j8 ddlZddlZddlmZddlmZddlmZmZmZm Z m Z ddl m Z m Z mZddlmZmZddlmZmZmZgdZGd d ejZed Gd dZGddeejZe deZdeedeefdZdZdeedeedededef dZdeej fdZ!ed GddeZ"ed Gdd eZ#e e$e j%e#fZ&e e$ej'e"fZ(d!ee&dee#fd"Z)d#ee(dee"fd$Z*dS)%N) dataclass)datetime)IterableListOptionalTypeVarUnion)algoscrlocsp)IssuedItemContainerValidationTimingParams)#FRESHNESS_FALLBACK_VALIDITY_DEFAULTCertRevTrustPolicyFreshnessReqType) CRLContainer OCSPContainerRevinfoContainerRevinfoUsabilityRevinfoUsabilityRatingprocess_legacy_crl_inputprocess_legacy_ocsp_inputsort_freshest_firstceZdZdZejZ ejZ ejZ ejZ e de fdZ dS)rzz Description of whether a piece of revocation information is considered usable in the circumstances provided. returnc6|tjtjfvS)zs Boolean indicating whether the assigned rating corresponds to a "fresh" judgment in AdES. )rOKTOO_NEWselfs u/var/www/finuniver-perm.ru/html/portfolio/venv/lib/python3.11/site-packages/pyhanko_certvalidator/revinfo/archival.py usable_adesz"RevinfoUsabilityRating.usable_ades=s" " % " *   N) __name__ __module__ __qualname____doc__enumautorSTALErUNCLEARpropertyboolr"r#r!rrs B DIKKEdikkGdikkG   T    X    r#rT)frozencVeZdZUdZeed< dZeeed< dZ eeed<dS)rz` Usability rating and cutoff date for a particular piece of revocation information. ratingNlast_usable_at compared_to) r$r%r&r'r__annotations__r2rrr3r.r#r!rrJsf #"""*.NHX&--- '+K(#***r#rcXeZdZdZdededefdZede e j fdZ dS)rz< A container for a piece of revocation information. policy timing_paramsrct)af Assess the usability of the revocation information given a revocation information trust policy and timing parameters. :param policy: The revocation information trust policy. :param timing_params: Timing-related information. :return: A :class:`.RevinfoUsability` judgment. NotImplementedError)r r6r7s r! usable_atzRevinfoContainer.usable_atgs "!r#ct)z Extract the signature mechanism used to guarantee the authenticity of the revocation information, if applicable. r9rs r!revinfo_sig_mechanism_usedz+RevinfoContainer.revinfo_sig_mechanism_usedws "!r#N) r$r%r&r'rrrr;r,rr SignedDigestAlgorithmr=r.r#r!rrbsz"("9O" """" " %- ."""X"""r#r RevInfoType)boundlstrc<dtfd}t||dS)aV Sort a list of revocation information containers in freshest-first order. Revocation information that does not have a well-defined issuance date will be grouped at the end. :param lst: A list of :class:`.RevinfoContainer` objects of the same type. :return: The same list sorted from fresh to stale. containerc|j}|du|fSN) issuance_date)rCdts r!_keyz!sort_freshest_first.._keys  $~r!!r#T)keyreverse)rsorted)rArHs r!rrs5"("""" #4 . . ..r#cZ|j}| | ||kr||z }|t||z}|SrE) freshnessabs)r6 this_update next_updatetime_tolerancefreshness_deltas r!_freshness_deltarSsH&O  "{k'A'A)K7O"o..? r#rOrPr6r7cH|ttjS|j}|j}|jt jkrct||||}|ttjS|j }|||z|z kr"ttj |||z |zSn|jt j krXt||||}|ttjS||z|z}||krttj ||Sn||jt j kr`| |tz}|j} | s"|||z krttjS|||zkrttj |||zSnt ttjS)N)r3r2)rrr+validation_timerQfreshness_req_typerTIME_AFTER_SIGNATURErSbest_signature_timer*MAX_DIFF_REVOCATION_VALIDATIONDEFAULTrretroactive_revinforr:r) rOrPr6r7rUrQrRsignature_poe_timecutoff retroactives r!_judge_revinfor_s  6 >???#3O"1N $4$III+ Kn    "#$:$BCC C*> +==N N N#&,.*_<~M  O !  : ; ;+ Kn    "#$:$BCC C .? V # ##&,+%  $  "&6&> > >   &(KKK0  D~1MMM#$:$BCC C [>9 9 9#&,+*^;  :"! 25 6 66r#c||dj}|dkrdS|d}|djdkrdS|djS)Nresponse_status successfulresponse_bytes response_typebasic_ocsp_responseresponse)nativeparsed) ocsp_responsestatusrcs r!