File: //lib64/python3.6/site-packages/M2Crypto/__pycache__/X509.cpython-36.pyc
3
���[�� � @ s� d dl mZ d dlZd dlZd dlmZmZmZmZm Z m
Z
e rPd dl m Z m
Z
d ZdZeje�ZG dd� de�Zeje� ejZdd � Zd4d
d �ZG d d
� d
e�ZG dd� de�Z G dd� de�Z G dd� de�Z G dd� de�Z efdd�Z efdd�Z!efdd�Z"d d � Z#G d d � d e�Z$G d d!� d!e�Z%G d"d#� d#e�Z&d$d%� Z'G d&d'� d'e�Z(efd(d)�Z)efd*d+�Z*efd,d-�Z+d.d/� Z,G d0d1� d1e�Z-d2d3� Z.dS )5� )�absolute_importN)�ASN1�BIO�EVP�m2�py27plus�six)�AnyStr�Optional� c @ s e Zd ZdS )� X509ErrorN)�__name__�
__module__� __qualname__� r r � /usr/lib64/python3.6/X509.pyr s r c C s | S )Nr )�ok�ctxr r r �x509_store_default_cb! s r c C sf | dkr |j d�dk r td��tj� }tjd|| |�}|dkrNtd| |f ��t||�}|j|� |S )z-
Create new X509_Extension instance.
ZsubjectKeyIdentifierz0123456789abcdefABCDEF:� z value must be precomputed hashNz:Cannot create X509_Extension with name '%s' and value '%s')�strip�
ValueErrorr Zx509v3_set_nconfZx509v3_ext_confr �X509_Extension� set_critical)�name�value�critical�_pyfreer � x509_ext_ptr�x509_extr r r �
new_extension& s
r c @ sT e Zd ZdZejZddd�Zdd� Zdd � Z dd
d �Z
d d
� Z dd� Z ddd�Z
dS )r z
X509 Extension
Nr c C s || _ || _d S )N)r r )�selfr r r r r �__init__@ s zX509_Extension.__init__c C s" t | dd�r | jr | j| j� d S )Nr r )�getattrr �m2_x509_extension_free)r! r r r �__del__E s zX509_Extension.__del__c C s | j S )N)r )r! r r r �_ptrJ s zX509_Extension._ptrc C s t j| j|�S )a]
Mark this extension critical or noncritical. By default an
extension is not critical.
:param critical: Nonzero sets this extension as critical.
Calling this method without arguments will
set this extension to critical.
:return: 1 for success, 0 for failure
)r Zx509_extension_set_criticalr )r! r r r r r N s zX509_Extension.set_criticalc C s t j| j�S )z�
Return whether or not this is a critical extension.
:return: Nonzero if this is a critical extension.
)r Zx509_extension_get_criticalr )r! r r r � get_critical[ s zX509_Extension.get_criticalc C s t jtj| j��S )zG
Get the extension name, for example 'subjectAltName'.
)r � ensure_textr �x509_extension_get_namer )r! r r r �get_named s zX509_Extension.get_namer c C s, t j� }tj|j� | j||� tj|j� �S )z�
Get the extension value, for example 'DNS:www.example.com'.
:param flag: Flag to control what and how to print.
:param indent: How many spaces to print before actual value.
) r � MemoryBufferr Zx509_ext_print�bio_ptrr r r( �read_all)r! �flag�indent�bufr r r � get_valuek s zX509_Extension.get_value)Nr )r )r r )r
r r �__doc__r Zx509_extension_freer$ r" r% r& r r' r* r1 r r r r r 9 s
r c @ sX e Zd ZdZejZddd�Zdd� Zdd � Z d
d � Z
d d
� Z dd� Z dd� Z
dd� ZdS )�X509_Extension_Stacka�
X509 Extension Stack
:warning: Do not modify the underlying OpenSSL stack
except through this interface, or use any OpenSSL
functions that do so indirectly. Doing so will get the
OpenSSL stack and the internal pystack of this class out
of sync, leading to python memory leaks, exceptions or
even python crashes!
Nr c C sl |d k rR|| _ || _tj| j �}xFt|�D ]"}| jjttj| j |�|d�� q*W ntj � | _ d| _g | _d S )N)r r )
�stackr r �sk_x509_extension_num�range�pystack�appendr Zsk_x509_extension_valueZsk_x509_extension_new_null)r! r4 r �num�ir r r r" � s
z X509_Extension_Stack.__init__c C s t | dd�r| j| j� d S )Nr r )r# �m2_sk_x509_extension_freer4 )r! r r r r% � s z X509_Extension_Stack.__del__c C s$ t j| j�t| j�kst�t| j�S )N)r r5 r4 �lenr7 �AssertionError)r! r r r �__len__� s z X509_Extension_Stack.__len__c C s
| j | S )N)r7 )r! �idxr r r � __getitem__� s z X509_Extension_Stack.__getitem__c C s
t | j�S )N)�iterr7 )r! r r r �__iter__� s z X509_Extension_Stack.__iter__c C s | j S )N)r4 )r! r r r r& � s zX509_Extension_Stack._ptrc C s4 | j j|� tj| j|j� �}|t| j �ks0t�|S )z�
Push X509_Extension object onto the stack.
