Tryag File Manager
Home
-
Turbo Force
Current Path :
/
usr
/
lib
/
python2.4
/
site-packages
/
M2Crypto
/
Upload File :
New :
File
Dir
//usr/lib/python2.4/site-packages/M2Crypto/X509.pyo
m kQOc @ sa d Z d k l Z l Z l Z l Z d k Z d e f d YZ e i e e i Z d d d Z d f d YZ d f d YZ d f d YZ d f d YZ d f d YZ d Z d Z d Z d f d YZ d f d YZ d f d YZ d Z d f d YZ d Z d f d YZ d! Z d S(" s M2Crypto wrapper for OpenSSL X509 API. Copyright (c) 1999-2004 Ng Pheng Siong. All rights reserved. Portions created by Open Source Applications Foundation (OSAF) are Copyright (C) 2004-2005 OSAF. All Rights Reserved. Author: Heikki Toivonen ( s ASN1s BIOs Errs EVPNt X509Errorc B s t Z RS( N( t __name__t __module__( ( ( t1 /usr/lib/python2.4/site-packages/M2Crypto/X509.pyR s i i c C sS t i } t i | } t i | | | | } t | | } | i | | S( s- Create new X509_Extension instance. N( t m2t x509v3_lhasht lhasht x509v3_set_conf_lhasht ctxt x509v3_ext_conft namet valuet x509_ext_ptrt X509_Extensiont _pyfreet x509_extt set_criticalt critical( R R R R R R R R ( ( R t new_extension s R c B s_ t Z d Z e i Z e d d Z d Z d Z d d Z d Z d Z d Z RS( s X509 Extension i c C s | | _ | | _ d S( N( R t selfR R ( R R R ( ( R t __init__' s c C s5 t | d d o | i o | i | i n d S( NR i ( t getattrR R t m2_x509_extension_free( R ( ( R t __del__+ s c C s | i S( N( R R ( R ( ( R t _ptr/ s c C s t i | i | S( sL Mark this extension critical or noncritical. By default an extension is not critical. @type critical: int @param critical: Nonzero sets this extension as critical. Calling this method without arguments will set this extension to critical. N( R t x509_extension_set_criticalR R R ( R R ( ( R R 2 s c C s t i | i S( s Return whether or not this is a critical extension. @rtype: int @return: Nonzero if this is a critical extension. N( R t x509_extension_get_criticalR R ( R ( ( R t get_critical> s c C s t i | i S( sG Get the extension name, for example 'subjectAltName'. N( R t x509_extension_get_nameR R ( R ( ( R t get_nameG s c C s5 t i } t i | i | i d d | i S( sM Get the extension value, for example 'DNS:www.example.com'. i N( t BIOt MemoryBuffert bufR t x509_ext_printt bio_ptrR R t read_all( R R ( ( R t get_valueM s ( R R t __doc__R t x509_extension_freeR t NoneR R R R R R R$ ( ( ( R R s t X509_Extension_Stackc B se t Z d Z e i Z e d d Z d Z d Z d Z d Z d Z d Z d Z RS( sZ X509 Extension Stack @warning: Do not modify the underlying OpenSSL stack except through this interface, or use any OpenSSL functions that do so indirectly. Doing so will get the OpenSSL stack and the internal pystack of this class out of sync, leading to python memory leaks, exceptions or even python crashes! i c C s | d j oj | | _ | | _ t i | i } xd t | D]1 } | i i t t i | i | d | q> Wn" t i | _ d | _ g | _ d S( NR i ( t stackR' R R R t sk_x509_extension_numt numt ranget it pystackt appendR t sk_x509_extension_valuet sk_x509_extension_new_null( R R) R R- R+ ( ( R R c s c C s+ t | d d o | i | i n d S( NR i ( R R t m2_sk_x509_extension_freeR) ( R ( ( R R p s c C s t | i S( N( t lenR R. ( R ( ( R t __len__t s c C s | i | S( N( R R. t idx( R R5 ( ( R t __getitem__x s c C s t | i S( N( t iterR R. ( R ( ( R t __iter__{ s c C s | i S( N( R R) ( R ( ( R R ~ s c C s/ | i i | t i | i | i } | S( s Push X509_Extension object onto the stack. @type x509_ext: M2Crypto.X509.X509_Extension @param x509_ext: X509_Extension object to be pushed onto the stack. @return: The number of extensions on the stack. N( R R. R/ R R t sk_x509_extension_pushR) R t ret( R R R: ( ( R t push s c C s4 t i | i } | d j o d Sn | i i S( sk Pop X509_Extension object from the stack. @return: X509_Extension popped N( R t sk_x509_extension_popR R) R R' R. t pop( R R ( ( R R= s ( R R R% R t sk_x509_extension_freeR2 R' R R R4 R6 R8 R R; R= ( ( ( R R( V s t X509_Name_Entryc B sP t Z d Z e i Z d d Z d Z d Z d Z d Z d Z RS( s X509 Name Entry i c C s | | _ | | _ d S( N( t x509_name_entryR R ( R R@ R ( ( R R s c C s+ t | d d o | i | i n d S( NR i ( R R t m2_x509_name_entry_freeR@ ( R ( ( R R s c C s | i S( N( R R@ ( R ( ( R R s c C s t i | i | i S( N( R t x509_name_entry_set_objectR R@ t asn1objR ( R RC ( ( R t set_object s c C s t i t i | i S( N( t ASN1t ASN1_StringR t x509_name_entry_get_dataR R@ ( R ( ( R t get_data s c C s" t i | i i | | | | S( N( R t x509_name_entry_create_by_txtR R@ R t fieldt typet entryR3 ( R RJ RK RL R3 ( ( R t create_by_txt s ( R R R% R t x509_name_entry_freeRA R R R RD RH RM ( ( ( R R? s t X509_Namec B s t Z d Z h d e i <d e i <d e i <d e i <d e i <d e i <d e i <d e i <d e i <d e i <d e i <d e i <d e i <d e i <d e i <d e i <d e i <d e i <d e i <Z e i Z e d d Z d Z d Z d Z d Z d Z d Z d Z d Z d Z d Z d Z d e i d! Z RS(" s X509 Name t Ct SPt STt stateOrProvinceNamet Lt localityNamet Ot organizationNamet OUt organizationUnitNamet CNt commonNamet Emailt emailAddresst serialNumbert SNt surnamet GNt givenNamei c C s? | d j o | | _ | | _ n t i | _ d | _ d S( Ni ( t x509_nameR' R R R t x509_name_new( R Rc R ( ( R R s c C s+ t | d d o | i | i n d S( NR i ( R R t m2_x509_name_freeRc ( R ( ( R R s c C s t i | i S( N( R t x509_name_onelineR Rc ( R ( ( R t __str__ s c C s` | | i j o t i | i | i | Sn | | i j o | i | Sn t | | f d S( N( t attrR t nidR t x509_name_by_nidRc t __dict__t AttributeError( R Rh ( ( R t __getattr__ s c C sB | | i j o! t i | i | i | | Sn | | i | <d S( N( Rh R Ri R t x509_name_set_by_nidRc R Rk ( R Rh R ( ( R t __setattr__ s !c C s t i | i S( N( R t x509_name_entry_countR Rc ( R ( ( R R4 s c C sM d | j o | i j n p t d n t t i | i | S( Ni s index out of range( R5 R t entry_countt IndexErrorR? R t x509_name_get_entryRc ( R R5 ( ( R R6 s $c c s) x" t | i D] } | | Vq Wd S( N( t xrangeR Rq R- ( R R- ( ( R R8 s c C s | i S( N( R Rc ( R ( ( R R s c C s" t i | i | | | | | | S( N( R t x509_name_add_entry_by_txtR Rc RJ RK RL R3 t loct set( R RJ RK RL R3 Rv Rw ( ( R t add_entry_by_txt s c C s t i | i S( N( R Rp R Rc ( R ( ( R Rq s c C sZ g } d } xG t o? t i | i | | } | d j o Pn | i | | q W| S( Ni( R: t lastpost TrueR t x509_name_get_index_by_nidR Rc Ri R/ ( R Ri Ry R: ( ( R t get_entries_by_nid s c C s5 t i } t i | i | i | | | i S( s as_text returns the name as a string. @param indent: Each line in multiline format is indented by this many spaces. @param flags: Flags that control how the output should be formatted. N( R R R R t x509_name_print_exR" R Rc t indentt flagsR# ( R R~ R R ( ( R t as_text s ( R R R% R t NID_countryNamet NID_stateOrProvinceNamet NID_localityNamet NID_organizationNamet NID_organizationalUnitNamet NID_commonNamet NID_pkcs9_emailAddresst NID_serialNumbert NID_surnamet NID_givenNameRi t x509_name_freeRe R' R R Rg Rm Ro R4 R6 R8 R Rx Rq R| t XN_FLAG_COMPATR ( ( ( R RO s t X509c B s7 t Z d Z e i Z e d d Z d Z d Z d Z d Z d Z d Z d Z d Z d Z d Z d Z d Z d Z d Z d Z d Z d Z d Z d Z d Z d Z d Z d Z d Z d Z d Z! d Z" e d Z# d Z$ d Z% RS(! s X.509 Certificate i c C s? | d j o | | _ | | _ n t i | _ d | _ d S( Ni ( t x509R' R R R t x509_new( R R R ( ( R R . s c C s+ t | d d o | i | i n d S( NR i ( R R t m2_x509_freeR ( R ( ( R R 7 s c C s | i S( N( R R ( R ( ( R