3
K^W                 @   s  d dl mZmZmZ d dlZd dlZd dlZd dlZd dlZd dl	m
Z
 d dlZd dlmZ d dlmZmZmZmZ d dlmZmZ d dlmZ d dlmZ d d	lmZ d d
lmZmZmZ d dl m!Z! d dl"m#Z#m$Z$m%Z%m&Z& dd Z'dd Z(G dd de)Z*G dd de)Z+ej,ej-G dd de.Z/G dd de.Z0ej1e/G dd de.Z2ej1e/G dd de.Z3ej1e/G dd de.Z4ej1e/G dd  d e.Z5G d!d" d"e.Z6ej1e/G d#d$ d$e.Z7ej1e/G d%d& d&e.Z8ej1e/G d'd( d(e.Z9ej1e/G d)d* d*e.Z:G d+d, d,e.Z;G d-d. d.e
Z<ej1e/G d/d0 d0e.Z=ej1e/G d1d2 d2e.Z>G d3d4 d4e.Z?G d5d6 d6e.Z@G d7d8 d8e.ZAej1e/G d9d: d:e.ZBej1e/G d;d< d<e.ZCej1e/G d=d> d>e.ZDej1e/G d?d@ d@e.ZEG dAdB dBe
ZFdCdD eFD ZGej1e/G dEdF dFe.ZHej1e/G dGdH dHe.ZIej1e/G dIdJ dJe.ZJG dKdL dLe.ZKG dMdN dNe.ZLej1e/G dOdP dPe.ZMej1e/G dQdR dRe.ZNej1e/G dSdT dTe.ZOej1e/G dUdV dVe.ZPej1e/G dWdX dXe.ZQej1e/G dYdZ dZe.ZRej1e/G d[d\ d\e.ZSej1e/G d]d^ d^e.ZTej1e/G d_d` d`e.ZUdS )a    )absolute_importdivisionprint_functionN)Enum)utils)
BIT_STRING	DERReaderOBJECT_IDENTIFIERSEQUENCE)constant_timeserialization)EllipticCurvePublicKey)RSAPublicKey)SignedCertificateTimestamp)GeneralName	IPAddress	OtherName)RelativeDistinguishedName)CRLEntryExtensionOIDExtensionOIDOCSPExtensionOIDObjectIdentifierc             C   s   t | tr | jtjjtjj}nt | tr@| jtjj	tjj
}n| jtjjtjj}t|}|jt}|jt}|jt} W d Q R X |  |jt |j s|j  W d Q R X | j dkrtd| j}tj|j S )Nr   zInvalid public key encoding)
isinstancer   Zpublic_bytesr   EncodingZDERZPublicFormatZPKCS1r   ZX962ZUncompressedPointZSubjectPublicKeyInfor   Zread_single_elementr
   Zread_elementr   r	   Zis_emptyZread_any_elementZ	read_byte
ValueErrordatahashlibsha1digest)
public_keyr   Z
serializedreaderZpublic_key_info	algorithm r"   @/tmp/pip-unpacked-wheel-vvkwn1hz/cryptography/x509/extensions.py_key_identifier_from_public_key!   s.    




r$   c                s.    fdd} fdd} fdd}|||fS )Nc                s   t t|  S )N)lengetattr)self)
field_namer"   r#   
len_methodJ   s    z*_make_sequence_methods.<locals>.len_methodc                s   t t|  S )N)iterr&   )r'   )r(   r"   r#   iter_methodM   s    z+_make_sequence_methods.<locals>.iter_methodc                s   t |  | S )N)r&   )r'   idx)r(   r"   r#   getitem_methodP   s    z._make_sequence_methods.<locals>.getitem_methodr"   )r(   r)   r+   r-   r"   )r(   r#   _make_sequence_methodsI   s    r.   c                   s   e Zd Z fddZ  ZS )DuplicateExtensionc                s   t t| j| || _d S )N)superr/   __init__oid)r'   msgr2   )	__class__r"   r#   r1   W   s    zDuplicateExtension.__init__)__name__
__module____qualname__r1   __classcell__r"   r"   )r4   r#   r/   V   s   r/   c                   s   e Zd Z fddZ  ZS )ExtensionNotFoundc                s   t t| j| || _d S )N)r0   r9   r1   r2   )r'   r3   r2   )r4   r"   r#   r1   ]   s    zExtensionNotFound.__init__)r5   r6   r7   r1   r8   r"   r"   )r4   r#   r9   \   s   r9   c               @   s   e Zd Zejdd ZdS )ExtensionTypec             C   s   dS )zK
        Returns the oid associated with the given extension type.
        Nr"   )r'   r"   r"   r#   r2   d   s    zExtensionType.oidN)r5   r6   r7   abcabstractpropertyr2   r"   r"   r"   r#   r:   b   s   r:   c               @   s:   e Zd Zdd Zdd Zdd Zed\ZZZ	dd	 Z
d
S )
Extensionsc             C   s
   || _ d S )N)_extensions)r'   
extensionsr"   r"   r#   r1   l   s    zExtensions.__init__c             C   s0   x| D ]}|j |kr|S qW tdj||d S )NzNo {} extension was found)r2   r9   format)r'   r2   extr"   r"   r#   get_extension_for_oido   s    

z Extensions.get_extension_for_oidc             C   sD   |t krtdx| D ]}t|j|r|S qW tdj||jd S )Nz|UnrecognizedExtension can't be used with get_extension_for_class because more than one instance of the class may be present.zNo {} extension was found)UnrecognizedExtension	TypeErrorr   valuer9   r@   r2   )r'   ZextclassrA   r"   r"   r#   get_extension_for_classv   s    
z"Extensions.get_extension_for_classr>   c             C   s   dj | jS )Nz<Extensions({})>)r@   r>   )r'   r"   r"   r#   __repr__   s    zExtensions.__repr__N)r5   r6   r7   r1   rB   rF   r.   __len____iter____getitem__rG   r"   r"   r"   r#   r=   k   s
   r=   c               @   sD   e Zd ZejZdd Zdd Zdd Zdd Z	d	d
 Z
ejdZdS )	CRLNumberc             C   s   t |tjstd|| _d S )Nzcrl_number must be an integer)r   sixinteger_typesrD   _crl_number)r'   
crl_numberr"   r"   r#   r1      s    zCRLNumber.__init__c             C   s   t |tstS | j|jkS )N)r   rK   NotImplementedrO   )r'   otherr"   r"   r#   __eq__   s    
zCRLNumber.__eq__c             C   s
   | |k S )Nr"   )r'   rQ   r"   r"   r#   __ne__   s    zCRLNumber.__ne__c             C   s
   t | jS )N)hashrO   )r'   r"   r"   r#   __hash__   s    zCRLNumber.__hash__c             C   s   dj | jS )Nz<CRLNumber({})>)r@   rO   )r'   r"   r"   r#   rG      s    zCRLNumber.__repr__rN   N)r5   r6   r7   r   Z
CRL_NUMBERr2   r1   rR   rS   rU   rG   r   read_only_propertyrO   r"   r"   r"   r#   rK      s   rK   c               @   sp   e Zd ZejZdd Zedd Zedd Z	dd Z
d	d
 Zdd Zdd ZejdZejdZejdZdS )AuthorityKeyIdentifierc             C   sv   |d k|d kkrt d|d k	rBt|}tdd |D sBtd|d k	r`t|tj r`td|| _|| _|| _	d S )NzXauthority_cert_issuer and authority_cert_serial_number must both be present or both Nonec             s   s   | ]}t |tV  qd S )N)r   r   ).0xr"   r"   r#   	<genexpr>   s    z2AuthorityKeyIdentifier.__init__.<locals>.<genexpr>z;authority_cert_issuer must be a list of GeneralName objectsz/authority_cert_serial_number must be an integer)
r   listallrD   r   rL   rM   _key_identifier_authority_cert_issuer_authority_cert_serial_number)r'   key_identifierauthority_cert_issuerauthority_cert_serial_numberr"   r"   r#   r1      s"    

