a  `c @sddlmZmZmZddlmZddlZddlmZddl m Z ddl m Z m Z GdddeZd d eDZeZe jeje jeje jeje jeje jeje jejiZe jd e jd e jd e jde jde jde j de jde j!di Z"ddZ#GdddeZ$GdddeZ%GdddeZ&dS))absolute_importdivisionprint_function)EnumN)utils) _get_backend)NameOIDObjectIdentifierc@s4eZdZdZdZdZdZdZdZdZ dZ d Z d Z d S) _ASN1Type N) __name__ __module__ __qualname__ UTF8StringZ NumericStringPrintableStringZ T61String IA5StringZUTCTimeZGeneralizedTimeZ VisibleStringZUniversalStringZ BMPStringrr8/usr/lib/python3/dist-packages/cryptography/x509/name.pyr sr cCsi|] }|j|qSr)value.0irrr r!ZCNLZSTOZOUCZSTREETZDCZUIDcCs|sdS|dd}|dd}|dd}|dd }|d d }|d d }|dd}|dd}|ddvr|d|}|ddkr|ddd}|S)z>Escape special characters in RFC4514 Distinguished Name value.\z\\"z\"+z\+,z\,;z\;z\>z\00r)# r0Nz\ )replace)valrrr_escape_dn_value7s          r4c@sTeZdZefddZedZedZddZ ddZ d d Z d d Z d dZ dS) NameAttributecCst|tstdt|tjs&td|tjks:|tjkrTt| ddkrTt d|t krjt |tj}t|ts|td||_||_||_dS)Nz2oid argument must be an ObjectIdentifier instance.z#value argument must be a text type.utf8z/Country name must be a 2 character country codez%_type must be from the _ASN1Type enum) isinstancer TypeErrorsixZ text_typer COUNTRY_NAMEJURISDICTION_COUNTRY_NAMElenencode ValueError _SENTINEL_NAMEOID_DEFAULT_TYPEgetr r_oid_value_type)selfoidrrErrr__init__Ps*    zNameAttribute.__init__rCrDcCs$t|j|jj}d|t|jfS)z Format as RFC4514 Distinguished Name string. Use short attribute name if available, otherwise fall back to OID dotted string. z%s=%s)_NAMEOID_TO_NAMErBrGZ dotted_stringr4r)rFkeyrrrrfc4514_stringuszNameAttribute.rfc4514_stringcCs&t|tstS|j|jko$|j|jkSN)r8r5NotImplementedrGrrFotherrrr__eq__s zNameAttribute.__eq__cCs ||k SrLrrNrrr__ne__szNameAttribute.__ne__cCst|j|jfSrL)hashrGrrFrrr__hash__szNameAttribute.__hash__cCs d|S)Nz/)formatrSrrr__repr__szNameAttribute.__repr__N)rrrr@rHrZread_only_propertyrGrrKrPrQrTrVrrrrr5Os "   r5c@sTeZdZddZddZddZddZd d Zd d Zd dZ ddZ ddZ dS)RelativeDistinguishedNamecCs\t|}|stdtdd|Ds.td||_t||_t|jt|krXtddS)Nz-a relative distinguished name cannot be emptycss|]}t|tVqdSrLr8r5rxrrr r"z5RelativeDistinguishedName.__init__..z/attributes must be an iterable of NameAttributez$duplicate attributes are not allowed)listr?allr9 _attributes frozenset_attribute_setr=rFZ attributesrrrrHs z"RelativeDistinguishedName.