jTP ddlZddlZddlmZddlmZddlmZmZmZm Z m Z m Z m Z m Z mZmZmZmZmZmZmZddlmZmZmZmZmZddlmZddlmZddlm Z m!Z!m"Z"m#Z#m$Z$m%Z%m&Z&m'Z'm(Z(m)Z)dd l*m+Z+dd l,m-Z-m.Z.m/Z/dd l0m1Z1dd l2m3Z3m4Z4m5Z5m6Z6m7Z7m8Z8m9Z9m:Z:dd l;mZ>ddl?m@Z@ddlAmBZBmCZCmDZDddlEmFZFddlGmHZHmIZIddlJmKZKddlLmMZMddlNmOZOmPZPddlQmRZRddlSmTZTddlUmVZVmWZWmXZXmYZYmZZZm[Z[m\Z\ddl]m^Z^m_Z_m`Z`gdZaejbecZdedeZZed ejfd!eejgejhdffd"Zid#ejfd$Zkd%ejld ejffd&Zmd'ejfd(ejnd)eejod*eejpfd+Zq ded,ejrd%ejld-e_d.eefd/Zs ded,ejrd%ejld0etd1eud2eeDd!eejejff d3Zvd4ejwd!e$fd5Zx dfd4ejwd6eeud7ee.d8eeyd9ee>d:ee@d;ee_de1fd?Z{ ded%ejld7e.dd:ee@d!dAf dBZ|edddddCd4ejwdDeeed6eeud7ee.d8eeyd>> Kr^c4|rdnd}|r tjn tj} t||}||S#t $rYdSt$r(}tj }tj d||d}~wwxYw)Nsigning_certificate_v2signing_certificatez3Wrong cardinality for signing certificate attributeades_subindication) rSigningCertificateV2SigningCertificater$loaddumprrr@NO_SIGNING_CERTIFICATE_FOUNDrBSignatureValidationError)r[r^ attr_nameclsvalueeerrs rar_r_{s-/I((4II&( D# " "c.DC), BBxx %%% $tt $<- A"    s6A B& B/#BBcertct|}|dS|dd}t||s0tj}t jd|jjd|dS)NcertsrzWSigning certificate attribute does not match selected signer's certificate for subject"z".rf)rUr r@rlrBrmsubjecthuman_friendly)rsr[r`certidrrs ra_check_signing_certificaterys ! . .D |']1 F D& ) ) <- 2, 2 2 2 #       rbattrsclaimed_digest_algorithm_objclaimed_signature_algorithm_objclaimed_mac_algorithm_objc t|d}n*#t$rd}Ynt$rtdwxYw||dj}||jkrt jd|B|dj}|t jd||jkrt jd|D|d j}|t jd ||jkrt jd dSdSdS) a Internal API to validate the CMS algorithm protection attribute defined in :rfc:`6211`, if present. :param attrs: A CMS attribute list. :param claimed_digest_algorithm_obj: The claimed (i.e. unprotected) digest algorithm value. :param claimed_signature_algorithm_obj: The claimed (i.e. unprotected) signature algorithm value. :param claimed_mac_algorithm_obj: The claimed (i.e. unprotected) MAC algorithm value. :raises errors.CMSStructuralError: if multiple CMS protection attributes are present :raises errors.CMSAlgorithmProtectionError: if a mismatch is detected cms_algorithm_protectionNz4Multiple CMS algorithm protection attributes presentdigest_algorithmzCDigest algorithm does not match CMS algorithm protection attribute.signature_algorithmzAAA AC- .@    1IIJ    ;1+>E ; ; ;   - 9 D2ADDD DC- 1C    /II*!1; 2MNNJ  --<*<      rbexpected_content_type actual_digest sig_validatorc |d}|d}|dj}|dj}|d} | tjurd} d} |} nL|d} | } d} t | ||d nn#t $r*}tj|j tj d}~wtj $r*}tj|j tj d}~wwxYwt||  t!| d }n5#t"t$f$r!tjd tj wxYw|j}||kr&tjd |d|tj t'|} |p t)}||| |j|t/|| d}n#t0$rd}YnwxYw| || kn|}||fS)a7 Validate the integrity of a signature for a particular signerInfo object inside a CMS signed data container. .. warning:: This function does not do any trust checks, and is considered "dangerous" API because it is easy to misuse. :param signer_info: A :class:`cms.SignerInfo` object. :param cert: The signer's certificate. .. note:: This function will not attempt to extract certificates from the signed data. :param expected_content_type: The expected value for the content type attribute (as a Python string, see :class:`cms.ContentType`). :param actual_digest: The actual