Extract Certificate Transparency SCTs from stapled OCSP responses

third_party/tlslite/tlslite/constants.py

 """Constants used in various places."""
 
 class CertificateType:
     x509 = 0
     openpgp = 1
     cryptoID = 2
 
 class ClientCertificateType:
     rsa_sign = 1
     dss_sign = 2
     rsa_fixed_dh = 3
     dss_fixed_dh = 4
 
 class HandshakeType:
     hello_request = 0
     client_hello = 1
     server_hello = 2
     certificate = 11
     server_key_exchange = 12
     certificate_request = 13
     server_hello_done = 14
     certificate_verify = 15
     client_key_exchange = 16
     finished = 20
+    certificate_status = 22
     encrypted_extensions = 203
 
 class ContentType:
     change_cipher_spec = 20
     alert = 21
     handshake = 22
     application_data = 23
     all = (20,21,22,23)
 
+class CertificateStatusType:
+    ocsp = 1
+
 class ExtensionType:
+    status_request = 5  # OCSP stapling
     signed_cert_timestamps = 18  # signed_certificate_timestamp in RFC 6962
     channel_id = 30031
 
 class AlertLevel:
     warning = 1
     fatal = 2
 
 class AlertDescription:
     """
     @cvar bad_record_mac: A TLS record failed to decrypt properly.
@@ skipping 183 matching lines @@
         badA: "bad A",\
         badIdentifier: "bad identifier",\
         badSharedKey: "bad sharedkey",\
         badPremasterPadding: "bad premaster padding",\
         shortPremasterSecret: "short premaster secret",\
         badVerifyMessage: "bad verify message",\
         badFinished: "bad finished message",\
         badMAC: "bad MAC",\
         badPadding: "bad padding"
         }