j0ddlZddlmZddlmZmZmZmZmZddl m Z m Z ddl m Z ddlmZmZmZddlmZmZed Gd d Zee je jfZGd dZdS)N) dataclass) FrozenSetIterableIteratorOptionalUnion)cmsx509) AAControls) AuthorityAuthorityWithCert TrustAnchor)get_ac_extension_value get_issuer_dnT)frozenc2eZdZUeed< eed< eed<dS)QualifiedPolicyissuer_domain_policy_iduser_domain_policy_id qualifiersN)__name__ __module__ __qualname__str__annotations__ frozenseti/var/www/finuniver-perm.ru/html/portfolio/venv/lib/python3.11/site-packages/pyhanko_certvalidator/path.pyrrsH    rrc.eZdZUdZdZeeeed<dZ de de e j deefdZede fd Zed Zedeefd Zdeefd Zdee j fd Zede j fdZde efdZdefdZde j defdZde j fdZdefdZd"dZdZdeeefdZ de!j"de#fdZ$edZ%dZ&dZ'de#de(e j fdZ)d Z*d!Z+dS)#ValidationPathza Represents a path going towards an end-entity certificate or attribute certificate. N_qualified_policies trust_anchorintermleafcp|r|stdt||_||_||_dS)Nz-Leafless paths cannot have intermediate certs) ValueErrorlist_interm_root_leaf)selfr$r%r&s r __init__zValidationPath.__init__0sC  N$ NLMM MF|| !  rreturnc|jSN)r+r-s r r$zValidationPath.trust_anchor<s zrc|jj}t|tr|jS|jr |jdSt|jtjr|jSdS)a Returns the current beginning of the path - for a path to be complete, this certificate should be a trust root .. warning:: This is a compatibility property, and will return the first non-root certificate if the trust root is not provisioned as a certificate. If you want the trust root itself (even when it doesn't have a certificate), use :attr:`trust_anchor`. :return: The first asn1crypto.x509.Certificate object in the path rN) r+ authority isinstancer certificater*r,r Certificate)r-roots r firstzValidationPath.first@siz# d- . . # # \ <? "  D$4 5 5 :   rc|j|jS|js(|jj}t |t r|jSdS)a< Returns the current leaf certificate (AC or public-key). The trust root's certificate will be returned if there is one and there are no other certificates in the path. If the trust root is certificate-less and there are no certificates, the result will be ``None``. N)r,r*r$r4r5rr6)r-root_authoritys r r&zValidationPath.leafWsJ : !:  2!.8N.*;<< 2%11trc|j}t|tjr |jjSt|t jrdSdS)Nz)r&r5r r7subjecthuman_friendlyr AttributeCertificateV2r-r&s r describe_leafzValidationPath.describe_leafjsIy dD, - - <. . c8 9 9 ,,4rcL|j}t|tjr|SdS)z Returns the current leaf certificate if it is an X.509 public-key certificate, and ``None`` otherwise. :return: N)r&r5r r7r@s r get_ee_cert_safezValidationPath.get_ee_cert_safess*y dD, - - K4rc@|}|r|St)z Returns the last certificate in the path if it is an X.509 public-key certificate, and throws an error otherwise. :return: The last asn1crypto.x509.Certificate object in the path )rC LookupErrorr-certs r lastzValidationPath.lasts($$&&  K rc#\K|jjV|jD]}t|VdS)zU Iterate over all authorities in the path, including the trust root. N)r+r4r*rrFs r iter_authoritieszValidationPath.iter_authoritiessKj""""L * *D#D)) ) ) ) ) * *rrGc4t|}t|tjr|j}n!t |d}|r |djnd}|D]#}|j|kr|j }|r |r||kr|cS$td)aK Return the issuer of the cert specified, as defined by this path :param cert: A certificate to get the issuer of :raises: LookupError - when the issuer of the certificate could not be found :return: An asn1crypto.x509.Certificate object of the issuer authority_key_identifierkey_identifierN6Unable to find the issuer of the certificate specified) rr5r r7rLrnativerJnamekey_idrE)r-rG issuer_nameakiaki_extr4keyids r find_issuing_authorityz%ValidationPath.find_issuing_authoritys$D)) dD, - - H/CC,T3MNNG6=G'*+224C..00 ! !I~,,!