|
|
|
|
|
|
|
|
|
from __future__ import annotations |
|
|
|
from cryptography.hazmat.bindings._rust import ( |
|
ObjectIdentifier as ObjectIdentifier, |
|
) |
|
from cryptography.hazmat.primitives import hashes |
|
|
|
|
|
class ExtensionOID: |
|
SUBJECT_DIRECTORY_ATTRIBUTES = ObjectIdentifier("2.5.29.9") |
|
SUBJECT_KEY_IDENTIFIER = ObjectIdentifier("2.5.29.14") |
|
KEY_USAGE = ObjectIdentifier("2.5.29.15") |
|
SUBJECT_ALTERNATIVE_NAME = ObjectIdentifier("2.5.29.17") |
|
ISSUER_ALTERNATIVE_NAME = ObjectIdentifier("2.5.29.18") |
|
BASIC_CONSTRAINTS = ObjectIdentifier("2.5.29.19") |
|
NAME_CONSTRAINTS = ObjectIdentifier("2.5.29.30") |
|
CRL_DISTRIBUTION_POINTS = ObjectIdentifier("2.5.29.31") |
|
CERTIFICATE_POLICIES = ObjectIdentifier("2.5.29.32") |
|
POLICY_MAPPINGS = ObjectIdentifier("2.5.29.33") |
|
AUTHORITY_KEY_IDENTIFIER = ObjectIdentifier("2.5.29.35") |
|
POLICY_CONSTRAINTS = ObjectIdentifier("2.5.29.36") |
|
EXTENDED_KEY_USAGE = ObjectIdentifier("2.5.29.37") |
|
FRESHEST_CRL = ObjectIdentifier("2.5.29.46") |
|
INHIBIT_ANY_POLICY = ObjectIdentifier("2.5.29.54") |
|
ISSUING_DISTRIBUTION_POINT = ObjectIdentifier("2.5.29.28") |
|
AUTHORITY_INFORMATION_ACCESS = ObjectIdentifier("1.3.6.1.5.5.7.1.1") |
|
SUBJECT_INFORMATION_ACCESS = ObjectIdentifier("1.3.6.1.5.5.7.1.11") |
|
OCSP_NO_CHECK = ObjectIdentifier("1.3.6.1.5.5.7.48.1.5") |
|
TLS_FEATURE = ObjectIdentifier("1.3.6.1.5.5.7.1.24") |
|
CRL_NUMBER = ObjectIdentifier("2.5.29.20") |
|
DELTA_CRL_INDICATOR = ObjectIdentifier("2.5.29.27") |
|
PRECERT_SIGNED_CERTIFICATE_TIMESTAMPS = ObjectIdentifier( |
|
"1.3.6.1.4.1.11129.2.4.2" |
|
) |
|
PRECERT_POISON = ObjectIdentifier("1.3.6.1.4.1.11129.2.4.3") |
|
SIGNED_CERTIFICATE_TIMESTAMPS = ObjectIdentifier("1.3.6.1.4.1.11129.2.4.5") |
|
MS_CERTIFICATE_TEMPLATE = ObjectIdentifier("1.3.6.1.4.1.311.21.7") |
|
|
|
|
|
class OCSPExtensionOID: |
|
NONCE = ObjectIdentifier("1.3.6.1.5.5.7.48.1.2") |
|
ACCEPTABLE_RESPONSES = ObjectIdentifier("1.3.6.1.5.5.7.48.1.4") |
|
|
|
|
|
class CRLEntryExtensionOID: |
|
CERTIFICATE_ISSUER = ObjectIdentifier("2.5.29.29") |
|
CRL_REASON = ObjectIdentifier("2.5.29.21") |
|
INVALIDITY_DATE = ObjectIdentifier("2.5.29.24") |
|
|
|
|
|
class NameOID: |
|
COMMON_NAME = ObjectIdentifier("2.5.4.3") |
|
COUNTRY_NAME = ObjectIdentifier("2.5.4.6") |
|
LOCALITY_NAME = ObjectIdentifier("2.5.4.7") |
|
STATE_OR_PROVINCE_NAME = ObjectIdentifier("2.5.4.8") |
