rfc5280.py 48 KB

12345678910111213141516171819202122232425262728293031323334353637383940414243444546474849505152535455565758596061626364656667686970717273747576777879808182838485868788899091929394959697989910010110210310410510610710810911011111211311411511611711811912012112212312412512612712812913013113213313413513613713813914014114214314414514614714814915015115215315415515615715815916016116216316416516616716816917017117217317417517617717817918018118218318418518618718818919019119219319419519619719819920020120220320420520620720820921021121221321421521621721821922022122222322422522622722822923023123223323423523623723823924024124224324424524624724824925025125225325425525625725825926026126226326426526626726826927027127227327427527627727827928028128228328428528628728828929029129229329429529629729829930030130230330430530630730830931031131231331431531631731831932032132232332432532632732832933033133233333433533633733833934034134234334434534634734834935035135235335435535635735835936036136236336436536636736836937037137237337437537637737837938038138238338438538638738838939039139239339439539639739839940040140240340440540640740840941041141241341441541641741841942042142242342442542642742842943043143243343443543643743843944044144244344444544644744844945045145245345445545645745845946046146246346446546646746846947047147247347447547647747847948048148248348448548648748848949049149249349449549649749849950050150250350450550650750850951051151251351451551651751851952052152252352452552652752852953053153253353453553653753853954054154254354454554654754854955055155255355455555655755855956056156256356456556656756856957057157257357457557657757857958058158258358458558658758858959059159259359459559659759859960060160260360460560660760860961061161261361461561661761861962062162262362462562662762862963063163263363463563663763863964064164264364464564664764864965065165265365465565665765865966066166266366466566666766866967067167267367467567667767867968068168268368468568668768868969069169269369469569669769869970070170270370470570670770870971071171271371471571671771871972072172272372472572672772872973073173273373473573673773873974074174274374474574674774874975075175275375475575675775875976076176276376476576676776876977077177277377477577677777877978078178278378478578678778878979079179279379479579679779879980080180280380480580680780880981081181281381481581681781881982082182282382482582682782882983083183283383483583683783883984084184284384484584684784884985085185285385485585685785885986086186286386486586686786886987087187287387487587687787887988088188288388488588688788888989089189289389489589689789889990090190290390490590690790890991091191291391491591691791891992092192292392492592692792892993093193293393493593693793893994094194294394494594694794894995095195295395495595695795895996096196296396496596696796896997097197297397497597697797897998098198298398498598698798898999099199299399499599699799899910001001100210031004100510061007100810091010101110121013101410151016101710181019102010211022102310241025102610271028102910301031103210331034103510361037103810391040104110421043104410451046104710481049105010511052105310541055105610571058105910601061106210631064106510661067106810691070107110721073107410751076107710781079108010811082108310841085108610871088108910901091109210931094109510961097109810991100110111021103110411051106110711081109111011111112111311141115111611171118111911201121112211231124112511261127112811291130113111321133113411351136113711381139114011411142114311441145114611471148114911501151115211531154115511561157115811591160116111621163116411651166116711681169117011711172117311741175117611771178117911801181118211831184118511861187118811891190119111921193119411951196119711981199120012011202120312041205120612071208120912101211121212131214121512161217121812191220122112221223122412251226122712281229123012311232123312341235123612371238123912401241124212431244124512461247124812491250125112521253125412551256125712581259126012611262126312641265126612671268126912701271127212731274127512761277127812791280128112821283128412851286128712881289129012911292129312941295129612971298129913001301130213031304130513061307130813091310131113121313131413151316131713181319132013211322132313241325132613271328132913301331133213331334133513361337133813391340134113421343134413451346134713481349135013511352135313541355135613571358135913601361136213631364136513661367136813691370137113721373137413751376137713781379138013811382138313841385138613871388138913901391139213931394139513961397139813991400140114021403140414051406140714081409141014111412141314141415141614171418141914201421142214231424142514261427142814291430143114321433143414351436143714381439144014411442144314441445144614471448144914501451145214531454145514561457145814591460146114621463146414651466146714681469147014711472147314741475147614771478147914801481148214831484148514861487148814891490149114921493149414951496149714981499150015011502150315041505150615071508150915101511151215131514151515161517151815191520152115221523152415251526152715281529153015311532153315341535153615371538153915401541154215431544154515461547154815491550155115521553155415551556155715581559156015611562156315641565156615671568156915701571157215731574157515761577157815791580158115821583158415851586158715881589159015911592159315941595159615971598
  1. # coding: utf-8
  2. #
  3. # This file is part of pyasn1-modules software.
  4. #
  5. # Created by Stanisław Pitucha with asn1ate tool.
  6. # Copyright (c) 2005-2017, Ilya Etingof <etingof@gmail.com>
  7. # License: http://pyasn1.sf.net/license.html
  8. #
  9. # Internet X.509 Public Key Infrastructure Certificate and Certificate
  10. # Revocation List (CRL) Profile
  11. #
  12. # ASN.1 source from:
  13. # http://www.ietf.org/rfc/rfc5280.txt
  14. #
  15. from pyasn1.type import univ
  16. from pyasn1.type import char
  17. from pyasn1.type import namedtype
  18. from pyasn1.type import namedval
  19. from pyasn1.type import tag
  20. from pyasn1.type import constraint
  21. from pyasn1.type import useful
  22. MAX = 64
  23. def _buildOid(*components):
  24. output = []
  25. for x in tuple(components):
  26. if isinstance(x, univ.ObjectIdentifier):
  27. output.extend(list(x))
  28. else:
  29. output.append(int(x))
  30. return univ.ObjectIdentifier(output)
  31. ub_e163_4_sub_address_length = univ.Integer(40)
  32. ub_e163_4_number_length = univ.Integer(15)
  33. unformatted_postal_address = univ.Integer(16)
  34. class TerminalType(univ.Integer):
  35. pass
  36. TerminalType.namedValues = namedval.NamedValues(
  37. ('telex', 3),
  38. ('teletex', 4),
  39. ('g3-facsimile', 5),
  40. ('g4-facsimile', 6),
  41. ('ia5-terminal', 7),
  42. ('videotex', 8)
  43. )
  44. class Extension(univ.Sequence):
  45. pass
  46. Extension.componentType = namedtype.NamedTypes(
  47. namedtype.NamedType('extnID', univ.ObjectIdentifier()),
  48. namedtype.DefaultedNamedType('critical', univ.Boolean().subtype(value=0)),
  49. namedtype.NamedType('extnValue', univ.OctetString())
  50. )
  51. class Extensions(univ.SequenceOf):
  52. pass
  53. Extensions.componentType = Extension()
