|
Server : LiteSpeed System : Linux host 5.15.0-161-generic #171-Ubuntu SMP Sat Oct 11 08:17:01 UTC 2025 x86_64 User : idnco5810 ( 1093) PHP Version : 8.2.29 Disable Function : NONE Directory : /lib/python3/dist-packages/cryptography/hazmat/backends/openssl/__pycache__/ |
Upload File : |
o
�)%a9 � @ s� d dl Z d dlZd dlmZmZ d dlmZ d dlmZm Z m
Z
m Z m Z m
Z
d dlmZ d dlmZmZ d dlmZmZmZmZmZmZmZ dd � Zd
d � Z d d
� Z dd� Z G dd� de�Z G dd� de�Z dS )� N)�utils�x509)�UnsupportedAlgorithm)� _CRL_ENTRY_REASON_CODE_TO_ENUM�_asn1_integer_to_int�_asn1_string_to_bytes�_decode_x509_name�_obj2txt� _parse_asn1_generalized_time)� _Certificate)�hashes�
serialization)�OCSPCertStatus� OCSPRequest� OCSPResponse�OCSPResponseStatus�_CERT_STATUS_TO_ENUM�
_OIDS_TO_HASH�_RESPONSE_STATUS_TO_ENUMc C s^ | j �d�}| j�| j j| j j|| j j|�}| �|dk� | �|d | j jk� t| |d �S �N�ASN1_OCTET_STRING **� r ��_ffi�new�_lib�OCSP_id_get0_info�NULL�openssl_assertr )�backend�cert_id�key_hash�res� r# �K/usr/lib/python3/dist-packages/cryptography/hazmat/backends/openssl/ocsp.py�_issuer_key_hash s �r% c C s^ | j �d�}| j�|| j j| j j| j j|�}| �|dk� | �|d | j jk� t| |d �S r r )r r � name_hashr" r# r# r$ �_issuer_name_hash- s �r' c C s^ | j �d�}| j�| j j| j j| j j||�}| �|dk� | �|d | j jk� t| |d �S )NzASN1_INTEGER **r r )r r r r r r r )r r �numr" r# r# r$ �_serial_number; s �r) c C s� | j �d�}| j�| j j|| j j| j j|�}| �|dk� | �|d | j jk� t| |d �}zt| W S tyB t d�
|���w )NzASN1_OBJECT **r r z*Signature algorithm OID: {} not recognized) r r r r r r r r �KeyErrorr �format)r r �asn1objr" �oidr# r# r$ �_hash_algorithmE s$ �
��r. c @ s� e Zd Zdd� Ze�d�Zd3dd�Zede j
fdd ��Z ede j
ej fd
d ��Zedefd d
��Zedefdd��Zede je j fdd��Zede j
e fdd��Zede j
e j fdd��Zdd� Zedejfdd��Z ede fdd��Z ede j
ej fd d ��Z ede j
e j fd d ��Z!edejfd d!��Z"ede j
ej fd"d#��Z#edefd$d%��Z$edefd&d'��Z%edejfd(d)��Z&ede'fd*d+��Z(ej)de j*fd,d-��Z+ej)de j*fd.d/��Z,d0e-j.defd1d2�Z/dS )4�
_OCSPResponsec C s || _ || _| j j�| j�}| j �|tv � t| | _| jtju r�| j j� | j�}| j �|| j j
j k� | j j
� || j jj
�| _| j j�| j�}|dkrStd�|���| j j�| jd�| _| j �| j| j j
j k� | j j�| j�| _| j �| j| j j
j k� d S d S )Nr zhOCSP response contains more than one SINGLERESP structure, which this library does not support. {} foundr )�_backend�_ocsp_responser �OCSP_response_statusr r �_statusr �
SUCCESSFUL�OCSP_response_get1_basicr r �gc�OCSP_BASICRESP_free�_basic�OCSP_resp_count�
ValueErrorr+ �OCSP_resp_get0�_single�OCSP_SINGLERESP_get0_id�_cert_id)�selfr �
ocsp_response�status�basic�num_respr# r# r$ �__init__Z s<
�
������z_OCSPResponse.__init__r3 �returnNc C s | j tjkr
td��d S )NzCOCSP response status is not successful so the property has no value)�response_statusr r4 r: �r? r# r# r$ � _requires_successful_response| s