|
STREET_ADDRESS = ObjectIdentifier("2.5.4.9") |
|
ORGANIZATION_IDENTIFIER = ObjectIdentifier("2.5.4.97") |
|
ORGANIZATION_NAME = ObjectIdentifier("2.5.4.10") |
|
ORGANIZATIONAL_UNIT_NAME = ObjectIdentifier("2.5.4.11") |
|
SERIAL_NUMBER = ObjectIdentifier("2.5.4.5") |
|
SURNAME = ObjectIdentifier("2.5.4.4") |
|
GIVEN_NAME = ObjectIdentifier("2.5.4.42") |
|
TITLE = ObjectIdentifier("2.5.4.12") |
|
INITIALS = ObjectIdentifier("2.5.4.43") |
|
GENERATION_QUALIFIER = ObjectIdentifier("2.5.4.44") |
|
X500_UNIQUE_IDENTIFIER = ObjectIdentifier("2.5.4.45") |
|
DN_QUALIFIER = ObjectIdentifier("2.5.4.46") |
|
PSEUDONYM = ObjectIdentifier("2.5.4.65") |
|
USER_ID = ObjectIdentifier("0.9.2342.19200300.100.1.1") |
|
DOMAIN_COMPONENT = ObjectIdentifier("0.9.2342.19200300.100.1.25") |
|
EMAIL_ADDRESS = ObjectIdentifier("1.2.840.113549.1.9.1") |
|
JURISDICTION_COUNTRY_NAME = ObjectIdentifier("1.3.6.1.4.1.311.60.2.1.3") |
|
JURISDICTION_LOCALITY_NAME = ObjectIdentifier("1.3.6.1.4.1.311.60.2.1.1") |
|
JURISDICTION_STATE_OR_PROVINCE_NAME = ObjectIdentifier( |
|
"1.3.6.1.4.1.311.60.2.1.2" |
|
) |
|
BUSINESS_CATEGORY = ObjectIdentifier("2.5.4.15") |
|
POSTAL_ADDRESS = ObjectIdentifier("2.5.4.16") |
|
POSTAL_CODE = ObjectIdentifier("2.5.4.17") |
|
INN = ObjectIdentifier("1.2.643.3.131.1.1") |
|
OGRN = ObjectIdentifier("1.2.643.100.1") |
|
SNILS = ObjectIdentifier("1.2.643.100.3") |
|
UNSTRUCTURED_NAME = ObjectIdentifier("1.2.840.113549.1.9.2") |
|
|
|
|
|
class SignatureAlgorithmOID: |
|
RSA_WITH_MD5 = ObjectIdentifier("1.2.840.113549.1.1.4") |
|
RSA_WITH_SHA1 = ObjectIdentifier("1.2.840.113549.1.1.5") |
|
|
|
_RSA_WITH_SHA1 = ObjectIdentifier("1.3.14.3.2.29") |
|
RSA_WITH_SHA224 = ObjectIdentifier("1.2.840.113549.1.1.14") |
|
RSA_WITH_SHA256 = ObjectIdentifier("1.2.840.113549.1.1.11") |
|
RSA_WITH_SHA384 = ObjectIdentifier("1.2.840.113549.1.1.12") |
|
RSA_WITH_SHA512 = ObjectIdentifier("1.2.840.113549.1.1.13") |
|
RSA_WITH_SHA3_224 = ObjectIdentifier("2.16.840.1.101.3.4.3.13") |
|
RSA_WITH_SHA3_256 = ObjectIdentifier("2.16.840.1.101.3.4.3.14") |
|
RSA_WITH_SHA3_384 = ObjectIdentifier("2.16.840.1.101.3.4.3.15") |
|
RSA_WITH_SHA3_512 = ObjectIdentifier("2.16.840.1.101.3.4.3.16") |
|
RSASSA_PSS = ObjectIdentifier("1.2.840.113549.1.1.10") |
|
ECDSA_WITH_SHA1 = ObjectIdentifier("1.2.840.10045.4.1") |
|
ECDSA_WITH_SHA224 = ObjectIdentifier("1.2.840.10045.4.3.1") |
