B
    `Q!                 @   s
  d dl Z d dlmZ d dlmZ d dlmZ d dlmZm	Z	 G dd deZ
dd	 e
D Ze Zeje
jeje
jeje
jeje
jeje
jeje
jiZejd
ejdejdejdejdejdejdejdejdi	Zdd ZG dd deZ G dd deZ!G dd deZ"dS )    N)Enum)utils)_get_backend)NameOIDObjectIdentifierc               @   s4   e Zd ZdZdZdZdZdZdZdZ	dZ
d	Zd
ZdS )	_ASN1Type                              N)__name__
__module____qualname__
UTF8StringZNumericStringPrintableStringZ	T61String	IA5StringZUTCTimeZGeneralizedTimeZVisibleStringZUniversalStringZ	BMPString r   r   E/home/dcms/DCMS/lib/python3.7/site-packages/cryptography/x509/name.pyr      s   r   c             C   s   i | ]}||j qS r   )value).0ir   r   r   
<dictcomp>   s    r   ZCNLZSTOZOUCZSTREETZDCZUIDc             C   s   | sdS |  dd} |  dd} |  dd} |  dd	} |  d
d} |  dd} |  dd} |  dd} | d dkr|d|  } | d dkr| dd d } | S )z>Escape special characters in RFC4514 Distinguished Name value. \z\\"z\"+z\+,z\,;z\;<z\<>z\> z\00r   )# r+   Nz\ )replace)valr   r   r   _escape_dn_value4   s    r/   c               @   s~   e Zd ZefeedddZedZ	edZ
edddZeed	d
dZeed	ddZedddZedddZdS )NameAttribute)oidr   c             C   s   t |tstdt |ts$td|tjks8|tjkrRt|ddkrRt	d|t
krht|tj}t |tsztd|| _|| _|| _d S )Nz2oid argument must be an ObjectIdentifier instance.z#value argument must be a text type.utf8   z/Country name must be a 2 character country codez%_type must be from the _ASN1Type enum)
isinstancer   	TypeErrorstrr   COUNTRY_NAMEJURISDICTION_COUNTRY_NAMElenencode
ValueError	_SENTINEL_NAMEOID_DEFAULT_TYPEgetr   r   _oid_value_type)selfr1   r   rA   r   r   r   __init__M   s"    



	
zNameAttribute.__init__r?   r@   )returnc             C   s$   t | j| jj}d|t| jf S )z
        Format as RFC4514 Distinguished Name string.

        Use short attribute name if available, otherwise fall back to OID
        dotted string.
        z%s=%s)_NAMEOID_TO_NAMEr>   r1   Zdotted_stringr/   r   )rB   keyr   r   r   rfc4514_stringr   s    zNameAttribute.rfc4514_string)otherrD   c             C   s&   t |tstS | j|jko$| j|jkS )N)r4   r0   NotImplementedr1   r   )rB   rH   r   r   r   __eq__|   s    
zNameAttribute.__eq__c             C   s
   | |k S )Nr   )rB   rH   r   r   r   __ne__   s    zNameAttribute.__ne__c             C   s   t | j| jfS )N)hashr1   r   )rB   r   r   r   __hash__   s    zNameAttribute.__hash__c             C   s
   d | S )Nz/<NameAttribute(oid={0.oid}, value={0.value!r})>)format)rB   r   r   r   __repr__   s    zNameAttribute.__repr__N)r   r   r   r<   r   r6   rC   r   Zread_only_propertyr1   r   rG   objectboolrJ   rK   intrM   rO   r   r   r   r   r0   L   s   "


r0   c               @   s   e Zd Zeje dddZeje dddZe	dddZ
eed	d
dZeed	ddZedddZeje dddZedddZe	dddZdS )RelativeDistinguishedName)
attributesc             C   s\   t |}|stdtdd |D s.td|| _t|| _t| jt|krXtdd S )Nz-a relative distinguished name cannot be emptyc             s   s   | ]}t |tV  qd S )N)r4   r0   )r   xr   r   r   	<genexpr>   s    z5RelativeDistinguishedName.__init__.<locals>.<genexpr>z/attributes must be an iterable of NameAttributez$duplicate attributes are not allowed)listr;   allr5   _attributes	frozenset_attribute_setr9   )rB   rT   r   r   r   rC      s    
z"RelativeDistinguishedName.__init__)rD   c                s    fdd| D S )Nc                s   g | ]}|j  kr|qS r   )r1   )r   r   )r1   r   r   
<listcomp>   s    zDRelativeDistinguishedName.get_attributes_for_oid.<locals>.<listcomp>r   )rB   r1   r   )r1   r   get_attributes_for_oid   s    z0RelativeDistinguishedName.get_attributes_for_oidc             C   s   d dd | jD S )z
        Format as RFC4514 Distinguished Name string.

