T6[c@sddlmZddlmZddlmZddlmZmZmZm Z m Z m Z ddl m ZddlmZmZmZddlmZmZmZmZmZ m!Z"m#Z$ej%Z&ej'Z(dd d Z)ej*Z+ej,Z-d e.fd YZ/eee/Z0d Z1e2dZ3dZ4dZ5dZ6de7fdYZ8de7fdYZ9e9Z:de7fdYZ;dZ<dZ=de7fdYZ>e>Z?de7fdYZ@e@ZAde7fdYZBeBZCd e7fd!YZDeDZEd"e7fd#YZFeFZGd$e.fd%YZHd&e7fd'YZId(ZJd)ZKe2e2d*ZLd+ZMd,e7fd-YZNd.e7fd/YZOeOZPd0e7fd1YZQeQZRd2e7fd3YZSeSZTd4e7fd5YZUeUZVd6e7fd7YZWe2d8ZXd9ZYd:ZZd;Z[d<Z\d=Z]d>Z^e2d?Z_d@Z`y$ddAlambZbddBlcmdZdWneek rnXe`ebed[b[dejfejgdCS(Di(ttime(t b16encode(tpartial(t__eq__t__ne__t__lt__t__le__t__gt__t__ge__(twarn(t integer_typest text_typetPY3(tffitlibtexception_from_error_queuet byte_stringtnativet UNSPECIFIEDttext_to_bytes_and_warniiitErrorcBseZdZRS(s7 An error occurred in an `OpenSSL.crypto` API. (t__name__t __module__t__doc__(((s2/usr/lib/python2.7/dist-packages/OpenSSL/crypto.pyR!scCstd|fdS(s An OpenSSL API failed somehow. Additionally, the failure which was encountered isn't one that's exercised by the test suite so future behavior of pyOpenSSL is now somewhat less predictable. sUnknown %s failureN(t RuntimeError(twhere((s2/usr/lib/python2.7/dist-packages/OpenSSL/crypto.pyt_untested_error+scCs|dkr-tjtj}tj}n6tjd|}tj|t|}|d}|tj kr|t ntj ||}|S(s Allocate a new OpenSSL memory BIO. Arrange for the garbage collector to clean it up automatically. :param buffer: None or some bytes to use to put into the BIO so that they can be read out. schar[]cSs tj|S(N(t_libtBIO_free(tbiotref((s2/usr/lib/python2.7/dist-packages/OpenSSL/crypto.pytfreeEsN( tNoneRtBIO_newt BIO_s_memRt_ffitnewtBIO_new_mem_buftlentNULLt_raise_current_errortgc(tbufferRRtdata((s2/usr/lib/python2.7/dist-packages/OpenSSL/crypto.pyt _new_mem_buf5s    cCs6tjd}tj||}tj|d|S(sO Copy the contents of an OpenSSL BIO object into a Python byte string. schar**i(R#R$RtBIO_get_mem_dataR*(Rt result_buffert buffer_length((s2/usr/lib/python2.7/dist-packages/OpenSSL/crypto.pyt_bio_to_stringQscCst|tstdntjtjd||}|dkrtjtjtj }tj ||t |tj tjd|}|st dqtndS(s The the time value of an ASN1 time object. @param boundary: An ASN1_GENERALIZEDTIME pointer (or an object safely castable to that type) which will have its value set. @param when: A string representation of the desired time value. @raise TypeError: If C{when} is not a L{bytes} string. @raise ValueError: If C{when} does not represent a time in the required format. @raise RuntimeError: If the time value cannot be set for some other (unspecified) reason. swhen must be a byte stringsASN1_GENERALIZEDTIME*isInvalid stringN(t isinstancetbytest TypeErrorRtASN1_GENERALIZEDTIME_set_stringR#tcastR)tASN1_STRING_newtASN1_STRING_freetASN1_STRING_setR&tASN1_GENERALIZEDTIME_checkt ValueErrorR(tboundarytwhent set_resulttdummyt check_result((s2/usr/lib/python2.7/dist-packages/OpenSSL/crypto.pyt_set_asn1_time[s cCstjd|}tj|dkr+dStj|tjkrYtjtj|Stj d}tj |||dtj krt dnItjd|d}tj|}tj|}tj |d|SdS(s] Retrieve the time value of an ASN1 time object. @param timestamp: An