o b9%@sddlZddlmZddlmZddlmZddlmZm Z Gdddej Z dd e DZ e Zeje jeje jeje jeje jeje jeje jiZejd ejd ejd ejd ejdejdejdejdejdejdi Zde de fddZ!Gddde Z"Gddde Z#Gddde Z$dS)N)utils) _get_backend)Backend)NameOIDObjectIdentifierc@s4eZdZdZdZdZdZdZdZdZ dZ d Z d Z d S) _ASN1Type N) __name__ __module__ __qualname__ UTF8StringZ NumericStringPrintableStringZ T61String IA5StringZUTCTimeZGeneralizedTimeZ VisibleStringZUniversalStringZ BMPStringrrU/var/www/secure340b-portal/env/lib/python3.10/site-packages/cryptography/x509/name.pyr srcCsi|]}|j|qSr)value.0irrr srZCNLZSTOZOUCZSTREETZDCUIDEvalreturncCs|sdS|dd}|dd}|dd}|dd }|d d }|d d }|dd}|dd}|ddvr>d|}|ddkrL|ddd}|S)z>Escape special characters in RFC4514 Distinguished Name value.\z\\"z\"+z\+,z\,;z\;z\>z\00r)# r0Nz\ )replace)r$rrr_escape_dn_value5s          r3c@seZdZefdededdfddZedefddZedefd d Z edefd d Z defd dZ de de fddZde de fddZdefddZdefddZdS) NameAttributeoidrr%NcCst|ts tdt|tstd|tjks|tjkr)t|ddkr)t d|t kr4t |t j}t|t s=td||_||_||_dS)Nz2oid argument must be an ObjectIdentifier instance.zvalue argument must be a str.utf8z/Country name must be a 2 character country codez%_type must be from the _ASN1Type enum) isinstancer TypeErrorstrr COUNTRY_NAMEJURISDICTION_COUNTRY_NAMElenencode ValueError _SENTINEL_NAMEOID_DEFAULT_TYPEgetrr_oid_value_type)selfr5rrErrr__init__Ns*     zNameAttribute.__init__cC|jSN)rCrFrrrr5rzNameAttribute.oidcCrHrI)rDrJrrrrvrKzNameAttribute.valuecCst|j|jjS)zt The short attribute name (for example "CN") if available, otherwise the OID dotted string. )_NAMEOID_TO_NAMErBr5Z dotted_stringrJrrrrfc4514_attribute_namezsz$NameAttribute.rfc4514_attribute_namecCsd|jt|jfS)z Format as RFC4514 Distinguished Name string. Use short attribute name if available, otherwise fall back to OID dotted string. z%s=%s)rMr3rrJrrrrfc4514_stringszNameAttribute.rfc4514_stringothercCs&t|tstS|j|jko|j|jkSrI)r8r4NotImplementedr5rrFrOrrr__eq__s zNameAttribute.__eq__cC ||k SrIrrQrrr__ne__ zNameAttribute.__ne__cCst|j|jfSrI)hashr5rrJrrr__hash__szNameAttribute.__hash__cCs d|S)Nz/)formatrJrrr__repr__rUzNameAttribute.__repr__)rrrr@rr:rGpropertyr5rrMrNobjectboolrRrTintrWrYrrrrr4Ms( $ r4c@seZdZdejefddZdedejefddZ de fdd Z d e de fd d Zd e de fd dZdefddZdejefddZdefddZde fddZdS)RelativeDistinguishedName attributescCs\t|}|s tdtdd|Dstd||_t||_t|jt|kr,tddS)Nz-a relative distinguished name cannot be emptycs|]}t|tVqdSrIr8r4rxrrr z5RelativeDistinguishedName.__init__..z/attributes must be an iterable of NameAttributez$duplicate attributes are not allowed)listr?allr9 _attributes frozenset_attribute_setr=rFr_rrrrGs z"RelativeDistinguishedName.