R ; s c C s/ t i } t i | i | i | i S( N( R R R R t x509_printR" R R R# ( R R ( ( R R ? s c C s/ t i } t i | i | i | i S( N( R R R R t i2d_x509R" R R R# ( R R ( ( R t as_derE s c C s/ t i } t i | i | i | i S( N( R R R R t x509_write_pemR" R R R# ( R R ( ( R t as_pemK s c C s+ t i | d } t i | i | i S( s save_pem t wbN( R t openfilet filenamet bioR R R" R R ( R R R ( ( R t save_pemP s c C s t i | i | S( s Set version. @type version: int @param version: Version number. @rtype: int @return: Returns 0 on failure. N( R t x509_set_versionR R t version( R R ( ( R t set_versionW s c C s t i | i | i S( N( R t x509_set_not_beforeR R t asn1_utctimeR ( R R ( ( R t set_not_beforec s c C s t i | i | i S( N( R t x509_set_not_afterR R R R ( R R ( ( R t set_not_afterg s c C s t i | i | i S( N( R t x509_set_subject_nameR R R Rc ( R R ( ( R t set_subject_namek s c C s t i | i | i S( N( R t x509_set_issuer_nameR R R Rc ( R R ( ( R t set_issuer_nameo s c C s t i | i S( N( R t x509_get_versionR R ( R ( ( R t get_versions s c C s t i | i } t i | S( N( R t x509_get_serial_numberR R t asn1_integert asn1_integer_get( R R ( ( R t get_serial_numberw s c C s" t i | i } t i | | S( sh Set serial number. @type serial: int @param serial: Serial number. N( R R R R R t asn1_integer_sett serial( R R R ( ( R t set_serial_number| s c C s t i t i | i S( N( RE t ASN1_UTCTIMER t x509_get_not_beforeR R ( R ( ( R t get_not_before s c C s t i t i | i S( N( RE R R t x509_get_not_afterR R ( R ( ( R t get_not_after s c C s t i t i | i d d S( NR i ( t EVPt PKeyR t x509_get_pubkeyR R ( R ( ( R t get_pubkey s c C s t i | i | i S( sw Set the public key for the certificate @type pkey: EVP_PKEY @param pkey: Public key N( R t x509_set_pubkeyR R t pkey( R R ( ( R t set_pubkey s c C s t t i | i S( N( RO R t x509_get_issuer_nameR R ( R ( ( R t get_issuer s c C s t i | i | i S( sp Set issuer name. @type name: X509_Name @param name: subjectName field. N( R R R R R Rc ( R R ( ( R t set_issuer s c C s t t i | i S( N( RO R t x509_get_subject_nameR R ( R ( ( R t get_subject s c C s t i | i | i S( sq Set subject name. @type name: X509_Name @param name: subjectName field. N( R R R R R Rc ( R R ( ( R t set_subject s c C s t i | i | i d S( s Add X509 extension to this certificate. @type ext: X509_Extension @param ext: Extension iN( R t x509_add_extR R t extR ( R R ( ( R t add_ext s c C sQ xD t | i D]0 } | i | } | i | j o | Sq q Wt d S( s Get X509 extension by name. @type name: Name of the extension @param name: str @return: X509_Extension N( R, R t get_ext_countR- t get_ext_atR R R t LookupError( R R R- R ( ( R t get_ext s c C sI | d j p | | i j o t n t t i | i | d d S( s Get X509 extension by index. @type index: Name of the extension @param index: int @return: X509_Extension i R N( t indexR R Rr R R t x509_get_extR ( R R ( ( R R s c C s t i | i S( s+ Get X509 extension count. N( R t x509_get_ext_countR R ( R ( ( R R s c C sN t t | d } | d j o t d | f n t i | i | i | S( s Sign the certificate. @type pkey: EVP_PKEY @param pkey: Public key @type md: str @param md: Message digest algorithm to use for signing, for example 'sha1'. s unknown message digestN( R R t mdR' t mdat ValueErrort x509_signR R R ( R R R R ( ( R t sign s c C sD | o t i | i | i Sn t i | i t i | i Sd S( N( R R t x509_verifyR R R ( R R ( ( R t verify s c C s t i | i S( s Check if the certificate is a Certificate Authority (CA) certificate. @return: 0 if the certificate is not CA, nonzero otherwise. @requires: OpenSSL 0.9.8 or newer N( R t x509_check_caR R ( R ( ( R t check_ca s c C s