PNG  IHDRQgAMA a cHRMz&u0`:pQ<bKGDgmIDATxwUﹻ& ^CX(J I@ "% (** BX +*i"]j(IH{~R)[~>h{}gy)I$Ij .I$I$ʊy@}x.: $I$Ii}VZPC)I$IF ^0ʐJ$I$Q^}{"r=OzI$gRZeC.IOvH eKX $IMpxsk.쒷/&r[޳<v| .I~)@$updYRa$I |M.e JaֶpSYR6j>h%IRز if&uJ)M$I vLi=H;7UJ,],X$I1AҒJ$ XY XzI@GNҥRT)E@;]K*Mw;#5_wOn~\ DC&$(A5 RRFkvIR}l!RytRl;~^ǷJj اy뷦BZJr&ӥ8Pjw~vnv X^(I;4R=P[3]J,]ȏ~:3?[ a&e)`e*P[4]T=Cq6R[ ~ޤrXR Հg(t_HZ-Hg M$ãmL5R uk*`%C-E6/%[t X.{8P9Z.vkXŐKjgKZHg(aK9ڦmKjѺm_ \#$5,)-  61eJ,5m| r'= &ڡd%-]J on Xm|{ RҞe $eڧY XYrԮ-a7RK6h>n$5AVڴi*ֆK)mѦtmr1p| q:흺,)Oi*ֺK)ܬ֦K-5r3>0ԔHjJئEZj,%re~/z%jVMڸmrt)3]J,T K֦OvԒgii*bKiNO~%PW0=dii2tJ9Jݕ{7"I P9JKTbu,%r"6RKU}Ij2HKZXJ,妝 XYrP ެ24c%i^IK|.H,%rb:XRl1X4Pe/`x&P8Pj28Mzsx2r\zRPz4J}yP[g=L) .Q[6RjWgp FIH*-`IMRaK9TXcq*I y[jE>cw%gLRԕiFCj-ďa`#e~I j,%r,)?[gp FI˨mnWX#>mʔ XA DZf9,nKҲzIZXJ,L#kiPz4JZF,I,`61%2s $,VOϚ2/UFJfy7K> X+6 STXIeJILzMfKm LRaK9%|4p9LwJI!`NsiazĔ)%- XMq>pk$-$Q2x#N ؎-QR}ᶦHZډ)J,l#i@yn3LN`;nڔ XuX5pF)m|^0(>BHF9(cզEerJI rg7 4I@z0\JIi䵙RR0s;$s6eJ,`n 䂦0a)S)A 1eJ,堌#635RIgpNHuTH_SԕqVe ` &S)>p;S$魁eKIuX`I4춒o}`m$1":PI<[v9^\pTJjriRŭ P{#{R2,`)e-`mgj~1ϣLKam7&U\j/3mJ,`F;M'䱀 .KR#)yhTq;pcK9(q!w?uRR,n.yw*UXj#\]ɱ(qv2=RqfB#iJmmL<]Y͙#$5 uTU7ӦXR+q,`I}qL'`6Kͷ6r,]0S$- [RKR3oiRE|nӦXR.(i:LDLTJjY%o:)6rxzҒqTJjh㞦I.$YR.ʼnGZ\ֿf:%55 I˼!6dKxm4E"mG_ s? .e*?LRfK9%q#uh$)i3ULRfK9yxm܌bj84$i1U^@Wbm4uJ,ҪA>_Ij?1v32[gLRD96oTaR׿N7%L2 NT,`)7&ƝL*꽙yp_$M2#AS,`)7$rkTA29_Iye"|/0t)$n XT2`YJ;6Jx".e<`$) PI$5V4]29SRI>~=@j]lp2`K9Jaai^" Ԋ29ORI%:XV5]JmN9]H;1UC39NI%Xe78t)a;Oi Ҙ>Xt"~G>_mn:%|~ޅ_+]$o)@ǀ{hgN;IK6G&rp)T2i୦KJuv*T=TOSV>(~D>dm,I*Ɛ:R#ۙNI%D>G.n$o;+#RR!.eU˽TRI28t)1LWϚ>IJa3oFbu&:tJ*(F7y0ZR ^p'Ii L24x| XRI%ۄ>S1]Jy[zL$adB7.eh4%%누>WETf+3IR:I3Xה)3אOۦSRO'ٺ)S}"qOr[B7ϙ.edG)^ETR"RtRݜh0}LFVӦDB^k_JDj\=LS(Iv─aTeZ%eUAM-0;~˃@i|l @S4y72>sX-vA}ϛBI!ݎߨWl*)3{'Y|iSlEڻ(5KtSI$Uv02,~ԩ~x;P4ցCrO%tyn425:KMlD ^4JRxSهF_}شJTS6uj+ﷸk$eZO%G*^V2u3EMj3k%)okI]dT)URKDS 7~m@TJR~荪fT"֛L \sM -0T KfJz+nإKr L&j()[E&I ߴ>e FW_kJR|!O:5/2跌3T-'|zX ryp0JS ~^F>-2< `*%ZFP)bSn"L :)+pʷf(pO3TMW$~>@~ū:TAIsV1}S2<%ޟM?@iT ,Eūoz%i~g|`wS(]oȤ8)$ ntu`өe`6yPl IzMI{ʣzʨ )IZ2= ld:5+請M$-ї;U>_gsY$ÁN5WzWfIZ)-yuXIfp~S*IZdt;t>KūKR|$#LcԀ+2\;kJ`]YǔM1B)UbG"IRߊ<xܾӔJ0Z='Y嵤 Leveg)$znV-º^3Ւof#0Tfk^Zs[*I꯳3{)ˬW4Ւ4 OdpbZRS|*I 55#"&-IvT&/윚Ye:i$ 9{LkuRe[I~_\ؠ%>GL$iY8 9ܕ"S`kS.IlC;Ҏ4x&>u_0JLr<J2(^$5L s=MgV ~,Iju> 7r2)^=G$1:3G< `J3~&IR% 6Tx/rIj3O< ʔ&#f_yXJiގNSz; Tx(i8%#4 ~AS+IjerIUrIj362v885+IjAhK__5X%nV%Iͳ-y|7XV2v4fzo_68"S/I-qbf; LkF)KSM$ Ms>K WNV}^`-큧32ŒVؙGdu,^^m%6~Nn&͓3ŒVZMsRpfEW%IwdǀLm[7W&bIRL@Q|)* i ImsIMmKmyV`i$G+R 0tV'!V)֏28vU7͒vHꦼtxꗞT ;S}7Mf+fIRHNZUkUx5SAJㄌ9MqμAIRi|j5)o*^'<$TwI1hEU^c_j?