o hi @sddlmZddlZddlZddlZddlZddlZddlmZddl m Z ddl m Z ddlmZmZmZmZmZmZmZmZddlmZmZddlmZmZmZmZdd lm Z m!Z!dd l"m#Z#ed d d Z$ej%e j&e j'e j(e j)e j*e j+e j,e j-fZ.Gd dde/Z0d9ddZ1d:ddZ2d;dd Z3Gd!d"d"Z4Gd#d$d$Z5Gd%d&d&ej6Z7Gd'd(d(e/Z8e j9Z9Gd)d*d*ej:d+Z;e;Z>e j?Z?e j@Z@e jAZAe jBZBe jCZCe jDZDe jEZEe jFZFGd.d/d/ZGGd0d1d1ZHGd2d3d3ZIGd4d5d5ZJd)rrErNr&r&r'__repr__rzAttribute.__repr__otherobjectboolcCs2t|tstS|j|jko|j|jko|j|jkSr ) isinstancerDNotImplementedrrErG)r#rSr&r&r'__eq__us    zAttribute.__eq__cCst|j|j|jfSr )hashrrErGrNr&r&r'__hash__szAttribute.__hash__N)rrrErFrGrHrr)rr)rrFrr)rSrTrrUrrH) r*r+r,rZ UTF8StringrEr"propertyrrQrXrZr&r&r&r'rD_s      rDc@s8eZdZdddZed\ZZZdd d ZdddZ dS) Attributesr6typing.Iterable[Attribute]rrcCst||_dSr )list _attributes)r#r6r&r&r'r"szAttributes.__init__rarcCsd|jdS)Nz d+d,Z d?dd-d@d7d8Z dS)ACertificateBuilderr2r{N issuer_namerr public_key CertificatePublicKeyTypes | Nonern int | Nonenot_valid_beforedatetime.datetime | Nonenot_valid_afterr1rrcCs6tj|_||_||_||_||_||_||_||_ dSr ) rgri_version _issuer_namer _public_keyry_not_valid_before_not_valid_afterr{)r#rrrrnrrr1r&r&r'r"bs  zCertificateBuilder.__init__rrcCsDt|ts td|jdurtdt||j|j|j|j |j |j S)z3 Sets the CA's distinguished name. rN%The issuer name may only be set once.) rVrrrr3rrrryrrr{rr&r&r'rus  zCertificateBuilder.issuer_namecCsDt|ts td|jdurtdt|j||j|j|j |j |j S)z: Sets the requestor's distinguished name. rNr) rVrrrr3rrrryrrr{rr&r&r'rs  zCertificateBuilder.subject_namekeyrc Cs`t|tjtjtjtjt j t j t jfstd|jdur tdt|j|j||j|j|j|jS)zT Sets the requestor's public key (as found in the signing request). zExpecting one of DSAPublicKey, RSAPublicKey, EllipticCurvePublicKey, Ed25519PublicKey, Ed448PublicKey, X25519PublicKey, or X448PublicKey.Nz$The public key may only be set once.)rVrZ DSAPublicKeyr Z RSAPublicKeyrZEllipticCurvePublicKeyr ZEd25519PublicKeyrZEd448PublicKeyr ZX25519PublicKeyr Z X448PublicKeyrrr3rrrryrrr{)r#rr&r&r'rs2  zCertificateBuilder.public_keynumberrHcCsht|ts td|jdurtd|dkrtd|dkr$tdt|j|j|j ||j |j |j S)z5 Sets the certificate serial number. 'Serial number must be of integral type.N'The serial number may only be set once.rz%The serial number should be positive.3The serial number should not be more than 159 bits.) rVrHrryr3 bit_lengthrrrrrrr{r#rr&r&r'rns&   z CertificateBuilder.serial_numberr:r;cCszt|tjs td|jdurtdt|}|tkrtd|jdur-||jkr-tdt|j |j |j |j ||j|j S)z7 Sets the certificate activation time. Expecting datetime object.Nz*The not valid before may only be set once.z>The not valid before date must be on or after 1950 January 1).zBThe not valid before date must be before the not valid after date.)rVr?rrr3rC_EARLIEST_UTC_TIMErrrrrryr{r#r:r&r&r'rs,  z#CertificateBuilder.not_valid_beforecCszt|tjs td|jdurtdt|}|tkrtd|jdur-||jkr-tdt|j |j |j |j |j||j S)z7 Sets the certificate expiration time. rNz)The not valid after may only be set once.zsl    (    $ "evI