OLD | NEW |
| (Empty) |
1 # | |
2 # X.509 message syntax | |
3 # | |
4 # ASN.1 source from: | |
5 # http://www.trl.ibm.com/projects/xml/xss4j/data/asn1/grammars/x509.asn | |
6 # http://www.ietf.org/rfc/rfc2459.txt | |
7 # | |
8 # Sample captures from: | |
9 # http://wiki.wireshark.org/SampleCaptures/ | |
10 # | |
11 from pyasn1.type import tag,namedtype,namedval,univ,constraint,char,useful | |
12 | |
13 MAX = 64 # XXX ? | |
14 | |
15 # | |
16 # PKIX1Explicit88 | |
17 # | |
18 | |
19 # Upper Bounds | |
20 ub_name = univ.Integer(32768) | |
21 ub_common_name = univ.Integer(64) | |
22 ub_locality_name = univ.Integer(128) | |
23 ub_state_name = univ.Integer(128) | |
24 ub_organization_name = univ.Integer(64) | |
25 ub_organizational_unit_name = univ.Integer(64) | |
26 ub_title = univ.Integer(64) | |
27 ub_match = univ.Integer(128) | |
28 ub_emailaddress_length = univ.Integer(128) | |
29 ub_common_name_length = univ.Integer(64) | |
30 ub_country_name_alpha_length = univ.Integer(2) | |
31 ub_country_name_numeric_length = univ.Integer(3) | |
32 ub_domain_defined_attributes = univ.Integer(4) | |
33 ub_domain_defined_attribute_type_length = univ.Integer(8) | |
34 ub_domain_defined_attribute_value_length = univ.Integer(128) | |
35 ub_domain_name_length = univ.Integer(16) | |
36 ub_extension_attributes = univ.Integer(256) | |
37 ub_e163_4_number_length = univ.Integer(15) | |
38 ub_e163_4_sub_address_length = univ.Integer(40) | |
39 ub_generation_qualifier_length = univ.Integer(3) | |
40 ub_given_name_length = univ.Integer(16) | |
41 ub_initials_length = univ.Integer(5) | |
42 ub_integer_options = univ.Integer(256) | |
43 ub_numeric_user_id_length = univ.Integer(32) | |
44 ub_organization_name_length = univ.Integer(64) | |
45 ub_organizational_unit_name_length = univ.Integer(32) | |
46 ub_organizational_units = univ.Integer(4) | |
47 ub_pds_name_length = univ.Integer(16) | |
48 ub_pds_parameter_length = univ.Integer(30) | |
49 ub_pds_physical_address_lines = univ.Integer(6) | |
50 ub_postal_code_length = univ.Integer(16) | |
51 ub_surname_length = univ.Integer(40) | |
52 ub_terminal_id_length = univ.Integer(24) | |
53 ub_unformatted_address_length = univ.Integer(180) | |
54 ub_x121_address_length = univ.Integer(16) | |
55 | |
56 class UniversalString(char.UniversalString): pass | |
57 class BMPString(char.BMPString): pass | |
58 class UTF8String(char.UTF8String): pass | |
59 | |
60 id_pkix = univ.ObjectIdentifier('1.3.6.1.5.5.7') | |
61 id_pe = univ.ObjectIdentifier('1.3.6.1.5.5.7.1') | |
62 id_qt = univ.ObjectIdentifier('1.3.6.1.5.5.7.2') | |
63 id_kp = univ.ObjectIdentifier('1.3.6.1.5.5.7.3') | |
64 id_ad = univ.ObjectIdentifier('1.3.6.1.5.5.7.48') | |
65 | |
66 id_qt_cps = univ.ObjectIdentifier('1.3.6.1.5.5.7.2.1') | |
67 id_qt_unotice = univ.ObjectIdentifier('1.3.6.1.5.5.7.2.2') | |
68 | |
69 id_ad_ocsp = univ.ObjectIdentifier('1.3.6.1.5.5.7.48.1') | |
70 id_ad_caIssuers = univ.ObjectIdentifier('1.3.6.1.5.5.7.48.2') | |
71 | |
72 class AttributeValue(univ.Any): pass | |
73 | |
74 class AttributeType(univ.ObjectIdentifier): pass | |
75 | |
76 class AttributeTypeAndValue(univ.Sequence): | |
77 componentType = namedtype.NamedTypes( | |
78 namedtype.NamedType('type', AttributeType()), | |
79 namedtype.NamedType('value', AttributeValue()) | |
80 ) | |
81 | |
82 class Attribute(univ.Sequence): | |
83 componentType = namedtype.NamedTypes( | |
84 namedtype.NamedType('type', AttributeType()), | |
85 namedtype.NamedType('vals', univ.SetOf(componentType=AttributeValue())) | |
86 ) | |
87 | |
88 id_at = univ.ObjectIdentifier('2.5.4') | |
89 id_at_name = univ.ObjectIdentifier('2.5.4.41') | |
90 id_at_sutname = univ.ObjectIdentifier('2.5.4.4') | |
91 id_at_givenName = univ.ObjectIdentifier('2.5.4.42') | |
92 id_at_initials = univ.ObjectIdentifier('2.5.4.43') | |
93 id_at_generationQualifier = univ.ObjectIdentifier('2.5.4.44') | |
94 | |
95 class X520name(univ.Choice): | |
96 componentType = namedtype.NamedTypes( | |
97 namedtype.NamedType('teletexString', char.TeletexString().subtype(subtyp
eSpec=constraint.ValueSizeConstraint(1, ub_name))), | |
98 namedtype.NamedType('printableString', char.PrintableString().subtype(su
btypeSpec=constraint.ValueSizeConstraint(1, ub_name))), | |
99 namedtype.NamedType('universalString', char.UniversalString().subtype(su
btypeSpec=constraint.ValueSizeConstraint(1, ub_name))), | |
100 namedtype.NamedType('utf8String', char.UTF8String().subtype(subtypeSpec=
constraint.ValueSizeConstraint(1, ub_name))), | |
101 namedtype.NamedType('bmpString', char.BMPString().subtype(subtypeSpec=co
nstraint.ValueSizeConstraint(1, ub_name))) | |
102 ) | |
103 | |
104 id_at_commonName = univ.ObjectIdentifier('2.5.4.3') | |
105 | |
106 class X520CommonName(univ.Choice): | |
107 componentType = namedtype.NamedTypes( | |
108 namedtype.NamedType('teletexString', char.TeletexString().subtype(subtyp
eSpec=constraint.ValueSizeConstraint(1, ub_common_name))), | |
109 namedtype.NamedType('printableString', char.PrintableString().subtype(su
btypeSpec=constraint.ValueSizeConstraint(1, ub_common_name))), | |
110 namedtype.NamedType('universalString', char.UniversalString().subtype(su
btypeSpec=constraint.ValueSizeConstraint(1, ub_common_name))), | |
111 namedtype.NamedType('utf8String', char.UTF8String().subtype(subtypeSpec=
constraint.ValueSizeConstraint(1, ub_common_name))), | |
112 namedtype.NamedType('bmpString', char.BMPString().subtype(subtypeSpec=co
nstraint.ValueSizeConstraint(1, ub_common_name))) | |
113 ) | |
114 | |
115 id_at_localityName = univ.ObjectIdentifier('2.5.4.7') | |
116 | |
117 class X520LocalityName(univ.Choice): | |
118 componentType = namedtype.NamedTypes( | |
119 namedtype.NamedType('teletexString', char.TeletexString().subtype(subtyp
eSpec=constraint.ValueSizeConstraint(1, ub_locality_name))), | |
120 namedtype.NamedType('printableString', char.PrintableString().subtype(su
btypeSpec=constraint.ValueSizeConstraint(1, ub_locality_name))), | |
121 namedtype.NamedType('universalString', char.UniversalString().subtype(su
btypeSpec=constraint.ValueSizeConstraint(1, ub_locality_name))), | |
122 namedtype.NamedType('utf8String', char.UTF8String().subtype(subtypeSpec=
constraint.ValueSizeConstraint(1, ub_locality_name))), | |
123 namedtype.NamedType('bmpString', char.BMPString().subtype(subtypeSpec=co
nstraint.ValueSizeConstraint(1, ub_locality_name))) | |
124 ) | |
125 | |
126 id_at_stateOrProvinceName = univ.ObjectIdentifier('2.5.4.8') | |
127 | |
128 class X520StateOrProvinceName(univ.Choice): | |
129 componentType = namedtype.NamedTypes( | |
