U cl@sJdZddlmZddlmZddgZd edd dZGd ddejZdS) z Sign PDF files using a Belgian eID card. This module defines a very thin convenience wrapper around :mod:`.pyhanko.sign.pkcs11` to set up a PKCS#11 session with an eID card and read the appropriate certificates on the device. )Session)pkcs11open_beid_session BEIDSignerN)returncCstj||ddS)a Open a PKCS#11 session :param lib_location: Path to the shared library file containing the eID PKCS#11 module. Usually, the file is named ``libbeidpkcs11.so``, ``libbeidpkcs11.dylib`` or ``beidpkcs11.dll``, depending on your operating system. :param slot_no: Slot number to use. If not specified, the first slot containing a token labelled ``BELPIC`` will be used. :return: An open PKCS#11 session object. ZBELPIC)slot_noZ token_label) sign_pkcs11Zopen_pkcs11_session)Z lib_locationrr 5/tmp/pip-unpacked-wheel-0kb_yl26/pyhanko/sign/beid.pyrs cs,eZdZdZdeeedfdd ZZS)ra+ Belgian eID-specific signer implementation that automatically populates the (trustless) certificate list with the relevant certificates stored on the card. This includes the government's (self-signed) root certificate and the certificate of the appropriate intermediate CA. FT)pkcs11_session use_auth_cert bulk_fetchcs"tj||rdndd||ddS)NZAuthentication Signature)ZRootCA)r Z cert_labelZother_certs_to_pullr embed_roots)super__init__)selfr r rr __class__r r r/s zBEIDSigner.__init__)FFT)__name__ __module__ __qualname____doc__rboolr __classcell__r r rr r&s)N) rrrr __all__rZ PKCS11Signerrr r r r s