"2VRF@sdZddlmZmZmZmZddlmZmZddl m Z m Z m Z m Z mZmZmZmZmZmZmZmZmZddlmZmZddlmZddlmZmZmZm Z Gd d d eZ!Gd d d eZ"Gd ddeZ#GdddeZ$GdddeZ%GdddeZ&GdddeZ'GdddeZ(GdddeZ)GdddeZ*GdddeZ+Gdd d eZ,Gd!d"d"eZ-Gd#d$d$eZ.Gd%d&d&eZ/Gd'd(d(eZ0Gd)d*d*eZ1Gd+d,d,eZ2Gd-d.d.eZ3Gd/d0d0e Z4Gd1d2d2e Z5Gd3d4d4eZ6Gd5d6d6e Z7Gd7d8d8eZ8Gd9d:d:eZ9Gd;d<d<eZ:Gd=d>d>eZ;Gd?d@d@eZ<GdAdBdBeZ=GdCdDdDeZ>GdEdFdFeZ?GdGdHdHeZ@GdIdJdJeZAGdKdLdLeZBGdMdNdNeZCGdOdPdPeZDdQS)Rz ASN.1 type classes for the online certificate status protocol (OCSP). Exports the following items: - OCSPRequest() - OCSPResponse() Other type classes are defined that help compose the types listed above. )unicode_literalsdivisionabsolute_importprint_function)DigestAlgorithmSignedDigestAlgorithm) BooleanChoice EnumeratedGeneralizedTime IA5StringIntegerNullObjectIdentifierOctetBitString OctetStringParsableOctetStringSequence SequenceOf)AuthorityInfoAccessSyntax CRLReason)PublicKeyAlgorithm) Certificate GeneralName GeneralNamesNamec@seZdZddiZdS)Versionrv1N)__name__ __module__ __qualname___mapr#r#1/usr/lib/python3/dist-packages/asn1crypto/ocsp.pyr's rc@s:eZdZdefdefdefdefgZdS)CertIdZhash_algorithmZissuer_name_hashZissuer_key_hashZ serial_numberN)rr r!rrr_fieldsr#r#r#r$r%-s    r%c@s(eZdZdefdefgZdS)ServiceLocatorZissuerZlocatorN)rr r!rrr&r#r#r#r$r'6s  r'c@seZdZddiZdS)RequestExtensionIdz1.3.6.1.5.5.7.48.1.7service_locatorN)rr r!r"r#r#r#r$r(=s r(c@sLeZdZdefdeddifdefgZdZdeiZ dS) RequestExtensionextn_idcriticaldefaultF extn_valuer)N)r+r.) rr r!r(r rr& _oid_pairr' _oid_specsr#r#r#r$r*Cs  r*c@seZdZeZdS)RequestExtensionsN)rr r!r* _child_specr#r#r#r$r1Ps r1c @seZdZdefdeddddddifgZd Zd Zd Zd d Z e d dZ e ddZ d S)RequestZreq_certsingle_request_extensionstag_typeexplicittagroptionalTFNcCst|_xl|dD]`}|dj}d|}t||rZt|||dj|djr|jj|qWd|_dS)zv Sets common named extensions to private attributes and creates a list of critical extensions r4r+z _%s_valuer.r,TN)set_critical_extensionsnativehasattrsetattrparsedadd_processed_extensions)self extensionnameattribute_namer#r#r$_set_extensions^s    zRequest._set_extensionscCs|js|j|jS)z Returns a set of the names (or OID if not a known extension) of the extensions marked as critical :return: A set of unicode strings )r@rEr:)rAr#r#r$critical_extensionsps  zRequest.critical_extensionscCs |jdkr|j|jS)z This extension is used when communicating with an OCSP responder that acts as a proxy for OCSP requests :return: None or a ServiceLocator object F)r@rE_service_locator_value)rAr#r#r$service_locator_value~s  zRequest.service_locator_value) rr r!r%r1r&r@r:rGrEpropertyrFrHr#r#r#r$r3Ts  $ r3c@seZdZeZdS)RequestsN)rr r!r3r2r#r#r#r$rJs rJc@seZdZddiZdS) ResponseTypez1.3.6.1.5.5.7.48.1.1basic_ocsp_responseN)rr