Your IP : 216.73.216.196
B
��S�j � @ s^ d dl mZmZmZmZmZmZmZ d dlm Z m
Z
m Z dZ G dd� dej
�ZG dd� de j�ZG dd � d e�ZG d
d � d e�ZG d d
� d
ej�ZG dd� dej�ZG dd� dej�ZG dd� dej�ZG dd� dej�ZG dd� dej�ZG dd� dej�Z G dd� dej�Z G d d � d ej�Z G d d � d ej�Z G d d!� d!ej�Z G d"d#� d#ej!�Z"G d$d%� d%ej�Z#G d&d'� d'ej�Z$G d(d)� d)ej�Z%G d*d+� d+ej&�Z'G d,d-� d-ej(�Z)G d.d/� d/ej�Z*G d0d1� d1ej�Z+G d2d3� d3ej�Z,G d4d5� d5ej�Z-G d6d7� d7ej�Z.G d8d9� d9ej�Z/G d:d;� d;ej�Z0G d<d=� d=ej�Z1G d>d?� d?ej�Z2G d@dA� dAej�Z3G dBdC� dCej�Z4G dDdE� dEej�Z5G dFdG� dGej�Z6e�7dH�Z8G dIdJ� dJej�Z9e�7dK�Z:G dLdM� dMej(�Z;e5� j<e�=ej>ej?dN�dO�Z@G dPdQ� dQej!�ZAG dRdS� dSej�ZBG dTdU� dUej�ZCG dVdW� dWej�ZDG dXdY� dYej�ZEeE� e5_FeE� e@_FdZS )[� )�tag� namedtype�namedval�univ�
constraint�char�useful)�rfc2459�rfc2511�rfc2314�@ c @ s e Zd ZdS )�
KeyIdentifierN)�__name__�
__module__� __qualname__� r r �G/opt/alt/python37/lib/python3.7/site-packages/pyasn1_modules/rfc4210.pyr
s r
c @ s e Zd ZdS )�CMPCertificateN)r r r r r r r r
s r c @ s e Zd ZdS )�OOBCertN)r r r r r r r r s r c @ s e Zd ZdS )�CertAnnContentN)r r r r r r r r s r c @ s, e Zd ZdZe�� Zejj e
� de � Z dS )� PKIFreeTextz>
PKIFreeText ::= SEQUENCE SIZE (1..MAX) OF UTF8String
� N)
r r r �__doc__r Z
UTF8String�
componentTyper �
SequenceOf� subtypeSpecr �ValueSizeConstraint�MAXr r r r r s r c @ s( e Zd ZdZG dd� dej�Ze� ZdS )�PollRepContentz�
PollRepContent ::= SEQUENCE OF SEQUENCE {
certReqId INTEGER,
checkAfter INTEGER, -- time in seconds
reason PKIFreeText OPTIONAL
}
c @ s< e Zd Ze�e�de�� �e�de�� �e�de � ��Z
dS )zPollRepContent.CertReq� certReqIdZ
checkAfter�reasonN) r r r r �
NamedTypes� NamedTyper �Integer�OptionalNamedTyper r r r r r �CertReq" s r% N)r r r r r �Sequencer% r r r r r r s r c @ s( e Zd ZdZG dd� dej�Ze� ZdS )�PollReqContentzh
PollReqContent ::= SEQUENCE OF SEQUENCE {
certReqId INTEGER
}
c @ s" e Zd Ze�e�de�� ��ZdS )zPollReqContent.CertReqr N) r r r r r! r" r r# r r r r r r% 1 s r% N)r r r r r r& r% r r r r r r' * s r' c @ s4 e Zd ZdZe�e�de�� �e� de�
� ��Z dS )�InfoTypeAndValuez�
InfoTypeAndValue ::= SEQUENCE {
infoType OBJECT IDENTIFIER,
infoValue ANY DEFINED BY infoType OPTIONAL
}ZinfoType� infoValueN) r r r r r r! r" r �ObjectIdentifierr$ �Anyr r r r r r( 7 s r( c @ s e Zd Ze� ZdS )�
