ó
Àb‹Xc @` s d d l m Z m Z m Z d d l Z d d l Z d d l Z d d l Z d d l m Z m
Z
d d l m Z m
Z
m Z d d l m Z m Z m Z d „ Z d „ Z d „ Z d „ Z d
„ Z d „ Z d „ Z d
„ Z d „ Z d „ Z d „ Z d „ Z d „ Z d „ Z d „ Z! d „ Z" d „ Z# d „ Z$ d „ Z% d „ Z& d „ Z' d „ Z( d „ Z) d „ Z* d „ Z+ d „ Z, d „ Z- d! „ Z. i d" e
j/ j0 6d# e
j/ j1 6d$ e
j/ j2 6d% e
j/ j3 6d& e
j/ j4 6d' e
j/ j5 6d( e
j/ j6 6d) e
j/ j7 6Z8 d* „ Z9 d+ „ Z: d, „ Z; d- „ Z< i e' e j= 6e+ e j> 6e% e j? 6e* e j@ 6e* e jA 6e. e jB 6e& e jC 6e e jD 6e( e jE 6e9 e jF 6e e jG 6e$ e jH 6e: e jI 6e; e jJ 6ZK i e* e jA 6e& e jC 6e( e jE 6e e jL 6ZM i e* e jN 6e e jO 6e e jP 6ZQ d S(. i ( t absolute_importt divisiont print_functionN( t utilst x509( t _CRL_ENTRY_REASON_ENUM_TO_CODEt _DISTPOINT_TYPE_FULLNAMEt _DISTPOINT_TYPE_RELATIVENAME( t CRLEntryExtensionOIDt ExtensionOIDt NameOIDc C` sb | j | ƒ } | j j | | j j ƒ } | j j | | j j ƒ } | j | | j j k ƒ | S( s
Converts a python integer to an ASN1_INTEGER. The returned ASN1_INTEGER
will not be garbage collected (to support adding them to structs that take
ownership of the object). Be sure to register it for GC if it will be
discarded after use.
( t
_int_to_bnt _ffit gct _libt BN_freet BN_to_ASN1_INTEGERt NULLt openssl_assert( t backendt xt i( ( sV /usr/lib64/python2.7/site-packages/cryptography/hazmat/backends/openssl/encode_asn1.pyt _encode_asn1_int s
c C` s. t | | ƒ } | j j | | j j ƒ } | S( N( R R R
R t ASN1_INTEGER_free( R R R ( ( sV /usr/lib64/python2.7/site-packages/cryptography/hazmat/backends/openssl/encode_asn1.pyt _encode_asn1_int_gc* s c C` s> | j j ƒ } | j j | | | ƒ } | j | d k ƒ | S( s@
Create an ASN1_OCTET_STRING from a Python byte string.
i ( R t ASN1_OCTET_STRING_newt ASN1_OCTET_STRING_setR ( R t datat lengtht st res( ( sV /usr/lib64/python2.7/site-packages/cryptography/hazmat/backends/openssl/encode_asn1.pyt _encode_asn1_str0 s c C` sV | j j ƒ } | j j | | j d ƒ t | j d ƒ ƒ ƒ } | j | d k ƒ | S( s³
Create an ASN1_UTF8STRING from a Python unicode string.
This object will be an ASN1_STRING with UTF8 type in OpenSSL and
can be decoded with ASN1_STRING_to_UTF8.
t utf8i ( R t ASN1_UTF8STRING_newt ASN1_STRING_sett encodet lenR ( R t stringR R ( ( sV /usr/lib64/python2.7/site-packages/cryptography/hazmat/backends/openssl/encode_asn1.pyt _encode_asn1_utf8_str: s
'c C` s1 t | | | ƒ } | j j | | j j ƒ } | S( N( R R R
R t ASN1_OCTET_STRING_free( R R R R ( ( sV /usr/lib64/python2.7/site-packages/cryptography/hazmat/backends/openssl/encode_asn1.pyt _encode_asn1_str_gcH s c C` s t | | j ƒ S( N( R t
skip_certs( R t inhibit_any_policy( ( sV /usr/lib64/python2.7/site-packages/cryptography/hazmat/backends/openssl/encode_asn1.pyt _encode_inhibit_any_policyN s c C` sœ | j j ƒ } x† | j D]{ } d } xl | D]d } t | | ƒ } | j j | | j j ƒ } | j j | | d | ƒ } | j | d k ƒ d } q, Wq W| S( sP
The X509_NAME created will not be gc'd. Use _encode_name_gc if needed.