  54. Extensions.subtypeSpec = constraint.ValueSizeConstraint(1, MAX)
  55. physical_delivery_personal_name = univ.Integer(13)
  56. ub_unformatted_address_length = univ.Integer(180)
  57. ub_pds_parameter_length = univ.Integer(30)
  58. ub_pds_physical_address_lines = univ.Integer(6)
  59. class UnformattedPostalAddress(univ.Set):
  60. pass
  61. UnformattedPostalAddress.componentType = namedtype.NamedTypes(
  62. namedtype.OptionalNamedType('printable-address', univ.SequenceOf(componentType=char.PrintableString().subtype(
  63. subtypeSpec=constraint.ValueSizeConstraint(1, ub_pds_parameter_length)))),
  64. namedtype.OptionalNamedType('teletex-string', char.TeletexString().subtype(
  65. subtypeSpec=constraint.ValueSizeConstraint(1, ub_unformatted_address_length)))
  66. )
  67. ub_organization_name = univ.Integer(64)
  68. class X520OrganizationName(univ.Choice):
  69. pass
  70. X520OrganizationName.componentType = namedtype.NamedTypes(
  71. namedtype.NamedType('teletexString', char.TeletexString().subtype(
  72. subtypeSpec=constraint.ValueSizeConstraint(1, ub_organization_name))),
  73. namedtype.NamedType('printableString', char.PrintableString().subtype(
  74. subtypeSpec=constraint.ValueSizeConstraint(1, ub_organization_name))),
  75. namedtype.NamedType('universalString', char.UniversalString().subtype(
  76. subtypeSpec=constraint.ValueSizeConstraint(1, ub_organization_name))),
  77. namedtype.NamedType('utf8String',
  78. char.UTF8String().subtype(subtypeSpec=constraint.ValueSizeConstraint(1, ub_organization_name))),
  79. namedtype.NamedType('bmpString',
  80. char.BMPString().subtype(subtypeSpec=constraint.ValueSizeConstraint(1, ub_organization_name)))
  81. )
  82. ub_x121_address_length = univ.Integer(16)
  83. pds_name = univ.Integer(7)
  84. id_pkix = _buildOid(1, 3, 6, 1, 5, 5, 7)
  85. id_kp = _buildOid(id_pkix, 3)
  86. ub_postal_code_length = univ.Integer(16)
  87. class PostalCode(univ.Choice):
  88. pass
  89. PostalCode.componentType = namedtype.NamedTypes(
  90. namedtype.NamedType('numeric-code', char.NumericString().subtype(
  91. subtypeSpec=constraint.ValueSizeConstraint(1, ub_postal_code_length))),
  92. namedtype.NamedType('printable-code', char.PrintableString().subtype(
  93. subtypeSpec=constraint.ValueSizeConstraint(1, ub_postal_code_length)))
  94. )
  95. ub_generation_qualifier_length = univ.Integer(3)
  96. unique_postal_name = univ.Integer(20)
  97. class DomainComponent(char.IA5String):
  98. pass
  99. ub_domain_defined_attribute_value_length = univ.Integer(128)
  100. ub_match = univ.Integer(128)
  101. id_at = _buildOid(2, 5, 4)
  102. class AttributeType(univ.ObjectIdentifier):
  103. pass
  104. id_at_organizationalUnitName = _buildOid(id_at, 11)
  105. terminal_type = univ.Integer(23)
  106. class PDSParameter(univ.Set):
  107. pass
  108. PDSParameter.componentType = namedtype.NamedTypes(
  109. namedtype.OptionalNamedType('printable-string', char.PrintableString().subtype(
  110. subtypeSpec=constraint.ValueSizeConstraint(1, ub_pds_parameter_length))),
  111. namedtype.OptionalNamedType('teletex-string', char.TeletexString().subtype(
  112. subtypeSpec=constraint.ValueSizeConstraint(1, ub_pds_parameter_length)))
  113. )
  114. class PhysicalDeliveryPersonalName(PDSParameter):
  115. pass
  116. ub_surname_length = univ.Integer(40)
  117. id_ad = _buildOid(id_pkix, 48)
  118. ub_domain_defined_attribute_type_length = univ.Integer(8)
  119. class TeletexDomainDefinedAttribute(univ.Sequence):
  120. pass
  121. TeletexDomainDefinedAttribute.componentType = namedtype.NamedTypes(
  122. namedtype.NamedType('type', char.TeletexString().subtype(
  123. subtypeSpec=constraint.ValueSizeConstraint(1, ub_domain_defined_attribute_type_length))),
  124. namedtype.NamedType('value', char.TeletexString().subtype(
  125. subtypeSpec=constraint.ValueSizeConstraint(1, ub_domain_defined_attribute_value_length)))
  126. )
  127. ub_domain_defined_attributes = univ.Integer(4)
  128. class TeletexDomainDefinedAttributes(univ.SequenceOf):
  129. pass
  130. TeletexDomainDefinedAttributes.componentType = TeletexDomainDefinedAttribute()
  131. TeletexDomainDefinedAttributes.subtypeSpec = constraint.ValueSizeConstraint(1, ub_domain_defined_attributes)
  132. extended_network_address = univ.Integer(22)
  133. ub_locality_name = univ.Integer(128)
  134. class X520LocalityName(univ.Choice):
  135. pass
  136. X520LocalityName.componentType = namedtype.NamedTypes(
  137. namedtype.NamedType('teletexString',
  138. char.TeletexString().subtype(subtypeSpec=constraint.ValueSizeConstraint(1, ub_locality_name))),
  139. namedtype.NamedType('printableString', char.PrintableString().subtype(
  140. subtypeSpec=constraint.ValueSizeConstraint(1, ub_locality_name))),
  141. namedtype.NamedType('universalString', char.UniversalString().subtype(
  142. subtypeSpec=constraint.ValueSizeConstraint(1, ub_locality_name))),
  143. namedtype.NamedType('utf8String',
  144. char.UTF8String().subtype(subtypeSpec=constraint.ValueSizeConstraint(1, ub_locality_name))),
  145. namedtype.NamedType('bmpString',
  146. char.BMPString().subtype(subtypeSpec=constraint.ValueSizeConstraint(1, ub_locality_name)))
  147. )
  148. teletex_organization_name = univ.Integer(3)
  149. ub_given_name_length = univ.Integer(16)
  150. ub_initials_length = univ.Integer(5)
  151. class PersonalName(univ.Set):
  152. pass
  153. PersonalName.componentType = namedtype.NamedTypes(
  154. namedtype.NamedType('surname', char.PrintableString().subtype(
  155. subtypeSpec=constraint.ValueSizeConstraint(1, ub_surname_length)).subtype(
  156. implicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatSimple, 0))),
  157. namedtype.OptionalNamedType('given-name', char.PrintableString().subtype(
  158. subtypeSpec=constraint.ValueSizeConstraint(1, ub_given_name_length)).subtype(
  159. implicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatSimple, 1))),
  160. namedtype.OptionalNamedType('initials', char.PrintableString().subtype(
  161. subtypeSpec=constraint.ValueSizeConstraint(1, ub_initials_length)).subtype(
  162. implicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatSimple, 2))),
  163. namedtype.OptionalNamedType('generation-qualifier', char.PrintableString().subtype(
  164. subtypeSpec=constraint.ValueSizeConstraint(1, ub_generation_qualifier_length)).subtype(
  165. implicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatSimple, 3)))
  166. )
  167. ub_organizational_unit_name_length = univ.Integer(32)
  168. class OrganizationalUnitName(char.PrintableString):
  169. pass
  170. OrganizationalUnitName.subtypeSpec = constraint.ValueSizeConstraint(1, ub_organizational_unit_name_length)
  171. id_at_generationQualifier = _buildOid(id_at, 44)
  172. class Version(univ.Integer):
  173. pass
  174. Version.namedValues = namedval.NamedValues(
  175. ('v1', 0),
  176. ('v2', 1),
  177. ('v3', 2)
  178. )
  179. class CertificateSerialNumber(univ.Integer):
  180. pass
  181. class AlgorithmIdentifier(univ.Sequence):
  182. pass
  183. AlgorithmIdentifier.componentType = namedtype.NamedTypes(
  184. namedtype.NamedType('algorithm', univ.ObjectIdentifier()),
