| | |
| | |
| | |
| |
|
| | from __future__ import annotations |
| |
|
| | from cryptography.x509 import certificate_transparency, verification |
| | from cryptography.x509.base import ( |
| | Attribute, |
| | AttributeNotFound, |
| | Attributes, |
| | Certificate, |
| | CertificateBuilder, |
| | CertificateRevocationList, |
| | CertificateRevocationListBuilder, |
| | CertificateSigningRequest, |
| | CertificateSigningRequestBuilder, |
| | InvalidVersion, |
| | RevokedCertificate, |
| | RevokedCertificateBuilder, |
| | Version, |
| | load_der_x509_certificate, |
| | load_der_x509_crl, |
| | load_der_x509_csr, |
| | load_pem_x509_certificate, |
| | load_pem_x509_certificates, |
| | load_pem_x509_crl, |
| | load_pem_x509_csr, |
| | random_serial_number, |
| | ) |
| | from cryptography.x509.extensions import ( |
| | AccessDescription, |
| | Admission, |
| | Admissions, |
| | AuthorityInformationAccess, |
| | AuthorityKeyIdentifier, |
| | BasicConstraints, |
| | CertificateIssuer, |
| | CertificatePolicies, |
| | CRLDistributionPoints, |
| | CRLNumber, |
| | CRLReason, |
| | DeltaCRLIndicator, |
| | DistributionPoint, |
| | DuplicateExtension, |
| | ExtendedKeyUsage, |
| | Extension, |
| | ExtensionNotFound, |
| | Extensions, |
| | ExtensionType, |
| | FreshestCRL, |
| | GeneralNames, |
| | InhibitAnyPolicy, |
| | InvalidityDate, |
| | IssuerAlternativeName, |
| | IssuingDistributionPoint, |
| | KeyUsage, |
| | MSCertificateTemplate, |
| | NameConstraints, |
| | NamingAuthority, |
| | NoticeReference, |
| | OCSPAcceptableResponses, |
| | OCSPNoCheck, |
| | OCSPNonce, |
| | PolicyConstraints, |
| | PolicyInformation, |
| | PrecertificateSignedCertificateTimestamps, |
| | PrecertPoison, |
| | PrivateKeyUsagePeriod, |
| | ProfessionInfo, |
| | ReasonFlags, |
| | SignedCertificateTimestamps, |
| | SubjectAlternativeName, |
| | SubjectInformationAccess, |
| | SubjectKeyIdentifier, |
| | TLSFeature, |
| | TLSFeatureType, |
| | UnrecognizedExtension, |
| | UserNotice, |
| | ) |
| | from cryptography.x509.general_name import ( |
| | DirectoryName, |
| | DNSName, |
| | GeneralName, |
| | IPAddress, |
| | OtherName, |
| | RegisteredID, |
| | RFC822Name, |
| | UniformResourceIdentifier, |
| | UnsupportedGeneralNameType, |
| | ) |
| | from cryptography.x509.name import ( |
| | Name, |
| | NameAttribute, |
| | RelativeDistinguishedName, |
| | ) |
| | from cryptography.x509.oid import ( |
| | AuthorityInformationAccessOID, |
| | CertificatePoliciesOID, |
| | CRLEntryExtensionOID, |
| | ExtendedKeyUsageOID, |
| | ExtensionOID, |
| | NameOID, |
| | ObjectIdentifier, |
| | PublicKeyAlgorithmOID, |
| | SignatureAlgorithmOID, |
| | ) |
| |
|
| | OID_AUTHORITY_INFORMATION_ACCESS = ExtensionOID.AUTHORITY_INFORMATION_ACCESS |
| | OID_AUTHORITY_KEY_IDENTIFIER = ExtensionOID.AUTHORITY_KEY_IDENTIFIER |
| | OID_BASIC_CONSTRAINTS = ExtensionOID.BASIC_CONSTRAINTS |
| | OID_CERTIFICATE_POLICIES = ExtensionOID.CERTIFICATE_POLICIES |
| | OID_CRL_DISTRIBUTION_POINTS = ExtensionOID.CRL_DISTRIBUTION_POINTS |
