o ޭje @sddlmZddlZddlZddlZddlmZddlmZddl m Z ddl m Z ddlmZmZmZmZmZmZmZmZddlmZmZdd lmZmZmZdd lmZm Z dd l!m"Z"ed d d Z#ej$e j%e j&e j'e j(e j)e j*e j+e j,fZ-Gddde.Z/d5ddZ0d6ddZ1d7d d!Z2Gd"d#d#Z3Gd$d%d%Z4Gd&d'd'ej5Z6Gd(d)d)e.Z7e j8Z8e j9Z9e j:Z:e j;Z;e jZ>e j?Z?e j@Z@e jAZAe jBZBGd*d+d+ZCGd,d-d-ZDGd.d/d/ZEGd0d1d1ZFd8d3d4ZGdS)9) annotationsN)Iterable)utils)x509)hashes)dsaeced448ed25519paddingrsax448x25519) CertificateIssuerPrivateKeyTypesCertificatePublicKeyTypes) Extension ExtensionType_make_sequence_methods)Name _ASN1Type)ObjectIdentifiericeZdZd fdd ZZS) AttributeNotFoundmsgstroidrreturnNonect|||_dSN)super__init__r)selfrr __class__S/var/www/html/CropPilot/venv/lib/python3.10/site-packages/cryptography/x509/base.pyr"6  zAttributeNotFound.__init__)rrrrrr__name__ __module__ __qualname__r" __classcell__r&r&r$r'r5r extensionExtension[ExtensionType] extensionslist[Extension[ExtensionType]]rrcCs"|D] }|j|jkrtdqdS)Nz$This extension has already been set.)r ValueError)r/r1er&r&r'_reject_duplicate_extension;s  r5rr attributes0list[tuple[ObjectIdentifier, bytes, int | None]]cCs$|D] \}}}||krtdqdS)Nz$This attribute has already been set.)r3)rr6attr_oid_r&r&r'_reject_duplicate_attributeEs r:timedatetime.datetimecCs6|jdur|}|r |nt}|jdd|S|S)zNormalizes a datetime to a naive datetime in UTC. time -- datetime to normalize. Assumed to be in UTC if not timezone aware. N)tzinfo)r= utcoffsetdatetime timedeltareplace)r;offsetr&r&r'_convert_to_naive_utc_timeOs rCc@sXeZdZejjfdd d Zedd d Zedd dZdddZ dddZ dddZ dS) Attributerrvaluebytes_typeintrrcC||_||_||_dSr )_oid_valuerG)r#rrErGr&r&r'r"^ zAttribute.__init__cC|jSr )rJr#r&r&r'rhz Attribute.oidcCrMr )rKrNr&r&r'rElrOzAttribute.valuercCsd|jd|jdS)Nz)rrErNr&r&r'__repr__pzAttribute.__repr__otherobjectboolcCs2t|tstS|j|jko|j|jko|j|jkSr ) isinstancerDNotImplementedrrErG)r#rSr&r&r'__eq__ss    zAttribute.__eq__cCst|j|j|jfSr )hashrrErGrNr&r&r'__hash__}szAttribute.__hash__N)rrrErFrGrHrr)rr)rrFrr)rSrTrrUrrH) r*r+r,r UTF8StringrEr"propertyrrQrXrZr&r&r&r'rD]s      rDc@s8eZdZdddZed\ZZZdd d ZdddZ dS) Attributesr6Iterable[Attribute]rrcCst||_dSr )list _attributes)r#r6r&r&r'r"szAttributes.__init__rbrcCsd|jdS)Nz dd Zd?d#d$Z d?d%d&Z d@d+d,Z dAddd-dBd9d:Z dS)CCertificateBuilderr2rrN issuer_namerpro public_key CertificatePublicKeyTypes | None serial_number int | Nonenot_valid_beforedatetime.datetime | Nonenot_valid_afterr1rrcCs6tj|_||_||_||_||_||_||_||_ dSr ) rhrk_version _issuer_namerq _public_key_serial_number_not_valid_before_not_valid_afterrr)r#rrorrrrr1r&r&r'r"'s  zCertificateBuilder.__init__rsrcCsDt|ts td|jdurtdt||j|j|j|j |j |j S)z3 Sets the CA's distinguished name. rtN%The issuer name may only be set once.) rVrrvrr3rrqrrrrrrrwr&r&r'r:s  zCertificateBuilder.issuer_namecCsDt|ts td|jdurtdt|j||j|j|j |j |j S)z: Sets the requestor's distinguished name. rtNru) rVrrvrqr3rrrrrrrrrwr&r&r'roLs  zCertificateBuilder.subject_namekeyrc Cs`t|tjtjtjtjt j t j t jfstd|jdur tdt|j|j||j|j|j|jS)zT Sets the requestor's public key (as found in the signing request). zExpecting one of DSAPublicKey, RSAPublicKey, EllipticCurvePublicKey, Ed25519PublicKey, Ed448PublicKey, X25519PublicKey, or X448PublicKey.Nz$The public key may only be set once.)rVr DSAPublicKeyr RSAPublicKeyrEllipticCurvePublicKeyr Ed25519PublicKeyr Ed448PublicKeyrX25519PublicKeyr X448PublicKeyrvrr3rrrqrrrrr)r#rr&r&r'r^s2  zCertificateBuilder.public_keynumberrHcCsht|ts td|jdurtd|dkrtd|dkr$tdt|j|j|j ||j |j |j S)z5 Sets the certificate serial number. 'Serial number must be of integral type.N'The serial number may only be set once.rz%The serial number should be positive.3The serial number should not be more than 159 bits.) rVrHrvrr3 bit_lengthrrrqrrrrrr#rr&r&r'rs&   z CertificateBuilder.serial_numberr;r<cCszt|tjs td|jdurtdt|}|tkrtd|jdur-||jkr-tdt|j |j |j |j ||j|j S)z7 Sets the certificate activation time. Expecting datetime object.Nz*The not valid before may only be set once.z>The not valid before date must be on or after 1950 January 1).zBThe not valid before date must be before the not valid after date.)rVr?rvrr3rC_EARLIEST_UTC_TIMErrrrqrrrrr#r;r&r&r'rs,  z#CertificateBuilder.not_valid_beforecCszt|tjs td|jdurtdt|}|tkrtd|jdur-||jkr-tdt|j |j |j |j |j||j S)z7 Sets the certificate expiration time. rNz)The not valid after may only be set once.zsh     (    $pE