GenRepContentN)r r r r( r r r r r r, B s r, c @ s e Zd Ze� ZdS )�
GenMsgContentN)r r r r( r r r r r r- E s r- c @ s e Zd ZdS )�PKIConfirmContentN)r r r r r r r r. H s r. c @ s e Zd Ze�� ZdS )�
CRLAnnContentN)r r r r �CertificateListr r r r r r/ J s r/ c @ s< e Zd ZdZe�e�de� �e�de� �e�de� ��ZdS )�CAKeyUpdAnnContentz�
CAKeyUpdAnnContent ::= SEQUENCE {
oldWithNew CMPCertificate,
newWithOld CMPCertificate,
newWithNew CMPCertificate
}
Z
oldWithNewZ
newWithOldZ
newWithNewN) r r r r r r! r" r r r r r r r1 M s
r1 c @ s4 e Zd ZdZe�e�de�� �e� de
� � ��Z dS )�
RevDetailsz�
RevDetails ::= SEQUENCE {
certDetails CertTemplate,
crlEntryDetails Extensions OPTIONAL
}
Z certDetailsZcrlEntryDetailsN)
r r r r r r! r" r
Z CertTemplater$ r �
Extensionsr r r r r r2 [ s r2 c @ s e Zd Ze� ZdS )�
RevReqContentN)r r r r2 r r r r r r4 g s r4 c @ s^ e Zd ZdZe�e�de� je �
e j e j d�d��e�de
�� je �
e j e j d�d���ZdS )�
CertOrEncCertz�
CertOrEncCert ::= CHOICE {
certificate [0] CMPCertificate,
encryptedCert [1] EncryptedValue
}
Z certificater )� explicitTagZ
encryptedCertr N)r r r r r r! r" r �subtyper �Tag�tagClassContext�tagFormatConstructedr
�EncryptedValuer r r r r r5 j s r5 c
@ sl e Zd ZdZe�e�de� �e�de �
� j e �
e je jd�d��e�de �� j e �
e je jd�d���ZdS ) �CertifiedKeyPairz�
CertifiedKeyPair ::= SEQUENCE {
certOrEncCert CertOrEncCert,
privateKey [0] EncryptedValue OPTIONAL,
publicationInfo [1] PKIPublicationInfo OPTIONAL
}
Z
certOrEncCertZ
privateKeyr )r6 ZpublicationInfor N)r r r r r r! r" r5 r$ r
r; r7 r r8 r9 r: ZPKIPublicationInfor r r r r r< | s r< c @ s e Zd Ze�� ZdS )�POPODecKeyRespContentN)r r r r r# r r r r r r= � s r= c @ sB e Zd ZdZe�e�de�� �e� de
� � �e� de
� � ��Z dS )� Challengez�
Challenge ::= SEQUENCE {
owf AlgorithmIdentifier OPTIONAL,
witness OCTET STRING,
challenge OCTET STRING
}
�owfZwitnessZ challengeN)
r r r r r r! r$ r �AlgorithmIdentifierr" r � OctetStringr r r r r r> � s
r> c @ s& e Zd ZdZe�ddddddd�Zd S )
� PKIStatusa+
PKIStatus ::= INTEGER {
accepted (0),
grantedWithMods (1),
rejection (2),
waiting (3),
revocationWarning (4),
revocationNotification (5),
keyUpdateWarning (6)
}
)Zacceptedr )ZgrantedWithModsr )Z rejection� )Zwaiting� )ZrevocationWarning� )ZrevocationNotification� )ZkeyUpdateWarning� N)r r r r r � NamedValues� namedValuesr r r r rB � s rB c @ sN e Zd ZdZe�dddddddd d