:param x509_ext: X509_Extension object to be pushed onto the stack.
:return: The number of extensions on the stack.
)r7 r8 r Zsk_x509_extension_pushr4 r& r< r= )r! r �retr r r �push� s zX509_Extension_Stack.pushc C s4 t j| j�}|dkr*t| j�dks&t�dS | jj� S )zc
Pop X509_Extension object from the stack.
:return: X509_Extension popped
Nr )r Zsk_x509_extension_popr4 r< r7 r= �pop)r! r r r r rE � s
zX509_Extension_Stack.pop)Nr )r
r r r2 r Zsk_x509_extension_freer; r" r% r> r@ rB r& rD rE r r r r r3 x s
r3 c @ s^ e Zd ZdZejZddd�Zdd� Zdd� Z d d
� Z
e j fd d �Z
d
d� Zdd� Zdd� ZdS )�X509_Name_Entryz
X509 Name Entry
r c C s || _ || _dS )zw
:param x509_name_entry: this should be OpenSSL X509_NAME_ENTRY binary
:param _pyfree:
N)�x509_name_entryr )r! rG r r r r r" � s zX509_Name_Entry.__init__c C s t | dd�r| j| j� d S )Nr r )r# �m2_x509_name_entry_freerG )r! r r r r% � s zX509_Name_Entry.__del__c C s | j S )N)rG )r! r r r r& � s zX509_Name_Entry._ptrc C s t j| j|j� �S )zu
Sets the field name to asn1obj
:param asn1obj:
:return: 0 on failure, 1 on success
)r Zx509_name_entry_set_objectrG r& )r! Zasn1objr r r �
set_object� s zX509_Name_Entry.set_objectc C s t j| j||�S )z�
Sets the field name to asn1obj
:param data: data in a binary form to be set
:return: 0 on failure, 1 on success
)r Zx509_name_entry_set_datarG )r! �data�typer r r �set_data� s zX509_Name_Entry.set_datac C s t jtj| j��S )N)r Z ASN1_Objectr Zx509_name_entry_get_objectrG )r! r r r �
get_object� s zX509_Name_Entry.get_objectc C s t jtj| j��S )N)r Z ASN1_Stringr Zx509_name_entry_get_datarG )r! r r r �get_data� s zX509_Name_Entry.get_datac C s t j| jj� ||||�S )N)r Z x509_name_entry_create_by_txtrG r& )r! �fieldrK �entryr< r r r �
create_by_txt� s z X509_Name_Entry.create_by_txtN)r )r
r r r2 r Zx509_name_entry_freerH r" r% r& rI r Z MBSTRING_ASCrL rM rN rQ r r r r rF � s
rF c @ s� e Zd ZdZejejejejejejejejej ej ej
ej
ej ej ej ej
ej
ejejd�ZejZd#dd�Zdd� Zd d
� Zd d � Zd
d� Zdd� Zdd� Zdd� Zdd� Zdd� Zdd� Z dd � Z dej fd d �Z d d � Z d!d"� Z!dS )$� X509_Namez
X509 Name
)�CZSPZSTZstateOrProvinceName�LZ localityName�OZorganizationNameZOUZorganizationUnitNameZCNZ
commonNameZEmailZ emailAddressZ serialNumberZSNZsurnameZGNZ givenNameNr c C s< |dk r(t j|�std��|| _|| _nt j� | _d| _dS )zc
:param x509_name: this should be OpenSSL X509_NAME binary
:param _pyfree:
Nz'x509_name' type errorr )r �x509_name_type_checkr= � x509_namer Z
x509_name_new)r! rW r r r r r" s
zX509_Name.__init__c C s t | dd�r| j| j� d S )Nr r )r# �m2_x509_name_freerW )r! r r r r% - s zX509_Name.__del__c C s t j| j�std��t j| j�S )Nz'x509_name' type error)r rV rW r= Zx509_name_oneline)r! r r r �__str__2 s zX509_Name.__str__c C sZ || j kr8tj| j�s td��tjtj| j| j | ��S || jkrL| j| S t | |��d S )Nz'x509_name' type error)
�nidr rV rW r= r r( Zx509_name_by_nid�__dict__�AttributeError)r! �attrr r r � __getattr__8 s
zX509_Name.__getattr__c C sH || j kr:tj| j�s td��tj| j| j | tj|��S || j|< dS )zC
:return: 1 for success of 0 if an error occurred.
