KVc@`s#ddlmZmZmZddlZddlZddlZddlZddlm Z ddl Z ddl Z ddl m Z mZddlmZmZddlmZmZmZmZmZmZmZmZmZmZmZddlmZm Z ddl!m"Z"dd l#m$Z$m%Z%m&Z&dd l'm(Z(m)Z)dd l*m+Z+dd l,m-Z-dd l.m/Z/m0Z0ddl1m2Z2m3Z3m4Z4m5Z5m6Z6m7Z7m8Z8ddl9m:Z;ddl<m=Z=ddl>m?Z?m@Z@ddlAmBZBmCZCmDZDddlEmFZFmGZGmHZHmIZIddlJmKZKmLZLmMZMmNZNmOZOmPZPmQZQmRZRddlSmTZTmUZUmVZVmWZWmXZXmYZYmZZZddl[m\Z\m]Z]m^Z^ej_dddgZ`dZadZbdZcdZddZedZfd Zgd!Zhd"Zid#Zjd$Zkd%Zld&Zmd'Znd(Zod)Zpd*Zqd+Zrd,Zsd-Ztd.Zud/Zvd0Zwd1Zxd2Zyd3Zzid4ej{j|6d5ej{j}6d6ej{j~6d7ej{j6d8ej{j6d9ej{j6d:ej{j6d;ej{j6Zd<Zd=Zd>Zi ete]j6exe]j6ere]j6ewe]j6ewe]j6eze]j6ese]j6eme]j6eue]j6ee]j6ege]j6eqe]j6ee]j6Ziewe]j6ese]j6eue]j6eje]j6Ziewe\j6eke\j6ele\j6Zd?efd@YZe=jdAdBdCdDZe jee jee jee jee jee jee jee jee jee jee jedEefdFYZdGefdHYZeZdS(Ii(tabsolute_importtdivisiontprint_functionN(tcontextmanager(tutilstx509(tUnsupportedAlgorithmt_Reasons( t CMACBackendt CipherBackendtDERSerializationBackendt DSABackendtEllipticCurveBackendt HMACBackendt HashBackendtPBKDF2HMACBackendtPEMSerializationBackendt RSABackendt X509Backend(t_AESCTRCipherContextt_CipherContext(t _CMACContext(t_DSAParameterst_DSAPrivateKeyt _DSAPublicKey(t_EllipticCurvePrivateKeyt_EllipticCurvePublicKey(t _HashContext(t _HMACContext(t_RSAPrivateKeyt _RSAPublicKey(t_CRL_ENTRY_REASON_ENUM_TO_CODEt _Certificatet_CertificateRevocationListt_CertificateSigningRequestt_DISTPOINT_TYPE_FULLNAMEt_DISTPOINT_TYPE_RELATIVENAMEt_RevokedCertificate(tffi(tbinding(thashest serialization(tdsatectrsa(tMGF1tOAEPtPKCS1v15tPSS(tAEStARC4tBlowfishtCAST5tCamelliatIDEAtSEEDt TripleDES(tCBCtCFBtCFB8tCTRtECBtGCMtOFB(tCRLEntryExtensionOIDt ExtensionOIDtNameOIDt _MemoryBIOtbiotchar_ptrcC`sb|j|}|jj||jj}|jj||jj}|j||jjk|S(s Converts a python integer to an ASN1_INTEGER. The returned ASN1_INTEGER will not be garbage collected (to support adding them to structs that take ownership of the object). Be sure to register it for GC if it will be discarded after use. (t _int_to_bnt_ffitgct_libtBN_freetBN_to_ASN1_INTEGERtNULLtopenssl_assert(tbackendtxti((sP/usr/lib/python2.7/dist-packages/cryptography/hazmat/backends/openssl/backend.pyt_encode_asn1_int?s cC`s.t||}|jj||jj}|S(N(RQRGRHRItASN1_INTEGER_free(RNRORP((sP/usr/lib/python2.7/dist-packages/cryptography/hazmat/backends/openssl/backend.pyt_encode_asn1_int_gcSscC`s>|jj}|jj|||}|j|dk|S(s@ Create an ASN1_OCTET_STRING from a Python byte string. i(RItASN1_OCTET_STRING_newtASN1_OCTET_STRING_setRM(RNtdatatlengthtstres((sP/usr/lib/python2.7/dist-packages/cryptography/hazmat/backends/openssl/backend.pyt_encode_asn1_strYscC`sV|jj}|jj||jdt|jd}|j|dk|S(s Create an ASN1_UTF8STRING from a Python unicode string. This object will be an ASN1_STRING with UTF8 type in OpenSSL and can be decoded with ASN1_STRING_to_UTF8. tutf8i(RItASN1_UTF8STRING_newtASN1_STRING_settencodetlenRM(RNtstringRXRY((sP/usr/lib/python2.7/dist-packages/cryptography/hazmat/backends/openssl/backend.pyt_encode_asn1_utf8_strcs  'cC`s1t|||}|jj||jj}|S(N(RZRGRHRItASN1_OCTET_STRING_free(RNRVRWRX((sP/usr/lib/python2.7/dist-packages/cryptography/hazmat/backends/openssl/backend.pyt_encode_asn1_str_gcqsc`s\jjd}|||}j|dkjj|fd}||fS(Nsunsigned char **ic`sjj|dS(Ni(RIt OPENSSL_free(tpointer(RN(sP/usr/lib/python2.7/dist-packages/cryptography/hazmat/backends/openssl/backend.pyt|s(RGtnewRMRH(RNti2d_functvaluetpptr((RNsP/usr/lib/python2.7/dist-packages/cryptography/hazmat/backends/openssl/backend.pyt_encode_extension_to_derws  cC`s(t||j}t||jj|S(N(RSt skip_certsRlRIti2d_ASN1_INTEGER(RNtinhibit_any_policytasn1int((sP/usr/lib/python2.7/dist-packages/cryptography/hazmat/backends/openssl/backend.pyt_encode_inhibit_any_policysc C`s|jj}x|D]}|jjd}t||jj}|jtjkrd|jj }n |jj }|jj ||||ddd}|j |dkqW|S(sP The X509_NAME created will not be gc'd. Use _encode_name_gc if needed. R[iii( RIt X509_NAME_newRiR^t _txt2obj_gctoidt dotted_stringRBt COUNTRY_NAMEt MBSTRING_ASCt MBSTRING_UTF8tX509_NAME_add_entry_by_OBJRM(RNt attributestsubjectt attributeRitobjttypeRY((sP/usr/lib/python2.7/dist-packages/cryptography/hazmat/backends/openssl/backend.pyt _encode_names   cC`s.t||}|jj||jj}|S(N(RRGRHRItX509_NAME_free(RNRzR{((sP/usr/lib/python2.7/dist-packages/cryptography/hazmat/backends/openssl/backend.pyt_encode_name_gcscC`s(t||j}t||jj|S(N(RSt crl_numberRlRIRn(RNRRp((sP/usr/lib/python2.7/dist-packages/cryptography/hazmat/backends/openssl/backend.pyt_encode_crl_numberscC`s|jj}|j||jjk|jj||jj}|jj|t|j }|j|dkt ||jj |S(Ni( RItASN1_ENUMERATED_newRMRGRLRHtASN1_ENUMERATED_freetASN1_ENUMERATED_setRtreasonRlti2d_ASN1_ENUMERATED(RNt crl_reasontasn1enumRY((sP/usr/lib/python2.7/dist-packages/cryptography/hazmat/backends/openssl/backend.pyt_encode_crl_reasons cC`sw|jj|jjtj|jj}|j||jjk|jj ||jj }t ||jj |S(N( RItASN1_GENERALIZEDTIME_setRGRLtcalendarttimegmtinvalidity_datet timetupleRMRHtASN1_GENERALIZEDTIME_freeRlti2d_ASN1_GENERALIZEDTIME(RNRttime((sP/usr/lib/python2.7/dist-packages/cryptography/hazmat/backends/openssl/backend.pyt_encode_invalidity_dates c C`sp|jj}|j||jjk|jj||jj}x|D] }|jj}|j||jjk|jj||}|j|dkt ||j j }||_ |j rJ|jj}|j||jjkxX|j D]M}|jj} |j| |jjk|jj|| }|j|dkt|tjrt |tjj | _t||jdt|jd| j_qt|tjstt |tjj | _|jj} |j| |jjk| | j_ |j!r1t"||j!