i iÿÿÿÿi ( R t
X509_NAME_newt rdnst _encode_name_entryR R
t X509_NAME_ENTRY_freet X509_NAME_add_entryR ( R t namet subjectt rdnt set_flagt attributet
name_entryR ( ( sV /usr/lib64/python2.7/site-packages/cryptography/hazmat/backends/openssl/encode_asn1.pyt _encode_nameR s
c C` s. t | | ƒ } | j j | | j j ƒ } | S( N( R7 R R
R t X509_NAME_free( R t
attributesR2 ( ( sV /usr/lib64/python2.7/site-packages/cryptography/hazmat/backends/openssl/encode_asn1.pyt _encode_name_gcf s c C` s[ | j j ƒ } xE | D]= } t | | ƒ } | j j | | ƒ } | j | d k ƒ q W| S( s9
The sk_X50_NAME_ENTRY created will not be gc'd.
i ( R t sk_X509_NAME_ENTRY_new_nullR. t sk_X509_NAME_ENTRY_pushR ( R R9 t stackR5 R6 R ( ( sV /usr/lib64/python2.7/site-packages/cryptography/hazmat/backends/openssl/encode_asn1.pyt _encode_sk_name_entryl s
c C` s| | j j d ƒ } t | | j j ƒ } | j t j k rH | j j } n | j j } | j j
| j j | | | d ƒ } | S( NR iÿÿÿÿ(
t valueR# t _txt2obj_gct oidt
dotted_stringR
t COUNTRY_NAMER t MBSTRING_ASCt
MBSTRING_UTF8t X509_NAME_ENTRY_create_by_OBJR R ( R R5 R? t objt typeR6 ( ( sV /usr/lib64/python2.7/site-packages/cryptography/hazmat/backends/openssl/encode_asn1.pyR. x s c C` s t | | j ƒ S( N( R t
crl_number( R RI ( ( sV /usr/lib64/python2.7/site-packages/cryptography/hazmat/backends/openssl/encode_asn1.pyt _encode_crl_number‡ s c C` sv | j j ƒ } | j | | j j k ƒ | j j | | j j ƒ } | j j | t | j ƒ } | j | d k ƒ | S( Ni (
R t ASN1_ENUMERATED_newR R R R
t ASN1_ENUMERATED_freet ASN1_ENUMERATED_setR t reason( R t
crl_reasont asn1enumR ( ( sV /usr/lib64/python2.7/site-packages/cryptography/hazmat/backends/openssl/encode_asn1.pyt _encode_crl_reason‹ s c C` se | j j | j j t j | j j ƒ ƒ ƒ } | j | | j j k ƒ | j j | | j j
ƒ } | S( N( R t ASN1_GENERALIZEDTIME_setR R t calendart timegmt invalidity_datet timetupleR R
t ASN1_GENERALIZEDTIME_free( R RU t time( ( sV /usr/lib64/python2.7/site-packages/cryptography/hazmat/backends/openssl/encode_asn1.pyt _encode_invalidity_date— s c C` s^ | j j ƒ } | j | | j j k ƒ | j j | | j j ƒ } x| D] } | j j ƒ } | j | | j j k ƒ | j j | | ƒ } | j | d k ƒ t | | j
