Ƈtjn ddlmZddlZddlZddlZddlmZddlmZddl m Z ddl m Z ddlmZmZmZmZmZmZmZmZmZmZddlmZmZdd lmZmZmZdd l m!Z!m"Z"dd l#m$Z$ejd d d Z%ej&e j'e j(e j)e j*e j+e j,e j-e j.fZ/Gdde0Z1d1dZ2d2dZ3d3dZ4Gdd Z5Gd!d"Z6Gd#d$ej7Z8Gd%d&e0Z9e j:Z:e j;Z;e j<ZZ>e j?Z?e j@Z@e jAZAe jBZBe jCZCe jDZDGd'd(ZEGd)d*ZFGd+d,ZGGd-d.ZHd4d0ZIdS)5) annotationsN)Iterable)utils)x509)hashes) dsaeced448ed25519mldsamlkempaddingrsax448x25519) CertificateIssuerPrivateKeyTypesCertificatePublicKeyTypes) Extension ExtensionType_make_sequence_methods)Name _ASN1Type)ObjectIdentifieric eZdZdfd ZxZS) AttributeNotFoundmsgstroidrreturnNonecXt|||_dSN)super__init__r)selfrr __class__s T/var/www/html/CA-Chatbot/venv/lib/python3.11/site-packages/cryptography/x509/base.pyr%zAttributeNotFound.__init__8s& )rrrrr r!__name__ __module__ __qualname__r% __classcell__r's@r(rr7s=r)r extensionExtension[ExtensionType] extensionslist[Extension[ExtensionType]]r r!cN|D]!}|j|jkrtd"dS)Nz$This extension has already been set.)r ValueError)r0r2es r(_reject_duplicate_extensionr7=sD EE 5IM ! !CDD D "EEr)rr attributes0list[tuple[ObjectIdentifier, bytes, int | None]]cB|D]\}}}||krtddS)Nz$This attribute has already been set.)r5)rr8attr_oid_s r(_reject_duplicate_attributer=GsD %EE!Q s??CDD D EEr)timedatetime.datetimec|jD|}|r|ntj}|d|z S|S)zNormalizes a datetime to a naive datetime in UTC. time -- datetime to normalize. Assumed to be in UTC if not timezone aware. N)tzinfo)rA utcoffsetdatetime timedeltareplace)r>offsets r(_convert_to_naive_utc_timerGQsP  {!!!;x'9';';||4|((611 r)cveZdZejjfdd Zedd Zedd Zdd Z ddZ ddZ dS) Attributerrvaluebytes_typeintr r!c0||_||_||_dSr#)_oid_valuerL)r&rrJrLs r(r%zAttribute.__init__`s    r)c|jSr#)rOr&s r(rz Attribute.oidjs yr)c|jSr#)rPrRs r(rJzAttribute.valuens {r)rc(d|jd|jdS)Nz)rrJrRs r(__repr__zAttribute.__repr__rsCCC4:CCCCr)otherobjectboolct|tstS|j|jko|j|jko|j|jkSr#) isinstancerINotImplementedrrJrL)r&rWs r(__eq__zAttribute.__eq__usO%++ "! ! H ! * ek) * ek) r)cDt|j|j|jfSr#)hashrrJrLrRs r(__hash__zAttribute.__hash__sTXtz4:6777r)N)rrrJrKrLrMr r!)r r)r rKr r)rWrXr rYr rM) r+r,r-r UTF8StringrJr%propertyrrVr]r`r)r(rIrI_s )/ XXDDDD    888888r)rIcDeZdZddZed\ZZZddZdd Z d S) Attributesr8Iterable[Attribute]r r!c.t||_dSr#)list _attributes)r&r8s r(r%zAttributes.__init__s ++r)rkrcd|jdS)Nz > >%'' 3122 2  JtY$?$? 344 4#C)9:::  *CCC/     2d 2eS 1 2   r) rsa_paddingecdsa_deterministic private_keyr algorithm_AllowedHashTypes | Nonebackend typing.Anyr%padding.PSS | padding.PKCS1v15 | Noner bool | NoneCertificateSigningRequestct|jtd|^t|tjtjfst dt|tjst d|)t|tj st dtj |||||S)zF Signs the request using the requestor's private key. Nz/A CertificateSigningRequest must have a subjectPadding must be PSS or PKCS1v15&Padding is only supported for RSA keys1Deterministic ECDSA is only supported for EC keys) rr5r[rPSSPKCS1v15rr RSAPrivateKeyr EllipticCurvePrivateKey rust_x509create_x509_csrr&rrrrrs r(signz%CertificateSigningRequestBuilder.signs   %NOO O  "kGK9I+JKK C ABBBk3+<== J HIII  *k2+EFF G(         r))r~rr2r3r8r9)rrr r})rrrrYr r})rrrJrKrrr r}r#) rrrrrrrrrrr r)r+r,r-r%r~rrrrer)r(r}r}s%)57GI & & & & &         ."&       H# ! >B+/! ! ! ! ! ! ! ! r)r}ceZdZUded<ddddddgdfd6dZd7dZd7dZddd8dZd9dZd:d"Z d:d#Z d;d(Z dd5Z dS)?CertificateBuilderr3rN issuer_namerr~ public_key CertificatePublicKeyTypes | None serial_number int | Nonenot_valid_beforedatetime.datetime | Nonenot_valid_afterr2public_key_rsa_paddingtype[padding.PSS] | Noner r!c tj|_||_||_||_||_||_||_||_ ||_ dSr#) rtrw_version _issuer_namer _public_key_serial_number_not_valid_before_not_valid_afterr_public_key_rsa_padding) r&rr~rrrrr2rs r(r%zCertificateBuilder.