| _#nt$||j%| _&qW||_'qJqJWt(||jj)|S(Nitascii(*RItsk_POLICYINFO_new_nullRMRGRLRHtsk_POLICYINFO_freetPOLICYINFO_newtsk_POLICYINFO_pusht_txt2objtpolicy_identifierRutpolicyidtpolicy_qualifierstsk_POLICYQUALINFO_new_nulltPOLICYQUALINFO_newtsk_POLICYQUALINFO_pusht isinstancetsixt text_typeRtOID_CPS_QUALIFIERtpqualidRZR^R_tdtcpsurit UserNoticetAssertionErrortOID_CPS_USER_NOTICEtUSERNOTICE_newt usernoticet explicit_textRatexptextt_encode_notice_referencetnotice_referencet noticereft qualifiersRlti2d_CERTIFICATEPOLICIES( RNtcertificate_policiestcpt policy_infotpiRYRttpqist qualifiertpqitun((sP/usr/lib/python2.7/dist-packages/cryptography/hazmat/backends/openssl/backend.pyt_encode_certificate_policiessN    !  cC`s|dkr|jjS|jj}|j||jjkt||j|_|jj}||_ xH|j D]=}t ||}|jj ||}|j|dkquW|SdS(Ni( tNoneRGRLRIt NOTICEREF_newRMRat organizationtsk_ASN1_INTEGER_new_nullt noticenostnotice_numbersRQtsk_ASN1_INTEGER_push(RNtnoticetnrt notice_stacktnumbertnumRY((sP/usr/lib/python2.7/dist-packages/cryptography/hazmat/backends/openssl/backend.pyRs   cC`sA|jd}|jj|d}|j||jjk|S(s_ Converts a Python string with an ASN.1 object ID in dotted form to a ASN1_OBJECT. Ri(R^RIt OBJ_txt2objRMRGRL(RNtnameR}((sP/usr/lib/python2.7/dist-packages/cryptography/hazmat/backends/openssl/backend.pyR scC`s.t||}|jj||jj}|S(N(RRGRHRItASN1_OBJECT_free(RNRR}((sP/usr/lib/python2.7/dist-packages/cryptography/hazmat/backends/openssl/backend.pyRsscC`s dgdfS(s The OCSP No Check extension is defined as a null ASN.1 value. Rather than calling OpenSSL we can return a Python bytestring value in a list. si((RNtext((sP/usr/lib/python2.7/dist-packages/cryptography/hazmat/backends/openssl/backend.pyt_encode_ocsp_nocheckscC`s |jj}|jj}|jj||jj}||d|j}|j|dk||d|j}|j|dk||d|j }|j|dk||d|j }|j|dk||d|j }|j|dk||d|j }|j|dk||d|j }|j|dk|j r||d|j}|j|dk||d |j}|j|dknJ||dd}|j|dk||d d}|j|dkt||jj|S( Niiiiiiiii(RItASN1_BIT_STRING_set_bittASN1_BIT_STRING_newRGRHtASN1_BIT_STRING_freetdigital_signatureRMtcontent_commitmenttkey_enciphermenttdata_enciphermentt key_agreementt key_cert_signtcrl_signt encipher_onlyt decipher_onlyRlti2d_ASN1_BIT_STRING(RNt key_usagetset_bittkuRY((sP/usr/lib/python2.7/dist-packages/cryptography/hazmat/backends/openssl/backend.pyt_encode_key_usage&s8  cC`s|jj}|j||jjk|jj||jj}|jdk rvt ||jt |j|_ n|j dk rt ||j |_n|jdk rt||j|_nt||jj|S(N(RItAUTHORITY_KEYID_newRMRGRLRHtAUTHORITY_KEYID_freetkey_identifierRRZR_tkeyidtauthority_cert_issuert_encode_general_namestissuertauthority_cert_serial_numberRQtserialRlti2d_AUTHORITY_KEYID(RNtauthority_keyidtakid((sP/usr/lib/python2.7/dist-packages/cryptography/hazmat/backends/openssl/backend.pyt _encode_authority_key_identifierHs cC`s|jj}|jj||jj}|jr9dnd|_|jrr|jdk rrt||j|_ nt ||jj |S(Nii( RItBASIC_CONSTRAINTS_newRGRHtBASIC_CONSTRAINTS_freetcat path_lengthRRQtpathlenRlti2d_BASIC_CONSTRAINTS(RNtbasic_constraintst constraints((sP/usr/lib/python2.7/dist-packages/cryptography/hazmat/backends/openssl/backend.pyt_encode_basic_constraintsbs cC`s|jj}|j||jjk|jj||jj}x~|D]v}|jj}t||j j }t ||j }||_ ||_|jj||}|j|dkqJWt||jj|S(Ni(RItsk_ACCESS_DESCRIPTION_new_nullRMRGRLRHtsk_ACCESS_DESCRIPTION_freetACCESS_DESCRIPTION_newRt access_methodRut_encode_general_nametaccess_locationtmethodtlocationtsk_ACCESS_DESCRIPTION_pushRlti2d_AUTHORITY_INFO_ACCESS(RNtauthority_info_accesstaiataccess_descriptiontadRtgnRY((sP/usr/lib/python2.7/dist-packages/cryptography/hazmat/backends/openssl/backend.pyt$_encode_authority_information_accessrs    cC`st|jj}|j||jjkxE|D]=}t||}|jj||}|j|dkq/W|S(Ni(RItGENERAL_NAMES_newRMRGRLRtsk_GENERAL_NAME_push(RNtnamest general_namesRRRY((sP/usr/lib/python2.7/dist-packages/cryptography/hazmat/backends/openssl/backend.pyRs cC`s@t||}|jj||jj}t||jj|S(N(RRGRHRItGENERAL_NAMES_freeRlti2d_GENERAL_NAMES(RNtsanR((sP/usr/lib/python2.7/dist-packages/cryptography/hazmat/backends/openssl/backend.pyt_encode_alt_names  cC`s4t||jt|j}t||jj|S(N(RctdigestR_RlRIti2d_ASN1_OCTET_STRING(RNtskitasn1_str((sP/usr/lib/python2.7/dist-packages/cryptography/hazmat/backends/openssl/backend.pyt_encode_subject_key_identifierscC`st|tjr|jj}|j||jjk|jj|_ |jj }|j||jjk|j j drdt j|j d}nt j|j }|jj||t|}|j|dk||j_nt|tjr|jj}|j||jjk|jj|_ |jj|j jjdd}|j||jjk||j_n<t|tjr|jj}|j||jjkt||j }|jj|_ ||j_nt|tjrm|jj}|j||jjkt||j jt|j j}|jj|_ ||j_ nVt|tj!r|jj}|j||jjk|jj"} |j| |jjk|jj|j#jjdd} |j| |jjk|jj$d|j } |jj$d} | | d<|jj%|jj| t|j }||jjkr|j&t'd n| | _#|| _ |jj(|_ | |j_)nt|tj*r8|jj}|j||jjkt||j+t|j+} |jj,|_ | |j_-nt|tj.r|jj}|j||jjkt||j+t|j+} |jj/|_ | |j_0nt'd j1||S( Nu*.s*.iiRsunsigned char[]sunsigned char **isInvalid ASN.1 datas"{0} is an unknown GeneralName type(2RRtDNSNameRItGENERAL_NAME_newRMRGRLtGEN_DNSR~tASN1_IA5STRING_newRit startswithtidnaR^R]R_RtdNSNamet RegisteredIDtGEN_RIDRRut registeredIDt DirectoryNameRt GEN_DIRNAMEt directoryNamet IPAddressRZtpackedt GEN_IPADDt iPAddresst OtherNamet OTHERNAME_newttype_idRgt d2i_ASN1_TYPEt_consume_errorst ValueErrort GEN_OTHERNAMEt otherNamet RFC822Namet_encodedt GEN_EMAILt rfc822NametUniformResourceIdentifiertGEN_URItuniformResourceIdentifiertformat(RNRRtia5RiRYR}tdir_nametipaddrt other_nameR%RVt data_ptr_ptrR((sP/usr/lib/python2.7/dist-packages/cryptography/hazmat/backends/openssl/backend.pyRs !      