o j<@sUddlmZddlZddlZddlZddlZddlZddlmZm Z ddl m Z ddl m ZddlmZmZGddde jZd d eDZejejejejejejejejejejejejiZd ed <ejee fZ!eje efZ"ej#d ej$dej%dej&dej'dejdej(dejdej)di Z*ded<dd e*+DZ,ejdejdej#diZ-d.dd Z.d/d!d"Z/ej0d#ej1e e2fe e2d$d%Z3Gd&d'd'ej4e3Z5Gd(d)d)Z6Gd*d+d+Z7Gd,d-d-Z8dS)0) annotationsN)IterableIterator)utils)x509)NameOIDObjectIdentifierc@s<eZdZdZdZdZdZdZdZdZ dZ d Z d Z d Z d Zd S) _ASN1Type N)__name__ __module__ __qualname__ BitString OctetString UTF8String NumericStringPrintableString T61String IA5StringUTCTimeGeneralizedTime VisibleStringUniversalString BMPStringr%r%/root/aizidognhua/tmp/workspace/projects/ec89d86c-575f-41c9-af57-ac45cbdbf775/venv/lib/python3.10/site-packages/cryptography/x509/name.pyr sr cCsi|]}|j|qSr%)value.0ir%r%r& "sr+z!dict[ObjectIdentifier, _ASN1Type]_NAMEOID_DEFAULT_TYPECNLSTOOUCSTREETDCUID _OidNameMap_NAMEOID_TO_NAMEcCsi|]\}}||qSr%r%)r)kvr%r%r&r+=s)r:)@val str | bytesreturnstrcCs|sdSt|trdt|dS|dd}|dd}|dd }|d d }|d d }|dd}|dd}|dd}|ddksU|ddkrYt|dkrYd|}|ddkrg|ddd}|S)z>Escape special characters in RFC4514 Distinguished Name value.#utf8\z\\"z\"+z\+,z\,;z\;z\>z\00r r;Nz\ ) isinstancebytesbinasciihexlifydecodereplacelen)r=r%r%r&_escape_dn_valueFs"         $ rUcCs|sdSdd}tj||S)NrAcSs8|d}t|dkr|ddSt|ddS)Nrr:r;rDrA)grouprTrP unhexlifyrSrR)mr=r%r%r&subks   z_unescape_dn_value..sub)_RFC4514NameParser_PAIR_MULTI_RErY)r=rYr%r%r&_unescape_dn_valuecs r\NameAttributeValueTypeT) covariantc@sveZdZ d$ddd%ddZed&ddZed'ddZed(ddZ d$d)ddZd*ddZ d+d d!Z d(d"d#Z dS), NameAttributeNT) _validateoidrr'r]_type_ASN1Type | Noner`boolr?Nonec Cs t|ts td|tjkr!|tjkrtdt|ts tdn t|ts*tdt |}|durg|\}}t|ts>Jt | d}||ksM||krgd|d|d|} |d ur`t | tj| d d |durrt |tj}t|ts{td ||_||_||_dS) Nz2oid argument must be an ObjectIdentifier instance.z6oid must be X500_UNIQUE_IDENTIFIER for BitString type.z!value must be bytes for BitStringzvalue argument must be a strrCzAttribute's length must be >= z and <= z , but it was Tr:) stacklevelz%_type must be from the _ASN1Type enum)rNr TypeErrorr rrX500_UNIQUE_IDENTIFIERrOr@_NAMEOID_LENGTH_LIMITgetrTencode ValueErrorwarningswarnr,r_oid_valuerb) selfrar'rbr` length_limits min_length max_lengthc_lenmsgr%r%r&__init__sH        zNameAttribute.__init__cC|jSN)rorqr%r%r&razNameAttribute.oidcCrxry)rprzr%r%r&r'r{zNameAttribute.valuer@cCst|j|jjS)zt The short attribute name (for example "CN") if available, otherwise the OID dotted string. )r7rjra dotted_stringrzr%r%r&rfc4514_attribute_namez$NameAttribute.rfc4514_attribute_nameattr_name_overrides_OidNameMap | NonecCs6|r||jnd}|dur|j}|dt|jS)z Format as RFC4514 Distinguished Name string. Use short attribute name if available, otherwise fall back to OID dotted string. N=)rjrar}rUr')rqr attr_namer%r%r&rfc4514_strings  zNameAttribute.rfc4514_stringotherobjectcCs&t|tstS|j|jko|j|jkSry)rNr_NotImplementedrar'rqrr%r%r&__eq__s zNameAttribute.