jOddlZddlmZddlmZddlmZddlmZddlm Z m Z m Z m Z m Z mZmZmZmZmZddlmZmZmZmZmZddlmZmZmZdd lmZdd lm Z d d l!m"Z"d dl#m$Z$m%Z%d dl&m'Z'm(Z(m)Z)ddl*m+Z+m,Z,ddl-m.Z.m/Z/ddl0m1Z1m2Z2ddl3m4Z4gdZ5ej6e7Z8edGddZ9edGddZ:edGdde:Z;edGddZ<edGd d!e<Z=d"ee>d#e>d$e?d%e@fd&ZAGd'd(ZBGd)d*ZCedGd+d,ZDedGd-d.ZEd/ZFd0ZGd1ZHd2ZIedGd3d4eEe:ZJeGd5d6e"ZKedGd7d8ZLedGd9d:eLeJZMedGd;deJd?e ee>e>fd@e>fdAZOdS)CN) defaultdict) dataclass)datetime)unique) AnyClassVar CollectionDictIterableListOptionalSetTupleUnion)cmscorecrlkeysx509)PathBuildingErrorPathValidationErrorValidationError)ValidationPath)ACValidationResult) OrderedEnum) AdESFailure AdESSubIndic) DiffResultModificationLevelSuspiciousModification)SignatureValidationErrorSigSeedValueValidationError)QcPrivateKeyManagementTypeQualificationResult)QTST_URI QcCertType)KeyUsageConstraints)CAdESSignerAttributeAssertionsCertifiedAttributeInfoCertifiedAttributesClaimedAttributesDocumentTimestampStatusModificationInfoPdfSignatureStatusRevocationDetailsSignatureCoverageLevelSignatureStatusSignerAttributeStatusStandardCMSSignatureStatusTimestampSignatureStatusX509AttributeInfoformat_pretty_print_detailsT)frozenc@eZdZUdZeed< eed< ejed<dS)r2zQ Contains details about a certificate revocation related to a signature. ca_revokedrevocation_daterevocation_reasonN) __name__ __module__ __qualname____doc__bool__annotations__rr CRLReasonm/var/www/finuniver-perm.ru/html/portfolio/venv/lib/python3.11/site-packages/pyhanko/sign/validation/status.pyr2r2=sV }$$$rGr2ceZdZUdZeed< eed< eeed< ej ed< e ed< e ed< ee ed< ee ed < ee ed < d hZeee ed < d Zeeee ed< ee ed< eeed< dZedefdZedefdZdde fdZe ddeedefdZede fdZd S)r4zE Class describing the validity of a (general) CMS signature. intactvalidtrust_problem_indic signing_certpkcs7_signature_mechanism md_algorithmvalidation_pathrevocation_detailserror_time_horizonnon_repudiation key_usageNextd_key_usagevalidation_timequalification_resultc#K|jrd}n |jrd}nd}|V|jr|jjjrdVdSdVdSdS)NTRUSTEDREVOKED UNTRUSTED QUALIFIED NOT_QUALIFIED)trustedrevokedrWstatus qualified)self cert_statuss rHsummary_fieldszSignatureStatus.summary_fieldss < &#KK \ &#KK%K  $ &(/9 &!!!!!!%%%%%%  & &rGreturnc|jduS)z Reports whether the signer's certificate has been revoked or not. If this field is ``True``, then obviously :attr:`trusted` will be ``False``. N)rQrbs rHr_zSignatureStatus.revokeds&d22rGcB|jo|jo|jduo|jduS)z Reports whether the signer's certificate is trusted w.r.t. the currently relevant validation context and key usage requirements. N)rKrJrLrPrgs rHr^zSignatureStatus.trusteds: J 1  1(D0 1$D0  rG,cv|jr1|jr*d||zSdS)zQ Provide a textual but machine-parsable summary of the validity. zINTACT:INVALID)rJrKjoinrd)rb delimiters rHsummaryzSignatureStatus.summarys? ; 4: y~~d.A.A.C.CDDD D9rGkey_usage_settingsc|p t}t|j|jn|j|j|jn|j}|S)N)rTrU)r*rTrU)clsros rHdefault_usage_constraintsz)SignatureStatus.default_usage_constraintssi0H3F3H3H0&/7 '1&4<""'6    "!rGcF|j|jd}|jjSdS)NrzNo path to trust anchor found.)rPsubjecthuman_friendly)rb trust_anchors rH _trust_anchorzSignatureStatus._trust_anchors*   +-1-A!