h PddlmZddlmZddlmZddlmZGddZdS))Optional)x509ValidationPath)ConsListceZdZddddeedeedefdZe dZ e d efd Z d e j fd Zdd ZdS) ValProcStateNF)ee_name_overrideis_side_validationcert_path_stackr r c|jtdd|_||_t |p|j|_||_dS)NzEmpty path stackr)head ValueErrorindexr booltailr r )selfr r r s X/var/www/html/Sam_Eipo/venv/lib/python3.11/site-packages/pyhanko_certvalidator/_state.py__init__zValProcState.__init__ sX   '/00 0 0"&  6/"6# #  /cXddlm}|jj}t ||sJ|jS)z Length of the path being validated. .. note:: This is the path length in the sense of RFC 5280, i.e. the root doesn't count. rr)pyhanko_certvalidator.pathrr r isinstancepkix_len)rrpaths rpath_lenzValProcState.path_lens? >=====#($/////}rreturnc"|j|jkS)N)rr)rs r is_ee_certzValProcState.is_ee_cert)szT]**ree_certczddlm}|jD],}|}|r|j|jkr|cS-dS)a Helper method to avoid recursion in indirect CRL validation. There are some questionable-but-technically-valid CA setups where a CRL issuer is authorised to assert its own revocation status, which could cause a naive implementation to recurse. rrN)rrr get_ee_cert_safesha256)rr rrcerts rcheck_path_verif_recursionz'ValProcState.check_path_verif_recursion-s` >=====(  D((**D  w~55 trc| }|jdkr |jd}n(|js||z}d|j}n|j|j}nd}|rd|zS|S)zy :return: A unicode string describing the position of a certificate in the chain N certificatezintermediate certificate zend-entity certificatezthe )rr r)r def_interm never_defprefixresults r describe_certzValProcState.describe_cert=sy :>>d3;"FF . j F===FF  " .*FF-F  F? "Mr)FF)__name__ __module__ __qualname__rrrstrrrpropertyrrr Certificater%r-rrr r s +/#( ///".1/#3- / ! ////   X +D+++X+$2B rr N) typingr asn1cryptorrrpyhanko_certvalidator.utilrr r4rrr8s555555//////IIIIIIIIIIr