zAuthorityKeyIdentifier.__init__c             C   s   t |}| |d d dS )N)r`   ra   rb   )r$   )clsr   r   r"   r"   r#   from_issuer_public_key   s
    z-AuthorityKeyIdentifier.from_issuer_public_keyc             C   s:   t |tr|j}n|jj}tjdtjdd | |d d dS )NzExtension objects are deprecated as arguments to from_issuer_subject_key_identifier and support will be removed soon. Please migrate to passing a SubjectKeyIdentifier directly.   )
stacklevel)r`   ra   rb   )r   SubjectKeyIdentifierr   rE   warningswarnr   ZDeprecatedIn27)rc   Zskir   r"   r"   r#   "from_issuer_subject_key_identifier   s    
z9AuthorityKeyIdentifier.from_issuer_subject_key_identifierc             C   s
   dj | S )Nz<AuthorityKeyIdentifier(key_identifier={0.key_identifier!r}, authority_cert_issuer={0.authority_cert_issuer}, authority_cert_serial_number={0.authority_cert_serial_number})>)r@   )r'   r"   r"   r#   rG      s    zAuthorityKeyIdentifier.__repr__c             C   s2   t |tstS | j|jko0| j|jko0| j|jkS )N)r   rW   rP   r`   ra   rb   )r'   rQ   r"   r"   r#   rR      s    
zAuthorityKeyIdentifier.__eq__c             C   s
   | |k S )Nr"   )r'   rQ   r"   r"   r#   rS      s    zAuthorityKeyIdentifier.__ne__c             C   s,   | j d krd }n
t| j }t| j|| jfS )N)ra   tuplerT   r`   rb   )r'   Zacir"   r"   r#   rU     s
    

zAuthorityKeyIdentifier.__hash__r]   r^   r_   N)r5   r6   r7   r   ZAUTHORITY_KEY_IDENTIFIERr2   r1   classmethodrd   rj   rG   rR   rS   rU   r   rV   r`   ra   rb   r"   r"   r"   r#   rW      s   		

rW   c               @   sP   e Zd ZejZdd Zedd Ze	j
dZdd Zdd	 Zd
d Zdd ZdS )rg   c             C   s
   || _ d S )N)_digest)r'   r   r"   r"   r#   r1     s    zSubjectKeyIdentifier.__init__c             C   s   | t |S )N)r$   )rc   r   r"   r"   r#   from_public_key  s    z$SubjectKeyIdentifier.from_public_keyrm   c             C   s   dj | jS )Nz$<SubjectKeyIdentifier(digest={0!r})>)r@   r   )r'   r"   r"   r#   rG     s    zSubjectKeyIdentifier.__repr__c             C   s   t |tstS tj| j|jS )N)r   rg   rP   r   Zbytes_eqr   )r'   rQ   r"   r"   r#   rR   !  s    
zSubjectKeyIdentifier.__eq__c             C   s
   | |k S )Nr"   )r'   rQ   r"   r"   r#   rS   '  s    zSubjectKeyIdentifier.__ne__c             C   s
   t | jS )N)rT   r   )r'   r"   r"   r#   rU   *  s    zSubjectKeyIdentifier.__hash__N)r5   r6   r7   r   ZSUBJECT_KEY_IDENTIFIERr2   r1   rl   rn   r   rV   r   rG   rR   rS   rU   r"   r"   r"   r#   rg     s   
rg   c               @   sH   e Zd ZejZdd Zed\ZZ	Z
dd Zdd Zdd	 Zd
d ZdS )AuthorityInformationAccessc             C   s,   t |}tdd |D s"td|| _d S )Nc             s   s   | ]}t |tV  qd S )N)r   AccessDescription)rX   rY   r"   r"   r#   rZ   4  s    z6AuthorityInformationAccess.__init__.<locals>.<genexpr>z@Every item in the descriptions list must be an AccessDescription)r[   r\   rD   _descriptions)r'   Zdescriptionsr"   r"   r#   r1   2  s
    z#AuthorityInformationAccess.__init__rq   c             C   s   dj | jS )Nz <AuthorityInformationAccess({})>)r@   rq   )r'   r"   r"   r#   rG   >  s    z#AuthorityInformationAccess.__repr__c             C   s   t |tstS | j|jkS )N)r   ro   rP   rq   )r'   rQ   r"   r"   r#   rR   A  s    
z!AuthorityInformationAccess.__eq__c             C   s
   | |k S )Nr"   )r'   rQ   r"   r"   r#   rS   G  s    z!AuthorityInformationAccess.__ne__c             C   s   t t| jS )N)rT   rk   rq   )r'   r"   r"   r#   rU   J  s    z#AuthorityInformationAccess.__hash__N)r5   r6   r7   r   ZAUTHORITY_INFORMATION_ACCESSr2   r1   r.   rH   rI   rJ   rG   rR   rS   rU   r"   r"   r"   r#   ro   .  s   
ro   c               @   sH   e Zd Zdd Zdd Zdd Zdd Zd	d
 Zej	dZ
ej	dZdS )rp   c             C   s4   t |tstdt |ts$td|| _|| _d S )Nz)access_method must be an ObjectIdentifierz%access_location must be a GeneralName)r   r   rD   r   _access_method_access_location)r'   access_methodaccess_locationr"   r"   r#   r1   O  s    

zAccessDescription.__init__c             C   s
   dj | S )NzY<AccessDescription(access_method={0.access_method}, access_location={0.access_location})>)r@   )r'   r"   r"   r#   rG   Y  s    zAccessDescription.__repr__c             C   s&   t |tstS | j|jko$| j|jkS )N)r   rp   rP   rt   ru   )r'   rQ   r"   r"   r#   rR   _  s    
zAccessDescription.__eq__c             C   s
   | |k S )Nr"   )r'   rQ   r"   r"   r#   rS   h  s    zAccessDescription.__ne__c             C   s   t | j| jfS )N)rT   rt   ru   )r'   r"   r"   r#   rU   k  s    zAccessDescription.__hash__rr   rs   N)r5   r6   r7   r1   rG   rR   rS   rU   r   rV   rt   ru   r"   r"   r"   r#   rp   N  s   
	