z'x509_name' type errorN) rZ r rV rW r= Zx509_name_set_by_nidr �
ensure_binaryr[ )r! r] r r r r � __setattr__D s
zX509_Name.__setattr__c C s t j| j�S )N)r �x509_name_entry_countrW )r! r r r r> Q s zX509_Name.__len__c C s6 d| ko| j � k n s$td��ttj| j|��S )Nr zindex out of range)� entry_count�
IndexErrorrF r Zx509_name_get_entryrW )r! r? r r r r@ U s zX509_Name.__getitem__c c s$ x t | j� �D ]}| | V qW d S )N)r6 rb )r! r: r r r rB [ s zX509_Name.__iter__c C s t j| j�std��| jS )Nz'x509_name' type error)r rV rW r= )r! r r r r& _ s zX509_Name._ptrc C s$ t j| jtj|�|tj|�|||�S )a�
Add X509_Name field whose name is identified by its name.
:param field: name of the entry
:param type: use MBSTRING_ASC or MBSTRING_UTF8
(or standard ASN1 type like V_ASN1_IA5STRING)
:param entry: value
:param len: buf_len of the entry
(-1 and the length is computed automagically)
The ``loc`` and ``set`` parameters determine where a new entry
should be added.
For almost all applications loc can be set to -1 and set to 0.
This adds a new entry to the end of name as a single valued
RelativeDistinguishedName (RDN).
:param loc: determines the index where the new entry is
inserted: if it is -1 it is appended.
:param set: determines how the new type is added. If it is zero
a new RDN is created.
If set is -1 or 1 it is added to the previous or next RDN
structure respectively. This will then be a multivalued
RDN: since multivalues RDNs are very seldom used set is
almost always set to zero.
:return: 1 for success of 0 if an error occurred.
)r Zx509_name_add_entry_by_txtrW r Z
ensure_str)r! rO rK rP r< �loc�setr r r �add_entry_by_txtd s
zX509_Name.add_entry_by_txtc C s t j| j�S )N)r ra rW )r! r r r rb � s zX509_Name.entry_countc C s: g }d}x,t j| j||�}|dkr$P |j| | � q
W |S )z�
Retrieve the next index matching nid.
:param nid: name of the entry (as m2.NID* constants)
:return: list of X509_Name_Entry items
r ���rg )r Zx509_name_get_index_by_nidrW r8 )r! rZ rC Zlastposr r r �get_entries_by_nid� s
z X509_Name.get_entries_by_nidc C s@ t j| j�std��tj� }t j|j� | j||� tj |j
� �S )z�
as_text returns the name as a string.
:param indent: Each line in multiline format is indented
by this many spaces.
:param flags: Flags that control how the output should be formatted.
z'x509_name' type error) r rV rW r= r r+ Zx509_name_print_exr, r r( r- )r! r/ �flagsr0 r r r �as_text� s
zX509_Name.as_textc C s t j| j�std��t j| j�S )Nz'x509_name' type error)r rV rW r= Zx509_name_get_der)r! r r r �as_der� s zX509_Name.as_derc C s t j| j�std��t j| j�S )Nz'x509_name' type error)r rV rW r= Zx509_name_hash)r! r r r �as_hash� s zX509_Name.as_hash)Nr )"r
r r r2 r ZNID_countryNameZNID_stateOrProvinceNameZNID_localityNameZNID_organizationNameZNID_organizationalUnitNameZNID_commonNameZNID_pkcs9_emailAddressZNID_serialNumberZ NID_surnameZ
NID_givenNamerZ Zx509_name_freerX r" r% rY r^ r` r> r@ rB r& rf rb rh ZXN_FLAG_COMPATrj rk rl r r r r rR sH
!rR c @ s( e Zd ZdZejZdGdd�Zdd� Zdd � Z d
d � Z
d d
� Z dd� Z dd� Z
efdd�Zdd� Zdd� Zdd� Zdd� Zd d � Zd d � Zd d!� Zd"d#� Zd$d%� Zd&d'� Zd(d)� Zd*d+� Zd,d-� Z d.d/� Z d0d1� Z d2d3� Z d4d5� Z d6d7� Z!d8d9� Z"d:d;� Z#d<d=� Z$dHd>d?�Z%d@dA� Z&dBdC� Z'dIdEdF�Z(dS )J�X509z
X.509 Certificate
Nr c C s< |dk r(t j|�std��|| _|| _nt j� | _d| _dS )z�
:param x509: binary representation of
the underlying OpenSSL X509 object.