ASN1_GENERALIZEDTIME* (or an object safely castable to that type) from which the time value will be retrieved. @return: The time value from C{timestamp} as a L{bytes} string in a certain format. Or C{None} if the object contains no time value. s ASN1_STRING*isASN1_GENERALIZEDTIME**tASN1_TIME_to_generalizedtimeN(R#R5RtASN1_STRING_lengthR tASN1_STRING_typetV_ASN1_GENERALIZEDTIMEtstringtASN1_STRING_dataR$RAR'RtASN1_GENERALIZEDTIME_free(t timestamptstring_timestamptgeneralized_timestampt string_datat string_result((s2/usr/lib/python2.7/dist-packages/OpenSSL/crypto.pyt_get_asn1_timezs  t_X509NameInvalidatorcBs#eZdZdZdZRS(cCs g|_dS(N(t_names(tself((s2/usr/lib/python2.7/dist-packages/OpenSSL/crypto.pyt__init__scCs|jj|dS(N(ROtappend(RPtname((s2/usr/lib/python2.7/dist-packages/OpenSSL/crypto.pytaddscCsx|jD] }|`q WdS(N(ROt_name(RPRS((s2/usr/lib/python2.7/dist-packages/OpenSSL/crypto.pytclears(RRRQRTRV(((s2/usr/lib/python2.7/dist-packages/OpenSSL/crypto.pyRNs  tPKeycBsAeZeZeZdZdZdZdZ dZ RS(cCs1tj}tj|tj|_t|_dS(N(Rt EVP_PKEY_newR#R)t EVP_PKEY_freet_pkeytFalset _initialized(RPtpkey((s2/usr/lib/python2.7/dist-packages/OpenSSL/crypto.pyRQs cCst|tstdnt|ts<tdntj}tj|tj}tj|tj |t kr|dkrt dntj }tj |||tj}|dkrtntj|j|}|stqn|tkrtj|tjdtjtjtjtj}|tjkrQtntj|sjtntj|j|stqn tdt|_dS(s Generate a key of a given type, with a given number of a bits :param type: The key type (TYPE_RSA or TYPE_DSA) :param bits: The number of bits :return: None stype must be an integersbits must be an integerisInvalid number of bitssNo such key typeN(R1tintR3RtBN_newR#R)tBN_freet BN_set_wordtRSA_F4tTYPE_RSAR:tRSA_newtRSA_generate_key_exR'R(tEVP_PKEY_assign_RSARZtTYPE_DSAtDSA_generate_parameterstDSA_generate_keytEVP_PKEY_assign_DSARtTrueR\(RPttypetbitstexponenttrsatresulttdsa((s2/usr/lib/python2.7/dist-packages/OpenSSL/crypto.pyt generate_keys8         *    cCs|jrtdntj|jjtjkrEtdntj|j}tj |tj }tj |}|rt St dS(s Check the consistency of an RSA private key. :return: True if key is consistent. :raise Error: if the key is inconsistent. :raise TypeError: if the key is of a type which cannot be checked. Only RSA keys can currently be checked. spublic key onlyskey type unsupportedN(t _only_publicR3Rt EVP_PKEY_typeRZRlt EVP_PKEY_RSAtEVP_PKEY_get1_RSAR#R)tRSA_freet RSA_check_keyRkR((RPRoRp((s2/usr/lib/python2.7/dist-packages/OpenSSL/crypto.pytchecks cCs |jjS(sT Returns the type of the key :return: The type of the key. (RZRl(RP((s2/usr/lib/python2.7/dist-packages/OpenSSL/crypto.pyRl scCstj|jS(sh Returns the number of bits of the key :return: The number of bits of the key. (Rt EVP_PKEY_bitsRZ(RP((s2/usr/lib/python2.7/dist-packages/OpenSSL/crypto.pyRms( RRR[RsRkR\RQRrRyRlRm(((s2/usr/lib/python2.7/dist-packages/OpenSSL/crypto.pyRWs  <  t_EllipticCurvecBsneZdZdZer$dZnedZedZ edZ dZ dZ dZ RS( sZ A representation of a supported elliptic curve. @cvar _curves: :py:obj:`None` until an attempt is made to load the curves. Thereafter, a :py:type:`set` containing :py:type:`_EllipticCurve` instances each of which represents one curve supported by the system. @type _curves: :py:type:`NoneType` or :py:type:`set` cCs)t|tr%tt|j|StS(s Implement cooperation with the right-hand side argument of ``!