o
    je                  	   @  s  d dl mZ d dlZd dlZd dlZd dlmZ d dlmZ d dl	m
Z d dlmZ d dlmZmZmZmZmZmZmZmZ d dlmZmZ d d	lmZmZmZ d d
lmZm Z  d dl!m"Z" edddZ#ej$ej%ej&ej'ej(ej)ej*ej+ej,f Z-G dd de.Z/d5ddZ0d6ddZ1d7d d!Z2G d"d# d#Z3G d$d% d%Z4G d&d' d'ej5Z6G d(d) d)e.Z7ej8Z8ej9Z9ej:Z:ej;Z;ej<Z<ej=Z=ej>Z>ej?Z?ej@Z@ejAZAejBZBG d*d+ d+ZCG d,d- d-ZDG d.d/ d/ZEG d0d1 d1ZFd8d3d4ZGdS )9    )annotationsN)Iterable)utils)x509)hashes)dsaeced448ed25519paddingrsax448x25519) CertificateIssuerPrivateKeyTypesCertificatePublicKeyTypes)	ExtensionExtensionType_make_sequence_methods)Name	_ASN1Type)ObjectIdentifieri     c                         e Zd Zd	 fddZ  ZS )
AttributeNotFoundmsgstroidr   returnNonec                      t  | || _d S N)super__init__r   )selfr   r   	__class__ \/var/www/html/fyndo/pharma/fyndo/venv/lib/python3.10/site-packages/cryptography/x509/base.pyr"   6      
zAttributeNotFound.__init__)r   r   r   r   r   r   __name__
__module____qualname__r"   __classcell__r&   r&   r$   r'   r   5       r   	extensionExtension[ExtensionType]
extensionslist[Extension[ExtensionType]]r   r   c                 C  s"   |D ]}|j | j krtdqd S )Nz$This extension has already been set.)r   
ValueError)r/   r1   er&   r&   r'   _reject_duplicate_extension;   s
   r5   r   r   
attributes0list[tuple[ObjectIdentifier, bytes, int | None]]c                 C  s$   |D ]\}}}|| krt dqd S )Nz$This attribute has already been set.)r3   )r   r6   attr_oid_r&   r&   r'   _reject_duplicate_attributeE   s
   r:   timedatetime.datetimec                 C  s6   | j dur|  }|r|nt }| jdd| S | S )zNormalizes a datetime to a naive datetime in UTC.

    time -- datetime to normalize. Assumed to be in UTC if not timezone
            aware.
    N)tzinfo)r=   	utcoffsetdatetime	timedeltareplace)r;   offsetr&   r&   r'   _convert_to_naive_utc_timeO   s
   
rC   c                   @  sX   e Zd Zejjfdd	d
ZedddZedddZdddZ	dddZ
dddZdS ) 	Attributer   r   valuebytes_typeintr   r   c                 C     || _ || _|| _d S r    )_oid_valuerG   )r#   r   rE   rG   r&   r&   r'   r"   ^      
zAttribute.__init__c                 C     | j S r    )rJ   r#   r&   r&   r'   r   h      zAttribute.oidc                 C  rM   r    )rK   rN   r&   r&   r'   rE   l   rO   zAttribute.valuer   c                 C  s   d| j  d| jdS )Nz<Attribute(oid=z, value=)>)r   rE   rN   r&   r&   r'   __repr__p      zAttribute.__repr__otherobjectboolc                 C  s2   t |tstS | j|jko| j|jko| j|jkS r    )
isinstancerD   NotImplementedr   rE   rG   )r#   rS   r&   r&   r'   __eq__s   s   


zAttribute.__eq__c                 C  s   t | j| j| jfS r    )hashr   rE   rG   rN   r&   r&   r'   __hash__}   s   zAttribute.__hash__N)r   r   rE   rF   rG   rH   r   r   )r   r   )r   rF   r   r   )rS   rT   r   rU   r   rH   )r*   r+   r,   r   
UTF8StringrE   r"   propertyr   rQ   rX   rZ   r&   r&   r&   r'   rD   ]   s    