Е$%d`z cyf,XO IJnTgA UXRD }{H}^S,P5V2\Xx`pZ|Yk:$e ~ @nWL.j+ϝYb퇪bZ BVu)u/IJ_ 1[p.p60bC >|X91P:N\!5qUB}5a5ja `ubcVxYt1N0Zzl4]7­gKj]?4ϻ *[bg$)+À*x쳀ogO$~,5 زUS9 lq3+5mgw@np1sso Ӻ=|N6 /g(Wv7U;zωM=wk,0uTg_`_P`uz?2yI!b`kĸSo+Qx%!\οe|އԁKS-s6pu_(ֿ$i++T8=eY; צP+phxWQv*|p1. ά. XRkIQYP,drZ | B%wP|S5`~́@i޾ E;Չaw{o'Q?%iL{u D?N1BD!owPHReFZ* k_-~{E9b-~P`fE{AܶBJAFO wx6Rox5 K5=WwehS8 (JClJ~ p+Fi;ŗo+:bD#g(C"wA^ r.F8L;dzdIHUX݆ϞXg )IFqem%I4dj&ppT{'{HOx( Rk6^C٫O.)3:s(۳(Z?~ٻ89zmT"PLtw䥈5&b<8GZ-Y&K?e8,`I6e(֍xb83 `rzXj)F=l($Ij 2*(F?h(/9ik:I`m#p3MgLaKjc/U#n5S# m(^)=y=đx8ŬI[U]~SцA4p$-F i(R,7Cx;X=cI>{Km\ o(Tv2vx2qiiDJN,Ҏ!1f 5quBj1!8 rDFd(!WQl,gSkL1Bxg''՞^ǘ;pQ P(c_ IRujg(Wz bs#P­rz> k c&nB=q+ؔXn#r5)co*Ũ+G?7< |PQӣ'G`uOd>%Mctz# Ԫڞ&7CaQ~N'-P.W`Oedp03C!IZcIAMPUۀ5J<\u~+{9(FbbyAeBhOSܳ1 bÈT#ŠyDžs,`5}DC-`̞%r&ڙa87QWWp6e7 Rϫ/oY ꇅ Nܶըtc!LA T7V4Jsū I-0Pxz7QNF_iZgúWkG83 0eWr9 X]㾮݁#Jˢ C}0=3ݱtBi]_ &{{[/o[~ \q鯜00٩|cD3=4B_b RYb$óBRsf&lLX#M*C_L܄:gx)WΘsGSbuL rF$9';\4Ɍq'n[%p.Q`u hNb`eCQyQ|l_C>Lb꟟3hSb #xNxSs^ 88|Mz)}:](vbۢamŖ࿥ 0)Q7@0=?^k(*J}3ibkFn HjB׻NO z x}7p 0tfDX.lwgȔhԾŲ }6g E |LkLZteu+=q\Iv0쮑)QٵpH8/2?Σo>Jvppho~f>%bMM}\//":PTc(v9v!gոQ )UfVG+! 35{=x\2+ki,y$~A1iC6#)vC5^>+gǵ@1Hy٪7u;p psϰu/S <aʸGu'tD1ԝI<pg|6j'p:tպhX{o(7v],*}6a_ wXRk,O]Lܳ~Vo45rp"N5k;m{rZbΦ${#)`(Ŵg,;j%6j.pyYT?}-kBDc3qA`NWQū20/^AZW%NQ MI.X#P#,^Ebc&?XR tAV|Y.1!؅⨉ccww>ivl(JT~ u`ٵDm q)+Ri x/x8cyFO!/*!/&,7<.N,YDŽ&ܑQF1Bz)FPʛ?5d 6`kQձ λc؎%582Y&nD_$Je4>a?! ͨ|ȎWZSsv8 j(I&yj Jb5m?HWp=g}G3#|I,5v珿] H~R3@B[☉9Ox~oMy=J;xUVoj bUsl_35t-(ՃɼRB7U!qc+x4H_Qo֮$[GO<4`&č\GOc[.[*Af%mG/ ňM/r W/Nw~B1U3J?P&Y )`ѓZ1p]^l“W#)lWZilUQu`-m|xĐ,_ƪ|9i:_{*(3Gѧ}UoD+>m_?VPۅ15&}2|/pIOʵ> GZ9cmíتmnz)yߐbD >e}:) r|@R5qVSA10C%E_'^8cR7O;6[eKePGϦX7jb}OTGO^jn*媓7nGMC t,k31Rb (vyܴʭ!iTh8~ZYZp(qsRL ?b}cŨʊGO^!rPJO15MJ[c&~Z`"ѓޔH1C&^|Ш|rʼ,AwĴ?b5)tLU)F| &g٣O]oqSUjy(x<Ϳ3 .FSkoYg2 \_#wj{u'rQ>o;%n|F*O_L"e9umDds?.fuuQbIWz |4\0 sb;OvxOSs; G%T4gFRurj(֍ڑb uԖKDu1MK{1^ q; C=6\8FR艇!%\YÔU| 88m)֓NcLve C6z;o&X x59:q61Z(T7>C?gcļxѐ Z oo-08jہ x,`' ҔOcRlf~`jj".Nv+sM_]Zk g( UOPyεx%pUh2(@il0ݽQXxppx-NS( WO+轾 nFߢ3M<;z)FBZjciu/QoF 7R¥ ZFLF~#ȣߨ^<쩡ݛкvџ))ME>ώx4m#!-m!L;vv#~Y[đKmx9.[,UFS CVkZ +ߟrY٧IZd/ioi$%͝ب_ֶX3ܫhNU ZZgk=]=bbJS[wjU()*I =ώ:}-蹞lUj:1}MWm=̛ _ ¾,8{__m{_PVK^n3esw5ӫh#$-q=A̟> ,^I}P^J$qY~Q[ Xq9{#&T.