t i | i | | S( s) Check if the certificate's purpose matches the asked purpose. @param id: Purpose id. See X509_PURPOSE_* constants. @param ca: 1 if the certificate should be CA, 0 otherwise. @return: 0 if the certificate purpose does not match, nonzero otherwise. N( R t x509_check_purposeR R t idt ca( R R R ( ( R t check_purpose s (& R R R% R t x509_freeR R' R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R ( ( ( R R ' sB c C s t i | } t | S( s Load certificate from file. @type file: string @param file: Name of file containing certificate in PEM format. @rtype: M2Crypto.X509.X509 @return: M2Crypto.X509.X509 object. N( R R t fileR t load_cert_bio( R R ( ( R t load_cert s c C s t t i | i d S( Ni ( R R t x509_read_pemR R ( R ( ( R R & s c C s t i | } t | S( N( R R t stringR R ( R R ( ( R t load_cert_string* s t X509_Store_Contextc B sP t Z d Z e i Z d d Z d Z d Z d Z d Z d Z RS( s X509 Store Context i c C s | | _ | | _ d S( N( t x509_store_ctxR R R ( R R R ( ( R R 6 s c C s" | i o | i | i n d S( N( R R t m2_x509_store_ctx_freeR ( R ( ( R R : s c C s | i S( N( R R ( R ( ( R R > s c C s t t i | i d d S( s Get current X.509 certificate. @warning: The returned certificate is NOT refcounted, so you can not rely on it being valid once the store context goes away or is modified. R i N( R R t x509_store_ctx_get_current_certR R ( R ( ( R t get_current_certA s c C s t i | i S( s! Get error code. N( R t x509_store_ctx_get_errorR R ( R ( ( R t get_errorJ s c C s t i | i S( s" Get error depth. N( R t x509_store_ctx_get_error_depthR R ( R ( ( R t get_error_depthP s ( R R R% R t x509_store_ctx_freeR R R R R R R ( ( ( R R / s t X509_Storec B sV t Z d Z e i Z e d d Z d Z d Z d Z e Z d Z e Z RS( s X509 Store i c C s? | d j o | | _ | | _ n t i | _ d | _ d S( Ni ( t storeR' R R R t x509_store_new( R R R ( ( R R ^ s c C s+ t | d d o | i | i n d S( NR i ( R R t m2_x509_store_freeR ( R ( ( R R f s c C s | i S( N( R R ( R ( ( R R j s c C s t i | i | d S( N( R t x509_store_load_locationsR R R ( R R ( ( R t load_infom s c C s t i | i | i S( N( R t x509_store_add_certR R R R ( R R ( ( R t add_x509r s ( R R R% R t x509_store_freeR R' R R R R t load_locationsR t add_cert( ( ( R R W s t X509_Stackc B sn t Z d Z e i Z e d d Z d Z d Z d Z d Z d Z d Z d Z d Z RS( sL X509 Stack @warning: Do not modify the underlying OpenSSL stack except through this interface, or use any OpenSSL functions that do so indirectly. Doing so will get the OpenSSL stack and the internal pystack of this class out of sync, leading to python memory leaks, exceptions or even python crashes! i c C s | d j os | | _ | | _ g | _ t i | i } xd t | D]1 } | i i t t i | i | d | qG Wn" t i | _ d | _ g | _ d S( NR i ( R) R' R R R. R t sk_x509_numR+ R, R- R/ R t sk_x509_valuet sk_x509_new_null( R R) R R- R+ ( ( R R s c C s+ t | d d o | i | i n d S( NR i ( R R t m2_sk_x509_freeR) ( R ( ( R R s c C s t | i S( N( R3 R R. ( R ( ( R R4 s c C s | i | S( N( R R. R5 ( R R5 ( ( R R6 s c C s t | i S( N( R7 R R. ( R ( ( R R8 s c C s | i S( N( R R) ( R ( ( R R s c C s/ | i i | t i | i | i } | S( s push an X509 certificate onto the stack. @param x509: X509 object. @return: The number of X509 objects currently on the stack. N( R R. R/ R R t sk_x509_pushR) R R: ( R R R: ( ( R R; s c C s4 t i | i } | d j o d Sn | i i S( s pop a certificate from the stack. @return: X509 object that was popped, or None if there is nothing to pop. N( R t sk_x509_popR R) t x509_ptrR' R. R= ( R R ( ( R R= s c C s t i | i S( s: Return the stack as a DER encoded string N( R t get_der_encoding_stackR