o ˷ex7@sUddlZddlZddlZddlZddlZddlmZddlmZ ddl m Z m Z Gdddej ZddeDZe jeje jeje jeje jeje jeje jejiZeje efed <eje efZe jd e jd e j d e j!d e j"de jde j#de jde j$di Z%eed<dde%&DZ'dej(ee)fdefddZ*dedefddZ+GdddZ,GdddZ-Gdd d Z.Gd!d"d"Z/dS)#N)utils)x509)NameOIDObjectIdentifierc@s<eZdZdZdZdZdZdZdZdZ dZ d Z d Z d Z d Zd S) _ASN1Type N)__name__ __module__ __qualname__ BitString OctetString UTF8String NumericStringPrintableString T61String IA5StringUTCTimeGeneralizedTime VisibleStringUniversalString BMPStringr"r"M/var/www/ideatree/venv/lib/python3.10/site-packages/cryptography/x509/name.pyrsrcCsi|]}|j|qSr")value.0ir"r"r# !sr(_NAMEOID_DEFAULT_TYPECNLSTOOUCSTREETDCUID_NAMEOID_TO_NAMEcCsi|]\}}||qSr"r")r&kvr"r"r#r(;svalreturncCs|sdSt|trdt|dS|dd}|dd}|dd }|d d }|d d }|dd}|dd}|dd}|ddvrMd|}|ddkr[|ddd}|S)z>Escape special characters in RFC4514 Distinguished Name value.#utf8\z\\"z\"+z\+,z\,;z\;z\>z\00r)r9 rCNz\ ) isinstancebytesbinasciihexlifydecodereplace)r6r"r"r#_escape_dn_value>s"           rKcCs|sdSdd}tj||S)Nr8cSs(|d}t|dkr |Stt|dS)N)grouplenchrint)mr6r"r"r#subcs  z_unescape_dn_value..sub)_RFC4514NameParser_PAIR_RErS)r6rSr"r"r#_unescape_dn_value[srVc @seZdZ ddddedejeefdeje de ddf d d Z e defd d Z e dejeeffd dZe defddZ ddejedefddZdede fddZdefddZdefddZdS) NameAttributeNT) _validateoidr$_typerXr7cCst|ts td|tjkr!|tjkrtdt|ts tdn t|ts*td|tj ks4|tj kr\t|ts;Jt | d}|dkrN|durNt d|dkr\tjd |dd |durgt|tj}t|tsptd ||_||_||_dS) Nz2oid argument must be an ObjectIdentifier instance.z6oid must be X500_UNIQUE_IDENTIFIER for BitString type.z!value must be bytes for BitStringzvalue argument must be a strr:Tz/Country name must be a 2 character country codezUCountry names should be two characters, but the attribute is {} characters in length.) stacklevelz%_type must be from the _ASN1Type enum)rEr TypeErrorrrrX500_UNIQUE_IDENTIFIERrFstr COUNTRY_NAMEJURISDICTION_COUNTRY_NAMErOencode ValueErrorwarningswarnformatr)getr_oid_valuerZ)selfrYr$rZrXc_lenr"r"r#__init__osF          zNameAttribute.__init__cC|jSN)rhrjr"r"r#rYzNameAttribute.oidcCrmrn)riror"r"r#r$rpzNameAttribute.valuecCst|j|jjS)zt The short attribute name (for example "CN") if available, otherwise the OID dotted string. )r3rgrY dotted_stringror"r"r#rfc4514_attribute_namesz$NameAttribute.rfc4514_attribute_nameattr_name_overridescCs6|r||jnd}|dur|j}|dt|jS)z Format as RFC4514 Distinguished Name string. Use short attribute name if available, otherwise fall back to OID dotted string. N=)rgrYrrrKr$)rjrs attr_namer"r"r#rfc4514_strings  zNameAttribute.rfc4514_stringothercCs&t|tstS|j|jko|j|jkSrn)rErWNotImplementedrYr$rjrwr"r"r#__eq__s zNameAttribute.