o = je @sddlmZddlZddlZddlZddlmZddlmZddl m Z ddl m Z ddlmZmZmZmZmZmZmZmZddlmZmZdd lmZmZmZdd lmZm Z dd l!m"Z"ed d d Z#ej$e j%e j&e j'e j(e j)e j*e j+e j,fZ-Gddde.Z/d5ddZ0d6ddZ1d7d d!Z2Gd"d#d#Z3Gd$d%d%Z4Gd&d'd'ej5Z6Gd(d)d)e.Z7e j8Z8e j9Z9e j:Z:e j;Z;e jZ>e j?Z?e j@Z@e jAZAe jBZBGd*d+d+ZCGd,d-d-ZDGd.d/d/ZEGd0d1d1ZFd8d3d4ZGdS)9) annotationsN)Iterable)utils)x509)hashes)dsaeced448ed25519paddingrsax448x25519) CertificateIssuerPrivateKeyTypesCertificatePublicKeyTypes) Extension ExtensionType_make_sequence_methods)Name _ASN1Type)ObjectIdentifiericeZdZd fdd ZZS) AttributeNotFoundmsgstroidrreturnNonect|||_dSN)super__init__r)selfrr __class__`C:\Users\psant\Downloads\Anu Raj Backend\school\venv\Lib\site-packages\cryptography/x509/base.pyr"6  zAttributeNotFound.__init__)rrrrrr__name__ __module__ __qualname__r" __classcell__r&r&r$r'r5r extensionExtension[ExtensionType] extensionslist[Extension[ExtensionType]]rrcCs"|D] }|j|jkrtdqdS)Nz$This extension has already been set.)r ValueError)r/r1er&r&r'_reject_duplicate_extension;s  r5rr attributes0list[tuple[ObjectIdentifier, bytes, int | None]]cCs$|D] \}}}||krtdqdS)Nz$This attribute has already been set.)r3)rr6Zattr_oid_r&r&r'_reject_duplicate_attributeEs r9timedatetime.datetimecCs6|jdur|}|r |nt}|jdd|S|S)zNormalizes a datetime to a naive datetime in UTC. time -- datetime to normalize. Assumed to be in UTC if not timezone aware. N)tzinfo)r< utcoffsetdatetime timedeltareplace)r:offsetr&r&r'_convert_to_naive_utc_timeOs rBc@sXeZdZejjfdd d Zedd d Zedd dZdddZ dddZ dddZ dS) Attributerrvaluebytes_typeintrrcC||_||_||_dSr )_oid_valuerF)r#rrDrFr&r&r'r"^ zAttribute.__init__cC|jSr )rIr#r&r&r'rhz Attribute.oidcCrLr )rJrMr&r&r'rDlrNzAttribute.valuercCsd|jd|jdS)Nz)rrDrMr&r&r'__repr__pzAttribute.__repr__otherobjectboolcCs2t|tstS|j|jko|j|jko|j|jkSr ) isinstancerCNotImplementedrrDrF)r#rRr&r&r'__eq__ss    zAttribute.__eq__cCst|j|j|jfSr )hashrrDrFrMr&r&r'__hash__}szAttribute.__hash__N)rrrDrErFrGrr)rr)rrErr)rRrSrrTrrG) r*r+r,rZ UTF8StringrDr"propertyrrPrWrYr&r&r&r'rC]s      rCc@s8eZdZdddZed\ZZZdd d ZdddZ dS) Attributesr6Iterable[Attribute]rrcCst||_dSr )list _attributes)r#r6r&r&r'r"szAttributes.__init__r`rcCsd|jdS)Nz dd Zd?d#d$Z d?d%d&Z d@d+d,Z dAddd-dBd9d:Z dS)CCertificateBuilderr2roN issuer_namermrl public_key CertificatePublicKeyTypes | None serial_number int | Nonenot_valid_beforedatetime.datetime | Nonenot_valid_afterr1rrcCs6tj|_||_||_||_||_||_||_||_ dSr ) rfrh_version _issuer_namern _public_key_serial_number_not_valid_before_not_valid_afterro)r#rrlrrrrr1r&r&r'r"'s  zCertificateBuilder.