|
ECDSA_WITH_SHA256 = ObjectIdentifier("1.2.840.10045.4.3.2") |
|
ECDSA_WITH_SHA384 = ObjectIdentifier("1.2.840.10045.4.3.3") |
|
ECDSA_WITH_SHA512 = ObjectIdentifier("1.2.840.10045.4.3.4") |
|
ECDSA_WITH_SHA3_224 = ObjectIdentifier("2.16.840.1.101.3.4.3.9") |
|
ECDSA_WITH_SHA3_256 = ObjectIdentifier("2.16.840.1.101.3.4.3.10") |
|
ECDSA_WITH_SHA3_384 = ObjectIdentifier("2.16.840.1.101.3.4.3.11") |
|
ECDSA_WITH_SHA3_512 = ObjectIdentifier("2.16.840.1.101.3.4.3.12") |
|
DSA_WITH_SHA1 = ObjectIdentifier("1.2.840.10040.4.3") |
|
DSA_WITH_SHA224 = ObjectIdentifier("2.16.840.1.101.3.4.3.1") |
|
DSA_WITH_SHA256 = ObjectIdentifier("2.16.840.1.101.3.4.3.2") |
|
DSA_WITH_SHA384 = ObjectIdentifier("2.16.840.1.101.3.4.3.3") |
|
DSA_WITH_SHA512 = ObjectIdentifier("2.16.840.1.101.3.4.3.4") |
|
ED25519 = ObjectIdentifier("1.3.101.112") |
|
ED448 = ObjectIdentifier("1.3.101.113") |
|
GOSTR3411_94_WITH_3410_2001 = ObjectIdentifier("1.2.643.2.2.3") |
|
GOSTR3410_2012_WITH_3411_2012_256 = ObjectIdentifier("1.2.643.7.1.1.3.2") |
|
GOSTR3410_2012_WITH_3411_2012_512 = ObjectIdentifier("1.2.643.7.1.1.3.3") |
|
|
|
|
|
_SIG_OIDS_TO_HASH: dict[ObjectIdentifier, hashes.HashAlgorithm | None] = { |
|
SignatureAlgorithmOID.RSA_WITH_MD5: hashes.MD5(), |
|
SignatureAlgorithmOID.RSA_WITH_SHA1: hashes.SHA1(), |
|
SignatureAlgorithmOID._RSA_WITH_SHA1: hashes.SHA1(), |
|
SignatureAlgorithmOID.RSA_WITH_SHA224: hashes.SHA224(), |
|
SignatureAlgorithmOID.RSA_WITH_SHA256: hashes.SHA256(), |
|
SignatureAlgorithmOID.RSA_WITH_SHA384: hashes.SHA384(), |
|
SignatureAlgorithmOID.RSA_WITH_SHA512: hashes.SHA512(), |
|
SignatureAlgorithmOID.RSA_WITH_SHA3_224: hashes.SHA3_224(), |
|
SignatureAlgorithmOID.RSA_WITH_SHA3_256: hashes.SHA3_256(), |
|
SignatureAlgorithmOID.RSA_WITH_SHA3_384: hashes.SHA3_384(), |
|
SignatureAlgorithmOID.RSA_WITH_SHA3_512: hashes.SHA3_512(), |
|
SignatureAlgorithmOID.ECDSA_WITH_SHA1: hashes.SHA1(), |
|
SignatureAlgorithmOID.ECDSA_WITH_SHA224: hashes.SHA224(), |
|
SignatureAlgorithmOID.ECDSA_WITH_SHA256: hashes.SHA256(), |
|
SignatureAlgorithmOID.ECDSA_WITH_SHA384: hashes.SHA384(), |
|
SignatureAlgorithmOID.ECDSA_WITH_SHA512: hashes.SHA512(), |
|
SignatureAlgorithmOID.ECDSA_WITH_SHA3_224: hashes.SHA3_224(), |
|
SignatureAlgorithmOID.ECDSA_WITH_SHA3_256: hashes.SHA3_256(), |
|
SignatureAlgorithmOID.ECDSA_WITH_SHA3_384: hashes.SHA3_384(), |
|