-DL'6 633rG)riN)r?r@rArBrCrDr rr Certificatestrrr2rrTrrrUr'rdpropertyr_r^rn classmethodr*rrrwrFrGrHr4r4Ts8 LLL KKK ",//// """" #""" n---- !!23333 !****&7$7IxC!777 48NHXc#h/0777h''''##67777  & & &3333X3      X  AE""!)*=!>" """["$4s444X444rGr4cfeZdZUdZeZeeee d< dhZ e e d< dZ dS)r7zG Signature status class used when validating timestamp tokens. rT time_stamping timestampc |j}d|jr |jrdndd|jjd|jd|jd|jd|j rdndd S) Nz`This timestamp is backed by a time stamping authority. The timestamp token is cryptographically unz!sound. TSA certificate subject: "z$" TSA certificate SHA1 fingerprint: z% TSA certificate SHA256 fingerprint: z TSA cert trust anchor: "z" The TSA certificate is ztrusted.) rMrJrKrtrusha1hexsha256rwr^)rbtsas rHdescribe_timestamp_trustz1TimestampSignatureStatus.describe_timestamp_trusts 6[9TZ9rrT 6 6+.+*D 6 625  6 6 47:>>3C3C  6 6 )-(:  6 6\+rrt 6 6 6 rGN) r?r@rArBsetrTrrrzrDrUrrrFrGrHr7r7sw%(CEEIxC!)))&&N       rGr7cJeZdZUdZejed< eej ed<dS)r8z% Info on an X.509 attribute. attr_type attr_valuesN) r?r@rArBrAttCertAttributeTyperDr r Asn1ValuerFrGrHr8r8&sK''''$.))))rGr8c*eZdZUdZeeed<dS)r,zI Info on a certified attribute, including AC validation results. validation_resultsN)r?r@rArBr rrDrFrGrHr,r,7s4!!34444rGr,r attr_kinderrfatalc|sdnd|d}d|d|d|jd}|rt|tj|t|| dS) Nz unknown typeztype ''zFailed to parse z of z: r)ades_subindication)exc_info)argsr$rFORMAT_FAILUREloggerwarning)rrrr attr_type_strmsgs rH_handle_attr_errrEs+4NNN9N)9N9N9NM JY J JM J JSXa[ J JC *& K$>     sS)))))rGcxeZdZdZe ddeefdZddZde de fd Z d Z d Z d Zde defd ZdS)r-zJ Container class for extracted attribute certificate information. Fresultsc Ptd}|D]}|jD]}|dj} t |d}n*#t $r}t |d||Yd}~Hd}~wwxYw||\} } | || |t} | D]N\}\} } ttj |t| t| | j|<O| S)Nc ggfSrxrFrFrGrHz2CertifiedAttributes.from_results..]s RrGtypevalueszcertified attributer)rrr)rapproved_attributesrnativelist ValueErrorrextendappendr-itemsr,rrtuple_attrs) rqrparse_error_fatalby_typeresultattrrre type_values type_resultsinfoss rH from_resultsz CertifiedAttributes.from_resultsWsr (( ) )  , ,F299;; , , L/  !$x.11FF!$!-/  HHHH-4I,>) \""6***##F++++ , $%%6=mmoo   2I2 \&<29==!+..#(#6#6 '''EL # #  sA A;A66A;rbci|_dSrxrrgs rH__init__zCertifiedAttributes.__init__zs 9; rGitemrec|j|Srxrrbrs rH __getitem__zCertifiedAttributes.__getitem__}{4  rGc*t|jSrxlenrrgs rH__len__zCertifiedAttributes.__len__4;rGc*t|jSrxrCrrgs rH__bool__zCertifiedAttributes.__bool__DK   rGcNt|jSrxiterrrrgs rH__iter__zCertifiedAttributes.__iter__DK&&(()))rGc||jvSrxrrs rH __contains__z CertifiedAttributes.__contains__t{""rGNF)rbr-)r?r@rArBr|r rrrrzr,rrrrrCrrFrGrHr-r-RsFK  12   [ D<<<<!!(>!!!!   !!!