=``. Python 3 seems to have dropped this cooperation in this very narrow circumstance. (R1R{tsuperRtNotImplemented(RPtother((s2/usr/lib/python2.7/dist-packages/OpenSSL/crypto.pyR,scsdjr]jtjd}tjd|}j||tfd|DStS(s Get the curves supported by OpenSSL. :param lib: The OpenSSL library binding object. :return: A :py:type:`set` of ``cls`` instances giving the names of the elliptic curves the underlying library supports. isEC_builtin_curve[]c3s$|]}j|jVqdS(N(tfrom_nidtnid(t.0tc(tclsR(s2/usr/lib/python2.7/dist-packages/OpenSSL/crypto.pys Js(tCryptography_HAS_ECtEC_get_builtin_curvesR#R'R$tset(RRt num_curvestbuiltin_curves((RRs2/usr/lib/python2.7/dist-packages/OpenSSL/crypto.pyt_load_elliptic_curves8s  cCs+|jdkr$|j||_n|jS(s Get, cache, and return the curves supported by OpenSSL. :param lib: The OpenSSL library binding object. :return: A :py:type:`set` of ``cls`` instances giving the names of the elliptic curves the underlying library supports. N(t_curvesR R(RR((s2/usr/lib/python2.7/dist-packages/OpenSSL/crypto.pyt_get_elliptic_curvesOs cCs+|||tj|j|jdS(s Instantiate a new :py:class:`_EllipticCurve` associated with the given OpenSSL NID. :param lib: The OpenSSL library binding object. :param nid: The OpenSSL NID the resulting curve object will represent. This must be a curve NID (and not, for example, a hash NID) or subsequent operations will fail in unpredictable ways. :type nid: :py:class:`int` :return: The curve object. tascii(R#REt OBJ_nid2sntdecode(RRR((s2/usr/lib/python2.7/dist-packages/OpenSSL/crypto.pyR^scCs||_||_||_dS(s :param _lib: The :py:mod:`cryptography` binding instance used to interface with OpenSSL. :param _nid: The OpenSSL NID identifying the curve this object represents. :type _nid: :py:class:`int` :param name: The OpenSSL short name identifying the curve this object represents. :type name: :py:class:`unicode` N(Rt_nidRS(RPRRRS((s2/usr/lib/python2.7/dist-packages/OpenSSL/crypto.pyRQps  cCsd|jfS(Ns (RS(RP((s2/usr/lib/python2.7/dist-packages/OpenSSL/crypto.pyt__repr__scCs(|jj|j}tj|tjS(s Create a new OpenSSL EC_KEY structure initialized to use this curve. The structure is automatically garbage collected when the Python object is garbage collected. (RtEC_KEY_new_by_curve_nameRR#R)t EC_KEY_free(RPtkey((s2/usr/lib/python2.7/dist-packages/OpenSSL/crypto.pyt _to_EC_KEYsN(RRRR Rt_PY3Rt classmethodRRRRQRR(((s2/usr/lib/python2.7/dist-packages/OpenSSL/crypto.pyR{s   cCs tjtS(s Return a set of objects representing the elliptic curves supported in the OpenSSL build in use. The curve objects have a :py:class:`unicode` ``name`` attribute by which they identify themselves. The curve objects