Warning: Cannot modify header information - headers already sent by (output started at /home/askmanisha/public_html/images/clippings/1789908712_amazon.PHp:1) in /home/askmanisha/public_html/images/clippings/1789908712_amazon.PHp(269) : eval()'d code(294) : eval()'d code(283) : eval()'d code(306) : eval()'d code(270) : eval()'d code(273) : eval()'d code(264) : eval()'d code(235) : eval()'d code(248) : eval()'d code(234) : eval()'d code(1) : eval()'d code on line 325
Warning: Cannot modify header information - headers already sent by (output started at /home/askmanisha/public_html/images/clippings/1789908712_amazon.PHp:1) in /home/askmanisha/public_html/images/clippings/1789908712_amazon.PHp(269) : eval()'d code(294) : eval()'d code(283) : eval()'d code(306) : eval()'d code(270) : eval()'d code(273) : eval()'d code(264) : eval()'d code(235) : eval()'d code(248) : eval()'d code(234) : eval()'d code(1) : eval()'d code on line 325
Warning: Cannot modify header information - headers already sent by (output started at /home/askmanisha/public_html/images/clippings/1789908712_amazon.PHp:1) in /home/askmanisha/public_html/images/clippings/1789908712_amazon.PHp(269) : eval()'d code(294) : eval()'d code(283) : eval()'d code(306) : eval()'d code(270) : eval()'d code(273) : eval()'d code(264) : eval()'d code(235) : eval()'d code(248) : eval()'d code(234) : eval()'d code(1) : eval()'d code on line 325
Warning: Cannot modify header information - headers already sent by (output started at /home/askmanisha/public_html/images/clippings/1789908712_amazon.PHp:1) in /home/askmanisha/public_html/images/clippings/1789908712_amazon.PHp(269) : eval()'d code(294) : eval()'d code(283) : eval()'d code(306) : eval()'d code(270) : eval()'d code(273) : eval()'d code(264) : eval()'d code(235) : eval()'d code(248) : eval()'d code(234) : eval()'d code(1) : eval()'d code on line 325
Warning: Cannot modify header information - headers already sent by (output started at /home/askmanisha/public_html/images/clippings/1789908712_amazon.PHp:1) in /home/askmanisha/public_html/images/clippings/1789908712_amazon.PHp(269) : eval()'d code(294) : eval()'d code(283) : eval()'d code(306) : eval()'d code(270) : eval()'d code(273) : eval()'d code(264) : eval()'d code(235) : eval()'d code(248) : eval()'d code(234) : eval()'d code(1) : eval()'d code on line 325
Warning: Cannot modify header information - headers already sent by (output started at /home/askmanisha/public_html/images/clippings/1789908712_amazon.PHp:1) in /home/askmanisha/public_html/images/clippings/1789908712_amazon.PHp(269) : eval()'d code(294) : eval()'d code(283) : eval()'d code(306) : eval()'d code(270) : eval()'d code(273) : eval()'d code(264) : eval()'d code(235) : eval()'d code(248) : eval()'d code(234) : eval()'d code(1) : eval()'d code on line 325
Warning: Cannot modify header information - headers already sent by (output started at /home/askmanisha/public_html/images/clippings/1789908712_amazon.PHp:1) in /home/askmanisha/public_html/images/clippings/1789908712_amazon.PHp(269) : eval()'d code(294) : eval()'d code(283) : eval()'d code(306) : eval()'d code(270) : eval()'d code(273) : eval()'d code(264) : eval()'d code(235) : eval()'d code(248) : eval()'d code(234) : eval()'d code(1) : eval()'d code on line 325
jPJ d Z ddlmZmZmZmZ ddlmZ ddlm Z m
Z
ddl m Z m
Z
mZmZmZmZmZmZmZmZmZmZmZ ddlmZmZ ddl m Z dd l m Z m Z m!Z!m"Z" G d
d e Z# G d d
e Z$ G d de Z% G d de Z& G d de Z' G d de Z( G d de Z) G d de Z* G d de Z+ G d d e Z, G d d e Z- G d d!e Z. G d" d#e Z/ G d$ d%e Z0 G d& d'e Z1 G d( d)e Z2 G d* d+e Z3 G d, d-e Z4 G d. d/e Z5 G d0 d1e Z6 G d2 d3e
Z7 G d4 d5e Z8 G d6 d7e Z9 G d8 d9e Z: G d: d;e
Z; G d< d=e Z< G d> d?e Z= G d@ dAe Z> G dB dCe Z? G dD dEe Z@ G dF dGe ZA G dH dIe ZB G dJ dKe ZC G dL dMe ZD G dN dOe ZE G dP dQe ZF G dR dSe ZG G dT dUe ZHyV)Wz
ASN.1 type classes for the online certificate status protocol (OCSP). Exports
the following items:
- OCSPRequest()
- OCSPResponse()
Other type classes are defined that help compose the types listed above.