^GVj__RKpn,b=`żY@^՝;z{paVKkQXj/)y TIc&F;FBG7wg ZZDG!x r_tƢ!}i/V=M/#nB8 XxЫ ^@CR<{䤭YCN)eKOSƟa $&g[i3.C6xrOc8TI;o hH6P&L{@q6[ Gzp^71j(l`J}]e6X☉#͕ ׈$AB1Vjh㭦IRsqFBjwQ_7Xk>y"N=MB0 ,C #o6MRc0|$)ف"1!ixY<B9mx `,tA>)5ػQ?jQ?cn>YZe Tisvh# GMމȇp:ԴVuږ8ɼH]C.5C!UV;F`mbBk LTMvPʍϤj?ԯ/Qr1NB`9s"s TYsz &9S%U԰> {<ؿSMxB|H\3@!U| k']$U+> |HHMLޢ?V9iD!-@x TIî%6Z*9X@HMW#?nN ,oe6?tQwڱ.]-y':mW0#!J82qFjH -`ѓ&M0u Uγmxϵ^-_\])@0Rt.8/?ٰCY]x}=sD3ojަЫNuS%U}ԤwHH>ڗjܷ_3gN q7[q2la*ArǓԖ+p8/RGM ]jacd(JhWko6ڎbj]i5Bj3+3!\j1UZLsLTv8HHmup<>gKMJj0@H%,W΃7R) ">c, xixј^ aܖ>H[i.UIHc U1=yW\=S*GR~)AF=`&2h`DzT󑓶J+?W+}C%P:|0H܆}-<;OC[~o.$~i}~HQ TvXΈr=b}$vizL4:ȰT|4~*!oXQR6Lk+#t/g lԁߖ[Jڶ_N$k*". xsxX7jRVbAAʯKҎU3)zSNN _'s?f)6X!%ssAkʱ>qƷb hg %n ~p1REGMHH=BJiy[<5 ǁJҖgKR*倳e~HUy)Ag,K)`Vw6bRR:qL#\rclK/$sh*$ 6덤 KԖc 3Z9=Ɣ=o>X Ώ"1 )a`SJJ6k(<c e{%kϊP+SL'TcMJWRm ŏ"w)qc ef꒵i?b7b('"2r%~HUS1\<(`1Wx9=8HY9m:X18bgD1u ~|H;K-Uep,, C1 RV.MR5άh,tWO8WC$ XRVsQS]3GJ|12 [vM :k#~tH30Rf-HYݺ-`I9%lIDTm\ S{]9gOڒMNCV\G*2JRŨ;Rҏ^ڽ̱mq1Eu?To3I)y^#jJw^Ńj^vvlB_⋌P4x>0$c>K†Aļ9s_VjTt0l#m>E-,,x,-W)سo&96RE XR.6bXw+)GAEvL)͞K4$p=Ũi_ѱOjb HY/+@θH9޼]Nԥ%n{ &zjT? Ty) s^ULlb,PiTf^<À] 62R^V7)S!nllS6~͝V}-=%* ʻ>G DnK<y&>LPy7'r=Hj 9V`[c"*^8HpcO8bnU`4JȪAƋ#1_\ XϘHPRgik(~G~0DAA_2p|J묭a2\NCr]M_0 ^T%e#vD^%xy-n}-E\3aS%yN!r_{ )sAw ڼp1pEAk~v<:`'ӭ^5 ArXOI驻T (dk)_\ PuA*BY]yB"l\ey hH*tbK)3 IKZ򹞋XjN n *n>k]X_d!ryBH ]*R 0(#'7 %es9??ښFC,ՁQPjARJ\Ρw K#jahgw;2$l*) %Xq5!U᢯6Re] |0[__64ch&_}iL8KEgҎ7 M/\`|.p,~`a=BR?xܐrQ8K XR2M8f ?`sgWS%" Ԉ 7R%$ N}?QL1|-эټwIZ%pvL3Hk>,ImgW7{E xPHx73RA @RS CC !\ȟ5IXR^ZxHл$Q[ŝ40 (>+ _C >BRt<,TrT {O/H+˟Pl6 I B)/VC<6a2~(XwV4gnXR ϱ5ǀHٻ?tw똤Eyxp{#WK qG%5],(0ӈH HZ])ג=K1j&G(FbM@)%I` XRg ʔ KZG(vP,<`[ Kn^ SJRsAʠ5xՅF`0&RbV tx:EaUE/{fi2;.IAwW8/tTxAGOoN?G}l L(n`Zv?pB8K_gI+ܗ #i?ޙ.) p$utc ~DžfՈEo3l/)I-U?aԅ^jxArA ΧX}DmZ@QLےbTXGd.^|xKHR{|ΕW_h] IJ`[G9{).y) 0X YA1]qp?p_k+J*Y@HI>^?gt.06Rn ,` ?);p pSF9ZXLBJPWjgQ|&)7! HjQt<| ؅W5 x W HIzYoVMGP Hjn`+\(dNW)F+IrS[|/a`K|ͻ0Hj{R,Q=\ (F}\WR)AgSG`IsnAR=|8$}G(vC$)s FBJ?]_u XRvύ6z ŨG[36-T9HzpW̞ú Xg큽=7CufzI$)ki^qk-) 0H*N` QZkk]/tnnsI^Gu't=7$ Z;{8^jB% IItRQS7[ϭ3 $_OQJ`7!]W"W,)Iy W AJA;KWG`IY{8k$I$^%9.^(`N|LJ%@$I}ֽp=FB*xN=gI?Q{٥4B)mw $Igc~dZ@G9K X?7)aK%݅K$IZ-`IpC U6$I\0>!9k} Xa IIS0H$I H ?1R.