File: //opt/alt/python38/lib/python3.8/site-packages/asn1crypto/__pycache__/ocsp.cpython-38.opt-1.pyc
U
"�2VRF � @ s� d Z ddlmZmZmZmZ ddlmZmZ ddl m
Z
m Z m Z m
Z
mZmZmZmZmZmZmZmZmZ ddlmZmZ ddlmZ ddl m Z m Z m Z m Z G d d
� d
e�Z!G d d � d e�Z"G d
d� de�Z#G dd� de�Z$G dd� de�Z%G dd� de�Z&G dd� de�Z'G dd� de�Z(G dd� de�Z)G dd � d e�Z*G d d � d e�Z+G d d � d e�Z,G d!d"� d"e�Z-G d#d$� d$e�Z.G d%d&� d&e�Z/G d'd(� d(e�Z0G d)d*� d*e�Z1G d+d,� d,e�Z2G d-d.� d.e�Z3G d/d0� d0e �Z4G d1d2� d2e �Z5G d3d4� d4e�Z6G d5d6� d6e �Z7G d7d8� d8e�Z8G d9d:� d:e�Z9G d;d<� d<e�Z:G d=d>� d>e�Z;G d?d@� d@e�Z<G dAdB� dBe�Z=G dCdD� dDe�Z>G dEdF� dFe�Z?G dGdH� dHe�Z@G dIdJ� dJe�ZAG dKdL� dLe�ZBG dMdN� dNe�ZCG dOdP� dPe�ZDdQS )Rz�
ASN.1 type classes for the online certificate status protocol (OCSP). Exports
the following items:
- OCSPRequest()
- OCSPResponse()
Other type classes are defined that help compose the types listed above.
� )�unicode_literals�division�absolute_import�print_function� )�DigestAlgorithm�SignedDigestAlgorithm)
�Boolean�Choice�
Enumerated�GeneralizedTime� IA5String�Integer�Null�ObjectIdentifier�OctetBitString� OctetString�ParsableOctetString�Sequence�
SequenceOf)�AuthorityInfoAccessSyntax� CRLReason)�PublicKeyAlgorithm)� Certificate� GeneralName� GeneralNames�Namec @ s e Zd ZddiZdS )�Versionr �v1N��__name__�
__module__� __qualname__�_map� r$ r$ �/ocsp.pyr ' s �r c @ s( e Zd ZdefdefdefdefgZdS )�CertIdZhash_algorithmZissuer_name_hashZissuer_key_hashZ
serial_numberN)r r! r" r r r �_fieldsr$ r$ r$ r% r& - s
�r& c @ s e Zd ZdefdefgZdS )�ServiceLocatorZissuerZlocatorN)r r! r" r r r' r$ r$ r$ r% r( 6 s �r( c @ s e Zd ZddiZdS )�RequestExtensionIdz1.3.6.1.5.5.7.48.1.7�service_locatorNr r$ r$ r$ r% r) = s �r) c @ s4 e Zd ZdefdeddifdefgZdZdeiZ dS ) �RequestExtension�extn_id�critical�defaultF�
extn_value�r, r/ r* N)
r r! r" r) r r r' � _oid_pairr( �
_oid_specsr$ r$ r$ r% r+ C s � �r+ c @ s e Zd ZeZdS )�RequestExtensionsN)r r! r" r+ � _child_specr$ r$ r$ r% r3 P s r3 c @ sR e Zd Zdefdedddd�fgZdZdZdZd d
� Z e
d d � �Z e
d
d� �Z dS )�RequestZreq_cert�single_request_extensions�explicitr T��tag_type�tag�optionalFNc C sd t � | _| d D ]H}|d j}d| }t| |�rBt| ||d j� |d jr| j�|� qd| _dS )�v
Sets common named extensions to private attributes and creates a list
of critical extensions
r6 r, � _%s_valuer/ r- TN��set�_critical_extensions�native�hasattr�setattr�parsed�add�_processed_extensions��self� extension�nameZattribute_namer$ r$ r% �_set_extensions^ s
zRequest._set_extensionsc C s | j s| �� | jS �z�
Returns a set of the names (or OID if not a known extension) of the
extensions marked as critical
:return:
A set of unicode strings
�rF rK r@ �rH r$ r$ r% �critical_extensionsp s
zRequest.critical_extensionsc C s | j dkr| �� | jS )z�
This extension is used when communicating with an OCSP responder that