130 namedtype.NamedType('teletexString', char.TeletexString().subtype(subtyp
eSpec=constraint.ValueSizeConstraint(1, ub_state_name))), | |
131 namedtype.NamedType('printableString', char.PrintableString().subtype(su
btypeSpec=constraint.ValueSizeConstraint(1, ub_state_name))), | |
132 namedtype.NamedType('universalString', char.UniversalString().subtype(su
btypeSpec=constraint.ValueSizeConstraint(1, ub_state_name))), | |
133 namedtype.NamedType('utf8String', char.UTF8String().subtype(subtypeSpec=
constraint.ValueSizeConstraint(1, ub_state_name))), | |
134 namedtype.NamedType('bmpString', char.BMPString().subtype(subtypeSpec=co
nstraint.ValueSizeConstraint(1, ub_state_name))) | |
135 ) | |
136 | |
137 id_at_organizationName = univ.ObjectIdentifier('2.5.4.10') | |
138 | |
139 class X520OrganizationName(univ.Choice): | |
140 componentType = namedtype.NamedTypes( | |
141 namedtype.NamedType('teletexString', char.TeletexString().subtype(subtyp
eSpec=constraint.ValueSizeConstraint(1, ub_organization_name))), | |
142 namedtype.NamedType('printableString', char.PrintableString().subtype(su
btypeSpec=constraint.ValueSizeConstraint(1, ub_organization_name))), | |
143 namedtype.NamedType('universalString', char.UniversalString().subtype(su
btypeSpec=constraint.ValueSizeConstraint(1, ub_organization_name))), | |
144 namedtype.NamedType('utf8String', char.UTF8String().subtype(subtypeSpec=
constraint.ValueSizeConstraint(1, ub_organization_name))), | |
145 namedtype.NamedType('bmpString', char.BMPString().subtype(subtypeSpec=co
nstraint.ValueSizeConstraint(1, ub_organization_name))) | |
146 ) | |
147 | |
148 id_at_organizationalUnitName = univ.ObjectIdentifier('2.5.4.11') | |
149 | |
150 class X520OrganizationalUnitName(univ.Choice): | |
151 componentType = namedtype.NamedTypes( | |
152 namedtype.NamedType('teletexString', char.TeletexString().subtype(subtyp
eSpec=constraint.ValueSizeConstraint(1, ub_organizational_unit_name))), | |
153 namedtype.NamedType('printableString', char.PrintableString().subtype(su
btypeSpec=constraint.ValueSizeConstraint(1, ub_organizational_unit_name))), | |
154 namedtype.NamedType('universalString', char.UniversalString().subtype(su
btypeSpec=constraint.ValueSizeConstraint(1, ub_organizational_unit_name))), | |
155 namedtype.NamedType('utf8String', char.UTF8String().subtype(subtypeSpec=
constraint.ValueSizeConstraint(1, ub_organizational_unit_name))), | |
156 namedtype.NamedType('bmpString', char.BMPString().subtype(subtypeSpec=co
nstraint.ValueSizeConstraint(1, ub_organizational_unit_name))) | |
157 ) | |
158 | |
159 id_at_title = univ.ObjectIdentifier('2.5.4.12') | |
160 | |
161 class X520Title(univ.Choice): | |
162 componentType = namedtype.NamedTypes( | |
163 namedtype.NamedType('teletexString', char.TeletexString().subtype(subtyp
eSpec=constraint.ValueSizeConstraint(1, ub_title))), | |
164 namedtype.NamedType('printableString', char.PrintableString().subtype(su
btypeSpec=constraint.ValueSizeConstraint(1, ub_title))), | |
165 namedtype.NamedType('universalString', char.UniversalString().subtype(su
btypeSpec=constraint.ValueSizeConstraint(1, ub_title))), | |
166 namedtype.NamedType('utf8String', char.UTF8String().subtype(subtypeSpec=
constraint.ValueSizeConstraint(1, ub_title))), | |
167 namedtype.NamedType('bmpString', char.BMPString().subtype(subtypeSpec=co
nstraint.ValueSizeConstraint(1, ub_title))) | |
168 ) | |
169 | |
170 id_at_dnQualifier = univ.ObjectIdentifier('2.5.4.46') | |
171 | |
172 class X520dnQualifier(char.PrintableString): pass | |
173 | |
174 id_at_countryName = univ.ObjectIdentifier('2.5.4.6') | |
175 | |
176 class X520countryName(char.PrintableString): | |
177 subtypeSpec = char.PrintableString.subtypeSpec + constraint.ValueSizeConstra
int(2, 2) | |
178 | |
179 pkcs_9 = univ.ObjectIdentifier('1.2.840.113549.1.9') | |
180 | |
181 emailAddress = univ.ObjectIdentifier('1.2.840.113549.1.9.1') | |
182 | |
183 class Pkcs9email(char.IA5String): | |
184 subtypeSpec = char.IA5String.subtypeSpec + constraint.ValueSizeConstraint(1,
ub_emailaddress_length) | |
185 | |
186 # ---- | |
187 | |
188 class DSAPrivateKey(univ.Sequence): | |
189 """PKIX compliant DSA private key structure""" | |
190 componentType = namedtype.NamedTypes( | |
191 namedtype.NamedType('version', univ.Integer(namedValues=namedval.NamedVa
lues(('v1', 0)))), | |
192 namedtype.NamedType('p', univ.Integer()), | |
193 namedtype.NamedType('q', univ.Integer()), | |
194 namedtype.NamedType('g', univ.Integer()), | |
195 namedtype.NamedType('public', univ.Integer()), | |
196 namedtype.NamedType('private', univ.Integer()) | |
197 ) | |
198 | |
199 # ---- | |
200 | |
201 class RelativeDistinguishedName(univ.SetOf): | |
202 componentType = AttributeTypeAndValue() | |
203 | |
204 class RDNSequence(univ.SequenceOf): | |
205 componentType = RelativeDistinguishedName() | |
206 | |
207 class Name(univ.Choice): | |
208 componentType = namedtype.NamedTypes( | |
209 namedtype.NamedType('', RDNSequence()) | |
210 ) | |
211 | |
212 class DirectoryString(univ.Choice): | |
213 componentType = namedtype.NamedTypes( | |
214 namedtype.NamedType('teletexString', char.TeletexString().subtype(subtyp
eSpec=constraint.ValueSizeConstraint(1, MAX))), | |
215 namedtype.NamedType('printableString', char.PrintableString().subtype(su
btypeSpec=constraint.ValueSizeConstraint(1, MAX))), | |
216 namedtype.NamedType('universalString', char.UniversalString().subtype(su
btypeSpec=constraint.ValueSizeConstraint(1, MAX))), | |
217 namedtype.NamedType('utf8String', char.UTF8String().subtype(subtypeSpec=
constraint.ValueSizeConstraint(1, MAX))), | |
218 namedtype.NamedType('bmpString', char.BMPString().subtype(subtypeSpec=co
nstraint.ValueSizeConstraint(1, MAX))), | |
219 namedtype.NamedType('ia5String', char.IA5String().subtype(subtypeSpec=co
nstraint.ValueSizeConstraint(1, MAX))) # hm, this should not be here!? XXX | |
220 ) | |
221 | |
222 # certificate and CRL specific structures begin here | |
223 | |
224 class AlgorithmIdentifier(univ.Sequence): | |
225 componentType = namedtype.NamedTypes( | |
226 namedtype.NamedType('algorithm', univ.ObjectIdentifier()), | |
227 namedtype.OptionalNamedType('parameters', univ.Any()) | |
228 ) | |
229 | |
230 class Extension(univ.Sequence): | |
231 componentType = namedtype.NamedTypes( | |
232 namedtype.NamedType('extnID', univ.ObjectIdentifier()), | |
233 namedtype.DefaultedNamedType('critical', univ.Boolean('False')), | |
234 namedtype.NamedType('extnValue', univ.Any()) | |
235 ) | |
236 | |
237 class Extensions(univ.SequenceOf): | |
238 componentType = Extension() | |