Чj:4~Rw@p$IrA*u}WjWFPJ$I➓/6#! LӾ+ X36x8J |+L;v$Io4301R20M I$-E}@,pS^ޟR[/s¹'0H$IKyfŸfVOπFT*a$I>He~VY/3R/)>d$I>28`Cjw,n@FU*9ttf$I~<;=/4RD~@ X-ѕzἱI$: ԍR a@b X{+Qxuq$IЛzo /~3\8ڒ4BN7$IҀj V]n18H$IYFBj3̵̚ja pp $Is/3R Ӻ-Yj+L;.0ŔI$Av? #!5"aʄj}UKmɽH$IjCYs?h$IDl843.v}m7UiI=&=0Lg0$I4: embe` eQbm0u? $IT!Sƍ'-sv)s#C0:XB2a w I$zbww{."pPzO =Ɔ\[ o($Iaw]`E).Kvi:L*#gР7[$IyGPI=@R 4yR~̮´cg I$I/<tPͽ hDgo 94Z^k盇΄8I56^W$I^0̜N?4*H`237}g+hxoq)SJ@p|` $I%>-hO0eO>\ԣNߌZD6R=K ~n($I$y3D>o4b#px2$yڪtzW~a $I~?x'BwwpH$IZݑnC㧄Pc_9sO gwJ=l1:mKB>Ab<4Lp$Ib o1ZQ@85b̍ S'F,Fe,^I$IjEdù{l4 8Ys_s Z8.x m"+{~?q,Z D!I$ϻ'|XhB)=…']M>5 rgotԎ 獽PH$IjIPhh)n#cÔqA'ug5qwU&rF|1E%I$%]!'3AFD/;Ck_`9 v!ٴtPV;x`'*bQa w I$Ix5 FC3D_~A_#O݆DvV?<qw+I$I{=Z8".#RIYyjǪ=fDl9%M,a8$I$Ywi[7ݍFe$s1ՋBVA?`]#!oz4zjLJo8$I$%@3jAa4(o ;p,,dya=F9ً[LSPH$IJYЉ+3> 5"39aZ<ñh!{TpBGkj}Sp $IlvF.F$I z< '\K*qq.f<2Y!S"-\I$IYwčjF$ w9 \ߪB.1v!Ʊ?+r:^!I$BϹB H"B;L'G[ 4U#5>੐)|#o0aڱ$I>}k&1`U#V?YsV x>{t1[I~D&(I$I/{H0fw"q"y%4 IXyE~M3 8XψL}qE$I[> nD?~sf ]o΁ cT6"?'_Ἣ $I>~.f|'!N?⟩0G KkXZE]ޡ;/&?k OۘH$IRۀwXӨ<7@PnS04aӶp.:@\IWQJ6sS%I$e5ڑv`3:x';wq_vpgHyXZ 3gЂ7{{EuԹn±}$I$8t;b|591nءQ"P6O5i }iR̈́%Q̄p!I䮢]O{H$IRϻ9s֧ a=`- aB\X0"+5"C1Hb?߮3x3&gşggl_hZ^,`5?ߎvĸ%̀M!OZC2#0x LJ0 Gw$I$I}<{Eb+y;iI,`ܚF:5ܛA8-O-|8K7s|#Z8a&><a&/VtbtLʌI$I$I$I$I$I$IRjDD%tEXtdate:create2022-05-31T04:40:26+00:00!Î%tEXtdate:modify2022-05-31T04:40:26+00:00|{2IENDB`Mini Shell

HOME


Mini Shell 1.0
DIR:/snap/certbot/4482/lib/python3.12/site-packages/cryptography/x509/__pycache__/
Upload File :
Current File : //snap/certbot/4482/lib/python3.12/site-packages/cryptography/x509/__pycache__/ocsp.cpython-312.pyc
�

�S�g#N���ddlmZddlZddlZddlZddlmZmZddlm	Z	ddl
mZmZddl
mZddlmZmZmZGd�d	ej&�ZGd
�dej&�Zej,ej.ej0ej2ej4fZdd�ZGd
�dej&�ZGd�d�ZGd�dej>��Z Gd�dej>��Z!Gd�dej>��Z"e jGe	j@�e"jGe	jD�e!jGe	jB�Gd�d�Z$Gd�d�Z%e	jLZ&e	jNZ'y)�)�annotationsN)�utils�x509)�ocsp)�hashes�
serialization)� CertificateIssuerPrivateKeyTypes)�_EARLIEST_UTC_TIME�_convert_to_naive_utc_time�_reject_duplicate_extensionc��eZdZdZdZy)�OCSPResponderEncodingzBy HashzBy NameN)�__name__�
__module__�__qualname__�HASH�NAME����/build/snapcraft-certbot-29b1212f749eeba2f1dece1adfe9a83a/parts/certbot/install/lib/python3.12/site-packages/cryptography/x509/ocsp.pyrrs���D��Drrc�$�eZdZdZdZdZdZdZdZy)�OCSPResponseStatusr�����N)	rrr�
SUCCESSFUL�MALFORMED_REQUEST�INTERNAL_ERROR�	TRY_LATER�SIG_REQUIRED�UNAUTHORIZEDrrrrrs!���J����N��I��L��Lrrc�:�t|t�std��y)Nz9Algorithm must be SHA1, SHA224, SHA256, SHA384, or SHA512)�
isinstance�_ALLOWED_HASHES�
ValueError)�	algorithms r�_verify_algorithmr)/s!���i��1��G�
�	
�2rc��eZdZdZdZdZy)�OCSPCertStatusrrrN)rrr�GOOD�REVOKED�UNKNOWNrrrr+r+6s���D��G��Grr+c�4�eZdZ																dd�Zy)�_SingleResponsec	��t|tj�rt|tj�std��t	|�t|t
j
�std��|�%t|t
j
�std��||_||_||_||_	||_
t|t�std��|tjur|�td��|�vtd��t|t
j
�std��t|�}|tkrtd��|�%t|tj �std	��||_||_||_y)
N�%cert and issuer must be a Certificatez%this_update must be a datetime objectz-next_update must be a datetime object or Nonez8cert_status must be an item from the OCSPCertStatus enumzBrevocation_time can only be provided if the certificate is revokedzDrevocation_reason can only be provided if the certificate is revokedz)revocation_time must be a datetime objectz7The revocation_time must be on or after 1950 January 1.zCrevocation_reason must be an item from the ReasonFlags enum or None)r%r�Certificate�	TypeErrorr)�datetime�_cert�_issuer�
_algorithm�_this_update�_next_updater+r-r'rr
�ReasonFlags�_cert_status�_revocation_time�_revocation_reason)	�self�cert�issuerr(�cert_status�this_update�next_update�revocation_time�revocation_reasons	         r�__init__z_SingleResponse.__init__=s����$�� 0� 0�1���D�$�$�:
��C�D�D��)�$��+�x�'8�'8�9��C�D�D��"�:���*�*�,
��K�L�L���
����#���'���'����+�~�6��J��
��n�4�4�4��*� �!���!�,� �"���
�o�x�/@�/@�A�� K�L�L�8��I�O��!3�3� �'���
!�,�Z�!�4�#3�#3�6� �#���
(��� /���"3��rN)r@�x509.CertificaterArHr(�hashes.HashAlgorithmrBr+rC�datetime.datetimerD�datetime.datetime | NonerErKrF�x509.ReasonFlags | None)rrrrGrrrr0r0<s^��B4��B4�!�B4�(�	B4�
$�B4�'�
B4�.�B4�2�B4�3�B4rr0c�"�eZdZeej
dd���Zeej
dd���Zeej
d	d���Zeej
d
d���Z	ej
dd��Z
eej
dd���Zy)
�OCSPRequestc��y�z3
        The hash of the issuer public key
        Nr�r?s r�issuer_key_hashzOCSPRequest.issuer_key_hash���rc��y�z-
        The hash of the issuer name
        NrrQs r�issuer_name_hashzOCSPRequest.issuer_name_hash�rSrc��y�zK
        The hash algorithm used in the issuer name and key hashes
        NrrQs r�hash_algorithmzOCSPRequest.hash_algorithm�rSrc��y�zM
        The serial number of the cert whose status is being checked
        NrrQs r�
serial_numberzOCSPRequest.serial_number�rSrc��y)z/
        Serializes the request to DER
        Nr�r?�encodings  r�public_byteszOCSPRequest.public_bytes�rSrc��y)zP
        The list of request extensions. Not single request extensions.