:param _pyfree:
Nz'x509' type errorr )r �x509_type_checkr= �x509r Zx509_new)r! ro r r r r r" � s
z
X509.__init__c C s t | dd�r| j| j� d S )Nr r )r# � m2_x509_freero )r! r r r r% � s z X509.__del__c C s t j| j�std��| jS )Nz'x509' type error)r rn ro r= )r! r r r r& � s z X509._ptrc C s< t j| j�std��tj� }t j|j� | j� tj |j
� �S )Nz'x509' type error) r rn ro r= r r+ Z
x509_printr, r r( r- )r! r0 r r r rj � s z X509.as_textc C s t j| j�std��t j| j�S )Nz'x509' type error)r rn ro r= Zi2d_x509)r! r r r rk � s z X509.as_derc C s" t j� }tj|j� | j� |j� S )N)r r+ r �x509_write_pemr, ro r- )r! r0 r r r �as_pem� s z X509.as_pemc
C s* t j|d��}tj|j� | j�S Q R X dS )zp
:param filename: name of the file to be loaded
:return: 1 for success or 0 for failure
�wbN)r �openfiler rq r, ro )r! �filename�bior r r �save_pem� s z
X509.save_pemc
C sX t j|d��B}|tkr(tj|j� | j�S |tkrBtj|j� | j�S t d��W dQ R X dS )a�
Saves X.509 certificate to a file. Default output
format is PEM.
:param filename: Name of the file the cert will be saved to.
:param format: Controls what output format is used to save the cert.
Either FORMAT_PEM or FORMAT_DER to save in PEM or
DER format. Raises a ValueError if an unknow
format is used.
:return: 1 for success or 0 for failure
rs z9Unknown filetype. Must be either FORMAT_PEM or FORMAT_DERN)
r rt �
FORMAT_PEMr rq r, ro �
FORMAT_DERZ i2d_x509_bior )r! ru �formatrv r r r �save� s z X509.savec C s" t j| j�std��t j| j|�S )z�
Set version of the certificate.
:param version: Version number.
:return: Returns 0 on failure.
z'x509' type error)r rn ro r= Zx509_set_version)r! �versionr r r � set_version s zX509.set_versionc C s& t j| j�std��t j| j|j� �S )z5
:return: 1 on success, 0 on failure
z'x509' type error)r rn ro r= Zx509_set_not_beforer& )r! � asn1_timer r r �set_not_before s zX509.set_not_beforec C s& t j| j�std��t j| j|j� �S )z5
:return: 1 on success, 0 on failure
z'x509' type error)r rn ro r= Zx509_set_not_afterr& )r! r~ r r r �
set_not_after! s zX509.set_not_afterc C s$ t j| j�std��t j| j|j�S )z5
:return: 1 on success, 0 on failure
z'x509' type error)r rn ro r= �x509_set_subject_namerW )r! r r r r �set_subject_name) s zX509.set_subject_namec C s$ t j| j�std��t j| j|j�S )z5
:return: 1 on success, 0 on failure
z'x509' type error)r rn ro r= �x509_set_issuer_namerW )r! r r r r �set_issuer_name1 s zX509.set_issuer_namec C s t j| j�std��t j| j�S )Nz'x509' type error)r rn ro r= Zx509_get_version)r! r r r � get_version9 s zX509.get_versionc C s* t j| j�std��t j| j�}t j|�S )Nz'x509' type error)r rn ro r= �x509_get_serial_numberZasn1_integer_get)r! � asn1_integerr r r �get_serial_number> s zX509.get_serial_numberc C s, t j| j�std��t j| j�}t j||�S )z~
Set serial number.
:param serial: Serial number.
:return 1 for success and 0 for failure.
z'x509' type error)r rn ro r= r� Zasn1_integer_set)r! �serialr� r r r �set_serial_numberD s zX509.set_serial_numberc C s& t j| j�std��tjt j| j��S )Nz'x509' type error)r rn ro r= r � ASN1_TIMEZx509_get_not_before)r! r r r �get_not_beforeW s zX509.get_not_beforec C s> t j| j�std��tjt j| j��}dt|�kr:td��|S )Nz'x509' type errorzBad time valuezyM2Crypto cannot handle dates after year 2050.
See RFC 5280 4.1.2.5 for more information.
) r rn ro r= r r� Zx509_get_not_after�strr )r! �outr r r �
get_not_after\ s zX509.get_not_afterc C s* t j| j�std��tjt j| j�dd�S )Nz'x509' type errorr )r )r rn ro r= r �PKeyZx509_get_pubkey)r! r r r �
get_pubkeyg s zX509.get_pubkeyc C s$ t j| j�std��t j| j|j�S )z�
Set the public key for the certificate
:param pkey: Public key
:return 1 for success and 0 for failure
z'x509' type error)r rn ro r= Zx509_set_pubkey�pkey)r! r� r r r �
set_pubkeyl s zX509.set_pubkeyc C s$ t j| j�std��tt j| j��S )Nz'x509' type error)r rn ro r= rR Zx509_get_issuer_name)r! r r r �
get_issuerx s zX509.get_issuerc C s$ t j| j�std��t j| j|j�S )z
Set issuer name.
