3
lá˜_ ã @ s˜ d dl mZmZmZ d dlmZ d dlmZ d dlm Z d dl
m Z m Z d dl
mZmZ d dlmZ dd „ Zd
d „ ZG d d
„ d
eƒZG dd„ deƒZdS )é )Úabsolute_importÚdivisionÚprint_function)ÚEnum)Úx509)Ú _get_backend)ÚhashesÚ
serialization)ÚecÚrsa)Ú_check_byteslikec C s t d ƒ}|j| ƒS )N)r Úload_pem_pkcs7_certificates)ÚdataÚbackend© r ú /usr/lib64/python3.6/pkcs7.pyr
s r
c C s t d ƒ}|j| ƒS )N)r Úload_der_pkcs7_certificates)r r r r r r s r c @ s> e Zd Zdg g fdd„Zdd„ Zdd„ Zdd „ Zd d
d „ZdS )
ÚPKCS7SignatureBuilderNc C s || _ || _|| _d S )N)Ú_dataÚ_signersÚ_additional_certs)Úselfr ZsignersZadditional_certsr r r Ú__init__ s z PKCS7SignatureBuilder.__init__c C s( t d|ƒ | jd k r tdƒ‚t|| jƒS )Nr zdata may only be set once)r r Ú
ValueErrorr r )r r r r r Úset_data s
z PKCS7SignatureBuilder.set_datac C sn t |tjtjtjtjtjfƒs&tdƒ‚t |tj ƒs:tdƒ‚t |t
j t j
fƒsTtdƒ‚t| j| j|||fg ƒS )NzLhash_algorithm must be one of hashes.SHA1, SHA224, SHA256, SHA384, or SHA512z&certificate must be a x509.Certificatez.Only RSA & EC keys are supported at this time.)Ú
isinstancer ZSHA1ZSHA224ZSHA256ZSHA384ZSHA512Ú TypeErrorr Ú Certificater Z
RSAPrivateKeyr
ZEllipticCurvePrivateKeyr r r )r Ú certificateZ private_keyZhash_algorithmr r r Ú
add_signer' s"
z PKCS7SignatureBuilder.add_signerc C s, t |tjƒstdƒ‚t| j| j| j|g ƒS )Nz&certificate must be a x509.Certificate)r r r r r r r r )r r r r r Úadd_certificateC s z%PKCS7SignatureBuilder.add_certificatec C sà t | jƒdkrtdƒ‚| jd kr(tdƒ‚t|ƒ}tdd„ |D ƒƒsJtdƒ‚|tjjtjj tjj
fkrltdƒ‚t j |krˆt j
|krˆtdƒ‚t j |kr®|tjj tjjfkr®td ƒ‚t j|krÊt j|krÊtd
ƒ‚t|ƒ}|j| ||ƒS ) Nr z Must have at least one signerzYou must add data to signc s s | ]}t |tƒV qd S )N)r Ú PKCS7Options)Ú.0Úxr r r ú Q s z-PKCS7SignatureBuilder.sign..z*options must be from the PKCS7Options enumz1Must be PEM, DER, or SMIME from the Encoding enumzAWhen passing the Text option you must also pass DetachedSignaturez9The Text option is only available for SMIME serializationzFNoAttributes is a superset of NoCapabilities. Do not pass both values.)Úlenr r r ÚlistÚallr ZEncodingZPEMZDERZSMIMEr! ÚTextÚDetachedSignatureÚ NoAttributesÚNoCapabilitiesr Z
pkcs7_sign)r ÚencodingZoptionsr r r r ÚsignK s8
zPKCS7SignatureBuilder.sign)N)Ú__name__Ú
__module__Ú __qualname__r r r r r- r r r r r s
r c @ s$ e Zd ZdZdZdZdZdZdZdS )r! zAdd text/plain MIME typez5Don't translate input data into canonical MIME formatz'Don't embed data in the PKCS7 structurez Don't embed SMIME capabilitiesz#Don't embed authenticatedAttributesz Don't embed signer certificateN) r. r/ r0 r( ZBinaryr) r+ r* ZNoCertsr r r r r! ~ s r! N)Z
__future__r r r Úenumr Z cryptographyr Z cryptography.hazmat.backendsr Z cryptography.hazmat.primitivesr r Z)cryptography.hazmat.primitives.asymmetricr
r Zcryptography.utilsr r
r Úobjectr r! r r r r Ú s d