d d d
ddddddddddddddd �Zd S ) �PKIFailureInfoa�
PKIFailureInfo ::= BIT STRING {
badAlg (0),
badMessageCheck (1),
badRequest (2),
badTime (3),
badCertId (4),
badDataFormat (5),
wrongAuthority (6),
incorrectData (7),
missingTimeStamp (8),
badPOP (9),
certRevoked (10),
certConfirmed (11),
wrongIntegrity (12),
badRecipientNonce (13),
timeNotAvailable (14),
unacceptedPolicy (15),
unacceptedExtension (16),
addInfoNotAvailable (17),
badSenderNonce (18),
badCertTemplate (19),
signerNotTrusted (20),
transactionIdInUse (21),
unsupportedVersion (22),
notAuthorized (23),
systemUnavail (24),
systemFailure (25),
duplicateCertReq (26)
)ZbadAlgr )ZbadMessageCheckr )Z
badRequestrC )ZbadTimerD )Z badCertIdrE )Z
badDataFormatrF )ZwrongAuthorityrG )Z
incorrectData� )ZmissingTimeStamp� )ZbadPOP� )Z certRevoked�
)Z
certConfirmed� )ZwrongIntegrity� )ZbadRecipientNonce�
)ZtimeNotAvailable� )ZunacceptedPolicy� )ZunacceptedExtension� )ZaddInfoNotAvailable� )ZbadSenderNonce� )ZbadCertTemplate� )ZsignerNotTrusted� )ZtransactionIdInUse� )ZunsupportedVersion� )Z
notAuthorized� )Z
systemUnavail� )Z
systemFailure� )ZduplicateCertReq� N)r r r r r rH rI r r r r rJ � s: rJ c @ s< e Zd ZdZe�e�de� �e�de � �e�de
� ��Z dS )�
PKIStatusInfoz�
PKIStatusInfo ::= SEQUENCE {
status PKIStatus,
statusString PKIFreeText OPTIONAL,
failInfo PKIFailureInfo OPTIONAL
}
�statusZ statusStringZfailInfoN) r r r r r r! r" rB r$ r rJ r r r r r r_ � s
r_ c @ s> e Zd ZdZe�e�de� �e�de �
� �e�de � ��Z dS )�ErrorMsgContenta7
ErrorMsgContent ::= SEQUENCE {
pKIStatusInfo PKIStatusInfo,
errorCode INTEGER OPTIONAL,
-- implementation-specific error codes
errorDetails PKIFreeText OPTIONAL
-- implementation-specific error details
}
Z
pKIStatusInfoZ errorCodeZ errorDetailsN)
r r r r r r! r" r_ r$ r r# r r r r r r ra s
ra c @ s@ e Zd ZdZe�e�de�� �e�de� � �e�
de � ��Z dS )�
CertStatusz�
CertStatus ::= SEQUENCE {
certHash OCTET STRING,
certReqId INTEGER,
statusInfo PKIStatusInfo OPTIONAL
}
ZcertHashr Z
statusInfoN)
r r r r r r! r" r rA r# r$ r_ r r r r r rb s
rb c @ s e Zd Ze� ZdS )�CertConfirmContentN)r r r rb r r r r r rc ! s rc c @ s\ e Zd ZdZe�e�de� �e�de� � �e�de
� � �e�de
� � �e� de
�� ��ZdS )�
RevAnnContenta