j ƒ } | | _ | j
rJ | j j ƒ } | j | | j j k ƒ xX| j
D]M} | j j ƒ } | j | | j j k ƒ | j j | | ƒ } | j | d k ƒ t | t j ƒ r¬t | t j j ƒ | _ t | | j d ƒ t | j d ƒ ƒ ƒ | j _ qù t | t j ƒ sÄt ‚ t | t j j ƒ | _ | j j ƒ }
| j |
| j j k ƒ |
| j _ | j! r1t" | | j! ƒ |
_# n t$ | | j% ƒ |
_& qù W| | _' qJ qJ W| S( Ni t ascii(( R t sk_POLICYINFO_new_nullR R R R
t sk_POLICYINFO_freet POLICYINFO_newt sk_POLICYINFO_pusht _txt2objt policy_identifierRB t policyidt policy_qualifierst sk_POLICYQUALINFO_new_nullt POLICYQUALINFO_newt sk_POLICYQUALINFO_pusht
isinstancet sixt text_typeR t OID_CPS_QUALIFIERt pqualidR R# R$ t dt cpsurit
UserNoticet AssertionErrort OID_CPS_USER_NOTICEt USERNOTICE_newt
usernoticet
explicit_textR& t exptextt _encode_notice_referencet notice_referencet noticereft
qualifiers( R t certificate_policiest cpt policy_infot piR RA t pqist qualifiert pqit un( ( sV /usr/lib64/python2.7/site-packages/cryptography/hazmat/backends/openssl/encode_asn1.pyt _encode_certificate_policies£ sL
! c C` s¾ | d k r | j j S| j j ƒ } | j | | j j k ƒ t | | j ƒ | _ | j j ƒ } | | _ xH | j
D]= } t | | ƒ } | j j | | ƒ } | j | d k ƒ qu W| Sd S( Ni (
t NoneR R R t
NOTICEREF_newR R& t organizationt sk_ASN1_INTEGER_new_nullt noticenost notice_numbersR t sk_ASN1_INTEGER_push( R t noticet nrt notice_stackt numbert numR ( ( sV /usr/lib64/python2.7/site-packages/cryptography/hazmat/backends/openssl/encode_asn1.pyRt Õ s
c C` sA | j d ƒ } | j j | d ƒ } | j | | j j k ƒ | S( s_
Converts a Python string with an ASN.1 object ID in dotted form to a
ASN1_OBJECT.
RZ i ( R# R t OBJ_txt2objR R R ( R R1 RG ( ( sV /usr/lib64/python2.7/site-packages/cryptography/hazmat/backends/openssl/encode_asn1.pyR_ è s c C` s. t | | ƒ } | j j | | j j ƒ } | S( N( R_ R R
R t ASN1_OBJECT_free( R R1 RG ( ( sV /usr/lib64/python2.7/site-packages/cryptography/hazmat/backends/openssl/encode_asn1.pyR@ ó s c C` s t | d d ƒ S( sg
The OCSP No Check extension is defined as a null ASN.1 value embedded in
an ASN.1 string.