SignatureAlgorithmOID.ECDSA_WITH_SHA3_512: hashes.SHA3_512(), |
|
SignatureAlgorithmOID.DSA_WITH_SHA1: hashes.SHA1(), |
|
SignatureAlgorithmOID.DSA_WITH_SHA224: hashes.SHA224(), |
|
SignatureAlgorithmOID.DSA_WITH_SHA256: hashes.SHA256(), |
|
SignatureAlgorithmOID.ED25519: None, |
|
SignatureAlgorithmOID.ED448: None, |
|
SignatureAlgorithmOID.GOSTR3411_94_WITH_3410_2001: None, |
|
SignatureAlgorithmOID.GOSTR3410_2012_WITH_3411_2012_256: None, |
|
SignatureAlgorithmOID.GOSTR3410_2012_WITH_3411_2012_512: None, |
|
} |
|
|
|
|
|
class ExtendedKeyUsageOID: |
|
SERVER_AUTH = ObjectIdentifier("1.3.6.1.5.5.7.3.1") |
|
CLIENT_AUTH = ObjectIdentifier("1.3.6.1.5.5.7.3.2") |
|
CODE_SIGNING = ObjectIdentifier("1.3.6.1.5.5.7.3.3") |
|
EMAIL_PROTECTION = ObjectIdentifier("1.3.6.1.5.5.7.3.4") |
|
TIME_STAMPING = ObjectIdentifier("1.3.6.1.5.5.7.3.8") |
|
OCSP_SIGNING = ObjectIdentifier("1.3.6.1.5.5.7.3.9") |
|
ANY_EXTENDED_KEY_USAGE = ObjectIdentifier("2.5.29.37.0") |
|
SMARTCARD_LOGON = ObjectIdentifier("1.3.6.1.4.1.311.20.2.2") |
|
KERBEROS_PKINIT_KDC = ObjectIdentifier("1.3.6.1.5.2.3.5") |
|
IPSEC_IKE = ObjectIdentifier("1.3.6.1.5.5.7.3.17") |
|
CERTIFICATE_TRANSPARENCY = ObjectIdentifier("1.3.6.1.4.1.11129.2.4.4") |
|
|
|
|
|
class AuthorityInformationAccessOID: |
|
CA_ISSUERS = ObjectIdentifier("1.3.6.1.5.5.7.48.2") |
|
OCSP = ObjectIdentifier("1.3.6.1.5.5.7.48.1") |
|
|
|
|
|
class SubjectInformationAccessOID: |
|
CA_REPOSITORY = ObjectIdentifier("1.3.6.1.5.5.7.48.5") |
|
|
|
|
|
class CertificatePoliciesOID: |
|
CPS_QUALIFIER = ObjectIdentifier("1.3.6.1.5.5.7.2.1") |
|
CPS_USER_NOTICE = ObjectIdentifier("1.3.6.1.5.5.7.2.2") |
|
ANY_POLICY = ObjectIdentifier("2.5.29.32.0") |
|
|
|
|
|
class AttributeOID: |
|
CHALLENGE_PASSWORD = ObjectIdentifier("1.2.840.113549.1.9.7") |
|
UNSTRUCTURED_NAME = ObjectIdentifier("1.2.840.113549.1.9.2") |
|
|
|
|
|
_OID_NAMES = { |
|
NameOID.COMMON_NAME: "commonName", |
|
NameOID.COUNTRY_NAME: "countryName", |
|
NameOID.LOCALITY_NAME: "localityName", |
|
NameOID.STATE_OR_PROVINCE_NAME: "stateOrProvinceName", |
|
NameOID.STREET_ADDRESS: "streetAddress", |
|
NameOID.ORGANIZATION_NAME: "organizationName", |
|
NameOID.ORGANIZATIONAL_UNIT_NAME: "organizationalUnitName", |
|
NameOID.SERIAL_NUMBER: "serialNumber", |
|
NameOID.SURNAME: "surname", |
|
NameOID.GIVEN_NAME: "givenName", |
|
NameOID.TITLE: "title", |
|
NameOID.GENERATION_QUALIFIER: "generationQualifier", |