239 sizeSpec = univ.SequenceOf.sizeSpec + constraint.ValueSizeConstraint(1, MAX) | |
240 | |
241 class SubjectPublicKeyInfo(univ.Sequence): | |
242 componentType = namedtype.NamedTypes( | |
243 namedtype.NamedType('algorithm', AlgorithmIdentifier()), | |
244 namedtype.NamedType('subjectPublicKey', univ.BitString()) | |
245 ) | |
246 | |
247 class UniqueIdentifier(univ.BitString): pass | |
248 | |
249 class Time(univ.Choice): | |
250 componentType = namedtype.NamedTypes( | |
251 namedtype.NamedType('utcTime', useful.UTCTime()), | |
252 namedtype.NamedType('generalTime', useful.GeneralizedTime()) | |
253 ) | |
254 | |
255 class Validity(univ.Sequence): | |
256 componentType = namedtype.NamedTypes( | |
257 namedtype.NamedType('notBefore', Time()), | |
258 namedtype.NamedType('notAfter', Time()) | |
259 ) | |
260 | |
261 class CertificateSerialNumber(univ.Integer): pass | |
262 | |
263 class Version(univ.Integer): | |
264 namedValues = namedval.NamedValues( | |
265 ('v1', 0), ('v2', 1), ('v3', 2) | |
266 ) | |
267 | |
268 class TBSCertificate(univ.Sequence): | |
269 componentType = namedtype.NamedTypes( | |
270 namedtype.DefaultedNamedType('version', Version('v1').subtype(explicitTa
g=tag.Tag(tag.tagClassContext, tag.tagFormatSimple, 0))), | |
271 namedtype.NamedType('serialNumber', CertificateSerialNumber()), | |
272 namedtype.NamedType('signature', AlgorithmIdentifier()), | |
273 namedtype.NamedType('issuer', Name()), | |
274 namedtype.NamedType('validity', Validity()), | |
275 namedtype.NamedType('subject', Name()), | |
276 namedtype.NamedType('subjectPublicKeyInfo', SubjectPublicKeyInfo()), | |
277 namedtype.OptionalNamedType('issuerUniqueID', UniqueIdentifier().subtype
(implicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatSimple, 1))), | |
278 namedtype.OptionalNamedType('subjectUniqueID', UniqueIdentifier().subtyp
e(implicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatSimple, 2))), | |
279 namedtype.OptionalNamedType('extensions', Extensions().subtype(explicitT
ag=tag.Tag(tag.tagClassContext, tag.tagFormatSimple, 3))) | |
280 ) | |
281 | |
282 class Certificate(univ.Sequence): | |
283 componentType = namedtype.NamedTypes( | |
284 namedtype.NamedType('tbsCertificate', TBSCertificate()), | |
285 namedtype.NamedType('signatureAlgorithm', AlgorithmIdentifier()), | |
286 namedtype.NamedType('signatureValue', univ.BitString()) | |
287 ) | |
288 | |
289 # CRL structures | |
290 | |
291 class RevokedCertificate(univ.Sequence): | |
292 componentType = namedtype.NamedTypes( | |
293 namedtype.NamedType('userCertificate', CertificateSerialNumber()), | |
294 namedtype.NamedType('revocationDate', Time()), | |
295 namedtype.OptionalNamedType('crlEntryExtensions', Extensions()) | |
296 ) | |
297 | |
298 class TBSCertList(univ.Sequence): | |
299 componentType = namedtype.NamedTypes( | |
300 namedtype.OptionalNamedType('version', Version()), | |
301 namedtype.NamedType('signature', AlgorithmIdentifier()), | |
302 namedtype.NamedType('issuer', Name()), | |
303 namedtype.NamedType('thisUpdate', Time()), | |
304 namedtype.OptionalNamedType('nextUpdate', Time()), | |
305 namedtype.OptionalNamedType('revokedCertificates', univ.SequenceOf(compo
nentType=RevokedCertificate())), | |
306 namedtype.OptionalNamedType('crlExtensions', Extensions().subtype(explic
itTag=tag.Tag(tag.tagClassContext, tag.tagFormatConstructed, 0))) | |
307 ) | |
308 | |
309 class CertificateList(univ.Sequence): | |
310 componentType = namedtype.NamedTypes( | |
311 namedtype.NamedType('tbsCertList', TBSCertList()), | |
312 namedtype.NamedType('signatureAlgorithm', AlgorithmIdentifier()), | |
313 namedtype.NamedType('signature', univ.BitString()) | |
314 ) | |
315 | |
316 # Algorithm OIDs and parameter structures | |
317 | |
318 pkcs_1 = univ.ObjectIdentifier('1.2.840.113549.1.1') | |
319 rsaEncryption = univ.ObjectIdentifier('1.2.840.113549.1.1.1') | |
320 md2WithRSAEncryption = univ.ObjectIdentifier('1.2.840.113549.1.1.2') | |
321 md5WithRSAEncryption = univ.ObjectIdentifier('1.2.840.113549.1.1.4') | |
322 sha1WithRSAEncryption = univ.ObjectIdentifier('1.2.840.113549.1.1.5') | |
323 id_dsa_with_sha1 = univ.ObjectIdentifier('1.2.840.10040.4.3') | |
324 | |
325 class Dss_Sig_Value(univ.Sequence): | |
326 componentType = namedtype.NamedTypes( | |
327 namedtype.NamedType('r', univ.Integer()), | |
328 namedtype.NamedType('s', univ.Integer()) | |
329 ) | |
330 | |
331 dhpublicnumber = univ.ObjectIdentifier('1.2.840.10046.2.1') | |
332 | |
333 class ValidationParms(univ.Sequence): | |
334 componentType = namedtype.NamedTypes( | |
335 namedtype.NamedType('seed', univ.BitString()), | |
336 namedtype.NamedType('pgenCounter', univ.Integer()) | |
337 ) | |
338 | |
339 class DomainParameters(univ.Sequence): | |
340 componentType = namedtype.NamedTypes( | |
341 namedtype.NamedType('p', univ.Integer()), | |
342 namedtype.NamedType('g', univ.Integer()), | |
343 namedtype.NamedType('q', univ.Integer()), | |
344 namedtype.NamedType('j', univ.Integer()), | |
345 namedtype.OptionalNamedType('validationParms', ValidationParms()) | |
346 ) | |
347 | |
348 id_dsa = univ.ObjectIdentifier('1.2.840.10040.4.1') | |
349 | |
350 class Dss_Parms(univ.Sequence): | |
351 componentType = namedtype.NamedTypes( | |
352 namedtype.NamedType('p', univ.Integer()), | |
353 namedtype.NamedType('q', univ.Integer()), | |
354 namedtype.NamedType('g', univ.Integer()) | |
355 ) | |
356 | |
357 # x400 address syntax starts here | |
358 | |
359 teletex_domain_defined_attributes = univ.Integer(6) | |
360 | |
361 class TeletexDomainDefinedAttribute(univ.Sequence): | |
362 componentType = namedtype.NamedTypes( | |
363 namedtype.NamedType('type', char.TeletexString().subtype(subtypeSpec=con
straint.ValueSizeConstraint(1, ub_domain_defined_attribute_type_length))), | |
364 namedtype.NamedType('value', char.TeletexString()) | |
365 ) | |
366 | |
367 class TeletexDomainDefinedAttributes(univ.SequenceOf): | |
368 componentType = TeletexDomainDefinedAttribute() | |
369 subtypeSpec = univ.SequenceOf.subtypeSpec + constraint.ValueSizeConstraint(1
, ub_domain_defined_attributes) | |
370 | |
371 terminal_type = univ.Integer(23) | |
372 | |
373 class TerminalType(univ.Integer): | |
374 subtypeSpec = univ.Integer.subtypeSpec + constraint.ValueSizeConstraint(0, u
b_integer_options) | |
375 namedValues = namedval.NamedValues( | |
376 ('telex', 3), | |
377 ('teletelex', 4), | |
378 ('g3-facsimile', 5), | |
379 ('g4-facsimile', 6), | |
380 ('ia5-terminal', 7), | |
381 ('videotex', 8) | |
382 ) | |
383 | |
384 class PresentationAddress(univ.Sequence): | |