rD   c                   @  s8   e Zd ZdddZed\ZZZdd	d
ZdddZ	dS )
Attributesr6   Iterable[Attribute]r   r   c                 C  s   t || _d S r    )list_attributes)r#   r6   r&   r&   r'   r"      s   zAttributes.__init__rb   r   c                 C  s   d| j  dS )Nz<Attributes(rP   )rb   rN   r&   r&   r'   rQ      s   zAttributes.__repr__r   r   rD   c                 C  s.   | D ]}|j |kr|  S qtd| d|)NzNo z attribute was found)r   r   )r#   r   attrr&   r&   r'   get_attribute_for_oid   s
   
z Attributes.get_attribute_for_oidN)r6   r`   r   r   r[   )r   r   r   rD   )
r*   r+   r,   r"   r   __len____iter____getitem__rQ   rd   r&   r&   r&   r'   r_      s
    

r_   c                   @  s   e Zd ZdZdZdS )Versionr      N)r*   r+   r,   v1v3r&   r&   r&   r'   rh      s    rh   c                      r   )
InvalidVersionr   r   parsed_versionrH   r   r   c                   r   r    )r!   r"   rm   )r#   r   rm   r$   r&   r'   r"      r(   zInvalidVersion.__init__)r   r   rm   rH   r   r   r)   r&   r&   r$   r'   rl      r.   rl   c                   @  sX   e Zd Zdg g fd,dd	Zd-ddZd.ddZddd/ddZ	d0dddd1d*d+ZdS )2 CertificateSigningRequestBuilderNsubject_nameName | Noner1   r2   r6   r7   c                 C  s   || _ || _|| _dS )zB
        Creates an empty X.509 certificate request (v1).
        N)_subject_name_extensionsrb   )r#   ro   r1   r6   r&   r&   r'   r"      s   	
z)CertificateSigningRequestBuilder.__init__namer   r   c                 C  s4   t |ts	td| jdurtdt|| j| jS )zF
        Sets the certificate requestor's distinguished name.
        Expecting x509.Name object.N&The subject name may only be set once.)rV   r   	TypeErrorrq   r3   rn   rr   rb   r#   rs   r&   r&   r'   ro      s   


z-CertificateSigningRequestBuilder.subject_nameextvalr   criticalrU   c                 C  sF   t |ts	tdt|j||}t|| j t| jg | j|| j	S )zE
        Adds an X.509 extension to the certificate request.
        "extension must be an ExtensionType)
rV   r   rv   r   r   r5   rr   rn   rq   rb   r#   rx   ry   r/   r&   r&   r'   add_extension   s   
z.CertificateSigningRequestBuilder.add_extension)_tagr   r   rE   rF   r}   _ASN1Type | Nonec                C  s~   t |ts	tdt |tstd|durt |tstdt|| j |dur-|j}nd}t| j	| j
g | j|||fS )zK
        Adds an X.509 attribute with an OID and associated value.
        zoid must be an ObjectIdentifierzvalue must be bytesNztag must be _ASN1Type)rV   r   rv   rF   r   r:   rb   rE   rn   rq   rr   )r#   r   rE   r}   tagr&   r&   r'   add_attribute   s   


z.CertificateSigningRequestBuilder.add_attributersa_paddingecdsa_deterministicprivate_keyr   	algorithm_AllowedHashTypes | Nonebackend
typing.Anyr   %padding.PSS | padding.PKCS1v15 | Noner   bool | NoneCertificateSigningRequestc                C  sv   | j du r	td|dur$t|tjtjfstdt|tjs$td|dur2t|t	j
s2tdt| ||||S )zF
        Signs the request using the requestor's private key.
        Nz/A CertificateSigningRequest must have a subjectPadding must be PSS or PKCS1v15&Padding is only supported for RSA keys1Deterministic ECDSA is only supported for EC keys)rq   r3   rV   r   PSSPKCS1v15rv   r   RSAPrivateKeyr   EllipticCurvePrivateKey	rust_x509create_x509_csrr#   r   r   r   r   r   r&   r&   r'   sign   s&   
z%CertificateSigningRequestBuilder.sign)ro   rp   r1   r2   r6   r7   )rs   r   r   rn   )rx   r   ry   rU   r   rn   )r   r   rE   rF   r}   r~   r   rn   r    )r   r   r   r   r   r   r   r   r   r   r   r   )r*   r+   r,   r"   ro   r|   r   r   r&   r&   r&   r'   rn      s    