        NrrQs r�
extensionszOCSPRequest.extensions�rSrN��return�bytes�rdrI�rd�int�r_zserialization.Encodingrdre�rdzx509.Extensions)rrr�property�abc�abstractmethodrRrVrYr\r`rbrrrrNrN�s���
��������
��������
��������
��������
	������
�������rrN)�	metaclassc�L�eZdZeej
dd���Zeej
dd���Zeej
dd���Zeej
dd���Z	eej
dd���Z
eej
dd���Zeej
dd���Zeej
dd���Z
eej
dd	���Zeej
dd
���Zeej
dd���Zeej
dd���Zy
)�OCSPSingleResponsec��y�zY
        The status of the certificate (an element from the OCSPCertStatus enum)
        NrrQs r�certificate_statusz%OCSPSingleResponse.certificate_status�rSrc��y�z^
        The date of when the certificate was revoked or None if not
        revoked.
        NrrQs rrEz"OCSPSingleResponse.revocation_time�rSrc��y�z�
        The date of when the certificate was revoked or None if not
        revoked. Represented as a non-naive UTC datetime.
        NrrQs r�revocation_time_utcz&OCSPSingleResponse.revocation_time_utc�rSrc��y�zi
        The reason the certificate was revoked or None if not specified or
        not revoked.
        NrrQs rrFz$OCSPSingleResponse.revocation_reason�rSrc��y�z�
        The most recent time at which the status being indicated is known by
        the responder to have been correct
        NrrQs rrCzOCSPSingleResponse.this_update�rSrc��y�z�
        The most recent time at which the status being indicated is known by
        the responder to have been correct. Represented as a non-naive UTC
        datetime.
        NrrQs r�this_update_utcz"OCSPSingleResponse.this_update_utc�rSrc��y�zC
        The time when newer information will be available
        NrrQs rrDzOCSPSingleResponse.next_update�rSrc��y�zu
        The time when newer information will be available. Represented as a
        non-naive UTC datetime.
        NrrQs r�next_update_utcz"OCSPSingleResponse.next_update_utc�rSrc��yrPrrQs rrRz"OCSPSingleResponse.issuer_key_hash�rSrc��yrUrrQs rrVz#OCSPSingleResponse.issuer_name_hash�rSrc��yrXrrQs rrYz!OCSPSingleResponse.hash_algorithm�rSrc��yr[rrQs rr\z OCSPSingleResponse.serial_numberrSrN�rdr+�rdrK�rdrL�rdrJrcrfrg)rrrrkrlrmrsrErxrFrCrrDr�rRrVrYr\rrrrprp�s���
��������
������������������������������������������������
����������������
��������
��������
�������rrpc���eZdZeej
dd���Zeej
dd���Zeej
dd���Zeej
		dd���Z	eej
d d���Z
eej
d d���Zeej
d!d���Zeej
d"d���Z
eej
d#d	���Zeej
d$d
���Zeej
d$d���Zeej
d%d���Zeej
d&d
���Zeej
d&d���Zeej
d'd���Zeej
d$d���Zeej
d$d���Zeej
d&d���Zeej
d&d���Zeej
d d���Zeej
d d���Zeej
d(d���Zeej
d)d���Zeej
d*d���Zeej
d*d���Zej
d+d��Zy),�OCSPResponsec��y)z_
        An iterator over the individual SINGLERESP structures in the
        response
        NrrQs r�	responseszOCSPResponse.responsesrSrc��y)zm
        The status of the response. This is a value from the OCSPResponseStatus
        enumeration
        NrrQs r�response_statuszOCSPResponse.response_statusrSrc��y)zA
        The ObjectIdentifier of the signature algorithm
        NrrQs r�signature_algorithm_oidz$OCSPResponse.signature_algorithm_oidrSrc��y)zX
        Returns a HashAlgorithm corresponding to the type of the digest signed
        NrrQs r�signature_hash_algorithmz%OCSPResponse.signature_hash_algorithm"rSrc��y)z%
        The signature bytes
        NrrQs r�	signaturezOCSPResponse.signature+rSrc��y)z+
        The tbsResponseData bytes
        NrrQs r�tbs_response_byteszOCSPResponse.tbs_response_bytes2rSrc��y)z�
        A list of certificates used to help build a chain to verify the OCSP
        response. This situation occurs when the OCSP responder uses a delegate
        certificate.