r!r"r#r#r#r$rKs rKc@seZdZeZdS)AcceptableResponsesN)rr r!rKr2r#r#r#r$rMs rMc@s1eZdZdefdeddifgZdS)PreferredSignatureAlgorithmZsig_identifierZcert_identifierr8TN)rr r!rrr&r#r#r#r$rNs  rNc@seZdZeZdS)PreferredSignatureAlgorithmsN)rr r!rNr2r#r#r#r$rOs rOc@s(eZdZddddddiZdS)TBSRequestExtensionIdz1.3.6.1.5.5.7.48.1.2noncez1.3.6.1.5.5.7.48.1.4acceptable_responsesz1.3.6.1.5.5.7.48.1.8preferred_signature_algorithmsN)rr r!r"r#r#r#r$rPs rPc@sXeZdZdefdeddifdefgZd Zdede de iZ d S) TBSRequestExtensionr+r,r-Fr.rQrRrSN)zextn_idz extn_value) rr r!rPr rr&r/rrMrOr0r#r#r#r$rTs  rTc@seZdZeZdS)TBSRequestExtensionsN)rr r!rTr2r#r#r#r$rUs rUc @syeZdZdeddddddifdedddd d d ifd efd eddddd d ifgZdS) TBSRequestversionr5r6r7rr-rZrequestor_namerr8TZ request_listrequest_extensionsN)rr r!rrrJrUr&r#r#r#r$rVs  rVc@seZdZeZdS) CertificatesN)rr r!rr2r#r#r#r$rZs rZc @sFeZdZdefdefdedddddd ifgZd S) Signaturesignature_algorithm signaturecertsr5r6r7rr8TN)rr r!rrrZr&r#r#r#r$r[s   r[c @seZdZdefdeddddddifgZd Zd Zd Zd Z d Z d d Z e d dZ e ddZe ddZe ddZd S) OCSPRequest tbs_requestZoptional_signaturer5r6r7rr8TFNcCst|_xp|ddD]`}|dj}d|}t||r^t|||dj|djr|jj|qWd|_dS) zv Sets common named extensions to private attributes and creates a list of critical extensions r`rXr+z _%s_valuer.r,TN)r9r:r;r<r=r>r?r@)rArBrCrDr#r#r$rEs    zOCSPRequest._set_extensionscCs|js|j|jS)z Returns a set of the names (or OID if not a known extension) of the extensions marked as critical :return: A set of unicode strings )r@rEr:)rAr#r#r$rFs  zOCSPRequest.critical_extensionscCs |jdkr|j|jS)z This extension is used to prevent replay attacks by including a unique, random value with each request/response pair :return: None or an OctetString object F)r@rE _nonce_value)rAr#r#r$ nonce_values  zOCSPRequest.nonce_valuecCs |jdkr|j|jS)a( This extension is used to allow the client and server to communicate with alternative response formats other than just basic_ocsp_response, although no other formats are defined in the standard. :return: None or an AcceptableResponses object F)r@rE_acceptable_responses_value)rAr#r#r$acceptable_responses_values  z&OCSPRequest.acceptable_responses_valuecCs |jdkr|j|jS)aj This extension is used by the client to define what signature algorithms are preferred, including both the hash algorithm and the public key algorithm, with a level of detail down to even the public key algorithm parameters, such as curve name. :return: None or a PreferredSignatureAlgorithms object F)r@rE%_preferred_signature_algorithms_value)rAr#r#r$$preferred_signature_algorithms_values  z0OCSPRequest.preferred_signature_algorithms_value)rr r!rVr[r&r@r:rarcrerErIrFrbrdrfr#r#r#r$r_s  $ r_c @s:eZdZddddddddd