$rn   c                   @  s   e Zd ZU ded< ddddddg fd;ddZd<ddZd<ddZd=ddZd>dd Zd?d#d$Z	d?d%d&Z
d@d+d,Z	dAddd-dBd9d:ZdS )CCertificateBuilderr2   rr   Nissuer_namerp   ro   
public_key CertificatePublicKeyTypes | Noneserial_number
int | Nonenot_valid_beforedatetime.datetime | Nonenot_valid_afterr1   r   r   c                 C  s6   t j| _|| _|| _|| _|| _|| _|| _|| _	d S r    )
rh   rk   _version_issuer_namerq   _public_key_serial_number_not_valid_before_not_valid_afterrr   )r#   r   ro   r   r   r   r   r1   r&   r&   r'   r"   '  s   

zCertificateBuilder.__init__rs   r   c                 C  sD   t |ts	td| jdurtdt|| j| j| j| j	| j
| jS )z3
        Sets the CA's distinguished name.
        rt   N%The issuer name may only be set once.)rV   r   rv   r   r3   r   rq   r   r   r   r   rr   rw   r&   r&   r'   r   :  s   

zCertificateBuilder.issuer_namec                 C  sD   t |ts	td| jdurtdt| j|| j| j| j	| j
| jS )z:
        Sets the requestor's distinguished name.
        rt   Nru   )rV   r   rv   rq   r3   r   r   r   r   r   r   rr   rw   r&   r&   r'   ro   L  s   

zCertificateBuilder.subject_namekeyr   c              	   C  s`   t |tjtjtjtjt	j
tjtjfstd| jdur tdt| j| j|| j| j| j| jS )zT
        Sets the requestor's public key (as found in the signing request).
        zExpecting one of DSAPublicKey, RSAPublicKey, EllipticCurvePublicKey, Ed25519PublicKey, Ed448PublicKey, X25519PublicKey, or X448PublicKey.Nz$The public key may only be set once.)rV   r   DSAPublicKeyr   RSAPublicKeyr   EllipticCurvePublicKeyr
   Ed25519PublicKeyr	   Ed448PublicKeyr   X25519PublicKeyr   X448PublicKeyrv   r   r3   r   r   rq   r   r   r   rr   )r#   r   r&   r&   r'   r   ^  s2   
zCertificateBuilder.public_keynumberrH   c                 C  sh   t |ts	td| jdurtd|dkrtd| dkr$tdt| j| j| j	|| j
| j| jS )z5
        Sets the certificate serial number.
        'Serial number must be of integral type.N'The serial number may only be set once.r   z%The serial number should be positive.   3The serial number should not be more than 159 bits.)rV   rH   rv   r   r3   
bit_lengthr   r   rq   r   r   r   rr   r#   r   r&   r&   r'   r     s&   

z CertificateBuilder.serial_numberr;   r<   c                 C  sz   t |tjs
td| jdurtdt|}|tk rtd| jdur-|| jkr-tdt| j	| j
| j| j|| j| jS )z7
        Sets the certificate activation time.
        Expecting datetime object.Nz*The not valid before may only be set once.z>The not valid before date must be on or after 1950 January 1).zBThe not valid before date must be before the not valid after date.)rV   r?   rv   r   r3   rC   _EARLIEST_UTC_TIMEr   r   r   rq   r   r   rr   r#   r;   r&   r&   r'   r     s,   
z#CertificateBuilder.not_valid_beforec                 C  sz   t |tjs
td| jdurtdt|}|tk rtd| jdur-|| jk r-tdt| j	| j
| j| j| j|| jS )z7
        Sets the certificate expiration time.
        r   Nz)The not valid after may only be set once.z<The not valid after date must be on or after 1950 January 1.zAThe not valid after date must be after the not valid before date.)rV   r?   rv   r   r3   rC   r   r   r   r   rq   r   r   rr   r   r&   r&   r'   r     s.   