acts as a proxy for OCSP requests
:return:
None or a ServiceLocator object
F)rF rK �_service_locator_valuerN r$ r$ r% �service_locator_value~ s
z Request.service_locator_value)
r r! r" r& r3 r' rF r@ rP rK �propertyrO rQ r$ r$ r$ r% r5 T s �
r5 c @ s e Zd ZeZdS )�RequestsN)r r! r" r5 r4 r$ r$ r$ r% rS � s rS c @ s e Zd ZddiZdS )� ResponseTypez1.3.6.1.5.5.7.48.1.1�basic_ocsp_responseNr r$ r$ r$ r% rT � s �rT c @ s e Zd ZeZdS )�AcceptableResponsesN)r r! r" rT r4 r$ r$ r$ r% rV � s rV c @ s" e Zd ZdefdeddifgZdS )�PreferredSignatureAlgorithmZsig_identifierZcert_identifierr; TN)r r! r" r r r' r$ r$ r$ r% rW � s �rW c @ s e Zd ZeZdS )� PreferredSignatureAlgorithmsN)r r! r" rW r4 r$ r$ r$ r% rX � s rX c @ s e Zd Zdddd�ZdS )�TBSRequestExtensionId�nonce�acceptable_responses� preferred_signature_algorithms)�1.3.6.1.5.5.7.48.1.2z1.3.6.1.5.5.7.48.1.4z1.3.6.1.5.5.7.48.1.8Nr r$ r$ r$ r% rY � s �rY c @ s8 e Zd ZdefdeddifdefgZdZee e
d�Z dS ) �TBSRequestExtensionr, r- r. Fr/ r0 )rZ r[ r\ N) r r! r" rY r r r' r1 r rV rX r2 r$ r$ r$ r% r^ � s ��r^ c @ s e Zd ZeZdS )�TBSRequestExtensionsN)r r! r" r^ r4 r$ r$ r$ r% r_ � s r_ c @ sF e Zd Zdedddd�fdedddd �fd
efd edd dd �fgZd
S )�
TBSRequest�versionr7 r r �r9 r: r. Zrequestor_namer Tr8 Z request_list�request_extensions� N)r r! r" r r rS r_ r' r$ r$ r$ r% r` � s
�r` c @ s e Zd ZeZdS )� CertificatesN)r r! r" r r4 r$ r$ r$ r% re � s re c @ s, e Zd Zdefdefdedddd�fgZdS ) � Signature�signature_algorithm� signature�certsr7 r Tr8 N)r r! r" r r re r' r$ r$ r$ r% rf � s �rf c @ sr e Zd Zdefdedddd�fgZdZdZdZdZ dZ
d d
� Z e d d � �Z
e d
d� �Ze dd� �Ze dd� �ZdS )� OCSPRequest� tbs_requestZoptional_signaturer7 r Tr8 FNc C sh t � | _| d d D ]H}|d j}d| }t| |�rFt| ||d j� |d jr| j�|� qd| _dS ) r< rk rc r, r= r/ r- TNr> rG r$ r$ r% rK � s
zOCSPRequest._set_extensionsc C s | j s| �� | jS rL rM rN r$ r$ r% rO � s
z OCSPRequest.critical_extensionsc C s | j dkr| �� | jS )z�
This extension is used to prevent replay attacks by including a unique,
random value with each request/response pair
:return:
None or an OctetString object
F�rF rK � _nonce_valuerN r$ r$ r% � nonce_value s
zOCSPRequest.nonce_valuec C s | j dkr| �� | jS )a(
This extension is used to allow the client and server to communicate
with alternative response formats other than just basic_ocsp_response,
although no other formats are defined in the standard.
:return:
None or an AcceptableResponses object
F)rF rK �_acceptable_responses_valuerN r$ r$ r% �acceptable_responses_value s
z&OCSPRequest.acceptable_responses_valuec C s | j dkr| �� | jS )aj
This extension is used by the client to define what signature algorithms
are preferred, including both the hash algorithm and the public key
algorithm, with a level of detail down to even the public key algorithm
parameters, such as curve name.