  185. namedtype.OptionalNamedType('parameters', univ.Any())
  186. )
  187. class Time(univ.Choice):
  188. pass
  189. Time.componentType = namedtype.NamedTypes(
  190. namedtype.NamedType('utcTime', useful.UTCTime()),
  191. namedtype.NamedType('generalTime', useful.GeneralizedTime())
  192. )
  193. class AttributeValue(univ.Any):
  194. pass
  195. class AttributeTypeAndValue(univ.Sequence):
  196. pass
  197. AttributeTypeAndValue.componentType = namedtype.NamedTypes(
  198. namedtype.NamedType('type', AttributeType()),
  199. namedtype.NamedType('value', AttributeValue())
  200. )
  201. class RelativeDistinguishedName(univ.SetOf):
  202. pass
  203. RelativeDistinguishedName.componentType = AttributeTypeAndValue()
  204. RelativeDistinguishedName.subtypeSpec = constraint.ValueSizeConstraint(1, MAX)
  205. class RDNSequence(univ.SequenceOf):
  206. pass
  207. RDNSequence.componentType = RelativeDistinguishedName()
  208. class Name(univ.Choice):
  209. pass
  210. Name.componentType = namedtype.NamedTypes(
  211. namedtype.NamedType('rdnSequence', RDNSequence())
  212. )
  213. class TBSCertList(univ.Sequence):
  214. pass
  215. TBSCertList.componentType = namedtype.NamedTypes(
  216. namedtype.OptionalNamedType('version', Version()),
  217. namedtype.NamedType('signature', AlgorithmIdentifier()),
  218. namedtype.NamedType('issuer', Name()),
  219. namedtype.NamedType('thisUpdate', Time()),
  220. namedtype.OptionalNamedType('nextUpdate', Time()),
  221. namedtype.OptionalNamedType(
  222. 'revokedCertificates', univ.SequenceOf(
  223. componentType=univ.Sequence(
  224. componentType=namedtype.NamedTypes(
  225. namedtype.NamedType('userCertificate', CertificateSerialNumber()),
  226. namedtype.NamedType('revocationDate', Time()),
  227. namedtype.OptionalNamedType('crlEntryExtensions', Extensions())
  228. )
  229. )
  230. )
  231. ),
  232. namedtype.OptionalNamedType(
  233. 'crlExtensions', Extensions().subtype(explicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatSimple, 0)))
  234. )
  235. class CertificateList(univ.Sequence):
  236. pass
  237. CertificateList.componentType = namedtype.NamedTypes(
  238. namedtype.NamedType('tbsCertList', TBSCertList()),
  239. namedtype.NamedType('signatureAlgorithm', AlgorithmIdentifier()),
  240. namedtype.NamedType('signature', univ.BitString())
  241. )
  242. class PhysicalDeliveryOfficeName(PDSParameter):
  243. pass
  244. ub_extension_attributes = univ.Integer(256)
  245. class ExtensionAttribute(univ.Sequence):
  246. pass
  247. ExtensionAttribute.componentType = namedtype.NamedTypes(
  248. namedtype.NamedType('extension-attribute-type', univ.Integer().subtype(
  249. subtypeSpec=constraint.ValueRangeConstraint(0, ub_extension_attributes)).subtype(
  250. implicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatSimple, 0))),
  251. namedtype.NamedType('extension-attribute-value',
  252. univ.Any().subtype(explicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatSimple, 1)))
  253. )
  254. id_qt = _buildOid(id_pkix, 2)
  255. id_qt_cps = _buildOid(id_qt, 1)
  256. id_at_stateOrProvinceName = _buildOid(id_at, 8)
  257. id_at_title = _buildOid(id_at, 12)
  258. id_at_serialNumber = _buildOid(id_at, 5)
  259. class X520dnQualifier(char.PrintableString):
  260. pass
  261. class PosteRestanteAddress(PDSParameter):
  262. pass
  263. poste_restante_address = univ.Integer(19)
  264. class UniqueIdentifier(univ.BitString):
  265. pass
  266. class Validity(univ.Sequence):
  267. pass
  268. Validity.componentType = namedtype.NamedTypes(
  269. namedtype.NamedType('notBefore', Time()),
  270. namedtype.NamedType('notAfter', Time())
  271. )
  272. class SubjectPublicKeyInfo(univ.Sequence):
  273. pass
  274. SubjectPublicKeyInfo.componentType = namedtype.NamedTypes(
  275. namedtype.NamedType('algorithm', AlgorithmIdentifier()),
  276. namedtype.NamedType('subjectPublicKey', univ.BitString())
  277. )
  278. class TBSCertificate(univ.Sequence):
  279. pass
  280. TBSCertificate.componentType = namedtype.NamedTypes(
  281. namedtype.DefaultedNamedType('version',
  282. Version().subtype(explicitTag=tag.Tag(tag.tagClassContext,
  283. tag.tagFormatSimple, 0)).subtype(value="v1")),
  284. namedtype.NamedType('serialNumber', CertificateSerialNumber()),
  285. namedtype.NamedType('signature', AlgorithmIdentifier()),
  286. namedtype.NamedType('issuer', Name()),
  287. namedtype.NamedType('validity', Validity()),
  288. namedtype.NamedType('subject', Name()),
  289. namedtype.NamedType('subjectPublicKeyInfo', SubjectPublicKeyInfo()),
  290. namedtype.OptionalNamedType('issuerUniqueID', UniqueIdentifier().subtype(
  291. implicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatSimple, 1))),
  292. namedtype.OptionalNamedType('subjectUniqueID', UniqueIdentifier().subtype(
  293. implicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatSimple, 2))),
  294. namedtype.OptionalNamedType('extensions',
  295. Extensions().subtype(explicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatSimple, 3)))
  296. )
  297. physical_delivery_office_name = univ.Integer(10)
  298. ub_name = univ.Integer(32768)
  299. class X520name(univ.Choice):
  300. pass
  301. X520name.componentType = namedtype.NamedTypes(
  302. namedtype.NamedType('teletexString',
  303. char.TeletexString().subtype(subtypeSpec=constraint.ValueSizeConstraint(1, ub_name))),
  304. namedtype.NamedType('printableString',
  305. char.PrintableString().subtype(subtypeSpec=constraint.ValueSizeConstraint(1, ub_name))),
  306. namedtype.NamedType('universalString',
  307. char.UniversalString().subtype(subtypeSpec=constraint.ValueSizeConstraint(1, ub_name))),
  308. namedtype.NamedType('utf8String',
  309. char.UTF8String().subtype(subtypeSpec=constraint.ValueSizeConstraint(1, ub_name))),
  310. namedtype.NamedType('bmpString', char.BMPString().subtype(subtypeSpec=constraint.ValueSizeConstraint(1, ub_name)))
  311. )
  312. id_at_dnQualifier = _buildOid(id_at, 46)
  313. ub_serial_number = univ.Integer(64)
  314. ub_pseudonym = univ.Integer(128)
  315. pkcs_9 = _buildOid(1, 2, 840, 113549, 1, 9)
  316. class X121Address(char.NumericString):
  317. pass
  318. X121Address.subtypeSpec = constraint.ValueSizeConstraint(1, ub_x121_address_length)
  319. class NetworkAddress(X121Address):
  320. pass
  321. ub_integer_options = univ.Integer(256)
  322. id_at_commonName = _buildOid(id_at, 3)
  323. ub_organization_name_length = univ.Integer(64)
  324. id_ad_ocsp = _buildOid(id_ad, 1)
  325. ub_country_name_numeric_length = univ.Integer(3)
  326. ub_country_name_alpha_length = univ.Integer(2)
  327. class PhysicalDeliveryCountryName(univ.Choice):
  328. pass
  329. PhysicalDeliveryCountryName.componentType = namedtype.NamedTypes(
  330. namedtype.NamedType('x121-dcc-code', char.NumericString().subtype(
  331. subtypeSpec=constraint.ValueSizeConstraint(ub_country_name_numeric_length, ub_country_name_numeric_length))),
  332. namedtype.NamedType('iso-3166-alpha2-code', char.PrintableString().subtype(
