jQ PddlmZddlmZddlmZddlmZGddZdS))Optional)x509ValidationPath)ConsListc eZdZdddddeedeededefd Z e d Z e d efd Z d e jfdZddZdS) ValProcStateNFr)ee_name_overrideis_side_validation init_indexcert_path_stackr r r c|jtd||_||_t |p|j|_||_dS)NzEmpty path stack)head ValueErrorindexr booltailr r )selfr r r r s k/var/www/finuniver-perm.ru/html/portfolio/venv/lib/python3.11/site-packages/pyhanko_certvalidator/_state.py__init__zValProcState.__init__ sX   '/00 0 0"&  6/"6# #  /cXddlm}|jj}t ||sJ|jS)z Length of the path being validated. .. note:: This is the path length in the sense of RFC 5280, i.e. the root doesn't count. rr)pyhanko_certvalidator.pathrr r isinstancepkix_len)rrpaths rpath_lenzValProcState.path_lens? >=====#($/////}rreturnc"|j|jkS)N)rr)rs r is_ee_certzValProcState.is_ee_cert*szT]**ree_certczddlm}|jD],}|}|r|j|jkr|cS-dS)a Helper method to avoid recursion in indirect CRL validation. There are some questionable-but-technically-valid CA setups where a CRL issuer is authorised to assert its own revocation status, which could cause a naive implementation to recurse. rrN)rrr get_ee_cert_safesha256)rr!rrcerts rcheck_path_verif_recursionz'ValProcState.check_path_verif_recursion.s` >=====(  D((**D  w~55 trc| }|jdkr |jd}n(|js||z}d|j}n|j|j}nd}|rd|zS|S)zy :return: A unicode string describing the position of a certificate in the chain rNz trust anchorzintermediate certificate zend-entity certificatezthe )rr r )r def_interm never_defprefixresults r describe_certzValProcState.describe_cert>sy :??t4<#FF . j F===FF  " .*FF-F  F? "Mr)FF)__name__ __module__ __qualname__rrrstrrintrpropertyrr r Certificater&r,rrr r s +/#( ///".1/#3- / ! /  ////"  X +D+++X+$2B rr N) typingr asn1cryptorrrpyhanko_certvalidator.utilrr r4rrr8s555555//////JJJJJJJJJJr