***########rGr-ceZdZdZe ddeejfdZddZ de de fd Z d Z d Zd Zde defd ZdS)r.z| Container class for extracted information on attributes asserted by a signer without an attribute certificate. Fattrsct}tt}|D]m}d} |dj}t|d}n*#t$r}t |d||Yd}~Jd}~wwxYw|||n|D]=\}} ttj |t| |j |<>|S)Nrrzclaimed attributer)rr) r.rrrrrrrr8rrrr) rqrrrrrrrrrs rH from_iterablezClaimedAttributes.from_iterables"##d## . .DI  L/ d8n--    2A=N   I  % %f - - - -&-mmoo   "I{&729==!+..'''EL # #  s"A  A4A//A4rbci|_dSrxrrgs rHrzClaimedAttributes.__init__s 46 rGrrec|j|Srxrrs rHrzClaimedAttributes.__getitem__rrGc*t|jSrxrrgs rHrzClaimedAttributes.__len__rrGc*t|jSrxrrgs rHrzClaimedAttributes.__bool__rrGcNt|jSrxrrgs rHrzClaimedAttributes.__iter__rrGc||jvSrxrrs rHrzClaimedAttributes.__contains__rrGNr)rbr.)r?r@rArBr|r rAttCertAttributerrrzr8rrrrrCrrFrGrHr.r.s FKS12[27777!!(9!!!!   !!!***########rGr.ceZdZUdZeed< dZeeed< dZ ee e e e fed< dZeed< edZdS) r+z Value type describing information extracted (and, if relevant, validated) from a ``signer-attrs-v2`` signed attribute. claimed_attrsNcertified_attrsac_validation_errsFunknown_attrs_presentc|j Srx)rrgs rHrKz$CAdESSignerAttributeAssertions.valids***rG)r?r@rArBr.rDrr r-rr rrrrrCr{rKrFrGrHr+r+s %$$$ 6:OX12999 5*;;<=   #(4'''++X+++rGr+c~eZdZUdZeeed< dZeee e e fed< dZ ee ed<dS)r5Nac_attrsrcades_signer_attrs)r?r@rArr r-rDrr rrrrr+rFrGrHr5r5s.2Hh*+222( 5,.??@A   DH!?@GGGrGr5cvtjdtjdtjdi|dS)Nz4The certificate is qualified for web authentication.z> B >>> < $ 0 0 HG P 99 F  ,|( , , , )")*C D D RY. / /     rGceZdZUdZdZeeed< dZee ed< dZ ee ed< e de fdZ fdZd Zdeeeeffd ZxZS) r6zs Status of a standard "end-entity" CMS signature, potentially with timing information embedded inside. Nsigner_reported_dttimestamp_validitycontent_timestamp_validityrec|j}|d}n|jo |jo|j}|j}|d}n|jo |jo|j}|jo|jo |jo|o|S)ab Formulates a general judgment on the validity of this signature. This takes into account the cryptographic validity of the signature, the signature's chain of trust and the validity of the timestamp token (if present). :return: ``True`` if all constraints are satisfied, ``False`` otherwise. NT)r rKrJr^r )rbr timestamp_ok content_tscontent_timestamp_oks rH bottom_linez&StandardCMSSignatureStatus.bottom_line{s $ :LL8@ @bjL4  #'  MZ%6M:;M ! K %  %  % %%  rGc#*KtEd{V|j d|jdzV|j d|jdzV|j|jjsdVdSdSdS)NzTIMESTAMP_TOKEN<%s>|)rmzCONTENT_TIMESTAMP_TOKEN<%s>CERTIFIED_SIGNER_ATTRS_INVALID)superrdr rnr rrKrb __class__s rHrdz)StandardCMSSignatureStatus.summary_fieldss77))+++++++++  " .''//#/>>     * 6//77#7FF     # /+1 03 2 2 2 2 2 0 / / /rGc t|Srx)r9rgs rHpretty_print_detailsz/StandardCMSSignatureStatus.pretty_print_detailss*4000rGc 2|j}|jrd}n |jrd}nd}d|jjd|jd|jd|jd|d }d |j r |j rd nd d |j d|j d}d|j vr;|j dd}|jdkr|j}|d|jd|jdz }g}|j}|*|d||j} | #|t-| d|j} | #|t-| d|sdnd|} d|fd|fd| fg} |jr|jj} | jr\|jj}|Jdd d!|jjd t?