Shortcuts on this page
r m x toggle line displays
j k next/prev highlighted chunk
0 (zero) top of page
1 (one) first highlighted chunk
1# This file is dual licensed under the terms of the Apache License, Version
2# 2.0, and the BSD License. See the LICENSE file in the root of this repository
3# for complete details.
5from __future__ import annotations
7from cryptography.x509 import certificate_transparency, verification
8from cryptography.x509.base import (
9 Attribute,
10 AttributeNotFound,
11 Attributes,
12 Certificate,
13 CertificateBuilder,
14 CertificateRevocationList,
15 CertificateRevocationListBuilder,
16 CertificateSigningRequest,
17 CertificateSigningRequestBuilder,
18 InvalidVersion,
19 RevokedCertificate,
20 RevokedCertificateBuilder,
21 Version,
22 load_der_x509_certificate,
23 load_der_x509_crl,
24 load_der_x509_csr,
25 load_pem_x509_certificate,
26 load_pem_x509_certificates,
27 load_pem_x509_crl,
28 load_pem_x509_csr,
29 random_serial_number,
30)
31from cryptography.x509.extensions import (
32 AccessDescription,
33 AuthorityInformationAccess,
34 AuthorityKeyIdentifier,
35 BasicConstraints,
36 CertificateIssuer,
37 CertificatePolicies,
38 CRLDistributionPoints,
39 CRLNumber,
40 CRLReason,
41 DeltaCRLIndicator,
42 DistributionPoint,
43 DuplicateExtension,
44 ExtendedKeyUsage,
45 Extension,
46 ExtensionNotFound,
47 Extensions,
48 ExtensionType,
49 FreshestCRL,
50 GeneralNames,
51 InhibitAnyPolicy,
52 InvalidityDate,
53 IssuerAlternativeName,
54 IssuingDistributionPoint,
55 KeyUsage,
56 MSCertificateTemplate,
57 NameConstraints,
58 NoticeReference,
59 OCSPAcceptableResponses,
60 OCSPNoCheck,
61 OCSPNonce,
62 PolicyConstraints,
63 PolicyInformation,
64 PrecertificateSignedCertificateTimestamps,
65 PrecertPoison,
66 ReasonFlags,
67 SignedCertificateTimestamps,
68 SubjectAlternativeName,
69 SubjectInformationAccess,
70 SubjectKeyIdentifier,
71 TLSFeature,
72 TLSFeatureType,
73 UnrecognizedExtension,
74 UserNotice,
75)
76from cryptography.x509.general_name import (
77 DirectoryName,
78 DNSName,
79 GeneralName,
80 IPAddress,
81 OtherName,
82 RegisteredID,
83 RFC822Name,
84 UniformResourceIdentifier,
85 UnsupportedGeneralNameType,
86)
87from cryptography.x509.name import (
88 Name,
89 NameAttribute,
90 RelativeDistinguishedName,
91)
92from cryptography.x509.oid import (
93 AuthorityInformationAccessOID,
94 CertificatePoliciesOID,
95 CRLEntryExtensionOID,
96 ExtendedKeyUsageOID,
97 ExtensionOID,
98 NameOID,
99 ObjectIdentifier,
100 SignatureAlgorithmOID,
101)
103OID_AUTHORITY_INFORMATION_ACCESS = ExtensionOID.AUTHORITY_INFORMATION_ACCESS
104OID_AUTHORITY_KEY_IDENTIFIER = ExtensionOID.AUTHORITY_KEY_IDENTIFIER
105OID_BASIC_CONSTRAINTS = ExtensionOID.BASIC_CONSTRAINTS