cC`s|jj}|jj||jj}xH|D]@}t||j}|jj||}|j|dkq1W|jj d|}t ||jj |S(NisEXTENDED_KEY_USAGE *( RItsk_ASN1_OBJECT_new_nullRGRHtsk_ASN1_OBJECT_freeRRutsk_ASN1_OBJECT_pushRMtcastRlti2d_EXTENDED_KEY_USAGE(RNtextended_key_usagetekuRtR}RYteku_ptr((sP/usr/lib/python2.7/dist-packages/cryptography/hazmat/backends/openssl/backend.pyt_encode_extended_key_usages iiiiiiiic C`s2|jj}|jj||jj}x|D]}|jj}|j||jjk|jr|jj }|j||jjk||_xC|jD]5}|jj |t |d}|j|dkqWn|j r=|jj }|j||jjkt|_t||j |j_||_n|jr|jj }|j||jjkt|_t||j} |jj| j} |j| |jjk| |j_||_n|jrt||j|_n|jj||}|j|dkq1Wt||jj|S(Ni(RItsk_DIST_POINT_new_nullRGRHtsk_DIST_POINT_freetDIST_POINT_newRMRLtreasonsRRt_CRLREASONFLAGSt full_nametDIST_POINT_NAME_newR#R~RRtfullnamet distpointt relative_nameR$Rtsk_X509_NAME_ENTRY_duptentriest relativenamet crl_issuert CRLissuertsk_DIST_POINT_pushRlti2d_CRL_DIST_POINTS( RNtcrl_distribution_pointstcdptpointtdptbitmaskRRYtdpnRRM((sP/usr/lib/python2.7/dist-packages/cryptography/hazmat/backends/openssl/backend.pyt_encode_crl_distribution_pointssD            cC`s|jj}||jjks't|jj||jj}t||j}||_ t||j }||_ t ||jj |S(N(RItNAME_CONSTRAINTS_newRGRLRRHtNAME_CONSTRAINTS_freet_encode_general_subtreetpermitted_subtreestpermittedSubtreestexcluded_subtreestexcludedSubtreesRlt!Cryptography_i2d_NAME_CONSTRAINTS(RNtname_constraintstnct permittedtexcluded((sP/usr/lib/python2.7/dist-packages/cryptography/hazmat/backends/openssl/backend.pyt_encode_name_constraintsBs  cC`s|dkr|jjS|jj}xV|D]N}|jj}t|||_|jj||}|dks,t q,W|SdS(Ni( RRGRLRItsk_GENERAL_SUBTREE_new_nulltGENERAL_SUBTREE_newRtbasetsk_GENERAL_SUBTREE_pushR(RNtsubtreestgeneral_subtreesRtgsRY((sP/usr/lib/python2.7/dist-packages/cryptography/hazmat/backends/openssl/backend.pyR[Ts   t_PasswordUserdatacB`seZdZRS(cC`s||_d|_d|_dS(Ni(tpasswordtcalledRt exception(tselfRn((sP/usr/lib/python2.7/dist-packages/cryptography/hazmat/backends/openssl/backend.pyt__init__s  (t__name__t __module__Rr(((sP/usr/lib/python2.7/dist-packages/cryptography/hazmat/backends/openssl/backend.pyRmssint (char *, int, int, void *)RtCryptography_pem_password_cbcC`stj|}|jd7_|js:td|_dSt|j|krtj||}|j|t|j*t|jStdj |d|_dSdS(s A pem_password_cb function pointer that copied the password to OpenSSL as required and returns the number of bytes copied. typedef int pem_password_cb(char *buf, int size, int rwflag, void *userdata); Useful for decrypting PKCS8 files and so on. The userdata pointer must point to a cffi handle of a _PasswordUserdata instance. is4Password was not given but private key is encrypted.isBPasswords longer than {0} bytes are not supported by this backend.iN( RGt from_handleRoRnt TypeErrorRpR_tbufferR(R2(tbuftsizetwritingtuserdata_handletudtpw_buf((sP/usr/lib/python2.7/dist-packages/cryptography/hazmat/backends/openssl/backend.pyt_pem_password_cbs   tBackendcB`seZdZdZdZdZdZdZdZdZ dZ d Z d Z d Z d Zd ZdZdZdZdZdZdZdZdWdZdZdZdZdZdZdZdZdZ dZ!dZ"d Z#d!Z$d"Z%d#Z&d$Z'd%Z(d&Z)d'Z*d(Z+d)Z,d*Z-d+Z.d,Z/d-Z0d.Z1d/Z2d0Z3d1Z4d2Z5d3Z6d4Z7d5Z8d6Z9d7Z:d8Z;d9Z<d:Z=d;Z>d<Z?d=Z@d>ZAd?ZBd@ZCdAZDdBZEdCZFdDZGdEZHdFZIdGZJdHZKdIZLeMdJZNdKZOdLZPdMZQdNZRdOZSdPZTdQZUdRZVdSZWdTZXdUZYdVZZRS(Xs) OpenSSL API binding interfaces. topensslcC`sstj|_|jj|_|jj|_|jjd}|j|dki|_ |j |j dS(Ntutf8onlyi( R'tBindingt_bindingR&RGtlibRIt ASN1_STRING_set_default_mask_ascRMt_cipher_registryt_register_default_cipherstactivate_osrandom_engine(RqRY((sP/usr/lib/python2.7/dist-packages/cryptography/hazmat/backends/openssl/backend.pyRrs  cC`stj|j|S(N(R't_openssl_assertRI(Rqtok((sP/usr/lib/python2.7/dist-packages/cryptography/hazmat/backends/openssl/backend.pyRMscC`sj|jj}||jjkrf|jj||jj|jj|}|j|dkndS(Ni(RItENGINE_get_default_RANDRGRLtENGINE_unregister_RANDt RAND_cleanupt ENGINE_finishRM(RqteRY((sP/usr/lib/python2.7/dist-packages/cryptography/hazmat/backends/openssl/backend.pytactivate_builtin_randoms  cC`s|j|jj|jj}|j||jjk|jj|}|j|dk|jj |}|j|dk|jj |}|j|dk|jj |}|j|dk|jj dS(Ni( RRIt ENGINE_by_idRt_osrandom_engine_idRMRGRLt ENGINE_inittENGINE_set_default_RANDt ENGINE_freeRR(RqRRY((sP/usr/lib/python2.7/dist-packages/cryptography/hazmat/backends/openssl/backend.pyRs cC`s+|jj|jj|jjjdS(s Friendly string name of the loaded OpenSSL library. This is not necessarily the same version as it was compiled against. Example: OpenSSL 1.0.1e 11 Feb 2013 R(RGR`RItSSLeay_versiontSSLEAY_VERSIONtdecode(Rq((sP/usr/lib/python2.7/dist-packages/cryptography/hazmat/backends/openssl/backend.pytopenssl_version_texts cC`st|||S(N(R(Rqtkeyt algorithm((sP/usr/lib/python2.7/dist-packages/cryptography/hazmat/backends/openssl/backend.pytcreate_hmac_ctxscC`s.|jj|jjd}||jjkS(NR(RItEVP_get_digestbynameRR^RGRL(RqRR ((sP/usr/lib/python2.7/dist-packages/cryptography/hazmat/backends/openssl/backend.pythash_supportedscC`s |j|S(N(R(RqR((sP/usr/lib/python2.7/dist-packages/cryptography/hazmat/backends/openssl/backend.pythmac_supportedscC`s t||S(N(R(RqR((sP/usr/lib/python2.7/dist-packages/cryptography/hazmat/backends/openssl/backend.pytcreate_hash_ctxscC`s@|j||rtSt|tr8t|tr8tStSdS(N(t_evp_cipher_supportedtTrueRR<R1tFalse(Rqtciphertmode((sP/usr/lib/python2.7/dist-packages/cryptography/hazmat/backends/openssl/backend.pytcipher_supported s cC`sZy#|jt|t|f}Wntk r7tSX||||}|jj|kS(N(RR~tKeyErrorRRGRL(RqRRtadaptert evp_cipher((sP/usr/lib/python2.7/dist-packages/cryptography/hazmat/backends/openssl/backend.pyRs # cC`sG||f|jkr0tdj||n||j||f(RqRR((sP/usr/lib/python2.7/dist-packages/cryptography/hazmat/backends/openssl/backend.pyR!sX     cC`s[t|trAt|trA|j|| rAt|||St|||tjSdS(N(RR<R1RRRt_ENCRYPT(RqRR((sP/usr/lib/python2.7/dist-packages/cryptography/hazmat/backends/openssl/backend.pytcreate_symmetric_encryption_ctxYscC`s[t|trAt|trA|j|| rAt|||St|||tjSdS(N(RR<R1RRRt_DECRYPT(RqRR((sP/usr/lib/python2.7/dist-packages/cryptography/hazmat/backends/openssl/backend.pytcreate_symmetric_decryption_ctxcscC`s-|jjr|j|St|tjSdS(N(RItCryptography_HAS_PBKDF2_HMACRRR(tSHA1(RqR((sP/usr/lib/python2.7/dist-packages/cryptography/hazmat/backends/openssl/backend.pytpbkdf2_hmac_supportedms  c C`s|jjd|}|jjr|jj|jjd}|j||jjk|jj |t ||t |||||}|j|dknjt |t j stdtjn|jj|t ||t ||||}|j|dk|jj|S(Nschar[]Ris;This version of OpenSSL only supports PBKDF2HMAC with SHA1.