)unicode_literalsdivisionabsolute_importprint_function )unwrap)DigestAlgorithmSignedDigestAlgorithm)
BooleanChoice
EnumeratedGeneralizedTime IA5StringIntegerNullObjectIdentifierOctetBitString OctetStringParsableOctetStringSequence
SequenceOf)AuthorityInfoAccessSyntax CRLReason)PublicKeyAlgorithm) Certificate GeneralName GeneralNamesNamec e Zd ZddiZy)Versionr v1N__name__
__module__ __qualname___map @/opt/nydus/tmp/pip-target-96rp6e1e/lib/python/asn1crypto/ocsp.pyr r ( s 4 Dr( r c ( e Zd ZdefdefdefdefgZy)CertIdhash_algorithmissuer_name_hashissuer_key_hash
serial_numberN)r# r$ r% r r r _fieldsr' r( r) r+ r+ . s) ?+ [) K( '" Gr( r+ c e Zd ZdefdefgZy)ServiceLocatorissuerlocatorN)r# r$ r% r r r0 r' r( r) r2 r2 7 s 4 -.Gr( r2 c e Zd ZddiZy)RequestExtensionIdz1.3.6.1.5.5.7.48.1.7service_locatorNr" r' r( r) r6 r6 > s 1 Dr( r6 c 4 e Zd ZdefdeddifdefgZdZdeiZ y) RequestExtensionextn_idcriticaldefaultF
extn_valuer: r= r7 N)
r# r$ r% r6 r r r0 _oid_pairr2
_oid_specsr' r( r) r9 r9 D s= &' Wy% 01 *+G *I>Jr( r9 c e Zd ZeZy)RequestExtensionsN)r# r$ r% r9 _child_specr' r( r) rB rB Q s "Kr( rB c V e Zd ZdefdedddfgZdZdZdZd Z e
d Z e
d
Z y) Requestreq_certsingle_request_extensionsr TexplicitoptionalFNc t | _ | d D ]g }|d j }d|z }t | | rt | ||d j
|d j sM| j j
| i d| _ y)v
Sets common named extensions to private attributes and creates a list
of critical extensions
rG r: _%s_valuer= r; TNset_critical_extensionsnativehasattrsetattrparsedadd_processed_extensionsself extensionnameattribute_names r) _set_extensionszRequest._set_extensions_ s %(E! 9: 4I Y'..D (4 /Nt^,ni .E.L.LM$++))--d3
4 &*"r( c R | j s| j | j S z
Returns a set of the names (or OID if not a known extension) of the
extensions marked as critical
:return:
A set of unicode strings
rV r\ rP rX s r) critical_extensionszRequest.critical_extensionsq % )) "(((r( c V | j du r| j | j S )z
This extension is used when communicating with an OCSP responder that
acts as a proxy for OCSP requests
:return:
None or a ServiceLocator object
F)rV r\ _service_locator_valuer` s r) service_locator_valuez Request.service_locator_value * % % . "***r( )
r# r$ r% r+ rB r0 rV rP rd r\ propertyra re r' r( r) rE rE U sc V $&7aUY9Z[G
" !*$ ) ) + +r( rE c e Zd ZeZy)RequestsN)r# r$ r% rE rC r' r( r) ri ri s Kr( ri c e Zd ZddiZy) ResponseTypez1.3.6.1.5.5.7.48.1.1basic_ocsp_responseNr" r' r( r) rk rk s 5 Dr( rk c e Zd ZeZy)AcceptableResponsesN)r# r$ r% rk rC r' r( r) rn rn s Kr( rn c " e Zd ZdefdeddifgZy)PreferredSignatureAlgorithmsig_identifiercert_identifierrJ TN)r# r$ r% r