        NrrQs r�certificateszOCSPResponse.certificates9rSrc��y)z2
        The responder's key hash or None
        NrrQs r�responder_key_hashzOCSPResponse.responder_key_hashBrSrc��y)z.
        The responder's Name or None
        NrrQs r�responder_namezOCSPResponse.responder_nameIrSrc��y)z4
        The time the response was produced
        NrrQs r�produced_atzOCSPResponse.produced_atPrSrc��y)zf
        The time the response was produced. Represented as a non-naive UTC
        datetime.
        NrrQs r�produced_at_utczOCSPResponse.produced_at_utcWrSrc��yrrrrQs rrszOCSPResponse.certificate_status_rSrc��yrurrQs rrEzOCSPResponse.revocation_timefrSrc��yrwrrQs rrxz OCSPResponse.revocation_time_utcnrSrc��yrzrrQs rrFzOCSPResponse.revocation_reasonvrSrc��yr|rrQs rrCzOCSPResponse.this_update~rSrc��yr~rrQs rrzOCSPResponse.this_update_utc�rSrc��yr�rrQs rrDzOCSPResponse.next_update�rSrc��yr�rrQs rr�zOCSPResponse.next_update_utc�rSrc��yrPrrQs rrRzOCSPResponse.issuer_key_hash�rSrc��yrUrrQs rrVzOCSPResponse.issuer_name_hash�rSrc��yrXrrQs rrYzOCSPResponse.hash_algorithm�rSrc��yr[rrQs rr\zOCSPResponse.serial_number�rSrc��y)zR
        The list of response extensions. Not single response extensions.
        NrrQs rrbzOCSPResponse.extensions�rSrc��y)zR
        The list of single response extensions. Not response extensions.
        NrrQs r�single_extensionszOCSPResponse.single_extensions�rSrc��y)z0
        Serializes the response to DER
        Nrr^s  rr`zOCSPResponse.public_bytes�rSrN)rdz#typing.Iterator[OCSPSingleResponse])rdr)rdzx509.ObjectIdentifier)rd�hashes.HashAlgorithm | Nonerc)rdzlist[x509.Certificate])rdzbytes | None)rdzx509.Name | Noner�r�r�r�rfrgrjri) rrrrkrlrmr�r�r�r�r�r�r�r�r�r�r�rsrErxrFrCrrDr�rRrVrYr\rbr�r`rrrr�r�
st��
������������������������
�����	$�������������
��������
����������������
��������
��������
����������������
������������������������������������������������
����������������
��������
��������
��������
��������
��������
	�����rr�c�z�eZdZddgf							dd�Z								dd�Z										d	d�Z						d
d�Zdd�Zy)�OCSPRequestBuilderNc�.�||_||_||_y�N)�_request�
_request_hash�_extensions)r?�request�request_hashrbs    rrGzOCSPRequestBuilder.__init__�s�� ��
�)���%��rc�$�|j�|j�td��t|�t	|t
j�rt	|t
j�std��t|||f|j|j�S)N�.Only one certificate can be added to a requestr2)
r�r�r'r)r%rr3r4r�r�)r?r@rAr(s    r�add_certificatez"OCSPRequestBuilder.add_certificate�s����=�=�$��(:�(:�(F��M�N�N��)�$��$�� 0� 0�1���D�$�$�:
��C�D�D�!�
�6�9�%�t�'9�'9�4�;K�;K�
�	
rc��|j�|j�td��t|t�std��t
|�tjd|�tjd|�|jt|�k7s|jt|�k7rtd��t|j||||f|j�S)Nr�z serial_number must be an integerrVrRz`issuer_name_hash and issuer_key_hash must be the same length as the digest size of the algorithm)
r�r�r'r%rhr4r)r�_check_bytes�digest_size�lenr�r�)r?rVrRr\r(s     r�add_certificate_by_hashz*OCSPRequestBuilder.add_certificate_by_hash�s����=�=�$��(:�(:�(F��M�N�N��-��-��>�?�?��)�$�
���-�/?�@�
���,�o�>�� � �C��%
�
�
�
"�
"�c�/�&:�
:��6��
�
"��M�M�
��
�y�I����
�	
rc��t|tj�std��tj|j
||�}t
||j�t|j|jg|j�|��S�Nz"extension must be an ExtensionType)r%r�
ExtensionTyper4�	Extension�oidrr�r�r�r��r?�extval�critical�	extensions    r�
add_extensionz OCSPRequestBuilder.add_extensionsu���&�$�"4�"4�5��@�A�A��N�N�6�:�:�x��@�	�#�I�t�/?�/?�@�!��M�M�4�-�-�/M��1A�1A�/M�9�/M�
�	