:param name: subjectName field.
:return 1 for success and 0 for failure
z'x509' type error)r rn ro r= r� rW )r! r r r r �
set_issuer} s zX509.set_issuerc C s$ t j| j�std��tt j| j��S )Nz'x509' type error)r rn ro r= rR Zx509_get_subject_name)r! r r r � get_subject� s zX509.get_subjectc C s$ t j| j�std��t j| j|j�S )z�
Set subject name.
:param name: subjectName field.
:return 1 for success and 0 for failure
z'x509' type error)r rn ro r= r� rW )r! r r r r � set_subject� s zX509.set_subjectc C s& t j| j�std��t j| j|jd�S )z�
Add X509 extension to this certificate.
:param ext: Extension
:return 1 for success and 0 for failure
z'x509' type errorr rg )r rn ro r= Z x509_add_extr )r! Zextr r r �add_ext� s z X509.add_extc C s^ t j}t j}| j}tj|�}x8tt j|��D ]&}|||�}||�|kr,t|dd�S q,W t �dS )z�
Get X509 extension by name.
:param name: Name of the extension
:return: X509_Extension
r )r N)
r � x509_get_extr) ro r r_ r6 �x509_get_ext_countr � LookupError)r! r Zm2x509_get_extZm2x509_extension_get_namero r: Zext_ptrr r r �get_ext� s
z X509.get_extc C s. |dk s|| j � krt�ttj| j|�dd�S )z�
Get X509 extension by index.
:param index: Name of the extension
:return: X509_Extension
r )r )�
get_ext_countrc r r r� ro )r! �indexr r r �
get_ext_at� s zX509.get_ext_atc C s t j| j�S )z+
Get X509 extension count.
)r r� ro )r! r r r r� � s zX509.get_ext_countc C sF t j| j�std��tt |d�}|dkr2td|��t j| j|j|� �S )z�
Sign the certificate.
:param pkey: Public key
:param md: Message digest algorithm to use for signing,
for example 'sha1'.
:return int
z'x509' type errorNzunknown message digest)r rn ro r= r# r Z x509_signr� )r! r� �md�mdar r r �sign� s
z X509.signc C s@ t j| j�std��|r(t j| j|j�S t j| j| j� j�S d S )Nz'x509' type error)r rn ro r= Z x509_verifyr� r� )r! r� r r r �verify� s z X509.verifyc C s t j| j�S )z�
Check if the certificate is a Certificate Authority (CA) certificate.
:return: 0 if the certificate is not CA, nonzero otherwise.
:requires: OpenSSL 0.9.8 or newer
)r Z
x509_check_caro )r! r r r �check_ca� s z
X509.check_cac C s t j| j||�S )a4
Check if the certificate's purpose matches the asked purpose.
:param id: Purpose id. See X509_PURPOSE_* constants.
:param ca: 1 if the certificate should be CA, 0 otherwise.
:return: 0 if the certificate purpose does not match, nonzero
otherwise.
)r Zx509_check_purposero )r! �idZcar r r �
check_purpose� s zX509.check_purpose�md5c C s8 | j � }tj|�}|j|� |j� }tjtj|�j � �S )z�
Get the fingerprint of the certificate.
:param md: Message digest algorithm to use.
:return: String containing the fingerprint in hex format.
)
rk r Z
MessageDigest�update�finalr r( �binasciiZhexlify�upper)r! r� ZderZdigestr r r �get_fingerprint s
zX509.get_fingerprint)Nr )N)r� ))r
r r r2 r Z x509_freerp r" r% r& rj rk rr rw rx r{ r} r r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r r r r rm � sF
rm c C sT t j| ��@}|tkr t|�S |tkr>tj|j� �}t|dd�S t d��W dQ R X dS )a
Load certificate from file.
:param file: Name of file containing certificate in either DER or
PEM format.
:param format: Describes the format of the file to be loaded,
either PEM or DER.
:return: M2Crypto.X509.X509 object.
r )r z7Unknown format. Must be either FORMAT_DER or FORMAT_PEMN)
r rt rx �
load_cert_biory r �d2i_x509r& rm r )�filerz rv �cptrr r r � load_cert s
r� c C sD |t krtj| j� �}n |tkr0tj| j� �}ntd��t|dd�S )aG
Load certificate from a bio.
:param bio: BIO pointing at a certificate in either DER or PEM format.
:param format: Describes the format of the cert to be loaded,
either PEM or DER (via constants FORMAT_PEM
and FORMAT_FORMAT_DER)
:return: M2Crypto.X509.X509 object.
z7Unknown format. Must be either FORMAT_DER or FORMAT_PEMr )r )rx r Z
x509_read_pemr& ry r� r rm )rv rz r� r r r r� - s
r� c C s t j| �} tj| �}t||�S )aO
Load certificate from a string.
:param string: String containing a certificate in either DER or PEM format.