385 componentType = namedtype.NamedTypes( | |
386 namedtype.OptionalNamedType('pSelector', univ.OctetString().subtype(expl
icitTag=tag.Tag(tag.tagClassContext, tag.tagFormatSimple, 0))), | |
387 namedtype.OptionalNamedType('sSelector', univ.OctetString().subtype(expl
icitTag=tag.Tag(tag.tagClassContext, tag.tagFormatSimple, 1))), | |
388 namedtype.OptionalNamedType('tSelector', univ.OctetString().subtype(expl
icitTag=tag.Tag(tag.tagClassContext, tag.tagFormatSimple, 2))), | |
389 namedtype.OptionalNamedType('nAddresses', univ.SetOf(componentType=univ.
OctetString()).subtype(explicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatSim
ple, 3), subtypeSpec=constraint.ValueSizeConstraint(1, MAX))), | |
390 ) | |
391 | |
392 extended_network_address = univ.Integer(22) | |
393 | |
394 class E163_4_address(univ.Sequence): | |
395 componentType = namedtype.NamedTypes( | |
396 namedtype.NamedType('number', char.NumericString().subtype(subtypeSpec=c
onstraint.ValueSizeConstraint(1, ub_e163_4_number_length), explicitTag=tag.Tag(t
ag.tagClassContext, tag.tagFormatSimple, 0))), | |
397 namedtype.OptionalNamedType('sub-address', char.NumericString().subtype(
subtypeSpec=constraint.ValueSizeConstraint(1, ub_e163_4_sub_address_length), exp
licitTag=tag.Tag(tag.tagClassContext, tag.tagFormatSimple, 1))) | |
398 ) | |
399 | |
400 class ExtendedNetworkAddress(univ.Choice): | |
401 componentType = namedtype.NamedTypes( | |
402 namedtype.NamedType('e163-4-address', E163_4_address()), | |
403 namedtype.NamedType('psap-address', PresentationAddress().subtype(explic
itTag=tag.Tag(tag.tagClassContext, tag.tagFormatSimple, 0))) | |
404 ) | |
405 | |
406 class PDSParameter(univ.Set): | |
407 componentType = namedtype.NamedTypes( | |
408 namedtype.OptionalNamedType('printable-string', char.PrintableString().s
ubtype(subtypeSpec=constraint.ValueSizeConstraint(1, ub_pds_parameter_length))), | |
409 namedtype.OptionalNamedType('teletex-string', char.TeletexString().subty
pe(subtypeSpec=constraint.ValueSizeConstraint(1, ub_pds_parameter_length))) | |
410 ) | |
411 | |
412 local_postal_attributes = univ.Integer(21) | |
413 | |
414 class LocalPostalAttributes(PDSParameter): pass | |
415 | |
416 class UniquePostalName(PDSParameter): pass | |
417 | |
418 unique_postal_name = univ.Integer(20) | |
419 | |
420 poste_restante_address = univ.Integer(19) | |
421 | |
422 class PosteRestanteAddress(PDSParameter): pass | |
423 | |
424 post_office_box_address = univ.Integer(18) | |
425 | |
426 class PostOfficeBoxAddress(PDSParameter): pass | |
427 | |
428 street_address = univ.Integer(17) | |
429 | |
430 class StreetAddress(PDSParameter): pass | |
431 | |
432 class UnformattedPostalAddress(univ.Set): | |
433 componentType = namedtype.NamedTypes( | |
434 namedtype.OptionalNamedType('printable-address', univ.SequenceOf(compone
ntType=char.PrintableString().subtype(subtypeSpec=constraint.ValueSizeConstraint
(1, ub_pds_parameter_length)).subtype(subtypeSpec=constraint.ValueSizeConstraint
(1, ub_pds_physical_address_lines)))), | |
435 namedtype.OptionalNamedType('teletex-string', char.TeletexString().subty
pe(subtypeSpec=constraint.ValueSizeConstraint(1, ub_unformatted_address_length))
) | |
436 ) | |
437 | |
438 physical_delivery_office_name = univ.Integer(10) | |
439 | |
440 class PhysicalDeliveryOfficeName(PDSParameter): pass | |
441 | |
442 physical_delivery_office_number = univ.Integer(11) | |
443 | |
444 class PhysicalDeliveryOfficeNumber(PDSParameter): pass | |
445 | |
446 extension_OR_address_components = univ.Integer(12) | |
447 | |
448 class ExtensionORAddressComponents(PDSParameter): pass | |
449 | |
450 physical_delivery_personal_name = univ.Integer(13) | |
451 | |
452 class PhysicalDeliveryPersonalName(PDSParameter): pass | |
453 | |
454 physical_delivery_organization_name = univ.Integer(14) | |
455 | |
456 class PhysicalDeliveryOrganizationName(PDSParameter): pass | |
457 | |
458 extension_physical_delivery_address_components = univ.Integer(15) | |
459 | |
460 class ExtensionPhysicalDeliveryAddressComponents(PDSParameter): pass | |
461 | |
462 unformatted_postal_address = univ.Integer(16) | |
463 | |
464 postal_code = univ.Integer(9) | |
465 | |
466 class PostalCode(univ.Choice): | |
467 componentType = namedtype.NamedTypes( | |
468 namedtype.NamedType('numeric-code', char.NumericString().subtype(subtype
Spec=constraint.ValueSizeConstraint(1, ub_postal_code_length))), | |
469 namedtype.NamedType('printable-code', char.PrintableString().subtype(sub
typeSpec=constraint.ValueSizeConstraint(1, ub_postal_code_length))) | |
470 ) | |
471 | |
472 class PhysicalDeliveryCountryName(univ.Choice): | |
473 componentType = namedtype.NamedTypes( | |
474 namedtype.NamedType('x121-dcc-code', char.NumericString().subtype(subtyp
eSpec=constraint.ValueSizeConstraint(ub_country_name_numeric_length, ub_country_
name_numeric_length))), | |
475 namedtype.NamedType('iso-3166-alpha2-code', char.PrintableString().subty
pe(subtypeSpec=constraint.ValueSizeConstraint(ub_country_name_alpha_length, ub_c
ountry_name_alpha_length))) | |
476 ) | |
477 | |
478 class PDSName(char.PrintableString): | |
479 subtypeSpec = char.PrintableString.subtypeSpec + constraint.ValueSizeConstra
int(1, ub_pds_name_length) | |
480 | |
481 physical_delivery_country_name = univ.Integer(8) | |
482 | |
483 class TeletexOrganizationalUnitName(char.TeletexString): | |
484 subtypeSpec = char.TeletexString.subtypeSpec + constraint.ValueSizeConstrain
t(1, ub_organizational_unit_name_length) | |
485 | |
486 pds_name = univ.Integer(7) | |
487 | |
488 teletex_organizational_unit_names = univ.Integer(5) | |
489 | |
490 class TeletexOrganizationalUnitNames(univ.SequenceOf): | |
491 componentType = TeletexOrganizationalUnitName() | |
492 subtypeSpec = univ.SequenceOf.subtypeSpec + constraint.ValueSizeConstraint(1
, ub_organizational_units) | |
493 | |
494 teletex_personal_name = univ.Integer(4) | |
495 | |
496 class TeletexPersonalName(univ.Set): | |
497 componentType = namedtype.NamedTypes( | |
498 namedtype.NamedType('surname', char.TeletexString().subtype(subtypeSpec=
constraint.ValueSizeConstraint(1, ub_surname_length), explicitTag=tag.Tag(tag.ta
gClassContext, tag.tagFormatSimple, 0))), | |
499 namedtype.OptionalNamedType('given-name', char.TeletexString().subtype(s
ubtypeSpec=constraint.ValueSizeConstraint(1, ub_given_name_length), explicitTag=
tag.Tag(tag.tagClassContext, tag.tagFormatSimple, 1))), | |
500 namedtype.OptionalNamedType('initials', char.TeletexString().subtype(sub
typeSpec=constraint.ValueSizeConstraint(1, ub_initials_length), explicitTag=tag.