| j tC| j"g}nd"}| d#|f| S)$Nr^r_ untrustedzCertificate subject: "z " Certificate SHA1 fingerprint: z! Certificate SHA256 fingerprint: z Trust anchor: "z" The signer's certificate is rz#The signature is cryptographically rrz'sound. The digest algorithm used was 'z%'. The signature mechanism used was 'z'.ecdsa algorithm parametersnamedz@ The elliptic curve used for the signer's ECDSA public key was 'z' (OID: z).z$Signing time as reported by signer: SignatureContentz0No available information about the signing time.z z Signer info Integrityz Signing timerz&The signer's certificate is qualified.rz*The signer's certificate is not qualified.zQualification status)#rMr^r_rtrurrrrwrJrKrOrN public_keynamechosenrdottedr rrr rr rlrWr`rarrrrrrr)rbcert trust_status about_signer validity_info ec_params curve_oid timing_infos reported_tsrcontent_tst_status timing_infosections sig_q_statusrsig_q_status_reports rHpretty_print_sectionsz0StandardCMSSignatureStatus.pretty_print_sectionss !%!2 < '$LL \ '$LL&L ;dl&A ; ;-1Y]]__ ; ;/3{/@/@ ; ; $1 ; ;,8  ; ; ;  3[9TZ9rrT 3 3.2.? 3 3.  3 3 3  d4 4 4151M2I~((3<3C 2'0'722&-222  -  "   P{7L7L7N7NPP   ,  !    j+ F F G G G!<  )    .@) L L M M M  + > >\**  L ) - ( [ )   $ K4;L% .A~~~&*ii@8<48885(8))=>> ' '##A$ OO35HI J J JrG)r?r@rArBr r rrDr r7r r{rCrrdrr rrzr3 __classcell__rs@rHr6r6as .2*111 >B!9:AAA FJ)A BIII  T   X B33333"111TtE#s(O'<TTTTTTTTrGr6c(eZdZdZdZ dZ dZ dZdS)r3a" Indicate the extent to which a PDF signature (cryptographically) covers a document. Note that this does *not* pass judgment on whether uncovered updates are legitimate or not, but as a general rule, a legitimate signature will satisfy at least :attr:`ENTIRE_REVISION`. rr#rrN)r?r@rArBUNCLEARCONTIGUOUS_BLOCK_FROM_STARTENTIRE_REVISION ENTIRE_FILErFrGrHr3r3sJG #$OKrGr3ceZdZUdZeeed< dZeee e fed< dZ ee ed< e deefdZdS)r0Ncoverage diff_result docmdp_okrec|j}|j:|tjkrdS|tjkr t jn t jSt|jtr |jj St jS)z Indicates the degree to which the document was modified after the signature was applied. Will be ``None`` if difference analysis results are not available; an instance of :class:`.ModificationLevel` otherwise. N) r<r=r3r9r:r!NONEOTHER isinstancer modification_level)rbr<s rHrCz#ModificationInfo.modification_levelIs{=   #1AAAt5AAA"&&&,  (* 5 5 +#6 6$* *rG)r?r@rAr<r r3rDr=rr r"r>rCr{r!rCrFrGrHr0r0-s15Hh-.555HLK% ,B BCDKKK !%Ix~$$$+H->$?+++X+++rGr0ceZdZUdZdZeed< dZee ed< e deffd Z e defdZ fd Z fd ZxZS) r1z;Class to indicate the validation status of a PDF signature.Fhas_seed_valuesNseed_value_constraint_errorrec\tj}|o|jo|jp|jduS)a Formulates a general judgment on the validity of this signature. This takes into account the cryptographic validity of the signature, the signature's chain of trust, compliance with the document modification policy, seed value constraint compliance and the validity of the timestamp token (if present). :return: ``True`` if all constraints are satisfied, ``False`` otherwise. N)rr seed_value_okr>rC)rbgeneric_checks_okrs rHrzPdfSignatureStatus.bottom_liners@"GG/  D" DB4#:d#B rGc|jduS)a Indicates whether the