o j@sddlmZmZmZmZddlZddlZddlZddlm Z ddl m Z m Z m Z mZmZmZmZmZmZmZddlmZmZmZmZddlmZd d gZd d Zdd d ZddZdS))unicode_literalsdivisionabsolute_importprint_functionN) Certificate) array_from_pointerbuffer_from_bytesbytes_from_buffercastderefis_nullnewnullstruct_from_bufferunwrap)crypt32 Crypt32Const get_error handle_error)str_clsextract_from_system system_pathcCsdS)Nrrr/root/aizidognhua/tmp/workspace/projects/ec89d86c-575f-41c9-af57-ac45cbdbf775/venv/lib/python3.10/site-packages/oscrypto/_win/trust_list.pyrsFc! Cs.i}i}tj}dD]}tt|}t|t} t||}t|r)n]t|}d} d} d} |j t j kr:qt |j t|j} t| } | |vrOqd|| <t|j} t| j} ztj| }||krt|rr|t| dWqWn ttfyYnwt| j}ztj|}||kr|r|t| dWqWn0ttfy}z"|dkr|jddt|}|f|jd d|_|WYd}~nd}~wwt}t}ttd d}t |t j!t|}t"\}}|s|t j#krt||t j#krd} nJt$t%|}t |t j!t&td ||}t|t'td |}t|}|j(dkr0|r/|t| d qt)td|j*|j(}|D] }|+|,dq;d}| sit| }|j-ri|j-D]}|j.}||vrg|+|qX|r~|s~|duryt| }||d| ||f|| <qt/|d} t| d}q |0S)a Extracts trusted CA certificates from the Windows certificate store :param cert_callback: A callback that is called once for each certificate in the trust store. It should accept two parameters: an asn1crypto.x509.Certificate object, and a reason. The reason will be None if the certificate is being exported, otherwise it will be a unicode string of the reason it won't. :param callback_only_on_failure: A boolean - if the callback should only be called when a certificate is not exported. :raises: OSError - when an error is returned by the OS crypto library :return: A list of 3-element tuples: - 0: a byte string of a DER-encoded certificate - 1: a set of unicode strings that are OIDs of purposes to trust the certificate for - 2: a set of unicode strings that are OIDs of purposes to reject the certificate for )ROOTCATFNz not yet validzno longer validrz - rzDWORD *zCERT_ENHKEY_USAGE *CERT_ENHKEY_USAGEzexplicitly distrustedLPCSTRascii)1datetimeutcnowrCertOpenSystemStoreWrrCertEnumCertificatesInStorer rdwCertEncodingTyperX509_ASN_ENCODINGr pbCertEncodedint cbCertEncodedhashlibsha1digest pCertInfo_convert_filetime_to_timestamp NotBefore fromtimestamprload ValueErrorOSErrorNotAfterargsrsetrCertGetEnhancedKeyUsage%CERT_FIND_PROP_ONLY_ENHKEY_USAGE_FLAGrCRYPT_E_NOT_FOUNDr r r rcUsageIdentifierrrgpszUsageIdentifieradddecodeextended_key_usage_valuedottedCertCloseStorevalues)! cert_callbackcallback_only_on_failure certificates processednowstore store_handlecontext_pointercontext trust_alldatar, cert_infonot_before_seconds not_beforenot_after_seconds not_afteremessage trust_oids reject_oidsto_readres error_code_ usage_bufferkey_usage_pointer key_usageoidsoidcertcert_oidresultrrrr#s                           ~cCs.tdtd|j|jd}|d}|dS)a Windows returns times as 64-bit unsigned longs that are the number of hundreds of nanoseconds since Jan 1 1601. This converts it to a datetime object. :param filetime: A FILETIME struct object :return: An integer unix timestamp s>Qs>LLril!l )structunpackpackdwHighDateTime dwLowDateTime)filetimehundreds_nano_secondsseconds_since_1601rrrr.s r.)NF) __future__rrrrr!r*rb_asn1r_ffirr r r r r rrrr_crypt32rrrr_typesr__all__rrr.rrrrs 0   *