(RGRgRIRRRR^RMRLtPKCS5_PBKDF2_HMACR_RR(RRRtUNSUPPORTED_HASHtPKCS5_PBKDF2_HMAC_SHA1Rx( RqRRWtsaltt iterationst key_materialRytevp_mdRY((sP/usr/lib/python2.7/dist-packages/cryptography/hazmat/backends/openssl/backend.pytderive_pbkdf2_hmacvs:          cC`stj|jS(N(R'R'RI(Rq((sP/usr/lib/python2.7/dist-packages/cryptography/hazmat/backends/openssl/backend.pyR'scC`s||jjksttjr|jj|}|jjd|}|jj||}|j |dkt j |jj || dS|jj |}|j ||jjk|jj|}|jj|t |dSdS(Nsunsigned char[]itbigi(RGRLRRtPY3RIt BN_num_bytesRgt BN_bn2binRMtintt from_bytesRxt BN_bn2hexR`Rd(Rqtbnt bn_num_bytestbin_ptrtbin_lent hex_cdatathex_str((sP/usr/lib/python2.7/dist-packages/cryptography/hazmat/backends/openssl/backend.pyt _bn_to_ints  cC`sC|d ks$||jjks$t|d kr?|jj}ntjr|jt|jddd}|j j |t ||}|j ||jjk|St |jdjdjdpd}|jjd}||d <|j j||}|j |d k|j |d |jjk|d Sd S( s  Converts a python integer to a BIGNUM. The returned BIGNUM will not be garbage collected (to support adding them to structs that take ownership of the object). Be sure to register it for GC if it will be discarded after use. g @iRtLt0xRt0s BIGNUM **iN(RRGRLRRRtto_bytesRt bit_lengthRIt BN_bin2bnR_RMthextrstriptlstripR^Rgt BN_hex2bn(RqRRtbinarytbn_ptrthex_numRY((sP/usr/lib/python2.7/dist-packages/cryptography/hazmat/backends/openssl/backend.pyRFs$  &- cC`stj|||jj}|j||jjk|jj||jj}|j |}|jj||jj }|jj ||||jj}|j|dk|j |}t |||S(Ni(R,t_verify_rsa_parametersRItRSA_newRMRGRLRHtRSA_freeRFRJtRSA_generate_key_ext_rsa_cdata_to_evp_pkeyR(Rqtpublic_exponenttkey_sizet rsa_cdataRRYtevp_pkey((sP/usr/lib/python2.7/dist-packages/cryptography/hazmat/backends/openssl/backend.pytgenerate_rsa_private_keys cC`s&|dko%|d@dko%|dkS(Niiii((RqRR((sP/usr/lib/python2.7/dist-packages/cryptography/hazmat/backends/openssl/backend.pyt!generate_rsa_parameters_supportedsc C`s~tj|j|j|j|j|j|j|jj |jj |j j }|j ||jjk|jj||j j}|j|j|_|j|j|_|j|j|_|j|j|_|j|j|_|j|j|_|j|jj |_ |j|jj |_ |j j||jj}|j |dk|j|}t|||S(Ni(R,t_check_private_key_componentstptqRtdmp1tdmq1tiqmptpublic_numbersRtnRIRRMRGRLRHRRFtRSA_blinding_onRR(RqtnumbersRRYR((sP/usr/lib/python2.7/dist-packages/cryptography/hazmat/backends/openssl/backend.pytload_rsa_private_numberss0  cC`stj|j|j|jj}|j||jjk|jj ||jj }|j |j|_|j |j|_|jj ||jj}|j|dk|j |}t|||S(Ni(R,t_check_public_key_componentsRRRIRRMRGRLRHRRFRRR(RqRRRYR((sP/usr/lib/python2.7/dist-packages/cryptography/hazmat/backends/openssl/backend.pytload_rsa_public_numbersscC`sG|jj}|j||jjk|jj||jj}|S(N(RIt EVP_PKEY_newRMRGRLRHt EVP_PKEY_free(RqR((sP/usr/lib/python2.7/dist-packages/cryptography/hazmat/backends/openssl/backend.pyt_create_evp_pkey_gcscC`s8|j}|jj||}|j|dk|S(Ni(RRItEVP_PKEY_set1_RSARM(RqRRRY((sP/usr/lib/python2.7/dist-packages/cryptography/hazmat/backends/openssl/backend.pyRs cC`sk|jjd|}|jj|t|}|j||jjkt|jj||jj |S(s Return a _MemoryBIO namedtuple of (BIO, char*). The char* is the storage for the BIO and it must stay alive until the BIO is finished with. schar[]( RGRgRItBIO_new_mem_bufR_RMRLRCRHtBIO_free(RqRVt data_char_pRD((sP/usr/lib/python2.7/dist-packages/cryptography/hazmat/backends/openssl/backend.pyt _bytes_to_bios  cC`sr|jj}|j||jjk|jj|}|j||jjk|jj||jj}|S(s. Creates an empty memory BIO. (RIt BIO_s_memRMRGRLtBIO_newRHR(Rqt bio_methodRD((sP/usr/lib/python2.7/dist-packages/cryptography/hazmat/backends/openssl/backend.pyt_create_mem_bio_gc*s cC`su|jjd}|jj||}|j|dk|j|d|jjk|jj|d|}|S(sE Reads a memory BIO. This only works on memory BIOs. schar **i(RGRgRItBIO_get_mem_dataRMRLRx(RqRDRytbuf_lentbio_data((sP/usr/lib/python2.7/dist-packages/cryptography/hazmat/backends/openssl/backend.pyt _read_mem_bio5s cC`sl|jj|}||jjkrz|jj|}|j||jjk|jj||jj}t |||S||jj kr|jj |}|j||jjk|jj||jj }t |||S|jjdkr\||jjkr\|jj|}|j||jjk|jj||jj}t|||StddS(sd Return the appropriate type of PrivateKey given an evp_pkey cdata pointer. isUnsupported key type.N(RItCryptography_EVP_PKEY_idt EVP_PKEY_RSAtEVP_PKEY_get1_RSARMRGRLRHRRt EVP_PKEY_DSAtEVP_PKEY_get1_DSAtDSA_freeRtCryptography_HAS_ECt EVP_PKEY_ECtEVP_PKEY_get1_EC_KEYt EC_KEY_freeRR(RqRtkey_typeRt dsa_cdatatec_cdata((sP/usr/lib/python2.7/dist-packages/cryptography/hazmat/backends/openssl/backend.pyt_evp_pkey_to_private_key@s$cC`sl|jj|}||jjkrz|jj|}|j||jjk|jj||jj}t |||S||jj kr|jj |}|j||jjk|jj||jj }t |||S|jjdkr\||jjkr\|jj|}|j||jjk|jj||jj}t|||StddS(sc Return the appropriate type of PublicKey given an evp_pkey cdata pointer. isUnsupported key type.N(RIRRRRMRGRLRHRRRRR RR R R R RR(RqRRRRR((sP/usr/lib/python2.7/dist-packages/cryptography/hazmat/backends/openssl/backend.pyt_evp_pkey_to_public_key[s$cC`std|}t|fS(s Generate a pem_password_cb function pointer that copied the password to OpenSSL as required and returns the number of bytes copied. typedef int pem_password_cb(char *buf, int size, int rwflag, void *userdata); Useful for decrypting PKCS8 files and so