  333. subtypeSpec=constraint.ValueSizeConstraint(ub_country_name_alpha_length, ub_country_name_alpha_length)))
  334. )
  335. id_emailAddress = _buildOid(pkcs_9, 1)
  336. common_name = univ.Integer(1)
  337. class X520Pseudonym(univ.Choice):
  338. pass
  339. X520Pseudonym.componentType = namedtype.NamedTypes(
  340. namedtype.NamedType('teletexString',
  341. char.TeletexString().subtype(subtypeSpec=constraint.ValueSizeConstraint(1, ub_pseudonym))),
  342. namedtype.NamedType('printableString',
  343. char.PrintableString().subtype(subtypeSpec=constraint.ValueSizeConstraint(1, ub_pseudonym))),
  344. namedtype.NamedType('universalString',
  345. char.UniversalString().subtype(subtypeSpec=constraint.ValueSizeConstraint(1, ub_pseudonym))),
  346. namedtype.NamedType('utf8String',
  347. char.UTF8String().subtype(subtypeSpec=constraint.ValueSizeConstraint(1, ub_pseudonym))),
  348. namedtype.NamedType('bmpString',
  349. char.BMPString().subtype(subtypeSpec=constraint.ValueSizeConstraint(1, ub_pseudonym)))
  350. )
  351. ub_domain_name_length = univ.Integer(16)
  352. class AdministrationDomainName(univ.Choice):
  353. pass
  354. AdministrationDomainName.tagSet = univ.Choice.tagSet.tagExplicitly(
  355. tag.Tag(tag.tagClassApplication, tag.tagFormatConstructed, 2))
  356. AdministrationDomainName.componentType = namedtype.NamedTypes(
  357. namedtype.NamedType('numeric', char.NumericString().subtype(
  358. subtypeSpec=constraint.ValueSizeConstraint(0, ub_domain_name_length))),
  359. namedtype.NamedType('printable', char.PrintableString().subtype(
  360. subtypeSpec=constraint.ValueSizeConstraint(0, ub_domain_name_length)))
  361. )
  362. class PresentationAddress(univ.Sequence):
  363. pass
  364. PresentationAddress.componentType = namedtype.NamedTypes(
  365. namedtype.OptionalNamedType('pSelector', univ.OctetString().subtype(
  366. explicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatSimple, 0))),
  367. namedtype.OptionalNamedType('sSelector', univ.OctetString().subtype(
  368. explicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatSimple, 1))),
  369. namedtype.OptionalNamedType('tSelector', univ.OctetString().subtype(
  370. explicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatSimple, 2))),
  371. namedtype.NamedType('nAddresses', univ.SetOf(componentType=univ.OctetString()).subtype(
  372. explicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatSimple, 3)))
  373. )
  374. class ExtendedNetworkAddress(univ.Choice):
  375. pass
  376. ExtendedNetworkAddress.componentType = namedtype.NamedTypes(
  377. namedtype.NamedType(
  378. 'e163-4-address', univ.Sequence(
  379. componentType=namedtype.NamedTypes(
  380. namedtype.NamedType('number', char.NumericString().subtype(subtypeSpec=constraint.ValueSizeConstraint(1, ub_e163_4_number_length)).subtype(implicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatSimple, 0))),
  381. namedtype.OptionalNamedType('sub-address', char.NumericString().subtype(subtypeSpec=constraint.ValueSizeConstraint(1, ub_e163_4_sub_address_length)).subtype(implicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatSimple, 1)))
  382. )
  383. )
  384. ),
  385. namedtype.NamedType('psap-address', PresentationAddress().subtype(
  386. implicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatConstructed, 0)))
  387. )
  388. class TeletexOrganizationName(char.TeletexString):
  389. pass
  390. TeletexOrganizationName.subtypeSpec = constraint.ValueSizeConstraint(1, ub_organization_name_length)
  391. ub_terminal_id_length = univ.Integer(24)
  392. class TerminalIdentifier(char.PrintableString):
  393. pass
  394. TerminalIdentifier.subtypeSpec = constraint.ValueSizeConstraint(1, ub_terminal_id_length)
  395. id_ad_caIssuers = _buildOid(id_ad, 2)
  396. id_at_countryName = _buildOid(id_at, 6)
  397. class StreetAddress(PDSParameter):
  398. pass
  399. postal_code = univ.Integer(9)
  400. id_at_givenName = _buildOid(id_at, 42)
  401. ub_title = univ.Integer(64)
  402. class ExtensionAttributes(univ.SetOf):
  403. pass
  404. ExtensionAttributes.componentType = ExtensionAttribute()
  405. ExtensionAttributes.subtypeSpec = constraint.ValueSizeConstraint(1, ub_extension_attributes)
  406. ub_emailaddress_length = univ.Integer(255)
  407. id_ad_caRepository = _buildOid(id_ad, 5)
  408. class ExtensionORAddressComponents(PDSParameter):
  409. pass
  410. ub_organizational_unit_name = univ.Integer(64)
  411. class X520OrganizationalUnitName(univ.Choice):
  412. pass
  413. X520OrganizationalUnitName.componentType = namedtype.NamedTypes(
  414. namedtype.NamedType('teletexString', char.TeletexString().subtype(
  415. subtypeSpec=constraint.ValueSizeConstraint(1, ub_organizational_unit_name))),
  416. namedtype.NamedType('printableString', char.PrintableString().subtype(
  417. subtypeSpec=constraint.ValueSizeConstraint(1, ub_organizational_unit_name))),
  418. namedtype.NamedType('universalString', char.UniversalString().subtype(
  419. subtypeSpec=constraint.ValueSizeConstraint(1, ub_organizational_unit_name))),
  420. namedtype.NamedType('utf8String', char.UTF8String().subtype(
  421. subtypeSpec=constraint.ValueSizeConstraint(1, ub_organizational_unit_name))),
  422. namedtype.NamedType('bmpString', char.BMPString().subtype(
  423. subtypeSpec=constraint.ValueSizeConstraint(1, ub_organizational_unit_name)))
  424. )
  425. class LocalPostalAttributes(PDSParameter):
  426. pass
  427. teletex_organizational_unit_names = univ.Integer(5)
  428. class X520Title(univ.Choice):
  429. pass
  430. X520Title.componentType = namedtype.NamedTypes(
  431. namedtype.NamedType('teletexString',
  432. char.TeletexString().subtype(subtypeSpec=constraint.ValueSizeConstraint(1, ub_title))),
  433. namedtype.NamedType('printableString',
  434. char.PrintableString().subtype(subtypeSpec=constraint.ValueSizeConstraint(1, ub_title))),
  435. namedtype.NamedType('universalString',
  436. char.UniversalString().subtype(subtypeSpec=constraint.ValueSizeConstraint(1, ub_title))),
  437. namedtype.NamedType('utf8String',
  438. char.UTF8String().subtype(subtypeSpec=constraint.ValueSizeConstraint(1, ub_title))),
  439. namedtype.NamedType('bmpString', char.BMPString().subtype(subtypeSpec=constraint.ValueSizeConstraint(1, ub_title)))
  440. )
  441. id_at_localityName = _buildOid(id_at, 7)
  442. id_at_initials = _buildOid(id_at, 43)
  443. ub_state_name = univ.Integer(128)
  444. class X520StateOrProvinceName(univ.Choice):
  445. pass
  446. X520StateOrProvinceName.componentType = namedtype.NamedTypes(
  447. namedtype.NamedType('teletexString',
  448. char.TeletexString().subtype(subtypeSpec=constraint.ValueSizeConstraint(1, ub_state_name))),
  449. namedtype.NamedType('printableString',
  450. char.PrintableString().subtype(subtypeSpec=constraint.ValueSizeConstraint(1, ub_state_name))),
  451. namedtype.NamedType('universalString',
  452. char.UniversalString().subtype(subtypeSpec=constraint.ValueSizeConstraint(1, ub_state_name))),
  453. namedtype.NamedType('utf8String',
  454. char.UTF8String().subtype(subtypeSpec=constraint.ValueSizeConstraint(1, ub_state_name))),
  455. namedtype.NamedType('bmpString',