rp   c               @   sN   e Zd ZejZdd ZejdZ	ejdZ
dd Zdd Zd	d
 Zdd ZdS )BasicConstraintsc             C   s^   t |tstd|d k	r(| r(td|d k	rNt |tj sF|dk rNtd|| _|| _d S )Nzca must be a boolean valuez)path_length must be None when ca is Falser   z2path_length must be a non-negative integer or None)r   boolrD   r   rL   rM   _ca_path_length)r'   capath_lengthr"   r"   r#   r1   v  s    
zBasicConstraints.__init__rx   ry   c             C   s
   dj | S )Nz:<BasicConstraints(ca={0.ca}, path_length={0.path_length})>)r@   )r'   r"   r"   r#   rG     s    zBasicConstraints.__repr__c             C   s&   t |tstS | j|jko$| j|jkS )N)r   rv   rP   rz   r{   )r'   rQ   r"   r"   r#   rR     s    
zBasicConstraints.__eq__c             C   s
   | |k S )Nr"   )r'   rQ   r"   r"   r#   rS     s    zBasicConstraints.__ne__c             C   s   t | j| jfS )N)rT   rz   r{   )r'   r"   r"   r#   rU     s    zBasicConstraints.__hash__N)r5   r6   r7   r   ZBASIC_CONSTRAINTSr2   r1   r   rV   rz   r{   rG   rR   rS   rU   r"   r"   r"   r#   rv   r  s   

rv   c               @   sD   e Zd ZejZdd ZejdZ	dd Z
dd Zdd	 Zd
d ZdS )DeltaCRLIndicatorc             C   s   t |tjstd|| _d S )Nzcrl_number must be an integer)r   rL   rM   rD   rN   )r'   rO   r"   r"   r#   r1     s    zDeltaCRLIndicator.__init__rN   c             C   s   t |tstS | j|jkS )N)r   r|   rP   rO   )r'   rQ   r"   r"   r#   rR     s    
zDeltaCRLIndicator.__eq__c             C   s
   | |k S )Nr"   )r'   rQ   r"   r"   r#   rS     s    zDeltaCRLIndicator.__ne__c             C   s
   t | jS )N)rT   rO   )r'   r"   r"   r#   rU     s    zDeltaCRLIndicator.__hash__c             C   s
   dj | S )Nz.<DeltaCRLIndicator(crl_number={0.crl_number})>)r@   )r'   r"   r"   r#   rG     s    zDeltaCRLIndicator.__repr__N)r5   r6   r7   r   ZDELTA_CRL_INDICATORr2   r1   r   rV   rO   rR   rS   rU   rG   r"   r"   r"   r#   r|     s   
r|   c               @   sH   e Zd ZejZdd Zed\ZZ	Z
dd Zdd Zdd	 Zd
d ZdS )CRLDistributionPointsc             C   s,   t |}tdd |D s"td|| _d S )Nc             s   s   | ]}t |tV  qd S )N)r   DistributionPoint)rX   rY   r"   r"   r#   rZ     s    z1CRLDistributionPoints.__init__.<locals>.<genexpr>z?distribution_points must be a list of DistributionPoint objects)r[   r\   rD   _distribution_points)r'   distribution_pointsr"   r"   r#   r1     s    zCRLDistributionPoints.__init__r   c             C   s   dj | jS )Nz<CRLDistributionPoints({})>)r@   r   )r'   r"   r"   r#   rG     s    zCRLDistributionPoints.__repr__c             C   s   t |tstS | j|jkS )N)r   r}   rP   r   )r'   rQ   r"   r"   r#   rR     s    
zCRLDistributionPoints.__eq__c             C   s
   | |k S )Nr"   )r'   rQ   r"   r"   r#   rS     s    zCRLDistributionPoints.__ne__c             C   s   t t| jS )N)rT   rk   r   )r'   r"   r"   r#   rU     s    zCRLDistributionPoints.__hash__N)r5   r6   r7   r   ZCRL_DISTRIBUTION_POINTSr2   r1   r.   rH   rI   rJ   rG   rR   rS   rU   r"   r"   r"   r#   r}     s   r}   c               @   sH   e Zd ZejZdd Zed\ZZ	Z
dd Zdd Zdd	 Zd
d ZdS )FreshestCRLc             C   s,   t |}tdd |D s"td|| _d S )Nc             s   s   | ]}t |tV  qd S )N)r   r~   )rX   rY   r"   r"   r#   rZ     s    z'FreshestCRL.__init__.<locals>.<genexpr>z?distribution_points must be a list of DistributionPoint objects)r[   r\   rD   r   )r'   r   r"   r"   r#   r1     s    zFreshestCRL.__init__r   c             C   s   dj | jS )Nz<FreshestCRL({})>)r@   r   )r'   r"   r"   r#   rG     s    zFreshestCRL.__repr__c             C   s   t |tstS | j|jkS )N)r   r   rP   r   )r'   rQ   r"   r"   r#   rR     s    
zFreshestCRL.__eq__c             C   s
   | |k S )Nr"   )r'   rQ   r"   r"   r#   rS     s    zFreshestCRL.__ne__c             C   s   t t| jS )N)rT   rk   r   )r'   r"   r"   r#   rU     s    zFreshestCRL.__hash__N)r5   r6   r7   r   ZFRESHEST_CRLr2   r1   r.   rH   rI   rJ   rG   rR   rS   rU   r"   r"   r"   r#   r     s   r   c               @   s\   e Zd Zdd Zdd Zdd Zdd Zd	d
 Zej	dZ
ej	dZej	dZej	dZdS )r~   c             C   s   |r|rt d|r6t|}tdd |D s6td|rLt|tsLtd|rrt|}tdd |D srtd|rt|t stdd |D  rtd	|rtj|kstj	|krt d
|r| r|p| rt d|| _
|| _|| _|| _d S )NzOYou cannot provide both full_name and relative_name, at least one must be None.c             s   s   | ]}t |tV  qd S )N)r   r   )rX   rY   r"   r"   r#   rZ   
  s    z-DistributionPoint.__init__.<locals>.<genexpr>z/full_name must be a list of GeneralName objectsz1relative_name must be a RelativeDistinguishedNamec             s   s   | ]}t |tV  qd S )N)r   r   )rX   rY   r"   r"   r#   rZ     s    z2crl_issuer must be None or a list of general namesc             s   s   | ]}t |tV  qd S )N)r   ReasonFlags)rX   rY   r"   r"   r#   rZ     s    z0reasons must be None or frozenset of ReasonFlagszLunspecified and remove_from_crl are not valid reasons in a DistributionPointzPYou must supply crl_issuer, full_name, or relative_name when reasons is not None)r   r[   r\   rD   r   r   	frozensetr   unspecifiedremove_from_crl
_full_name_relative_name_reasons_crl_issuer)r'   	full_namerelative_namereasons
crl_issuerr"   r"   r#   r1     s@    


zDistributionPoint.__init__c             C   s
   dj | S )Nz}<DistributionPoint(full_name={0.full_name}, relative_name={0.relative_name}, reasons={0.reasons}, crl_issuer={0.crl_issuer})>)r@   )r'   r"   r"   r#   rG   5  s    zDistributionPoint.__repr__c             C   s>   t |tstS | j|jko<| j|jko<| j|jko<| j|jkS )N)r   r~   rP   r   r   r   r   )r'   rQ   r"   r"   r#   rR   <  s    
zDistributionPoint.__eq__c             C   s
   | |k S )Nr"   )r'   rQ   r"   r"   r#   rS   G  s    zDistributionPoint.__ne__c             C   sH   | j d k	rt| j }nd }| jd k	r0t| j}nd }t|| j| j|fS )N)r   rk   r   rT   r   r   )r'   fnr   r"   r"   r#   rU   J  s    