signature satisfies all mandatory constraints in the seed value dictionary of the associated form field. .. warning:: Currently, not all seed value entries are recognised by the signer and/or the validator, so this judgment may not be entirely accurate in some cases. See :class:`~.pyhanko.sign.fields.SigSeedValueSpec`. N)rFrgs rHrHz PdfSignatureStatus.seed_value_oks/477rGc#JKtEd{V|jtjkrdVn7|jtjkr|jd|jjzVn dVndV|jr|jtjkrdVdSdSdVdS)N UNTOUCHEDEXTENDED_WITH_EXTENDEDNONSTANDARD_COVERAGEACCEPTABLE_MODIFICATIONSILLEGAL_MODIFICATIONS) rrdr<r3r:r9rCr#r>rs rHrdz!PdfSignatureStatus.summary_fieldss77))+++++++++ =2> > >     ]4D D D&2&)@)EEEEEE     ( ( ( ( > *} 6 BBB000000CB* ) ) ) ) )rGct}|jtjkrd}nN|jE|jt jkrd}n|jt jkrd}nd}d|d|j rdndd }nd }| d |f|j r0|j rd }nd |j jz}| d|f|S)Nz%The signature covers the entire file.z1All modifications relate to signature maintenancez?All modifications relate to signing and form filling operationsz&Some modifications may be illegitimatez.The signature does not cover the entire file. z, and they appear to be rinz9compatible with the current document modification policy.z'Incremental update analysis was skipped Modificationsz4There were no SV issues detected for this signature.zXThe signature did not satisfy the SV constraints on the signature field. Error message: zSeed value constraints)rr3r<r3r:rCr! LTA_UPDATES FORM_FILLINGr>rrErHrFfailure_message)rbr0modification_str modlvl_stringsv_infors rHr3z(PdfSignatureStatus.pretty_print_sectionss-770022 =2> > >F  &2*.?.KKKK"M,0A0NNN%"M %MM<$<<!^5rr<<<! $M *:;<<<   A! P<6FG OO5w? @ @ @rG)r?r@rArBrErCrDrFr r%r{rrHrdr3r4r5s@rHr1r1csEE!OT!!!JN*E!FMMM  T     X & 8t 8 8 8X 8*****"&&&&&&&&&rGr1ceZdZdZdS)r/zDClass to indicate the validation status of a PDF document timestamp.N)r?r@rArBrFrGrHr/r/sNNNNrGr/rFr`extra_sectionsrecdt|}||d|jrdndd}|d|fdfd|DS) NcTd|dt|z|dfS)Nr-)rlr)hdrbodys rH fmt_sectionz0format_pretty_print_details..fmt_sections'yy#sSXX~tT:;;;rGzThe signature is judged rINzVALID.z Bottom linerc36K|]\}}||VdSrxrF).0r`rarbs rH z.format_pretty_print_details..s3FF T[[d++FFFFFFrG)rr3rrrrl)r`r\r0rrbs @rHr9r9s<<<F002233H OON###M);#E22MMM OO]K0111 99FFFFXFFF F FFrG)rF)Plogging collectionsr dataclassesrrenumrtypingrrr r r r r rrr asn1cryptorrrrrpyhanko_certvalidator.errorsrrrpyhanko_certvalidator.pathrpyhanko_certvalidator.validaterpdf_utils.miscr ades.reportrr diff_analysisr r!r"errorsr$r%qualified.q_statusr&r' qualified.tspr(r)settingsr*__all__ getLoggerr?rr2r4r7r8r,rzrrCrr-r.r+r5rrrrr6r3r0r1r/r9rFrGrHrys######!!!!!!                        21111111111111 655555======))))))33333333 JIIIIIIIOOOOOOOO////////))))))   $  8 $ $ $, $h4h4h4h4h4h4h4h4V $" " " " " " " " J $          $     .    *} *), *3= *FJ * * * *8#8#8#8#8#8#8#8#v0#0#0#0#0#0#0#0#f $++++++++++++++++\ $$$$$$$$$N 7 7 7KKK&    2 $ccccc!6cccL!!!!![!!!H $2+2+2+2+2+2+2+2+j $iiiii)+EiiiX $OOOOO.0HOOO 13 G G & GU38_- G  G G G G G GrG