File: //usr/local/lib/python3.9/site-packages/celery/security/__pycache__/certificate.cpython-39.pyc
a
X>h� � @ s d Z ddlmZ ddlZddlZddlZddlmZmZ ddl m
Z
ddl m Z m
Z
ddlmZ ddlmZmZ dd lmZ d
d lmZ er�dd lmZ dd
lmZ ddlm Z ddl m Z ddl m Z ddl!m"Z" ddl#m$Z$ dZ%G dd� d�Z&G dd� d�Z'G dd� de'�Z(dS )zX.509 certificates.� )� annotationsN)�
TYPE_CHECKING�Iterator)�default_backend)�padding�rsa)�load_pem_x509_certificate)� bytes_to_str� ensure_bytes)�
SecurityError� )�reraise_errors)� DSAPublicKey)�EllipticCurvePublicKey)�Ed448PublicKey)�Ed25519PublicKey)� RSAPublicKey)� Prehashed)�
HashAlgorithm)� Certificate� CertStore� FSCertStorec @ sz e Zd ZdZddd�dd�Zdd�d d
�Zd d�d d
�Zdd�dd�Zdd�dd�Zdd�dd�Z ddddd�dd�Z
dS )r zX.509 certificate.�str�None��cert�returnc C s` t dtfd��> tt|�t� d�| _t| j�� tj �s>td��W d � n1 sR0 Y d S )NzInvalid certificate: {0!r})�errors)�backendz'Non-RSA certificates are not supported.)
r
�
ValueErrorr r
r �_cert�
isinstance�
public_keyr r )�selfr � r$ �E/usr/local/lib/python3.9/site-packages/celery/security/certificate.py�__init__" s �
�zCertificate.__init__�bool�r c C s t j �t jj�| jjkS )z%Check if the certificate has expired.)�datetime�now�timezone�utcr Znot_valid_after_utc�r# r$ r$ r% � has_expired, s zCertificate.has_expiredzXDSAPublicKey | EllipticCurvePublicKey | Ed448PublicKey | Ed25519PublicKey | RSAPublicKeyc C s
| j �� S �N)r r" r- r$ r$ r% �
get_pubkey0 s zCertificate.get_pubkey�intc C s | j jS )z,Return the serial number in the certificate.)r Z
serial_numberr- r$ r$ r% �get_serial_number5 s z Certificate.get_serial_numberc C s d� dd� | jjD ��S )z Return issuer (CA) as a string.� c s s | ] }|j V qd S r/ )�value)�.0�xr$ r$ r% � <genexpr>; � z)Certificate.get_issuer.<locals>.<genexpr>)�joinr Zissuerr- r$ r$ r% �
get_issuer9 s zCertificate.get_issuerc C s | � � � d| �� � �S )z<Serial number/issuer pair uniquely identifies a certificate.r3 )r: r2 r- r$ r$ r% �get_id= s zCertificate.get_id�byteszHashAlgorithm | Prehashed)�data� signature�digestr c C s\ t d��@ tjt�|�tjjd�}| �� �|t|�||� W d � n1 sN0 Y dS )z,Verify signature for string containing data.zBad signature: {0!r})ZmgfZ salt_lengthN)r
r ZPSSZMGF1Z
MAX_LENGTHr0 �verifyr
)r# r= r> r? �padr$ r$ r% r@ A s
�zCertificate.verifyN) �__name__�
__module__� __qualname__�__doc__r& r. r0 r2 r: r; r@ r$ r$ r$ r% r s
r c @ sL e Zd ZdZdd�dd�Zdd�dd�Zd d
d �d d
�Zd
dd�dd�ZdS )r z"Base class for certificate stores.r r( c C s
i | _ d S r/ )�_certsr- r$ r$ r% r& O s zCertStore.__init__zIterator[Certificate]c c s | j �� E dH dS )z Return certificate iterator.N)rF �valuesr- r$ r$ r% � itercertsR s zCertStore.itercertsr r )�idr c C s6 z| j t|� W S ty0 td|����Y n0 dS )zGet certificate by id.zUnknown certificate: N)rF r �KeyErrorr )r# rI r$ r$ r% � __getitem__V s zCertStore.__getitem__r c C s2 t |�� �}|| jv r$tdt����|| j|< d S )NzDuplicate certificate: )r r; rF r rI )r# r Zcert_idr$ r$ r% �add_cert] s
zCertStore.add_certN)rB rC rD rE r& rH rK rL r$ r$ r$ r% r L s
r c s( e Zd ZdZddd�� fdd� Z� ZS )r z File system certificate store.r r )�pathr c s� t � �� tj�|�r$tj�|d�}t�|�D ]\}t|��@}t|� � �}|�
� rbt d|� � ����| �
|� W d � q.1 s�0 Y q.d S )N�*zExpired certificate: )�superr& �osrM �isdirr9 �glob�openr �readr. r r; rL )r# rM �p�fr �� __class__r$ r% r& g s
�zFSCertStore.__init__)rB rC rD rE r& �
__classcell__r$ r$ rW r% r d s r ))rE �
__future__r r) rR rP �typingr r Z cryptography.hazmat.backendsr Z)cryptography.hazmat.primitives.asymmetricr r Zcryptography.x509r Zkombu.utils.encodingr r
Zcelery.exceptionsr �utilsr
Z-cryptography.hazmat.primitives.asymmetric.dsar Z,cryptography.hazmat.primitives.asymmetric.ecr Z/cryptography.hazmat.primitives.asymmetric.ed448r Z1cryptography.hazmat.primitives.asymmetric.ed25519r Z-cryptography.hazmat.primitives.asymmetric.rsar Z/cryptography.hazmat.primitives.asymmetric.utilsr Z%cryptography.hazmat.primitives.hashesr �__all__r r r r$ r$ r$ r% �<module> s. -