digest to be matched to the message digest attribute. :param sig_validator: Signature validator implementing the cryptographic validation process. :return: A tuple of two booleans. The first indicates whether the provided digest matches the value in the signed attributes. The second indicates whether the signature of the digest is valid. rrr signaturer[NTF)r{r|r}rf content_typezQContent type not found in signature, or multiple content-type attributes present.z Content type z did not match expected value )contextual_md_algorithm prehashed)context)rrVOIDuntagrkrVrrBrmrr?FORMAT_FAILURErr@GENERICryr$rrrMr5validate_signaturerr6r)rrsrrrrrrrsigned_attrs_origembedded_digestr signed_datar[rqrvalidintacts rarWrW.sH6A6''9:' 4;LK(/I+6~+FDI%% # #>288:: #''))    )-A0C*.       "   1!k6P 1   1!$5#<    #4666 4nLL*+DE   1&#.#=   $* 0 0 01+ ++(++#.#=  1==%D)B)D)D ((   O .(4# )    & ((  5=sC:B C9%B==C9%C44C9 D2EAG G&%G&rc t|}|j}n.#t$r!tjdt jwxYwt|}|d}t|||S)a Extract certificates from a CMS signed data object for validation purposes, identifying the signer's certificate in accordance with ETSI EN 319 102-1, 5.2.3.4. :param signed_data: The CMS payload. :return: The extracted certificates. z,signer certificate not included in signaturerfr[) r! signer_certrrBrmr@rlr"ry)r cert_inforsrr[s rarSrSs  ,[99 $    - :0M     &k22K~.Lt\222 s +A raw_digestvalidation_context status_kwargsvalidation_pathpkix_validation_paramsalgorithm_policykey_usage_settingsc Kt|}t|} | j} | j} d} |"|pt j|j}|j} |p t}|J|t}|J|d} | dj }|ddj }|d}|dj }|bt|d}t|}tj|}|||}n4|dt"jur t'jdt*j  t/|| || dx}}nF#t&j$r4}t2d | |j}|j}Yd}~nd}~wwxYw t;|| |||j \}}n;#t>$r.}t'jd|j zt*j |d}~wwxYwdx}}|r| |j!"| |tG|g}n|j$%| }tM| ||||d{V}|j'}|j(}|j)p|j*}|j+}n?#tX$r2}t2-d| t\j/}Yd}~nd}~wwxYw|pi}d|d<|dn|j0|d<|||| |||||| |S)z Perform basic validation of CMS and PKCS#7 signatures in isolation (i.e. integrity and trust checks). Internal API. Nrrrencap_content_inforcontentzKCMS structural error: detached signatures should not have encapsulated datarf)rrz6Encountered disallowed algorithm during CMS validationexc_info)rrrzCMS structural error: )rpathsrz&Processing error in validation processqualification_resultvalidation_time) rr signing_certrpkcs7_signature_mechanismtrust_problem_indicrrevocation_detailserror_time_horizon)1r"rSr other_certsrL lift_policyrbest_signature_timer'rKrbytesr8rHashupdatefinalizerrrBrmr?rrr*loggerwarningrgrrWrrrcertificate_registryregister_multipler= path_builderasync_build_paths_lazyvalidate_cert_usageerror_subindic revo_detailssuccess_result error_pathr ValueErrorerrorr@!CERTIFICATE_CHAIN_GENERAL_FAILUREr)rrrrrrrrrrrsrrr mechanismrecirrawmd_specmd ades_statusrrqrrpathrr op_results rarPrPs3"&k22K,[99I  D'KJ%  &2"3  (; +B/@/B/B  ) ) )9  ' ' '5@6$K07I12;?FL * +C/6C N##,\:: [ ! ! #[[]] Yty ( (- *9    ,  #3!     ,0/ ((  *,,, Dq    * ^ , .  "7$,:     - $q'8 8*9    D< N$ N  3 E E    *+_,=>>*7NN2"#5'= I$2K$1L+Cy/CD!*!=   N N N LLAAL N N N+MKKKKKK N"'RM-1M()"*0B0I#$!"+''-    sI E$$F'3*F""F'+G H)G;;H BJ K (KK  service_typec|tjkrtdhfS|tjkrddhtfSttfS)N time_stampingcrl_sign key_cert_sign)r)TIME_STAMPING_AUTHORITYsetCERTIFICATE_AUTHORITY)rs ra!