:param format: Describes the format of the cert to be loaded,
either PEM or DER (via constants FORMAT_PEM
and FORMAT_FORMAT_DER)
:return: M2Crypto.X509.X509 object.
)r r_ r r+ r� )�stringrz rv r r r �load_cert_stringD s
r� c C s. t j| �} tj| �}tj|j� �}t|dd�S )z�
Load certificate from a string.
:param string: String containing a certificate in DER format.
:return: M2Crypto.X509.X509 object.
r )r )r r_ r r+ r r� r& rm )r� rv r� r r r �load_cert_der_stringV s
r� c @ sP e Zd ZdZejZddd�Zdd� Zdd� Z d d
� Z
d d � Z d
d� Z dd� Z
dS )�X509_Store_Contextz
X509 Store Context
r c C s || _ || _dS )zc
:param x509_store_ctx: binary data for
OpenSSL X509_STORE_CTX type
N)r r )r! Zx509_store_ctxr r r r r" l s zX509_Store_Context.__init__c C s" t | d�s n| jr | j| j� d S )Nr )�hasattrr �m2_x509_store_ctx_freer )r! r r r r% v s
zX509_Store_Context.__del__c C s | j S )N)r )r! r r r r& ~ s zX509_Store_Context._ptrc C s t tj| j�dd�S )z�
Get current X.509 certificate.
:warning: The returned certificate is NOT refcounted, so you can not
rely on it being valid once the store context goes
away or is modified.
r )r )rm r Z x509_store_ctx_get_current_certr )r! r r r �get_current_cert� s z#X509_Store_Context.get_current_certc C s t j| j�S )z!
Get error code.
)r Zx509_store_ctx_get_errorr )r! r r r � get_error� s z X509_Store_Context.get_errorc C s t j| j�S )z"
Get error depth.
)r Z x509_store_ctx_get_error_depthr )r! r r r �get_error_depth� s z"X509_Store_Context.get_error_depthc C s t tj| j�dd�S )z�
Get certificate chain.
:return: Reference counted (i.e. safe to use even after the store
context goes away) stack of certificates in the chain.
r )�
X509_Stackr Zx509_store_ctx_get1_chainr )r! r r r �
get1_chain� s z X509_Store_Context.get1_chainN)r )r
r r r2 r Zx509_store_ctx_freer� r" r% r& r� r� r� r� r r r r r� e s
r� c @ sR e Zd ZdZejZddd�Zdd� Zdd � Z d
d � Z
e
Z d d
� Z ddd�Z
e ZdS )�
X509_Storez
X509 Store
Nr c C s* |dk r|| _ || _ntj� | _ d| _dS )zL
:param store: binary data for OpenSSL X509_STORE_CTX type.
Nr )�storer r Zx509_store_new)r! r� r r r r r" � s
zX509_Store.__init__c C s t | dd�r| j| j� d S )Nr r )r# �m2_x509_store_freer� )r! r r r r% � s zX509_Store.__del__c C s | j S )N)r� )r! r r r r& � s zX509_Store._ptrc C s t j| j|�}|S )zT
:param file: filename
:return: 1 on success, 0 on failure
)r Zx509_store_load_locationsr� )r! r� rC r r r � load_info� s zX509_Store.load_infoc C s t |t�st�tj| j|j� �S )N)�
isinstancerm r= r Zx509_store_add_certr� r& )r! ro r r r �add_x509� s zX509_Store.add_x509c C s0 |dkr| j t�S t|�s"td��tj| j|�S )a�
Set callback which will be called when the store is verified.
Wrapper over OpenSSL X509_STORE_set_verify_cb().
:param callback: Callable to specify verification options.
Type of the callable must be:
(int, X509_Store_Context) -> int.
If None: set the standard options.
:note: compile-time or run-time errors in the callback would result
in mysterious errors during verification, which could be hard
to trace.
:note: Python exceptions raised in callbacks do not propagate to
verify() call.
:return: None
Nz&set_verify(): callback is not callable)�
set_verify_cbr �callabler r Zx509_store_set_verify_cbr� )r! �callbackr r r r� � s
zX509_Store.set_verify_cb)Nr )N)r
r r r2 r Zx509_store_freer� r" r% r& r� Zload_locationsr� r� Zadd_certr r r r r� � s
r� c @ s` e Zd ZdZejZddd�Zdd� Zdd � Z d
d � Z
d d
� Z dd� Z dd� Z
dd� Zdd� ZdS )r� a�
X509 Stack
:warning: Do not modify the underlying OpenSSL stack
except through this interface, or use any OpenSSL
functions that do so indirectly. Doing so will get the
OpenSSL stack and the internal pystack of this class out
of sync, leading to python memory leaks, exceptions or
even python crashes!