zDistributionPoint.__hash__r   r   r   r   N)r5   r6   r7   r1   rG   rR   rS   rU   r   rV   r   r   r   r   r"   r"   r"   r#   r~      s   4


r~   c               @   s4   e Zd ZdZdZdZdZdZdZdZ	dZ
d	Zd
ZdS )r   r   ZkeyCompromiseZcACompromiseZaffiliationChanged
supersededZcessationOfOperationZcertificateHoldZprivilegeWithdrawnZaACompromiseZremoveFromCRLN)r5   r6   r7   r   Zkey_compromiseZca_compromiseZaffiliation_changedr   Zcessation_of_operationZcertificate_holdZprivilege_withdrawnZaa_compromiser   r"   r"   r"   r#   r   ]  s   r   c               @   sN   e Zd ZejZdd Zdd Zdd Zdd Z	d	d
 Z
ejdZejdZdS )PolicyConstraintsc             C   sd   |d k	rt |tj rtd|d k	r<t |tj r<td|d krT|d krTtd|| _|| _d S )Nz>require_explicit_policy must be a non-negative integer or Nonez=inhibit_policy_mapping must be a non-negative integer or NonezSAt least one of require_explicit_policy and inhibit_policy_mapping must not be None)r   rL   rM   rD   r   _require_explicit_policy_inhibit_policy_mapping)r'   require_explicit_policyinhibit_policy_mappingr"   r"   r#   r1   n  s    

zPolicyConstraints.__init__c             C   s
   dj | S )Nz{<PolicyConstraints(require_explicit_policy={0.require_explicit_policy}, inhibit_policy_mapping={0.inhibit_policy_mapping})>)r@   )r'   r"   r"   r#   rG     s    zPolicyConstraints.__repr__c             C   s&   t |tstS | j|jko$| j|jkS )N)r   r   rP   r   r   )r'   rQ   r"   r"   r#   rR     s    
zPolicyConstraints.__eq__c             C   s
   | |k S )Nr"   )r'   rQ   r"   r"   r#   rS     s    zPolicyConstraints.__ne__c             C   s   t | j| jfS )N)rT   r   r   )r'   r"   r"   r#   rU     s    zPolicyConstraints.__hash__r   r   N)r5   r6   r7   r   ZPOLICY_CONSTRAINTSr2   r1   rG   rR   rS   rU   r   rV   r   r   r"   r"   r"   r#   r   j  s   	r   c               @   sH   e Zd ZejZdd Zed\ZZ	Z
dd Zdd Zdd	 Zd
d ZdS )CertificatePoliciesc             C   s,   t |}tdd |D s"td|| _d S )Nc             s   s   | ]}t |tV  qd S )N)r   PolicyInformation)rX   rY   r"   r"   r#   rZ     s    z/CertificatePolicies.__init__.<locals>.<genexpr>z;Every item in the policies list must be a PolicyInformation)r[   r\   rD   	_policies)r'   Zpoliciesr"   r"   r#   r1     s
    zCertificatePolicies.__init__r   c             C   s   dj | jS )Nz<CertificatePolicies({})>)r@   r   )r'   r"   r"   r#   rG     s    zCertificatePolicies.__repr__c             C   s   t |tstS | j|jkS )N)r   r   rP   r   )r'   rQ   r"   r"   r#   rR     s    
zCertificatePolicies.__eq__c             C   s
   | |k S )Nr"   )r'   rQ   r"   r"   r#   rS     s    zCertificatePolicies.__ne__c             C   s   t t| jS )N)rT   rk   r   )r'   r"   r"   r#   rU     s    zCertificatePolicies.__hash__N)r5   r6   r7   r   ZCERTIFICATE_POLICIESr2   r1   r.   rH   rI   rJ   rG   rR   rS   rU   r"   r"   r"   r#   r     s   
r   c               @   sH   e Zd Zdd Zdd Zdd Zdd Zd	d
 Zej	dZ
ej	dZdS )r   c             C   sH   t |tstd|| _|r>t|}tdd |D s>td|| _d S )Nz-policy_identifier must be an ObjectIdentifierc             s   s   | ]}t |tjtfV  qd S )N)r   rL   	text_type
UserNotice)rX   rY   r"   r"   r#   rZ     s   z-PolicyInformation.__init__.<locals>.<genexpr>zMpolicy_qualifiers must be a list of strings and/or UserNotice objects or None)r   r   rD   _policy_identifierr[   r\   _policy_qualifiers)r'   policy_identifierpolicy_qualifiersr"   r"   r#   r1     s    

zPolicyInformation.__init__c             C   s
   dj | S )Nze<PolicyInformation(policy_identifier={0.policy_identifier}, policy_qualifiers={0.policy_qualifiers})>)r@   )r'   r"   r"   r#   rG     s    zPolicyInformation.__repr__c             C   s&   t |tstS | j|jko$| j|jkS )N)r   r   rP   r   r   )r'   rQ   r"   r"   r#   rR     s    
zPolicyInformation.__eq__c             C   s
   | |k S )Nr"   )r'   rQ   r"   r"   r#   rS     s    zPolicyInformation.__ne__c             C   s(   | j d k	rt| j }nd }t| j|fS )N)r   rk   rT   r   )r'   Zpqr"   r"   r#   rU     s    
zPolicyInformation.__hash__r   r   N)r5   r6   r7   r1   rG   rR   rS   rU   r   rV   r   r   r"   r"   r"   r#   r     s   	
r   c               @   sH   e Zd Zdd Zdd Zdd Zdd Zd	d
 Zej	dZ
ej	dZdS )r   c             C   s(   |rt |t rtd|| _|| _d S )Nz2notice_reference must be None or a NoticeReference)r   NoticeReferencerD   _notice_reference_explicit_text)r'   notice_referenceexplicit_textr"   r"   r#   r1     s    
zUserNotice.__init__c             C   s
   dj | S )NzV<UserNotice(notice_reference={0.notice_reference}, explicit_text={0.explicit_text!r})>)r@   )r'   r"   r"   r#   rG     s    zUserNotice.__repr__c             C   s&   t |tstS | j|jko$| j|jkS )N)r   r   rP   r   r   )r'   rQ   r"   r"   r#   rR     s    
zUserNotice.__eq__c             C   s
   | |k S )Nr"   )r'   rQ   r"   r"   r#   rS     s    zUserNotice.__ne__c             C   s   t | j| jfS )N)rT   r   r   )r'   r"   r"   r#   rU     s    zUserNotice.__hash__r   r   N)r5   r6   r7   r1   rG   rR   rS   rU   r   rV   r   r   r"   r"   r"   r#   r     s   	
r   c               @   sH   e Zd Zdd Zdd Zdd Zdd Zd	d
 Zej	dZ
ej	dZdS )r   c             C   s2   || _ t|}tdd |D s(td|| _d S )Nc             s   s   | ]}t |tV  qd S )N)r   int)rX   rY   r"   r"   r#   rZ   "  s    z+NoticeReference.__init__.<locals>.<genexpr>z)notice_numbers must be a list of integers)_organizationr[   r\   rD   _notice_numbers)r'   organizationnotice_numbersr"   r"   r#   r1     s    zNoticeReference.__init__c             C   s
   dj | S )NzU<NoticeReference(organization={0.organization!r}, notice_numbers={0.notice_numbers})>)r@   )r'   r"   r"   r#   rG   )  s    zNoticeReference.__repr__c             C   s&   t |tstS | j|jko$| j|jkS )N)r   r   rP   r   r   )r'   rQ   r"   r"   r#   rR   /  s    
zNoticeReference.__eq__c             C   s
   | |k S )Nr"   )r'   rQ   r"   r"   r#   rS   8  s    zNoticeReference.__ne__c             C   s   t | jt| jfS )N)rT   r   rk   r   )r'   r"   r"   r#   rU   ;  s    zNoticeReference.__hash__r   r   N)r5   r6   r7   r1   rG   rR   rS   rU   r   rV   r   r   r"   r"   r"   r#   r     s   
	