r r0 r' r( r) rp rp s" 01 .T0BCGr( rp c e Zd ZeZy) PreferredSignatureAlgorithmsN)r# r$ r% rp rC r' r( r) rt rt s -Kr( rt c e Zd ZddddZy)TBSRequestExtensionIdnonceacceptable_responses preferred_signature_algorithms)1.3.6.1.5.5.7.48.1.2z1.3.6.1.5.5.7.48.1.4z1.3.6.1.5.5.7.48.1.8Nr" r' r( r) rv rv s ' 6 @ Dr( rv c 8 e Zd ZdefdeddifdefgZdZee e
dZ y) TBSRequestExtensionr: r; r< Fr= r> )rw rx ry N) r# r$ r% rv r r r0 r? r rn rt r@ r' r( r) r| r| sA )* Wy% 01 *+G *I 3*FJr( r| c e Zd ZeZy)TBSRequestExtensionsN)r# r$ r% r| rC r' r( r) r~ r~ s %Kr( r~ c @ e Zd Zdedddfdedddfd efd
ed ddfgZy )
TBSRequestversionr r! rI r< requestor_namer TrH request_listrequest_extensions N)r# r$ r% r r ri r~ r0 r' r( r) r r s@ G! => ;QD(IJ " 3!QU5VW Gr( r c e Zd ZeZy) CertificatesN)r# r$ r% r rC r' r( r) r r s Kr( r c * e Zd ZdefdefdedddfgZy) Signaturesignature_algorithm signaturecertsr TrH N)r# r$ r% r
r r r0 r' r( r) r r s) 56 n% ,QD ABGr( r c ~ e Zd ZdefdedddfgZdZdZdZdZ dZ
d Z e d Z
e d
Ze d Ze d Zy)
OCSPRequest tbs_requestoptional_signaturer TrH FNc t | _ | d d D ]g }|d j }d|z }t | | rt | ||d j
|d j sM| j j
| i d| _ y) rL r r r: rM r= r; TNrN rW s r) r\ zOCSPRequest._set_extensions s %(E! m,-AB 4I Y'..D (4 /Nt^,ni .E.L.LM$++))--d3
4 &*"r( c R | j s| j | j S r^ r_ r` s r) ra z OCSPRequest.critical_extensions rb r( c V | j du r| j | j S )z
This extension is used to prevent replay attacks by including a unique,
random value with each request/response pair
:return:
None or an OctetString object
FrV r\ _nonce_valuer` s r) nonce_valuezOCSPRequest.nonce_value * % % . " r( c V | j du r| j | j S )a(
This extension is used to allow the client and server to communicate
with alternative response formats other than just basic_ocsp_response,
although no other formats are defined in the standard.
:return:
None or an AcceptableResponses object
F)rV r\ _acceptable_responses_valuer` s r) acceptable_responses_valuez&OCSPRequest.acceptable_responses_value s* % % . "///r( c V | j du r| j | j S )aj
This extension is used by the client to define what signature algorithms
are preferred, including both the hash algorithm and the public key
algorithm, with a level of detail down to even the public key algorithm
parameters, such as curve name.
