o V hi @sddlmZddlZddlZddlZddlZddlZddlmZddl m Z ddl m Z ddlmZmZmZmZmZmZmZmZddlmZmZddlmZmZmZmZdd lm Z m!Z!dd l"m#Z#ed d d Z$ej%e j&e j'e j(e j)e j*e j+e j,e j-fZ.Gd dde/Z0d9ddZ1d:ddZ2d;dd Z3Gd!d"d"Z4Gd#d$d$Z5Gd%d&d&ej6Z7Gd'd(d(e/Z8e j9Z9Gd)d*d*ej:d+Z;e;Z>e j?Z?e j@Z@e jAZAe jBZBe jCZCe jDZDe jEZEe jFZFGd.d/d/ZGGd0d1d1ZHGd2d3d3ZIGd4d5d5ZJd utcoffsetdatetime timedeltareplace)r;offsetr&r&r'_convert_to_naive_utc_timeQs rDc@sXeZdZejjfdd d Zedd d Zedd dZdddZ dddZ dddZ dS) Attributerrvaluebytes_typeintrrcC||_||_||_dSr )_oid_valuerH)r#rrFrHr&r&r'r"` zAttribute.__init__cC|jSr )rKr#r&r&r'rjz Attribute.oidcCrNr )rLrOr&r&r'rFnrPzAttribute.valuercCsd|jd|jdS)Nz)rrFrOr&r&r'__repr__rzAttribute.__repr__otherobjectboolcCs2t|tstS|j|jko|j|jko|j|jkSr ) isinstancerENotImplementedrrFrH)r#rTr&r&r'__eq__us    zAttribute.__eq__cCst|j|j|jfSr )hashrrFrHrOr&r&r'__hash__szAttribute.__hash__N)rrrFrGrHrIrr)rr)rrGrr)rTrUrrVrrI) r*r+r,r UTF8StringrFr"propertyrrRrYr[r&r&r&r'rE_s      rEc@s8eZdZdddZed\ZZZdd d ZdddZ dS) Attributesr6typing.Iterable[Attribute]rrcCst||_dSr )list _attributes)r#r6r&r&r'r"szAttributes.__init__rcrcCsd|jdS)Nz d+d,Z d?dd-d@d7d8Z dS)ACertificateBuilderr2r~N issuer_namerr public_key CertificatePublicKeyTypes | Nonerq int | Nonenot_valid_beforedatetime.datetime | Nonenot_valid_afterr1rrcCs6tj|_||_||_||_||_||_||_||_ dSr ) rirl_version _issuer_namer _public_keyr|_not_valid_before_not_valid_afterr~)r#rrrrqrrr1r&r&r'r"bs  zCertificateBuilder.__init__rrcCsDt|ts td|jdurtdt||j|j|j|j |j |j S)z3 Sets the CA's distinguished name. rN%The issuer name may only be set once.) rWrrrr3rrrr|rrr~rr&r&r'rus  zCertificateBuilder.issuer_namecCsDt|ts td|jdurtdt|j||j|j|j |j |j S)z: Sets the requestor's distinguished name. rNr) rWrrrr3rrrr|rrr~rr&r&r'rs  zCertificateBuilder.subject_namekeyrc Cs`t|tjtjtjtjt j t j t jfstd|jdur tdt|j|j||j|j|j|jS)zT Sets the requestor's public key (as found in the signing request). zExpecting one of DSAPublicKey, RSAPublicKey, EllipticCurvePublicKey, Ed25519PublicKey, Ed448PublicKey, X25519PublicKey, or X448PublicKey.Nz$The public key may only be set once.)rWr DSAPublicKeyr RSAPublicKeyrEllipticCurvePublicKeyr Ed25519PublicKeyrEd448PublicKeyr X25519PublicKeyr X448PublicKeyrrr3rrrr|rrr~)r#rr&r&r'rs2  zCertificateBuilder.public_keynumberrIcCsht|ts td|jdurtd|dkrtd|dkr$tdt|j|j|j ||j |j |j S)z5 Sets the certificate serial number. 'Serial number must be of integral type.N'The serial number may only be set once.rz%The serial number should be positive.3The serial number should not be more than 159 bits.) rWrIrr|r3 bit_lengthrrrrrrr~r#rr&r&r'rqs&   z CertificateBuilder.serial_numberr;r<cCszt|tjs td|jdurtdt|}|tkrtd|jdur-||jkr-tdt|j |j |j |j ||j|j S)z7 Sets the certificate activation time. Expecting datetime object.Nz*The not valid before may only be set once.z>The not valid before date must be on or after 1950 January 1).zBThe not valid before date must be before the not valid after date.)rWr@rrr3rD_EARLIEST_UTC_TIMErrrrrr|r~r#r;r&r&r'rs,  z#CertificateBuilder.not_valid_beforecCszt|tjs td|jdurtdt|}|tkrtd|jdur-||jkr-tdt|j |j |j |j |j||j S)z7 Sets the certificate expiration time. rNz)The not valid after may only be set once.zsl    (    $ "evI