on. Returns a tuple of (cdata function pointer, userdata). Rn(RmR(RqRntuserdata((sP/usr/lib/python2.7/dist-packages/cryptography/hazmat/backends/openssl/backend.pyRvscC`s-|jjr|j|St|tjSdS(N(RItCryptography_HAS_MGF1_MDRRR(R(RqR((sP/usr/lib/python2.7/dist-packages/cryptography/hazmat/backends/openssl/backend.pyt_mgf1_hash_supporteds  cC`st|trtSt|trGt|jtrG|j|jjSt|tr~t|jtr~t|jjt j St SdS(N( RR/RR0t_mgfR-Rt _algorithmR.R(RR(Rqtpadding((sP/usr/lib/python2.7/dist-packages/cryptography/hazmat/backends/openssl/backend.pytrsa_padding_supporteds!!cC`s|d krtdn|jjdkrH|dkrHtdn|jj}|j||jjk|jj||jj}|jj |||jjd|jj|jj|jj}|j|dkt ||S( Niii s+Key size must be 1024 or 2048 or 3072 bits.isOKey size must be 1024 because OpenSSL < 1.0.0 doesn't support larger key sizes.ii(iii ( R(RItOPENSSL_VERSION_NUMBERtDSA_newRMRGRLRHR tDSA_generate_parameters_exR(RqRtctxRY((sP/usr/lib/python2.7/dist-packages/cryptography/hazmat/backends/openssl/backend.pytgenerate_dsa_parameterss    !cC`s|jj}|j||jjk|jj||jj}|jj|jj |_ |jj|jj |_ |jj|jj |_ |jj ||j |}t|||S(N(RIRRMRGRLRHR tBN_dupt _dsa_cdataRRtgtDSA_generate_keyt_dsa_cdata_to_evp_pkeyR(Rqt parametersRR((sP/usr/lib/python2.7/dist-packages/cryptography/hazmat/backends/openssl/backend.pytgenerate_dsa_private_keyscC`s|j|}|j|S(N(RR%(RqRR$((sP/usr/lib/python2.7/dist-packages/cryptography/hazmat/backends/openssl/backend.pyt'generate_dsa_private_key_and_parametersscC`stj||jj}|jj}|j||jjk|jj ||jj }|j |j |_ |j |j |_ |j |j|_|j |jj|_|j |j|_|j|}t|||S(N(R*t_check_dsa_private_numbersRtparameter_numbersRIRRMRGRLRHR RFRRR!tytpub_keyROtpriv_keyR#R(RqRR(RR((sP/usr/lib/python2.7/dist-packages/cryptography/hazmat/backends/openssl/backend.pytload_dsa_private_numberss  cC`stj|j|jj}|j||jjk|jj||jj }|j |jj |_ |j |jj |_ |j |jj |_ |j |j|_|j|}t|||S(N(R*t_check_dsa_parametersR(RIRRMRGRLRHR RFRRR!R)R*R#R(RqRRR((sP/usr/lib/python2.7/dist-packages/cryptography/hazmat/backends/openssl/backend.pytload_dsa_public_numbersscC`stj||jj}|j||jjk|jj||jj}|j |j |_ |j |j |_ |j |j |_ t ||S(N(R*R-RIRRMRGRLRHR RFRRR!R(RqRR((sP/usr/lib/python2.7/dist-packages/cryptography/hazmat/backends/openssl/backend.pytload_dsa_parameter_numberss cC`s8|j}|jj||}|j|dk|S(Ni(RRItEVP_PKEY_set1_DSARM(RqRRRY((sP/usr/lib/python2.7/dist-packages/cryptography/hazmat/backends/openssl/backend.pyR#s cC`s3|jjdkr"t|tjS|j|SdS(Ni(RIRRR(RR(RqR((sP/usr/lib/python2.7/dist-packages/cryptography/hazmat/backends/openssl/backend.pytdsa_hash_supportedscC`sB|jjdkr:tj|dko9tj|dkStSdS(Niii(RIRRRR(RqRRR!((sP/usr/lib/python2.7/dist-packages/cryptography/hazmat/backends/openssl/backend.pytdsa_parameters_supporteds(cC`s/|jjdko.|j|td|jS(Nit(RItCryptography_HAS_CMACRR9t block_size(RqR((sP/usr/lib/python2.7/dist-packages/cryptography/hazmat/backends/openssl/backend.pytcmac_algorithm_supportedscC`s t||S(N(R(RqR((sP/usr/lib/python2.7/dist-packages/cryptography/hazmat/backends/openssl/backend.pytcreate_cmac_ctx sc C`st|tjs!tdn|jjdkrrt|trQtdnt|trrtdqrn|jj |j j d}|j ||j jk|jj}|j ||j jk|j j||jj}|jj|tjjj}|j |dk|jj|t||j}|j |dk|j}|jj||j}|j |dk|jj}|j ||j jk|j j||jj}|jd|j dt!d |d |jj"d t#|jj$||}|j |dk|jj%||j|}|d kr|j&} |j | d d|jj'k|j | d d |jj(kt)dnt*||S(Ns.Algorithm must be a registered hash algorithm.isaCertificate signing requests aren't implemented for DSA keys on OpenSSL versions less than 1.0.1.s`Certificate signing requests aren't implemented for EC keys on OpenSSL versions less than 1.0.1.Rit extensionsthandlerstx509_objtadd_funcRHiisDigest too big for RSA key(+RR(t HashAlgorithmRwRIRRtNotImplementedErrorRRRR^RMRGRLt X509_REQ_newRHt X509_REQ_freetX509_REQ_set_versionRtVersiontv1RitX509_REQ_set_subject_nameRt _subject_namet public_keytX509_REQ_set_pubkeyt _evp_pkeytsk_X509_EXTENSION_new_nulltsk_X509_EXTENSION_freet_create_x509_extensionst _extensionst_EXTENSION_ENCODE_HANDLERStsk_X509_EXTENSION_insertRtX509_REQ_add_extensionst X509_REQ_signR't ERR_LIB_RSAt RSA_R_DIGEST_TOO_BIG_FOR_RSA_KEYR(R"( Rqtbuildert private_keyRRtx509_reqRYREt sk_extensionterrors((sP/usr/lib/python2.7/dist-packages/cryptography/hazmat/backends/openssl/backend.pytcreate_x509_csr sZ            !c C`sXt|tjs!tdnt|tjsBtdn|jjdkrt|trrt dnt|t rt dqn|jj |j j d}|j||jjk|jj}|jj|tjj}|jj||jj}|j|dk|jj|t|t|j}|j|dk|jj||jj}|j|dkt||j }|jj!||}|j|dk|jj"|jj#|t$j%|j&j'}|j||jjk|jj"|jj(|t$j%|j)j'}|j||jjk|j*d|j+d t,d |d |jj-d t.|jj/|t|t|j0}|j|dk|jj1||j|}|d krK|j2}|j|d d|jj3k|j|d d|jj4kt5dnt6||S(NsBuilder type mismatch.s.Algorithm must be a registered hash algorithm.is[Certificate signatures aren't implemented for DSA keys on OpenSSL versions less than 1.0.1.sZCertificate signatures aren't implemented for EC keys on OpenSSL versions less than 1.0.1.RiR8R9R:R;RHiisDigest too big for RSA key(7RRtCertificateBuilderRwR(R<RIRRR=RRRR^RMRGRLtX509_newRHRNt X509_freetX509_set_versiont_versionRitX509_set_subject_nameRtlistRDtX509_set_pubkeyt _public_keyRGRSt_serial_numbertX509_set_serialNumbert ASN1_TIME_settX509_get_notBeforeRRt_not_valid_beforeRtX509_get_notAftert_not_valid_afterRJRKRLt X509_add_extRtX509_set_issuer_namet _issuer_namet X509_signR'RPRQR(R ( RqRRRSRRt x509_certRYt serial_numberRV((sP/usr/lib/python2.7/dist-packages/cryptography/hazmat/backends/openssl/backend.pytcreate_x509_certificateXsj             !c C`st|tjs!tdnt|tjsBtdn|jjdkrt|trrt dnt|t rt dqn|jj |j j d}|j||jjk|jj}|jj|tjj}|jj|d}|j|dk|jj|t|t|j}|j|dk|jj|jjtj|jj}|j||jjk|jj||jj}|jj ||}|j|dk|jj|jjtj|j!j}|j||jjk|jj||jj}|jj"||}|j|dk|j#d|j$d t%d |d |jj&d t'xg|j(D]\} |jj)| j*} |j| |jjk|jj+|| }|j|dkqW|jj,||j-|}|d kr|j.