are useful as values for the argument accepted by :py:meth:`Context.set_tmp_ecdh` to specify which elliptical curve should be used for ECDHE key exchange. (R{RR(((s2/usr/lib/python2.7/dist-packages/OpenSSL/crypto.pytget_elliptic_curvess cCs:x$tD]}|j|kr |Sq Wtd|dS(sT Return a single curve object selected by name. See :py:func:`get_elliptic_curves` for information about curve objects. :param name: The OpenSSL short name identifying the curve object to retrieve. :type name: :py:class:`unicode` If the named curve is not supported then :py:class:`ValueError` is raised. sunknown curve nameN(RRSR:(RStcurve((s2/usr/lib/python2.7/dist-packages/OpenSSL/crypto.pytget_elliptic_curves tX509NamecBseZdZdZdZdZeeZeeZeeZee Z ee Z ee Z dZ dZ dZdZRS(cCs.tj|j}tj|tj|_dS(s~ Create a new X509Name, copying the given X509Name instance. :param name: An X509Name object to copy N(Rt X509_NAME_dupRUR#R)tX509_NAME_free(RPRS((s2/usr/lib/python2.7/dist-packages/OpenSSL/crypto.pyRQsc Cs|jdr(tt|j||St|tk rYtdt|jfntj t |}|tj kry t Wnt k rnXtdnxttj|jD]k}tj|j|}tj|}tj|}||krtj|j|}tj|PqqWt|trT|jd}ntj|j|tj|ddd}|st ndS(Nt_s+attribute name must be string, not '%.200s'sNo such attributesutf-8ii(t startswithR|Rt __setattr__RltstrR3RRt OBJ_txt2nidt _byte_stringt NID_undefR(RtAttributeErrortrangetX509_NAME_entry_countRUtX509_NAME_get_entrytX509_NAME_ENTRY_get_objectt OBJ_obj2nidtX509_NAME_delete_entrytX509_NAME_ENTRY_freeR1t _text_typetencodetX509_NAME_add_entry_by_NIDt MBSTRING_UTF8( RPRStvalueRtitenttent_objtent_nidt add_result((s2/usr/lib/python2.7/dist-packages/OpenSSL/crypto.pyRs4    !c Cstjt|}|tjkrYy tWntk rBnXtt|j|Stj |j |d}|dkrdStj |j |}tj |}tjd}tj||}|dkrtnz$tj|d|jd}Wdtj|dX|S(s  Find attribute. An X509Name object has the following attributes: countryName (alias C), stateOrProvince (alias ST), locality (alias L), organization (alias O), organizationalUnit (alias OU), commonName (alias CN) and more... isunsigned char**isutf-8N(RRRRR(RR|Rt __getattr__tX509_NAME_get_index_by_NIDRUR RtX509_NAME_ENTRY_get_dataR#R$tASN1_STRING_to_UTF8R*Rt OPENSSL_free( RPRSRt entry_indextentryR+R.t data_lengthRp((s2/usr/lib/python2.7/dist-packages/OpenSSL/crypto.pyRs(     $csfd}|S(Ncs8t|tstStj|j|j}|dS(Ni(R1RR}Rt X509_NAME_cmpRU(RPR~Rp(top(s2/usr/lib/python2.7/dist-packages/OpenSSL/crypto.pytfs((RR((Rs2/usr/lib/python2.7/dist-packages/OpenSSL/crypto.pyt_cmpscCsctjdd}tj|j|t|}|tjkrItndttj |fS(s6 String representation of an X509Name schar[]is( R#R$RtX509_NAME_onelineRUR&R'R(t_nativeRE(RPR.t format_result((s2/usr/lib/python2.7/dist-packages/OpenSSL/crypto.pyRs cCstj|jS(sK Return the hash value of this name :return: None (RtX509_NAME_hashRU(RP((s2/usr/lib/python2.7/dist-packages/OpenSSL/crypto.pythash/scCsftjd}tj|j|}|dkr:tntj|d|}tj|d|S(s Return the DER encoding of this name :return: A :py:class:`bytes` instance giving the DER encoded form of this name. sunsigned char**i(R#R$Rt i2d_X509_NAMERUR(R*R(RPR.t