_service_type_implicit_key_usagesrdsX)AAAuu''' +A A AO,cee33uucee|rbrz,CertvalidatorOperationResult[ValidationPath]cpKdtffd }t|d{VS)zE Low-level certificate validation routine. Internal API. r\cKtd{V}|jdkrnK|jjj}|t jkr*t|\}}|||S)N)rrr)extra_asserted_key_usagesextra_asserted_extd_key_usages) r(pkix_lenvalidate trust_anchortrust_qualifierstrusted_service_typer) UNSPECIFIEDr) rr implicit_kus implicit_ekusrsrrrrs ra_checkz#validate_cert_usage.._checkys%4  1#9 & & &        =1    ' ' - - - -!2G 1===.O //+ m#++.:3@, rb)rscoroN)r3handle_certvalidator_errors)rsrrrrrs````` rarrmsq.:-$VVXXFFF F F F F F FFrb)rrrr status_clsc KdSN)rrrrrrs rarNrNs rbc KdSrr)rrrrrs rarNrNs crbcvK||}t||||||d{V}|di|S)a Validate a CMS signature (i.e. a ``SignedData`` object). :param signed_data: The :class:`.asn1crypto.cms.SignedData` object to validate. :param status_cls: Status class to use for the validation result. :param raw_digest: Raw digest, computed from context. :param validation_context: Validation context to validate the signer's certificate. :param status_kwargs: Other keyword arguments to pass to the ``status_class`` when reporting validation results. :param key_usage_settings: A :class:`.KeyUsageConstraints` object specifying which key usages must or must not be present in the signer's certificate. :param algorithm_policy: The algorithm usage policy for the signature validation. .. warning:: This is distinct from the algorithm usage policy used for certificate validation, but the latter will be used as a fallback if this parameter is not specified. It is nonetheless recommended to align both policies unless there is a clear reason to do otherwise. :return: A :class:`.SignatureStatus` object (or an instance of a proper subclass) )rrNr)default_usage_constraintsrP)rrrrrrreff_key_usage_settingss rarNrNsN(AA/1) M : & & & &&rbcr |d}t|d}|jS#ttf$rYdSwxYw)a Extract self-reported timestamp (from the ``signingTime`` attribute) Internal API. :param signer_info: A ``SignerInfo`` value. :return: The value of the ``signingTime`` attribute as a ``datetime``, or ``None``. r[ signing_timeN)r$rrr)rsasts rarTrTsP  ( &r> : :y %'@ Atts !66signedc#K|r|d}t|d}n|d}t|d}|D] }|dV dS)a Extract signed data associated with one or more timestamp tokens. Internal API. :param signer_info: A ``SignerInfo`` value. :param signed: If ``True``, look for content timestamps (among the signed attributes), else look for signature timestamps (among the unsigned attributes). :return: The ``SignedData`` values found. r[content_time_stampunsigned_attrssignature_time_stamp_tokenrN)r#)rr r genuatsts raextract_tst_data_iterrst"H  (%b*>?? ) *%b*FGG)nrbc0dtdtffd }|S)N mi_hash_algor\ct|}tj|}|dj|S)Nr)get_hash_spec_for_tst_digestrrrrr)r tst_md_specrrs ra _mi_checkz*message_imprint_checker.._mi_checksG2<@@ [ % % +k*1222{{}}rb)strr)rrs` ramessage_imprint_checkerrs7 rbrcl t|S#t$r}td||d}~wwxYw)NzUnknown hash function )r8AttributeErrorr%)rrqs rarr"sT),777 ( 5\ 5 5   s 3.3ts_validation_contextcKi}t|}|||d<d}t|dD]=}t||t||d{V}t d i|}|jrn>|||d<d} t|dD]4} t| ||d{V} t d i| } | |d <| jrn5| | |d <|S) a Collect and validate timing information