o
    geA!                     @   s   d dl Z d dlmZ d dlmZ d dlmZmZ G dd dejZ	dd e	D Z
e Zeje	jeje	jeje	jeje	jeje	jeje	jiZejd	ejd
ejdejdejdejdejdejdejdi	Zdd ZG dd deZG dd deZ G dd deZ!dS )    N)utils)_get_backend)NameOIDObjectIdentifierc                   @   s4   e Zd ZdZdZdZdZdZdZdZ	dZ
d	Zd
ZdS )	_ASN1Type                              N)__name__
__module____qualname__
UTF8StringNumericStringPrintableString	T61String	IA5StringUTCTimeGeneralizedTimeVisibleStringUniversalString	BMPString r   r   8/usr/lib/python3/dist-packages/cryptography/x509/name.pyr      s    r   c                 C   s   i | ]}|j |qS r   )value.0ir   r   r   
<dictcomp>   s    r$   CNLSTOOUCSTREETDCUIDc                 C   s   | sdS |  dd} |  dd} |  dd} |  dd	} |  d
d} |  dd} |  dd} |  dd} | d dv r>d|  } | d dkrL| dd d } | S )z>Escape special characters in RFC4514 Distinguished Name value. \z\\"z\"+z\+,z\,;z\;<z\<>z\> z\00r   )# r8   Nz\ )replace)valr   r   r   _escape_dn_value3   s   r<   c                   @   s   e Zd ZefdedefddZedZ	edZ
defdd	Zd
edefddZd
edefddZdefddZdefddZdS )NameAttributeoidr    c                 C   s   t |ts	tdt |tstd|tjks|tjkr)t|ddkr)t	d|t
kr4t|tj}t |ts=td|| _|| _|| _d S )Nz2oid argument must be an ObjectIdentifier instance.z#value argument must be a text type.utf8   z/Country name must be a 2 character country codez%_type must be from the _ASN1Type enum)
isinstancer   	TypeErrorstrr   COUNTRY_NAMEJURISDICTION_COUNTRY_NAMElenencode
ValueError	_SENTINEL_NAMEOID_DEFAULT_TYPEgetr   r   _oid_value_type)selfr>   r    rN   r   r   r   __init__L   s&   






zNameAttribute.__init__rL   rM   returnc                 C   s$   t | j| jj}d|t| jf S )z
        Format as RFC4514 Distinguished Name string.

        Use short attribute name if available, otherwise fall back to OID
        dotted string.
        z%s=%s)_NAMEOID_TO_NAMErK   r>   dotted_stringr<   r    )rO   keyr   r   r   rfc4514_stringq   s   zNameAttribute.rfc4514_stringotherc                 C   s&   t |tstS | j|jko| j|jkS N)rA   r=   NotImplementedr>   r    rO   rV   r   r   r   __eq__{   s   
zNameAttribute.__eq__c                 C   
   | |k S rW   r   rY   r   r   r   __ne__      
zNameAttribute.__ne__c                 C   s   t | j| jfS rW   )hashr>   r    rO   r   r   r   __hash__   s   zNameAttribute.__hash__c                 C   s
   d | S )Nz/<NameAttribute(oid={0.oid}, value={0.value!r})>)formatr_   r   r   r   __repr__   r]   zNameAttribute.__repr__N)r   r   r   rI   r   rC   rP   r   read_only_propertyr>   r    rU   objectboolrZ   r\   intr`   rb   r   r   r   r   r=   K   s    
"

r=   c                   @   s   e Zd Zdeje fddZdeje fddZde	fddZ
d	edefd
dZd	edefddZdefddZdeje fddZdefddZde	fddZdS )RelativeDistinguishedName
attributesc                 C   s\   t |}|s
tdtdd |D std|| _t|| _t| jt|kr,tdd S )Nz-a relative distinguished name cannot be emptyc                 s       | ]}t |tV  qd S rW   rA   r=   r"   xr   r   r   	<genexpr>       z5RelativeDistinguishedName.__init__.<locals>.<genexpr>z/attributes must be an iterable of NameAttributez$duplicate attributes are not allowed)listrH   allrB   _attributes	frozenset_attribute_setrF   rO   rh   r   r   r   rP      s   
z"RelativeDistinguishedName.__init__rQ   c                        fdd| D S )Nc                       g | ]	}|j  kr|qS r   r>   r!   rw   r   r   
<listcomp>       zDRelativeDistinguishedName.get_attributes_for_oid.<locals>.<listcomp>r   rO   r>   r   rw   r   get_attributes_for_oid      z0RelativeDistinguishedName.get_attributes_for_oidc                 C   s   d dd | jD S )z
        Format as RFC4514 Distinguished Name string.