__init__csfdd|DS)Ncsg|]}|jkr|qSrrGrrbrr r"zDRelativeDistinguishedName.get_attributes_for_oid..rrFrGrrbrget_attributes_for_oidsz0RelativeDistinguishedName.get_attributes_for_oidcCsddd|jDS)z Format as RFC4514 Distinguished Name string. Within each RDN, attributes are joined by '+', although that is rarely used in certificates. r)css|]}|VqdSrLrKrattrrrrr[r"z;RelativeDistinguishedName.rfc4514_string..)joinr^rSrrrrKsz(RelativeDistinguishedName.rfc4514_stringcCst|tstS|j|jkSrL)r8rWrMr`rNrrrrPs z RelativeDistinguishedName.__eq__cCs ||k SrLrrNrrrrQsz RelativeDistinguishedName.__ne__cCs t|jSrL)rRr`rSrrrrTsz"RelativeDistinguishedName.__hash__cCs t|jSrL)iterr^rSrrr__iter__sz"RelativeDistinguishedName.__iter__cCs t|jSrL)r=r^rSrrr__len__sz!RelativeDistinguishedName.__len__cCsd|S)Nz)rUrKrSrrrrVsz"RelativeDistinguishedName.__repr__N) rrrrHrerKrPrQrTrkrlrVrrrrrWs rWc@sjeZdZddZddZddZeddZdd d Zd d Z ddZ ddZ ddZ ddZ ddZd S)NamecCsRt|}tdd|Dr,dd|D|_n"tdd|DrF||_ntddS)Ncss|]}t|tVqdSrLrXrYrrrr[r"z Name.__init__..cSsg|]}t|gqSr)rWrYrrrrcsz!Name.__init__..css|]}t|tVqdSrL)r8rWrYrrrr[r"zNattributes must be a list of NameAttribute or a list RelativeDistinguishedName)r\r]r^r9rarrrrHs z Name.__init__cCsdddt|jDS)a Format as RFC4514 Distinguished Name string. For example 'CN=foobar.com,O=Foo Corp,C=US' An X.509 name is a two-level structure: a list of sets of attributes. Each list element is separated by ',' and within each list element, set elements are separated by '+'. The latter is almost never used in real world certificates. According to RFC4514 section 2.1 the RDNSequence must be reversed when converting to string representation. r*css|]}|VqdSrLrfrgrrrr[sz&Name.rfc4514_string..)rireversedr^rSrrrrKs zName.rfc4514_stringcsfdd|DS)Ncsg|]}|jkr|qSrrbrrbrrrcr"z/Name.get_attributes_for_oid..rrdrrbrreszName.get_attributes_for_oidcCs|jSrLr^rSrrrrdnssz Name.rdnsNcCst|}||SrL)rZx509_name_bytes)rFZbackendrrr public_bytesszName.public_bytescCst|tstS|j|jkSrL)r8rmrMr^rNrrrrPs z Name.__eq__cCs ||k SrLrrNrrrrQsz Name.__ne__cCstt|jSrL)rRtupler^rSrrrrTsz Name.__hash__ccs |jD]}|D] }|VqqdSrLro)rFrdnZavarrrrks z Name.__iter__cCstdd|jDS)Ncss|]}t|VqdSrL)r=)rrsrrrr[r"zName.__len__..)sumr^rSrrrrlsz Name.__len__cCs:ddd|jD}tjr,d|dSd|SdS)Nr*css|]}|VqdSrLrfrgrrrr[r"z Name.__repr__..z r6)rir^r:ZPY2rUr>)rFrprrrrVsz Name.__repr__)N)rrrrHrKrepropertyrprqrPrQrTrkrlrVrrrrrms  rm)'Z __future__rrrenumrr:Z cryptographyrZcryptography.hazmat.backendsrZcryptography.x509.oidrr r Z_ASN1_TYPE_TO_ENUMobjectr@r;rr<Z SERIAL_NUMBERZ DN_QUALIFIERZ EMAIL_ADDRESSrZDOMAIN_COMPONENTrAZ COMMON_NAMEZ LOCALITY_NAMEZSTATE_OR_PROVINCE_NAMEZORGANIZATION_NAMEZORGANIZATIONAL_UNIT_NAMEZSTREET_ADDRESSZUSER_IDrIr4r5rWrmrrrrs:      @1