  456. char.BMPString().subtype(subtypeSpec=constraint.ValueSizeConstraint(1, ub_state_name)))
  457. )
  458. physical_delivery_organization_name = univ.Integer(14)
  459. id_at_surname = _buildOid(id_at, 4)
  460. class X520countryName(char.PrintableString):
  461. pass
  462. X520countryName.subtypeSpec = constraint.ValueSizeConstraint(2, 2)
  463. physical_delivery_office_number = univ.Integer(11)
  464. id_qt_unotice = _buildOid(id_qt, 2)
  465. class X520SerialNumber(char.PrintableString):
  466. pass
  467. X520SerialNumber.subtypeSpec = constraint.ValueSizeConstraint(1, ub_serial_number)
  468. class Attribute(univ.Sequence):
  469. pass
  470. Attribute.componentType = namedtype.NamedTypes(
  471. namedtype.NamedType('type', AttributeType()),
  472. namedtype.NamedType('values', univ.SetOf(componentType=AttributeValue()))
  473. )
  474. ub_common_name = univ.Integer(64)
  475. id_pe = _buildOid(id_pkix, 1)
  476. class ExtensionPhysicalDeliveryAddressComponents(PDSParameter):
  477. pass
  478. class EmailAddress(char.IA5String):
  479. pass
  480. EmailAddress.subtypeSpec = constraint.ValueSizeConstraint(1, ub_emailaddress_length)
  481. id_at_organizationName = _buildOid(id_at, 10)
  482. post_office_box_address = univ.Integer(18)
  483. class BuiltInDomainDefinedAttribute(univ.Sequence):
  484. pass
  485. BuiltInDomainDefinedAttribute.componentType = namedtype.NamedTypes(
  486. namedtype.NamedType('type', char.PrintableString().subtype(
  487. subtypeSpec=constraint.ValueSizeConstraint(1, ub_domain_defined_attribute_type_length))),
  488. namedtype.NamedType('value', char.PrintableString().subtype(
  489. subtypeSpec=constraint.ValueSizeConstraint(1, ub_domain_defined_attribute_value_length)))
  490. )
  491. class BuiltInDomainDefinedAttributes(univ.SequenceOf):
  492. pass
  493. BuiltInDomainDefinedAttributes.componentType = BuiltInDomainDefinedAttribute()
  494. BuiltInDomainDefinedAttributes.subtypeSpec = constraint.ValueSizeConstraint(1, ub_domain_defined_attributes)
  495. id_at_pseudonym = _buildOid(id_at, 65)
  496. id_domainComponent = _buildOid(0, 9, 2342, 19200300, 100, 1, 25)
  497. class X520CommonName(univ.Choice):
  498. pass
  499. X520CommonName.componentType = namedtype.NamedTypes(
  500. namedtype.NamedType('teletexString',
  501. char.TeletexString().subtype(subtypeSpec=constraint.ValueSizeConstraint(1, ub_common_name))),
  502. namedtype.NamedType('printableString',
  503. char.PrintableString().subtype(subtypeSpec=constraint.ValueSizeConstraint(1, ub_common_name))),
  504. namedtype.NamedType('universalString',
  505. char.UniversalString().subtype(subtypeSpec=constraint.ValueSizeConstraint(1, ub_common_name))),
  506. namedtype.NamedType('utf8String',
  507. char.UTF8String().subtype(subtypeSpec=constraint.ValueSizeConstraint(1, ub_common_name))),
  508. namedtype.NamedType('bmpString',
  509. char.BMPString().subtype(subtypeSpec=constraint.ValueSizeConstraint(1, ub_common_name)))
  510. )
  511. extension_OR_address_components = univ.Integer(12)
  512. ub_organizational_units = univ.Integer(4)
  513. teletex_personal_name = univ.Integer(4)
  514. ub_numeric_user_id_length = univ.Integer(32)
  515. ub_common_name_length = univ.Integer(64)
  516. class TeletexCommonName(char.TeletexString):
  517. pass
  518. TeletexCommonName.subtypeSpec = constraint.ValueSizeConstraint(1, ub_common_name_length)
  519. class PhysicalDeliveryOrganizationName(PDSParameter):
  520. pass
  521. extension_physical_delivery_address_components = univ.Integer(15)
  522. class NumericUserIdentifier(char.NumericString):
  523. pass
  524. NumericUserIdentifier.subtypeSpec = constraint.ValueSizeConstraint(1, ub_numeric_user_id_length)
  525. class CountryName(univ.Choice):
  526. pass
  527. CountryName.tagSet = univ.Choice.tagSet.tagExplicitly(tag.Tag(tag.tagClassApplication, tag.tagFormatConstructed, 1))
  528. CountryName.componentType = namedtype.NamedTypes(
  529. namedtype.NamedType('x121-dcc-code', char.NumericString().subtype(
  530. subtypeSpec=constraint.ValueSizeConstraint(ub_country_name_numeric_length, ub_country_name_numeric_length))),
  531. namedtype.NamedType('iso-3166-alpha2-code', char.PrintableString().subtype(
  532. subtypeSpec=constraint.ValueSizeConstraint(ub_country_name_alpha_length, ub_country_name_alpha_length)))
  533. )
  534. class OrganizationName(char.PrintableString):
  535. pass
  536. OrganizationName.subtypeSpec = constraint.ValueSizeConstraint(1, ub_organization_name_length)
  537. class OrganizationalUnitNames(univ.SequenceOf):
  538. pass
  539. OrganizationalUnitNames.componentType = OrganizationalUnitName()
  540. OrganizationalUnitNames.subtypeSpec = constraint.ValueSizeConstraint(1, ub_organizational_units)
  541. class PrivateDomainName(univ.Choice):
  542. pass
  543. PrivateDomainName.componentType = namedtype.NamedTypes(
  544. namedtype.NamedType('numeric', char.NumericString().subtype(
  545. subtypeSpec=constraint.ValueSizeConstraint(1, ub_domain_name_length))),
  546. namedtype.NamedType('printable', char.PrintableString().subtype(
  547. subtypeSpec=constraint.ValueSizeConstraint(1, ub_domain_name_length)))
  548. )
  549. class BuiltInStandardAttributes(univ.Sequence):
  550. pass
  551. BuiltInStandardAttributes.componentType = namedtype.NamedTypes(
  552. namedtype.OptionalNamedType('country-name', CountryName()),
  553. namedtype.OptionalNamedType('administration-domain-name', AdministrationDomainName()),
  554. namedtype.OptionalNamedType('network-address', NetworkAddress().subtype(
  555. implicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatSimple, 0))),
  556. namedtype.OptionalNamedType('terminal-identifier', TerminalIdentifier().subtype(
  557. implicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatSimple, 1))),
  558. namedtype.OptionalNamedType('private-domain-name', PrivateDomainName().subtype(
  559. explicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatConstructed, 2))),
  560. namedtype.OptionalNamedType('organization-name', OrganizationName().subtype(
  561. implicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatSimple, 3))),
  562. namedtype.OptionalNamedType('numeric-user-identifier', NumericUserIdentifier().subtype(
  563. implicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatSimple, 4))),
  564. namedtype.OptionalNamedType('personal-name', PersonalName().subtype(
  565. implicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatConstructed, 5))),
  566. namedtype.OptionalNamedType('organizational-unit-names', OrganizationalUnitNames().subtype(
  567. implicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatSimple, 6)))
  568. )
  569. class ORAddress(univ.Sequence):
  570. pass
  571. ORAddress.componentType = namedtype.NamedTypes(
  572. namedtype.NamedType('built-in-standard-attributes', BuiltInStandardAttributes()),
  573. namedtype.OptionalNamedType('built-in-domain-defined-attributes', BuiltInDomainDefinedAttributes()),
  574. namedtype.OptionalNamedType('extension-attributes', ExtensionAttributes())
  575. )
  576. class DistinguishedName(RDNSequence):
  577. pass