__init__rprcCsDt|ts td|jdurtdt||j|j|j|j |j |j S)z3 Sets the CA's distinguished name. rqN%The issuer name may only be set once.) rUrrsrr3rrnrrrrrortr&r&r'r:s  zCertificateBuilder.issuer_namecCsDt|ts td|jdurtdt|j||j|j|j |j |j S)z: Sets the requestor's distinguished name. rqNrr) rUrrsrnr3rrrrrrrortr&r&r'rlLs  zCertificateBuilder.subject_namekeyrc Cs`t|tjtjtjtjt j t j t jfstd|jdur tdt|j|j||j|j|j|jS)zT Sets the requestor's public key (as found in the signing request). zExpecting one of DSAPublicKey, RSAPublicKey, EllipticCurvePublicKey, Ed25519PublicKey, Ed448PublicKey, X25519PublicKey, or X448PublicKey.Nz$The public key may only be set once.)rUrZ DSAPublicKeyr Z RSAPublicKeyrZEllipticCurvePublicKeyr ZEd25519PublicKeyr ZEd448PublicKeyrZX25519PublicKeyr Z X448PublicKeyrsrr3rrrnrrrro)r#rr&r&r'r^s2  zCertificateBuilder.public_keynumberrGcCsht|ts td|jdurtd|dkrtd|dkr$tdt|j|j|j ||j |j |j S)z5 Sets the certificate serial number. 'Serial number must be of integral type.N'The serial number may only be set once.rz%The serial number should be positive.3The serial number should not be more than 159 bits.) rUrGrsrr3 bit_lengthrrrnrrrror#rr&r&r'rs&   z CertificateBuilder.serial_numberr:r;cCszt|tjs td|jdurtdt|}|tkrtd|jdur-||jkr-tdt|j |j |j |j ||j|j S)z7 Sets the certificate activation time. Expecting datetime object.Nz*The not valid before may only be set once.z>The not valid before date must be on or after 1950 January 1).zBThe not valid before date must be before the not valid after date.)rUr>rsrr3rB_EARLIEST_UTC_TIMErrrrnrrror#r:r&r&r'rs,  z#CertificateBuilder.not_valid_beforecCszt|tjs td|jdurtdt|}|tkrtd|jdur-||jkr-tdt|j |j |j |j |j||j S)z7 Sets the certificate expiration time. rNz)The not valid after may only be set once.zrsrr3rBrrrrrnrrrorr&r&r'rs2  z"CertificateBuilder.not_valid_afterrurrvrTc CsVt|ts tdt|j||}t||jt|j|j |j |j |j |j g|j|S)z= Adds an X.509 extension to the certificate. rwN)rUrrsrrr5rorrrnrrrrrxr&r&r'rys   z CertificateBuilder.add_extensionr~rrrrrrrrrr CertificatecCs|jdur td|jdurtd|jdurtd|jdur$td|jdur-td|jdur6td|durQt|tj tj fsGt dt|t j sQt d |dur_t|tjs_t d t|||||S) zC Signs the certificate using the CA's private key. Nz&A certificate must have a subject namez&A certificate must have an issuer namez'A certificate must have a serial numberz/A certificate must have a not valid before timez.A certificate must have a not valid after timez$A certificate must have a public keyrrr)rnr3rrrrrrUr rrrsr rrrrZcreate_x509_certificaterr&r&r'rs:        zCertificateBuilder.sign)rrmrlrmrrrrrrrrr1r2rr)rprrr)rrrr)rrGrr)r:r;rr)rurrvrTrrr ) rrrrrrrrrrrr) r*r+r,__annotations__r"rrlrrrrryrr&r&r&r'r$s,     %   rc@s|eZdZUded<ded<dddggfd0d dZd1ddZd2ddZd3ddZd4ddZd5d d!Z d6ddd"d7d.d/Z dS)8 CertificateRevocationListBuilderr2rolist[RevokedCertificate]_revoked_certificatesNrrm last_updater next_updater1revoked_certificatescCs"||_||_||_||_||_dSr )r _last_update _next_updateror)r#rrrr1rr&r&r'r"'s  z)CertificateRevocationListBuilder.