r   c               @   sH   e Zd ZejZdd Zed\ZZ	Z
dd Zdd Zdd	 Zd
d ZdS )ExtendedKeyUsagec             C   s,   t |}tdd |D s"td|| _d S )Nc             s   s   | ]}t |tV  qd S )N)r   r   )rX   rY   r"   r"   r#   rZ   H  s    z,ExtendedKeyUsage.__init__.<locals>.<genexpr>z9Every item in the usages list must be an ObjectIdentifier)r[   r\   rD   _usages)r'   Zusagesr"   r"   r#   r1   F  s
    zExtendedKeyUsage.__init__r   c             C   s   dj | jS )Nz<ExtendedKeyUsage({})>)r@   r   )r'   r"   r"   r#   rG   Q  s    zExtendedKeyUsage.__repr__c             C   s   t |tstS | j|jkS )N)r   r   rP   r   )r'   rQ   r"   r"   r#   rR   T  s    
zExtendedKeyUsage.__eq__c             C   s
   | |k S )Nr"   )r'   rQ   r"   r"   r#   rS   Z  s    zExtendedKeyUsage.__ne__c             C   s   t t| jS )N)rT   rk   r   )r'   r"   r"   r#   rU   ]  s    zExtendedKeyUsage.__hash__N)r5   r6   r7   r   ZEXTENDED_KEY_USAGEr2   r1   r.   rH   rI   rJ   rG   rR   rS   rU   r"   r"   r"   r#   r   B  s   	r   c               @   s2   e Zd ZejZdd Zdd Zdd Zdd Z	d	S )
OCSPNoCheckc             C   s   t |tstS dS )NT)r   r   rP   )r'   rQ   r"   r"   r#   rR   e  s    
zOCSPNoCheck.__eq__c             C   s
   | |k S )Nr"   )r'   rQ   r"   r"   r#   rS   k  s    zOCSPNoCheck.__ne__c             C   s   t tS )N)rT   r   )r'   r"   r"   r#   rU   n  s    zOCSPNoCheck.__hash__c             C   s   dS )Nz<OCSPNoCheck()>r"   )r'   r"   r"   r#   rG   q  s    zOCSPNoCheck.__repr__N)
r5   r6   r7   r   ZOCSP_NO_CHECKr2   rR   rS   rU   rG   r"   r"   r"   r#   r   a  s
   r   c               @   s2   e Zd ZejZdd Zdd Zdd Zdd Z	d	S )
PrecertPoisonc             C   s   t |tstS dS )NT)r   r   rP   )r'   rQ   r"   r"   r#   rR   y  s    
zPrecertPoison.__eq__c             C   s
   | |k S )Nr"   )r'   rQ   r"   r"   r#   rS     s    zPrecertPoison.__ne__c             C   s   t tS )N)rT   r   )r'   r"   r"   r#   rU     s    zPrecertPoison.__hash__c             C   s   dS )Nz<PrecertPoison()>r"   )r'   r"   r"   r#   rG     s    zPrecertPoison.__repr__N)
r5   r6   r7   r   ZPRECERT_POISONr2   rR   rS   rU   rG   r"   r"   r"   r#   r   u  s
   r   c               @   sH   e Zd ZejZdd Zed\ZZ	Z
dd Zdd Zdd	 Zd
d ZdS )
TLSFeaturec             C   s:   t |}tdd |D  s(t|dkr0td|| _d S )Nc             s   s   | ]}t |tV  qd S )N)r   TLSFeatureType)rX   rY   r"   r"   r#   rZ     s    z&TLSFeature.__init__.<locals>.<genexpr>r   z@features must be a list of elements from the TLSFeatureType enum)r[   r\   r%   rD   	_features)r'   featuresr"   r"   r#   r1     s    zTLSFeature.__init__r   c             C   s
   dj | S )Nz$<TLSFeature(features={0._features})>)r@   )r'   r"   r"   r#   rG     s    zTLSFeature.__repr__c             C   s   t |tstS | j|jkS )N)r   r   rP   r   )r'   rQ   r"   r"   r#   rR     s    
zTLSFeature.__eq__c             C   s
   | |k S )Nr"   )r'   rQ   r"   r"   r#   rS     s    zTLSFeature.__ne__c             C   s   t t| jS )N)rT   rk   r   )r'   r"   r"   r#   rU     s    zTLSFeature.__hash__N)r5   r6   r7   r   ZTLS_FEATUREr2   r1   r.   rH   rI   rJ   rG   rR   rS   rU   r"   r"   r"   r#   r     s   r   c               @   s   e Zd ZdZdZdS )r         N)r5   r6   r7   Zstatus_requestZstatus_request_v2r"   r"   r"   r#   r     s   r   c             C   s   i | ]}||j qS r"   )rE   )rX   rY   r"   r"   r#   
<dictcomp>  s    r   c               @   sD   e Zd ZejZdd Zdd Zdd Zdd Z	d	d
 Z
ejdZdS )InhibitAnyPolicyc             C   s.   t |tjstd|dk r$td|| _d S )Nzskip_certs must be an integerr   z)skip_certs must be a non-negative integer)r   rL   rM   rD   r   _skip_certs)r'   
skip_certsr"   r"   r#   r1     s
    zInhibitAnyPolicy.__init__c             C   s
   dj | S )Nz-<InhibitAnyPolicy(skip_certs={0.skip_certs})>)r@   )r'   r"   r"   r#   rG     s    zInhibitAnyPolicy.__repr__c             C   s   t |tstS | j|jkS )N)r   r   rP   r   )r'   rQ   r"   r"   r#   rR     s    
zInhibitAnyPolicy.__eq__c             C   s
   | |k S )Nr"   )r'   rQ   r"   r"   r#   rS     s    zInhibitAnyPolicy.__ne__c             C   s
   t | jS )N)rT   r   )r'   r"   r"   r#   rU     s    zInhibitAnyPolicy.__hash__r   N)r5   r6   r7   r   ZINHIBIT_ANY_POLICYr2   r1   rG   rR   rS   rU   r   rV   r   r"   r"   r"   r#   r     s   	r   c               @   s   e Zd ZejZdd ZejdZ	ejdZ
ejdZejdZejdZejdZejd	Zed
d Zedd Zdd Zdd Zdd Zdd ZdS )KeyUsagec
       
