Your IP : 216.73.216.213
"�2VRF � @ s� d Z d d l m Z m Z m Z m Z d d l m Z m Z d d l m
Z
m Z m Z m
Z
m Z m Z m Z m Z m Z m Z m Z m Z m Z d d l m Z m Z d d l m Z d d l m Z m Z m Z m Z Gd d
� d
e � Z! Gd d � d e � Z" Gd
d � d e � Z# Gd d � d e � Z$ Gd d � d e � Z% Gd d � d e � Z& Gd d � d e � Z' Gd d � d e � Z( Gd d � d e � Z) Gd d � d e � Z* Gd d � d e � Z+ Gd d � d e � Z, Gd! d" � d" e � Z- Gd# d$ � d$ e � Z. Gd% d& � d& e � Z/ Gd' d( � d( e � Z0 Gd) d* � d* e � Z1 Gd+ d, � d, e � Z2 Gd- d. � d. e � Z3 Gd/ d0 � d0 e � Z4 Gd1 d2 � d2 e � Z5 Gd3 d4 � d4 e � Z6 Gd5 d6 � d6 e � Z7 Gd7 d8 � d8 e � Z8 Gd9 d: � d: e � Z9 Gd; d< � d< e � Z: Gd= d> � d> e � Z; Gd? d@ � d@ e � Z< GdA dB � dB e � Z= GdC dD � dD e � Z> GdE dF � dF e � Z? GdG dH � dH e � Z@ GdI dJ � dJ e � ZA GdK dL � dL e � ZB GdM dN � dN e � ZC GdO dP � dP e � ZD dQ S)Rz�
ASN.1 type classes for the online certificate status protocol (OCSP). Exports
the following items:
- OCSPRequest()
- OCSPResponse()
Other type classes are defined that help compose the types listed above.
� )�unicode_literals�division�absolute_import�print_function� )�DigestAlgorithm�SignedDigestAlgorithm)
�Boolean�Choice�
Enumerated�GeneralizedTime� IA5String�Integer�Null�ObjectIdentifier�OctetBitString� OctetString�ParsableOctetString�Sequence�
SequenceOf)�AuthorityInfoAccessSyntax� CRLReason)�PublicKeyAlgorithm)� Certificate� GeneralName� GeneralNames�Namec @ s e Z d Z d d i Z d S)�Versionr �v1N)�__name__�
__module__� __qualname__�_map� r# r# �@/opt/alt/python35/lib/python3.5/site-packages/asn1crypto/ocsp.pyr ' s r c @ s: e Z d Z d e f d e f d e f d e f g Z d S)�CertIdZhash_algorithmZissuer_name_hashZissuer_key_hashZ
serial_numberN)r r r! r r r �_fieldsr# r# r# r$ r% - s r% c @ s( e Z d Z d e f d e f g Z d S)�ServiceLocatorZissuer�locatorN)r r r! r r r& r# r# r# r$ r' 6 s r' c @ s e Z d Z d d i Z d S)�RequestExtensionIdz1.3.6.1.5.5.7.48.1.7�service_locatorN)r r r! r" r# r# r# r$ r) = s r) c @ sL e Z d Z d e f d e d d i f d e f g Z d Z d e i Z d S) �RequestExtension�extn_id�critical�defaultF�
extn_valuer* N)r, r/ )
r r r! r) r r r& � _oid_pairr' �
_oid_specsr# r# r# r$ r+ C s
r+ c @ s e Z d Z e Z d S)�RequestExtensionsN)r r r! r+ � _child_specr# r# r# r$ r2 P s r2 c @ s e Z d Z d e f d e d d d d d d i f g Z d Z d
Z d
Z d d � Z e
d
d � � Z e
d d � � Z d
S)�RequestZreq_cert�single_request_extensions�tag_type�explicit�tagr �optionalTFNc C s� t � | _ xl | d D]` } | d j } d | } t | | � rZ t | | | d j � | d j r | j j | � q Wd | _ d S)zv
Sets common named extensions to private attributes and creates a list
of critical extensions
r5 r, z _%s_valuer/ r- TN)�set�_critical_extensions�native�hasattr�setattr�parsed�add�_processed_extensions)�self� extension�name�attribute_namer# r# r$ �_set_extensions^ s
zRequest._set_extensionsc C s | j s | j � | j S)z�
Returns a set of the names (or OID if not a known extension) of the
extensions marked as critical
:return:
A set of unicode strings
)rA rF r; )rB r# r# r$ �critical_extensionsp s
zRequest.critical_extensionsc C s | j d k r | j � | j S)z�
This extension is used when communicating with an OCSP responder that
acts as a proxy for OCSP requests
:return:
None or a ServiceLocator object
