U *}fc @sddlmZmZmZddlmZddlZddlmZddl m Z ddl m Z m Z GdddeZd d eDZeZe jeje jeje jeje jeje jeje jejiZe jd e jd e jd e jde jde jde j de jde j!di Z"ddZ#GdddeZ$GdddeZ%GdddeZ&dS))absolute_importdivisionprint_function)EnumN)utils) _get_backend)NameOIDObjectIdentifierc@s4eZdZdZdZdZdZdZdZdZ dZ d Z d Z d S) _ASN1Type N) __name__ __module__ __qualname__ UTF8StringZ NumericStringPrintableStringZ T61String IA5StringZUTCTimeZGeneralizedTimeZ VisibleStringZUniversalStringZ BMPStringrr:/tmp/pip-unpacked-wheel-x36vw73o/cryptography/x509/name.pyr sr cCsi|] }|j|qSr)value.0irrr sr!ZCNLZSTOZOUCZSTREETZDCUIDcCs|sdS|dd}|dd}|dd}|dd }|d d }|d d }|dd}|dd}|ddkr|d|}|ddkr|ddd}|S)z>Escape special characters in RFC4514 Distinguished Name value.\z\\"z\"+z\+,z\,;z\;z\>z\00r)# r0Nz\ )replace)valrrr_escape_dn_value7s          r4c@sTeZdZefddZedZedZddZ ddZ d d Z d d Z d dZ dS) NameAttributecCst|tstdt|tjs&td|tjks:|tjkrTt| ddkrTt d|t krjt |tj}t|ts|td||_||_||_dS)Nz2oid argument must be an ObjectIdentifier instance.z#value argument must be a text type.utf8z/Country name must be a 2 character country codez%_type must be from the _ASN1Type enum) isinstancer TypeErrorsix text_typer COUNTRY_NAMEJURISDICTION_COUNTRY_NAMElenencode ValueError _SENTINEL_NAMEOID_DEFAULT_TYPEgetr r_oid_value_type)selfoidrrFrrr__init__Ps*    zNameAttribute.__init__rDrEcCs$t|j|jj}d|t|jfS)z Format as RFC4514 Distinguished Name string. Use short attribute name if available, otherwise fall back to OID dotted string. z%s=%s)_NAMEOID_TO_NAMErCrHZ dotted_stringr4r)rGkeyrrrrfc4514_stringuszNameAttribute.rfc4514_stringcCs&t|tstS|j|jko$|j|jkSN)r8r5NotImplementedrHrrGotherrrr__eq__s zNameAttribute.__eq__cCs ||k SrMrrOrrr__ne__szNameAttribute.__ne__cCst|j|jfSrM)hashrHrrGrrr__hash__szNameAttribute.__hash__cCs d|S)Nz/)formatrTrrr__repr__szNameAttribute.__repr__N)rrrrArIrZread_only_propertyrHrrLrQrRrUrWrrrrr5Os "   r5c@sTeZdZddZddZddZddZd d Zd d Zd dZ ddZ ddZ dS)RelativeDistinguishedNamecCs\t|}|stdtdd|Ds.td||_t||_t|jt|krXtddS)Nz-a relative distinguished name cannot be emptycss|]}t|tVqdSrMr8r5rxrrr sz5RelativeDistinguishedName.__init__..z/attributes must be an iterable of NameAttributez$duplicate attributes are not allowed)listr@allr9 _attributes frozenset_attribute_setr>rG attributesrrrrIs z"RelativeDistinguishedName.