  578. id_ad_timeStamping = _buildOid(id_ad, 3)
  579. class PhysicalDeliveryOfficeNumber(PDSParameter):
  580. pass
  581. teletex_domain_defined_attributes = univ.Integer(6)
  582. class UniquePostalName(PDSParameter):
  583. pass
  584. physical_delivery_country_name = univ.Integer(8)
  585. ub_pds_name_length = univ.Integer(16)
  586. class PDSName(char.PrintableString):
  587. pass
  588. PDSName.subtypeSpec = constraint.ValueSizeConstraint(1, ub_pds_name_length)
  589. class TeletexPersonalName(univ.Set):
  590. pass
  591. TeletexPersonalName.componentType = namedtype.NamedTypes(
  592. namedtype.NamedType('surname', char.TeletexString().subtype(
  593. subtypeSpec=constraint.ValueSizeConstraint(1, ub_surname_length)).subtype(
  594. implicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatSimple, 0))),
  595. namedtype.OptionalNamedType('given-name', char.TeletexString().subtype(
  596. subtypeSpec=constraint.ValueSizeConstraint(1, ub_given_name_length)).subtype(
  597. implicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatSimple, 1))),
  598. namedtype.OptionalNamedType('initials', char.TeletexString().subtype(
  599. subtypeSpec=constraint.ValueSizeConstraint(1, ub_initials_length)).subtype(
  600. implicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatSimple, 2))),
  601. namedtype.OptionalNamedType('generation-qualifier', char.TeletexString().subtype(
  602. subtypeSpec=constraint.ValueSizeConstraint(1, ub_generation_qualifier_length)).subtype(
  603. implicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatSimple, 3)))
  604. )
  605. street_address = univ.Integer(17)
  606. class PostOfficeBoxAddress(PDSParameter):
  607. pass
  608. local_postal_attributes = univ.Integer(21)
  609. class DirectoryString(univ.Choice):
  610. pass
  611. DirectoryString.componentType = namedtype.NamedTypes(
  612. namedtype.NamedType('teletexString',
  613. char.TeletexString().subtype(subtypeSpec=constraint.ValueSizeConstraint(1, MAX))),
  614. namedtype.NamedType('printableString',
  615. char.PrintableString().subtype(subtypeSpec=constraint.ValueSizeConstraint(1, MAX))),
  616. namedtype.NamedType('universalString',
  617. char.UniversalString().subtype(subtypeSpec=constraint.ValueSizeConstraint(1, MAX))),
  618. namedtype.NamedType('utf8String', char.UTF8String().subtype(subtypeSpec=constraint.ValueSizeConstraint(1, MAX))),
  619. namedtype.NamedType('bmpString', char.BMPString().subtype(subtypeSpec=constraint.ValueSizeConstraint(1, MAX)))
  620. )
  621. teletex_common_name = univ.Integer(2)
  622. class CommonName(char.PrintableString):
  623. pass
  624. CommonName.subtypeSpec = constraint.ValueSizeConstraint(1, ub_common_name_length)
  625. class Certificate(univ.Sequence):
  626. pass
  627. Certificate.componentType = namedtype.NamedTypes(
  628. namedtype.NamedType('tbsCertificate', TBSCertificate()),
  629. namedtype.NamedType('signatureAlgorithm', AlgorithmIdentifier()),
  630. namedtype.NamedType('signature', univ.BitString())
  631. )
  632. class TeletexOrganizationalUnitName(char.TeletexString):
  633. pass
  634. TeletexOrganizationalUnitName.subtypeSpec = constraint.ValueSizeConstraint(1, ub_organizational_unit_name_length)
  635. id_at_name = _buildOid(id_at, 41)
  636. class TeletexOrganizationalUnitNames(univ.SequenceOf):
  637. pass
  638. TeletexOrganizationalUnitNames.componentType = TeletexOrganizationalUnitName()
  639. TeletexOrganizationalUnitNames.subtypeSpec = constraint.ValueSizeConstraint(1, ub_organizational_units)
  640. id_ce = _buildOid(2, 5, 29)
  641. id_ce_issuerAltName = _buildOid(id_ce, 18)
  642. class SkipCerts(univ.Integer):
  643. pass
  644. SkipCerts.subtypeSpec = constraint.ValueRangeConstraint(0, MAX)
  645. class CRLReason(univ.Enumerated):
  646. pass
  647. CRLReason.namedValues = namedval.NamedValues(
  648. ('unspecified', 0),
  649. ('keyCompromise', 1),
  650. ('cACompromise', 2),
  651. ('affiliationChanged', 3),
  652. ('superseded', 4),
  653. ('cessationOfOperation', 5),
  654. ('certificateHold', 6),
  655. ('removeFromCRL', 8),
  656. ('privilegeWithdrawn', 9),
  657. ('aACompromise', 10)
  658. )
  659. class PrivateKeyUsagePeriod(univ.Sequence):
  660. pass
  661. PrivateKeyUsagePeriod.componentType = namedtype.NamedTypes(
  662. namedtype.OptionalNamedType('notBefore', useful.GeneralizedTime().subtype(
  663. implicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatSimple, 0))),
  664. namedtype.OptionalNamedType('notAfter', useful.GeneralizedTime().subtype(
  665. implicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatSimple, 1)))
  666. )
  667. class AnotherName(univ.Sequence):
  668. pass
  669. AnotherName.componentType = namedtype.NamedTypes(
  670. namedtype.NamedType('type-id', univ.ObjectIdentifier()),
  671. namedtype.NamedType('value', univ.Any().subtype(explicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatSimple, 0)))
  672. )
  673. class EDIPartyName(univ.Sequence):
  674. pass
  675. EDIPartyName.componentType = namedtype.NamedTypes(
  676. namedtype.OptionalNamedType('nameAssigner', DirectoryString().subtype(
  677. implicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatConstructed, 0))),
  678. namedtype.NamedType('partyName', DirectoryString().subtype(
  679. implicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatConstructed, 1)))
  680. )
  681. class GeneralName(univ.Choice):
  682. pass
  683. GeneralName.componentType = namedtype.NamedTypes(
  684. namedtype.NamedType('otherName',
  685. AnotherName().subtype(implicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatConstructed, 0))),
  686. namedtype.NamedType('rfc822Name',
  687. char.IA5String().subtype(implicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatSimple, 1))),
  688. namedtype.NamedType('dNSName',
  689. char.IA5String().subtype(implicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatSimple, 2))),
  690. namedtype.NamedType('x400Address',
  691. ORAddress().subtype(implicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatSimple, 3))),
  692. namedtype.NamedType('directoryName',
  693. Name().subtype(implicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatConstructed, 4))),
  694. namedtype.NamedType('ediPartyName',
  695. EDIPartyName().subtype(implicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatConstructed, 5))),
  696. namedtype.NamedType('uniformResourceIdentifier',
  697. char.IA5String().subtype(implicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatSimple, 6))),
  698. namedtype.NamedType('iPAddress',
  699. univ.OctetString().subtype(implicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatSimple, 7))),
  700. namedtype.NamedType('registeredID', univ.ObjectIdentifier().subtype(
  701. implicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatSimple, 8)))
  702. )
  703. class BaseDistance(univ.Integer):
  704. pass
  705. BaseDistance.subtypeSpec = constraint.ValueRangeConstraint(0, MAX)
  706. class GeneralSubtree(univ.Sequence):
  707. pass
  708. GeneralSubtree.componentType = namedtype.NamedTypes(
  709. namedtype.NamedType('base', GeneralName()),