rc�r�|j�|j�td��tj|�S)Nz*You must add a certificate before building)r�r�r'r�create_ocsp_requestrQs r�buildzOCSPRequestBuilder.build!s4���=�=� �T�%7�%7�%?��I�J�J��'�'��-�-r)r�zFtuple[x509.Certificate, x509.Certificate, hashes.HashAlgorithm] | Noner�z5tuple[bytes, bytes, int, hashes.HashAlgorithm] | Nonerb�(list[x509.Extension[x509.ExtensionType]]rd�None)r@rHrArHr(rIrdr�)
rVrerRrer\rhr(rIrdr�)r��x509.ExtensionTyper��boolrdr�)rdrN)rrrrGr�r�r�r�rrrr�r��s�����?A�&��&��
&�=�&�
�&�
��
�!�
�(�	
�

�
�&
��
��
��	
�
(�
�
�

�<
�(�
�48�
�	�
�.rr�c��eZdZdddgf							d	d�Z																		d
d�Z						dd�Z				dd�Z						d
d�Z						dd�Ze					dd��Z
y)�OCSPResponseBuilderNc�<�||_||_||_||_yr�)�	_response�
_responder_id�_certsr�)r?�response�responder_id�certsrbs     rrGzOCSPResponseBuilder.__init__)s"��"���)������%��rc	
��|j�td��t||||||||�}	t|	|j|j
|j�S)Nz#Only one response per OCSPResponse.)r�r'r0r�r�r�r�)
r?r@rAr(rBrCrDrErF�
singleresps
          r�add_responsez OCSPResponseBuilder.add_response6sg���>�>�%��B�C�C�$���������	
�
�#������K�K����	
�	
rc��|j�td��t|tj�std��t|t�std��t|j||f|j|j�S)Nz!responder_id can only be set oncez$responder_cert must be a Certificatez6encoding must be an element from OCSPResponderEncoding)r�r'r%rr3r4rr�r�r�r�)r?r_�responder_certs   rr�z OCSPResponseBuilder.responder_idUs������)��@�A�A��.�$�*:�*:�;��B�C�C��(�$9�:��H��
�#��N�N�
�X�&��K�K����	
�	
rc�
�|j�td��t|�}t|�dk(rtd��t	d�|D��std��t
|j|j||j�S)Nz!certificates may only be set oncerzcerts must not be an empty listc3�PK�|]}t|tj���� y�wr�)r%rr3)�.0�xs  r�	<genexpr>z3OCSPResponseBuilder.certificates.<locals>.<genexpr>ps����B�q�:�a��!1�!1�2�B�s�$&z$certs must be a list of Certificates)
r�r'�listr��allr4r�r�r�r�)r?r�s  rr�z OCSPResponseBuilder.certificateshs}���;�;�"��@�A�A��U����u�:��?��>�?�?��B�E�B�B��B�C�C�"��N�N��������	
�	
rc�.�t|tj�std��tj|j
||�}t
||j�t|j|j|jg|j�|��Sr�)r%rr�r4r�r�rr�r�r�r�r�r�s    rr�z!OCSPResponseBuilder.add_extensionys}���&�$�"4�"4�5��@�A�A��N�N�6�:�:�x��@�	�#�I�t�/?�/?�@�"��N�N�����K�K�*�d���*�	�*�	
�	
rc��|j�td��|j�td��tjt
j|||�S)Nz&You must add a response before signingz*You must add a responder_id before signing)r�r'r�r�create_ocsp_responserr)r?�private_keyr(s   r�signzOCSPResponseBuilder.sign�sT��
�>�>�!��E�F�F����%��I�J�J��(�(��)�)�4��i�
�	
rc��t|t�std��|tjurt	d��tj|ddd�S)Nz7response_status must be an item from OCSPResponseStatusz$response_status cannot be SUCCESSFUL)r%rr4rr'rr�)�clsr�s  r�build_unsuccessfulz&OCSPResponseBuilder.build_unsuccessful�sS���/�+=�>��I��
��0�;�;�;��C�D�D��(�(��$��d�K�Kr)r�z_SingleResponse | Noner�z5tuple[x509.Certificate, OCSPResponderEncoding] | Noner�zlist[x509.Certificate] | Nonerbr�)r@rHrArHr(rIrBr+rCrJrDrKrErKrFrLrdr�)r_rr�rHrdr�)r�z!typing.Iterable[x509.Certificate]rdr�)r�r�r�r�rdr�)r�r	r(r�rdr�)r�rrdr�)rrrrGr�r�r�r�r��classmethodr�rrrr�r�(s0��,0��/3�?A�
&�(�&��&�
-�&�=�
&�
��
�!�
�(�	
�
$�
�'�

�.�
�2�
�3�
�
�
�>
�-�
�?O�
�	�
�&
�6�
�	�
�"
�(�
�48�
�	�
� 
�5�
�/�
�
�	
��
L�0�
L�	�
L��
Lrr�)r(rIrdr�)(�
__future__rrlr5�typing�cryptographyrr�"cryptography.hazmat.bindings._rustr�cryptography.hazmat.primitivesrr�/cryptography.hazmat.primitives.asymmetric.typesr	�cryptography.x509.baser
rr�Enumrr�SHA1�SHA224�SHA256�SHA384�SHA512r&r)r+r0�ABCMetarNrpr��registerr�r��load_der_ocsp_request�load_der_ocsp_responserrr�<module>rsD��
#�
��
�$�3�@�����E�J�J��
������K�K�
�M�M�
�M�M�
�M�M�
�M�M���
��U�Z�Z��C4�C4�L(�C�K�K�(�VZ�3�;�;�Z�zB�S�[�[�B�J���T�%�%�&����d�'�'�(����D�3�3�4�Q.�Q.�hzL�zL�z�2�2���4�4�r