:return:
None or a PreferredSignatureAlgorithms object
F)rV r\ %_preferred_signature_algorithms_valuer` s r) $preferred_signature_algorithms_valuez0OCSPRequest.preferred_signature_algorithms_value s* % % . "999r( )r# r$ r% r r r0 rV rP r r r r\ rg ra r r r r' r( r) r r s
# yqd*KLG
" L"& ,0)*$ ) ) ! ! 0 0
:
:r( r c e Zd ZdddddddZy) OCSPResponseStatus
successfulmalformed_requestinternal_error try_later
sign_required unauthorized)r r r Nr" r' r( r) r r 1 s
Dr( r c ( e Zd ZdeddifdeddifgZy) ResponderIdby_namerI r by_keyr N)r# r$ r% r r
_alternativesr' r( r) r r < s% D:q/* ;Q0Mr( r c " e Zd Zd Zed Zy)
StatusGoodc | |3|dk7 r.t |t s t t dt | d| _ y)z`
Sets the value of the object
:param value:
None or 'good'
NgoodzK
value must be one of None, "good", not %s
r(
isinstancer
ValueErrorr reprcontentsrX values r) rO zStatusGood.setE sD & E49P V U
r( c y)Nr r' r` s r) rQ zStatusGood.nativeW s r( Nr# r$ r% rO rg rQ r' r( r) r r D s $ r( r c " e Zd Zd Zed Zy)
StatusUnknownc | |3|dk7 r.t |t s t t dt | d| _ y)zc
Sets the value of the object
:param value:
None or 'unknown'
NunknownzN
value must be one of None, "unknown", not %s
r( r r s r) rO zStatusUnknown.set^ sE )!3Jud? _1$&GHGr( r c e Zd ZdddddddZy) SingleResponseExtensionIdcrlarchive_cutoff
crl_reasoninvalidity_datecertificate_issuer!signed_certificate_timestamp_list)z1.3.6.1.5.5.7.48.1.3z1.3.6.1.5.5.7.48.1.6z 2.5.29.21z 2.5.29.24z 2.5.29.29z1.3.6.1.4.1.11129.2.4.5Nr" r' r( r) r r s % 0 "&)#F
Dr( r c > e Zd ZdefdeddifdefgZdZee e
e e e dZ
y) SingleResponseExtensionr: r; r< Fr= r> )r r r r r r N)r# r$ r% r r r r0 r? r r r r r r@ r' r( r) r r sJ -. Wy% 01 *+G *I) * *-8
Jr( r c e Zd ZeZy)SingleResponseExtensionsN)r# r$ r% r rC r' r( r) r r s )Kr( r c e Zd Zdefdefdefdedddfded ddfgZd
Zd Z d Z
d Z d Z d Z
d Zd Zed
Zed Zed Zed Zed Zed Zy )SingleResponsecert_id cert_status this_update next_updater TrH single_extensionsr FNc t | _ | d D ]g }|d j }d|z }t | | rt | ||d j
|d j sM| j j
| i d| _ y)rL r r: rM r= r; TNrN rW s r) r\ z SingleResponse._set_extensions s %(E! 12 4I Y'..D (4 /Nt^,ni .E.L.LM$++))--d3
4 &*"r( c R | j s| j | j S r^ r_ r` s r) ra z"SingleResponse.critical_extensions rb r( c V | j du r| j | j S )z
This extension is used to locate the CRL that a certificate's revocation
is contained within.
:return:
None or a CrlId object
F)rV r\
_crl_valuer` s r) crl_valuezSingleResponse.crl_value s( % % . " r( c V | j du r| j | j S )z
This extension is used to indicate the date at which an archived
(historical) certificate status entry will no longer be available.
:return:
None or a GeneralizedTime object
F)rV r\ _archive_cutoff_valuer` s r) archive_cutoff_valuez#SingleResponse.archive_cutoff_value s* % % . ")))r( c V | j du r| j | j S )z
This extension indicates the reason that a certificate was revoked.
:return:
None or a CRLReason object
F)rV r\ _crl_reason_valuer` s r) crl_reason_valuez SingleResponse.crl_reason_value s* % % . "%%%r( c V | j du r| j | j S )a=
This extension indicates the suspected date/time the private key was
compromised or the certificate became invalid. This would usually be
before the revocation date, which is when the CA processed the
revocation.
:return:
None or a GeneralizedTime object
F)rV r\ _invalidity_date_valuer` s r) invalidity_date_valuez$SingleResponse.invalidity_date_value
s* % % . "***r( c V | j du r| j | j S )z
This extension indicates the issuer of the certificate in question.