��z+_OCSPResponse._requires_successful_responsec C sF | � � | jj�| j�}| j�|| jjjk� t| j|j �}t
� |�S �N) rH r0 r �OCSP_resp_get0_tbs_sigalgr8 r r r r � algorithmr �ObjectIdentifier)r? �algr- r# r# r$ �signature_algorithm_oid� s
z%_OCSPResponse.signature_algorithm_oidc C s8 | � � | j}ztj| W S ty td�|���w )Nz)Signature algorithm OID:{} not recognized)rH rN r �_SIG_OIDS_TO_HASHr* r r+ )r? r- r# r# r$ �signature_hash_algorithm� s ��z&_OCSPResponse.signature_hash_algorithmc C s: | � � | jj�| j�}| j�|| jjjk� t| j|�S rI ) rH r0 r �OCSP_resp_get0_signaturer8 r r r r )r? �sigr# r# r$ � signature� s z_OCSPResponse.signaturec s� � � � � jj�� j�}� j�|� jjjk� � jj�d�}� jj� ||�}� j�|d � jjjk� � jj�
|� fdd��}� j�|dk� � jj� |d |�d d � S )Nzunsigned char **r c s � j j�| d �S )Nr )r0 r � OPENSSL_free)�pointerrG r# r$ �<lambda>� s z2_OCSPResponse.tbs_response_bytes.<locals>.<lambda>) rH r0 r �OCSP_resp_get0_respdatar8 r r r r �i2d_OCSP_RESPDATAr6 �buffer)r? �respdata�ppr" r# rG r$ �tbs_response_bytes� s � z _OCSPResponse.tbs_response_bytesc C s~ | � � | jj�| j�}| jj�|�}g }t|�D ]#}| jj�||�}| j�|| jj j
k� t | j|�}| |_ |�
|� q|S rI )rH r0 r �OCSP_resp_get0_certsr8 � sk_X509_num�range�
sk_X509_valuer r r r �_ocsp_resp_ref�append)r? �sk_x509r( �certs�i�x509_ptr�certr# r# r$ � certificates� s z_OCSPResponse.certificatesc C s2 | � � | �� \}}|| jjjkrd S t| j|�S rI )rH �_responder_key_namer0 r r r )r? �_� asn1_stringr# r# r$ �responder_key_hash� �
z _OCSPResponse.responder_key_hashc C s2 | � � | �� \}}|| jjjkrd S t| j|�S rI )rH ri r0 r r r )r? � x509_namerj r# r# r$ �responder_name� rm z _OCSPResponse.responder_namec C sP | j j�d�}| j j�d�}| j j�| j||�}| j �|dk� |d |d fS )Nr z X509_NAME **r r )r0 r r r �OCSP_resp_get0_idr8 r )r? rk rn r" r# r# r$ ri � s �z!_OCSPResponse._responder_key_namec C s$ | � � | jj�| j�}t| j|�S rI )rH r0 r �OCSP_resp_get0_produced_atr8 r
)r? � produced_atr# r# r$ rr � s
� z_OCSPResponse.produced_atc C sP | � � | jj�| j| jjj| jjj| jjj| jjj�}| j�|tv � t| S rI ) rH r0 r �OCSP_single_get0_statusr< r r r r )r? rA r# r# r$ �certificate_status� s �z _OCSPResponse.certificate_statusc C sz | � � | jtjur d S | jj�d�}| jj�| j | jjj
|| jjj
| jjj
� | j� |d | jjj
k� t | j|d �S �NzASN1_GENERALIZEDTIME **r )
rH rt r �REVOKEDr0 r r r rs r< r r r
�r? � asn1_timer# r# r$ �revocation_time� s �z _OCSPResponse.revocation_timec C s� | � � | jtjur d S | jj�d�}| jj�| j || jjj
| jjj
| jjj
� |d dkr0d S | j� |d t v � t |d S )Nzint *r ���)
rH rt r rv r0 r r r rs r< r r r )r? �
reason_ptrr# r# r$ �revocation_reason s" �
� z _OCSPResponse.revocation_reasonc C sj | � � | jj�d�}| jj�| j| jjj| jjj|| jjj� | j�|d | jjjk� t | j|d �S ru )