R) ( R ( ( R R s ( R R R% R t sk_x509_freeR R' R R R4 R6 R8 R R; R= R ( ( ( R R y s c C s t i | } t | d S( sO Create a new X509_Stack from DER string. @return: X509_Stack i N( R t make_stack_from_der_sequencet der_stringt stack_ptrR ( R R ( ( R t new_stack_from_der s t Requestc B s t Z d Z e i Z e d d Z d Z d Z d Z d Z d Z d Z d Z d Z d Z d Z d Z d Z d Z RS( s# X509 Certificate Request. i c C s? | d j o | | _ | | _ n t i | _ d | _ d S( Ni ( t reqR' R R R t x509_req_new( R R R ( ( R R s c C s+ t | d d o | i | i n d S( NR i ( R R t m2_x509_req_freeR ( R ( ( R R s c C s/ t i } t i | i | i | i S( N( R R R R t x509_req_printR" R R R# ( R R ( ( R R s c C s/ t i } t i | i | i | i S( N( R R R R t x509_req_write_pemR" R R R# ( R R ( ( R R s c C s+ t i | d } t i | i | i S( NR ( R R R R R R R" R R ( R R R ( ( R R s c C s t i t i | i d d S( s Get the public key for the request. @rtype: EVP_PKEY @return: Public key from the request. R i N( R R R t x509_req_get_pubkeyR R ( R ( ( R R s c C s t i | i | i S( s Set the public key for the request. @type pkey: EVP_PKEY @param pkey: Public key @rtype: int @return: Return 1 for success and 0 for failure. N( R t x509_req_set_pubkeyR R R ( R R ( ( R R s c C s t i | i S( sd Get version. @rtype: int @return: Returns version. N( R t x509_req_get_versionR R ( R ( ( R R s c C s t i | i | S( s Set version. @type version: int @param version: Version number. @rtype: int @return: Returns 0 on failure. N( R t x509_req_set_versionR R R ( R R ( ( R R s c C s t t i | i S( N( RO R t x509_req_get_subject_nameR R ( R ( ( R R s c C s t i | i | i S( sq Set subject name. @type name: X509_Name @param name: subjectName field. N( R t x509_req_set_subject_nameR R R Rc ( R R ( ( R R s c C s t i | i | i S( s Add X509 extensions to this request. @type ext_stack: X509_Extension_Stack @param ext_stack: Stack of extensions to add. N( R t x509_req_add_extensionsR R t ext_stackR ( R R ( ( R t add_extensions& s c C s t i | i | i S( N( R t x509_req_verifyR R R ( R R ( ( R R / s c C sN t t | d } | d j o t d | f n t i | i | i | S( Ns unknown message digest( R R R R' R R t x509_req_signR R R ( R R R R ( ( R R 2 s ( R R R% R t x509_req_freeR R' R R R R R R R R R R R R R R ( ( ( R R s c C sX t i | } t i | i } | i | d j o t i n t | d S( s Load certificate request from file. @type file: string @param file: Name of file containing certificate request in PEM format. @rtype: M2Crypto.X509.Request @return: M2Crypto.X509.Request object. i N( R R R t fR t x509_req_read_pemR" t cptrt closeR' t ErrR R ( R R R ( ( R t load_request9 s t CRLc B s8 t Z d Z e i Z e d d Z d Z d Z RS( s* X509 Certificate Revocation List i c C s? | d j o | | _ | | _ n t i | _ d | _ d S( Ni ( t crlR' R R R t x509_crl_new( R R R ( ( R R R s c C s+ t | d d o | i | i n d S( NR i ( R R t m2_x509_crl_freeR ( R ( ( R R Z s c C s/ t i } t i | i | i | i S( s Return CRL in PEM format in a string. @rtype: string @return: String containing the CRL in PEM format. N( R R R R t x509_crl_printR" R R R# ( R R ( ( R R ^ s ( R R R% R t x509_crl_freeR R' R R R ( ( ( R R K s c C sX t i | } t i | i } | i | d j o t i n t | d S( s Load CRL from file. @type file: string @param file: Name of file containing CRL in PEM format. @rtype: M2Crypto.X509.CRL @return: M2Crypto.X509.CRL object. i N( R R R R R t x509_crl_read_pemR" R R R' R R R ( R R R ( ( R t load_crlj s ( R% t M2CryptoRE R R R R t ExceptionR t x509_initt X509_V_OKt V_OKR R R( R? RO R R R R R R R R R R R R" ( R R' R RE R" R R R R R R R R R R? R( R R R R R RO R R ( ( R t ? s, 6Eq ("M i