106OID_CERTIFICATE_POLICIES = ExtensionOID.CERTIFICATE_POLICIES
107OID_CRL_DISTRIBUTION_POINTS = ExtensionOID.CRL_DISTRIBUTION_POINTS
108OID_EXTENDED_KEY_USAGE = ExtensionOID.EXTENDED_KEY_USAGE
109OID_FRESHEST_CRL = ExtensionOID.FRESHEST_CRL
110OID_INHIBIT_ANY_POLICY = ExtensionOID.INHIBIT_ANY_POLICY
111OID_ISSUER_ALTERNATIVE_NAME = ExtensionOID.ISSUER_ALTERNATIVE_NAME
112OID_KEY_USAGE = ExtensionOID.KEY_USAGE
113OID_NAME_CONSTRAINTS = ExtensionOID.NAME_CONSTRAINTS
114OID_OCSP_NO_CHECK = ExtensionOID.OCSP_NO_CHECK
115OID_POLICY_CONSTRAINTS = ExtensionOID.POLICY_CONSTRAINTS
116OID_POLICY_MAPPINGS = ExtensionOID.POLICY_MAPPINGS
117OID_SUBJECT_ALTERNATIVE_NAME = ExtensionOID.SUBJECT_ALTERNATIVE_NAME
118OID_SUBJECT_DIRECTORY_ATTRIBUTES = ExtensionOID.SUBJECT_DIRECTORY_ATTRIBUTES
119OID_SUBJECT_INFORMATION_ACCESS = ExtensionOID.SUBJECT_INFORMATION_ACCESS
120OID_SUBJECT_KEY_IDENTIFIER = ExtensionOID.SUBJECT_KEY_IDENTIFIER
122OID_DSA_WITH_SHA1 = SignatureAlgorithmOID.DSA_WITH_SHA1
123OID_DSA_WITH_SHA224 = SignatureAlgorithmOID.DSA_WITH_SHA224
124OID_DSA_WITH_SHA256 = SignatureAlgorithmOID.DSA_WITH_SHA256
125OID_ECDSA_WITH_SHA1 = SignatureAlgorithmOID.ECDSA_WITH_SHA1
126OID_ECDSA_WITH_SHA224 = SignatureAlgorithmOID.ECDSA_WITH_SHA224
127OID_ECDSA_WITH_SHA256 = SignatureAlgorithmOID.ECDSA_WITH_SHA256
128OID_ECDSA_WITH_SHA384 = SignatureAlgorithmOID.ECDSA_WITH_SHA384
129OID_ECDSA_WITH_SHA512 = SignatureAlgorithmOID.ECDSA_WITH_SHA512
130OID_RSA_WITH_MD5 = SignatureAlgorithmOID.RSA_WITH_MD5
131OID_RSA_WITH_SHA1 = SignatureAlgorithmOID.RSA_WITH_SHA1
132OID_RSA_WITH_SHA224 = SignatureAlgorithmOID.RSA_WITH_SHA224
133OID_RSA_WITH_SHA256 = SignatureAlgorithmOID.RSA_WITH_SHA256
134OID_RSA_WITH_SHA384 = SignatureAlgorithmOID.RSA_WITH_SHA384
135OID_RSA_WITH_SHA512 = SignatureAlgorithmOID.RSA_WITH_SHA512
136OID_RSASSA_PSS = SignatureAlgorithmOID.RSASSA_PSS
138OID_COMMON_NAME = NameOID.COMMON_NAME
139OID_COUNTRY_NAME = NameOID.COUNTRY_NAME
140OID_DOMAIN_COMPONENT = NameOID.DOMAIN_COMPONENT
141OID_DN_QUALIFIER = NameOID.DN_QUALIFIER
142OID_EMAIL_ADDRESS = NameOID.EMAIL_ADDRESS
143OID_GENERATION_QUALIFIER = NameOID.GENERATION_QUALIFIER
144OID_GIVEN_NAME = NameOID.GIVEN_NAME
145OID_LOCALITY_NAME = NameOID.LOCALITY_NAME
146OID_ORGANIZATIONAL_UNIT_NAME = NameOID.ORGANIZATIONAL_UNIT_NAME
147OID_ORGANIZATION_NAME = NameOID.ORGANIZATION_NAME
148OID_PSEUDONYM = NameOID.PSEUDONYM
149OID_SERIAL_NUMBER = NameOID.SERIAL_NUMBER
150OID_STATE_OR_PROVINCE_NAME = NameOID.STATE_OR_PROVINCE_NAME
151OID_SURNAME = NameOID.SURNAME
152OID_TITLE = NameOID.TITLE
154OID_CLIENT_AUTH = ExtendedKeyUsageOID.CLIENT_AUTH
155OID_CODE_SIGNING = ExtendedKeyUsageOID.CODE_SIGNING
156OID_EMAIL_PROTECTION = ExtendedKeyUsageOID.EMAIL_PROTECTION
