WwgFdZddlZddlmZddlmZmZmZddlm Z m Z m Z m Z ddl mZddlmZgdZd ezZGd d ej&ZGd d ej&ZGddej&ZedGddZGddej&Zy)zF Asynchronous API for fetching OCSP responses, CRLs and certificates. N) dataclass)AsyncGeneratorIterableUnion)cmscrlocspx509) Authority) __version__) OCSPFetcher CRLFetcherCertificateFetcherFetchersFetcherBackendDEFAULT_USER_AGENTzpyhanko_certvalidator %sceZdZdZdeej ejfde de jfdZ de e jfdZdeej ejfde e jfdZy) r z4Utility interface to fetch and cache OCSP responses.cert authorityreturncKtw)ag Fetch an OCSP response for a certificate. :param cert: The certificate for which an OCSP response has to be fetched. :param authority: The issuing authority. :raises: OCSPFetchError - Raised if an OCSP response could not be obtained. :return: An OCSP response. NotImplementedError)selfrrs Y/var/www/horilla/myenv/lib/python3.12/site-packages/pyhanko_certvalidator/fetchers/api.pyfetchzOCSPFetcher.fetchs""! ct)zD Return all responses fetched by this OCSP fetcher. rrs rfetched_responseszOCSPFetcher.fetched_responses0 "!ct)z Return all responses fetched by this OCSP fetcher that are relevant to determine the revocation status of the given certificate. rrrs rfetched_responses_for_certz&OCSPFetcher.fetched_responses_for_cert6 "!r"N)__name__ __module__ __qualname____doc__rr CertificaterAttributeCertificateV2r r OCSPResponserrr r%r"rr r s>"D$$c&@&@@A""    "&"8D,=,=#>" "$**C,F,FFG" $## $"r"r ceZdZdZdddeej ejfde e jfdZ de e jfdZ deej ejfde e jfdZy) rz*Utility interface to fetch and cache CRLs.N) use_deltasrrcKtw)a Fetches the CRLs for a certificate. :param cert: An asn1crypto.x509.Certificate object to get the CRL for :param use_deltas: A boolean indicating if delta CRLs should be fetched :raises: CRLFetchError - when a network/IO error or decoding error occurs :return: An iterable of CRLs fetched. r)rrr0s rrzCRLFetcher.fetchCs4"!rct)z> Return all CRLs fetched by this CRL fetcher. rrs r fetched_crlszCRLFetcher.fetched_crls_r!r"ct)a Return all relevant fetched CRLs for the given certificate :param cert: A certificate. :return: An iterable of CRLs :raise KeyError: if no fetch operations have been performed for this certificate rr$s rfetched_crls_for_certz CRLFetcher.fetched_crls_for_certes "!r")r'r(r)r*rr r+rr,rrCertificateListrr3r5r.r"rrr@s4  "D$$c&@&@@A" #%% & "8"hs':':;" "$**C,F,FFG " #%% & "r"rceZdZdZdeej ejfde ej dffdZ de ej dffdZ de ej fdZ y)rz2Utility interface to fetch and cache certificates.rrNct)a Fetches certificates from the authority information access extension of a certificate. :param cert: A certificate :raises: CertificateFetchError - when a network I/O or decoding error occurs :return: An asynchronous generator yielding asn1crypto.x509.Certificate objects that were fetched. rr$s rfetch_cert_issuersz%CertificateFetcher.fetch_cert_issuersx ""!r"ct)a Fetches certificates from the authority information access extension of an asn1crypto.crl.CertificateList. :param certificate_list: An asn1crypto.crl.CertificateList object :raises: CertificateFetchError - when a network I/O or decoding error occurs :return: An asynchronous generator yielding asn1crypto.x509.Certificate objects that were fetched. r)rcertificate_lists rfetch_crl_issuersz$CertificateFetcher.fetch_crl_issuersr:r"ct)zP Return all certificates retrieved by this certificate fetcher. rrs r fetched_certsz CertificateFetcher.fetched_certsr!r")r'r(r)r*rr r+rr,rr9r=rr?r.r"rrrust<"$**C,F,FFG" (($. /"&" (($. /"&"x(8(89"r"rT)frozenc0eZdZUdZeed<eed<eed<y)rz Models a collection of fetchers to be used by a validation context. The intention is that these can share resources (like a connection pool) in a unified, controlled manner. See also :class:`.FetcherBackend`. ocsp_fetcher crl_fetcher cert_fetcherN)r'r(r)r*r __annotations__rrr.r"rrrs$$r"rc4eZdZdZdefdZdZdefdZdZy)ra Generic, bare-bones interface to help abstract away instantiation logic for fetcher implementations. Intended to operate as an asynchronous context manager, with `async with backend_obj as fetchers: ...` putting the resulting :class:`.Fetchers` object in to the variable named `fetchers`. .. note:: The initialisation part of the API is necessarily synchronous, for backwards compatibility with the old ``ValidationContext`` API. If you need asynchronous resource management, handle it elsewhere, or use some form of lazy resource provisioning. Alternatively, you can pass :class:`Fetchers` objects to the validation context yourself, and forgo use of the :class:`.FetcherBackend` API altogether. rct)zl Set up fetchers synchronously. .. note:: This is a synchronous method rrs r get_fetcherszFetcherBackend.get_fetchersr&r"c Kyw)zf Clean up the resources associated with this fetcher backend, asynchronously. Nr.rs rclosezFetcherBackend.closes sc*K|jSwN)rHrs r __aenter__zFetcherBackend.__aenter__s  ""sc>K|jd{S7wrL)rJ)rexc_typeexc_valexc_tbs r __aexit__zFetcherBackend.__aexit__sZZ\!!!s N) r'r(r)r*rrHrJrMrRr.r"rrrs)&"h" #(#"r"r)r*abc dataclassesrtypingrrr asn1cryptorrr r pyhanko_certvalidator.authorityr pyhanko_certvalidator.versionr __all__rABCr rrrrr.r"rr[s !22++55 0+=#"#''#"L2"2"j-"-"` $ % % %("SWW("r"