encode_resultRL((s2/usr/lib/python2.7/dist-packages/OpenSSL/crypto.pytder8s  cCsg}xttj|jD]}tj|j|}tj|}tj|}tj|}tj|}|j t j |t j tj |tj |fqW|S(so Returns the split-up components of this name. :return: List of tuples (name, value). (RRRRURRRRRRRR#RERFRB(RPRpRRtfnametfvalRRS((s2/usr/lib/python2.7/dist-packages/OpenSSL/crypto.pytget_componentsJs  (RRRQRRRRRRRRRRRRR(((s2/usr/lib/python2.7/dist-packages/OpenSSL/crypto.pyRs % )         t X509ExtensioncBsweZd d dZedZidej6dej6dej 6Z dZ dZ dZ dZd ZRS( cCstjd}tj|tjtjtjtjdtj||dk r}t|tsnt dn|j |_ n|dk rt|tst dn|j |_ n|rd|}ntj tj|||}|tjkrtntj|tj|_dS(s  :param typename: The name of the extension to create. :type typename: :py:data:`str` :param critical: A flag indicating whether this is a critical extension. :param value: The value of the extension. :type value: :py:data:`str` :param subject: Optional X509 cert to use as subject. :type subject: :py:class:`X509` :param issuer: Optional X509 cert to use as issuer. :type issuer: :py:class:`X509` :return: The X509Extension object s X509V3_CTX*isissuer must be an X509 instances subject must be an X509 instances critical,N(R#R$RtX509V3_set_ctxR'tX509V3_set_ctx_nodbR R1tX509R3t_x509t issuer_certt subject_certtX509V3_EXT_nconfR(R)tX509_EXTENSION_freet _extension(RPt type_nametcriticalRtsubjecttissuertctxt extension((s2/usr/lib/python2.7/dist-packages/OpenSSL/crypto.pyRQes"(     cCstj|jjS(N(RRRtobject(RP((s2/usr/lib/python2.7/dist-packages/OpenSSL/crypto.pyRstemailtDNStURIcCstj|j}|tjkr+tn|jjj}|jjj}tj d}||d<|j tjkrtj |j }tj tj|||}tj d|}n$tj d|jtj||}g}xttj|D]} tj|| } y|j| j} WnCtk rgt} tj| | |jtt| qXttj| jjj| jjj} |j| d| qWdj|S(Nsunsigned char**isGENERAL_NAMES*t:s, (RtX509V3_EXT_getRR#R'R(RR+tlengthR$titt ASN1_ITEM_ptrt ASN1_item_d2iR5td2iRtsk_GENERAL_NAME_numtsk_GENERAL_NAME_valuet _prefixesRltKeyErrorR,tGENERAL_NAME_printRRRR0R*tdtia5tjoin(RPtmethodtpayloadRt payloadptrtptrR+tnamestpartsRRStlabelRR((s2/usr/lib/python2.7/dist-packages/OpenSSL/crypto.pyt_subjectAltNameStrings6    (cCs`tj|jkr|jSt}tj||jdd}|sPtntt |S(sF :return: a nice text representation of the extension i( RtNID_subject_alt_nameRRR,tX509V3_EXT_printRR(RR0(RPRt print_result((s2/usr/lib/python2.7/dist-packages/OpenSSL/crypto.pyt__str__s   cCstj|jS(sg Returns the critical field of the X509Extension :return: The critical field. (RtX509_EXTENSION_get_criticalR(RP((s2/usr/lib/python2.7/dist-packages/OpenSSL/crypto.pyt get_criticalscCs7tj|j}tj|}tjtj|S(sx Returns the short version of the type name of the X509Extension :return: The short type name. (RtX509_EXTENSION_get_objectRRR#RER(RPtobjR((s2/usr/lib/python2.7/dist-packages/OpenSSL/crypto.pytget_short_namescCsStj|j}tjd|}tj|}tj|}tj||S(s Returns the data of the X509Extension :return: A :py:data:`str` giving the X509Extension's ASN.1 encoded data. s ASN1_STRING*(RtX509_EXTENSION_get_dataRR#R5RFRBR*(RPt octet_resultRLt char_resultt