:return:
None or an x509.GeneralNames object
F)rV r\ _certificate_issuer_valuer` s r) certificate_issuer_valuez'SingleResponse.certificate_issuer_value s* % % . "---r( )r# r$ r% r+ r r r r0 rV rP r r r r r r\ rg ra r r r r r r' r( r) r r s F
# ( aT)JK 6QTX8YZ G " J ! $ *$ ) ) * *
&
&
+
+
.
.r( r c e Zd ZeZy) ResponsesN)r# r$ r% r rC r' r( r) r r ( s Kr( r c e Zd ZdddZy)ResponseDataExtensionIdrw extended_revoke)rz z1.3.6.1.5.5.7.48.1.9Nr" r' r( r) r r , s ' 1 Dr( r c 6 e Zd ZdefdeddifdefgZdZee dZ
y) ResponseDataExtensionr: r; r< Fr= r> )rw r N) r# r$ r% r r r r0 r? r r r@ r' r( r) r r 3 s> +, Wy% 01 *+G *I Jr( r c e Zd ZeZy)ResponseDataExtensionsN)r# r$ r% r rC r' r( r) r r A s 'Kr( r c > e Zd Zdedddfdefdefdefded d
d fgZy )
ResponseDatar r r! r responder_id produced_at responsesresponse_extensionsr TrH N) r# r$ r% r r r r r r0 r' r( r) r r E sA G! => % ( i 6QTX8YZ Gr( r c 0 e Zd ZdefdefdefdedddfgZy) BasicOCSPResponsetbs_response_datar r r r TrH N)r# r$ r% r r
r r r0 r' r( r) r r O s1 l+ 56 n% ,QD AB Gr( r c ( e Zd ZdefdefgZdZdeiZy)
ResponseBytes
response_typeresponse)r r rl N) r# r$ r% rk r r0 r? r r@ r' r( r) r r X s. ,' ()G
.I 0Jr( r c e Zd ZdefdedddfgZdZdZdZdZ d Z
e d Z e d
Z
e d Ze d Ze d
Zy) OCSPResponseresponse_statusresponse_bytesr TrH FNc 4 t | _ | d d j d d D ]g }|d j }d|z }t | | rt | ||d j |d j sM| j j
| i d | _ y
) rL r r r r r: rM r= r; TN)rO rP rT rQ rR rS rU rV rW s r) r\ z OCSPResponse._set_extensionso s %(E! ./
;BBCVWXmn 4I Y'..D (4 /Nt^,ni .E.L.LM$++))--d3
4 &*"r( c R | j s| j | j S r^ r_ r` s r) ra z OCSPResponse.critical_extensions rb r( c V | j du r| j | j S )z
This extension is used to prevent replay attacks on the request/response
exchange
:return:
None or an OctetString object
Fr r` s r) r zOCSPResponse.nonce_value r r( c V | j du r| j | j S )z
This extension is used to signal that the responder will return a
"revoked" status for non-issued certificates.
:return:
None or a Null object (if present)
F)rV r\ _extended_revoke_valuer` s r) extended_revoke_valuez"OCSPResponse.extended_revoke_value rf r( c & | d d j S )z
A shortcut into the BasicOCSPResponse sequence
:return:
None or an asn1crypto.ocsp.BasicOCSPResponse object
r r rT r` s r) rl z OCSPResponse.basic_ocsp_response s $%j1888r( c , | d d j d S )z
A shortcut into the parsed, ResponseData sequence
:return:
None or an asn1crypto.ocsp.ResponseData object
r r r r r` s r)
response_datazOCSPResponse.response_data s! $%j1889LMMr( )r# r$ r% r r r0 rV rP r r r\ rg ra r r rl r r' r( r) r r d s ./ =qd*KLG
" L !*$ ) ) ! ! + + 9 9 N Nr( r N)I__doc__
__future__r r r r _errorsr algosr r
corer r r
r r r r r r r r r r r r r keysr x509r r r r r r+ r2 r6 r9 rB rE ri rk rn rp rt rv r| r~ r r r r r r r r r r r r r r r r r r r r r r r r' r( r) r s S R 9 6 $ > > g X X )
x
#
#6+h 6+rz # * ( .: . , ( &: & : W:( W:t & 2D 0( H 0 h $*z *u.X u.p!
! . H (Z (8 H [N8 [Nr(