__eq__cCst|j|jfSrn)hashrYr$ror"r"r#__hash__zNameAttribute.__hash__cCs d|S)Nz/)rfror"r"r#__repr__ zNameAttribute.__repr__rn)rrrrtypingUnionr_rFOptionalrboolrlpropertyrYr$rr _OidNameMaprvobjectrzrQr|r~r"r"r"r#rWns<  8 rWc@seZdZdejefddZdedejefddZ dd ej e de fd d Z d edefd dZdefddZdejefddZdefddZde fddZdS)RelativeDistinguishedName attributescCs\t|}|s tdtdd|Dstd||_t||_t|jt|kr,tddS)Nz-a relative distinguished name cannot be emptycs|]}t|tVqdSrnrErWr&xr"r"r# z5RelativeDistinguishedName.__init__..z/attributes must be an iterable of NameAttributez$duplicate attributes are not allowed)listrcallr] _attributes frozenset_attribute_setrOrjrr"r"r#rls z"RelativeDistinguishedName.__init__rYr7cfdd|DS)Ncg|] }|jkr|qSr"rYr%rr"r# zDRelativeDistinguishedName.get_attributes_for_oid..r"rjrYr"rr#get_attributes_for_oidz0RelativeDistinguishedName.get_attributes_for_oidNrscsdfdd|jDS)z Format as RFC4514 Distinguished Name string. Within each RDN, attributes are joined by '+', although that is rarely used in certificates. r=c3|]}|VqdSrnrvr&attrrsr"r#r  z;RelativeDistinguishedName.rfc4514_string..)joinrrjrsr"rr#rvs z(RelativeDistinguishedName.rfc4514_stringrwcCt|tstS|j|jkSrn)rErrxrryr"r"r#rz  z RelativeDistinguishedName.__eq__cC t|jSrn)r{rror"r"r#r|rz"RelativeDistinguishedName.__hash__cCrrn)iterrror"r"r#__iter__rz"RelativeDistinguishedName.__iter__cCrrn)rOrror"r"r#__len__rz!RelativeDistinguishedName.__len__cCsd|S)Nz)rfrvror"r"r#r~sz"RelativeDistinguishedName.__repr__rn)rrrrIterablerWrlrListrrrr_rvrrrzrQr|Iteratorrrr~r"r"r"r#rs$  rc@s2eZdZejdejeddfddZejdejeddfddZdejej eefddfddZe de ddfd d Z d!d ej ede fd d ZdedejefddZedejefddZd!dejdefddZdedefddZdefddZdejefddZdefddZde fdd Z dS)"Namerr7NcCdSrnr"rr"r"r#rl sz Name.__init__cCrrnr"rr"r"r#rlscCs`t|}tdd|Drdd|D|_dStdd|Dr,ttjt||_dStd)Ncsrrnrrr"r"r#rrz Name.__init__..cSsg|] }ttt|gqSr")rrcastrWrr"r"r#rsz!Name.__init__..csrrn)rErrr"r"r#r!rzNattributes must be a list of NameAttribute or a list RelativeDistinguishedName)rrrrrrrr]rr"r"r#rls   datacCs t|Srn)rTparse)clsrr"r"r#from_rfc4514_string+s zName.from_rfc4514_stringrscsdfddt|jDS)a Format as RFC4514 Distinguished Name string. For example 'CN=foobar.com,O=Foo Corp,C=US' An X.509 name is a two-level structure: a list of sets of attributes. Each list element is separated by ',' and within each list element, set elements are separated by '+'. The latter is almost never used in real world certificates. According to RFC4514 section 2.1 