157OID_OCSP_SIGNING = ExtendedKeyUsageOID.OCSP_SIGNING
158OID_SERVER_AUTH = ExtendedKeyUsageOID.SERVER_AUTH
159OID_TIME_STAMPING = ExtendedKeyUsageOID.TIME_STAMPING
161OID_ANY_POLICY = CertificatePoliciesOID.ANY_POLICY
162OID_CPS_QUALIFIER = CertificatePoliciesOID.CPS_QUALIFIER
163OID_CPS_USER_NOTICE = CertificatePoliciesOID.CPS_USER_NOTICE
165OID_CERTIFICATE_ISSUER = CRLEntryExtensionOID.CERTIFICATE_ISSUER
166OID_CRL_REASON = CRLEntryExtensionOID.CRL_REASON
167OID_INVALIDITY_DATE = CRLEntryExtensionOID.INVALIDITY_DATE
169OID_CA_ISSUERS = AuthorityInformationAccessOID.CA_ISSUERS
170OID_OCSP = AuthorityInformationAccessOID.OCSP
172__all__ = [
173 "certificate_transparency",
174 "verification",
175 "load_pem_x509_certificate",
176 "load_pem_x509_certificates",
177 "load_der_x509_certificate",
178 "load_pem_x509_csr",
179 "load_der_x509_csr",
180 "load_pem_x509_crl",
181 "load_der_x509_crl",
182 "random_serial_number",
183 "verification",
184 "Attribute",
185 "AttributeNotFound",
186 "Attributes",
187 "InvalidVersion",
188 "DeltaCRLIndicator",
189 "DuplicateExtension",
190 "ExtensionNotFound",
191 "UnsupportedGeneralNameType",
192 "NameAttribute",
193 "Name",
194 "RelativeDistinguishedName",
195 "ObjectIdentifier",
196 "ExtensionType",
197 "Extensions",
198 "Extension",
199 "ExtendedKeyUsage",
200 "FreshestCRL",
201 "IssuingDistributionPoint",
202 "TLSFeature",
203 "TLSFeatureType",
204 "OCSPAcceptableResponses",
205 "OCSPNoCheck",
206 "BasicConstraints",
207 "CRLNumber",
208 "KeyUsage",
209 "AuthorityInformationAccess",
210 "SubjectInformationAccess",
211 "AccessDescription",
212 "CertificatePolicies",
213 "PolicyInformation",
214 "UserNotice",
215 "NoticeReference",
216 "SubjectKeyIdentifier",
217 "NameConstraints",
218 "CRLDistributionPoints",
219 "DistributionPoint",
220 "ReasonFlags",
221 "InhibitAnyPolicy",
222 "SubjectAlternativeName",
223 "IssuerAlternativeName",
224 "AuthorityKeyIdentifier",
225 "GeneralNames",
226 "GeneralName",
227 "RFC822Name",
228 "DNSName",
229 "UniformResourceIdentifier",
230 "RegisteredID",
231 "DirectoryName",
232 "IPAddress",
233 "OtherName",
234 "Certificate",
235 "CertificateRevocationList",
236 "CertificateRevocationListBuilder",
237 "CertificateSigningRequest",
238 "RevokedCertificate",
239 "RevokedCertificateBuilder",
240 "CertificateSigningRequestBuilder",
241 "CertificateBuilder",
242 "Version",
243 "OID_CA_ISSUERS",
244 "OID_OCSP",
245 "CertificateIssuer",
246 "CRLReason",
247 "InvalidityDate",
248 "UnrecognizedExtension",
249 "PolicyConstraints",
250 "PrecertificateSignedCertificateTimestamps",
251 "PrecertPoison",
252 "OCSPNonce",
253 "SignedCertificateTimestamps",
254 "SignatureAlgorithmOID",
255 "NameOID",
256 "MSCertificateTemplate",
257]