__init__csfdd|DS)Ncsg|]}|jkr|qSrrHrrdrr s zDRelativeDistinguishedName.get_attributes_for_oid..rrGrHrrdrget_attributes_for_oidsz0RelativeDistinguishedName.get_attributes_for_oidcCsddd|jDS)z Format as RFC4514 Distinguished Name string. Within each RDN, attributes are joined by '+', although that is rarely used in certificates. r)css|]}|VqdSrMrLrattrrrrr\sz;RelativeDistinguishedName.rfc4514_string..)joinr_rTrrrrLsz(RelativeDistinguishedName.rfc4514_stringcCst|tstS|j|jkSrM)r8rXrNrarOrrrrQs z RelativeDistinguishedName.__eq__cCs ||k SrMrrOrrrrRsz RelativeDistinguishedName.__ne__cCs t|jSrM)rSrarTrrrrUsz"RelativeDistinguishedName.__hash__cCs t|jSrM)iterr_rTrrr__iter__sz"RelativeDistinguishedName.__iter__cCs t|jSrM)r>r_rTrrr__len__sz!RelativeDistinguishedName.__len__cCsd|S)Nz)rVrLrTrrrrWsz"RelativeDistinguishedName.__repr__N) rrrrIrgrLrQrRrUrmrnrWrrrrrXs rXc@sjeZdZddZddZddZeddZdd d Zd d Z ddZ ddZ ddZ ddZ ddZd S)NamecCsRt|}tdd|Dr,dd|D|_n"tdd|DrF||_ntddS)Ncss|]}t|tVqdSrMrYrZrrrr\sz Name.__init__..cSsg|]}t|gqSr)rXrZrrrresz!Name.__init__..css|]}t|tVqdSrM)r8rXrZrrrr\szNattributes must be a list of NameAttribute or a list RelativeDistinguishedName)r]r^r_r9rbrrrrIs z Name.__init__cCsdddt|jDS)a Format as RFC4514 Distinguished Name string. For example 'CN=foobar.com,O=Foo Corp,C=US' An X.509 name is a two-level structure: a list of sets of attributes. Each list element is separated by ',' and within each list element, set elements are separated by '+'. The latter is almost never used in real world certificates. According to RFC4514 section 2.1 the RDNSequence must be reversed when converting to string representation. r*css|]}|VqdSrMrhrirrrr\sz&Name.rfc4514_string..)rkreversedr_rTrrrrLs zName.rfc4514_stringcsfdd|DS)Ncsg|]}|jkr|qSrrdrrdrrres z/Name.get_attributes_for_oid..rrfrrdrrgszName.get_attributes_for_oidcCs|jSrMr_rTrrrrdnssz Name.rdnsNcCst|}||SrM)rZx509_name_bytes)rGbackendrrr public_bytesszName.public_bytescCst|tstS|j|jkSrM)r8rorNr_rOrrrrQs z Name.__eq__cCs ||k SrMrrOrrrrRsz Name.__ne__cCstt|jSrM)rStupler_rTrrrrUsz Name.__hash__ccs |jD]}|D] }|VqqdSrMrq)rGrdnZavarrrrms z Name.__iter__cCstdd|jDS)Ncss|]}t|VqdSrM)r>)rrvrrrr\szName.__len__..)sumr_rTrrrrnsz Name.__len__cCs:ddd|jD}tjr,d|dSd|SdS)Nr*css|]}|VqdSrMrhrirrrr\sz Name.__repr__..z r6)rkr_r:PY2rVr?)rGrrrrrrWsz Name.__repr__)N)rrrrIrLrgpropertyrrrtrQrRrUrmrnrWrrrrros  ro)' __future__rrrenumrr:Z cryptographyrZcryptography.hazmat.backendsrZcryptography.x509.oidrr r Z_ASN1_TYPE_TO_ENUMobjectrAr<rr=Z SERIAL_NUMBERZ DN_QUALIFIERZ EMAIL_ADDRESSrZDOMAIN_COMPONENTrBZ COMMON_NAMEZ LOCALITY_NAMEZSTATE_OR_PROVINCE_NAMEZORGANIZATION_NAMEZORGANIZATIONAL_UNIT_NAMEZSTREET_ADDRESSZUSER_IDrJr4r5rXrorrrrsX      @1