__eq__intcCst|j|jfSry)hashrar'rzr%r%r&__hash__zNameAttribute.__hash__cCsd|jd|jdS)Nz)rar'rzr%r%r&__repr__szNameAttribute.__repr__ry) rarr'r]rbrcr`rdr?re)r?r)r?r]r?r@rrr?r@rrr?rdr?r) rrrrwpropertyrar'r}rrrrr%r%r%r&r_s 5     r_c@s`eZdZd ddZd!d d Z d"d#ddZd$ddZd%ddZd&ddZd%ddZ d'ddZ d S)(RelativeDistinguishedName attributes$Iterable[NameAttribute[str | bytes]]cCs\t|}|s tdtdd|Dstd||_t||_t|jt|kr,tddS)Nz-a relative distinguished name cannot be emptycs|]}t|tVqdSryrNr_r)xr%r%r& z5RelativeDistinguishedName.__init__..z/attributes must be an iterable of NameAttributez$duplicate attributes are not allowed)listrlallrg _attributes frozenset_attribute_setrTrqrr%r%r&rws z"RelativeDistinguishedName.__init__rarr? list[NameAttribute[str | bytes]]cfdd|DS)Ncg|] }|jkr|qSr%rar(rr%r& zDRelativeDistinguishedName.get_attributes_for_oid..r%rqrar%rr&get_attributes_for_oidz0RelativeDistinguishedName.get_attributes_for_oidNrrr@csdfdd|jDS)z Format as RFC4514 Distinguished Name string. Within each RDN, attributes are joined by '+', although that is rarely used in certificates. rFc3|]}|VqdSryrr)attrrr%r&r  z;RelativeDistinguishedName.rfc4514_string..)joinrrqrr%rr&rs z(RelativeDistinguishedName.rfc4514_stringrrrdcCt|tstS|j|jkSry)rNrrrrr%r%r&r  z RelativeDistinguishedName.__eq__rcC t|jSry)rrrzr%r%r&r  z"RelativeDistinguishedName.__hash__$Iterator[NameAttribute[str | bytes]]cCrry)iterrrzr%r%r&__iter__rz"RelativeDistinguishedName.__iter__cCrry)rTrrzr%r%r&__len__rz!RelativeDistinguishedName.__len__cCd|dS)Nzd*d+Zd?d-d.Zd>d/d0Zd@d1d2Zd S)ANamerrr?recCdSryr%rr%r%r&rwz Name.__init__#Iterable[RelativeDistinguishedName]cCrryr%rr%r%r&rw r@Iterable[NameAttribute[str | bytes] | RelativeDistinguishedName]cCs^t|}tdd|Drdd|D|_dStdd|Dr+ttt||_dStd)Ncsrryrrr%r%r&r,rz Name.__init__..cSsg|] }ttt|gqSr%)rtypingcastr_rr%r%r&r-sz!Name.__init__..csrry)rNrrr%r%r&r1rzNattributes must be a list of NameAttribute or a list RelativeDistinguishedName)rrrrrrrgrr%r%r&rw%s  Ndatar@r_NameOidMap | NonecCst||piSry)rZparse)clsrrr%r%r&from_rfc4514_string;r~zName.from_rfc4514_stringrOcCs t|S)zS Parse a DER encoded X.509 name (the inverse of ``public_bytes``). ) rust_x509parse_name_bytes)rrr%r%r& from_bytesCs zName.from_bytesrcsdfddt|jDS)a Format as RFC4514 Distinguished Name string. For example 'CN=foobar.com,O=Foo Corp,C=US' An X.509 name is a two-level structure: a list of sets of attributes. Each list element is separated by ',' and within each list element, set elements are separated by '+'. The latter is almost never used in real world certificates. According