} |j| d d|jj/k|j| d d|jj0kt1dnt2||S(NsBuilder type mismatch.s.Algorithm must be a registered hash algorithm.isSCRL signatures aren't implemented for DSA keys on OpenSSL versions less than 1.0.1.sRCRL signatures aren't implemented for EC keys on OpenSSL versions less than 1.0.1.RiR8R9R:R;RHiisDigest too big for RSA key(3RRt CertificateRevocationListBuilderRwR(R<RIRRR=RRRR^RMRGRLt X509_CRL_newRHRNt X509_CRL_freetX509_CRL_set_versiontX509_CRL_set_issuer_nameRR^RjRcRRt _last_updateRtASN1_TIME_freetX509_CRL_set_lastUpdatet _next_updatetX509_CRL_set_nextUpdateRJRKt_CRL_EXTENSION_ENCODE_HANDLERStX509_CRL_add_extRt_revoked_certificatestCryptography_X509_REVOKED_dupt _x509_revokedtX509_CRL_add0_revokedt X509_CRL_signRGR'RPRQR(R!( RqRRRSRRtx509_crlRYt last_updatet next_updatet revoked_certtrevokedRV((sP/usr/lib/python2.7/dist-packages/cryptography/hazmat/backends/openssl/backend.pytcreate_x509_crlsl    $ $        !c C`s-x&t|D]\}}y||j}Wn)tk rUtdj|jnX|||j\} } t||jj} |jj |j j | |j rdndt || d| } |j| |j j k|r|j j| |jj} n||| |} |j| dkq WdS(NsExtension not supported: {0}ii(t enumerateRtRR=R2RiRsRuRItX509_EXTENSION_create_by_OBJRGRLtcriticalRcRMRHtX509_EXTENSION_free(RqR8R9R:R;RHRPt extensionR^RjRkR}tx509_extensionRY((sP/usr/lib/python2.7/dist-packages/cryptography/hazmat/backends/openssl/backend.pyRJ s&    c C`s"t|tjs!tdn|jj}|j||jjk|jj ||jj }t ||j }|jj ||}|j|dk|jj|jtj|jj}|j||jjk|jd|jdtd|d|jjdtt|d|S(NsBuilder type mismatch.iR8R9R:R;RH(RRtRevokedCertificateBuilderRwRItX509_REVOKED_newRMRGRLRHtX509_REVOKED_freeRSRatX509_REVOKED_set_serialNumberRctrevocationDateRRt_revocation_dateRRJRKt$_CRL_ENTRY_EXTENSION_ENCODE_HANDLERStX509_REVOKED_add_extRR%R(RqRRt x509_revokedRmRY((sP/usr/lib/python2.7/dist-packages/cryptography/hazmat/backends/openssl/backend.pytcreate_x509_revoked_certificate&s(      cC`s|j|jj|j||S(N(t _load_keyRItPEM_read_bio_PrivateKeyR(RqRVRn((sP/usr/lib/python2.7/dist-packages/cryptography/hazmat/backends/openssl/backend.pytload_pem_private_keyAs  cC`s5|j|}|jj|j|jj|jj|jj}||jjkry|jj||jj}|j|S|j |jj |j}|j |dk|jj |j|jj|jj|jj}||jjkr'|jj||jj }|j|}t|||S|jdS(Ni(RRItPEM_read_bio_PUBKEYRDRGRLRHRRR't BIO_resetRMtPEM_read_bio_RSAPublicKeyRRRt_handle_key_loading_error(RqRVtmem_bioRRYR((sP/usr/lib/python2.7/dist-packages/cryptography/hazmat/backends/openssl/backend.pytload_pem_public_keyIs  '   'cC`s|j|}|j||}|sd|jj|j}|j|dk|j||}n|rw|j|S|j|jj |j||SdS(Ni( Rt"_evp_pkey_from_der_traditional_keyRIRRDRMt$_evp_pkey_from_der_unencrypted_pkcs8RRtd2i_PKCS8PrivateKey_bio(RqRVRnRRRY((sP/usr/lib/python2.7/dist-packages/cryptography/hazmat/backends/openssl/backend.pytload_der_private_keybs  cC`s||jj|j|jj}||jjkrj|jj||jj}|dk rftdn|S|j dSdS(Ns4Password was given but private key is not encrypted.( RItd2i_PrivateKey_bioRDRGRLRHRRRwR'(RqRRnR((sP/usr/lib/python2.7/dist-packages/cryptography/hazmat/backends/openssl/backend.pyR~s   cC`s|jj|j|jj}|jj||jj}||jjkr|jj|}|j||jjk|jj||jj }|dk rt dn|S|j dSdS(Ns4Password was given but private key is not encrypted.( RItd2i_PKCS8_PRIV_KEY_INFO_bioRDRGRLRHtPKCS8_PRIV_KEY_INFO_freetEVP_PKCS82PKEYRMRRRwR'(RqRRntinfoR((sP/usr/lib/python2.7/dist-packages/cryptography/hazmat/backends/openssl/backend.pyRs    cC`s|j|}|jj|j|jj}||jjkrg|jj||jj}|j|S|j |jj |j}|j |dk|jj |j|jj}||jjkr|jj||jj }|j|}t|||S|jdS(Ni(RRItd2i_PUBKEY_bioRDRGRLRHRRR'RRMtd2i_RSAPublicKey_bioRRRR(RqRVRRRYR((sP/usr/lib/python2.7/dist-packages/cryptography/hazmat/backends/openssl/backend.pytload_der_public_keys   cC`s|j|}|jj|j|jj|jj|jj}||jjkrj|jtdn|jj||jj }t ||S(NsUnable to load certificate( RRItPEM_read_bio_X509RDRGRLR'R(RHRZR (RqRVRR((sP/usr/lib/python2.7/dist-packages/cryptography/hazmat/backends/openssl/backend.pytload_pem_x509_certificates ' cC`s|j|}|jj|j|jj}||jjkrX|jtdn|jj||jj }t ||S(NsUnable to load certificate( RRIt d2i_X509_bioRDRGRLR'R(RHRZR (RqRVRR((sP/usr/lib/python2.7/dist-packages/cryptography/hazmat/backends/openssl/backend.pytload_der_x509_certificates cC`s|j|}|jj|j|jj|jj|jj}||jjkrj|jtdn|jj||jj }t ||S(NsUnable to load CRL( RRItPEM_read_bio_X509_CRLRDRGRLR'R(RHRqR!(RqRVRR((sP/usr/lib/python2.7/dist-packages/cryptography/hazmat/backends/openssl/backend.pytload_pem_x509_crls ' cC`s|j|}|jj|j|jj}||jjkrX|jtdn|jj||jj }t ||S(NsUnable to load CRL( RRItd2i_X509_CRL_bioRDRGRLR'R(RHRqR!(RqRVRR((sP/usr/lib/python2.7/dist-packages/cryptography/hazmat/backends/openssl/backend.pytload_der_x509_crls cC`s|j|}|jj|j|jj|jj|jj}||jjkrj|jtdn|jj||jj }t ||S(NsUnable to load request( RRItPEM_read_bio_X509_REQRDRGRLR'R(RHR?R"(RqRVRRT((sP/usr/lib/python2.7/dist-packages/cryptography/hazmat/backends/openssl/backend.pytload_pem_x509_csrs ' cC`s|j|}|jj|j|jj}||jjkrX|jtdn|jj||jj }t ||S(NsUnable to load request( RRItd2i_X509_REQ_bioRDRGRLR'R(RHR?R"(RqRVRRT((sP/usr/lib/python2.7/dist-packages/cryptography/hazmat/backends/openssl/backend.pytload_der_x509_csrs c C`s#|j|}|j|\}}|jj|}||j|jj||} | |jjkr|jdk r|j} |j | |jq|j n|jj | |j j } |dk r|jdkrtdn|dk r|jdks|dkst|| S(Nis4Password was given but private key is not encrypted.i(RRRGt new_handleRDRLRpRR'RMRRHRIRRoRwR( Rqtopenssl_read_funct convert_funcRVRnRt password_cbRR|RRV((sP/usr/lib/python2.7/dist-packages/cryptography/hazmat/backends/openssl/backend.pyRs*       c`s[j}|s!tdn6|ddjjjjjjfjjjjjjffkrtdn|ddjj jj jj fjjjj jj ffkrtdtjnrtfd|DrtdtjnA|ddjjjj jjfksKttddS(NsCould not unserialize key data.iis Bad decrypt. Incorrect password?s0PEM data is encrypted with an unsupported cipherc3`s:|]0}|djjjjjjfkVqdS(iN(RIt ERR_LIB_EVPtEVP_F_EVP_PKCS82PKEYt'EVP_R_UNSUPPORTED_PRIVATE_KEY_ALGORITHM(t.0terror(Rq(sP/usr/lib/python2.7/dist-packages/cryptography/hazmat/backends/openssl/backend.pys @ss!Unsupported public key algorithm.