| | OID_EXTENDED_KEY_USAGE = ExtensionOID.EXTENDED_KEY_USAGE |
| | OID_FRESHEST_CRL = ExtensionOID.FRESHEST_CRL |
| | OID_INHIBIT_ANY_POLICY = ExtensionOID.INHIBIT_ANY_POLICY |
| | OID_ISSUER_ALTERNATIVE_NAME = ExtensionOID.ISSUER_ALTERNATIVE_NAME |
| | OID_KEY_USAGE = ExtensionOID.KEY_USAGE |
| | OID_PRIVATE_KEY_USAGE_PERIOD = ExtensionOID.PRIVATE_KEY_USAGE_PERIOD |
| | OID_NAME_CONSTRAINTS = ExtensionOID.NAME_CONSTRAINTS |
| | OID_OCSP_NO_CHECK = ExtensionOID.OCSP_NO_CHECK |
| | OID_POLICY_CONSTRAINTS = ExtensionOID.POLICY_CONSTRAINTS |
| | OID_POLICY_MAPPINGS = ExtensionOID.POLICY_MAPPINGS |
| | OID_SUBJECT_ALTERNATIVE_NAME = ExtensionOID.SUBJECT_ALTERNATIVE_NAME |
| | OID_SUBJECT_DIRECTORY_ATTRIBUTES = ExtensionOID.SUBJECT_DIRECTORY_ATTRIBUTES |
| | OID_SUBJECT_INFORMATION_ACCESS = ExtensionOID.SUBJECT_INFORMATION_ACCESS |
| | OID_SUBJECT_KEY_IDENTIFIER = ExtensionOID.SUBJECT_KEY_IDENTIFIER |
| |
|
| | OID_DSA_WITH_SHA1 = SignatureAlgorithmOID.DSA_WITH_SHA1 |
| | OID_DSA_WITH_SHA224 = SignatureAlgorithmOID.DSA_WITH_SHA224 |
| | OID_DSA_WITH_SHA256 = SignatureAlgorithmOID.DSA_WITH_SHA256 |
| | OID_ECDSA_WITH_SHA1 = SignatureAlgorithmOID.ECDSA_WITH_SHA1 |
| | OID_ECDSA_WITH_SHA224 = SignatureAlgorithmOID.ECDSA_WITH_SHA224 |
| | OID_ECDSA_WITH_SHA256 = SignatureAlgorithmOID.ECDSA_WITH_SHA256 |
| | OID_ECDSA_WITH_SHA384 = SignatureAlgorithmOID.ECDSA_WITH_SHA384 |
| | OID_ECDSA_WITH_SHA512 = SignatureAlgorithmOID.ECDSA_WITH_SHA512 |
| | OID_RSA_WITH_MD5 = SignatureAlgorithmOID.RSA_WITH_MD5 |
| | OID_RSA_WITH_SHA1 = SignatureAlgorithmOID.RSA_WITH_SHA1 |
| | OID_RSA_WITH_SHA224 = SignatureAlgorithmOID.RSA_WITH_SHA224 |
| | OID_RSA_WITH_SHA256 = SignatureAlgorithmOID.RSA_WITH_SHA256 |
| | OID_RSA_WITH_SHA384 = SignatureAlgorithmOID.RSA_WITH_SHA384 |
| | OID_RSA_WITH_SHA512 = SignatureAlgorithmOID.RSA_WITH_SHA512 |
| | OID_RSASSA_PSS = SignatureAlgorithmOID.RSASSA_PSS |
| |
|
| | OID_COMMON_NAME = NameOID.COMMON_NAME |
| | OID_COUNTRY_NAME = NameOID.COUNTRY_NAME |
| | OID_DOMAIN_COMPONENT = NameOID.DOMAIN_COMPONENT |
| | OID_DN_QUALIFIER = NameOID.DN_QUALIFIER |
| | OID_EMAIL_ADDRESS = NameOID.EMAIL_ADDRESS |
| | OID_GENERATION_QUALIFIER = NameOID.GENERATION_QUALIFIER |
| | OID_GIVEN_NAME = NameOID.GIVEN_NAME |
| | OID_LOCALITY_NAME = NameOID.LOCALITY_NAME |
| | OID_ORGANIZATIONAL_UNIT_NAME = NameOID.ORGANIZATIONAL_UNIT_NAME |
| | OID_ORGANIZATION_NAME = NameOID.ORGANIZATION_NAME |
| | OID_PSEUDONYM = NameOID.PSEUDONYM |
| | OID_SERIAL_NUMBER = NameOID.SERIAL_NUMBER |
| | OID_STATE_OR_PROVINCE_NAME = NameOID.STATE_OR_PROVINCE_NAME |
| | OID_SURNAME = NameOID.SURNAME |
| | OID_TITLE = NameOID.TITLE |
| |
|
| | OID_CLIENT_AUTH = ExtendedKeyUsageOID.CLIENT_AUTH |
| | OID_CODE_SIGNING = ExtendedKeyUsageOID.CODE_SIGNING |
| | OID_EMAIL_PROTECTION = ExtendedKeyUsageOID.EMAIL_PROTECTION |
| | OID_OCSP_SIGNING = ExtendedKeyUsageOID.OCSP_SIGNING |
| | OID_SERVER_AUTH = ExtendedKeyUsageOID.SERVER_AUTH |