  710. namedtype.DefaultedNamedType('minimum', BaseDistance().subtype(
  711. implicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatSimple, 0)).subtype(value=0)),
  712. namedtype.OptionalNamedType('maximum', BaseDistance().subtype(
  713. implicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatSimple, 1)))
  714. )
  715. class GeneralNames(univ.SequenceOf):
  716. pass
  717. GeneralNames.componentType = GeneralName()
  718. GeneralNames.subtypeSpec = constraint.ValueSizeConstraint(1, MAX)
  719. class DistributionPointName(univ.Choice):
  720. pass
  721. DistributionPointName.componentType = namedtype.NamedTypes(
  722. namedtype.NamedType('fullName',
  723. GeneralNames().subtype(implicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatSimple, 0))),
  724. namedtype.NamedType('nameRelativeToCRLIssuer', RelativeDistinguishedName().subtype(
  725. implicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatSimple, 1)))
  726. )
  727. class ReasonFlags(univ.BitString):
  728. pass
  729. ReasonFlags.namedValues = namedval.NamedValues(
  730. ('unused', 0),
  731. ('keyCompromise', 1),
  732. ('cACompromise', 2),
  733. ('affiliationChanged', 3),
  734. ('superseded', 4),
  735. ('cessationOfOperation', 5),
  736. ('certificateHold', 6),
  737. ('privilegeWithdrawn', 7),
  738. ('aACompromise', 8)
  739. )
  740. class IssuingDistributionPoint(univ.Sequence):
  741. pass
  742. IssuingDistributionPoint.componentType = namedtype.NamedTypes(
  743. namedtype.OptionalNamedType('distributionPoint', DistributionPointName().subtype(
  744. implicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatConstructed, 0))),
  745. namedtype.DefaultedNamedType('onlyContainsUserCerts', univ.Boolean().subtype(
  746. implicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatSimple, 1)).subtype(value=0)),
  747. namedtype.DefaultedNamedType('onlyContainsCACerts', univ.Boolean().subtype(
  748. implicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatSimple, 2)).subtype(value=0)),
  749. namedtype.OptionalNamedType('onlySomeReasons', ReasonFlags().subtype(
  750. implicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatSimple, 3))),
  751. namedtype.DefaultedNamedType('indirectCRL', univ.Boolean().subtype(
  752. implicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatSimple, 4)).subtype(value=0)),
  753. namedtype.DefaultedNamedType('onlyContainsAttributeCerts', univ.Boolean().subtype(
  754. implicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatSimple, 5)).subtype(value=0))
  755. )
  756. id_ce_certificatePolicies = _buildOid(id_ce, 32)
  757. id_kp_emailProtection = _buildOid(id_kp, 4)
  758. class AccessDescription(univ.Sequence):
  759. pass
  760. AccessDescription.componentType = namedtype.NamedTypes(
  761. namedtype.NamedType('accessMethod', univ.ObjectIdentifier()),
  762. namedtype.NamedType('accessLocation', GeneralName())
  763. )
  764. class IssuerAltName(GeneralNames):
  765. pass
  766. id_ce_cRLDistributionPoints = _buildOid(id_ce, 31)
  767. holdInstruction = _buildOid(2, 2, 840, 10040, 2)
  768. id_holdinstruction_callissuer = _buildOid(holdInstruction, 2)
  769. id_ce_subjectDirectoryAttributes = _buildOid(id_ce, 9)
  770. id_ce_issuingDistributionPoint = _buildOid(id_ce, 28)
  771. class DistributionPoint(univ.Sequence):
  772. pass
  773. DistributionPoint.componentType = namedtype.NamedTypes(
  774. namedtype.OptionalNamedType('distributionPoint', DistributionPointName().subtype(
  775. implicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatConstructed, 0))),
  776. namedtype.OptionalNamedType('reasons', ReasonFlags().subtype(
  777. implicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatSimple, 1))),
  778. namedtype.OptionalNamedType('cRLIssuer', GeneralNames().subtype(
  779. implicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatSimple, 2)))
  780. )
  781. class CRLDistributionPoints(univ.SequenceOf):
  782. pass
  783. CRLDistributionPoints.componentType = DistributionPoint()
  784. CRLDistributionPoints.subtypeSpec = constraint.ValueSizeConstraint(1, MAX)
  785. class GeneralSubtrees(univ.SequenceOf):
  786. pass
  787. GeneralSubtrees.componentType = GeneralSubtree()
  788. GeneralSubtrees.subtypeSpec = constraint.ValueSizeConstraint(1, MAX)
  789. class NameConstraints(univ.Sequence):
  790. pass
  791. NameConstraints.componentType = namedtype.NamedTypes(
  792. namedtype.OptionalNamedType('permittedSubtrees', GeneralSubtrees().subtype(
  793. implicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatSimple, 0))),
  794. namedtype.OptionalNamedType('excludedSubtrees', GeneralSubtrees().subtype(
  795. implicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatSimple, 1)))
  796. )
  797. class SubjectDirectoryAttributes(univ.SequenceOf):
  798. pass
  799. SubjectDirectoryAttributes.componentType = Attribute()
  800. SubjectDirectoryAttributes.subtypeSpec = constraint.ValueSizeConstraint(1, MAX)
  801. id_kp_OCSPSigning = _buildOid(id_kp, 9)
  802. id_kp_timeStamping = _buildOid(id_kp, 8)
  803. class DisplayText(univ.Choice):
  804. pass
  805. DisplayText.componentType = namedtype.NamedTypes(
  806. namedtype.NamedType('ia5String', char.IA5String().subtype(subtypeSpec=constraint.ValueSizeConstraint(1, 200))),
  807. namedtype.NamedType('visibleString',
  808. char.VisibleString().subtype(subtypeSpec=constraint.ValueSizeConstraint(1, 200))),
  809. namedtype.NamedType('bmpString', char.BMPString().subtype(subtypeSpec=constraint.ValueSizeConstraint(1, 200))),
  810. namedtype.NamedType('utf8String', char.UTF8String().subtype(subtypeSpec=constraint.ValueSizeConstraint(1, 200)))
  811. )
  812. class NoticeReference(univ.Sequence):
  813. pass
  814. NoticeReference.componentType = namedtype.NamedTypes(
  815. namedtype.NamedType('organization', DisplayText()),
  816. namedtype.NamedType('noticeNumbers', univ.SequenceOf(componentType=univ.Integer()))
  817. )
  818. class UserNotice(univ.Sequence):
  819. pass
  820. UserNotice.componentType = namedtype.NamedTypes(
  821. namedtype.OptionalNamedType('noticeRef', NoticeReference()),
  822. namedtype.OptionalNamedType('explicitText', DisplayText())
  823. )
  824. class PolicyQualifierId(univ.ObjectIdentifier):
  825. pass
  826. class PolicyQualifierInfo(univ.Sequence):
  827. pass
  828. PolicyQualifierInfo.componentType = namedtype.NamedTypes(
  829. namedtype.NamedType('policyQualifierId', PolicyQualifierId()),
  830. namedtype.NamedType('qualifier', univ.Any())
  831. )
  832. class CertPolicyId(univ.ObjectIdentifier):
  833. pass
  834. class PolicyInformation(univ.Sequence):
  835. pass
  836. PolicyInformation.componentType = namedtype.NamedTypes(
  837. namedtype.NamedType('policyIdentifier', CertPolicyId()),
  838. namedtype.OptionalNamedType('policyQualifiers', univ.SequenceOf(componentType=PolicyQualifierInfo()))
  839. )
  840. class CertificatePolicies(univ.SequenceOf):
  841. pass
  842. CertificatePolicies.componentType = PolicyInformation()
  843. CertificatePolicies.subtypeSpec = constraint.ValueSizeConstraint(1, MAX)
  844. class SubjectAltName(GeneralNames):