__init__r5r%cfdd|DS)Ncg|] }|jkr|qSrr5rrnrr zDRelativeDistinguishedName.get_attributes_for_oid..rrFr5rrnrget_attributes_for_oidz0RelativeDistinguishedName.get_attributes_for_oidcCsddd|jDS)z Format as RFC4514 Distinguished Name string. Within each RDN, attributes are joined by '+', although that is rarely used in certificates. r)cs|]}|VqdSrIrNrattrrrrrdz;RelativeDistinguishedName.rfc4514_string..)joinrhrJrrrrNsz(RelativeDistinguishedName.rfc4514_stringrOcCt|tstS|j|jkSrI)r8r^rPrjrQrrrrR  z RelativeDistinguishedName.__eq__cCrSrIrrQrrrrTrUz RelativeDistinguishedName.__ne__cC t|jSrI)rVrjrJrrrrWrUz"RelativeDistinguishedName.__hash__cCr|rI)iterrhrJrrr__iter__rUz"RelativeDistinguishedName.__iter__cCr|rI)r=rhrJrrr__len__rUz!RelativeDistinguishedName.__len__cCsd|S)Nz)rXrNrJrrrrYsz"RelativeDistinguishedName.__repr__N)rrrtypingIterabler4rGrListrrr:rNr[r\rRrTr]rWIteratorr~rrYrrrrr^s  r^c@s$eZdZejdejeddfddZejdejeddfddZdejej eefddfddZde fdd Z d e dej efd d Zedej efd dZddejedefddZdedefddZdedefddZdefddZdejefddZdefddZde fddZdS) Namer_r%NcCdSrIrrkrrrrGsz Name.__init__cCrrIrrkrrrrGscCs`t|}tdd|Drdd|D|_dStdd|Dr,ttjt||_dStd)Ncsr`rIrarbrrrrdrez Name.__init__..cSsg|] }ttt|gqSr)r^rcastr4rbrrrrosz!Name.__init__..csr`rI)r8r^rbrrrrdrezNattributes must be a list of NameAttribute or a list RelativeDistinguishedName)rfrgrhrrrr^r9rkrrrrGs   cCsdddt|jDS)a Format as RFC4514 Distinguished Name string. For example 'CN=foobar.com,O=Foo Corp,C=US' An X.509 name is a two-level structure: a list of sets of attributes. Each list element is separated by ',' and within each list element, set elements are separated by '+'. The latter is almost never used in real world certificates. According to RFC4514 section 2.1 the RDNSequence must be reversed when converting to string representation. r*csrtrIrurvrrrrds z&Name.rfc4514_string..)ryreversedrhrJrrrrNs zName.rfc4514_stringr5crl)Ncrmrrnrrnrrrorpz/Name.get_attributes_for_oid..rrqrrnrrrrszName.get_attributes_for_oidcCrHrIrhrJrrrrdnsrKz Name.rdnsbackendcCst|}||SrI)rZx509_name_bytes)rFrrrr public_bytes s zName.public_bytesrOcCrzrI)r8rrPrhrQrrrrRr{z Name.__eq__cCrSrIrrQrrrrTrUz Name.__ne__cCstt|jSrI)rVtuplerhrJrrrrWsz Name.__hash__ccs"|jD] }|D]}|VqqdSrIr)rFrdnZavarrrr~s  z Name.__iter__cCstdd|jDS)Ncss|]}t|VqdSrI)r=)rrrrrrd"rxzName.__len__..)sumrhrJrrrr!sz Name.__len__cCs ddd|jD}d|S)Nr*csrtrIrurvrrrrd%rxz Name.__repr__..z )ryrhrX)rFrrrrrY$s z Name.__repr__rI)rrrroverloadrr4rGr^Unionr:rNrrrrrZrOptionalrbytesrr[r\rRrTr]rWrr~rrYrrrrrs>    r)%rZ cryptographyrZcryptography.hazmat.backendsrZ'cryptography.hazmat.backends.interfacesrZcryptography.x509.oidrrEnumrZ_ASN1_TYPE_TO_ENUMr[r@r;rr<Z SERIAL_NUMBERZ DN_QUALIFIERZ EMAIL_ADDRESSrZDOMAIN_COMPONENTrAZ COMMON_NAMEZ LOCALITY_NAMEZSTATE_OR_PROVINCE_NAMEZORGANIZATION_NAMEZORGANIZATIONAL_UNIT_NAMEZSTREET_ADDRESSZUSER_IDrLr:r3r4r^rrrrrs<     Q3