__init__)sS  ')%+!1 /%'=$$$r)rrc t|tstd|jt dt ||j|j|j|j |j |j |j S)z3 Sets the CA's distinguished name. rN%The issuer name may only be set once.) r[rrrr5rrrrrrrrrs r(rzCertificateBuilder.issuer_name>s|$%% ;9:: :   (DEE E!         "  !    (   r)c t|tstd|jt dt |j||j|j|j |j |j |j S)z: Sets the requestor's distinguished name. rNr) r[rrrr5rrrrrrrrrs r(r~zCertificateBuilder.subject_nameQs|$%% ;9:: :   )EFF F!         "  !    (   r))rkeyrrclt|tjtjt jtjtj tj tj tjtjtjt$jt(jf st-d|F|t.jurt-dt|tjst-d|jt5dt7|j|j||j|j|j |j!|S)zT Sets the requestor's public key (as found in the signing request). zExpecting one of DSAPublicKey, RSAPublicKey, EllipticCurvePublicKey, Ed25519PublicKey, Ed448PublicKey, MLDSA44PublicKey, MLDSA65PublicKey, MLDSA87PublicKey, MLKEM768PublicKey, MLKEM1024PublicKey, X25519PublicKey or X448PublicKey.Nz2rsa_padding must be the PSS class, not an instancez2rsa_padding is only supported with RSA public keysz$The public key may only be set once.)"r[r DSAPublicKeyr RSAPublicKeyr EllipticCurvePublicKeyr Ed25519PublicKeyr Ed448PublicKeyr MLDSA44PublicKeyMLDSA65PublicKeyMLDSA87PublicKeyr MLKEM768PublicKeyMLKEM1024PublicKeyrX25519PublicKeyr X448PublicKeyrrrrr5rrrrrrr)r&rrs r(rzCertificateBuilder.public_keyds+   )($&&&'(&"    "5   "'+--Hc3#344 H   'CDD D!         "  !      r)numberrMc `t|tstd|jt d|dkrt d|dkrt dt |j|j|j ||j |j |j |j S)z5 Sets the certificate serial number. 'Serial number must be of integral type.N'The serial number may only be set once.rz%The serial number should be positive.3The serial number should not be more than 159 bits.)r[rMrrr5 bit_lengthrrrrrrrrr&rs r(rz CertificateBuilder.serial_numbers&#&& GEFF F   *FGG G Q;;DEE E     # % %E "         "  !    (   r)r>r?c t|tjstd|jt dt |}|t krt d|j||jkrt dt|j |j |j |j ||j|j |jS)z7 Sets the certificate activation time. Expecting datetime object.Nz*The not valid before may only be set once.z>The not valid before date must be on or after 1950 January 1).zBThe not valid before date must be before the not valid after date.)r[rCrrr5rG_EARLIEST_UTC_TIMErrrrrrrrr&r>s r(rz#CertificateBuilder.not_valid_befores$ 122 :899 9  ! -IJJ J)$// $ $ $$   ,8M1M1M "           !    (   r)c t|tjstd|jt dt |}|t krt d|j||jkrt dt|j |j |j |j |j||j |jS)z7 Sets the certificate expiration time. rNz)The not valid after may only be set once.zr?r r)rrrrYr rr#) rrrrrrrrrrr r)r r)r+r,r-__annotations__r%rr~rrrrrrrrer)r(rr&s8////$($(7;$(594857;?>>>>>*    &    .15 5 5 5 5 5 5 n    8    <    @    6# 3 >B+/3 3 3 3 3 3 j      r)rcteZdZUded<ded<dddggfd)d Zd*dZd+dZd,dZd-dZd.dZ d/dddd0d(Z dS)1 CertificateRevocationListBuilderr3rlist[RevokedCertificate]_revoked_certificatesNrr last_updater next_updater2revoked_certificatescL||_||_||_||_||_dSr#)r _last_update _next_updaterr)r&rrrr2rs r(r%z)CertificateRevocationListBuilder.