Tag(tag.tagClassContext, tag.tagFormatSimple, 2))), | |
501 namedtype.OptionalNamedType('generation-qualifier', char.TeletexString()
.subtype(subtypeSpec=constraint.ValueSizeConstraint(1, ub_generation_qualifier_l
ength), explicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatSimple, 3))) | |
502 ) | |
503 | |
504 teletex_organization_name = univ.Integer(3) | |
505 | |
506 class TeletexOrganizationName(char.TeletexString): | |
507 subtypeSpec = char.TeletexString.subtypeSpec + constraint.ValueSizeConstrain
t(1, ub_organization_name_length) | |
508 | |
509 teletex_common_name = univ.Integer(2) | |
510 | |
511 class TeletexCommonName(char.TeletexString): | |
512 subtypeSpec = char.TeletexString.subtypeSpec + constraint.ValueSizeConstrain
t(1, ub_common_name_length) | |
513 | |
514 class CommonName(char.PrintableString): | |
515 subtypeSpec = char.PrintableString.subtypeSpec + constraint.ValueSizeConstra
int(1, ub_common_name_length) | |
516 | |
517 common_name = univ.Integer(1) | |
518 | |
519 class ExtensionAttribute(univ.Sequence): | |
520 componentType = namedtype.NamedTypes( | |
521 namedtype.NamedType('extension-attribute-type', univ.Integer().subtype(s
ubtypeSpec=constraint.ValueSizeConstraint(0, ub_extension_attributes), explicitT
ag=tag.Tag(tag.tagClassContext, tag.tagFormatSimple, 0))), | |
522 namedtype.NamedType('extension-attribute-value', univ.Any().subtype(expl
icitTag=tag.Tag(tag.tagClassContext, tag.tagFormatSimple, 1))) | |
523 ) | |
524 | |
525 class ExtensionAttributes(univ.SetOf): | |
526 componentType = ExtensionAttribute() | |
527 subtypeSpec = univ.SetOf.subtypeSpec + constraint.ValueSizeConstraint(1, ub_
extension_attributes) | |
528 | |
529 class BuiltInDomainDefinedAttribute(univ.Sequence): | |
530 componentType = namedtype.NamedTypes( | |
531 namedtype.NamedType('type', char.PrintableString().subtype(subtypeSpec=c
onstraint.ValueSizeConstraint(1, ub_domain_defined_attribute_type_length))), | |
532 namedtype.NamedType('value', char.PrintableString().subtype(subtypeSpec=
constraint.ValueSizeConstraint(1, ub_domain_defined_attribute_value_length))) | |
533 ) | |
534 | |
535 class BuiltInDomainDefinedAttributes(univ.SequenceOf): | |
536 componentType = BuiltInDomainDefinedAttribute() | |
537 subtypeSpec = univ.SequenceOf.subtypeSpec + constraint.ValueSizeConstraint(1
, ub_domain_defined_attributes) | |
538 | |
539 class OrganizationalUnitName(char.PrintableString): | |
540 subtypeSpec = univ.SequenceOf.subtypeSpec + constraint.ValueSizeConstraint(1
, ub_organizational_unit_name_length) | |
541 | |
542 class OrganizationalUnitNames(univ.SequenceOf): | |
543 componentType = OrganizationalUnitName() | |
544 subtypeSpec = univ.SequenceOf.subtypeSpec + constraint.ValueSizeConstraint(1
, ub_organizational_units) | |
545 | |
546 class PersonalName(univ.Set): | |
547 componentType = namedtype.NamedTypes( | |
548 namedtype.NamedType('surname', char.PrintableString().subtype(subtypeSpe
c=constraint.ValueSizeConstraint(1, ub_surname_length), explicitTag=tag.Tag(tag.