to RFC4514 section 2.1 the RDNSequence must be reversed when converting to string representation. rGc3rryrrrr%r&rWrz&Name.rfc4514_string..)rreversedrrr%rr&rJs zName.rfc4514_stringrarrcr)Ncrr%rr(rr%r&r`rz/Name.get_attributes_for_oid..r%rr%rr&r\rzName.get_attributes_for_oidlist[RelativeDistinguishedName]cCrxryrrzr%r%r&rdnsbr{z Name.rdnsbackend typing.AnycCs t|Sry)rencode_name_bytes)rqrr%r%r& public_bytesfrzName.public_bytesrrrdcCrry)rNrrrrr%r%r&rirz Name.__eq__rcCstt|jSry)rtuplerrzr%r%r&rosz Name.__hash__rccs|jD]}|EdHqdSryr)rqrdnr%r%r&rts  z Name.__iter__cCstdd|jDS)Ncss|]}t|VqdSry)rT)r)rr%r%r&ryszName.__len__..)sumrrzr%r%r&rxsz Name.__len__cCr)Nz]z [\da-zA-Z]{2}z\\(|)z(\\z)|((\\z)+)z7[\x01-\x1f\x21\x24-\x2A\x2D-\x3A\x3D\x3F-\x5B\x5D-\x7F]z3[\x01-\x21\x23-\x2A\x2D-\x3A\x3D\x3F-\x5B\x5D-\x7F]z7[\x01-\x1F\x21\x23-\x2A\x2D-\x3A\x3D\x3F-\x5B\x5D-\x7F]z[\x80-]z ( (z!) ( (z)* (z$) )? )? z#([\da-zA-Z]{2})+rr@r _NameOidMapr?recCs||_d|_||_dS)Nr)_data_idx_attr_name_overrides)rqrrr%r%r&rws z_RFC4514NameParser.__init__rdcCs|jt|jkSry)rrTrrzr%r%r& _has_datarz_RFC4514NameParser._has_data str | NonecCs|r |j|jSdSry)rrrrzr%r%r&_peeks z_RFC4514NameParser._peekchcCs"||krt|jd7_dS)Nr;)rrlr)rqrr%r%r& _read_chars z_RFC4514NameParser._read_charcCs<|j|j|jd}|durt|}|jt|7_|S)N)pos)matchrrrlrVrT)rqpatrr=r%r%r&_read_res z_RFC4514NameParser._read_rercCsN|stgS|g}|r!|d|||stt|S)a' Parses the `data` string and converts it to a Name. According to RFC4514 section 2.1 the RDNSequence must be reversed when converting to string representation. So, when we parse it, we need to reverse again to get the RDNs on the correct order. rG)rr _parse_rdnrappendr)rqrr%r%r&rs    z_RFC4514NameParser.parsercCsB|g}|dkr|d|||dks t|S)NrF) _parse_narrrr)rqnasr%r%r&rs    z_RFC4514NameParser._parse_rdnNameAttribute[str]c Csz||j}Wnty'||j}|j|t|}|dur%tYnwt|}|d| dkrI||j }t |dd }n ||j}t|}t||S)NrrBr;)r_OID_RErl _DESCR_RErrj_NAME_TO_NAMEOIDrrr _HEXSTRING_RErPrWrR _STRING_REr\r_)rq oid_valuenamerar' raw_valuer%r%r&rs&        z_RFC4514NameParser._parse_naN)rr@rrr?re)r?rd)r?r)rr@r?rer)r?r)r?r)r?r) rrrrecompilerr_ESCAPE_SPECIAL _ESCAPE_HEX_PAIRr[_LUTF1_SUTF1_TUTF1chrsys maxunicode_UTFMB _LEADCHAR _STRINGCHAR _TRAILCHARVERBOSErrrwrrrrrrrr%r%r%r&rZsN          rZ)r=r>r?r@)r=r@r?r@)9 __future__rrPrrrrmcollections.abcrr cryptographyr"cryptography.hazmat.bindings._rustrrcryptography.x509.oidrrEnumr _ASN1_TYPE_TO_ENUM COUNTRY_NAMErJURISDICTION_COUNTRY_NAME SERIAL_NUMBER DN_QUALIFIER EMAIL_ADDRESSrDOMAIN_COMPONENTr,__annotations__Mappingr@r6r COMMON_NAME LOCALITY_NAMESTATE_OR_PROVINCE_NAMEORGANIZATION_NAMEORGANIZATIONAL_UNIT_NAMESTREET_ADDRESSUSER_IDr7itemsrrirUr\TypeVarUnionrOr]Genericr_rrrZr%r%r%r&sb          d6e