__init__ds2(''%%9"""r)rr ct|tstd|jt dt ||j|j|j|j S)Nrr) r[rrrr5rrrrr)r&rs r(rz,CertificateRevocationListBuilder.issuer_namersj+t,, ;9:: :   (DEE E/         &    r)r?cbt|tjstd|jt dt |}|t krt d|j||jkrt dt|j ||j|j |j S)Nr!Last update may only be set once.8The last update date must be on or after 1950 January 1.z9The last update date must be before the next update date.) r[rCrrr5rGrrrrrr)r&rs r(rz,CertificateRevocationListBuilder.last_updates+x'899 :899 9   (@AA A0== + + +J    ([4;L-L-LK 0         &    r)cbt|tjstd|jt dt |}|t krt d|j||jkrt dt|j |j||j |j S)Nrrrz8The next update date must be after the last update date.) r[rCrrr5rGrrrrrr)r&rs r(rz,CertificateRevocationListBuilder.next_updates+x'899 :899 9   (@AA A0== + + +J    ([4;L-L-LJ 0         &    r)rrrrYct|tstdt|j||}t ||jt|j|j |j g|j||j S)zM Adds an X.509 extension to the certificate revocation list. r) r[rrrrr7rrrrrrrs r(rz.CertificateRevocationListBuilder.add_extensions &-00 B@AA Afj(F;; #It/?@@@/       *d * *  &    r)revoked_certificateRevokedCertificatect|tstdt|j|j|j|jg|j|S)z8 Adds a revoked certificate to the CRL. z)Must be an instance of RevokedCertificate) r[rrrrrrrr)r&rs r(add_revoked_certificatez8CertificateRevocationListBuilder.add_revoked_certificatesc -/ABB IGHH H/         >d( >*= >    r)rrrrrrrrrrrCertificateRevocationListc|jtd|jtd|jtd|^t |t jt jfstdt |tj std|)t |tj stdtj|||||S)NzA CRL must have an issuer namez"A CRL must have a last update timez"A CRL must have a next update timerrr)rr5rrr[rrrrrrr rrcreate_x509_crlrs r(rz%CertificateRevocationListBuilder.signs   $=>> >   $ABB B   $ABB B  "kGK9I+JKK C ABBBk3+<== J HIII  *k2+EFF G(         r)) rrrrrrr2r3rr)rrr r)rr?r r)rr?r r)rrrrYr r)rrr rr#) rrrrrrrrrrr r) r+r,r-rr%rrrrrrrer)r(rr`s////3333$(0404579; : : : : :         0    0    &    *# $ >B+/$ $ $ $ $ $ $ $ r)rc@eZdZddgfddZdd ZddZddZdddZdS)RevokedCertificateBuilderNrrrevocation_daterr2r3c0||_||_||_dSr#)r_revocation_dater)r&rrr2s r(r%z"RevokedCertificateBuilder.__init__s" , /%r)rrMr c$t|tstd|jt d|dkrt d|dkrt dt ||j|jS)Nrrrz$The serial number should be positiverr) r[rMrrr5rrrrrs r(rz'RevokedCertificateBuilder.serial_numbers&#&& GEFF F   *FGG G Q;;CDD D     # % %E ) D)4+;   r)r>r?ct|tjstd|jt dt |}|t krt dt|j||j S)Nrz)The revocation date may only be set once.z7The revocation date must be on or after 1950 January 1.) r[rCrrr5rGrrrrrs r(rz)RevokedCertificateBuilder.revocation_dates$ 122 :899 9  ,HII I)$// $ $ $I )  t'7   r)rrrrYct|tstdt|j||}t ||jt|j|j g|j|S)Nr) r[rrrrr7rrrrrs r(rz'RevokedCertificateBuilder.add_extension)sz&-00 B@AA Afj(F;; #It/?@@@(    ! *d * *   r)rrrc|jtd|jtdtj|S)Nz/A revoked certificate must have a serial numberz1A revoked certificate must have a revocation date)rr5rrcreate_revoked_certificate)r&rs r(buildzRevokedCertificateBuilder.build7sK   &NOO O  (C 3D999r))rrrrr2r3)rrMr r)r>r?r r)rrrrYr rr#)rrr r)r+r,r-r%rrrr rer)r(rrs%)4857 &&&&&    $        :::::::r)rrMcbttjdddz S)Nbigr)rM from_bytesosurandomrer)r(random_serial_numberrAs# >>"*R..% 0 0A 55r))r0r1r2r3r r!)rrr8r9r r!)r>r?r r?rb)J __future__rrCrtypingcollections.abcr cryptographyr"cryptography.hazmat.bindings._rustrrcryptography.hazmat.primitivesr)cryptography.hazmat.primitives.asymmetricrr r r r r rrrr/cryptography.hazmat.primitives.asymmetric.typesrrcryptography.x509.extensionsrrrcryptography.x509.namerrcryptography.x509.oidrrUnionSHA224SHA256SHA384SHA512SHA3_224SHA3_256SHA3_384SHA3_512_AllowedHashTypes Exceptionrr7r=rGrIrgEnumrtryrrrrload_pem_x509_certificateload_der_x509_certificateload_pem_x509_certificatesload_pem_x509_csrload_der_x509_csrload_pem_x509_crlload_der_x509_crlr}rrrrrer)r(r2s4 #""""" $$$$$$@@@@@@111111                         32222222222222&X&tQ22L M M M M O O O O   EEEEEEEE    !8!8!8!8!8!8!8!8HFFFFFFFF(     ej   -----Y--- # 1&?%?&?%?&A////m m m m m m m m `w w w w w w w w t Y Y Y Y Y Y Y Y xB:B:B:B:B:B:B:B:J666666r)