      C   sP   | r|s|	rt d|| _|| _|| _|| _|| _|| _|| _|| _|	| _	d S )NzKencipher_only and decipher_only can only be true when key_agreement is true)
r   _digital_signature_content_commitment_key_encipherment_data_encipherment_key_agreement_key_cert_sign	_crl_sign_encipher_only_decipher_only)
r'   digital_signaturecontent_commitmentkey_enciphermentdata_enciphermentkey_agreementkey_cert_signcrl_signencipher_onlydecipher_onlyr"   r"   r#   r1     s    zKeyUsage.__init__r   r   r   r   r   r   r   c             C   s   | j stdn| jS d S )Nz7encipher_only is undefined unless key_agreement is true)r   r   r   )r'   r"   r"   r#   r     s    zKeyUsage.encipher_onlyc             C   s   | j stdn| jS d S )Nz7decipher_only is undefined unless key_agreement is true)r   r   r   )r'   r"   r"   r#   r     s    zKeyUsage.decipher_onlyc             C   s<   y| j }| j}W n tk
r,   d }d }Y nX dj| ||S )Na-  <KeyUsage(digital_signature={0.digital_signature}, content_commitment={0.content_commitment}, key_encipherment={0.key_encipherment}, data_encipherment={0.data_encipherment}, key_agreement={0.key_agreement}, key_cert_sign={0.key_cert_sign}, crl_sign={0.crl_sign}, encipher_only={1}, decipher_only={2})>)r   r   r   r@   )r'   r   r   r"   r"   r#   rG   
  s    

zKeyUsage.__repr__c             C   sz   t |tstS | j|jkox| j|jkox| j|jkox| j|jkox| j|jkox| j|jkox| j	|j	kox| j
|j
kox| j|jkS )N)r   r   rP   r   r   r   r   r   r   r   r   r   )r'   rQ   r"   r"   r#   rR     s    
zKeyUsage.__eq__c             C   s
   | |k S )Nr"   )r'   rQ   r"   r"   r#   rS   +  s    zKeyUsage.__ne__c          
   C   s,   t | j| j| j| j| j| j| j| j| j	f	S )N)
rT   r   r   r   r   r   r   r   r   r   )r'   r"   r"   r#   rU   .  s    zKeyUsage.__hash__N)r5   r6   r7   r   Z	KEY_USAGEr2   r1   r   rV   r   r   r   r   r   r   r   propertyr   r   rG   rR   rS   rU   r"   r"   r"   r#   r     s   






		r   c               @   sV   e Zd ZejZdd Zdd Zdd Zdd Z	d	d
 Z
dd ZejdZejdZdS )NameConstraintsc             C   s   |d k	r4t |}tdd |D s*td| j| |d k	rht |}tdd |D s^td| j| |d kr|d krtd|| _|| _d S )Nc             s   s   | ]}t |tV  qd S )N)r   r   )rX   rY   r"   r"   r#   rZ   @  s    z+NameConstraints.__init__.<locals>.<genexpr>z@permitted_subtrees must be a list of GeneralName objects or Nonec             s   s   | ]}t |tV  qd S )N)r   r   )rX   rY   r"   r"   r#   rZ   L  s    z?excluded_subtrees must be a list of GeneralName objects or NonezIAt least one of permitted_subtrees and excluded_subtrees must not be None)r[   r\   rD   _validate_ip_namer   _permitted_subtrees_excluded_subtrees)r'   permitted_subtreesexcluded_subtreesr"   r"   r#   r1   <  s&    

zNameConstraints.__init__c             C   s&   t |tstS | j|jko$| j|jkS )N)r   r   rP   r   r   )r'   rQ   r"   r"   r#   rR   ^  s    
zNameConstraints.__eq__c             C   s
   | |k S )Nr"   )r'   rQ   r"   r"   r#   rS   g  s    zNameConstraints.__ne__c             C   s   t dd |D rtdd S )Nc             s   s.   | ]&}t |to$t |jtjtjf V  qd S )N)r   r   rE   	ipaddressIPv4NetworkIPv6Network)rX   namer"   r"   r#   rZ   k  s   z4NameConstraints._validate_ip_name.<locals>.<genexpr>zGIPAddress name constraints must be an IPv4Network or IPv6Network object)anyrD   )r'   treer"   r"   r#   r   j  s    
z!NameConstraints._validate_ip_namec             C   s
   dj | S )Nze<NameConstraints(permitted_subtrees={0.permitted_subtrees}, excluded_subtrees={0.excluded_subtrees})>)r@   )r'   r"   r"   r#   rG   s  s    zNameConstraints.__repr__c             C   s@   | j d k	rt| j }nd }| jd k	r0t| j}nd }t||fS )N)r   rk   r   rT   )r'   Zpsesr"   r"   r#   rU   y  s    

zNameConstraints.__hash__r   r   N)r5   r6   r7   r   ZNAME_CONSTRAINTSr2   r1   rR   rS   r   rG   rU   r   rV   r   r   r"   r"   r"   r#   r   8  s   "		
r   c               @   sR   e Zd Zdd ZejdZejdZejdZdd Z	dd	 Z
d
d Zdd ZdS )	Extensionc             C   s:   t |tstdt |ts$td|| _|| _|| _d S )Nz2oid argument must be an ObjectIdentifier instance.z critical must be a boolean value)r   r   rD   rw   _oid	_critical_value)r'   r2   criticalrE   r"   r"   r#   r1     s    

zExtension.__init__r   r   r   c             C   s
   dj | S )Nz@<Extension(oid={0.oid}, critical={0.critical}, value={0.value})>)r@   )r'   r"   r"   r#   rG     s    zExtension.__repr__c             C   s2   t |tstS | j|jko0| j|jko0| j|jkS )N)r   r   rP   r2   r   rE   )r'   rQ   r"   r"   r#   rR     s
    
zExtension.__eq__c             C   s
   | |k S )Nr"   )r'   rQ   r"   r"   r#   rS     s    zExtension.__ne__c             C   s   t | j| j| jfS )N)rT   r2   r   rE   )r'   r"   r"   r#   rU     s    zExtension.__hash__N)r5   r6   r7   r1   r   rV   r2   r   rE   rG   rR   rS   rU   r"   r"   r"   r#   r     s   