d d d iZd S)OCSPResponseStatusrZ successfulrZmalformed_requestrYZinternal_errorZ try_laterZ sign_requiredZ unauthorizedN)rr r!r"r#r#r#r$rg0s rgc@sFeZdZdeddddifdeddddifgZdS) ResponderIdZby_namer5r6r7rZby_keyrYN)rr r!rr _alternativesr#r#r#r$rk;s rkc @s=eZdZdefdeddddddifgZd S) RevokedInfoZrevocation_timeZrevocation_reasonr5r6r7rr8TN)rr r!r rr&r#r#r#r$rmBs  rmc@s^eZdZdeddddifdeddddifdedddd ifgZd S) CertStatusZgoodr5Zimplicitr7rZrevokedrunknownrYN)rr r!rrmrlr#r#r#r$rnIs rnc @speZdZdeddddddifdedddd ddifd edddd ddifgZd S) CrlIdZcrl_urlr5r6r7rr8TZcrl_numrZcrl_timerYN)rr r!r rr r&r#r#r#r$rpQs rpc @s4eZdZddddddddd d iZd S) SingleResponseExtensionIdz1.3.6.1.5.5.7.48.1.3crlz1.3.6.1.5.5.7.48.1.6archive_cutoffz 2.5.29.21 crl_reasonz 2.5.29.24invalidity_datez 2.5.29.29certificate_issuerN)rr r!r"r#r#r#r$rqYs rqc @sdeZdZdefdeddifdefgZd Zdede de d e d e iZ d S) SingleResponseExtensionr+r,r-Fr.rrrsrtrurvN)zextn_idz extn_value) rr r!rqr rr&r/rpr rrr0r#r#r#r$rwes  rwc@seZdZeZdS)SingleResponseExtensionsN)rr r!rwr2r#r#r#r$rxvs rxc @seZdZdefdefdefdeddddd d ifd edddd d d ifgZd ZdZ dZ dZ dZ dZ dZddZeddZeddZeddZeddZeddZeddZdS)SingleResponseZcert_idZ cert_statusZ this_updateZ next_updater5r6r7rr8Tsingle_extensionsrFNcCst|_xl|dD]`}|dj}d|}t||rZt|||dj|djr|jj|qWd|_dS)zv Sets common named extensions to private attributes and creates a list of critical extensions rzr+z _%s_valuer.r,TN)r9r:r;r<r=r>r?r@)rArBrCrDr#r#r$rEs    zSingleResponse._set_extensionscCs|js|j|jS)z Returns a set of the names (or OID if not a known extension) of the extensions marked as critical :return: A set of unicode strings )r@rEr:)rAr#r#r$rFs  z"SingleResponse.critical_extensionscCs |jdkr|j|jS)z This extension is used to locate the CRL that a certificate's revocation is contained within. :return: None or a CrlId object F)r@rE _crl_value)rAr#r#r$ crl_values  zSingleResponse.crl_valuecCs |jdkr|j|jS)z This extension is used to indicate the date at which an archived (historical) certificate status entry will no longer be available. :return: None or a GeneralizedTime object F)r@rE_archive_cutoff_value)rAr#r#r$archive_cutoff_values  z#SingleResponse.archive_cutoff_valuecCs |jdkr|j|jS)z This extension indicates the reason that a certificate was revoked. :return: None or a CRLReason object F)r@rE_crl_reason_value)rAr#r#r$crl_reason_values  zSingleResponse.crl_reason_valuecCs |jdkr|j|jS)a= This extension indicates the suspected date/time the private key was compromised or the certificate became invalid. This would usually be before the revocation date, which is when the CA processed the revocation. :return: None or a GeneralizedTime object F)r@rE_invalidity_date_value)rAr#r#r$invalidity_date_values  