in a ``SignerInfo`` value. This includes the ``signingTime`` attribute, content timestamp information and signature timestamp information. :param signer_info: A ``SignerInfo`` value. :param ts_validation_context: The timestamp validation context to validate against. :param raw_digest: The raw external message digest bytes (only relevant for the validation of the content timestamp token, if there is one) :param algorithm_policy: The algorithm usage policy for the signature validation. .. warning:: This is distinct from the algorithm usage policy used for certificate validation, but the latter will be used as a fallback if this parameter is not specified. It is nonetheless recommended to align both policies unless there is a clear reason to do otherwise. Nsigner_reported_dtF)r )rtimestamp_validityT)expected_tst_imprintcontent_timestamp_validityr)rTrrXrrJtrusted) rr rrrr" tst_validitytst_signed_datatst_validity_kwargscontent_tst_validitycontent_tst_signed_datacontent_tst_validity_kwargss rarRrR+s<%'M2+>>%.@ *+7;L0UKKK  $<  ! #K 0 0- % % %        0FF2EFF    E .: *+?C#8D$$$-E # !!+- - - ' ' ' ' ' ' # 8  )  7K 23  '  E '6J 23 rbr(r$cfKd}|dd}t|tjr|j}t|tjs t jdtj |dj }tj }t||d|i||d{V}|d d j } |d d d j } || } | | krJtd | d| dd|d<|S)a Validate the ``SignedData`` of a time stamp token. :param tst_signed_data: The ``SignedData`` value to validate; must encapsulate a ``TSTInfo`` value. :param validation_context: The validation context to validate against. :param expected_tst_imprint: A callable that takes a hash algorithm names and returns a digest value. detailing the expected message imprint value that should be contained in the encapsulated ``TSTInfo``. :param algorithm_policy: The algorithm usage policy for the signature validation. .. warning:: This is distinct from the algorithm usage policy used for certificate validation, but the latter will be used as a fallback if this parameter is not specified. It is nonetheless recommended to align both policies unless there is a clear reason to do otherwise. :return: Keyword arguments for a :class:`.TimeStampSignatureStatus`. Nrrz'SignedData does not encapsulate TSTInforfgen_time timestamp)rrrrmessage_imprinthashed_messagehash_algorithmrzTimestamp token imprint is z, but expected rFr) isinstancerParsableOctetStringparsedrTSTInforBrmr?rrrJrrPrrhex) r(rr$rtst_infotst_info_bytesr/ ku_settingsr tst_imprinttst_algoexpected_tst_imprint_values rarXrXvs@H$%9:9EN.$":;;)!( h , , - 5*9    $+I*DFFK.-"I.&) M,-.>?FK)*+;<[IPH!5!5h!?!?![00 3+//*;*; 3 3)--// 3 3 3   #( h rbacsrcKfd|D}g}g}tj|D]R} ||d{V#ttt f$r}|j|Yd}~Kd}~wwxYw||fS)Nc4g|]}t|S)) holder_cert)r:).0acrrs ra z+process_certified_attrs..s9     "0kJJJ   rb)asyncio as_completedappendr-r.r,)r>rrjobsresultsrBjobrqs `` raprocess_certified_attrsrKs        DG F#D))  NN999999 % % % %   #     FM!           