  845. pass
  846. id_ce_basicConstraints = _buildOid(id_ce, 19)
  847. id_ce_authorityKeyIdentifier = _buildOid(id_ce, 35)
  848. id_kp_codeSigning = _buildOid(id_kp, 3)
  849. class BasicConstraints(univ.Sequence):
  850. pass
  851. BasicConstraints.componentType = namedtype.NamedTypes(
  852. namedtype.DefaultedNamedType('cA', univ.Boolean().subtype(value=0)),
  853. namedtype.OptionalNamedType('pathLenConstraint',
  854. univ.Integer().subtype(subtypeSpec=constraint.ValueRangeConstraint(0, MAX)))
  855. )
  856. id_ce_certificateIssuer = _buildOid(id_ce, 29)
  857. class PolicyMappings(univ.SequenceOf):
  858. pass
  859. PolicyMappings.componentType = univ.Sequence(
  860. componentType=namedtype.NamedTypes(
  861. namedtype.NamedType('issuerDomainPolicy', CertPolicyId()),
  862. namedtype.NamedType('subjectDomainPolicy', CertPolicyId())
  863. )
  864. )
  865. PolicyMappings.subtypeSpec = constraint.ValueSizeConstraint(1, MAX)
  866. class InhibitAnyPolicy(SkipCerts):
  867. pass
  868. anyPolicy = _buildOid(id_ce_certificatePolicies, 0)
  869. class CRLNumber(univ.Integer):
  870. pass
  871. CRLNumber.subtypeSpec = constraint.ValueRangeConstraint(0, MAX)
  872. class BaseCRLNumber(CRLNumber):
  873. pass
  874. id_ce_nameConstraints = _buildOid(id_ce, 30)
  875. id_kp_serverAuth = _buildOid(id_kp, 1)
  876. id_ce_freshestCRL = _buildOid(id_ce, 46)
  877. id_ce_cRLReasons = _buildOid(id_ce, 21)
  878. id_ce_extKeyUsage = _buildOid(id_ce, 37)
  879. class KeyIdentifier(univ.OctetString):
  880. pass
  881. class AuthorityKeyIdentifier(univ.Sequence):
  882. pass
  883. AuthorityKeyIdentifier.componentType = namedtype.NamedTypes(
  884. namedtype.OptionalNamedType('keyIdentifier', KeyIdentifier().subtype(
  885. implicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatSimple, 0))),
  886. namedtype.OptionalNamedType('authorityCertIssuer', GeneralNames().subtype(
  887. implicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatSimple, 1))),
  888. namedtype.OptionalNamedType('authorityCertSerialNumber', CertificateSerialNumber().subtype(
  889. implicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatSimple, 2)))
  890. )
  891. class FreshestCRL(CRLDistributionPoints):
  892. pass
  893. id_ce_policyConstraints = _buildOid(id_ce, 36)
  894. id_pe_authorityInfoAccess = _buildOid(id_pe, 1)
  895. class AuthorityInfoAccessSyntax(univ.SequenceOf):
  896. pass
  897. AuthorityInfoAccessSyntax.componentType = AccessDescription()
  898. AuthorityInfoAccessSyntax.subtypeSpec = constraint.ValueSizeConstraint(1, MAX)
  899. id_holdinstruction_none = _buildOid(holdInstruction, 1)
  900. class CPSuri(char.IA5String):
  901. pass
  902. id_pe_subjectInfoAccess = _buildOid(id_pe, 11)
  903. class SubjectKeyIdentifier(KeyIdentifier):
  904. pass
  905. id_ce_subjectAltName = _buildOid(id_ce, 17)
  906. class KeyPurposeId(univ.ObjectIdentifier):
  907. pass
  908. class ExtKeyUsageSyntax(univ.SequenceOf):
  909. pass
  910. ExtKeyUsageSyntax.componentType = KeyPurposeId()
  911. ExtKeyUsageSyntax.subtypeSpec = constraint.ValueSizeConstraint(1, MAX)
  912. class HoldInstructionCode(univ.ObjectIdentifier):
  913. pass
  914. id_ce_deltaCRLIndicator = _buildOid(id_ce, 27)
  915. id_ce_keyUsage = _buildOid(id_ce, 15)
  916. id_ce_holdInstructionCode = _buildOid(id_ce, 23)
  917. class SubjectInfoAccessSyntax(univ.SequenceOf):
  918. pass
  919. SubjectInfoAccessSyntax.componentType = AccessDescription()
  920. SubjectInfoAccessSyntax.subtypeSpec = constraint.ValueSizeConstraint(1, MAX)
  921. class InvalidityDate(useful.GeneralizedTime):
  922. pass
  923. class KeyUsage(univ.BitString):
  924. pass
  925. KeyUsage.namedValues = namedval.NamedValues(
  926. ('digitalSignature', 0),
  927. ('nonRepudiation', 1),
  928. ('keyEncipherment', 2),
  929. ('dataEncipherment', 3),
  930. ('keyAgreement', 4),
  931. ('keyCertSign', 5),
  932. ('cRLSign', 6),
  933. ('encipherOnly', 7),
  934. ('decipherOnly', 8)
  935. )
  936. id_ce_invalidityDate = _buildOid(id_ce, 24)
  937. id_ce_policyMappings = _buildOid(id_ce, 33)
  938. anyExtendedKeyUsage = _buildOid(id_ce_extKeyUsage, 0)
  939. id_ce_privateKeyUsagePeriod = _buildOid(id_ce, 16)
  940. id_ce_cRLNumber = _buildOid(id_ce, 20)
  941. class CertificateIssuer(GeneralNames):
  942. pass
  943. id_holdinstruction_reject = _buildOid(holdInstruction, 3)
  944. class PolicyConstraints(univ.Sequence):
  945. pass
  946. PolicyConstraints.componentType = namedtype.NamedTypes(
  947. namedtype.OptionalNamedType('requireExplicitPolicy',
  948. SkipCerts().subtype(implicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatSimple, 0))),
  949. namedtype.OptionalNamedType('inhibitPolicyMapping',
  950. SkipCerts().subtype(implicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatSimple, 1)))
  951. )
  952. id_kp_clientAuth = _buildOid(id_kp, 2)
  953. id_ce_subjectKeyIdentifier = _buildOid(id_ce, 14)
  954. id_ce_inhibitAnyPolicy = _buildOid(id_ce, 54)
  955. # map of AttributeType -> AttributeValue
  956. certificateAttributesMap = {
  957. id_at_name: X520name(),
  958. id_at_surname: X520name(),
  959. id_at_givenName: X520name(),
  960. id_at_initials: X520name(),
  961. id_at_generationQualifier: X520name(),
  962. id_at_commonName: X520CommonName(),
  963. id_at_localityName: X520LocalityName(),
  964. id_at_stateOrProvinceName: X520StateOrProvinceName(),
  965. id_at_organizationName: X520OrganizationName(),
  966. id_at_organizationalUnitName: X520OrganizationalUnitName(),
  967. id_at_title: X520Title(),
  968. id_at_dnQualifier: X520dnQualifier(),
  969. id_at_countryName: X520countryName(),
  970. id_at_serialNumber: X520SerialNumber(),
  971. id_at_pseudonym: X520Pseudonym(),
  972. id_domainComponent: DomainComponent(),
  973. id_emailAddress: EmailAddress(),
  974. }
  975. # map of Certificate Extension OIDs to Extensions
  976. certificateExtensionsMap = {
  977. id_ce_authorityKeyIdentifier: AuthorityKeyIdentifier(),
  978. id_ce_subjectKeyIdentifier: SubjectKeyIdentifier(),
  979. id_ce_keyUsage: KeyUsage(),
  980. id_ce_privateKeyUsagePeriod: PrivateKeyUsagePeriod(),
  981. id_ce_certificatePolicies: PolicyInformation(), # could be a sequence of concat'ed objects?
  982. id_ce_policyMappings: PolicyMappings(),
  983. id_ce_subjectAltName: SubjectAltName(),
  984. id_ce_issuerAltName: IssuerAltName(),
  985. id_ce_subjectDirectoryAttributes: SubjectDirectoryAttributes(),
  986. id_ce_basicConstraints: BasicConstraints(),
  987. id_ce_nameConstraints: NameConstraints(),
  988. id_ce_policyConstraints: PolicyConstraints(),
  989. id_ce_extKeyUsage: ExtKeyUsageSyntax(),
  990. id_ce_cRLDistributionPoints: CRLDistributionPoints(),
  991. id_pe_authorityInfoAccess: AuthorityInfoAccessSyntax(),
  992. id_ce_cRLNumber: univ.Integer(),
  993. id_ce_deltaCRLIndicator: BaseCRLNumber(),
  994. id_ce_issuingDistributionPoint: IssuingDistributionPoint(),
  995. id_ce_cRLReasons: CRLReason(),
  996. id_ce_holdInstructionCode: univ.ObjectIdentifier(),
  997. id_ce_invalidityDate: useful.GeneralizedTime(),
  998. id_ce_certificateIssuer: GeneralNames(),
  999. }