(R'R(RIRtEVP_F_EVP_DECRYPTFINAL_EXtEVP_R_BAD_DECRYPTtERR_LIB_PKCS12tPKCS12_F_PKCS12_PBE_CRYPTt!PKCS12_R_PKCS12_CIPHERFINAL_ERRORt ERR_LIB_PEMtPEM_F_PEM_GET_EVP_CIPHER_INFOtPEM_R_UNSUPPORTED_ENCRYPTIONtEVP_F_EVP_PBE_CIPHERINITtEVP_R_UNKNOWN_PBE_ALGORITHMRRtUNSUPPORTED_CIPHERtanyt UNSUPPORTED_PUBLIC_KEY_ALGORITHMt ERR_LIB_ASN1R(RqRV((RqsP/usr/lib/python2.7/dist-packages/cryptography/hazmat/backends/openssl/backend.pyRs@                  cC`s|jjdkrtSy|j|}Wntk rH|jj}nX|jj|}||jjkr|j }|j ||jjkp|dd|jj |jj |jj fktS|j ||jjk|jj|tSdS(Nii(RIR Rt_elliptic_curve_to_nidRt NID_undeftEC_GROUP_new_by_curve_nameRGRLR'RMt ERR_LIB_ECtEC_F_EC_GROUP_NEW_BY_CURVE_NAMEtEC_R_UNKNOWN_GROUPt EC_GROUP_freeR(Rqtcurvet curve_nidRRV((sP/usr/lib/python2.7/dist-packages/cryptography/hazmat/backends/openssl/backend.pytelliptic_curve_supportedTs&     cC`sh|jjdkrtSt|tjs,tS|jjdkr[|j|jj dkr[tS|j |S(Nii߀i( RIR RRR+tECDSARRRt digest_sizeR(Rqtsignature_algorithmR((sP/usr/lib/python2.7/dist-packages/cryptography/hazmat/backends/openssl/backend.pyt,elliptic_curve_signature_algorithm_supportedoscC`s|j|r|j|}|jj|}|j||jjk|jj||jj}|jj |}|j|dk|jj |}|j|dk|j |}t |||St dj|jtjdS(s@ Generate a new private key on the named curve. is$Backend object does not support {0}.N(RRRItEC_KEY_new_by_curve_nameRMRGRLRHR tEC_KEY_generate_keytEC_KEY_check_keyt_ec_cdata_to_evp_pkeyRRR2RRtUNSUPPORTED_ELLIPTIC_CURVE(RqRRRRYR((sP/usr/lib/python2.7/dist-packages/cryptography/hazmat/backends/openssl/backend.pyt#generate_elliptic_curve_private_keyscC`s|j}|j|j}|jj|}|j||jjk|jj||jj }|j ||j |j }|jj ||j|j}|j|dk|j|}t|||S(Ni(RRRRIRRMRGRLRHR t)_ec_key_set_public_key_affine_coordinatesROR)tEC_KEY_set_private_keyRFt private_valueRR(RqRtpublicRRRYR((sP/usr/lib/python2.7/dist-packages/cryptography/hazmat/backends/openssl/backend.pyt#load_elliptic_curve_private_numberss  cC`s|j|j}|jj|}|j||jjk|jj||jj}|j ||j |j }|j |}t |||S(N(RRRIRRMRGRLRHR RROR)RR(RqRRRR((sP/usr/lib/python2.7/dist-packages/cryptography/hazmat/backends/openssl/backend.pyt"load_elliptic_curve_public_numbersscC`s1|j|o0|jjdko0t|tjS(Ni(RRItCryptography_HAS_ECDHRR+tECDH(RqRR((sP/usr/lib/python2.7/dist-packages/cryptography/hazmat/backends/openssl/backend.pyt+elliptic_curve_exchange_algorithm_supportedscC`s8|j}|jj||}|j|dk|S(Ni(RRItEVP_PKEY_set1_EC_KEYRM(RqRRRY((sP/usr/lib/python2.7/dist-packages/cryptography/hazmat/backends/openssl/backend.pyRs cC`s{idd6dd6}|j|j|j}|jj|j}||jjkrwtdj|jtj n|S(s/ Get the NID for a curve name. t prime192v1t secp192r1t prime256v1t secp256r1s%{0} is not a supported elliptic curve( tgetRRIt OBJ_sn2nidR^RRR2RR(RqRt curve_aliasest curve_nameR((sP/usr/lib/python2.7/dist-packages/cryptography/hazmat/backends/openssl/backend.pyRs cc`st|jj}|j||jjk|jj||jj}|jj|z |VWd|jj|XdS(N( RIt BN_CTX_newRMRGRLRHt BN_CTX_freet BN_CTX_startt BN_CTX_end(Rqtbn_ctx((sP/usr/lib/python2.7/dist-packages/cryptography/hazmat/backends/openssl/backend.pyt _tmp_bn_ctxs cC`s/|j||jjk|jjd}|j||jjk|jj|}|j||jjk|jj|}|j||jjk|jj|}|j||jjk||kr|jj r|jj }|jj }n|jj }|jj }|r|s"t|||fS(sy Given an EC_KEY determine the group and what methods are required to get/set point coordinates. scharacteristic-two-field(RMRGRLRIRRtEC_KEY_get0_grouptEC_GROUP_method_oftEC_METHOD_get_field_typetCryptography_HAS_EC2Mt$EC_POINT_set_affine_coordinates_GF2mt$EC_POINT_get_affine_coordinates_GF2mt#EC_POINT_set_affine_coordinates_GFpt#EC_POINT_get_affine_coordinates_GFpR(RqRt nid_two_fieldtgroupRtnidtset_functget_func((sP/usr/lib/python2.7/dist-packages/cryptography/hazmat/backends/openssl/backend.pyt%_ec_key_determine_group_get_set_funcss    c C`s |dks|dkr'tdn|j|\}}}|jj|}|j||jjk|jj||jj}|j |}|j |} |j } |jj | } |jj | } ||||| | } |j| dk|||| | | } |j| dk|jj || } | dkrf|j tdn|jj | | } | dkr|j tdnWdQX|jj||} |j| dk|jj|} | dkr|j tdn|S(s This is a port of EC_KEY_set_public_key_affine_coordinates that was added in 1.0.1. Sets the public key point in the EC_KEY context to the affine x and y values. is2Invalid EC key. Both x and y must be non-negative.isInvalid EC Key X point.sInvalid EC Key Y point.NsInvalid EC key.(R(RRIt EC_POINT_newRMRGRLRHt EC_POINT_freeRFRt BN_CTX_gettBN_cmpR'tEC_KEY_set_public_keyR(RqRROR)RRRRTtbn_xtbn_yRtcheck_xtcheck_yRY((sP/usr/lib/python2.7/dist-packages/cryptography/hazmat/backends/openssl/backend.pyRs>        cC`st|tjs!tdnt|tjsBtdnt|tjrod}d}|jj}nct|tjr|j j d}|j }t |}|dkrt dqn t d|j j|} |tjjkr|tjjkr|j j} |} qJ|tjjks5t| |j jkrV|j j} n]| |j jkrw|j j} n<|j jd kst| |j jkst|j j} |} n|tjjkr>|tjjkrt|tjst d n|j| |S|tjjks)t|j j} |} n td |j} | | | ||||jj|jj} |j | d k|j!