F)rA rF �_service_locator_value)rB r# r# r$ �service_locator_value~ s
z Request.service_locator_value)
r r r! r% r2 r& rA r; rH rF �propertyrG rI r# r# r# r$ r4 T s $ r4 c @ s e Z d Z e Z d S)�RequestsN)r r r! r4 r3 r# r# r# r$ rK � s rK c @ s e Z d Z d d i Z d S)� ResponseTypez1.3.6.1.5.5.7.48.1.1�basic_ocsp_responseN)r r r! r" r# r# r# r$ rL � s rL c @ s e Z d Z e Z d S)�AcceptableResponsesN)r r r! rL r3 r# r# r# r$ rN � s rN c @ s1 e Z d Z d e f d e d d i f g Z d S)�PreferredSignatureAlgorithmZsig_identifierZcert_identifierr9 TN)r r r! r r r& r# r# r# r$ rO � s rO c @ s e Z d Z e Z d S)� PreferredSignatureAlgorithmsN)r r r! rO r3 r# r# r# r$ rP � s rP c @ s( e Z d Z d d d d d d i Z d S)�TBSRequestExtensionIdz1.3.6.1.5.5.7.48.1.2�noncez1.3.6.1.5.5.7.48.1.4�acceptable_responsesz1.3.6.1.5.5.7.48.1.8� preferred_signature_algorithmsN)r r r! r" r# r# r# r$ rQ � s rQ c @ sX e Z d Z d e f d e d d i f d e f g Z d
Z d e d e d e
i Z d S) �TBSRequestExtensionr, r- r. Fr/ rR rS rT N)r, r/ ) r r r! rQ r r r& r0 r rN rP r1 r# r# r# r$ rU � s rU c @ s e Z d Z e Z d S)�TBSRequestExtensionsN)r r r! rU r3 r# r# r# r$ rV � s rV c @ sy e Z d Z d e d d d d d d i f d e d d d d d
d i f d e f d
e d d d d d
d i f g Z d S)�
TBSRequest�versionr6 r7 r8 r r. r Zrequestor_namer r9 TZ request_list�request_extensions� N)r r r! r r rK rV r& r# r# r# r$ rW � s rW c @ s e Z d Z e Z d S)� CertificatesN)r r r! r r3 r# r# r# r$ r[ � s r[ c
@ sF e Z d Z d e f d e f d e d d d d d d i f g Z d
S) � Signature�signature_algorithm� signature�certsr6 r7 r8 r r9 TN)r r r! r r r[ r& r# r# r# r$ r\ � s r\ c @ s� e Z d Z d e f d e d d d d d d i f g Z d Z d
Z d
Z d
Z d
Z
d d � Z e d
d � � Z
e d d � � Z e d d � � Z e d d � � Z d
S)� OCSPRequest� tbs_requestZoptional_signaturer6 r7 r8 r r9 TFNc C s� t � | _ xp | d d D]` } | d j } d | } t | | � r^ t | | | d j � | d j r | j j | � q Wd | _ d S) zv
Sets common named extensions to private attributes and creates a list
of critical extensions
ra rY r, z _%s_valuer/ r- TN)r: r; r< r= r> r? r@ rA )rB rC rD rE r# r# r$ rF � s
zOCSPRequest._set_extensionsc C s | j s | j � | j S)z�
Returns a set of the names (or OID if not a known extension) of the
extensions marked as critical
:return:
A set of unicode strings
)rA rF r; )rB r# r# r$ rG � s
z OCSPRequest.critical_extensionsc C s | j d k r | j � | j S)z�
This extension is used to prevent replay attacks by including a unique,
random value with each request/response pair
:return:
None or an OctetString object
F)rA rF � _nonce_value)rB r# r# r$ � nonce_value s
zOCSPRequest.nonce_valuec C s | j d k r | j � | j S)a(
This extension is used to allow the client and server to communicate
with alternative response formats other than just basic_ocsp_response,
although no other formats are defined in the standard.
:return:
None or an AcceptableResponses object
F)rA rF �_acceptable_responses_value)rB r# r# r$ �acceptable_responses_value s
z&OCSPRequest.acceptable_responses_valuec C s | j d k r | j � | j S)aj
This extension is used by the client to define what signature algorithms
are preferred, including both the hash algorithm and the public key
algorithm, with a level of detail down to even the public key algorithm
parameters, such as curve name.
