j_(ddlZddlZddlmZddlmZmZmZmZm Z m Z ddl m Z ddl mZddlmZmZmZmZmZddlmZdd lmZdd lmZdd lmZmZd ZGd dejZ Gdde ejZ!Gdde!Z"ee e j#efZ$GddZ%Gdde%Z&Gdde"Z'GddZ(GddZ)GddZ*Gdd eeZ+Gd!d"e Z,dS)#N) defaultdict)AsyncGeneratorIterableIteratorListOptionalUnion)x509) trust_list) AuthorityAuthorityWithCertCertTrustAnchor TrustAnchorTrustedServiceType)PathBuildingError)CertificateFetcher)ValidationPath)CancelableAsyncIteratorConsListc^ tt|S#t$rYdSwxYwN)nextiter StopIteration)iterables m/var/www/finuniver-perm.ru/html/portfolio/venv/lib/python3.11/site-packages/pyhanko_certvalidator/registry.py_first_or_noners=DNN### tts  ,,c^eZdZdZdefdZdefdZdefdZdefdZde j fd Z d Z d S) CertificateCollectionzS Abstract base class for read-only access to a collection of certificates. key_identifiercFt||S)z Retrieves a cert via its key identifier :param key_identifier: A byte string of the key identifier :return: None or an asn1crypto.x509.Certificate object )rretrieve_many_by_key_identifierselfr!s rretrieve_by_key_identifierz0CertificateCollection.retrieve_by_key_identifier$s'  0 0 @ @   ct)z Retrieves possibly multiple certs via the corresponding key identifiers :param key_identifier: A byte string of the key identifier :return: A list of asn1crypto.x509.Certificate objects NotImplementedErrorr$s rr#z5CertificateCollection.retrieve_many_by_key_identifier2 "!r'key_hashcFt||S)a& Retrieves a cert via the SHA-1 hash of its public key (the standard way to compute the SubjectKeyIdentifier extension) :param key_hash: A byte string of the key identifier :return: None or an asn1crypto.x509.Certificate object )rretrieve_many_by_key_hashr%r,s rretrieve_by_key_hashz*CertificateCollection.retrieve_by_key_hash>s d< classmethodrYr_r rRrSrIrhrQr?r#r.r@r5r9rAr'rrUrUs[ /// T-$,   )))8e8888,%,,,,0TY0000r'rUcneZdZdZdejdefdZdede e fdZ dejde e fdZ dS) TrustManagerz% Abstract trust manager API. rDrEcJ|t|duS) Checks if a certificate is in the list of trust roots in this registry :param cert: An asn1crypto.x509.Certificate object :return: A boolean - if the certificate is in the CA list N)as_trust_anchorrrHs ris_rootzTrustManager.is_roots&##$5d$;$;<r rRrSrvr rrrurrzrAr'rrrrrs ID, I I I I I " "x 7L " " " " "$ " +  " " " " " "r'rrceZdZdZdZe ddeedeeddfdZde e e j ffd Z d e j fd Zd efd Zdee j fdZd e j dee fdZdS)SimpleTrustManagerzk Trust manager backed by a list of trust roots, possibly in addition to the system trust list. c^t|_tt|_dSr)set_rootsrr[_root_subject_maprPs rr_zSimpleTrustManager.__init__s#ee !,T!2!2r'N trust_rootsextra_trust_rootsrEc|dtjD}nt|}|||t }|D]}|||S)a :param trust_roots: If the operating system's trust list should not be used, instead pass a list of asn1crypto.x509.Certificate objects. These certificates will be used as the trust roots for the path being built. :param extra_trust_roots: If the operating system's trust list should be used, but augmented with one or more extra certificates. This should be a list of asn1crypto.x509.Certificate objects. :return: Ncg|] }|d S)rrA).0es r z,SimpleTrustManager.build..s???A1Q4???r')r get_listr[extendr|_register_root)rWrrmanager trust_roots rbuildzSimpleTrustManager.build s&  ??)<)>)>???KK{++K  (   0 1 1 1$&&% / /J  " ": . . . .r'rct|tr|}nt|}||jvrM|j}|j||j|jj |dSdSr) isinstancerrrrwaddrr2rdre)r%ranchorrws rrz!SimpleTrustManager._register_root+s j+ . . 