s i ( R( ( R t ext( ( sV /usr/lib64/python2.7/site-packages/cryptography/hazmat/backends/openssl/encode_asn1.pyt _encode_ocsp_nocheckù s c C` sø | j j } | j j ƒ } | j j | | j j ƒ } | | d | j ƒ } | j | d k ƒ | | d | j ƒ } | j | d k ƒ | | d | j ƒ } | j | d k ƒ | | d | j
ƒ } | j | d k ƒ | | d | j ƒ } | j | d k ƒ | | d | j ƒ } | j | d k ƒ | | d | j
ƒ } | j | d k ƒ | j rª| | d | j ƒ } | j | d k ƒ | | d | j ƒ } | j | d k ƒ nJ | | d d ƒ } | j | d k ƒ | | d d ƒ } | j | d k ƒ | S(
Ni i i i i i i i i ( R t ASN1_BIT_STRING_set_bitt ASN1_BIT_STRING_newR R
t ASN1_BIT_STRING_freet digital_signatureR t content_commitmentt key_enciphermentt data_enciphermentt
key_agreementt
key_cert_signt crl_signt
encipher_onlyt
decipher_only( R t key_usaget set_bitt kuR ( ( sV /usr/lib64/python2.7/site-packages/cryptography/hazmat/backends/openssl/encode_asn1.pyt _encode_key_usage s6 c C` sÈ | j j ƒ } | j | | j j k ƒ | j j | | j j ƒ } | j d k rv t | | j t
| j ƒ ƒ | _ n | j d k r t
| | j ƒ | _ n | j d k rÄ t | | j ƒ | _ n | S( N( R t AUTHORITY_KEYID_newR R R R
t AUTHORITY_KEYID_freet key_identifierR R R$ t keyidt authority_cert_issuert _encode_general_namest issuert authority_cert_serial_numberR t serial( R t authority_keyidt akid( ( sV /usr/lib64/python2.7/site-packages/cryptography/hazmat/backends/openssl/encode_asn1.pyt _encode_authority_key_identifier! s c C` sv | j j ƒ } | j j | | j j ƒ } | j r9 d n d | _ | j rr | j d k rr t | | j ƒ | _ n | S( Niÿ i (
R t BASIC_CONSTRAINTS_newR R
t BASIC_CONSTRAINTS_freet cat path_lengthR R t pathlen( R t basic_constraintst constraints( ( sV /usr/lib64/python2.7/site-packages/cryptography/hazmat/backends/openssl/encode_asn1.pyt _encode_basic_constraints9 s c C` sÈ | j j ƒ } | j | | j j k ƒ | j j | | j j ƒ } x~ | D]v } | j j ƒ } t | | j j
ƒ } t | | j ƒ } | | _
| | _ | j j | | ƒ } | j | d k ƒ qJ W| S( Ni ( R t sk_ACCESS_DESCRIPTION_new_nullR R R R
t sk_ACCESS_DESCRIPTION_freet ACCESS_DESCRIPTION_newR_ t
access_methodRB t _encode_general_namet access_locationt methodt locationt sk_ACCESS_DESCRIPTION_push( R t authority_info_accesst aiat access_descriptiont adR» t gnR ( ( sV /usr/lib64/python2.7/site-packages/cryptography/hazmat/backends/openssl/encode_asn1.pyt$ _encode_authority_information_accessG s
c C` st | j j ƒ } | j | | j j k ƒ xE | D]= } t | | ƒ } | j j | | ƒ } | j | d k ƒ q/ W| S( Ni ( R t GENERAL_NAMES_newR R R R¹ t sk_GENERAL_NAME_push( R t namest
general_namesR1 RÂ R ( ( sV /usr/lib64/python2.7/site-packages/cryptography/hazmat/backends/openssl/encode_asn1.pyR¦ [ s
c C` s. t | | ƒ } | j j | | j j ƒ } | S( N( R¦ R R