| | OID_TIME_STAMPING = ExtendedKeyUsageOID.TIME_STAMPING |
| |
|
| | OID_ANY_POLICY = CertificatePoliciesOID.ANY_POLICY |
| | OID_CPS_QUALIFIER = CertificatePoliciesOID.CPS_QUALIFIER |
| | OID_CPS_USER_NOTICE = CertificatePoliciesOID.CPS_USER_NOTICE |
| |
|
| | OID_CERTIFICATE_ISSUER = CRLEntryExtensionOID.CERTIFICATE_ISSUER |
| | OID_CRL_REASON = CRLEntryExtensionOID.CRL_REASON |
| | OID_INVALIDITY_DATE = CRLEntryExtensionOID.INVALIDITY_DATE |
| |
|
| | OID_CA_ISSUERS = AuthorityInformationAccessOID.CA_ISSUERS |
| | OID_OCSP = AuthorityInformationAccessOID.OCSP |
| |
|
| | __all__ = [ |
| | "OID_CA_ISSUERS", |
| | "OID_OCSP", |
| | "AccessDescription", |
| | "Admission", |
| | "Admissions", |
| | "Attribute", |
| | "AttributeNotFound", |
| | "Attributes", |
| | "AuthorityInformationAccess", |
| | "AuthorityKeyIdentifier", |
| | "BasicConstraints", |
| | "CRLDistributionPoints", |
| | "CRLNumber", |
| | "CRLReason", |
| | "Certificate", |
| | "CertificateBuilder", |
| | "CertificateIssuer", |
| | "CertificatePolicies", |
| | "CertificateRevocationList", |
| | "CertificateRevocationListBuilder", |
| | "CertificateSigningRequest", |
| | "CertificateSigningRequestBuilder", |
| | "DNSName", |
| | "DeltaCRLIndicator", |
| | "DirectoryName", |
| | "DistributionPoint", |
| | "DuplicateExtension", |
| | "ExtendedKeyUsage", |
| | "Extension", |
| | "ExtensionNotFound", |
| | "ExtensionType", |
| | "Extensions", |
| | "FreshestCRL", |
| | "GeneralName", |
| | "GeneralNames", |
| | "IPAddress", |
| | "InhibitAnyPolicy", |
| | "InvalidVersion", |
| | "InvalidityDate", |
| | "IssuerAlternativeName", |
| | "IssuingDistributionPoint", |
| | "KeyUsage", |
| | "MSCertificateTemplate", |
| | "Name", |
| | "NameAttribute", |
| | "NameConstraints", |
| | "NameOID", |
| | "NamingAuthority", |
| | "NoticeReference", |
| | "OCSPAcceptableResponses", |
| | "OCSPNoCheck", |
| | "OCSPNonce", |
| | "ObjectIdentifier", |
| | "OtherName", |
| | "PolicyConstraints", |
| | "PolicyInformation", |
| | "PrecertPoison", |
| | "PrecertificateSignedCertificateTimestamps", |
| | "PrivateKeyUsagePeriod", |
| | "ProfessionInfo", |
| | "PublicKeyAlgorithmOID", |
| | "RFC822Name", |
| | "ReasonFlags", |
| | "RegisteredID", |
| | "RelativeDistinguishedName", |
| | "RevokedCertificate", |
| | "RevokedCertificateBuilder", |
| | "SignatureAlgorithmOID", |
| | "SignedCertificateTimestamps", |
| | "SubjectAlternativeName", |
| | "SubjectInformationAccess", |
| | "SubjectKeyIdentifier", |
| | "TLSFeature", |
| | "TLSFeatureType", |
| | "UniformResourceIdentifier", |
| | "UnrecognizedExtension", |
| | "UnsupportedGeneralNameType", |
| | "UserNotice", |
| | "Version", |
| | "certificate_transparency", |
| | "load_der_x509_certificate", |
| | "load_der_x509_crl", |
| | "load_der_x509_csr", |
| | "load_pem_x509_certificate", |
| | "load_pem_x509_certificates", |
| | "load_pem_x509_crl", |
| | "load_pem_x509_csr", |
| | "random_serial_number", |
| | "verification", |
| | "verification", |
| | ] |
| |
|