_extract_basic_ocsp_responserksT, - 4F t"#34No&-1FFFt * % ,,r#c"eZdZUdZejed< dZeed< e dejde dfdZ e de efdZd ed edefd Zde ejfd Zde ejfd Ze de ejfdZdS)rz) Container for an OCSP response. ocsp_response_datarindexrirct}|gS|d}fdtt|dDS)a Turn an OCSP response object into one or more :class:`.OCSPContainer` objects. If a :class:`.OCSPContainer` contains more than one ``SingleResponse``, then the same OCSP response will be duplicated into multiple containers, each with a different ``index`` value. :param ocsp_response: An OCSP response. :return: A list of :class:`.OCSPContainer` objects, one for each ``SingleResponse`` value. Ntbs_response_datac2g|]}t|S))rmrn)r).0ixris r! z,OCSPContainer.load_multi..2s6    ]" E E E   r# responses)rkrangelen)clsrire tbs_responses ` r! load_multizOCSPContainer.load_multisi";=II  &I*+>?     C [ 9::;;    r#cL|}|dS|djS)NrO)extract_single_responserg)r cert_responses r!rFzOCSPContainer.issuance_date7s,4466  4]+22r#r6r7c|}|ttjS|dj}|dj}t ||||S)NrOrPr6r7)r|rrr+rgr_)r r6r7r}rOrPs r!r;zOCSPContainer.usable_at?sj4466  #$:$BCC C#M29 #M29   '     r#c*t|jS)z Extract the ``BasicOCSPResponse``, assuming there is one (i.e. the OCSP response is a standard, non-error response). )rkrmrs r!extract_basic_ocsp_responsez)OCSPContainer.extract_basic_ocsp_responseOs ,D,CDDDr#c|}|dS|d}t|d|jkrdS|d|jS)z^ Extract the unique ``SingleResponse`` value identified by the index. Nrpru)rrwrn)r rerys r!r|z%OCSPContainer.extract_single_responseWs] #>>@@  &4*+>? |K( ) )TZ 7 74K(44r#cB|}|dn|dSNsignature_algorithm)r)r basic_resps r!r=z(OCSPContainer.revinfo_sig_mechanism_usedfs*5577 !)ttz:O/PPr#N)r$r%r&r'r OCSPResponser4rnint classmethodrrzr,rrrFrrrr;BasicOCSPResponserSingleResponser|r r>r=r.r#r!rr s\))))E3NNN   - o    [ 43x1333X3 ( 9O     EXd6L-MEEEE 5$2E)F 5 5 5 5Q %- .QQQXQQQr#rceZdZUdZejed< dedede fdZ e de e fdZe dejfdZd S) rz< Container for a certificate revocation list (CRL). crl_datar6r7rcv|jd}|dj}|dj}t||||S)N tbs_cert_listrOrPr)rrgr_)r r6r7rrOrPs r!r;zCRLContainer.usable_atysJ o6 #M29 #M29  V=    r#c6|jd}|djS)NrrO)rrg)r rs r!rFzCRLContainer.issuance_dates o6 ]+22r#c|jdSr)rrs r!r=z'CRLContainer.revinfo_sig_mechanism_useds}233r#N)r$r%r&r'r CertificateListr4rrrr;r,rrrFr r>r=r.r#r!rrns!!!! ( 9O     3x1333X34E,G444X444r#rcrlscjg}|D]}t|trtj|}t|tjrt |}t|t r||tdt|j |S)z Internal function to process legacy CRL data into one or more :class:`.CRLContainer`. :param crls: Legacy CRL input data. :return: A list of :class:`.CRLContainer` objects. zScrls must be a list of byte strings or asn1crypto.crl.CertificateList objects, not ) isinstancebytesr rloadrappend TypeErrortyper$)rnew_crlscrl_s r!rrsH   dE " " 2&++D11D dC/ 0 0 &%%D dL ) )  OOD ! ! ! !-Dzz*--  Or#ocspscg}|D]}t|trtj|}t|tjr0t |}||t|t r||tdt|j |S)z Internal function to process legacy OCSP data into one or more :class:`.OCSPContainer`. :param ocsps: Legacy OCSP input data. :return: A list of :class:`.OCSPContainer` objects. zRocsps must be a list of byte strings or asn1crypto.ocsp.OCSPResponse objects, not ) rrr rrrrzextendrrrr$)r new_ocspsocsp_extrs r!rrsI   eU # # 2%**511E eT. / /  ++E22D   T " " " " } - -    U # # # #.E{{+..  r#)+abcr( dataclassesrrtypingrrrrr asn1cryptor r r pyhanko_certvalidator.ltv.typesr r!pyhanko_certvalidator.policy_declrrr__all__EnumrrABCrr?rrSr_rrkrrrrLegacyCompatCRLrLegacyCompatOCSPrrr.r#r!rs !!!!!!;;;;;;;;;;;;;;''''''''''   ( ( ( ( ( TY( ( ( V $."""""*CG"""@gm+;<<< /Xk2/tK7H////4P7(#P7(#P7 P7* P7  P7P7P7P7f - d$% - - - - $_Q_Q_Q_Q_Q$_Q_Q_QD $44444#444<s2L@A 1=@A ? # ,< $ % -r#