| S( Ns2format must be an item from the PrivateFormat enumsBEncryption algorithm must be a KeySerializationEncryption instancetis aes-256-cbcisBPasswords longer than 1023 bytes are not supported by this backendsUnsupported encryption typeisDEncryption is not supported for DER encoded traditional OpenSSL keyss/encoding must be an item from the Encoding enum("RR)t PrivateFormatRwtKeySerializationEncryptiont NoEncryptionRGRLtBestAvailableEncryptionRItEVP_get_cipherbynameRnR_R(RtEncodingtPEMtPKCS8tPEM_write_bio_PKCS8PrivateKeytTraditionalOpenSSLRRtPEM_write_bio_RSAPrivateKeyRtPEM_write_bio_DSAPrivateKeyR R tPEM_write_bio_ECPrivateKeytDERt"_private_key_bytes_traditional_derti2d_PKCS8PrivateKey_bioRRMR(RqtencodingR2tencryption_algorithmRtcdataRntpasslenRRt write_bioRRDRY((sP/usr/lib/python2.7/dist-packages/cryptography/hazmat/backends/openssl/backend.pyt_private_key_bytes=sr                    cC`s||jjkr!|jj}nX|jjdkrT||jjkrT|jj}n%|j||jjk|jj}|j }|||}|j|dk|j |S(Ni( RIRti2d_RSAPrivateKey_bioR R ti2d_ECPrivateKey_bioRMRti2d_DSAPrivateKey_bioRR(RqRR$R&RDRY((sP/usr/lib/python2.7/dist-packages/cryptography/hazmat/backends/openssl/backend.pyR s  c C`sLt|tjs!tdn|tjjkr|tjjkrT|jj}n$|tjj kslt |jj }|}n|tjj kr|jj ||jjkst |tjjkr|jj}n$|tjj kst |jj}|}n td|j}|||}|j|dk|j|S(Ns/encoding must be an item from the Encoding enums1format must be an item from the PublicFormat enumi(RR)RRwt PublicFormattSubjectPublicKeyInfoRRItPEM_write_bio_PUBKEYRRti2d_PUBKEY_biotPKCS1RRtPEM_write_bio_RSAPublicKeyti2d_RSAPublicKey_bioRRMR( RqR"R2RR$R&RRDRY((sP/usr/lib/python2.7/dist-packages/cryptography/hazmat/backends/openssl/backend.pyt_public_key_bytess.       cC`s\|jj||jj}|j||jjk|jj||jj}|j|S(N(RItASN1_INTEGER_to_BNRGRLRMRHRJR(Rqtasn1_intR((sP/usr/lib/python2.7/dist-packages/cryptography/hazmat/backends/openssl/backend.pyt_asn1_integer_to_intscC`s|jj|j|jS(N(RGRxRVRW(Rqt asn1_string((sP/usr/lib/python2.7/dist-packages/cryptography/hazmat/backends/openssl/backend.pyt_asn1_string_to_bytesscC`s|j|jdS(NR(R7R(RqR6((sP/usr/lib/python2.7/dist-packages/cryptography/hazmat/backends/openssl/backend.pyt_asn1_string_to_asciisc`sjjd}jj||}j|dkj|djjkjj|fd}jj|d|jdS(Nsunsigned char **ic`sjj|dS(Ni(RIRd(Rx(Rq(sP/usr/lib/python2.7/dist-packages/cryptography/hazmat/backends/openssl/backend.pyRfsR[( RGRgRItASN1_STRING_to_UTF8RMRLRHRxR(RqR6RyRY((RqsP/usr/lib/python2.7/dist-packages/cryptography/hazmat/backends/openssl/backend.pyt_asn1_string_to_utf8s c`sjjd}jj||}j|dkj|djjkjj|fd}jj|d|S(Nsunsigned char **ic`sjj|dS(Ni(RIRd(Rx(Rq(sP/usr/lib/python2.7/dist-packages/cryptography/hazmat/backends/openssl/backend.pyRfs(RGRgRIt i2d_ASN1_TYPERMRLRHRx(Rqt asn1_typeRyRY((RqsP/usr/lib/python2.7/dist-packages/cryptography/hazmat/backends/openssl/backend.pyt _asn1_to_ders cC`su|j||jjk|jj||jj}|j||jjk|jj||jj}|j|S(N(RMRGRLRItASN1_TIME_to_generalizedtimeRHRt_parse_asn1_generalized_time(Rqt asn1_timetgeneralized_time((sP/usr/lib/python2.7/dist-packages/cryptography/hazmat/backends/openssl/backend.pyt_parse_asn1_times  cC`s1|j|jjd|}tjj|dS(Ns ASN1_STRING *s %Y%m%d%H%M%SZ(R8RGR;tdatetimetstrptime(RqRAR((sP/usr/lib/python2.7/dist-packages/cryptography/hazmat/backends/openssl/backend.pyR?sN([RsRtt__doc__RRrRMRRRRRRRRRRRRRRRR'RRRFRRRRRRRRRRRRRRRR%R&R,R.R/R#R1R2R6R7RWRnRRJRRRRRRRRRRRRRRRRRRRRRRRRRRRR'R R2R5R7R8R:R=RBR?(((sP/usr/lib/python2.7/dist-packages/cryptography/hazmat/backends/openssl/backend.pyRs           8 &                       L \ X         " ;         6 R  "    RcB`seZdZdZRS(cC`s ||_dS(N(t_fmt(Rqtfmt((sP/usr/lib/python2.7/dist-packages/cryptography/hazmat/backends/openssl/backend.pyRrscC`s:|jjd|d|j}|jj|jdS(NRRR(RFR2tlowerRIRR^(RqRNRRt cipher_name((sP/usr/lib/python2.7/dist-packages/cryptography/hazmat/backends/openssl/backend.pyt__call__s!(RsRtRrRJ(((sP/usr/lib/python2.7/dist-packages/cryptography/hazmat/backends/openssl/backend.pyRs (t __future__RRRRt collectionsRCRt contextlibRRRt cryptographyRRtcryptography.exceptionsRRt'cryptography.hazmat.backends.interfacesRR R R R R RRRRRt,cryptography.hazmat.backends.openssl.ciphersRRt)cryptography.hazmat.backends.openssl.cmacRt(cryptography.hazmat.backends.openssl.dsaRRRt'cryptography.hazmat.backends.openssl.ecRRt+cryptography.hazmat.backends.openssl.hashesRt)cryptography.hazmat.backends.openssl.hmacRt(cryptography.hazmat.backends.openssl.rsaRRt)cryptography.hazmat.backends.openssl.x509RR R!R"R#R$R%t%cryptography.hazmat.bindings._opensslR&RGt$cryptography.hazmat.bindings.opensslR'tcryptography.hazmat.primitivesR(R)t)cryptography.hazmat.primitives.asymmetricR*R+R,t1cryptography.hazmat.primitives.asymmetric.paddingR-R.R/R0t1cryptography.hazmat.primitives.ciphers.algorithmsR1R2R3R4R5R6R7R8t,cryptography.hazmat.primitives.ciphers.modesR9R:R;R<R=R>R?tcryptography.x509.oidR@RARBt namedtupleRCRQRSRZRaRcRlRqRRRRRRRRRsRRRRRRR RRR@t ReasonFlagstkey_compromiset ca_compromisetaffiliation_changedt supersededtcessation_of_operationtcertificate_holdtprivilege_withdrawnt aa_compromiseRERXReR[tBASIC_CONSTRAINTStSUBJECT_KEY_IDENTIFIERt KEY_USAGEtSUBJECT_ALTERNATIVE_NAMEtISSUER_ALTERNATIVE_NAMEtEXTENDED_KEY_USAGEtAUTHORITY_KEY_IDENTIFIERtCERTIFICATE_POLICIEStAUTHORITY_INFORMATION_ACCESStCRL_DISTRIBUTION_POINTStINHIBIT_ANY_POLICYt OCSP_NO_CHECKtNAME_CONSTRAINTSRLt CRL_NUMBERRytCERTIFICATE_ISSUERt CRL_REASONtINVALIDITY_DATERtobjectRmt ffi_callbackRtregister_interfaceRRRN(((sP/usr/lib/python2.7/dist-packages/cryptography/hazmat/backends/openssl/backend.pyts      L4":4           4    "     W         -                       "          4?