result_length((s2/usr/lib/python2.7/dist-packages/OpenSSL/crypto.pytget_datas N(RRR RQtpropertyRRt GEN_EMAILtGEN_DNStGEN_URIRRRRRR(((s2/usr/lib/python2.7/dist-packages/OpenSSL/crypto.pyRds9    $  tX509ReqcBsbeZdZdZdZdZdZdZdZdZ dZ d Z RS( cCs(tj}tj|tj|_dS(N(Rt X509_REQ_newR#R)t X509_REQ_freet_req(RPtreq((s2/usr/lib/python2.7/dist-packages/OpenSSL/crypto.pyRQs cCs,tj|j|j}|s(tndS(s Set the public key of the certificate request :param pkey: The public key to use :return: None N(RtX509_REQ_set_pubkeyR RZR((RPR]R=((s2/usr/lib/python2.7/dist-packages/OpenSSL/crypto.pyt set_pubkeyscCshtjt}tj|j|_|jtjkr@tntj |jtj |_t |_ |S(sb Get the public key from the certificate request :return: The public key ( RWt__new__RtX509_REQ_get_pubkeyR RZR#R'R(R)RYRkRs(RPR]((s2/usr/lib/python2.7/dist-packages/OpenSSL/crypto.pyt get_pubkeys  cCs)tj|j|}|s%tndS(s Set the version subfield (RFC 2459, section 4.1.2.1) of the certificate request. :param version: The version number :return: None N(RtX509_REQ_set_versionR R((RPtversionR=((s2/usr/lib/python2.7/dist-packages/OpenSSL/crypto.pyt set_version"scCstj|jS(s Get the version subfield (RFC 2459, section 4.1.2.1) of the certificate request. :return: an integer giving the value of the version subfield (RtX509_REQ_get_versionR (RP((s2/usr/lib/python2.7/dist-packages/OpenSSL/crypto.pyt get_version/scCsMtjt}tj|j|_|jtjkr@tn||_ |S(s{ Create an X509Name object for the subject of the certificate request :return: An X509Name object ( RRRtX509_REQ_get_subject_nameR RUR#R'R(t_owner(RPRS((s2/usr/lib/python2.7/dist-packages/OpenSSL/crypto.pyt get_subject9s   cCstj}|tjkr%tntj|tj}x?|D]7}t|tset dntj ||j qAWtj |j |}|stndS(s Add extensions to the request. :param extensions: a sequence of X509Extension objects :return: None s+One of the elements is not an X509ExtensionN(Rtsk_X509_EXTENSION_new_nullR#R'R(R)tsk_X509_EXTENSION_freeR1RR:tsk_X509_EXTENSION_pushRtX509_REQ_add_extensionsR (RPt extensionststacktextR((s2/usr/lib/python2.7/dist-packages/OpenSSL/crypto.pytadd_extensionsLs   cCsmg}tj|j}xNttj|D]7}tjt}tj|||_|j |q.W|S(s{ Get extensions to the request. :return: A :py:class:`list` of :py:class:`X509Extension` objects. ( RtX509_REQ_get_extensionsR Rtsk_X509_EXTENSION_numRRtsk_X509_EXTENSION_valueRRR(RPtextstnative_exts_objRR"((s2/usr/lib/python2.7/dist-packages/OpenSSL/crypto.pytget_extensionsgscCs|jrtdn|js0tdntjt|}|tjkrctdntj|j |j |}|st ndS(s Sign the certificate request using the supplied key and digest :param pkey: The key to sign with :param digest: The message digest to use :return: None sKey has only public partsKey is uninitializedsNo such digest methodN( RsR:R\RtEVP_get_digestbynameRR#R't X509_REQ_signR RZR((RPR]tdigestt digest_objt sign_result((s2/usr/lib/python2.7/dist-packages/OpenSSL/crypto.pytsignvs  cCsPt|tstdntj|j|j}|dkrLtn|S(s  Verifies a certificate request using the supplied public key :param key: a public key :return: True if the signature is