        Within each RDN, attributes are joined by '+', although that is rarely
        used in certificates.
        r1   c                 s       | ]}|  V  qd S rW   rU   r"   attrr   r   r   rm          z;RelativeDistinguishedName.rfc4514_string.<locals>.<genexpr>)joinrq   r_   r   r   r   rU      s   z(RelativeDistinguishedName.rfc4514_stringrV   c                 C      t |tstS | j|jkS rW   )rA   rg   rX   rs   rY   r   r   r   rZ         
z RelativeDistinguishedName.__eq__c                 C   r[   rW   r   rY   r   r   r   r\      r]   z RelativeDistinguishedName.__ne__c                 C   
   t | jS rW   )r^   rs   r_   r   r   r   r`      r]   z"RelativeDistinguishedName.__hash__c                 C   r   rW   )iterrq   r_   r   r   r   __iter__   r]   z"RelativeDistinguishedName.__iter__c                 C   r   rW   )rF   rq   r_   r   r   r   __len__   r]   z!RelativeDistinguishedName.__len__c                 C   s   d |  S )Nz<RelativeDistinguishedName({})>)ra   rU   r_   r   r   r   rb      s   z"RelativeDistinguishedName.__repr__N)r   r   r   typingIterabler=   rP   Listr{   rC   rU   rd   re   rZ   r\   rf   r`   Iteratorr   r   rb   r   r   r   r   rg      s    	rg   c                   @   s   e Zd Zdd ZdefddZdeje fddZ	e
deje fdd	ZddefddZdedefddZdedefddZdefddZdeje fddZdefddZdefddZd
S )Namec                 C   sR   t |}tdd |D rdd |D | _d S tdd |D r%|| _d S td)Nc                 s   ri   rW   rj   rk   r   r   r   rm      rn   z Name.__init__.<locals>.<genexpr>c                 S   s   g | ]}t |gqS r   )rg   rk   r   r   r   rx      s    
z!Name.__init__.<locals>.<listcomp>c                 s   ri   rW   )rA   rg   rk   r   r   r   rm      rn   zNattributes must be a list of NameAttribute or a list RelativeDistinguishedName)ro   rp   rq   rB   rt   r   r   r   rP      s   
zName.__init__rQ   c                 C   s   d dd t| jD S )a  
        Format as RFC4514 Distinguished Name string.
        For example 'CN=foobar.com,O=Foo Corp,C=US'

        An X.509 name is a two-level structure: a list of sets of attributes.
        Each list element is separated by ',' and within each list element, set
        elements are separated by '+'. The latter is almost never used in
        real world certificates. According to RFC4514 section 2.1 the
        RDNSequence must be reversed when converting to string representation.
        r2   c                 s   r}   rW   r~   r   r   r   r   rm      s    
z&Name.rfc4514_string.<locals>.<genexpr>)r   reversedrq   r_   r   r   r   rU      s   
zName.rfc4514_stringc                    ru   )Nc                    rv   r   rw   r!   rw   r   r   rx      ry   z/Name.get_attributes_for_oid.<locals>.<listcomp>r   rz   r   rw   r   r{      r|   zName.get_attributes_for_oidc                 C   s   | j S rW   rq   r_   r   r   r   rdns   s   z	Name.rdnsNc                 C   s   t |}|| S rW   )r   x509_name_bytes)rO   backendr   r   r   public_bytes   s   
zName.public_bytesrV   c                 C   r   rW   )rA   r   rX   rq   rY   r   r   r   rZ      r   zName.__eq__c                 C   r[   rW   r   rY   r   r   r   r\      r]   zName.__ne__c                 C   s   t t| jS rW   )r^   tuplerq   r_   r   r   r   r`      s   zName.__hash__c                 c   s"    | j D ]
}|D ]}|V  qqd S rW   r   )rO   rdnavar   r   r   r      s   
zName.__iter__c                 C   s   t dd | jD S )Nc                 s   s    | ]}t |V  qd S rW   )rF   )r"   r   r   r   r   rm      r   zName.__len__.<locals>.<genexpr>)sumrq   r_   r   r   r   r      s   zName.__len__c                 C   s    d dd | jD }d|S )Nr2   c                 s   r}   rW   r~   r   r   r   r   rm      r   z Name.__repr__.<locals>.<genexpr>z
<Name({})>)r   rq   ra   )rO   r   r   r   r   rb      s   
zName.__repr__rW   )r   r   r   rP   rC   rU   r   r   r=   r{   propertyr   rg   r   bytesr   rd   re   rZ   r\   rf   r`   r   r   r   rb   r   r   r   r   r      s    r   )"r   cryptographyr   cryptography.hazmat.backendsr   cryptography.x509.oidr   r   Enumr   _ASN1_TYPE_TO_ENUMrd   rI   rD   r   rE   SERIAL_NUMBERDN_QUALIFIEREMAIL_ADDRESSr   DOMAIN_COMPONENTrJ   COMMON_NAMELOCALITY_NAMESTATE_OR_PROVINCE_NAMEORGANIZATION_NAMEORGANIZATIONAL_UNIT_NAMESTREET_ADDRESSUSER_IDrR   r<   r=   rg   r   r   r   r   r   <module>   s8   @1