Nr c C sr |d k rX|| _ || _g | _tj| j �}xFt|�D ]"}| jjttj| j |�|d�� q0W ntj � | _ d| _g | _d S )N)r r )
r4 r r7 r � sk_x509_numr6 r8 rm Z
sk_x509_valueZsk_x509_new_null)r! r4 r Z _pyfree_x509r9 r: r r r r" � s
zX509_Stack.__init__c C s t | dd�r| j| j� d S )Nr r )r# �m2_sk_x509_freer4 )r! r r r r% s zX509_Stack.__del__c C s$ t j| j�t| j�kst�t| j�S )N)r r� r4 r< r7 r= )r! r r r r> s zX509_Stack.__len__c C s
| j | S )N)r7 )r! r? r r r r@ s zX509_Stack.__getitem__c C s
t | j�S )N)rA r7 )r! r r r rB s zX509_Stack.__iter__c C s | j S )N)r4 )r! r r r r& s zX509_Stack._ptrc C sB t |t�st�| jj|� tj| j|j� �}|t | j�ks>t�|S )z�
push an X509 certificate onto the stack.
:param x509: X509 object.
:return: The number of X509 objects currently on the stack.
)
r� rm r= r7 r8 r Z sk_x509_pushr4 r& r< )r! ro rC r r r rD s
zX509_Stack.pushc C s4 t j| j�}|dkr*t| j�dks&t�dS | jj� S )z�
pop a certificate from the stack.
:return: X509 object that was popped, or None if there is
nothing to pop.
Nr )r Z sk_x509_popr4 r< r7 r= rE )r! Zx509_ptrr r r rE / s
zX509_Stack.popc C s t j| j�S )z:
Return the stack as a DER encoded string
)r Zget_der_encoding_stackr4 )r! r r r rk = s zX509_Stack.as_der)Nr r )r
r r r2 r Z sk_x509_freer� r" r% r> r@ rB r& rD rE rk r r r r r� � s
r� c C s t j| �} tj| �}t|dd�S )zK
Create a new X509_Stack from DER string.
:return: X509_Stack
r )r r_ r Z make_stack_from_der_sequencer� )Z
der_stringZ stack_ptrr r r �new_stack_from_derE s
r� c @ s� e Zd ZdZejZd$dd�Zdd� Zdd � Z d
d � Z
d d
� Z dd� Z e
fdd�Zdd� Zdd� Zdd� Zdd� Zdd� Zd d � ZeZd d � Zd d!� Zd"d#� ZdS )%�Requestz#
X509 Certificate Request.
Nr c C s8 |d k r|| _ || _n tj� | _ tj| j d� d| _d S )Nr r )�reqr r Z x509_req_new�x509_req_set_version)r! r� r r r r r" X s
zRequest.__init__c C s t | dd�r| j| j� d S )Nr r )r# �m2_x509_req_freer� )r! r r r r% b s zRequest.__del__c C s( t j� }tj|j� | j� tj|j� �S )N) r r+ r Zx509_req_printr, r� r r( r- )r! r0 r r r rj g s zRequest.as_textc C s" t j� }tj|j� | j� |j� S )N)r r+ r �x509_req_write_pemr, r� r- )r! r0 r r r rr m s zRequest.as_pemc C s" t j� }tj|j� | j� |j� S )N)r r+ r �i2d_x509_req_bior, r� r- )r! r0 r r r rk s s zRequest.as_derc
C s* t j|d��}tj|j� | j�S Q R X d S )Nrs )r rt r r� r, r� )r! ru rv r r r rw y s zRequest.save_pemc
C sX t j|d��B}|tkr(tj|j� | j�S |tkrBtj|j� | j�S t d��W dQ R X dS )a!
Saves X.509 certificate request to a file. Default output
format is PEM.
:param filename: Name of the file the request will be saved to.
:param format: Controls what output format is used to save the
request. Either FORMAT_PEM or FORMAT_DER to save
in PEM or DER format. Raises ValueError if an
unknown format is used.
:return: 1 for success, 0 for failure.
The error code can be obtained by ERR_get_error.
rs z9Unknown filetype. Must be either FORMAT_DER or FORMAT_PEMN)
r rt rx r r� r, r� ry r� r )r! ru rz rv r r r r{ ~ s z Request.savec C s t jtj| j�dd�S )zh
Get the public key for the request.
:return: Public key from the request.
r )r )r r� r Zx509_req_get_pubkeyr� )r! r r r r� � s zRequest.get_pubkeyc C s t j| j|j�S )z�
Set the public key for the request.
:param pkey: Public key
:return: Return 1 for success and 0 for failure.
)r Zx509_req_set_pubkeyr� r� )r! r� r r r r� � s zRequest.set_pubkeyc C s t j| j�S )zH
Get version.
:return: Returns version.
)r Zx509_req_get_versionr� )r! r r r r� � s zRequest.get_versionc C s t j| j|�S )zu
Set version.