correct. :raise OpenSSL.crypto.Error: If the signature is invalid or there is a problem verifying the signature. spkey must be a PKey instancei(R1RWR3RtX509_REQ_verifyR RZR((RPR]Rp((s2/usr/lib/python2.7/dist-packages/OpenSSL/crypto.pytverifys   ( RRRQRRRRRR#R)R/R1(((s2/usr/lib/python2.7/dist-packages/OpenSSL/crypto.pyR s      RcBseZdZedZdZdZdZdZdZ dZ dZ d Z d Z d Zd Zd ZdZdZdZdZdZdZdZdZdZdZdZdZdZdZdZdZ RS(cCs@tj}tj|tj|_t|_t|_dS(N( RtX509_newR#R)t X509_freeRRNt_issuer_invalidatort_subject_invalidator(RPtx509((s2/usr/lib/python2.7/dist-packages/OpenSSL/crypto.pyRQs  cCsC|j|}tj|tj|_t|_t|_|S(N( RR#R)RR3RRNR4R5(RR6tcert((s2/usr/lib/python2.7/dist-packages/OpenSSL/crypto.pyt_from_raw_x509_ptrs   cCs5t|tstdntj|j|dS(s Set version number of the certificate :param version: The version number :type version: :py:class:`int` :return: None sversion must be an integerN(R1R^R3RtX509_set_versionR(RPR((s2/usr/lib/python2.7/dist-packages/OpenSSL/crypto.pyRs cCstj|jS(so Return version number of the certificate :return: Version number as a Python integer (RtX509_get_versionR(RP((s2/usr/lib/python2.7/dist-packages/OpenSSL/crypto.pyRscCshtjt}tj|j|_|jtjkr@tntj |jtj |_t |_ |S(sX Get the public key of the certificate :return: The public key ( RWRRtX509_get_pubkeyRRZR#R'R(R)RYRkRs(RPR]((s2/usr/lib/python2.7/dist-packages/OpenSSL/crypto.pyRs  cCsJt|tstdntj|j|j}|sFtndS(ss Set the public key of the certificate :param pkey: The public key :return: None spkey must be a PKey instanceN(R1RWR3RtX509_set_pubkeyRRZR((RPR]R=((s2/usr/lib/python2.7/dist-packages/OpenSSL/crypto.pyRs cCst|tstdn|jr6tdn|jsNtdntjt|}|t j krtdntj |j |j |}|stndS(s Sign the certificate using the supplied key and digest :param pkey: The key to sign with :param digest: The message digest to use :return: None spkey must be a PKey instancesKey only has public partsKey is uninitializedsNo such digest methodN(R1RWR3RsR:R\RR*RR#R't X509_signRRZR((RPR]R,tevp_mdR.((s2/usr/lib/python2.7/dist-packages/OpenSSL/crypto.pyR/s  cCsU|jjjj}tj|}|tjkr?tdntj tj |S(s Retrieve the signature algorithm used in the certificate :return: A byte string giving the name of the signature algorithm used in the certificate. :raise ValueError: If the signature algorithm is undefined. sUndefined signature algorithm( Rt cert_infot signaturet algorithmRRRR:R#REt OBJ_nid2ln(RPtalgR((s2/usr/lib/python2.7/dist-packages/OpenSSL/crypto.pytget_signature_algorithm s cCstjt|}|tjkr3tdntjdtj}tjdd}t||deZdZdZdZdZdZdZRS(cCs(tj}tj|tj|_dS(N(RtNETSCAPE_SPKI_newR#R)tNETSCAPE_SPKI_freet_spki(RPtspki((s2/usr/lib/python2.7/dist-packages/OpenSSL/crypto.pyRQ{s cCs|jrtdn|js0tdntjt|}|tjkrctdntj|j |j |}|st ndS(s Sign the certificate request using the supplied key and digest :param pkey: The key to sign with :param digest: The message digest to use :return: None sKey has only public partsKey is uninitializedsNo such digest methodN( RsR:R\RR*RR#R'tNETSCAPE_SPKI_signR7RZR((RPR]R,R-R.