j)(tddlZddlZddlmZddlmZddlmZddlmZm Z ddl m Z ddl m Z Gd d ejZed Gd dZGddejZGddZde jdefdZGddeZGddeZGddeZdS)N) dataclass)datetime)Optional)keysx509)process_general_subtrees)PKIXValidationParamsc$eZdZdZ dZ dZ dZdS)TrustedServiceTyperrN)__name__ __module__ __qualname__ UNSPECIFIED UNSUPPORTEDCERTIFICATE_AUTHORITYTIME_STAMPING_AUTHORITYn/var/www/finuniver-perm.ru/html/portfolio/venv/lib/python3.11/site-packages/pyhanko_certvalidator/authority.pyr r s?KK rr T)frozenceZdZUdZdZeded< dZeeed< dZ eeed< dZ ee ed< dZ ee ed< e jZe ed <dS) TrustQualifierszY .. versionadded 0.20.0 Parameters that allow a trust root to be qualified. Nr standard_parametersmax_path_lengthmax_aa_path_length valid_from valid_untiltrusted_service_type)rrr__doc__rr__annotations__rintrrrr r rr!rrrrr.s =A"89@@@ &*OXc]))) )- ,,, &*J")))'+K(#***0B/M,MMMrrceZdZdZedejfdZedej fdZ edZ dZ dZ edeefdZd ejdefd Zd S) AuthorityzM .. versionadded:: 0.20.0 Abstract authority, i.e. a named key. returnct)z' The authority's name. NotImplementedErrorselfs rnamezAuthority.name_ "!rct)z- The authority's public key. r)r+s r public_keyzAuthority.public_keyfr.rct)zm A hashable unique identifier of the authority, used in ``__eq__`` and ``__hash__``. r)r+s rhashablezAuthority.hashablems "!rc*t|jSN)hashr2r+s r__hash__zAuthority.__hash__usDM"""rcPt|tsdS|j|jkSNF) isinstancer&r2r,others r__eq__zAuthority.__eq__xs(%++ 5}..rct)z Key ID as (potentially) referenced in an authorityKeyIdentifier extension. Only used to eliminate non-matching trust anchors, never to retrieve keys or to definitively identify trust anchors. r)r+s rkey_idzAuthority.key_id~s "!rcertcj|j|jkrdS|jr|jr|j|jkrdSdS)z Function to determine whether this trust root could potentially be an issuer of a given certificate. This function is used during path building. :param cert: The certificate to evaluate. FT)issuerr-authority_key_identifierr>r,r?s ris_potential_issuer_ofz Authority.is_potential_issuer_ofsF ;$) # #5  ( T[ , ;;utrN)rrrr"propertyrNamer-r PublicKeyInfor0r2r6r<rbytesr> CertificateboolrDrrrr&r&Xs "di"""X" "D."""X" ""X"###/// """"X"4+;rr&cveZdZdZ d dedeefdZedefdZ edefdZ d Z d Z dS) TrustAnchorz Abstract trust root. A trust root is an authority with trust qualifiers. Equality of trust roots reduces to equality of authorities. N authorityqualsc"||_||_dSr4) _authority_quals)r,rMrNs r__init__zTrustAnchor.__init__s$ rr'c|jSr4)rPr+s rrMzTrustAnchor.authoritys rc,|jp tS)z0 Qualifiers for the trust root. )rQrr+s rtrust_qualifierszTrustAnchor.trust_qualifierss {/o///rcLt|to|j|jkSr4)r9rLrPr:s rr<zTrustAnchor.__eq__s& uk * * 4 DO3 rc*t|jSr4)r5rPr+s rr6zTrustAnchor.__hash__sDO$$$rr4) rrrr"r&rrrRrErMrUr<r6rrrrLrLs HL"+3O+D 9X0/000X0    %%%%%rrLr?r'cd}dx}}|jkd}|j}|d}t|tjrt |}|d}t|tjrt |}d}|j"d}|j}t d|D}d} |r%t|pt dg|du||} t|j | |j |j |j r tjn tj S) a Extract trust qualifiers from data and extensions of a certificate. .. note:: Recall that any property of a trust root other than its name and public key are in principle irrelevant to the PKIX validation algorithm itself. This function is merely a helper function that allows the certificate's other data to be conveniently gathered to populate the default validation parameters for paths deriving from that trust root. :param cert: The certificate from which to extract qualifiers (usually a self-signed one) :return: A :class:`TrustQualifiers` object with the extracted qualifiers. FNTpermitted_subtreesexcluded_subtreescJg|] }|djdk|dj!S)policy_identifier any_policy)nativedotted).0pol_infos r z*derive_quals_from_cert..s?   /07<GG,-4GGGrr])user_initial_policy_setinitial_explicit_policyinitial_permitted_subtreesinitial_excluded_subtrees)rrrr r!)name_constraints_valuer9rGeneralSubtreesr certificate_policies_value frozensetr rrnot_valid_beforenot_valid_aftercar rr) r? ext_foundrYrZnc_ext permitted_val excluded_valacceptable_policies policies_valparamss rderive_quals_from_certrus_&I-11* ". '+'B34 mT%9 : : I!9-!H!H 12 lD$8 9 9 G 8 F F  &2 151P '   ,     F  %#@y,'@'@%8t$C'9&7     ,"((w 0  4 4#/    rceZdZdZdejfdZedejfdZ edZ edZ ede e fdZedejfd Zdejffd ZxZS) AuthorityWithCertzz .. versionadded:: 0.20.0 Authority provisioned as a certificate. :param cert: The certificate. r?c||_dSr4_certrCs rrRzAuthorityWithCert.__init__s  rr'c|jjSr4)rzsubjectr+s rr-zAuthorityWithCert.name s z!!rc|jjSr4)rzr0r+s rr0zAuthorityWithCert.public_keys z$$rcZ|j}|jj|jfSr4)rzr|r2r0dumprCs rr2zAuthorityWithCert.hashables'z|$do&:&:&<&<<zAuthorityWithCert.key_ids z((rc|jSr4ryr+s r certificatezAuthorityWithCert.certificate zrct|sdS|jr|j|jjkrdSdS)NFT)superrDauthority_issuer_serialrz issuer_serial)r,r? __class__s rrDz(AuthorityWithCert.is_potential_issuer_of sJww--d33 5  ' +tz/GGGutr)rrrr"rrIrRrErFr-r0r2rrHr>rrD __classcell__rs@rrwrws#T-"di"""X"%%X%==X=))))X)T-X4+;rrwceZdZdZ d dejdeedeffd Z e dejfd Z e defd Z xZ S) CertTrustAnchora .. versionadded:: 0.20.0 Trust anchor provisioned as a certificate. :param cert: The certificate, usually self-signed. :param quals: Explicit trust qualifiers. :param derive_default_quals_from_cert: Flag indicating to derive default trust qualifiers from the certificate content if explicit ones are not provided. Defaults to ``False``. NFr?rNderive_default_quals_from_certct|}||_t||||_dSr4)rwrzrrR_derive)r,r?rNrrMrs rrRzCertTrustAnchor.__init__8s> &d++   E***5 rr'c|jSr4ryr+s rrzCertTrustAnchor.certificateCrrc|j|jS|jrt|jx|_}|St Sr4)rQrrurzr)r,rNs rrUz CertTrustAnchor.trust_qualifiersGsC ; ";  \ %"8"D"D DDK%L"$$ $rr8)rrrr"rrIrrrJrRrErrUrrs@rrr)s  ",0/4 6 6 6( 6)- 6 6 6 6 6 6T-X%/%%%X%%%%%rrceZdZdZdejdejfdZe dejfdZ e dZ e de e fdZe d Zd S) NamedKeyAuthorityz Authority provisioned as a named key. :param entity_name: The name of the entity that controls the private key of the trust root. :param public_key: The trust root's public key. entity_namer0c"||_||_dSr4)_name _public_key)r,rr0s rrRzNamedKeyAuthority.__init__\s  %rr'c|jSr4)rr+s rr-zNamedKeyAuthority.name`rrc|jSr4)rr+s rr0zNamedKeyAuthority.public_keyds rcdSr4rr+s rr>zNamedKeyAuthority.key_idhstrcL|jj|jfSr4)rr2rrr+s rr2zNamedKeyAuthority.hashablels!z"D$4$9$9$;$;;;rN)rrrr"rrFrrGrRrEr-r0rrHr>r2rrrrrRs&DI&4;M&&&&diX  X X<<X<<rs !!!!!!!!!!!!!!000000------B $&&&&&&&&R========@%%%%%%%%BB!1BoBBBBJ((((( (((V&%&%&%&%&%k&%&%&%R<<<<< <<<<