R t GENERAL_NAMES_free( R t sanRÇ ( ( sV /usr/lib64/python2.7/site-packages/cryptography/hazmat/backends/openssl/encode_asn1.pyt _encode_alt_namef s c C` s t | | j t | j ƒ ƒ S( N( R( t digestR$ ( R t ski( ( sV /usr/lib64/python2.7/site-packages/cryptography/hazmat/backends/openssl/encode_asn1.pyt _encode_subject_key_identifiern s c C` s] xM d d g D]? } | j | ƒ r
| t | ƒ } | j d ƒ t j | ƒ Sq
Wt j | ƒ S( Ns *.t .RZ ( t
startswithR$ R# t idna( R? t prefix( ( sV /usr/lib64/python2.7/site-packages/cryptography/hazmat/backends/openssl/encode_asn1.pyt _idna_encoder s
c C` s t | t j ƒ rÀ | j j ƒ } | j | | j j k ƒ | j j | _ | j j
ƒ } | j | | j j k ƒ t | j ƒ } | j j
| | t | ƒ ƒ } | j | d k ƒ | | j _ nSt | t j ƒ rU| j j ƒ } | j | | j j k ƒ | j j | _ | j j | j j j d ƒ d ƒ } | j | | j j k ƒ | | j _ n¾t | t j ƒ r¿| j j ƒ } | j | | j j k ƒ t | | j ƒ } | j j | _ | | j _ nTt | t j ƒ r½| j j ƒ } | j | | j j k ƒ t | j t j ƒ r:| j j j t j! d | j j" d ƒ } nM t | j t j# ƒ r{| j j j t j! d
| j j" d ƒ } n | j j } t$ | | t | ƒ ƒ } | j j% | _ | | j _& nVt | t j' ƒ r| j j ƒ } | j | | j j k ƒ | j j( ƒ }
| j |
| j j k ƒ | j j | j) j j d ƒ d ƒ } | j | | j j k ƒ | j j* d | j ƒ } | j j* d ƒ }
| |
d <| j j+ | j j |
t | j ƒ ƒ } | | j j k râ| j, ƒ t- d
ƒ ‚ n | |
_) | |
_ | j j. | _ |
| j _/ nt | t j0 ƒ rˆ| j j ƒ } | j | | j j k ƒ t$ | | j1 t | j1 ƒ ƒ } | j j2 | _ | | j _3 n‹ t | t j4 ƒ rþ| j j ƒ } | j | | j j k ƒ t$ | | j1 t | j1 ƒ ƒ } | j j5 | _ | | j _6 n t- d j7 | ƒ ƒ ‚ | S( Ni RZ i i i€ i s unsigned char[]s unsigned char **i s Invalid ASN.1 datas" {0} is an unknown GeneralName typeI l (8 Rf R t DNSNameR t GENERAL_NAME_newR R R t GEN_DNSRH t ASN1_IA5STRING_newRÒ R? R" R$ Rk t dNSNamet RegisteredIDt GEN_RIDR RB R# t registeredIDt
DirectoryNameR7 t GEN_DIRNAMEt
directoryNamet IPAddresst ipaddresst IPv4Networkt network_addresst packedR t int_to_bytest
num_addressest IPv6NetworkR t GEN_IPADDt iPAddresst OtherNamet
OTHERNAME_newt type_idt newt
d2i_ASN1_TYPEt _consume_errorst
ValueErrort
GEN_OTHERNAMEt otherNamet
RFC822Namet _encodedt GEN_EMAILt
rfc822Namet UniformResourceIdentifiert GEN_URIt uniformResourceIdentifiert format( R R1 RÂ t ia5R? R RG t dir_nameRâ t ipaddrt
other_nameRê R t data_ptr_ptrt asn1_str( ( sV /usr/lib64/python2.7/site-packages/cryptography/hazmat/backends/openssl/encode_asn1.pyR¹ { s”
c C` sy | j j ƒ } | j j | | j j ƒ } xH | D]@ } t | | j ƒ } | j j | | ƒ } | j | d k ƒ q1 W| S( Ni ( R t sk_ASN1_OBJECT_new_nullR R
t sk_ASN1_OBJECT_freeR_ RB t sk_ASN1_OBJECT_pushR ( R t extended_key_usaget ekuRA RG R ( ( sV /usr/lib64/python2.7/site-packages/cryptography/hazmat/backends/openssl/encode_asn1.pyt _encode_extended_key_usageØ s
i i i i i i i i c
C` s | j j ƒ } | j j | | j j ƒ } xÚ| D]Ò} | j j ƒ } | j | | j j k ƒ | j rß | j j ƒ } | j | | j j k ƒ | | _ xC | j D]5 } | j j
| t | d ƒ } | j | d k ƒ q£ Wn | j r=| j j
ƒ } | j | | j j k ƒ t | _ t | | j ƒ | j _ | | _ n | j rº| j j