:return:
None or a PreferredSignatureAlgorithms object
F)rA rF �%_preferred_signature_algorithms_value)rB r# r# r$ �$preferred_signature_algorithms_value s
z0OCSPRequest.preferred_signature_algorithms_value)r r r! rW r\ r& rA r; rb rd rf rF rJ rG rc re rg r# r# r# r$ r` � s $ r` c @ s: e Z d Z d d d d d d d d d d
d d i Z d
S)�OCSPResponseStatusr Z
successfulr Zmalformed_requestrZ Zinternal_error� Z try_later� Z
sign_required� Z unauthorizedN)r r r! r" r# r# r# r$ rh 0 s rh c @ sF e Z d Z d e d d d d i f d e d d d d i f g Z d S) � ResponderIdZby_namer6 r7 r8 r �by_keyrZ N)r r r! r r �
_alternativesr# r# r# r$ rl ; s rl c @ s= e Z d Z d e f d e d d d d d d i f g Z d S)
� RevokedInfoZrevocation_timeZrevocation_reasonr6 r7 r8 r r9 TN)r r r! r r r& r# r# r# r$ ro B s ro c @ s^ e Z d Z d e d d d d i f d e d d d d i f d e d d d d i f g Z d
S) �
CertStatusZgoodr6 Zimplicitr8 r Zrevokedr �unknownrZ N)r r r! r ro rn r# r# r# r$ rp I s rp c
@ sp e Z d Z d e d d d d d d i f d e d d d d d d i f d
e d d d d d d i f g Z d S)
�CrlIdZcrl_urlr6 r7 r8 r r9 TZcrl_numr Zcrl_timerZ N)r r r! r
r r r& r# r# r# r$ rr Q s rr c
@ s4 e Z d Z d d d d d d d d d d
i Z d S) �SingleResponseExtensionIdz1.3.6.1.5.5.7.48.1.3�crlz1.3.6.1.5.5.7.48.1.6�archive_cutoffz 2.5.29.21�
crl_reasonz 2.5.29.24�invalidity_datez 2.5.29.29�certificate_issuerN)r r r! r" r# r# r# r$ rs Y s
rs c
@ sd e Z d Z d e f d e d d i f d e f g Z d Z d e d e d e
d e d
e i Z d S)
�SingleResponseExtensionr, r- r. Fr/ rt ru rv rw rx N)r, r/ )
r r r! rs r r r& r0 rr r r r r1 r# r# r# r$ ry e s ry c @ s e Z d Z e Z d S)�SingleResponseExtensionsN)r r r! ry r3 r# r# r# r$ rz v s rz c @ s e Z d Z d e f d e f d e f d e d d d d d d
i f d e d d d d d d
i f g Z d
Z d Z d Z
d Z d Z d Z
d Z d d � Z e d d � � Z e d d � � Z e d d � � Z e d d � � Z e d d � � Z e d d � � Z d S) �SingleResponseZcert_idZ cert_statusZ this_updateZ next_updater6 r7 r8 r r9 T�single_extensionsr FNc C s� t � | _ xl | d D]` } | d j } d | } t | | � rZ t | | | d j � | d j r | j j | � q Wd | _ d S)zv
Sets common named extensions to private attributes and creates a list
of critical extensions
r| r, z _%s_valuer/ r- TN)r: r; r< r= r> r? r@ rA )rB rC rD rE r# r# r$ rF � s
z SingleResponse._set_extensionsc C s | j s | j � | j S)z�
Returns a set of the names (or OID if not a known extension) of the
extensions marked as critical
:return:
A set of unicode strings
)rA rF r; )rB r# r# r$ rG � s
z"SingleResponse.critical_extensionsc C s | j d k r | j � | j S)z�
This extension is used to locate the CRL that a certificate's revocation
is contained within.
:return:
None or a CrlId object
F)rA rF �
_crl_value)rB r# r# r$ � crl_value� s
zSingleResponse.crl_valuec C s | j d k r | j � | j S)z�
This extension is used to indicate the date at which an archived
(historical) certificate status entry will no longer be available.
:return:
None or a GeneralizedTime object
F)rA rF �_archive_cutoff_value)rB r# r# r$ �archive_cutoff_value� s
z#SingleResponse.archive_cutoff_valuec C s | j d k r | j � | j S)z�
This extension indicates the reason that a certificate was revoked.
:return:
None or a CRLReason object
F)rA rF �_crl_reason_value)rB r# r# r$ �crl_reason_value� s
z SingleResponse.crl_reason_valuec C s | j d k r | j � | j S)a=
This extension indicates the suspected date/time the private key was
compromised or the certificate became invalid. This would usually be
before the revocation date, which is when the CA processed the
revocation.
:return:
None or a GeneralizedTime object
F)rA rF �_invalidity_date_value)rB r# r# r$ �invalidity_date_value� s
z$SingleResponse.invalidity_date_valuec C s | j d k r | j � | j S)z�
This extension indicates the issuer of the certificate in question.