z"CertificateBuilder.not_valid_afterrx   r   ry   rU   c              	   C  sV   t |ts	tdt|j||}t|| j t| j| j	| j
| j| j| jg | j|S )z=
        Adds an X.509 extension to the certificate.
        rz   )rV   r   rv   r   r   r5   rr   r   r   rq   r   r   r   r   r{   r&   r&   r'   r|     s   
z CertificateBuilder.add_extensionr   r   r   r   r   r   r   r   r   r   r   Certificatec                C  s   | j du r	td| jdu rtd| jdu rtd| jdu r$td| jdu r-td| jdu r6td|durQt|tj	tj
fsGtdt|tjsQtd	|dur_t|tjs_td
t| ||||S )zC
        Signs the certificate using the CA's private key.
        Nz&A certificate must have a subject namez&A certificate must have an issuer namez'A certificate must have a serial numberz/A certificate must have a not valid before timez.A certificate must have a not valid after timez$A certificate must have a public keyr   r   r   )rq   r3   r   r   r   r   r   rV   r   r   r   rv   r   r   r   r   r   create_x509_certificater   r&   r&   r'   r     s:   





zCertificateBuilder.sign)r   rp   ro   rp   r   r   r   r   r   r   r   r   r1   r2   r   r   )rs   r   r   r   )r   r   r   r   )r   rH   r   r   )r;   r<   r   r   )rx   r   ry   rU   r   r   r    )r   r   r   r   r   r   r   r   r   r   r   r   )r*   r+   r,   __annotations__r"   r   ro   r   r   r   r   r|   r   r&   r&   r&   r'   r   $  s,   
 



%


r   c                   @  s|   e Zd ZU ded< ded< dddg g fd0ddZd1ddZd2ddZd3ddZd4ddZd5d d!Z		d6ddd"d7d.d/Z
dS )8 CertificateRevocationListBuilderr2   rr   list[RevokedCertificate]_revoked_certificatesNr   rp   last_updater   next_updater1   revoked_certificatesc                 C  s"   || _ || _|| _|| _|| _d S r    )r   _last_update_next_updaterr   r   )r#   r   r   r   r1   r   r&   r&   r'   r"   '  s
   
z)CertificateRevocationListBuilder.__init__r   r   c                 C  s<   t |ts	td| jd urtdt|| j| j| j| j	S )Nrt   r   )
rV   r   rv   r   r3   r   r   r   rr   r   )r#   r   r&   r&   r'   r   5  s   

z,CertificateRevocationListBuilder.issuer_namer<   c                 C  sr   t |tjs
td| jd urtdt|}|tk rtd| jd ur-|| jkr-tdt| j	|| j| j
| jS )Nr   !Last update may only be set once.8The last update date must be on or after 1950 January 1.z9The last update date must be before the next update date.)rV   r?   rv   r   r3   rC   r   r   r   r   rr   r   )r#   r   r&   r&   r'   r   D  s(   
z,CertificateRevocationListBuilder.last_updatec                 C  sr   t |tjs
td| jd urtdt|}|tk rtd| jd ur-|| jk r-tdt| j	| j|| j
| jS )Nr   r   r   z8The next update date must be after the last update date.)rV   r?   rv   r   r3   rC   r   r   r   r   rr   r   )r#   r   r&   r&   r'   r   \  s(   
z,CertificateRevocationListBuilder.next_updaterx   r   ry   rU   c                 C  sN   t |ts	tdt|j||}t|| j t| j| j	| j
g | j|| jS )zM
        Adds an X.509 extension to the certificate revocation list.
        rz   )rV   r   rv   r   r   r5   rr   r   r   r   r   r   r{   r&   r&   r'   r|   t  s   
z.CertificateRevocationListBuilder.add_extensionrevoked_certificateRevokedCertificatec                 C  s4   t |ts	tdt| j| j| j| jg | j|S )z8
        Adds a revoked certificate to the CRL.
        z)Must be an instance of RevokedCertificate)	rV   r   rv   r   r   r   r   rr   r   )r#   r   r&   r&   r'   add_revoked_certificate  s   
z8CertificateRevocationListBuilder.add_revoked_certificater   r   r   r   r   r   r   r   r   r   r   CertificateRevocationListc                C  s   | j d u r	td| jd u rtd| jd u rtd|d ur6t|tjtjfs,tdt|t	j
s6td|d urDt|tjsDtdt| ||||S )NzA CRL must have an issuer namez"A CRL must have a last update timez"A CRL must have a next update timer   r   r   )r   r3   r   r   rV   r   r   r   rv   r   r   r   r   r   create_x509_crlr   r&   r&   r'   r     s.   
	

