jJdZddlZddlmZddlmZmZmZddlm Z m Z m Z m Z ddl mZddlmZgdZd ezZGd d ejZGd d ejZGddejZedGddZGddejZdS)zF Asynchronous API for fetching OCSP responses, CRLs and certificates. N) dataclass)AsyncGeneratorIterableUnion)cmscrlocspx509) Authority) __version__)DEFAULT_USER_AGENT CRLFetcherCertificateFetcherFetcherBackendFetchers OCSPFetcherzpyhanko_certvalidator %sceZdZdZdeejejfde de j fdZ de e j fdZdeejejfde e j fdZdS) rz4Utility interface to fetch and cache OCSP responses.cert authorityreturncKt)ag Fetch an OCSP response for a certificate. :param cert: The certificate for which an OCSP response has to be fetched. :param authority: The issuing authority. :raises: OCSPFetchError - Raised if an OCSP response could not be obtained. :return: An OCSP response. NotImplementedError)selfrrs q/var/www/finuniver-perm.ru/html/portfolio/venv/lib/python3.11/site-packages/pyhanko_certvalidator/fetchers/api.pyfetchzOCSPFetcher.fetchs""!ct)zD Return all responses fetched by this OCSP fetcher. rrs rfetched_responseszOCSPFetcher.fetched_responses0 "!rct)z Return all responses fetched by this OCSP fetcher that are relevant to determine the revocation status of the given certificate. rrrs rfetched_responses_for_certz&OCSPFetcher.fetched_responses_for_cert6 "!rN)__name__ __module__ __qualname____doc__rr CertificaterAttributeCertificateV2r r OCSPResponserrr r$rrrrs>>"D$c&@@A""   """"&"8D,=#>"""" "$*C,FFG" $# $""""""rrceZdZdZdddeejejfde e j fdZ de e j fdZ deejejfde e j fdZdS) rz*Utility interface to fetch and cache CRLs.N) use_deltasrrcKt)a Fetches the CRLs for a certificate. :param cert: An asn1crypto.x509.Certificate object to get the CRL for :param use_deltas: A boolean indicating if delta CRLs should be fetched :raises: CRLFetchError - when a network/IO error or decoding error occurs :return: An iterable of CRLs fetched. r)rrr/s rrzCRLFetcher.fetchCs4"!rct)z> Return all CRLs fetched by this CRL fetcher. rrs r fetched_crlszCRLFetcher.fetched_crls_r!rct)a Return all relevant fetched CRLs for the given certificate :param cert: A certificate. :return: An iterable of CRLs :raise KeyError: if no fetch operations have been performed for this certificate rr#s rfetched_crls_for_certz CRLFetcher.fetched_crls_for_certes "!r)r&r'r(r)rr r*rr+rrCertificateListrr2r4r-rrrr@s44  """D$c&@@A" #% & """"8"hs':;"""" "$*C,FFG " #% & " " " " " "rrceZdZdZdeejejfde ejdffdZ de ejdffdZ de ejfdZ dS)rz2Utility interface to fetch and cache certificates.rrNct)a Fetches certificates from the authority information access extension of a certificate. :param cert: A certificate :raises: CertificateFetchError - when a network I/O or decoding error occurs :return: An asynchronous generator yielding asn1crypto.x509.Certificate objects that were fetched. rr#s rfetch_cert_issuersz%CertificateFetcher.fetch_cert_issuersx ""!rct)a Fetches certificates from the authority information access extension of an asn1crypto.crl.CertificateList. :param certificate_list: An asn1crypto.crl.CertificateList object :raises: CertificateFetchError - when a network I/O or decoding error occurs :return: An asynchronous generator yielding asn1crypto.x509.Certificate objects that were fetched. r)rcertificate_lists rfetch_crl_issuersz$CertificateFetcher.fetch_crl_issuersr9rct)zP Return all certificates retrieved by this certificate fetcher. rrs r fetched_certsz CertificateFetcher.fetched_certsr!r)r&r'r(r)rr r*rr+rr8r<rr>r-rrrrus<<"$*C,FFG" ($. /""""&" ($. /""""&"x(89""""""rrT)frozenc2eZdZUdZeed<eed<eed<dS)rz Models a collection of fetchers to be used by a validation context. The intention is that these can share resources (like a connection pool) in a unified, controlled manner. See also :class:`.FetcherBackend`. ocsp_fetcher crl_fetcher cert_fetcherN)r&r'r(r)r__annotations__rrr-rrrrsB$$$$$$rrc6eZdZdZdefdZdZdefdZdZdS)ra Generic, bare-bones interface to help abstract away instantiation logic for fetcher implementations. Intended to operate as an asynchronous context manager, with `async with backend_obj as fetchers: ...` putting the resulting :class:`.Fetchers` object in to the variable named `fetchers`. .. note:: The initialisation part of the API is necessarily synchronous, for backwards compatibility with the old ``ValidationContext`` API. If you need asynchronous resource management, handle it elsewhere, or use some form of lazy resource provisioning. Alternatively, you can pass :class:`Fetchers` objects to the validation context yourself, and forgo use of the :class:`.FetcherBackend` API altogether. rct)zl Set up fetchers synchronously. .. note:: This is a synchronous method rrs r get_fetcherszFetcherBackend.get_fetchersr%rc KdS)zf Clean up the resources associated with this fetcher backend, asynchronously. Nr-rs rclosezFetcherBackend.closes rc.K|SN)rGrs r __aenter__zFetcherBackend.__aenter__s  """rc:K|d{VSrK)rI)rexc_typeexc_valexc_tbs r __aexit__zFetcherBackend.__aexit__s&ZZ\\!!!!!!!rN) r&r'r(r)rrGrIrLrQr-rrrrsr&"h""""   #(####"""""rr)r)abc dataclassesrtypingrrr asn1cryptorrr r pyhanko_certvalidator.authorityr pyhanko_certvalidator.versionr __all__r ABCrrrrrr-rrrZs !!!!!!2222222222++++++++++++555555555555   0+=#"#"#"#"#"#'#"#"#"L2"2"2"2"2"2"2"2"j-"-"-"-"-"-"-"-"` $ % % % % % % % %("("("("("SW("("("("("r