Wwg HddlmZddlmZddlmZddlmZGddZy))Optional)x509ValidationPath)ConsListceZdZddddeedeedefdZe dZ e d efd Z d e jfd Zdd Zy) ValProcStateNF)ee_name_overrideis_side_validationcert_path_stackr r c|j tdd|_||_t |xs |j |_||_y)NzEmpty path stackr)head ValueErrorindexr booltailr r )selfr r r s S/var/www/horilla/myenv/lib/python3.12/site-packages/pyhanko_certvalidator/_state.py__init__zValProcState.__init__ sP    '/0 0 0"&  6/"6"6#  /cnddlm}|jj}t ||sJ|j S)z Length of the path being validated. .. note:: This is the path length in the sense of RFC 5280, i.e. the root doesn't count. rr)pyhanko_certvalidator.pathrr r isinstancepkix_len)rrpaths rpath_lenzValProcState.path_lens2 >##(($///}}rreturnc4|j|jk(S)N)rr)rs r is_ee_certzValProcState.is_ee_cert)szzT]]**ree_certcddlm}|jD]2}|j}|s|j|jk(s0|cSy)a Helper method to avoid recursion in indirect CRL validation. There are some questionable-but-technically-valid CA setups where a CRL issuer is authorised to assert its own revocation status, which could cause a naive implementation to recurse. rrN)rrr get_ee_cert_safesha256)rr rrcerts rcheck_path_verif_recursionz'ValProcState.check_path_verif_recursion-sH >(( D((*D w~~5  rc| }|jdkr|jd}n<|js||z}d|j}n|j |j}nd}|rd|zS|S)zy :return: A unicode string describing the position of a certificate in the chain  certificatezintermediate certificate zend-entity certificatezthe )rr r)r def_interm never_defprefixresults r describe_certzValProcState.describe_cert=su ::>d33;"F j F0 =F  " " .**F-F F? "Mr)FF)__name__ __module__ __qualname__rrrstrrrpropertyrrr Certificater%r-rrr r s| +/#( /".1/#3- / ! /   +D++$2B2B rr N) typingr asn1cryptorrrpyhanko_certvalidator.utilrr r4rrr8s5/IIr