1FF$Z00F  $ $(I KOOF # # #  "9>#: ; B B6 J J J J J % $r'rDc.t||jvS)rt)rrrHs rrvzSimpleTrustManager.is_root5st$$ 33r'rwc |jjj}tfd|DS#tt f$rYdSwxYw)Nc32K|]}|jk |VdSr)rw)rrrws r z5SimpleTrustManager.as_trust_anchor..Fs=#y000000r')rr2rdrror)r%rwpossible_matchess ` rruz"SimpleTrustManager.as_trust_anchorBs| #5in6MN .  -(   44 s15A  A c$d|jDS)Nc3bK|]*}t|jt|jjV+dSr)rrwr certificate)rroots rrz0SimpleTrustManager.iter_certs..OsN  $.*;<< N &      r')rrPs r iter_certszSimpleTrustManager.iter_certsNs%       r'c#K|jj}|j|D]G}|jj}|t jt jfvr)|j |r|VHdSr) issuerrdrtrust_qualifierstrusted_service_typer UNSPECIFIEDCERTIFICATE_AUTHORITYrwis_potential_issuer_of)r%rDissuer_hashablersvc_types rrzz)SimpleTrustManager.find_potential_issuersUs+.*?;  D,AH"."8 ~44T::    r')NN)r;r<r=r>r_rpr TrustRootListrr rr rRrrvr rurrrzrAr'rr|r|s5 3330459m,$M2  [>K{D.sL         #F    s)rfetch_cert_issuersrN)r%rDissuersrs rfetch_missing_potential_issuersz3CertificateRegistry.fetch_missing_potential_issuerss <  F  '+|'F'Ft'L'L          w'''  FLLLLL  r')rAr)r;r<r=r>rrr_rprr rRrr@r5rrrr rrzr __classcell__)rs@rrresa HL$$$1C(D$$$$$$-/6: ()12 [:9=i$D$45<$5A % T%556 70 $:J        r'rcdeZdZdZdedefdZdZdej fdZ dej de e fd Z d S) PathBuilderz( Class to handle path building. rregistryc"||_||_dSr)rr)r%rrs rr_zPathBuilder.__init__s+  r'cPtj||S)a Builds a list of ValidationPath objects from a certificate in the operating system trust store to the end-entity certificate .. note:: This is a synchronous equivalent of :meth:`async_build_paths` that calls the latter in a new event loop. As such, it can't be used from within asynchronous code. :param end_entity_cert: A byte string of a DER or PEM-encoded X.509 certificate, or an instance of asn1crypto.x509.Certificate :return: A list of pyhanko_certvalidator.path.ValidationPath objects that represent the possible paths from the end-entity certificate to one of the CA certs. )asynciorunasync_build_paths)r%end_entity_certs r build_pathszPathBuilder.build_pathss"&{411/BBCCCr'rctKg}||23d{V}||6|S)a1 Builds a list of ValidationPath objects from a certificate in the operating system trust store to the end-entity certificate, returning all paths in a single list. :param end_entity_cert: A byte string of a DER or PEM-encoded X.509 certificate, or an instance of asn1crypto.x509.Certificate :return: A list of pyhanko_certvalidator.path.ValidationPath objects that represent the possible paths from the end-entity certificate to one of the CA certs. N)async_build_paths_lazyre)r%rpathsrXs rrzPathBuilder.async_build_pathsse ') 77HH ! ! ! ! ! ! !& LL I s7rEct|tj|tj|jg}t ||S)a Builds a list of ValidationPath objects from a certificate in the operating system trust store to the end-entity certificate, and emit them as an asynchronous generator. :param end_entity_cert: A byte string of a DER or PEM-encoded X.509 certificate, or an instance of asn1crypto.x509.Certificate :return: An asynchronous iterator that yields pyhanko_certvalidator.path.ValidationPath objects that represent the possible paths from the end-entity certificate to one of the CA certs, and raises PathBuildingError if no paths could be built )path certs_seen failed_paths) _PathWalkerrsingr8LazyPathIterator)r%rwalkers rrz"PathBuilder.async_build_paths_lazysM( //}_%BCC      888r'N)r;r<r=r>rrrr_rr rRrrrrrAr'rrrs!)!5H!!!! DDD*t7G,9#/9  0999999r'rceZdZdddejdeefdZedZ dZ dZ d e e ejffd Zd e e ejffd Zd Zd S)_IssuerFetcher path_builderrrDrc||_||_||_|jj||jj}t ||_d|_d|_ d|_ d|_ dS)NrF) rDrrrrzrrlocal_iss_iterlocal_issuers_foundfetched_issuers_found _fetched_cas_fetching_done)r%rrDr local_issuerss rr_z_IssuerFetcher.