__init__rrcCs<t|ts td|jdurtdt||j|j|j|j S)Nrqr) rUrrsrr3rrrror)r#rr&r&r'r5s  z,CertificateRevocationListBuilder.issuer_namer;cCsrt|tjs td|jdurtdt|}|tkrtd|jdur-||jkr-tdt|j ||j|j |j S)Nr!Last update may only be set once.8The last update date must be on or after 1950 January 1.z9The last update date must be before the next update date.) rUr>rsrr3rBrrrrror)r#rr&r&r'rDs(  z,CertificateRevocationListBuilder.last_updatecCsrt|tjs td|jdurtdt|}|tkrtd|jdur-||jkr-tdt|j |j||j |j S)Nrrrz8The next update date must be after the last update date.) rUr>rsrr3rBrrrrror)r#rr&r&r'r\s(  z,CertificateRevocationListBuilder.next_updaterurrvrTcCsNt|ts tdt|j||}t||jt|j|j |j g|j||j S)zM Adds an X.509 extension to the certificate revocation list. rwN) rUrrsrrr5rorrrrrrxr&r&r'ryts   z.CertificateRevocationListBuilder.add_extensionrevoked_certificateRevokedCertificatecCs4t|ts tdt|j|j|j|jg|j|S)z8 Adds a revoked certificate to the CRL. z)Must be an instance of RevokedCertificateN) rUrrsrrrrror)r#rr&r&r'add_revoked_certificates  z8CertificateRevocationListBuilder.add_revoked_certificater~rrrrrrrrrrCertificateRevocationListcCs|jdur td|jdurtd|jdurtd|dur6t|tjtjfs,tdt|t j s6td|durDt|t j sDtdt |||||S)NzA CRL must have an issuer namez"A CRL must have a last update timez"A CRL must have a next update timerrr)rr3rrrUr rrrsr rrrrZcreate_x509_crlrr&r&r'rs.     z%CertificateRevocationListBuilder.sign) rrmrrrrr1r2rr)rrrr)rr;rr)rr;rr)rurrvrTrr)rrrrr ) rrrrrrrrrrrr) r*r+r,rr"rrrryrrr&r&r&r'r#s&      rc@sHeZdZddgfddd Zdd dZd ddZd!ddZd"d#ddZdS)$RevokedCertificateBuilderNrrrevocation_daterr1r2cCrHr )r_revocation_datero)r#rrr1r&r&r'r"rKz"RevokedCertificateBuilder.__init__rrGrcCsXt|ts td|jdurtd|dkrtd|dkr$tdt||j|jS)Nrrrz$The serial number should be positiverr) rUrGrsrr3rrrrorr&r&r'rs    z'RevokedCertificateBuilder.serial_numberr:r;cCsNt|tjs td|jdurtdt|}|tkrtdt|j||j S)Nrz)The revocation date may only be set once.z7The revocation date must be on or after 1950 January 1.) rUr>rsrr3rBrrrrorr&r&r'rs   z)RevokedCertificateBuilder.revocation_daterurrvrTcCsFt|ts tdt|j||}t||jt|j|j g|j|S)Nrw) rUrrsrrr5rorrrrxr&r&r'rys   z'RevokedCertificateBuilder.add_extensionrrrcCs.|jdur td|jdurtdt|S)Nz/A revoked certificate must have a serial numberz1A revoked certificate must have a revocation date)rr3rrZcreate_revoked_certificate)r#rr&r&r'builds   zRevokedCertificateBuilder.build)rrrrr1r2)rrGrr)r:r;rr)rurrvrTrrr )rrrr)r*r+r,r"rrryrr&r&r&r'rs  rrGcCsttddd?S)Nbigr)rG from_bytesosurandomr&r&r&r'random_serial_numberrQr)r/r0r1r2rr)rrr6r7rr)r:r;rr;r[)H __future__rr>rtypingcollections.abcrZ cryptographyrZ"cryptography.hazmat.bindings._rustrrZcryptography.hazmat.primitivesrZ)cryptography.hazmat.primitives.asymmetricrrr r r r r rZ/cryptography.hazmat.primitives.asymmetric.typesrrZcryptography.x509.extensionsrrrZcryptography.x509.namerrZcryptography.x509.oidrrUnionSHA224SHA256SHA384SHA512ZSHA3_224ZSHA3_256ZSHA3_384ZSHA3_512Z_AllowedHashTypes Exceptionrr5r9rBrCr]EnumrfrirrrrZload_pem_x509_certificateZload_der_x509_certificateZload_pem_x509_certificatesZload_pem_x509_csrZload_der_x509_csrZload_pem_x509_crlZload_der_x509_crlrkrrrrr&r&r&r'sh     (    $pE