ƒ } | j | | j j k ƒ t | _ t | | j ƒ } | j | | j j k ƒ | | j _ | | _ n | j rÛt | | j ƒ | _ n | j j | | ƒ } | j | d k ƒ q1 W| S( Ni ( R t sk_DIST_POINT_new_nullR R
t sk_DIST_POINT_freet DIST_POINT_newR R t reasonsR’ R‘ t _CRLREASONFLAGSt full_namet DIST_POINT_NAME_newR RH R¦ R1 t fullnamet distpointt
relative_nameR R> t relativenamet
crl_issuert CRLissuert sk_DIST_POINT_push(
R t crl_distribution_pointst cdpt pointt dpt bitmaskRN R t dpnR ( ( sV /usr/lib64/python2.7/site-packages/cryptography/hazmat/backends/openssl/encode_asn1.pyt _encode_crl_distribution_pointsï s@
c C` s} | j j ƒ } | j | | j j k ƒ | j j | | j j ƒ } t | | j ƒ } | | _ t | | j
ƒ } | | _ | S( N( R t NAME_CONSTRAINTS_newR R R R
t NAME_CONSTRAINTS_freet _encode_general_subtreet permitted_subtreest permittedSubtreest excluded_subtreest excludedSubtrees( R t name_constraintst nct permittedt excluded( ( sV /usr/lib64/python2.7/site-packages/cryptography/hazmat/backends/openssl/encode_asn1.pyt _encode_name_constraints s c C` s• | j j ƒ } | j | | j j k ƒ | j j | | j j ƒ } | j d k rj t | | j ƒ | _
n | j d k r‘ t | | j ƒ | _ n | S( N(
R t POLICY_CONSTRAINTS_newR R R R
t POLICY_CONSTRAINTS_freet require_explicit_policyR R t requireExplicitPolicyt inhibit_policy_mappingt inhibitPolicyMapping( R t policy_constraintst pc( ( sV /usr/lib64/python2.7/site-packages/cryptography/hazmat/backends/openssl/encode_asn1.pyt _encode_policy_constraints) s c C` s† | d k r | j j S| j j ƒ } xV | D]N } | j j ƒ } t | | ƒ | _ | j j | | ƒ } | d k s, t ‚ q, W| Sd S( Ni (
R R R R t sk_GENERAL_SUBTREE_new_nullt GENERAL_SUBTREE_newR¹ t baset sk_GENERAL_SUBTREE_pushRn ( R t subtreest general_subtreesR1 t gsR ( ( sV /usr/lib64/python2.7/site-packages/cryptography/hazmat/backends/openssl/encode_asn1.pyR : s
(R t
__future__R R R RS Rß RÐ Rg t cryptographyR R t0 cryptography.hazmat.backends.openssl.decode_asn1R R R t cryptography.x509.oidR R R
R R R R& R( R+ R7 R: R> R. RJ RQ RY R€ Rt R_ R@ R R R¬ R´ RÃ R¦ RÊ RÍ RÒ R¹ R t ReasonFlagst key_compromiset
ca_compromiset affiliation_changedt
supersededt cessation_of_operationt certificate_holdt privilege_withdrawnt
aa_compromiseR R R% R. R t BASIC_CONSTRAINTSt SUBJECT_KEY_IDENTIFIERt KEY_USAGEt SUBJECT_ALTERNATIVE_NAMEt ISSUER_ALTERNATIVE_NAMEt EXTENDED_KEY_USAGEt AUTHORITY_KEY_IDENTIFIERt CERTIFICATE_POLICIESt AUTHORITY_INFORMATION_ACCESSt CRL_DISTRIBUTION_POINTSt INHIBIT_ANY_POLICYt
OCSP_NO_CHECKt NAME_CONSTRAINTSt POLICY_CONSTRAINTSt _EXTENSION_ENCODE_HANDLERSt
CRL_NUMBERt _CRL_EXTENSION_ENCODE_HANDLERSt CERTIFICATE_ISSUERt
CRL_REASONt INVALIDITY_DATEt$ _CRL_ENTRY_EXTENSION_ENCODE_HANDLERS( ( ( sV /usr/lib64/python2.7/site-packages/cryptography/hazmat/backends/openssl/encode_asn1.pyt <module> s
2 ]
*