r   c               @   sJ   e Zd Zdd Zed\ZZZdd Zdd Z	dd	 Z
d
d Zdd ZdS )GeneralNamesc             C   s,   t |}tdd |D s"td|| _d S )Nc             s   s   | ]}t |tV  qd S )N)r   r   )rX   rY   r"   r"   r#   rZ     s    z(GeneralNames.__init__.<locals>.<genexpr>z^Every item in the general_names list must be an object conforming to the GeneralName interface)r[   r\   rD   _general_names)r'   general_namesr"   r"   r#   r1     s
    zGeneralNames.__init__r   c                s0    fdd| D } t kr(dd |D }t|S )Nc             3   s   | ]}t | r|V  qd S )N)r   )rX   i)typer"   r#   rZ     s    z3GeneralNames.get_values_for_type.<locals>.<genexpr>c             s   s   | ]}|j V  qd S )N)rE   )rX   r   r"   r"   r#   rZ     s    )r   r[   )r'   r   objsr"   )r   r#   get_values_for_type  s    z GeneralNames.get_values_for_typec             C   s   dj | jS )Nz<GeneralNames({})>)r@   r   )r'   r"   r"   r#   rG     s    zGeneralNames.__repr__c             C   s   t |tstS | j|jkS )N)r   r   rP   r   )r'   rQ   r"   r"   r#   rR     s    
zGeneralNames.__eq__c             C   s
   | |k S )Nr"   )r'   rQ   r"   r"   r#   rS     s    zGeneralNames.__ne__c             C   s   t t| jS )N)rT   rk   r   )r'   r"   r"   r#   rU     s    zGeneralNames.__hash__N)r5   r6   r7   r1   r.   rH   rI   rJ   r   rG   rR   rS   rU   r"   r"   r"   r#   r     s   		r   c               @   sP   e Zd ZejZdd Zed\ZZ	Z
dd Zdd Zdd	 Zd
d Zdd ZdS )SubjectAlternativeNamec             C   s   t || _d S )N)r   r   )r'   r   r"   r"   r#   r1     s    zSubjectAlternativeName.__init__r   c             C   s   | j j|S )N)r   r   )r'   r   r"   r"   r#   r     s    z*SubjectAlternativeName.get_values_for_typec             C   s   dj | jS )Nz<SubjectAlternativeName({})>)r@   r   )r'   r"   r"   r#   rG     s    zSubjectAlternativeName.__repr__c             C   s   t |tstS | j|jkS )N)r   r   rP   r   )r'   rQ   r"   r"   r#   rR     s    
zSubjectAlternativeName.__eq__c             C   s
   | |k S )Nr"   )r'   rQ   r"   r"   r#   rS     s    zSubjectAlternativeName.__ne__c             C   s
   t | jS )N)rT   r   )r'   r"   r"   r#   rU     s    zSubjectAlternativeName.__hash__N)r5   r6   r7   r   ZSUBJECT_ALTERNATIVE_NAMEr2   r1   r.   rH   rI   rJ   r   rG   rR   rS   rU   r"   r"   r"   r#   r     s   r   c               @   sP   e Zd ZejZdd Zed\ZZ	Z
dd Zdd Zdd	 Zd
d Zdd ZdS )IssuerAlternativeNamec             C   s   t || _d S )N)r   r   )r'   r   r"   r"   r#   r1     s    zIssuerAlternativeName.__init__r   c             C   s   | j j|S )N)r   r   )r'   r   r"   r"   r#   r     s    z)IssuerAlternativeName.get_values_for_typec             C   s   dj | jS )Nz<IssuerAlternativeName({})>)r@   r   )r'   r"   r"   r#   rG     s    zIssuerAlternativeName.__repr__c             C   s   t |tstS | j|jkS )N)r   r   rP   r   )r'   rQ   r"   r"   r#   rR     s    
zIssuerAlternativeName.__eq__c             C   s
   | |k S )Nr"   )r'   rQ   r"   r"   r#   rS     s    zIssuerAlternativeName.__ne__c             C   s
   t | jS )N)rT   r   )r'   r"   r"   r#   rU   
  s    zIssuerAlternativeName.__hash__N)r5   r6   r7   r   ZISSUER_ALTERNATIVE_NAMEr2   r1   r.   rH   rI   rJ   r   rG   rR   rS   rU   r"   r"   r"   r#   r     s   r   c               @   sP   e Zd ZejZdd Zed\ZZ	Z
dd Zdd Zdd	 Zd
d Zdd ZdS )CertificateIssuerc             C   s   t || _d S )N)r   r   )r'   r   r"   r"   r#   r1     s    zCertificateIssuer.__init__r   c             C   s   | j j|S )N)r   r   )r'   r   r"   r"   r#   r     s    z%CertificateIssuer.get_values_for_typec             C   s   dj | jS )Nz<CertificateIssuer({})>)r@   r   )r'   r"   r"   r#   rG     s    zCertificateIssuer.__repr__c             C   s   t |tstS | j|jkS )N)r   r   rP   r   )r'   rQ   r"   r"   r#   rR     s    
zCertificateIssuer.__eq__c             C   s
   | |k S )Nr"   )r'   rQ   r"   r"   r#   rS   #  s    zCertificateIssuer.__ne__c             C   s
   t | jS )N)rT   r   )r'   r"   r"   r#   rU   &  s    zCertificateIssuer.__hash__N)r5   r6   r7   r   ZCERTIFICATE_ISSUERr2   r1   r.   rH   rI   rJ   r   rG   rR   rS   rU   r"   r"   r"   r#   r     s   r   c               @   sD   e Zd ZejZdd Zdd Zdd Zdd Z	d	d
 Z
ejdZdS )	CRLReasonc             C   s   t |tstd|| _d S )Nz*reason must be an element from ReasonFlags)r   r   rD   _reason)r'   reasonr"   r"   r#   r1   .  s    
zCRLReason.__init__c             C   s   dj | jS )Nz<CRLReason(reason={})>)r@   r   )r'   r"   r"   r#   rG   4  s    zCRLReason.__repr__c             C   s   t |tstS | j|jkS )N)r   r   rP   r   )r'   rQ   r"   r"   r#   rR   7  s    
zCRLReason.__eq__c             C   s
   | |k S )Nr"   )r'   rQ   r"   r"   r#   rS   =  s    zCRLReason.__ne__c             C   s
   t | jS )N)rT   r   )r'   r"   r"   r#   rU   @  s    zCRLReason.__hash__r   N)r5   r6   r7   r   Z
CRL_REASONr2   r1   rG   rR   rS   rU   r   rV   r   r"   r"   r"   r#   r   *  s   r   c               @   sD   e Zd ZejZdd Zdd Zdd Zdd Z	d	d
 Z
ejdZdS )InvalidityDatec             C   s   t |tjstd|| _d S )Nz+invalidity_date must be a datetime.datetime)r   datetimerD   _invalidity_date)r'   invalidity_dater"   r"   r#   r1   J  s    zInvalidityDate.__init__c             C   s   dj | jS )Nz$<InvalidityDate(invalidity_date={})>)r@   r   )r'   r"   r"   r#   rG   P  s    zInvalidityDate.__repr__c             C   s   t |tstS | j|jkS )N)r   r   rP   r   )r'   rQ   r"   r"   r#   rR   U  s    
zInvalidityDate.__eq__c             C   s
   | |k S )Nr"   )r'   rQ   r"   r"   r#   rS   [  s    zInvalidityDate.__ne__c             C   s
   t | jS )N)rT   r   )r'   r"   r"   r#   rU   ^  s    zInvalidityDate.__hash__r   N)r5   r6   r7   r   ZINVALIDITY_DATEr2   r1   rG   rR   rS   rU   r   rV   r   r"   r"   r"   r#   r   F  s   r   c               @   sH   e Zd ZejZdd Zed\ZZ	Z
dd Zdd Zdd	 Zd
d ZdS ))PrecertificateSignedCertificateTimestampsc             C   s,   t |}tdd |D s"td|| _d S )Nc             s   s   | ]}t |tV  qd S )N)r   r   )rX   Zsctr"   r"   r#   rZ   k  s   zEPrecertificateSignedCertificateTimestamps.__init__.<locals>.<genexpr>zYEvery item in the signed_certificate_timestamps list must be a SignedCertificateTimestamp)r[   r\   rD   _signed_certificate_timestamps)r'   Zsigned_certificate_timestampsr"   r"   r#   r1   h  s    
z2PrecertificateSignedCertificateTimestamps.__init__r   c             C   s   dj t| S )Nz/<PrecertificateSignedCertificateTimestamps({})>)r@   r[   )r'   r"   r"   r#   rG   x  s    z2PrecertificateSignedCertificateTimestamps.__repr__c             C   s   t t| jS )N)rT   rk   r   )r'   r"   r"   r#   rU     s    z2PrecertificateSignedCertificateTimestamps.__hash__c             C   s   t |tstS | j|jkS )N)r   r   rP   r   )r'   rQ   r"   r"   r#   rR     s    
z0PrecertificateSignedCertificateTimestamps.__eq__c             C   s
   | |k S )Nr"   )r'   rQ   r"   r"   r#   rS     s    z0PrecertificateSignedCertificateTimestamps.__ne__N)r5   r6   r7   r   Z%PRECERT_SIGNED_CERTIFICATE_TIMESTAMPSr2   r1   r.   rH   rI   rJ   rG   rU   rR   rS   r"   r"   r"   r#   r   d  s   	r   c               @   sD   e Zd ZejZdd Zdd Zdd Zdd Z	d	d
 Z
ejdZdS )	OCSPNoncec             C   s   t |tstd|| _d S )Nznonce must be bytes)r   bytesrD   _nonce)r'   noncer"   r"   r#   r1     s    
zOCSPNonce.__init__c             C   s   t |tstS | j|jkS )N)r   r   rP   r   )r'   rQ   r"   r"   r#   rR     s    
zOCSPNonce.__eq__c             C   s
   | |k S )Nr"   )r'   rQ   r"   r"   r#   rS     s    zOCSPNonce.__ne__c             C   s
   t | jS )N)rT   r   )r'   r"   r"   r#   rU     s    zOCSPNonce.__hash__c             C   s
   dj | S )Nz<OCSPNonce(nonce={0.nonce!r})>)r@   )r'   r"   r"   r#   rG     s    zOCSPNonce.__repr__r   N)r5   r6   r7   r   ZNONCEr2   r1   rR   rS   rU   rG   r   rV   r   r"   r"   r"   r#   r     s   r   c               @   s   e Zd ZejZdd Zdd Zdd Zdd Z	d	d
 Z
ejdZejdZejdZejdZejdZejdZejdZdS )IssuingDistributionPointc       	      C   s   |r,t |t s$tdd |D  r,td|rLtj|ksDtj|krLtdt |tort |tort |tort |ts|td||||g}t	dd |D dkrtd	t
|||||||gstd
|| _|| _|| _|| _|| _|| _|| _d S )Nc             s   s   | ]}t |tV  qd S )N)r   r   )rX   rY   r"   r"   r#   rZ     s    z4IssuingDistributionPoint.__init__.<locals>.<genexpr>z:only_some_reasons must be None or frozenset of ReasonFlagszTunspecified and remove_from_crl are not valid reasons in an IssuingDistributionPointzuonly_contains_user_certs, only_contains_ca_certs, indirect_crl and only_contains_attribute_certs must all be boolean.c             S   s   g | ]}|r|qS r"   r"   )rX   rY   r"   r"   r#   
<listcomp>  s    z5IssuingDistributionPoint.__init__.<locals>.<listcomp>   zOnly one of the following can be set to True: only_contains_user_certs, only_contains_ca_certs, indirect_crl, only_contains_attribute_certszCannot create empty extension: if only_contains_user_certs, only_contains_ca_certs, indirect_crl, and only_contains_attribute_certs are all False, then either full_name, relative_name, or only_some_reasons must have a value.)r   r   r\   rD   r   r   r   r   rw   r%   r   _only_contains_user_certs_only_contains_ca_certs_indirect_crl_only_contains_attribute_certs_only_some_reasonsr   r   )	r'   r   r   only_contains_user_certsonly_contains_ca_certsonly_some_reasonsindirect_crlonly_contains_attribute_certsZcrl_constraintsr"   r"   r#   r1     sD    