F?sA  A<"A77A<sd_attr_certificatessd_signed_attrscK t|d}nM#t$rd}Yn?t$r3}tjt |t j|d}~wwxYwi}d}d}||d} tj t| tj s| nd} |d} d} t| tj sJd| D} t| t| k} |t| ||}|d{V\}}|tj|}nd}| p t|dtj  }||rt"d t'| ||| |d <|dt|||d{V\}}|r|||r||tj||d <||d <|S)Nsigner_attributes_v2rfclaimed_attributesrcertified_attributes_v2Fc2g|]}|jdk |jS) attr_cert)namechosen)rBr`s rarDz.collect_signer_attr_status..s19 ++ +++rbsigned_assertionszCAdES signer attributes with externally certified assertions for which no validation method is available. This may affect signature semantics in unexpected ways.) claimed_attrscertified_attrsac_validation_errsunknown_attrs_presentcades_signer_attrsac_attrsrY)r$rrrBrmrr?rrF from_iterabler3rVoidlenrKrE from_resultsrrrDextend)rLrrrM signer_attrsrqresultcades_ac_resultscades_ac_errors claimed_asn1claimedcertified_asn1unknown_cert_attrs cades_acsval_job certified unknown_attrs ac_results ac_errorss rarQrQs 0 3   % $- FF{'A      FO#$89 $1 *< C C KLL  &&?@".$)44 B*I "%Y3~3F3F!F !-1& ;BMMMMMM1 /  ',89IJJIII + * , -ty3 3 /   )m ) NN:   (F!%."/ ( ( ( #$%'> +/A' ' ! ! ! ! ! !  I  0   . / / /  .   _ - - -0=jIIz'0#$ Ms A A.AA input_datasigner_validation_contextac_validation_contextc "K||}t|} idtdtffd } | ddj} | | } t | || |d{V} t j|}t|| || ||d{V} t|}||j |j | t|j|j|| d d{Vt d i| S) a .. versionadded: 0.9.0 .. versionchanged: 0.11.0 Added ``ac_validation_context`` param. Validate a detached CMS signature. :param input_data: The input data to sign. This can be either a :class:`bytes` object, a file-like object or a :class:`cms.ContentInfo` / :class:`cms.EncapsulatedContentInfo` object. If a CMS content info object is passed in, the `content` field will be extracted. :param signed_data: The :class:`cms.SignedData` object containing the signature to verify. :param signer_validation_context: Validation context to use to verify the signer certificate's trust. :param ts_validation_context: Validation context to use to verify the TSA certificate's trust, if a timestamp token is present. By default, the same validation context as that of the signer is used. :param ac_validation_context: Validation context to use to validate attribute certificates. If not supplied, no AC validation will be performed. .. note:: :rfc:`5755` requires attribute authority trust roots to be specified explicitly; hence why there's no default. :param algorithm_policy: The algorithm usage policy for the signature validation. .. warning:: This is distinct from the algorithm usage policy used for certificate validation, but the latter will be used as a fallback if this parameter is not specified. It is nonetheless recommended to align both policies unless there is a clear reason to do otherwise. :param key_usage_settings: Key usage parameters for the signer. :param chunk_size: Chunk size to use when consuming input data. :param max_read: Maximal number of bytes to read from the input stream. :return: A description of the signature's status. Nrr\c |S#t$rYnwxYwtjt|}t t r|nvt tjtj fr)|t dn't}tj ||| }||<|S)Nr)max_read)KeyErrorrrr8r3rrr ContentInfoEncapsulatedContentInfo bytearrayr<chunked_digestr)rhtemp_bufrc chunk_sizedigest_by_algorprus ra_content_digestz4async_validate_detached_cms.._content_digest{s !"23 3    D  K23CDD E E j% ( ( L HHZ  #*EF   L HHU:i011 2 2 2 2 ,,H  *a( K K K K+1'( s  r)r rr)rrrrrr[)rLrrrMr)r"rrrrRrIrrPr!rrrrrQattribute_certsr)rprrqr rrrrr}rurrsignature_digest_algo digest_bytesrrr~s` `` @rarOrO9sz$ 9%k22K')N#%&((:;KHO"?