|
NameOID.X500_UNIQUE_IDENTIFIER: "x500UniqueIdentifier", |
|
NameOID.DN_QUALIFIER: "dnQualifier", |
|
NameOID.PSEUDONYM: "pseudonym", |
|
NameOID.USER_ID: "userID", |
|
NameOID.DOMAIN_COMPONENT: "domainComponent", |
|
NameOID.EMAIL_ADDRESS: "emailAddress", |
|
NameOID.JURISDICTION_COUNTRY_NAME: "jurisdictionCountryName", |
|
NameOID.JURISDICTION_LOCALITY_NAME: "jurisdictionLocalityName", |
|
NameOID.JURISDICTION_STATE_OR_PROVINCE_NAME: ( |
|
"jurisdictionStateOrProvinceName" |
|
), |
|
NameOID.BUSINESS_CATEGORY: "businessCategory", |
|
NameOID.POSTAL_ADDRESS: "postalAddress", |
|
NameOID.POSTAL_CODE: "postalCode", |
|
NameOID.INN: "INN", |
|
NameOID.OGRN: "OGRN", |
|
NameOID.SNILS: "SNILS", |
|
NameOID.UNSTRUCTURED_NAME: "unstructuredName", |
|
SignatureAlgorithmOID.RSA_WITH_MD5: "md5WithRSAEncryption", |
|
SignatureAlgorithmOID.RSA_WITH_SHA1: "sha1WithRSAEncryption", |
|
SignatureAlgorithmOID.RSA_WITH_SHA224: "sha224WithRSAEncryption", |
|
SignatureAlgorithmOID.RSA_WITH_SHA256: "sha256WithRSAEncryption", |
|
SignatureAlgorithmOID.RSA_WITH_SHA384: "sha384WithRSAEncryption", |
|
SignatureAlgorithmOID.RSA_WITH_SHA512: "sha512WithRSAEncryption", |
|
SignatureAlgorithmOID.RSASSA_PSS: "RSASSA-PSS", |
|
SignatureAlgorithmOID.ECDSA_WITH_SHA1: "ecdsa-with-SHA1", |
|
SignatureAlgorithmOID.ECDSA_WITH_SHA224: "ecdsa-with-SHA224", |
|
SignatureAlgorithmOID.ECDSA_WITH_SHA256: "ecdsa-with-SHA256", |
|
SignatureAlgorithmOID.ECDSA_WITH_SHA384: "ecdsa-with-SHA384", |
|
SignatureAlgorithmOID.ECDSA_WITH_SHA512: "ecdsa-with-SHA512", |
|
SignatureAlgorithmOID.DSA_WITH_SHA1: "dsa-with-sha1", |
|
SignatureAlgorithmOID.DSA_WITH_SHA224: "dsa-with-sha224", |
|
SignatureAlgorithmOID.DSA_WITH_SHA256: "dsa-with-sha256", |
|
SignatureAlgorithmOID.ED25519: "ed25519", |
|
SignatureAlgorithmOID.ED448: "ed448", |
|
SignatureAlgorithmOID.GOSTR3411_94_WITH_3410_2001: ( |
|
"GOST R 34.11-94 with GOST R 34.10-2001" |
|
), |
|
SignatureAlgorithmOID.GOSTR3410_2012_WITH_3411_2012_256: ( |
|
"GOST R 34.10-2012 with GOST R 34.11-2012 (256 bit)" |
|
), |
|
SignatureAlgorithmOID.GOSTR3410_2012_WITH_3411_2012_512: ( |
|
"GOST R 34.10-2012 with GOST R 34.11-2012 (512 bit)" |
|
), |
|
ExtendedKeyUsageOID.SERVER_AUTH: "serverAuth", |
|
ExtendedKeyUsageOID.CLIENT_AUTH: "clientAuth", |
|
ExtendedKeyUsageOID.CODE_SIGNING: "codeSigning", |
|
ExtendedKeyUsageOID.EMAIL_PROTECTION: "emailProtection", |