z!IssuingDistributionPoint.__init__c             C   s
   dj | S )NaG  <IssuingDistributionPoint(full_name={0.full_name}, relative_name={0.relative_name}, only_contains_user_certs={0.only_contains_user_certs}, only_contains_ca_certs={0.only_contains_ca_certs}, only_some_reasons={0.only_some_reasons}, indirect_crl={0.indirect_crl}, only_contains_attribute_certs={0.only_contains_attribute_certs})>)r@   )r'   r"   r"   r#   rG     s    z!IssuingDistributionPoint.__repr__c             C   sb   t |tstS | j|jko`| j|jko`| j|jko`| j|jko`| j|jko`| j|jko`| j	|j	kS )N)
r   r   rP   r   r   r   r   r   r   r   )r'   rQ   r"   r"   r#   rR     s    
zIssuingDistributionPoint.__eq__c             C   s
   | |k S )Nr"   )r'   rQ   r"   r"   r#   rS     s    zIssuingDistributionPoint.__ne__c             C   s$   t | j| j| j| j| j| j| jfS )N)rT   r   r   r   r   r   r   r   )r'   r"   r"   r#   rU     s    z!IssuingDistributionPoint.__hash__r   r   r   r   r   r   r   N)r5   r6   r7   r   ZISSUING_DISTRIBUTION_POINTr2   r1   rG   rR   rS   rU   r   rV   r   r   r   r   r   r   r   r"   r"   r"   r#   r     s    F



r   c               @   sH   e Zd Zdd ZejdZejdZdd Zdd Z	d	d
 Z
dd ZdS )rC   c             C   s"   t |tstd|| _|| _d S )Nzoid must be an ObjectIdentifier)r   r   rD   r   r   )r'   r2   rE   r"   r"   r#   r1   /  s    
zUnrecognizedExtension.__init__r   r   c             C   s
   dj | S )Nz7<UnrecognizedExtension(oid={0.oid}, value={0.value!r})>)r@   )r'   r"   r"   r#   rG   8  s    zUnrecognizedExtension.__repr__c             C   s&   t |tstS | j|jko$| j|jkS )N)r   rC   rP   r2   rE   )r'   rQ   r"   r"   r#   rR   ?  s    
zUnrecognizedExtension.__eq__c             C   s
   | |k S )Nr"   )r'   rQ   r"   r"   r#   rS   E  s    zUnrecognizedExtension.__ne__c             C   s   t | j| jfS )N)rT   r2   rE   )r'   r"   r"   r#   rU   H  s    zUnrecognizedExtension.__hash__N)r5   r6   r7   r1   r   rV   r2   rE   rG   rR   rS   rU   r"   r"   r"   r#   rC   -  s   

rC   )V
__future__r   r   r   r;   r   r   r   rh   enumr   rL   Zcryptographyr   Zcryptography.hazmat._derr   r   r	   r
   Zcryptography.hazmat.primitivesr   r   Z,cryptography.hazmat.primitives.asymmetric.ecr   Z-cryptography.hazmat.primitives.asymmetric.rsar   Z*cryptography.x509.certificate_transparencyr   Zcryptography.x509.general_namer   r   r   Zcryptography.x509.namer   Zcryptography.x509.oidr   r   r   r   r$   r.   	Exceptionr/   r9   add_metaclassABCMetaobjectr:   r=   Zregister_interfacerK   rW   rg   ro   rp   rv   r|   r}   r   r~   r   r   r   r   r   r   r   r   r   r   r   Z_TLS_FEATURE_TYPE_TO_ENUMr   r   r   r   r   r   r   r   r   r   r   r   r   rC   r"   r"   r"   r#   <module>   s   (#f$)##]<2%$"^Q'%* 