:param version: Version number.
:return: Returns 0 on failure.
)r r� r� )r! r| r r r r} � s zRequest.set_versionc C s t tj| j��S )N)rR r Zx509_req_get_subject_namer� )r! r r r r� � s zRequest.get_subjectc C s t j| j|j�S )z�
Set subject name.
:param name: subjectName field.
:return: 1 for success and 0 for failure
)r Zx509_req_set_subject_namer� rW )r! r r r r r� � s zRequest.set_subject_namec C s t j| j|j� �S )z�
Add X509 extensions to this request.
:param ext_stack: Stack of extensions to add.
:return: 1 for success and 0 for failure
)r Zx509_req_add_extensionsr� r& )r! Z ext_stackr r r �add_extensions� s zRequest.add_extensionsc C s t j| j|j�S )zd
:param pkey: PKey to be verified
:return: 1 for success and 0 for failure
)r Zx509_req_verifyr� r� )r! r� r r r r� � s zRequest.verifyc C s2 t t|d�}|dkr td|��tj| j|j|� �S )z�
:param pkey: PKey to be signed
:param md: used algorigthm
:return: 1 for success and 0 for failure
Nzunknown message digest)r# r r Z
x509_req_signr� r� )r! r� r� r� r r r r� � s
z Request.sign)Nr )r
r r r2 r Z
x509_req_freer� r" r% rj rr rk rw rx r{ r� r� r� r} r� r� r� r� r� r� r r r r r� Q s&
r� c
C sX t j| ��>}|tkr$tj|j� �}n |tkr<tj|j� �}ntd��W dQ R X t |d�S )a]
Load certificate request from file.
:param file: Name of file containing certificate request in
either PEM or DER format.
:param format: Describes the format of the file to be loaded,
either PEM or DER. (using constants FORMAT_PEM
and FORMAT_DER)
:return: Request object.
z9Unknown filetype. Must be either FORMAT_PEM or FORMAT_DERNr )
r rt rx r �x509_req_read_pemr, ry � d2i_x509_reqr r� )r� rz �fr� r r r � load_request� s r� c C sD |t krtj| j� �}n |tkr0tj| j� �}ntd��t|dd�S )ag
Load certificate request from a bio.
:param bio: BIO pointing at a certificate request in
either DER or PEM format.
:param format: Describes the format of the request to be loaded,
either PEM or DER. (using constants FORMAT_PEM
and FORMAT_DER)
:return: M2Crypto.X509.Request object.
z7Unknown format. Must be either FORMAT_DER or FORMAT_PEMr )r )rx r r� r& ry r� r r� )rv rz r� r r r �load_request_bio s r� c C s t j| �} tj| �}t||�S )as
Load certificate request from a string.
:param string: String containing a certificate request in
either DER or PEM format.
:param format: Describes the format of the request to be loaded,
either PEM or DER. (using constants FORMAT_PEM
and FORMAT_DER)
:return: M2Crypto.X509.Request object.
)r r_ r r+ r� )r� rz rv r r r �load_request_string s
r� c C s t j| �} tj| �}t|t�S )z�
Load certificate request from a string.
:param string: String containing a certificate request in DER format.
:return: M2Crypto.X509.Request object.
)r r_ r r+ r� ry )r� rv r r r �load_request_der_string0 s
r� c @ s0 e Zd ZdZejZd
dd�Zdd� Zdd � Z dS ) �CRLz*
X509 Certificate Revocation List
Nr c C s* |dk r|| _ || _ntj� | _ d| _dS )zn
:param crl: binary representation of
the underlying OpenSSL X509_CRL object.
Nr )�crlr r Z x509_crl_new)r! r� r r r r r" D s
z CRL.__init__c C s t | dd�r| j| j� d S )Nr r )r# �m2_x509_crl_freer� )r! r r r r% R s z CRL.__del__c C s( t j� }tj|j� | j� tj|j� �S )zr
Return CRL in PEM format in a string.
:return: String containing the CRL in PEM format.
) r r+ r Zx509_crl_printr, r� r r( r- )r! r0 r r r rj W s z CRL.as_text)Nr )
r
r r r2 r Z
x509_crl_freer� r" r% rj r r r r r� = s
r� c
C s. t j| ��}tj|j� �}W dQ R X t|d�S )z�
Load CRL from file.
:param file: Name of file containing CRL in PEM format.
:return: M2Crypto.X509.CRL object.
Nr )r rt r Zx509_crl_read_pemr, r� )r� r� r� r r r �load_crlc s r� )r r )/Z
__future__r r� ZloggingZM2Cryptor r r r r r Ztypingr r
ry rx Z getLoggerr
�logr r Z x509_initZ X509_V_OKZV_OKr r �objectr r3 rF rR rm r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r r r r �<module> sJ
?N= 9 \ @JV
&