOCSPResponse.next_update\ rQ r c yrN r rO s r rP z OCSPResponse.issuer_key_hashc rQ r c yrS r rO s r rT z OCSPResponse.issuer_name_hashj rQ r c yrV r rO s r rW zOCSPResponse.hash_algorithmq rQ r c yrY r rO s r rZ zOCSPResponse.serial_numberx rQ r c y)zR
The list of response extensions. Not single response extensions.
Nr rO s r r` zOCSPResponse.extensions rQ r c y)zR
The list of single response extensions. Not response extensions.
Nr rO s r single_extensionsz OCSPResponse.single_extensions rQ r r[ c y)z0
Serializes the response to DER
Nr r] s r r^ zOCSPResponse.public_bytes rQ r N)0r r r ra rb rc rI Iteratorrj r} r r r ObjectIdentifierr rJ r rH r rd r r Listr: r r Namer r< r r+ rm r6 rB r7 r4 r5 rP rT rW re rZ rg r` r r rf r^ r r r r{ r{ s
6??+=> !3 )>)>
-- . 5
E
fkk$*:*: ; FOOE$:
:
X . .
N
1B1B!C 6??43C3C#D X . . V__X->-> ?
%
4 4
s
DOO
4??
]%;%; r r{ c
e Zd Zddg fdej ej
ej ej ej f dej ej
e
e
e ej f dej ej ej ddfdZdej dej d ej dd fd
Zd e
d e
d
e d ej dd f
dZdej dedd fdZdefdZy)OCSPRequestBuilderNrequest request_hashr` r$ c . || _ || _ || _ y N)_request
_request_hash _extensions)rF r r r` s r rG zOCSPRequestBuilder.__init__ s
)%r r1 r2 r# c $ | j | j t d t | t |t
j rt |t
j s t d t |||f| j | j S )N.Only one certificate can be added to a requestr9 )
r r r( r) r& r r: r; r r )rF r1 r2 r# s r add_certificatez"OCSPRequestBuilder.add_certificate s == $(:(:(F MN N)$$ 0 01 D$$:
CD D!
69 %t'9'94;K;K
r rT rP rZ c | j | j t d t |t s t d t
| t j d| t j d| |j t | k7 s|j t | k7 r t d t | j ||||f| j S )Nr z serial_number must be an integerrT rP z`issuer_name_hash and issuer_key_hash must be the same length as the digest size of the algorithm)
r r r( r& re r; r) r _check_bytes digest_sizelenr r )rF rT rP rZ r# s r add_certificate_by_hashz*OCSPRequestBuilder.add_certificate_by_hash s == $(:(:(F MN N-- >? ?)$
-/?@
,o> C %
"
"c/&:
: 6
" MM
y I
r extvalcriticalc t |t j s t d t j |j
|| }t
|| j t | j | j | j |gz S Nz"extension must be an ExtensionType) r& r
ExtensionTyper; Extensionoidr r r r r rF r r extensions r
add_extensionz OCSPRequestBuilder.add_extension sq &$"4"45 @A ANN6::x@ #It/?/?@! MM4--t/?/?9+/M
r c r | j | j t d t j | S )Nz*You must add a certificate before building)r r r( r create_ocsp_requestrO s r buildzOCSPRequestBuilder.build s4 == T%7%7%? IJ J''--r )r r r rI rJ Tupler r: r rH rd re r r r rG r r boolr rL r r r r r r sN
FH& LL $"2"2F4H4HH
& oo LLsF,@,@@ A
& KKt/A/A BC&
&
''
&
''
<
((
48
.{ .r r c e Zd Zdddg fdej e dej ej ej e f dej ej ej dej ej ej fdZ
dej dej d ej d
ed ej" d ej ej" d
ej ej" dej ej$ dd fdZde dej dd fdZdej* ej dd fdZdej dedd fdZded ej ej defdZe de defd Z y) OCSPResponseBuilderNresponse responder_idcertsr` c < || _ || _ || _ || _ y r ) _response
_responder_id_certsr )rF r r r r` s r rG z OCSPResponseBuilder.__init__ s" " ) %r r1 r2 r# r3 r4 r5 r6 r7 r$ c
| j t d t |||||||| } t | | j | j
| j S )Nz#Only one response per OCSPResponse.)r r( r0 r r r r )
rF r1 r2 r# r3 r4 r5 r6 r7
singleresps
r add_responsez OCSPResponseBuilder.add_response sg >> % BC C$
# KK
r r[ responder_certc | j t d t |t j s t d t |t s t d t | j ||f| j | j S )Nz!responder_id can only be set oncez$responder_cert must be a Certificatez6encoding must be an element from OCSPResponderEncoding) r r( r& r r: r; r
r r r r )rF r[ r s r r z OCSPResponseBuilder.responder_id s ) @A A.$*:*:; BC C($9:H
# NN
X & KK
r c
| j t d t | }t | dk( r t d t d |D s t d t
| j | j || j S )Nz!certificates may only be set oncer z certs must not be an empty listc 3 P K | ] }t |t j y wr )r& r r: ).0xs r
z3OCSPResponseBuilder.certificates..3 s BEq:a!1!12Es $&z$certs must be a list of Certificates)
r r( listr allr; r r r r )rF r s r r z OCSPResponseBuilder.certificates+ s} ;; " @A AU u:? >? ?BEBB BC C" NN
r r r c . t |t j s t d t j |j
|| }t
|| j t | j | j | j | j |gz S r ) r& r r r; r r r r r r r r r s r r z!OCSPResponseBuilder.add_extension< sz &$"4"45 @A ANN6::x@ #It/?/?@" NN KK { *
r private_keyc | j t d | j t d t j t
j | || S )Nz&You must add a response before signingz*You must add a responder_id before signing)r r( r r create_ocsp_responser r )rF r r# s r signzOCSPResponseBuilder.signL sT
>> ! EF F % IJ J(( ) )4i
r r c t |t s t d |t j u r t d t j |d d d S )Nz7response_status must be an item from OCSPResponseStatusz$response_status cannot be SUCCESSFUL)r& r r; r r( r r )clsr s r build_unsuccessfulz&OCSPResponseBuilder.build_unsuccessfulZ sS /+=>I
0 ; ; ; CD D(( $dKKr ) r r r rI rJ r0 r r r: r
r r r rG r rH r+ r< rB r r Iterabler r r r r{ r classmethodr r r r r r r s 6:
@DFH &///2 & oo LL))+@@ A
& v{{4+;+; <=
& KKt/A/A BC &
''
$
&&
__X%6%67
):):;
"??4+;+;<
>
-
?C?O?O
&
__T%5%56
"
((
48
2
??6#7#78
L 0
L
L
Lr r datac , t j | S r )r load_der_ocsp_requestr s r r r h s % %d ++r c , t j | S r )r load_der_ocsp_responser s r r r l s & &t ,,r )'rb r< rI cryptographyr r "cryptography.hazmat.bindings._rustr cryptography.hazmat.primitivesr r /cryptography.hazmat.primitives.asymmetric.typesr cryptography.x509.baser r
r Enumr
r SHA1SHA224SHA256SHA384SHA512r' rH r) r+ r0 ABCMetarL rj r{ r r rd r r r r r r s#
$ 3 @ EJJ
KK
MM
MM
MM
MM
!5!5
$
UZZ C4 C4L( CKK ( VA 3;; A Ha S[[ a HS. S.l{L {L|, ,+ ,- -< -r