tagClassContext, tag.tagFormatSimple, 0))), | |
549 namedtype.OptionalNamedType('given-name', char.PrintableString().subtype
(subtypeSpec=constraint.ValueSizeConstraint(1, ub_given_name_length), explicitTa
g=tag.Tag(tag.tagClassContext, tag.tagFormatSimple, 1))), | |
550 namedtype.OptionalNamedType('initials', char.PrintableString().subtype(s
ubtypeSpec=constraint.ValueSizeConstraint(1, ub_initials_length), explicitTag=ta
g.Tag(tag.tagClassContext, tag.tagFormatSimple, 2))), | |
551 namedtype.OptionalNamedType('generation-qualifier', char.PrintableString
().subtype(subtypeSpec=constraint.ValueSizeConstraint(1, ub_generation_qualifier
_length), explicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatSimple, 3))) | |
552 ) | |
553 | |
554 class NumericUserIdentifier(char.NumericString): | |
555 subtypeSpec = char.NumericString.subtypeSpec + constraint.ValueSizeConstrain
t(1, ub_numeric_user_id_length) | |
556 | |
557 class OrganizationName(char.PrintableString): | |
558 subtypeSpec = char.PrintableString.subtypeSpec + constraint.ValueSizeConstra
int(1, ub_organization_name_length) | |
559 | |
560 class PrivateDomainName(univ.Choice): | |
561 componentType = namedtype.NamedTypes( | |
562 namedtype.NamedType('numeric', char.NumericString().subtype(subtypeSpec=
constraint.ValueSizeConstraint(1, ub_domain_name_length))), | |
563 namedtype.NamedType('printable', char.PrintableString().subtype(subtypeS
pec=constraint.ValueSizeConstraint(1, ub_domain_name_length))) | |
564 ) | |
565 | |
566 class TerminalIdentifier(char.PrintableString): | |
567 subtypeSpec = char.PrintableString.subtypeSpec + constraint.ValueSizeConstra
int(1, ub_terminal_id_length) | |
568 | |
569 class X121Address(char.NumericString): | |
570 subtypeSpec = char.NumericString.subtypeSpec + constraint.ValueSizeConstrain
t(1, ub_x121_address_length) | |
571 | |
572 class NetworkAddress(X121Address): pass | |
573 | |
574 class AdministrationDomainName(univ.Choice): | |
575 tagSet = univ.Choice.tagSet.tagExplicitly( | |
576 tag.Tag(tag.tagClassApplication, tag.tagFormatConstructed, 2) | |
577 ) | |
578 componentType = namedtype.NamedTypes( | |
579 namedtype.NamedType('numeric', char.NumericString().subtype(subtypeSpec=
constraint.ValueSizeConstraint(0, ub_domain_name_length))), | |
580 namedtype.NamedType('printable', char.PrintableString().subtype(subtypeS
pec=constraint.ValueSizeConstraint(0, ub_domain_name_length))) | |
581 ) | |
582 | |
583 class CountryName(univ.Choice): | |
584 tagSet = univ.Choice.tagSet.tagExplicitly( | |
585 tag.Tag(tag.tagClassApplication, tag.tagFormatConstructed, 1) | |
586 ) | |
587 componentType = namedtype.NamedTypes( | |
588 namedtype.NamedType('x121-dcc-code', char.NumericString().subtype(subtyp
eSpec=constraint.ValueSizeConstraint(ub_country_name_numeric_length, ub_country_
name_numeric_length))), | |
589 namedtype.NamedType('iso-3166-alpha2-code', char.PrintableString().subty
pe(subtypeSpec=constraint.ValueSizeConstraint(ub_country_name_alpha_length, ub_c
ountry_name_alpha_length))) | |
590 ) | |
591 | |
592 class BuiltInStandardAttributes(univ.Sequence): | |
593 componentType = namedtype.NamedTypes( | |
594 namedtype.OptionalNamedType('country-name', CountryName()), | |
595 namedtype.OptionalNamedType('administration-domain-name', Administration
DomainName()), | |
596 namedtype.OptionalNamedType('network-address', NetworkAddress().subtype(
explicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatSimple, 0))), | |
597 namedtype.OptionalNamedType('terminal-identifier', TerminalIdentifier().
subtype(explicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatSimple, 1))), | |
598 namedtype.OptionalNamedType('private-domain-name', PrivateDomainName().s
ubtype(explicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatSimple, 2))), | |
599 namedtype.OptionalNamedType('organization-name', OrganizationName().subt
ype(explicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatSimple, 3))), | |
600 namedtype.OptionalNamedType('numeric-user-identifier', NumericUserIdenti
fier().subtype(explicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatSimple, 4))
), | |
601 namedtype.OptionalNamedType('personal-name', PersonalName().subtype(expl
icitTag=tag.Tag(tag.tagClassContext, tag.tagFormatSimple, 5))), | |
602 namedtype.OptionalNamedType('organizational-unit-names', OrganizationalU
nitNames().subtype(explicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatSimple,
6))) | |
603 ) | |
604 | |
605 class ORAddress(univ.Sequence): | |
606 componentType = namedtype.NamedTypes( | |
607 namedtype.NamedType('built-in-standard-attributes', BuiltInStandardAttri
butes()), | |
608 namedtype.OptionalNamedType('built-in-domain-defined-attributes', BuiltI
nDomainDefinedAttributes()), | |
609 namedtype.OptionalNamedType('extension-attributes', ExtensionAttributes(
)) | |
610 ) | |
611 | |
612 # | |
613 # PKIX1Implicit88 | |
614 # | |
615 | |
616 id_ce_invalidityDate = univ.ObjectIdentifier('2.5.29.24') | |
617 | |
618 class InvalidityDate(useful.GeneralizedTime): pass | |
619 | |
620 id_holdinstruction_none = univ.ObjectIdentifier('2.2.840.10040.2.1') | |
621 id_holdinstruction_callissuer = univ.ObjectIdentifier('2.2.840.10040.2.2') | |
622 id_holdinstruction_reject = univ.ObjectIdentifier('2.2.840.10040.2.3') | |
623 | |
624 holdInstruction = univ.ObjectIdentifier('2.2.840.10040.2') | |
625 | |
626 id_ce_holdInstructionCode = univ.ObjectIdentifier('2.5.29.23') | |
627 | |
628 class HoldInstructionCode(univ.ObjectIdentifier): pass | |
629 | |
630 id_ce_cRLReasons = univ.ObjectIdentifier('2.5.29.21') | |
631 | |
632 class CRLReason(univ.Enumerated): | |
633 namedValues = namedval.NamedValues( | |
634 ('unspecified', 0), | |
635 ('keyCompromise', 1), | |
636 ('cACompromise', 2), | |
637 ('affiliationChanged', 3), | |
638 ('superseded', 4), | |
639 ('cessationOfOperation', 5), | |
640 ('certificateHold', 6), | |
641 ('removeFromCRL', 8) | |
642 ) | |
643 | |
644 id_ce_cRLNumber = univ.ObjectIdentifier('2.5.29.20') | |
645 | |
646 class CRLNumber(univ.Integer): | |
647 subtypeSpec = univ.SequenceOf.subtypeSpec + constraint.ValueSizeConstraint(0
, MAX) | |
648 | |
649 class BaseCRLNumber(CRLNumber): pass | |
650 | |
651 id_kp_serverAuth = univ.ObjectIdentifier('1.3.6.1.5.5.7.3.1.1') | |
652 id_kp_clientAuth = univ.ObjectIdentifier('1.3.6.1.5.5.7.3.2') | |
653 id_kp_codeSigning = univ.ObjectIdentifier('1.3.6.1.5.5.7.3.3') | |
654 id_kp_emailProtection = univ.ObjectIdentifier('1.3.6.1.5.5.7.3.4') | |
655 id_kp_ipsecEndSystem = univ.ObjectIdentifier('1.3.6.1.5.5.7.3.5') | |
656 id_kp_ipsecTunnel = univ.ObjectIdentifier('1.3.6.1.5.5.7.3.6') | |
657 id_kp_ipsecUser = univ.ObjectIdentifier('1.3.6.1.5.5.7.3.7') | |
658 id_kp_timeStamping = univ.ObjectIdentifier('1.3.6.1.5.5.7.3.8') | |
659 id_pe_authorityInfoAccess = univ.ObjectIdentifier('1.3.6.1.5.5.7.1.1') | |
660 id_ce_extKeyUsage = univ.ObjectIdentifier('2.5.29.37') | |
661 | |
662 class KeyPurposeId(univ.ObjectIdentifier): pass | |
663 | |
664 class ExtKeyUsageSyntax(univ.SequenceOf): | |
665 componentType = KeyPurposeId() | |
666 subtypeSpec = univ.SequenceOf.subtypeSpec + constraint.ValueSizeConstraint(1
, MAX) | |
667 | |
668 class ReasonFlags(univ.BitString): | |
669 namedValues = namedval.NamedValues( | |
670 ('unused', 0), | |
671 ('keyCompromise', 1), | |
672 ('cACompromise', 2), | |
673 ('affiliationChanged', 3), | |
674 ('superseded', 4), | |
675 ('cessationOfOperation', 5), | |
676 ('certificateHold', 6) | |
677 ) | |
678 | |
679 | |
680 class SkipCerts(univ.Integer): | |
681 subtypeSpec = univ.Integer.subtypeSpec + constraint.ValueSizeConstraint(0, M
AX) | |
682 | |
683 id_ce_policyConstraints = univ.ObjectIdentifier('2.5.29.36') | |
684 | |
685 class PolicyConstraints(univ.Sequence): | |
686 componentType = namedtype.NamedTypes( | |
687 namedtype.OptionalNamedType('requireExplicitPolicy', SkipCerts().subtype
(implicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatConstructed, 0))), | |
688 namedtype.OptionalNamedType('inhibitPolicyMapping', SkipCerts().subtype(
implicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatConstructed, 1))) | |
689 ) | |
690 | |
691 id_ce_basicConstraints = univ.ObjectIdentifier('2.5.29.19') | |
692 | |
693 class BasicConstraints(univ.Sequence): | |
694 componentType = namedtype.NamedTypes( | |
695 namedtype.NamedType('cA', univ.Boolean(False)), | |
696 namedtype.OptionalNamedType('pathLenConstraint', univ.Integer().subtype(
subtypeSpec=constraint.ValueRangeConstraint(0, MAX))) | |
697 ) | |
698 | |
699 id_ce_subjectDirectoryAttributes = univ.ObjectIdentifier('2.5.29.9') | |
700 | |
701 class SubjectDirectoryAttributes(univ.SequenceOf): | |
702 componentType = Attribute() | |
703 subtypeSpec = univ.SequenceOf.subtypeSpec + constraint.ValueSizeConstraint(1
, MAX) | |
704 | |
705 class EDIPartyName(univ.Sequence): | |
706 componentType = namedtype.NamedTypes( | |
707 namedtype.OptionalNamedType('nameAssigner', DirectoryString().subtype(im
plicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatSimple, 0))), | |
708 namedtype.NamedType('partyName', DirectoryString().subtype(implicitTag=t
ag.Tag(tag.tagClassContext, tag.tagFormatSimple, 1))) | |
709 ) | |
710 | |
711 class AnotherName(univ.Sequence): | |
712 componentType = namedtype.NamedTypes( | |
713 namedtype.NamedType('type-id', univ.ObjectIdentifier()), | |
714 namedtype.NamedType('value', univ.Any().subtype(explicitTag=tag.Tag(tag.