:return:
None or a PreferredSignatureAlgorithms object
F)rF rK �%_preferred_signature_algorithms_valuerN r$ r$ r% �$preferred_signature_algorithms_value s
z0OCSPRequest.preferred_signature_algorithms_value)r r! r" r` rf r' rF r@ rm ro rq rK rR rO rn rp rr r$ r$ r$ r% rj � s" �
rj c @ s e Zd Zddddddd�ZdS ) �OCSPResponseStatusZ
successfulZmalformed_requestZinternal_errorZ try_laterZ
sign_requiredZ unauthorized)r r rd � � � Nr r$ r$ r$ r% rs 0 s �rs c @ s, e Zd Zdeddd�fdeddd�fgZdS )� ResponderIdZby_namer7 r �r9 r: Zby_keyrd N)r r! r" r r �
_alternativesr$ r$ r$ r% rw ; s �rw c @ s& e Zd Zdefdedddd�fgZdS )� RevokedInfoZrevocation_timeZrevocation_reasonr7 r Tr8 N)r r! r" r r r' r$ r$ r$ r% rz B s �rz c @ s: e Zd Zdeddd�fdeddd�fdeddd�fgZd S )
�
CertStatusZgoodZimplicitr rx Zrevokedr �unknownrd N)r r! r" r rz ry r$ r$ r$ r% r{ I s �r{ c @ s@ e Zd Zdedddd�fdedddd�fdedd dd�fgZd
S ) �CrlIdZcrl_urlr7 r Tr8 Zcrl_numr Zcrl_timerd N)r r! r" r
r r r' r$ r$ r$ r% r} Q s �r} c @ s e Zd Zdddddd�ZdS )�SingleResponseExtensionId�crl�archive_cutoff�
crl_reason�invalidity_date�certificate_issuer)z1.3.6.1.5.5.7.48.1.3z1.3.6.1.5.5.7.48.1.6z 2.5.29.21z 2.5.29.24z 2.5.29.29Nr r$ r$ r$ r% r~ Y s �r~ c @ s< e Zd ZdefdeddifdefgZdZee e
e e d�Z dS ) �SingleResponseExtensionr, r- r. Fr/ r0 )r r� r� r� r� N)
r r! r" r~ r r r' r1 r} r r r r2 r$ r$ r$ r% r� e s ��r� c @ s e Zd ZeZdS )�SingleResponseExtensionsN)r r! r" r� r4 r$ r$ r$ r% r� v s r� c
@ s� e Zd Zdefdefdefdedddd�fd edd
dd�fgZd Zd Z d Z
d Z d Z d Z
d Zd
d� Zedd� �Zedd� �Zedd� �Zedd� �Zedd� �Zedd� �Zd S )�SingleResponseZcert_idZ cert_statusZ this_updateZ next_updater7 r Tr8 �single_extensionsr FNc C sd t � | _| d D ]H}|d j}d| }t| |�rBt| ||d j� |d jr| j�|� qd| _dS )r< r� r, r= r/ r- TNr> rG r$ r$ r% rK � s
z SingleResponse._set_extensionsc C s | j s| �� | jS rL rM rN r$ r$ r% rO � s
z"SingleResponse.critical_extensionsc C s | j dkr| �� | jS )z�
This extension is used to locate the CRL that a certificate's revocation
is contained within.
:return:
None or a CrlId object
F)rF rK �
_crl_valuerN r$ r$ r% � crl_value� s
zSingleResponse.crl_valuec C s | j dkr| �� | jS )z�
This extension is used to indicate the date at which an archived
(historical) certificate status entry will no longer be available.
:return:
None or a GeneralizedTime object
F)rF rK �_archive_cutoff_valuerN r$ r$ r% �archive_cutoff_value� s
z#SingleResponse.archive_cutoff_valuec C s | j dkr| �� | jS )z�
This extension indicates the reason that a certificate was revoked.
:return:
None or a CRLReason object
F)rF rK �_crl_reason_valuerN r$ r$ r% �crl_reason_value� s
z SingleResponse.crl_reason_valuec C s | j dkr| �� | jS )a=
This extension indicates the suspected date/time the private key was
compromised or the certificate became invalid. This would usually be
before the revocation date, which is when the CA processed the
revocation.
:return:
None or a GeneralizedTime object
F)rF rK �_invalidity_date_valuerN r$ r$ r% �invalidity_date_value� s
z$SingleResponse.invalidity_date_valuec C s | j dkr| �� | jS )z�
This extension indicates the issuer of the certificate in question.