__init__"s}  ($)2II $#1  #=11#$ %&"  $r'c |j|jzSr)rrrPs r issuers_foundz_IssuerFetcher.issuers_found6s'$*DDDr'c|SrrArPs r __aiter__z_IssuerFetcher.__aiter__: r'c|SrrArPs rrQz_IssuerFetcher.__iter__=rr'rEc|jD]@}t|tjr|j}||jvr-|xjdz c_|cSt)Nr )rrr rRr8rrrr%rcert_ids r__next__z_IssuerFetcher.__next__@sd)  F&$"233  .do--  $ $ ) $ $MMMr'cTK t|S#t$rYnwxYw|j7|js0|js)|jj|j|_|j;|j23d{V}|j }||j vr|xj dz c_ |cS6d|_t)Nr T) rrrrrrrrrDr8rrStopAsyncIterationrs r __anext__z_IssuerFetcher.__anext__Js ::     D    %, &' & !*JJI     ( $ 1       f .do--**a/** !2 #'D   s  /BcvK|j/|jd{Vd|_d|_dSdS)NT)racloserrPs rcancelz_IssuerFetcher.cancelfsT   (#**,, , , , , , , , $D "&D    ) (r'N)r;r<r=r rRrr?r_propertyrrrQr rrrrrAr'rrr!s$#$$UO $$$$(EEXE% T-= =>!{D4D'D!E!!!!8'''''r'rc |eZdZdddeejdeedeeejfdZdZ dZ d Z d S) rrrrrrc||_||_||_|j}t |t jsJt||||_||_ d|_ dSr) rrrheadrr rRr_issuer_fetcherr _next_level)r%rrrrrDs rr_z_PathWalker.__init__nsd ($y$ 011111-lD*MM(26r'cK|j&|jd{Vd|_|j(|jd{Vd|_dSdSr)rrrrPs rrz_PathWalker.cancel~s   +&--// / / / / / / /#'D   '"))++ + + + + + + +#D    ( 'r'c|SrrArPs rrz_PathWalker.__aiter__rr'cK|jtd}|H|j |jd{V}nF#t$r9}|jjs|j|jd|_|d}~wwxYwt|tr3t|j}t||dd|dSt|j |j||j|j|j|_ |jd{V}n#t$r d|_YnwxYw|H|S)N)rrrrrrrerrrr[rrrconsrr8)r% next_path next_issuerrrJs rrz_PathWalker.__anext__s   '$ $ '(,(<(F(F(H(H"H"H"H"H"H"HKK)/=<)00;;;+/D(G  k;77  OOE)+uSbSz59MMM(3) {33,,[-FGG) ((D$ ("&"2"<"<">">>>>>>> % ( ( (#'    (58s'? B 4A==B$EEEN) r;r<r=rr rRr?rr_rrrrAr'rrrms7#7t'(7UO 7 8D$456 7777 $$$     r'rc\eZdZUdZeeed<dedej fdZ dZ dZ defd Z dS) rN_as_rootrrDc|jjt|}|rt |gd|_||_d|_|jj |_ dS)Nr) rrrurrr_walker emitted_countrchuman_friendly_name)r%rrDmaybe_trust_anchors rr_zLazyPathIterator.__init__sg#0>NN d # #    I*+=r4HHDM.4 \0 r'cZK|j!|jd{VdSdSr)rrrPs rrzLazyPathIterator.cancelsB < #,%%'' ' ' ' ' ' ' ' ' ' $ #r'c|SrrArPs rrzLazyPathIterator.__aiter__rr'rEcK|jt|j|xjdz c_d|_|jS |jd{V}|xjdz c_|S#t$rYnwxYw|jdkra|jjdj}t|tj sJ|j j }d|_td|j d|dt)Nr rz7Unable to build a validation path for the certificate "z" - no issuer matching "z " was found)rrrrrrrrr rRrrrr)r%r path_headmissing_issuer_names rrzLazyPathIterator.__anext__s1 < $ $ ] &   ! #  DL=  "l4466666666I   ! #   !    D    " " 1!49Ii)9:: : : :"+"2"A DL#7Z77(777  ! s0A(( A54A5)r;r<r=rrr__annotations__rr rRr_rrrrAr'rrrs)-Hh~&--- 1{ 1$2B 1 1 1 1(((!!!!!!!r'rcdeZdZdZdeefdZdZdefdZ defdZ d e j fd Z d Zd S) LayeredCertificateStorezi Trustless certificate store that looks up certificates in other stores in a specific order. storesc||_dSr)_stores)r%r s rr_z LayeredCertificateStore.__init__s  r'c#\K|jD]!}t|||Ed{V"dSr)r getattr)r% method_name search_termstores r_forallzLayeredCertificateStore._forallsT\ @ @E2wuk22;?? ? ? ? ? ? ? ? ? @ @r'r!cHt|d|S)Nr#r[rr$s rr#z7LayeredCertificateStore.retrieve_many_by_key_identifiers& LL:N K K   r'r,cHt|d|S)Nr.rr/s rr.z1LayeredCertificateStore.retrieve_many_by_key_hashsDLL!.sE    + +M : :      r'c3K|]}||V dSrrA)rcs rrzDLayeredCertificateStore.retrieve_by_issuer_serial..s"EEAq}a}}}}EEr')r r)r%r8 candidatess ` rr9z1LayeredCertificateStore.retrieve_by_issuer_serialsL       EEEEEEEEr'N)r;r<r=r>rr r_rr?r#r.r r@r5r9rAr'rr r s t$9:@@@ e    I%IIIIr&sY ######LLLLLLLLLLLLLLLL&%%%%%(((((( 33333333P"P"P"P"P"CGP"P"P"f""""",cg"""B;;;;;-;;;|t/<=> *"*"*"*"*"*"*"*"ZaaaaaaaaHfffff0fffRP9P9P9P9P9P9P9P9fI'I'I'I'I'I'I'I'X<<<<<<<<~.!.!.!.!.!.~>.!.!.!bFFFFF3FFFFFr'