        Within each RDN, attributes are joined by '+', although that is rarely
        used in certificates.
        r$   c             s   s   | ]}|  V  qd S )N)rG   )r   attrr   r   r   rV      s    z;RelativeDistinguishedName.rfc4514_string.<locals>.<genexpr>)joinrY   )rB   r   r   r   rG      s    z(RelativeDistinguishedName.rfc4514_string)rH   rD   c             C   s   t |tstS | j|jkS )N)r4   rS   rI   r[   )rB   rH   r   r   r   rJ      s    
z RelativeDistinguishedName.__eq__c             C   s
   | |k S )Nr   )rB   rH   r   r   r   rK      s    z RelativeDistinguishedName.__ne__c             C   s
   t | jS )N)rL   r[   )rB   r   r   r   rM      s    z"RelativeDistinguishedName.__hash__c             C   s
   t | jS )N)iterrY   )rB   r   r   r   __iter__   s    z"RelativeDistinguishedName.__iter__c             C   s
   t | jS )N)r9   rY   )rB   r   r   r   __len__   s    z!RelativeDistinguishedName.__len__c             C   s   d |  S )Nz<RelativeDistinguishedName({})>)rN   rG   )rB   r   r   r   rO      s    z"RelativeDistinguishedName.__repr__N)r   r   r   typingIterabler0   rC   Listr]   r6   rG   rP   rQ   rJ   rK   rR   rM   Iteratorra   rb   rO   r   r   r   r   rS      s   	rS   c               @   s   e Zd Zdd ZedddZeje dddZ	e
eje ddd	ZdedddZeedddZeedddZedddZeje dddZedddZedddZd
S )Namec             C   sR   t |}tdd |D r,dd |D | _n"tdd |D rF|| _ntdd S )Nc             s   s   | ]}t |tV  qd S )N)r4   r0   )r   rU   r   r   r   rV      s    z Name.__init__.<locals>.<genexpr>c             S   s   g | ]}t |gqS r   )rS   )r   rU   r   r   r   r\      s    z!Name.__init__.<locals>.<listcomp>c             s   s   | ]}t |tV  qd S )N)r4   rS   )r   rU   r   r   r   rV      s    zNattributes must be a list of NameAttribute or a list RelativeDistinguishedName)rW   rX   rY   r5   )rB   rT   r   r   r   rC      s    zName.__init__)rD   c             C   s   d dd t| jD S )a  
        Format as RFC4514 Distinguished Name string.
        For example 'CN=foobar.com,O=Foo Corp,C=US'

        An X.509 name is a two-level structure: a list of sets of attributes.
        Each list element is separated by ',' and within each list element, set
        elements are separated by '+'. The latter is almost never used in
        real world certificates. According to RFC4514 section 2.1 the
        RDNSequence must be reversed when converting to string representation.
        r%   c             s   s   | ]}|  V  qd S )N)rG   )r   r^   r   r   r   rV      s    z&Name.rfc4514_string.<locals>.<genexpr>)r_   reversedrY   )rB   r   r   r   rG      s    zName.rfc4514_stringc                s    fdd| D S )Nc                s   g | ]}|j  kr|qS r   )r1   )r   r   )r1   r   r   r\      s    z/Name.get_attributes_for_oid.<locals>.<listcomp>r   )rB   r1   r   )r1   r   r]      s    zName.get_attributes_for_oidc             C   s   | j S )N)rY   )rB   r   r   r   rdns   s    z	Name.rdnsNc             C   s   t |}|| S )N)r   Zx509_name_bytes)rB   backendr   r   r   public_bytes   s    zName.public_bytes)rH   rD   c             C   s   t |tstS | j|jkS )N)r4   rg   rI   rY   )rB   rH   r   r   r   rJ      s    
zName.__eq__c             C   s
   | |k S )Nr   )rB   rH   r   r   r   rK      s    zName.__ne__c             C   s   t t| jS )N)rL   tuplerY   )rB   r   r   r   rM      s    zName.__hash__c             c   s(   x"| j D ]}x|D ]
}|V  qW qW d S )N)rY   )rB   rdnZavar   r   r   ra      s    
zName.__iter__c             C   s   t dd | jD S )Nc             s   s   | ]}t |V  qd S )N)r9   )r   rm   r   r   r   rV      s    zName.__len__.<locals>.<genexpr>)sumrY   )rB   r   r   r   rb      s    zName.__len__c             C   s    d dd | jD }d|S )Nr%   c             s   s   | ]}|  V  qd S )N)rG   )r   r^   r   r   r   rV      s    z Name.__repr__.<locals>.<genexpr>z
<Name({})>)r_   rY   rN   )rB   ri   r   r   r   rO      s    zName.__repr__)N)r   r   r   rC   r6   rG   rc   re   r0   r]   propertyrd   rS   ri   bytesrk   rP   rQ   rJ   rK   rR   rM   rf   ra   rb   rO   r   r   r   r   rg      s   rg   )#rc   enumr   Zcryptographyr   Zcryptography.hazmat.backendsr   Zcryptography.x509.oidr   r   r   Z_ASN1_TYPE_TO_ENUMrP   r<   r7   r   r8   ZSERIAL_NUMBERZDN_QUALIFIERZEMAIL_ADDRESSr   ZDOMAIN_COMPONENTr=   ZCOMMON_NAMEZLOCALITY_NAMEZSTATE_OR_PROVINCE_NAMEZORGANIZATION_NAMEZORGANIZATIONAL_UNIT_NAMEZSTREET_ADDRESSZUSER_IDrE   r/   r0   rS   rg   r   r   r   r   <module>   s4   
@1