U c5@sddlZddlZddlmZmZmZmZddlmZddl m Z ddl m Z ddl mZdd lmZmZmZmZdd lmZmZdd lmZmZdd lmZmZmZmZdd lm Z m!Z!m"Z"m#Z#m$Z$ddl%m&Z&ddl'm(Z(m)Z)m*Z*m+Z+m,Z,m-Z-ddddddddddddddddd d!d"d#d$d%d&d'd(gZ.ed)e,d*Z/e,ddddd+fej0ee/e1e e2e&d,d-dZ3ddde j4dfee1eej5ej6fej0e e e&e-d.d/d!Z7d9e!e e ee&e8e*d0d1dZ9d:e!e ee8e(d2d3d#Z:d+d4d+dd+e j4fe!e d5d6d(Z;d;e!eee&e8e*d7d8d%ZcCst||||||d}t|S)a .. versionchanged:: 0.9.0 Wrapper around :func:`~.pdf_embedded.async_validate_pdf_signature`. Validate a PDF signature. :param embedded_sig: Embedded signature to evaluate. :param signer_validation_context: Validation context to use to validate the signature's chain of trust. :param ts_validation_context: Validation context to use to validate the timestamp's chain of trust (defaults to ``signer_validation_context``). :param diff_policy: Policy to evaluate potential incremental updates that were appended to the signed revision of the document. Defaults to :const:`~pyhanko.sign.diff_analysis.DEFAULT_DIFF_POLICY`. :param key_usage_settings: A :class:`.KeyUsageConstraints` object specifying which key usages must or must not be present in the signer's certificate. :param skip_diff: If ``True``, skip the difference analysis step entirely. :return: The status of the PDF signature in question. )rAr<r=rBr2rC)rr6r7)rAr<r=rBr2rCr8r9r9r:r$s )rAr0rBrCr>cCst||||d}t|S)a .. versionchanged:: 0.9.0 Wrapper around :func:`~.pdf_embedded.async_validate_pdf_timestamp`. Validate a PDF document timestamp. :param embedded_sig: Embedded signature to evaluate. :param validation_context: Validation context to use to validate the timestamp's chain of trust. :param diff_policy: Policy to evaluate potential incremental updates that were appended to the signed revision of the document. Defaults to :const:`~pyhanko.sign.diff_analysis.DEFAULT_DIFF_POLICY`. :param skip_diff: If ``True``, skip the difference analysis step entirely. :return: The status of the PDF timestamp in question. )rAr0rBrC)rr6r7)rAr0rBrCr8r9r9r:r'sT)rAr0c Cs"t||||||||d}t|S)al .. versionchanged:: 0.9.0 Wrapper around :func:`~.dss.async_add_validation_info` Add validation info (CRLs, OCSP responses, extra certificates) for a signature to the DSS of a document in an incremental update. :param embedded_sig: The signature for which the revocation information needs to be collected. :param validation_context: The validation context to use. :param skip_timestamp: If ``True``, do not attempt to validate the timestamp attached to the signature, if one is present. :param add_vri_entry: Add a ``/VRI`` entry for this signature to the document security store. Default is ``True``. :param output: Write the output to the specified output stream. If ``None``, write to a new :class:`.BytesIO` object. Default is ``None``. :param in_place: Sign the original input stream in-place. This parameter overrides ``output``. :param chunk_size: Chunk size parameter to use when copying output to a new stream (irrelevant if ``in_place`` is ``True``). :param force_write: Force a new revision to be written, even if not necessary (i.e. when all data in the validation context is already present in the DSS). :return: The (file-like) output object to which the result was written. )rAr0skip_timestamp add_vri_entryoutputin_placer? force_write)rr6r7) rAr0rDrErGrFrHr?r8r9r9r:r)s()rAvalidation_typerBr2rCr>c Cs"t||||||||d}t|S)a .. versionchanged:: 0.9.0 Wrapper around :func:`async_validate_pdf_ltv_signature`. Validate a PDF LTV signature according to a particular profile. :param embedded_sig: Embedded signature to evaluate. :param validation_type: Validation profile to use. :param validation_context_kwargs: Keyword args to instantiate :class:`.pyhanko_certvalidator.ValidationContext` objects needed over the course of the validation. :param bootstrap_validation_context: Validation context used to validate the current timestamp. :param force_revinfo: Require all certificates encountered to have some form of live revocation checking provisions. :param diff_policy: Policy to evaluate potential incremental updates that were appended to the signed revision of the document. Defaults to :const:`~pyhanko.sign.diff_analysis.DEFAULT_DIFF_POLICY`. :param key_usage_settings: A :class:`.KeyUsageConstraints` object specifying which key usages must or must not be present in the signer's certificate. :param skip_diff: If ``True``, skip the difference analysis step entirely. :return: The status of the signature. )rArIvalidation_context_kwargsbootstrap_validation_context force_revinforBr2rC)rr6r7) rArIrJrKrLrBr2rCr8r9r9r:r(0s( )NNNNF)NNF)NNFNNF)=r6r3typingrrrrZ asn1cryptorZpyhanko_certvalidatorrZpyhanko.pdf_utilsrZ diff_analysisr Zdssr r rrerrorsrrZ generic_cmsrrZltvrrrrZ pdf_embeddedrrrrrsettingsrstatusrrr r!r"r#__all__r*Z SignedDatabytesdictr%ZDEFAULT_CHUNK_SIZEZ ContentInfoZEncapsulatedContentInfor&boolr$r'r)r(r9r9r9r:s        < = + " 3