:return:
None or an x509.GeneralNames object
F)rA rF �_certificate_issuer_value)rB r# r# r$ �certificate_issuer_value� s
z'SingleResponse.certificate_issuer_value)r r r! r% rp r rz r& rA r; r} r r� r� r� rF rJ rG r~ r� r� r� r� r# r# r# r$ r{ z s& $
r{ c @ s e Z d Z e Z d S)� ResponsesN)r r r! r{ r3 r# r# r# r$ r� � s r� c @ s" e Z d Z d d d d i Z d S)�ResponseDataExtensionIdz1.3.6.1.5.5.7.48.1.2rR z1.3.6.1.5.5.7.48.1.9�extended_revokeN)r r r! r" r# r# r# r$ r� � s r� c @ sR e Z d Z d e f d e d d i f d e f g Z d Z d e d e i Z
d S)
�ResponseDataExtensionr, r- r. Fr/ rR r� N)r, r/ ) r r r! r� r r r& r0 r r r1 r# r# r# r$ r� � s r� c @ s e Z d Z e Z d S)�ResponseDataExtensionsN)r r r! r� r3 r# r# r# r$ r� s r� c @ sm e Z d Z d e d d d d d d i f d e f d e f d
e f d e d d d d d
d i f g Z d S)� ResponseDatarX r6 r7 r8 r r. r Z responder_idZ produced_atZ responses�response_extensionsr r9 TN) r r r! r rl r r� r� r& r# r# r# r$ r� s
r� c @ sO e Z d Z d e f d e f d e f d e d d d d d d
i f g Z d S) �BasicOCSPResponse�tbs_response_datar] r^ r_ r6 r7 r8 r r9 TN)r r r! r� r r r[ r& r# r# r# r$ r� s r� c @ s: e Z d Z d e f d e f g Z d Z d e i Z d S)�
ResponseBytes�
response_type�responserM N)r� r� ) r r r! rL r r& r0 r� r1 r# r# r# r$ r� " s r� c @ s� e Z d Z d e f d e d d d d d d i f g Z d Z d
Z d
Z d
Z d d � Z
e d
d � � Z e d d � � Z
e d d � � Z e d d � � Z e d d � � Z d
S)� OCSPResponseZresponse_status�response_bytesr6 r7 r8 r r9 TFNc C s� t � | _ x{ | d d j d d D]` } | d j } d | } t | | � ri t | | | d j � | d j r& | j j | � q& Wd | _ d
S) zv
Sets common named extensions to private attributes and creates a list
of critical extensions
r� r� r� r� r, z _%s_valuer/ r- TN)r: r; r? r< r= r> r@ rA )rB rC rD rE r# r# r$ rF 9 s
z OCSPResponse._set_extensionsc C s | j s | j � | j S)z�
Returns a set of the names (or OID if not a known extension) of the
extensions marked as critical
:return:
A set of unicode strings
)rA rF r; )rB r# r# r$ rG K s
z OCSPResponse.critical_extensionsc C s | j d k r | j � | j S)z�
This extension is used to prevent replay attacks on the request/response
exchange
:return:
None or an OctetString object
F)rA rF rb )rB r# r# r$ rc Y s
zOCSPResponse.nonce_valuec C s | j d k r | j � | j S)z�
This extension is used to signal that the responder will return a
"revoked" status for non-issued certificates.
:return:
None or a Null object (if present)
F)rA rF �_extended_revoke_value)rB r# r# r$ �extended_revoke_valueg s
z"OCSPResponse.extended_revoke_valuec C s | d d j S)z�
A shortcut into the BasicOCSPResponse sequence
:return:
None or an asn1crypto.ocsp.BasicOCSPResponse object
r� r� )r? )rB r# r# r$ rM u s z OCSPResponse.basic_ocsp_responsec C s | d d j d S)z�
A shortcut into the parsed, ResponseData sequence
:return:
None or an asn1crypto.ocsp.ResponseData object
r� r� r� )r? )rB r# r# r$ �
response_data� s zOCSPResponse.response_data)r r r! rh r� r& rA r; rb r� rF rJ rG rc r� rM r� r# r# r# r$ r� . s $ r� N)E�__doc__�
__future__r r r r Zalgosr r �corer r
r r r
r r r r r r r r rt r r �keysr Zx509r r r r r r% r' r) r+ r2 r4 rK rL rN rO rP rQ rU rV rW r[ r\ r` rh rl ro rp rr rs ry rz r{ r� r� r� r� r� r� r� r� r# r# r# r$ �<module> sT "X"
9 Z x