:return:
None or an x509.GeneralNames object
F)rF rK �_certificate_issuer_valuerN r$ r$ r% �certificate_issuer_value� s
z'SingleResponse.certificate_issuer_value)r r! r" r& r{ r r� r' rF r@ r� r� r� r� r� rK rR rO r� r� r� r� r� r$ r$ r$ r% r� z s4 �
r� c @ s e Zd ZeZdS )� ResponsesN)r r! r" r� r4 r$ r$ r$ r% r� � s r� c @ s e Zd Zddd�ZdS )�ResponseDataExtensionIdrZ �extended_revoke)r] z1.3.6.1.5.5.7.48.1.9Nr r$ r$ r$ r% r� � s �r� c @ s6 e Zd ZdefdeddifdefgZdZee d�Z
dS ) �ResponseDataExtensionr, r- r. Fr/ r0 )rZ r� N) r r! r" r� r r r' r1 r r r2 r$ r$ r$ r% r� � s ��r� c @ s e Zd ZeZdS )�ResponseDataExtensionsN)r r! r" r� r4 r$ r$ r$ r% r� s r� c
@ sB e Zd Zdedddd�fdefdefdefd edd
d d �fgZd
S )� ResponseDatara r7 r r rb Z responder_idZ produced_atZ responses�response_extensionsr Tr8 N) r r! r" r rw r r� r� r' r$ r$ r$ r% r� s �r� c @ s2 e Zd Zdefdefdefdedddd�fgZd S )
�BasicOCSPResponse�tbs_response_datarg rh ri r7 r Tr8 N)r r! r" r� r r re r' r$ r$ r$ r% r� s
�r� c @ s( e Zd ZdefdefgZdZdeiZdS )�
ResponseBytes�
response_type�response)r� r� rU N) r r! r" rT r r' r1 r� r2 r$ r$ r$ r% r� " s � �r� c @ sz e Zd Zdefdedddd�fgZdZdZdZdZ d d
� Z
e d d � �Z e d
d� �Z
e dd� �Ze dd� �Ze dd� �ZdS )� OCSPResponseZresponse_status�response_bytesr7 r Tr8 FNc C sr t � | _| d d jd d D ]H}|d j}d| }t| |�rPt| ||d j� |d jr | j�|� q d | _d
S ) r< r� r� r� r� r, r= r/ r- TN)r? r@ rD rA rB rC rE rF rG r$ r$ r% rK 9 s
z OCSPResponse._set_extensionsc C s | j s| �� | jS rL rM rN r$ r$ r% rO K s
z OCSPResponse.critical_extensionsc C s | j dkr| �� | jS )z�
This extension is used to prevent replay attacks on the request/response
exchange
:return:
None or an OctetString object
Frl rN r$ r$ r% rn Y s
zOCSPResponse.nonce_valuec C s | j dkr| �� | jS )z�
This extension is used to signal that the responder will return a
"revoked" status for non-issued certificates.
:return:
None or a Null object (if present)
F)rF rK �_extended_revoke_valuerN r$ r$ r% �extended_revoke_valueg s
z"OCSPResponse.extended_revoke_valuec C s | d d j S )z�
A shortcut into the BasicOCSPResponse sequence
:return:
None or an asn1crypto.ocsp.BasicOCSPResponse object
r� r� �rD rN r$ r$ r% rU u s z OCSPResponse.basic_ocsp_responsec C s | d d j d S )z�
A shortcut into the parsed, ResponseData sequence
:return:
None or an asn1crypto.ocsp.ResponseData object
r� r� r� r� rN r$ r$ r% �
response_data� s zOCSPResponse.response_data)r r! r" rs r� r' rF r@ rm r� rK rR rO rn r� rU r� r$ r$ r$ r% r� . s$ �
r� N)E�__doc__Z
__future__r r r r Zalgosr r Zcorer r
r r r
r r r r r r r r r r r �keysr Zx509r r r r r r& r( r) r+ r3 r5 rS rT rV rW rX rY r^ r_ r` re rf rj rs rw rz r{ r} r~ r� r� r� r� r� r� r� r� r� r� r� r$ r$ r$ r% �<module> sT
<
9 Z x