(SUc\\    -  D   rnew_leafc|jj}t|tr,|jj|jkrt |jg|S|j}d}t|D]\}}|j|jkr|}n|td|j j t |j|d|dz|S)a Remove all certificates in the path after the cert specified and return them in a new path. Internal API. :param cert: An asn1crypto.x509.Certificate object to find :param new_leaf: A new leaf certificate to append. :raises: LookupError - when the certificate could not be found :return: The current ValidationPath object, for chaining r%r&Nz6Unable to find the specified certificate in the path: r ) r+r4r5rr6 issuer_serialr"r* enumeraterEr=r>)r-rGrWr;certs cert_indexindexentrys r truncate_to_and_appendz%ValidationPath.truncate_to_and_appends(- n&7 8 8 L)74;MMM%dj(KKKK  %e,,  LE5"d&888" 9  fIdff  Ju%5zA~%56X    rcd}|jj|r9|jdkrt |jgdSt |jg|S|j}t|D]<\}}|j|j kr'|j r|j r|j |j kr|}n8|}n=|tdt |j|d|dz|S)a Remove all certificates in the path after the issuer of the cert specified, as defined by this path, and append a new one. Internal API. :param cert: A new leaf certificate to append. :raises: LookupError - when the issuer of the certificate could not be found :return: The current ValidationPath object, for chaining NmayberYrNr )r&) r$r4is_potential_issuer_of self_signedr"r+r*r[r=issuerrMrLrE)r-rG issuer_indexr\r^r_s r truncate_to_issuer_and_appendz,ValidationPath.truncate_to_issuer_and_appends&"    & = =d C C H7**&dj$GGGG%dj$GGGG %e,,  LE5} ++'D,I+t/LLL', M$)LE,  H dj%0B,2B0B*C$OOOOrc|jdd}|jr||jt|j||S)Nr$r%r&)r*r,appendr"r+)r-rG new_certss r copy_and_appendzValidationPath.copy_and_appendsQLO : )   TZ ( ( (ID    rct|jdkrt|jdd|jd}}t|j||S)z Drop the leaf cert from this path and return a new path with the last intermediate certificate set as the leaf. rNri)lenr* IndexErrorr"r+)r- new_intermrWs r copy_and_drop_leafz!ValidationPath.copy_and_drop_leafsZ t|   ! ! #|CRC0$,r2BH JX    rc||_dSr1r#)r-policiess r _set_qualified_policiesz&ValidationPath._set_qualified_policies%s#+   rc|jSr1rtr2s r qualified_policiesz!ValidationPath.qualified_policies(s ''rattr_idcd|D}td|D}|sdStfd|DS)Nc6g|]}tj|Sr)r read_extension_value).0rGs r z3ValidationPath.aa_attr_in_scope..,s0" " " 6:J +D 1 1" " " rc3K|]}|duV dSr1r)r}xs r z2ValidationPath.aa_attr_in_scope../s&MMq}MMMMMMrTc3FK|]}||VdSr1)accept)r}ctrlrys r rz2ValidationPath.aa_attr_in_scope..9sE#  G$$$### r)anyall)r-ryaa_controls_extensionsaa_controls_useds ` r aa_attr_in_scopezValidationPath.aa_attr_in_scope+s" " >B" " " MM6LMMMMM 42 rcBt|j|jrdndzS)Nr r)ror*r,r2s r pkix_lenzValidationPath.pkix_lenAs"4<  $:AA;;rcd|jzS)Nr )rr2s r __len__zValidationPath.__len__Es4=  rc|jj}|dkr;t|jdz}||kr|j|jS|j|dz St |t r|jStd)Nrr zRoot has no certificate) r+r4ror*r,r5rr6rE)r-keyr4leaf_ixs r __getitem__zValidationPath.__getitem__IsJ( 77$,''!+Gg~~$*"8z!<a( (  #4 5 5 9( (788 8r include_rootc|jj}|rt|tr|jfnd}|j}t|t jr|fnd}tj ||j |S)z Iterate over the certificates in the path. :param include_root: Include the root (if it is supplied as a certificate) :return: An iterator. r) r+r4r5rr6r,r r7 itertoolschainr*)r-rr8 from_rootr& from_leafs r iter_certszValidationPath.iter_certsYszz#  *41B C C T     z)$0@AAITGGr y$, BBBrc.|dS)NT)r)rr2s r __iter__zValidationPath.__iter__lsD111rct|tsdS|j|jko|j|jko|j|jkS)NF)r5r"r$r*r,)r-others r __eq__zValidationPath.__eq__qsN%00 5  !3 3 *  - * ek) r)r/r"),rrr__doc__r#rrrr_path_aa_controlsrrr r7Leafr.propertyr$r9r&rrArCrHr rJrVr`rgrlrrrvrxr AttCertAttributeTypeboolrrrrrrrrrrr r"r"&s AE)O"<=DDD ! )* tn    kXX,htnX$x} (4+;"<     d&   X *(9"5**** 4    @& 4+;& t& & & & R.P$2B.P.P.P.P` D         ,,,(HY-G$H(((((@T,<<X<!!!999 CtC9I0JCCCC&222      rr")r dataclassesrtypingrrrrr asn1cryptor r asn1_typesr r4r rrutilrrrr7r?rr"rrr rsX!!!!!!AAAAAAAAAAAAAA """""" 87777777 $" T s9 9:R R R R R R R R R R r