the RDNSequence must be reversed when converting to string representation. r>c3rrnrrrr"r#r<rz&Name.rfc4514_string..)rreversedrrr"rr#rv/s zName.rfc4514_stringrYcr)Ncrr"rr%rr"r#rDrz/Name.get_attributes_for_oid..r"rr"rr#rArzName.get_attributes_for_oidcCrmrnrror"r"r#rdnsFrpz Name.rdnsbackendcCs t|Srn) rust_x509encode_name_bytes)rjrr"r"r# public_bytesJrzName.public_bytesrwcCrrn)rErrxrryr"r"r#rzMrz Name.__eq__cCstt|jSrn)r{tuplerror"r"r#r|Ssz Name.__hash__ccs"|jD] }|D]}|VqqdSrnr)rjrdnavar"r"r#rXs  z Name.__iter__cCstdd|jDS)Ncss|]}t|VqdSrn)rO)r&rr"r"r#r^zName.__len__..)sumrror"r"r#r]sz Name.__len__cCs ddd|jD}d|S)Nr>css|]}|VqdSrnrrr"r"r#rarz Name.__repr__..z )rrrfrjrr"r"r#r~`s z Name.__repr__rn)!rrrroverloadrrWrlrr classmethodr_rrrrvrrrrrAnyrFrrrrzrQr|rrrr~r"r"r"r#r sJ     rc@s2eZdZedZedZdZeeZdZ dZ dZ de e jdZe d eZe d eZe d eZed ed ed ed ed ed ed ejZedZdeddfddZdefddZdejefddZdeddfddZdefddZdefddZ de!fdd Z"de#fd!d"Z$dS)#rTz!(0|([1-9]\d*))(\.(0|([1-9]\d*)))+z[a-zA-Z][a-zA-Z\d-]*z!\\([\\ #=\"\+,;<>]|[\da-zA-Z]{2})z7[\x01-\x1f\x21\x24-\x2A\x2D-\x3A\x3D\x3F-\x5B\x5D-\x7F]z3[\x01-\x21\x23-\x2A\x2D-\x3A\x3D\x3F-\x5B\x5D-\x7F]z7[\x01-\x1F\x21\x23-\x2A\x2D-\x3A\x3D\x3F-\x5B\x5D-\x7F]z[\x80-]|z ( (z!) ( (z)* (z$) )? )? z#([\da-zA-Z]{2})+rr7NcCs||_d|_dS)Nr)_data_idx)rjrr"r"r#rls z_RFC4514NameParser.__init__cCs|jt|jkSrn)rrOrror"r"r# _has_datar}z_RFC4514NameParser._has_datacCs|r |j|jSdSrn)rrrror"r"r#_peeks z_RFC4514NameParser._peekchcCs"||krt|jd7_dS)NrL)rrcr)rjrr"r"r# _read_chars z_RFC4514NameParser._read_charcCs<|j|j|jd}|durt|}|jt|7_|S)N)pos)matchrrrcrNrO)rjpatrr6r"r"r#_read_res z_RFC4514NameParser._read_recCs:|g}|r|d|||s t|S)Nr>) _parse_rdnrrappendrrr"r"r#rs  z_RFC4514NameParser.parsecCsB|g}|dkr|d|||dks t|S)Nr=) _parse_narrrr)rjnasr"r"r#rs    z_RFC4514NameParser._parse_rdncCsz||j}Wnty"||j}t|}|dur tYnwt|}|d|dkrD||j }t |dd }n ||j }t|}t||S)Nrtr9rL)r_OID_RErc _DESCR_RE_NAME_TO_NAMEOIDrgrrr _HEXSTRING_RErG unhexlifyrI _STRING_RErVrW)rj oid_valuenamerYr$ raw_valuer"r"r#rs"        z_RFC4514NameParser._parse_na)%rrrrecompilerr_PAIRrU_LUTF1_SUTF1_TUTF1rPsys maxunicode_UTFMB _LEADCHAR _STRINGCHAR _TRAILCHARVERBOSErrr_rlrrrrrrrrrrrrWrr"r"r"r#rTesJ      rT)0rGrrrrd cryptographyr"cryptography.hazmat.bindings._rustrrcryptography.x509.oidrrEnumr_ASN1_TYPE_TO_ENUMr`rra SERIAL_NUMBER DN_QUALIFIER EMAIL_ADDRESSrDOMAIN_COMPONENTr)Dict__annotations__Mappingr_r COMMON_NAME LOCALITY_NAMESTATE_OR_PROVINCE_NAMEORGANIZATION_NAMEORGANIZATIONAL_UNIT_NAMESTREET_ADDRESSUSER_IDr3itemsrrrFrKrVrWrrrTr"r"r"r#sF      g5[