|
ExtendedKeyUsageOID.TIME_STAMPING: "timeStamping", |
|
ExtendedKeyUsageOID.OCSP_SIGNING: "OCSPSigning", |
|
ExtendedKeyUsageOID.SMARTCARD_LOGON: "msSmartcardLogin", |
|
ExtendedKeyUsageOID.KERBEROS_PKINIT_KDC: "pkInitKDC", |
|
ExtensionOID.SUBJECT_DIRECTORY_ATTRIBUTES: "subjectDirectoryAttributes", |
|
ExtensionOID.SUBJECT_KEY_IDENTIFIER: "subjectKeyIdentifier", |
|
ExtensionOID.KEY_USAGE: "keyUsage", |
|
ExtensionOID.SUBJECT_ALTERNATIVE_NAME: "subjectAltName", |
|
ExtensionOID.ISSUER_ALTERNATIVE_NAME: "issuerAltName", |
|
ExtensionOID.BASIC_CONSTRAINTS: "basicConstraints", |
|
ExtensionOID.PRECERT_SIGNED_CERTIFICATE_TIMESTAMPS: ( |
|
"signedCertificateTimestampList" |
|
), |
|
ExtensionOID.SIGNED_CERTIFICATE_TIMESTAMPS: ( |
|
"signedCertificateTimestampList" |
|
), |
|
ExtensionOID.PRECERT_POISON: "ctPoison", |
|
ExtensionOID.MS_CERTIFICATE_TEMPLATE: "msCertificateTemplate", |
|
CRLEntryExtensionOID.CRL_REASON: "cRLReason", |
|
CRLEntryExtensionOID.INVALIDITY_DATE: "invalidityDate", |
|
CRLEntryExtensionOID.CERTIFICATE_ISSUER: "certificateIssuer", |
|
ExtensionOID.NAME_CONSTRAINTS: "nameConstraints", |
|
ExtensionOID.CRL_DISTRIBUTION_POINTS: "cRLDistributionPoints", |
|
ExtensionOID.CERTIFICATE_POLICIES: "certificatePolicies", |
|
ExtensionOID.POLICY_MAPPINGS: "policyMappings", |
|
ExtensionOID.AUTHORITY_KEY_IDENTIFIER: "authorityKeyIdentifier", |
|
ExtensionOID.POLICY_CONSTRAINTS: "policyConstraints", |
|
ExtensionOID.EXTENDED_KEY_USAGE: "extendedKeyUsage", |
|
ExtensionOID.FRESHEST_CRL: "freshestCRL", |
|
ExtensionOID.INHIBIT_ANY_POLICY: "inhibitAnyPolicy", |
|
ExtensionOID.ISSUING_DISTRIBUTION_POINT: "issuingDistributionPoint", |
|
ExtensionOID.AUTHORITY_INFORMATION_ACCESS: "authorityInfoAccess", |
|
ExtensionOID.SUBJECT_INFORMATION_ACCESS: "subjectInfoAccess", |
|
ExtensionOID.OCSP_NO_CHECK: "OCSPNoCheck", |
|
ExtensionOID.CRL_NUMBER: "cRLNumber", |
|
ExtensionOID.DELTA_CRL_INDICATOR: "deltaCRLIndicator", |
|
ExtensionOID.TLS_FEATURE: "TLSFeature", |
|
AuthorityInformationAccessOID.OCSP: "OCSP", |
|
AuthorityInformationAccessOID.CA_ISSUERS: "caIssuers", |
|
SubjectInformationAccessOID.CA_REPOSITORY: "caRepository", |
|
CertificatePoliciesOID.CPS_QUALIFIER: "id-qt-cps", |
|
CertificatePoliciesOID.CPS_USER_NOTICE: "id-qt-unotice", |
|
OCSPExtensionOID.NONCE: "OCSPNonce", |
|
AttributeOID.CHALLENGE_PASSWORD: "challengePassword", |
|
} |
|
|