RevAnnContent ::= SEQUENCE {
status PKIStatus,
certId CertId,
willBeRevokedAt GeneralizedTime,
badSinceDate GeneralizedTime,
crlDetails Extensions OPTIONAL
}
r` �certIdZwillBeRevokedAtZ badSinceDateZ
crlDetailsN)r r r r r r! r" rB r
�CertIdr �GeneralizedTimer$ r r3 r r r r r rd $ s rd c @ s� e Zd ZdZe�e�de� �e�de j
e � � d�j
e�de�e�ejejd�d��e�de j
e�� d�j
e�de�e�ejejd�d���Zd S )
�
RevRepContentaI
RevRepContent ::= SEQUENCE {
status SEQUENCE SIZE (1..MAX) OF PKIStatusInfo,
revCerts [0] SEQUENCE SIZE (1..MAX) OF CertId
OPTIONAL,
crls [1] SEQUENCE SIZE (1..MAX) OF CertificateList
OPTIONAL
r` ZrevCerts)r r r )r r6 ZcrlsN)r r r r r r! r" r_ r$ r r r
rf r7 r r r r r8 r9 r: r r0 r r r r r rh 6 s
rh c @ s� e Zd ZdZe�e�de� �e�de � j
e � e j
e jd�d��e�deje � d�j
e � e j
e jd�e�de�d ��e�d
eje� d�j
e � e j
e jd �e�de�d ���Zd S )
�KeyRecRepContenta�
KeyRecRepContent ::= SEQUENCE {
status PKIStatusInfo,
newSigCert [0] CMPCertificate OPTIONAL,
caCerts [1] SEQUENCE SIZE (1..MAX) OF
CMPCertificate OPTIONAL,
keyPairHist [2] SEQUENCE SIZE (1..MAX) OF
CertifiedKeyPair OPTIONAL
}
r` Z
newSigCertr )r6 ZcaCerts)r r )r6 r Z keyPairHistrC N)r r r r r r! r" r_ r$ r r7 r r8 r9 r: r r r r r r< r r r r r ri Q s
ri c
@ sL e Zd ZdZe�e�de�� �e�de � �e�
de � �e�
de� � ��Z
dS )� CertResponsez�
CertResponse ::= SEQUENCE {
certReqId INTEGER,
status PKIStatusInfo,
certifiedKeyPair CertifiedKeyPair OPTIONAL,
rspInfo OCTET STRING OPTIONAL
}
r r` ZcertifiedKeyPairZrspInfoN)r r r r r r! r" r r# r_ r$ r< rA r r r r r rj r s rj c @ s` e Zd ZdZe�e�deje � d�j
e � de
�e�ejejd�d��e�deje� d���ZdS )�CertRepMessagez�
CertRepMessage ::= SEQUENCE {
caPubs [1] SEQUENCE SIZE (1..MAX) OF CMPCertificate
OPTIONAL,
response SEQUENCE OF CertResponse
}
ZcaPubs)r r )r r6 �responseN)r r r r r r! r$ r r r r7 r r r r r8 r9 r: r" rj r r r r r rk � s
rk c @ s e Zd Ze� ZdS )�POPODecKeyChallContentN)r r r r> r r r r r rm � s rm c @ sn e Zd ZdZe�e�de�� j e
� e
j e
j
d�d��e�de�� j e
� e
j e
j
d�d��e�de�� ��ZdS ) � OOBCertHashz�
OOBCertHash ::= SEQUENCE {
hashAlg [0] AlgorithmIdentifier OPTIONAL,
certId [1] CertId OPTIONAL,
hashVal BIT STRING
}
ZhashAlgr )r6 re r ZhashValN)r r r r r r! r$ r r@ r7 r r8 r9 r: r
rf r" r � BitStringr r r r r rn � s rn c @ s e Zd ZdZe�� ZdS )�NestedMessageContentz.