z%CertificateRevocationListBuilder.sign)
r   rp   r   r   r   r   r1   r2   r   r   )r   r   r   r   )r   r<   r   r   )r   r<   r   r   )rx   r   ry   rU   r   r   )r   r   r   r   r    )r   r   r   r   r   r   r   r   r   r   r   r   )r*   r+   r,   r   r"   r   r   r   r|   r   r   r&   r&   r&   r'   r   #  s&   
 




r   c                   @  sH   e Zd Zddg fddd	ZdddZd ddZd!ddZd"d#ddZdS )$RevokedCertificateBuilderNr   r   revocation_dater   r1   r2   c                 C  rI   r    )r   _revocation_daterr   )r#   r   r   r1   r&   r&   r'   r"     rL   z"RevokedCertificateBuilder.__init__r   rH   r   c                 C  sX   t |ts	td| jd urtd|dkrtd| dkr$tdt|| j| jS )Nr   r   r   z$The serial number should be positiver   r   )	rV   rH   rv   r   r3   r   r   r   rr   r   r&   r&   r'   r     s   


z'RevokedCertificateBuilder.serial_numberr;   r<   c                 C  sN   t |tjs
td| jd urtdt|}|tk rtdt| j|| j	S )Nr   z)The revocation date may only be set once.z7The revocation date must be on or after 1950 January 1.)
rV   r?   rv   r   r3   rC   r   r   r   rr   r   r&   r&   r'   r     s   

z)RevokedCertificateBuilder.revocation_daterx   r   ry   rU   c                 C  sF   t |ts	tdt|j||}t|| j t| j| j	g | j|S )Nrz   )
rV   r   rv   r   r   r5   rr   r   r   r   r{   r&   r&   r'   r|     s   
z'RevokedCertificateBuilder.add_extensionr   r   r   c                 C  s.   | j d u r	td| jd u rtdt| S )Nz/A revoked certificate must have a serial numberz1A revoked certificate must have a revocation date)r   r3   r   r   create_revoked_certificate)r#   r   r&   r&   r'   build  s   


zRevokedCertificateBuilder.build)r   r   r   r   r1   r2   )r   rH   r   r   )r;   r<   r   r   )rx   r   ry   rU   r   r   r    )r   r   r   r   )r*   r+   r,   r"   r   r   r|   r   r&   r&   r&   r'   r     s    



r   rH   c                   C  s   t tddd? S )N   bigr   )rH   
from_bytesosurandomr&   r&   r&   r'   random_serial_number  rR   r   )r/   r0   r1   r2   r   r   )r   r   r6   r7   r   r   )r;   r<   r   r<   r\   )H
__future__r   r?   r   typingcollections.abcr   cryptographyr   "cryptography.hazmat.bindings._rustr   r   cryptography.hazmat.primitivesr   )cryptography.hazmat.primitives.asymmetricr   r   r	   r
   r   r   r   r   /cryptography.hazmat.primitives.asymmetric.typesr   r   cryptography.x509.extensionsr   r   r   cryptography.x509.namer   r   cryptography.x509.oidr   r   UnionSHA224SHA256SHA384SHA512SHA3_224SHA3_256SHA3_384SHA3_512_AllowedHashTypes	Exceptionr   r5   r:   rC   rD   r_   Enumrh   rl   r   r   r   r   load_pem_x509_certificateload_der_x509_certificateload_pem_x509_certificatesload_pem_x509_csrload_der_x509_csrload_pem_x509_crlload_der_x509_crlrn   r   r   r   r   r&   r&   r&   r'   <module>   sh   (





$p   E