rH r0 r r r rs r< r r r
rw r# r# r$ � this_update s �z_OCSPResponse.this_updatec C sf | � � | jj�d�}| jj�| j| jjj| jjj| jjj|� |d | jjjkr1t| j|d �S d S ru ) rH r0 r r r rs r< r r
rw r# r# r$ � next_update% s �z_OCSPResponse.next_updatec C � | � � t| j| j�S rI )rH r% r0 r> rG r# r# r$ �issuer_key_hash5 � z _OCSPResponse.issuer_key_hashc C r rI )rH r' r0 r> rG r# r# r$ �issuer_name_hash: r� z _OCSPResponse.issuer_name_hashc C r rI )rH r. r0 r> rG r# r# r$ �hash_algorithm? r� z _OCSPResponse.hash_algorithmc C r rI )rH r) r0 r> rG r# r# r$ �
serial_numberD r� z_OCSPResponse.serial_numberc C � | � � | jj�| j�S rI )rH r0 �_ocsp_basicresp_ext_parser�parser8 rG r# r# r$ �
extensionsI � z_OCSPResponse.extensionsc C r� rI )rH r0 �_ocsp_singleresp_ext_parserr� r< rG r# r# r$ �single_extensionsN r� z _OCSPResponse.single_extensions�encodingc C �L |t jjur
td��| j�� }| jj�|| j�}| j� |dk� | j�
|�S �Nz/The only allowed encoding value is Encoding.DERr ) r
�Encoding�DERr: r0 �_create_mem_bio_gcr �i2d_OCSP_RESPONSE_bior1 r �
_read_mem_bio�r? r� �bior" r# r# r$ � public_bytesS s
� z_OCSPResponse.public_bytes)rE N)0�__name__�
__module__� __qualname__rD r �read_only_propertyrF rH �propertyr rL rN �typing�Optionalr �
HashAlgorithmrP �bytesrS r\ �List� Certificaterh rl �Namero ri �datetimerr r rt ry � ReasonFlagsr| r} r~ r� r� r� �intr� �cached_property�
Extensionsr� r� r
r� r� r# r# r# r$ r/ Y s\
�
r/ c @ s� e Zd Zdd� Zedefdd��Zedefdd��Zedefdd ��Z ede
j fd
d ��Z e
jdejfd d
��Zdejdefdd�ZdS )� _OCSPRequestc C s~ |j �|�dkr td��|| _|| _| jj �| jd�| _| j�| j| jjj k� | jj �
| j�| _ | j�| j | jjj k� d S )Nr z+OCSP request contains more than one requestr ) r �OCSP_request_onereq_count�NotImplementedErrorr0 �
_ocsp_request�OCSP_request_onereq_get0�_requestr r r �OCSP_onereq_get0_idr> )r? r � ocsp_requestr# r# r$ rD ` s �� z_OCSPRequest.__init__rE c C � t | j| j�S rI )r% r0 r> rG r# r# r$ r� n � z _OCSPRequest.issuer_key_hashc C r� rI )r' r0 r> rG r# r# r$ r� r r� z _OCSPRequest.issuer_name_hashc C r� rI )r) r0 r> rG r# r# r$ r� v r� z_OCSPRequest.serial_numberc C r� rI )r. r0 r> rG r# r# r$ r� z r� z_OCSPRequest.hash_algorithmc C s | j j�| j�S rI )r0 �_ocsp_req_ext_parserr� r� rG r# r# r$ r� ~ s z_OCSPRequest.extensionsr� c C r� r� ) r
r� r� r: r0 r� r �i2d_OCSP_REQUEST_bior� r r� r� r# r# r$ r� � s
z_OCSPRequest.public_bytesN)r� r� r� rD r� r� r� r� r� r� r r� r� r r� r r� r� r
r� r� r# r# r# r$ r� _ s r� )!r� r� � cryptographyr r �cryptography.exceptionsr �0cryptography.hazmat.backends.openssl.decode_asn1r r r r r r
�)cryptography.hazmat.backends.openssl.x509r � cryptography.hazmat.primitivesr r
�cryptography.x509.ocspr r r r r r r r% r' r) r. r/ r� r# r# r# r$ �<module> s $