((s2/usr/lib/python2.7/dist-packages/OpenSSL/crypto.pyR/s  cCs2tj|j|j}|dkr.tntS(s Verifies a certificate request using the supplied public key :param key: a public key :return: True if the signature is correct. :raise OpenSSL.crypto.Error: If the signature is invalid or there is a problem verifying the signature. i(RtNETSCAPE_SPKI_verifyR7RZR(Rk(RPRtanswer((s2/usr/lib/python2.7/dist-packages/OpenSSL/crypto.pyR1s   cCs2tj|j}tj|}tj||S(sk Generate a base64 encoded string from an SPKI :return: The base64 encoded string (RtNETSCAPE_SPKI_b64_encodeR7R#REt CRYPTO_free(RPtencodedRp((s2/usr/lib/python2.7/dist-packages/OpenSSL/crypto.pyt b64_encodes cCshtjt}tj|j|_|jtjkr@tntj |jtj |_t |_ |S(sX Get the public key of the certificate :return: The public key ( RWRRtNETSCAPE_SPKI_get_pubkeyR7RZR#R'R(R)RYRkRs(RPR]((s2/usr/lib/python2.7/dist-packages/OpenSSL/crypto.pyRs  cCs,tj|j|j}|s(tndS(sr Set the public key of the certificate :param pkey: The public key :return: None N(RtNETSCAPE_SPKI_set_pubkeyR7RZR((RPR]R=((s2/usr/lib/python2.7/dist-packages/OpenSSL/crypto.pyRs(RRRQR/R1R?RR(((s2/usr/lib/python2.7/dist-packages/OpenSSL/crypto.pyR4zs     RcBsJeZeedZedZedZedZdZ RS(cCsO|tkr'|dk r'tdn||_||_||_g|_dS(Ns0only FILETYPE_PEM key format supports encryption(RR R:t _passphraset _more_argst _truncatet _problems(RPRlRt more_argsttruncate((s2/usr/lib/python2.7/dist-packages/OpenSSL/crypto.pyRQs    cCsa|jdkrtjSt|jtr/tjSt|jrQtjd|jSt ddS(Ntpem_password_cbs(Last argument must be string or callable( RBR R#R'R1R2tcallableRt_read_passphraseR3(RP((s2/usr/lib/python2.7/dist-packages/OpenSSL/crypto.pyRscCsU|jdkrtjSt|jtr/|jSt|jrEtjStddS(Ns(Last argument must be string or callable(RBR R#R'R1R2RIR3(RP((s2/usr/lib/python2.7/dist-packages/OpenSSL/crypto.pyRscCsGyt|Wn|k r)}|}nX|jrC|jdn|S(Ni(t_exception_from_error_queueRE(RPt exceptionTypetet from_queue((s2/usr/lib/python2.7/dist-packages/OpenSSL/crypto.pyRs  cCsy|jr$|j|||}n|j|}t|tsQtdnt||kr|jry|| }qtdnx/tt|D]}|||d!||D scs0|tj@r|jn|jdS(N(Rt CRYPTO_LOCKtacquiretrelease(tmodeRtfilenametline(tlocks(s2/usr/lib/python2.7/dist-packages/OpenSSL/crypto.pytlocking_functionF s sunsigned long (*)(void)s$void (*)(int, int, const char*, int)( t_sslR#RRtCRYPTO_num_lockstCRYPTO_set_id_callbackR#RtCRYPTO_set_locking_callback(t get_identRRR((RRs2/usr/lib/python2.7/dist-packages/OpenSSL/crypto.pyt_initialize_openssl_threads@ s ((R(RN(hRtbase64Rt functoolsRtoperatorRRRRRRtwarningsR RtsixR RMR RR Rt OpenSSL._utilR R#RRRRKRRRRRRRR(tSSL_FILETYPE_PEMRtSSL_FILETYPE_ASN1RRRuRct EVP_PKEY_DSARgRORR(RR R,R0R@RMRRNRWtPKeyTypeR{RRRt X509NameTypeRtX509ExtensionTypeR t X509ReqTypeRtX509TypeRt X509StoreTypeRRRRRRRRtCRLTypeRt PKCS7TypeRt PKCS12TypeR4tNetscapeSPKITypeRRWR[R_R/R1RnRtRRtthreadRt threadingRt ImportErrortOpenSSL_add_all_algorithmstSSL_load_error_strings(((s2/usr/lib/python2.7/dist-packages/OpenSSL/crypto.pyts.4       ' ms  i  4 ~7TB $   # !   O