tagClassContext, tag.tagFormatSimple, 0))) | |
715 ) | |
716 | |
717 class GeneralName(univ.Choice): | |
718 componentType = namedtype.NamedTypes( | |
719 namedtype.NamedType('otherName', AnotherName().subtype(implicitTag=tag.T
ag(tag.tagClassContext, tag.tagFormatSimple, 0))), | |
720 namedtype.NamedType('rfc822Name', char.IA5String().subtype(implicitTag=t
ag.Tag(tag.tagClassContext, tag.tagFormatSimple, 1))), | |
721 namedtype.NamedType('dNSName', char.IA5String().subtype(implicitTag=tag.
Tag(tag.tagClassContext, tag.tagFormatSimple, 2))), | |
722 namedtype.NamedType('x400Address', ORAddress().subtype(implicitTag=tag.T
ag(tag.tagClassContext, tag.tagFormatSimple, 3))), | |
723 namedtype.NamedType('directoryName', Name().subtype(implicitTag=tag.Tag(
tag.tagClassContext, tag.tagFormatSimple, 4))), | |
724 namedtype.NamedType('ediPartyName', EDIPartyName().subtype(implicitTag=t
ag.Tag(tag.tagClassContext, tag.tagFormatSimple, 5))), | |
725 namedtype.NamedType('uniformResourceIdentifier', char.IA5String().subtyp
e(implicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatSimple, 6))), | |
726 namedtype.NamedType('iPAddress', univ.OctetString().subtype(implicitTag=
tag.Tag(tag.tagClassContext, tag.tagFormatSimple, 7))), | |
727 namedtype.NamedType('registeredID', univ.ObjectIdentifier().subtype(impl
icitTag=tag.Tag(tag.tagClassContext, tag.tagFormatSimple, 8))) | |
728 ) | |
729 | |
730 class GeneralNames(univ.SequenceOf): | |
731 componentType = GeneralName() | |
732 subtypeSpec = univ.SequenceOf.subtypeSpec + constraint.ValueSizeConstraint(1
, MAX) | |
733 | |
734 class AccessDescription(univ.Sequence): | |
735 componentType = namedtype.NamedTypes( | |
736 namedtype.NamedType('accessMethod', univ.ObjectIdentifier()), | |
737 namedtype.NamedType('accessLocation', GeneralName()) | |
738 ) | |
739 | |
740 class AuthorityInfoAccessSyntax(univ.SequenceOf): | |
741 componentType = AccessDescription() | |
742 subtypeSpec = univ.SequenceOf.subtypeSpec + constraint.ValueSizeConstraint(1
, MAX) | |
743 | |
744 id_ce_deltaCRLIndicator = univ.ObjectIdentifier('2.5.29.27') | |
745 | |
746 class DistributionPointName(univ.Choice): | |
747 componentType = namedtype.NamedTypes( | |
748 namedtype.NamedType('fullName', GeneralNames().subtype(implicitTag=tag.T
ag(tag.tagClassContext, tag.tagFormatConstructed, 0))), | |
749 namedtype.NamedType('nameRelativeToCRLIssuer', RelativeDistinguishedName
().subtype(implicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatConstructed, 1)
)) | |
750 ) | |
751 | |
752 class DistributionPoint(univ.Sequence): | |
753 componentType = namedtype.NamedTypes( | |
754 namedtype.OptionalNamedType('distributionPoint', DistributionPointName()
.subtype(implicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatConstructed, 0)))
, | |
755 namedtype.OptionalNamedType('reasons', ReasonFlags().subtype(implicitTag
=tag.Tag(tag.tagClassContext, tag.tagFormatSimple, 1))), | |
756 namedtype.OptionalNamedType('cRLIssuer', GeneralNames().subtype(implicit
Tag=tag.Tag(tag.tagClassContext, tag.tagFormatConstructed, 2))) | |
757 ) | |
758 class BaseDistance(univ.Integer): | |
759 subtypeSpec = univ.Integer.subtypeSpec + constraint.ValueRangeConstraint(0,
MAX) | |
760 | |
761 id_ce_cRLDistributionPoints = univ.ObjectIdentifier('2.5.29.31') | |
762 | |
763 class CRLDistPointsSyntax(univ.SequenceOf): | |
764 componentType = DistributionPoint | |
765 subtypeSpec = univ.SequenceOf.subtypeSpec + constraint.ValueSizeConstraint(1
, MAX) | |
766 id_ce_issuingDistributionPoint = univ.ObjectIdentifier('2.5.29.28') | |
767 | |
768 class IssuingDistributionPoint(univ.Sequence): | |
769 componentType = namedtype.NamedTypes( | |
770 namedtype.OptionalNamedType('distributionPoint', DistributionPointName()
.subtype(implicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatConstructed, 0)))
, | |
771 namedtype.NamedType('onlyContainsUserCerts', univ.Boolean(False).subtype
(implicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatSimple, 1))), | |
772 namedtype.NamedType('onlyContainsCACerts', univ.Boolean(False).subtype(i
mplicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatSimple, 2))), | |
773 namedtype.OptionalNamedType('onlySomeReasons', ReasonFlags().subtype(imp
licitTag=tag.Tag(tag.tagClassContext, tag.tagFormatSimple, 3))), | |
774 namedtype.NamedType('indirectCRL', univ.Boolean(False).subtype(implicitT
ag=tag.Tag(tag.tagClassContext, tag.tagFormatSimple, 4))) | |
775 ) | |
776 | |
777 class GeneralSubtree(univ.Sequence): | |
778 componentType = namedtype.NamedTypes( | |
779 namedtype.NamedType('base', GeneralName()), | |
780 namedtype.NamedType('minimum', BaseDistance(0).subtype(implicitTag=tag.T
ag(tag.tagClassContext, tag.tagFormatConstructed, 0))), | |
781 namedtype.OptionalNamedType('maximum', BaseDistance().subtype(implicitTa
g=tag.Tag(tag.tagClassContext, tag.tagFormatConstructed, 1))) | |
782 ) | |
783 | |
784 class GeneralSubtrees(univ.SequenceOf): | |
785 componentType = GeneralSubtree() | |
786 subtypeSpec = univ.SequenceOf.subtypeSpec + constraint.ValueSizeConstraint(1
, MAX) | |
787 | |
788 id_ce_nameConstraints = univ.ObjectIdentifier('2.5.29.30') | |
789 | |
790 class NameConstraints(univ.Sequence): | |
791 componentType = namedtype.NamedTypes( | |