NestedMessageContent ::= PKIMessages
N)r r r r r r+ r r r r r rp � s rp c @ s4 e Zd ZdZe�e�de�� �e�de�� ��Z dS )�
DHBMParametera1
DHBMParameter ::= SEQUENCE {
owf AlgorithmIdentifier,
-- AlgId for a One-Way Function (SHA-1 recommended)
mac AlgorithmIdentifier
-- the MAC AlgId (e.g., DES-MAC, Triple-DES-MAC [PKCS11],
} -- or HMAC [RFC2104, RFC2202])
r? �macN)
r r r r r r! r" r r@ r r r r r rq � s rq z1.2.840.113533.7.66.30c
@ s` e Zd ZdZe�e�de�� j e
� dd�d��e�de �
� �e�de�� �e�de �
� ��Zd S )
� PBMParameterz�
PBMParameter ::= SEQUENCE {
salt OCTET STRING,
owf AlgorithmIdentifier,
iterationCount INTEGER,
mac AlgorithmIdentifier
}
Zsaltr � )r r? ZiterationCountrr N)r r r r r r! r" r rA r7 r r r r@ r# r r r r r rs � s rs z1.2.840.113533.7.66.13c @ s e Zd ZdS )�
PKIProtectionN)r r r r r r r ru � s ru rX )r6 c % @ s� e Zd ZdZe�e�de�� j e
� e
j e
j
d�d��e�de� j e
� e
j e
j
d�d��e�de�� j e
� e
j e
j
d�d��e�d e� j e
� e
j e
j
d
�d��e�d e�� j e
� e
j e
j
d �d��e�d
e� j e
� e
j e
j
d�d��e�de� j e
� e
j e
j
d�d��e�de�� j e
� e
j e
j
d�d��e�de� j e
� e
j e
j
d�d��e�de�� j e
� e
j e
j
d�d��e�de� j e
� e
j e
j
d�d��e�de� j e
� e
j e
j
d�d��e�de� j e
� e
j e
j
d �d��e�d e�� j e
� e
j e
j
d �d��e�d e� j e
� e
j e
j
d �d��e�d!e� j e
� e
j e
j
d"�d��e�d#e� j e
� e
j e
j
d$�d��e�d%e� j e
� e
j e
j
d&�d��e�d'e� j e
� e
j e
j
d(�d��e�d)e� j e
� e
j e
j
d*�d��e�d+e�e�d,e � j e
� e
j e
j
d-�d��e�d.e � j e
� e
j e
j
d/�d��e�d0e � j e
� e
j e
j
d1�d��e�d2e � j e
� e
j e
j
d3�d��e�d4e � j e
� e
j e
j
d5�d��e�d6e!� j e
� e
j e
j
d7�d���Z"d8S )9�PKIBodyag
PKIBody ::= CHOICE { -- message-specific body elements
ir [0] CertReqMessages, --Initialization Request
ip [1] CertRepMessage, --Initialization Response
cr [2] CertReqMessages, --Certification Request
cp [3] CertRepMessage, --Certification Response
p10cr [4] CertificationRequest, --imported from [PKCS10]
popdecc [5] POPODecKeyChallContent, --pop Challenge
popdecr [6] POPODecKeyRespContent, --pop Response
kur [7] CertReqMessages, --Key Update Request
kup [8] CertRepMessage, --Key Update Response
krr [9] CertReqMessages, --Key Recovery Request
krp [10] KeyRecRepContent, --Key Recovery Response
rr [11] RevReqContent, --Revocation Request
rp [12] RevRepContent, --Revocation Response
ccr [13] CertReqMessages, --Cross-Cert. Request
ccp [14] CertRepMessage, --Cross-Cert. Response
ckuann [15] CAKeyUpdAnnContent, --CA Key Update Ann.
cann [16] CertAnnContent, --Certificate Ann.
rann [17] RevAnnContent, --Revocation Ann.