z$SingleResponse.invalidity_date_valuecCs |jdkr|j|jS)z This extension indicates the issuer of the certificate in question. :return: None or an x509.GeneralNames object F)r@rE_certificate_issuer_value)rAr#r#r$certificate_issuer_values  z'SingleResponse.certificate_issuer_value)rr r!r%rnr rxr&r@r:r{r}rrrrErIrFr|r~rrrr#r#r#r$ryzs&    $  ryc@seZdZeZdS) ResponsesN)rr r!ryr2r#r#r#r$rs rc@s"eZdZddddiZdS)ResponseDataExtensionIdz1.3.6.1.5.5.7.48.1.2rQz1.3.6.1.5.5.7.48.1.9extended_revokeN)rr r!r"r#r#r#r$rs rc@sReZdZdefdeddifdefgZd Zdede iZ dS) ResponseDataExtensionr+r,r-Fr.rQrN)zextn_idz extn_value) rr r!rr rr&r/rrr0r#r#r#r$rs  rc@seZdZeZdS)ResponseDataExtensionsN)rr r!rr2r#r#r#r$r s rc @smeZdZdeddddddifdefd efd efd edddd d difgZdS) ResponseDatarWr5r6r7rr-rZ responder_idZ produced_atZ responsesresponse_extensionsrr8TN) rr r!rrkr rrr&r#r#r#r$rs    rc @sOeZdZdefdefdefdeddddd d ifgZd S) BasicOCSPResponsetbs_response_datar\r]r^r5r6r7rr8TN)rr r!rrrrZr&r#r#r#r$rs    rc@s:eZdZdefdefgZdZdeiZdS) ResponseBytes response_typeresponserLN)rr) rr r!rKrr&r/rr0r#r#r#r$r"s  rc @seZdZdefdeddddddifgZd Zd Zd Zd Z d d Z e d dZ e ddZ e ddZe ddZe ddZd S) OCSPResponseZresponse_statusresponse_bytesr5r6r7rr8TFNcCst|_x{|ddjddD]`}|dj}d|}t||rit|||dj|djr&|jj|q&Wd |_d S) zv Sets common named extensions to private attributes and creates a list of critical extensions rrrrr+z _%s_valuer.r,TN)r9r:r>r;r<r=r?r@)rArBrCrDr#r#r$rE9s     zOCSPResponse._set_extensionscCs|js|j|jS)z Returns a set of the names (or OID if not a known extension) of the extensions marked as critical :return: A set of unicode strings )r@rEr:)rAr#r#r$rFKs  z OCSPResponse.critical_extensionscCs |jdkr|j|jS)z This extension is used to prevent replay attacks on the request/response exchange :return: None or an OctetString object F)r@rEra)rAr#r#r$rbYs  zOCSPResponse.nonce_valuecCs |jdkr|j|jS)z This extension is used to signal that the responder will return a "revoked" status for non-issued certificates. :return: None or a Null object (if present) F)r@rE_extended_revoke_value)rAr#r#r$extended_revoke_valuegs  z"OCSPResponse.extended_revoke_valuecCs|ddjS)z A shortcut into the BasicOCSPResponse sequence :return: None or an asn1crypto.ocsp.BasicOCSPResponse object rr)r>)rAr#r#r$rLus z OCSPResponse.basic_ocsp_responsecCs|ddjdS)z A shortcut into the parsed, ResponseData sequence :return: None or an asn1crypto.ocsp.ResponseData object rrr)r>)rAr#r#r$ response_datas zOCSPResponse.response_data)rr r!rgrr&r@r:rarrErIrFrbrrLrr#r#r#r$r.s  $  rN)E__doc__Z __future__rrrrZalgosrrZcorer r r r r rrrrrrrrrrrrkeysrZx509rrrrrr%r'r(r*r1r3rJrKrMrNrOrPrTrUrVrZr[r_rgrkrmrnrprqrwrxryrrrrrrrrr#r#r#r$ sT"X"  9 Z  x