792 namedtype.OptionalNamedType('permittedSubtrees', GeneralSubtrees().subty
pe(implicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatConstructed, 0))), | |
793 namedtype.OptionalNamedType('excludedSubtrees', GeneralSubtrees().subtyp
e(implicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatConstructed, 0))) | |
794 ) | |
795 | |
796 | |
797 class DisplayText(univ.Choice): | |
798 componentType = namedtype.NamedTypes( | |
799 namedtype.NamedType('visibleString', char.VisibleString().subtype(subtyp
eSpec=constraint.ValueSizeConstraint(1, 200))), | |
800 namedtype.NamedType('bmpString', char.BMPString().subtype(subtypeSpec=co
nstraint.ValueSizeConstraint(1, 200))), | |
801 namedtype.NamedType('utf8String', char.UTF8String().subtype(subtypeSpec=
constraint.ValueSizeConstraint(1, 200))) | |
802 ) | |
803 | |
804 class NoticeReference(univ.Sequence): | |
805 componentType = namedtype.NamedTypes( | |
806 namedtype.NamedType('organization', DisplayText()), | |
807 namedtype.NamedType('noticeNumbers', univ.SequenceOf(componentType=univ.
Integer())) | |
808 ) | |
809 | |
810 class UserNotice(univ.Sequence): | |
811 componentType = namedtype.NamedTypes( | |
812 namedtype.OptionalNamedType('noticeRef', NoticeReference()), | |
813 namedtype.OptionalNamedType('explicitText', DisplayText()) | |
814 ) | |
815 | |
816 class CPSuri(char.IA5String): pass | |
817 | |
818 class PolicyQualifierId(univ.ObjectIdentifier): | |
819 subtypeSpec = univ.ObjectIdentifier.subtypeSpec + constraint.SingleValueCons
traint(id_qt_cps, id_qt_unotice) | |
820 | |
821 class CertPolicyId(univ.ObjectIdentifier): pass | |
822 | |
823 class PolicyQualifierInfo(univ.Sequence): | |
824 componentType = namedtype.NamedTypes( | |
825 namedtype.NamedType('policyQualifierId', PolicyQualifierId()), | |
826 namedtype.NamedType('qualifier', univ.Any()) | |
827 ) | |
828 | |
829 id_ce_certificatePolicies = univ.ObjectIdentifier('2.5.29.32') | |
830 | |
831 class PolicyInformation(univ.Sequence): | |
832 componentType = namedtype.NamedTypes( | |
833 namedtype.NamedType('policyIdentifier', CertPolicyId()), | |
834 namedtype.OptionalNamedType('policyQualifiers', univ.SequenceOf(componen
tType=PolicyQualifierInfo()).subtype(subtypeSpec=constraint.ValueSizeConstraint(
1, MAX))) | |
835 ) | |
836 | |
837 class CertificatePolicies(univ.SequenceOf): | |
838 componentType = PolicyInformation() | |
839 subtypeSpec = univ.SequenceOf.subtypeSpec + constraint.ValueSizeConstraint(1
, MAX) | |
840 | |
841 id_ce_policyMappings = univ.ObjectIdentifier('2.5.29.33') | |
842 | |
843 class PolicyMapping(univ.Sequence): | |
844 componentType = namedtype.NamedTypes( | |
845 namedtype.NamedType('issuerDomainPolicy', CertPolicyId()), | |
846 namedtype.NamedType('subjectDomainPolicy', CertPolicyId()) | |
847 ) | |
848 | |
849 class PolicyMappings(univ.SequenceOf): | |
850 componentType = PolicyMapping() | |
851 subtypeSpec = univ.SequenceOf.subtypeSpec + constraint.ValueSizeConstraint(1
, MAX) | |
852 | |
853 id_ce_privateKeyUsagePeriod = univ.ObjectIdentifier('2.5.29.16') | |
854 | |
855 class PrivateKeyUsagePeriod(univ.Sequence): | |
856 componentType = namedtype.NamedTypes( | |
857 namedtype.OptionalNamedType('notBefore', useful.GeneralizedTime().subtyp
e(implicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatSimple, 0))), | |
858 namedtype.OptionalNamedType('notAfter', useful.GeneralizedTime().subtype
(implicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatSimple, 1))) | |
859 ) | |
860 | |
861 id_ce_keyUsage = univ.ObjectIdentifier('2.5.29.15') | |
862 | |
863 class KeyUsage(univ.BitString): | |
864 namedValues = namedval.NamedValues( | |
865 ('digitalSignature', 0), | |
866 ('nonRepudiation', 1), | |
867 ('keyEncipherment', 2), | |
868 ('dataEncipherment', 3), | |
869 ('keyAgreement', 4), | |
870 ('keyCertSign', 5), | |
871 ('cRLSign', 6), | |
872 ('encipherOnly', 7), | |
873 ('decipherOnly', 8) | |
874 ) | |
875 | |
876 id_ce = univ.ObjectIdentifier('2.5.29') | |
877 | |
878 id_ce_authorityKeyIdentifier = univ.ObjectIdentifier('2.5.29.35') | |
879 | |
880 class KeyIdentifier(univ.OctetString): pass | |
881 | |
882 id_ce_subjectKeyIdentifier = univ.ObjectIdentifier('2.5.29.14') | |
883 | |
884 class SubjectKeyIdentifier(KeyIdentifier): pass | |
885 | |
886 class AuthorityKeyIdentifier(univ.Sequence): | |
887 componentType = namedtype.NamedTypes( | |
888 namedtype.OptionalNamedType('keyIdentifier', KeyIdentifier().subtype(imp
licitTag=tag.Tag(tag.tagClassContext, tag.tagFormatSimple, 0))), | |
889 namedtype.OptionalNamedType('authorityCertIssuer', GeneralNames().subtyp
e(implicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatSimple, 1))), | |
890 namedtype.OptionalNamedType('authorityCertSerialNumber', CertificateSeri
alNumber().subtype(implicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatSimple,
2))) | |
891 ) | |
892 | |
893 id_ce_certificateIssuer = univ.ObjectIdentifier('2.5.29.29') | |
894 | |
895 class CertificateIssuer(GeneralNames): pass | |
896 | |
897 id_ce_subjectAltName = univ.ObjectIdentifier('2.5.29.17') | |
898 | |
899 class SubjectAltName(GeneralNames): pass | |
900 | |
901 id_ce_issuerAltName = univ.ObjectIdentifier('2.5.29.18') | |
902 | |
903 class IssuerAltName(GeneralNames): pass | |
OLD | NEW |