crlann [18] CRLAnnContent, --CRL Announcement
pkiconf [19] PKIConfirmContent, --Confirmation
nested [20] NestedMessageContent, --Nested Message
genm [21] GenMsgContent, --General Message
genp [22] GenRepContent, --General Response
error [23] ErrorMsgContent, --Error Message
certConf [24] CertConfirmContent, --Certificate confirm
pollReq [25] PollReqContent, --Polling request
pollRep [26] PollRepContent --Polling response
Zirr )r6 Zipr ZcrrC ZcprD Zp10crrE ZpopdeccrF ZpopdecrrG ZkurrK ZkuprL ZkrrrM ZkrprN ZrrrO ZrprP ZccrrQ ZccprR ZckuannrS ZcannrT ZrannrU ZcrlannrV ZpkiconfrW �nestedZgenmrY �genrZ �errorr[ ZcertConfr\ ZpollReqr] ZpollRepr^ N)#r r r r r r! r" r
ZCertReqMessagesr7 r r8 r9 r: rk r ZCertificationRequestrm r= ri r4 rh r1 r rd r/ r. �nestedMessageContentr- r, ra rc r' r r r r r r rv � sn
rv c @ s� e Zd ZdZe�e�deje �
dd�d��e�de � � �e�de � � �e�
de�� je�ejejd �d
��e�
d e �� je�ejejd �d
��e�
d
e �� je�ejejd�d
��e�
de �� je�ejejd�d
��e�
de�� je�ejejd�d
��e�
de�� je�ejejd�d
��e�
de�� je�ejejd�d
��e�
de� je�ejejd�d
��e�
deje� je � d e �e�ejejd�d�d ��� Z d S ) � PKIHeadera�
PKIHeader ::= SEQUENCE {
pvno INTEGER { cmp1999(1), cmp2000(2) },
sender GeneralName,
recipient GeneralName,
messageTime [0] GeneralizedTime OPTIONAL,
protectionAlg [1] AlgorithmIdentifier OPTIONAL,
senderKID [2] KeyIdentifier OPTIONAL,
recipKID [3] KeyIdentifier OPTIONAL,
transactionID [4] OCTET STRING OPTIONAL,
senderNonce [5] OCTET STRING OPTIONAL,
recipNonce [6] OCTET STRING OPTIONAL,
freeText [7] PKIFreeText OPTIONAL,
generalInfo [8] SEQUENCE SIZE (1..MAX) OF
InfoTypeAndValue OPTIONAL
}
Zpvno)Zcmp1999r )Zcmp2000rC )rI ZsenderZ recipientZ messageTimer )r6 Z
protectionAlgr Z senderKIDrC ZrecipKIDrD Z
transactionIDrE Z senderNoncerF Z
recipNoncerG ZfreeTextrK Z generalInforL )r r6 )r N) r r r r r r! r" r r# r rH r Z GeneralNamer$ r rg r7 r r8 r9 �tagFormatSimpler@ r: r
rA r r r( r r r r r r r r r{ s s,
$$$$$$"
r{ c @ s0 e Zd ZdZe�e�de� �e�de� ��Z dS )�
ProtectedPartzg
ProtectedPart ::= SEQUENCE {
header PKIHeader,
body PKIBody
}
�headerr) N)
r r r r r r! r" r{ rv r r r r r r} � s r} c @ s� e Zd ZdZe�e�de� �e�de� �e� de
� j e �
e je jd�d��e� deje� d�j e�d e�e �
e je jd �d
���Zd S ) �
PKIMessagez�
PKIMessage ::= SEQUENCE {
header PKIHeader,
body PKIBody,
protection [0] PKIProtection OPTIONAL,
extraCerts [1] SEQUENCE SIZE (1..MAX) OF CMPCertificate
OPTIONAL
}r~ �bodyZ
protectionr )r6 Z
extraCerts)r r )r r6 N)r r r r r r! r" r{ rv r$ ru r7 r r8 r9 r| r r r r r r r: r r r r r r � s "
r c @ s* e Zd ZdZe� Zejje �
de � ZdS )� PKIMessagesz>
PKIMessages ::= SEQUENCE SIZE (1..MAX) OF PKIMessage
r N) r r r r r r r r r r r r r r r r r� � s r� N)GZ pyasn1.typer r r r r r r �pyasn1_modulesr r
r r rA r
Z Certificater r r r r r r' r& r( r, r- ZNullr. r/ r1 r2 r4 ZChoicer5 r< r= r> r# rB ro rJ r_ ra rb rc rd rh ri rj rk rm rn rp rq r* Z
id_DHBasedMacrs Zid_PasswordBasedMacru r7 r8 r9 r: rz rv r{ r} r r� r r r r r �<module> sb $
=!
0