#899L-3") M 4M/4#-) M)55I(2DD  !   (!*!:!-4'7           & 6 6 6 66rb ResultTypeT) covariant)frozenceZdZUdZeeed<dZeeed<dZ ee ed<dZ ee ed<dZ eeed<dS)CertvalidatorOperationResultzB Internal class to inspect error data from certvalidator. rNrrrr)__name__ __module__ __qualname____doc__rr__annotations__rrGrrrr3rr@rrbrarrsZ((((04L(,-444-1*111+/J(///26NH./66666rbrrcBKdtffd }d}dx}} t|d{VS#t$r"}||tj}Yd}~n8d}~wt $r"}||tj}Yd}~nd}~wt$r)}||tj}|j }Yd}~nd}~wt$rD}|||j }|j tj }ntj}|j }Yd}~nd}~wt$r}|j }|||j}|jr tj}nX|jr)tj}t+d|j|j}n(tj}t+d|j|j}Yd}~nd}~wt0$r?}t2djj| tj}Yd}~nd}~wt<$rJ}|j }|||j}|js|jr tj }n tj}Yd}~nad}~wtB$r(}|j }||tj}Yd}~n1d}~wt$r!}||tj}Yd}~nd}~wwxYwtd|||| S) zi Internal error handling function that maps certvalidator errors to AdES status indications. rqcndjjd|j}t||dS)Nz Validation error [cert context: z]: r)rvrw failure_msgrr)rqrrss ra_warnz*handle_certvalidator_errors.._warnsL |*  }   sQ'''''rbN)rF) ca_revokedrevocation_daterevocation_reasonTzFailed to build path for r)rrrrr)"r1rr,r@CHAIN_CONSTRAINTS_FAILUREr2NO_POEr0 TRY_LATER time_cutoffr* original_path banned_sinceCRYPTO_CONSTRAINTS_FAILURE!CRYPTO_CONSTRAINTS_FAILURE_NO_POEr/ revocation_dtis_side_validationr is_ee_certREVOKED_NO_POErGreasonREVOKED_CA_NO_POEr-rrrvrwNO_CERTIFICATE_CHAIN_FOUNDr+ expired_dtOUT_OF_BOUNDS_NO_POEr.)rsrrrrrrqrs` rarrst((((((((,LL4IJ+::::::FFFF "BBB a'A /// a'. %%% a(1 } # * * * a > !+FKK,MK>L  a  +MKK \ +:K, !"#(LL ,=K, !"#(L CCC E (C E E    (B  N N N a| # N  N ,@KK+MK JJJ a'I JJJ a'I J (!'"    sv. J A J "A?? J  B00 J =9C<< J  BF J  5G J 'AH,, J 9I J )JJ r)NNNNNN)rElogging dataclassesrrtypingrrrrr r r r r rrrrrr asn1cryptorrrrrcryptography.exceptionsrcryptography.hazmat.primitivesrpyhanko.sign.generalrrrrrr r!r"r#r$pyhanko.sign.validation.errorsr%pyhanko_certvalidatorr&r'r(pyhanko_certvalidator.authorityr)pyhanko_certvalidator.errorsr*r+r,r-r.r/r0r1 pyhanko_certvalidator.ltv.errorsr2pyhanko_certvalidator.pathr3!pyhanko_certvalidator.policy_declr4"pyhanko_certvalidator.sig_validater5r6r7pyhanko_certvalidator.utilr8pyhanko_certvalidator.validater9r: pdf_utilsr<pdf_utils.miscr= ades.reportr?r@rBsettingsrCstatusrDrErFrGrHrIrJutilsrKrLrM__all__ getLoggerrrrY CMSAttributesrirhrUboolr_ CertificateryrSignedDigestAlgorithm HmacAlgorithmrV SignerInforrrrW SignedDatarSdictrPrrrNrTrrrrRrXAttributeCertificateV2rKrQDEFAULT_CHUNK_SIZErwrxrOrrrrrbrars !!!!!!$32222222222222444444111111                        FEEEEE ?>>>>>                    >=====555555BBBBBB BAAAAAPPPPPPPP11111188888888))))))     8 $ $ W\ 9 9 9 # 3 !3#;T AB$d,   *-*;    2C  C"%"5C&.e.I%JC ((;< CCCCT&* ; ; ;  ; 4; " ; ; ; ; F37 FFF  FF F ./ F  4: FFFFRB#'6:$(04=A:>KKKK!!23KD> K n- K %%9: K67K,K #s(^KKKK\4F>B )G)G  )G))G,)G #> 2 )G %%9: )G 4 )G)G)G)GX #'6:$(8<Z   !!23  D> !!45  #'6:$(8< !!23  D>  !!45  "&6:$(8<:>3'3'3'3'!!23 3' D> 3' !!45 3'673'3'3'3'3'l#.Xh=O(,0s~tT)*8   seUl    s;? HHH#$56H#&H67 HHHH^;? ??^? !23?#C5%<0?67 ????D #, -!*   !#46MMN 8b"3#=>b!b!!23b& bbbbP>B9=9=8<:>& v7v7eR#2MMNv7v7 ((9:v7$$56 v7 $$56 v7 !!45 v767v7 v7v7v7v7rW\T 2 2 2  $ 7 7 7 7 77:#6 7 7 7d  d J d"*-ddddddrb