a )=ic5oć@s¢ddlmZddlmZddlmZddlmZddlmZddlmZddlmZddlm Z dd lm Z dd lm Z e d ƒZ Gd d „d ejƒZGdd„de jƒZGdd„deƒZGdd„deƒZGdd„dejƒZGdd„dejƒZGdd„dejƒZGdd„dejƒZGdd„dejƒZGdd„dejƒZGd d!„d!ejƒZGd"d#„d#ejƒZGd$d%„d%ejƒZGd&d'„d'ejƒZ Gd(d)„d)ejƒZ!Gd*d+„d+ej"ƒZ#Gd,d-„d-ejƒZ$Gd.d/„d/ejƒZ%Gd0d1„d1ejƒZ&Gd2d3„d3ej'ƒZ(Gd4d5„d5ej)ƒZ*Gd6d7„d7ejƒZ+Gd8d9„d9ejƒZ,Gd:d;„d;ejƒZ-Gdd?„d?ejƒZ/Gd@dA„dAejƒZ0GdBdC„dCejƒZ1GdDdE„dEejƒZ2GdFdG„dGejƒZ3GdHdI„dIejƒZ4GdJdK„dKejƒZ5GdLdM„dMejƒZ6GdNdO„dOejƒZ7e 8dP”Z9GdQdR„dRejƒZ:e 8dS”Z;GdTdU„dUej)ƒZej?ej@dV”dWZAGdXdY„dYej"ƒZBGdZd[„d[ejƒZCGd\d]„d]ejƒZDGd^d_„d_ejƒZEGd`da„daejƒZFeFƒe6_GeFƒeA_GdbS)cé)Śchar)Ś constraint)Ś namedtype)Śnamedval)Śtag)Śuniv)Śuseful)Śrfc2314)Śrfc2459)Śrfc2511Śinfc@s eZdZdS)Ś KeyIdentifierN©Ś__name__Ś __module__Ś __qualname__©rrśg/home/droni/.local/share/virtualenvs/DPS-5Je3_V2c/lib/python3.9/site-packages/pyasn1_modules/rfc4210.pyr sr c@s eZdZdS)ŚCMPCertificateNrrrrrrsrc@s eZdZdS)ŚOOBCertNrrrrrr"src@s eZdZdS)ŚCertAnnContentNrrrrrr&src@s,eZdZdZe ”Zejj e   de ”Z dS)Ś PKIFreeTextz> PKIFreeText ::= SEQUENCE SIZE (1..MAX) OF UTF8String éN) rrrŚ__doc__rZ UTF8StringŚ componentTyperŚ SequenceOfŚsizeSpecrŚValueSizeConstraintŚMAXrrrrr*src@s(eZdZdZGdd„dejƒZeƒZdS)ŚPollRepContentzŚ PollRepContent ::= SEQUENCE OF SEQUENCE { certReqId INTEGER, checkAfter INTEGER, -- time in seconds reason PKIFreeText OPTIONAL } c@s<eZdZe e de ””e de ””e de ƒ””Z dS)zPollRepContent.CertReqŚ certReqIdZ checkAfterŚreasonN) rrrrŚ NamedTypesŚ NamedTyperŚIntegerŚOptionalNamedTyperrrrrrŚCertReq;s  żr&N©rrrrrŚSequencer&rrrrrr2src@s(eZdZdZGdd„dejƒZeƒZdS)ŚPollReqContentzh PollReqContent ::= SEQUENCE OF SEQUENCE { certReqId INTEGER } c@s"eZdZe e de ”””ZdS)zPollReqContent.CertReqr N) rrrrr"r#rr$rrrrrr&Ms’r&Nr'rrrrr)Esr)c@s4eZdZdZe e de ””e  de  ”””Z dS)ŚInfoTypeAndValuez— InfoTypeAndValue ::= SEQUENCE { infoType OBJECT IDENTIFIER, infoValue ANY DEFINED BY infoType OPTIONAL }ZinfoTypeŚ infoValueN) rrrrrr"r#rŚObjectIdentifierr%ŚAnyrrrrrr*Us žr*c@seZdZeƒZdS)Ś GenRepContentN©rrrr*rrrrrr.asr.c@seZdZeƒZdS)Ś GenMsgContentNr/rrrrr0esr0c@s eZdZdS)ŚPKIConfirmContentNrrrrrr1isr1c@seZdZe ”ZdS)Ś CRLAnnContentN)rrrr ŚCertificateListrrrrrr2msr2c@s<eZdZdZe e deƒ”e deƒ”e deƒ””ZdS)ŚCAKeyUpdAnnContentz£ CAKeyUpdAnnContent ::= SEQUENCE { oldWithNew CMPCertificate, newWithOld CMPCertificate, newWithNew CMPCertificate } Z oldWithNewZ newWithOldZ newWithNewN) rrrrrr"r#rrrrrrr4qs    żr4c@s4eZdZdZe e de ””e  de   ”””Z dS)Ś RevDetailszŒ RevDetails ::= SEQUENCE { certDetails CertTemplate, crlEntryDetails Extensions OPTIONAL } Z certDetailsZcrlEntryDetailsN) rrrrrr"r#r Z CertTemplater%r Ś Extensionsrrrrrr5€s žr5c@seZdZeƒZdS)Ś RevReqContentN)rrrr5rrrrrr7sr7c @s^eZdZdZe e deƒje   e j e j d”d”e de  ”je   e j e j d”d””ZdS)Ś CertOrEncCertz… CertOrEncCert ::= CHOICE { certificate [0] CMPCertificate, encryptedCert [1] EncryptedValue } Z certificater©Ś explicitTagZ encryptedCertrN)rrrrrr"r#rŚsubtyperŚTagŚtagClassContextŚtagFormatConstructedr ŚEncryptedValuerrrrrr8‘s "$žr8c @sleZdZdZe e deƒ”e de   ”j e   e je jd”d”e de  ”j e   e je jd”d””ZdS) ŚCertifiedKeyPairzŃ CertifiedKeyPair ::= SEQUENCE { certOrEncCert CertOrEncCert, privateKey [0] EncryptedValue OPTIONAL, publicationInfo [1] PKIPublicationInfo OPTIONAL } Z certOrEncCertZ privateKeyrr9ZpublicationInforN)rrrrrr"r#r8r%r r?r;rr<r=r>ZPKIPublicationInforrrrrr@žs  $$żr@c@seZdZe ”ZdS)ŚPOPODecKeyRespContentN)rrrrr$rrrrrrA­srAc @sBeZdZdZe e de ””e  de   ””e  de   ”””Z dS)Ś Challengezŗ Challenge ::= SEQUENCE { owf AlgorithmIdentifier OPTIONAL, witness OCTET STRING, challenge OCTET STRING } ŚowfZwitnessŚ challengeN) rrrrrr"r%r ŚAlgorithmIdentifierr#rŚ OctetStringrrrrrrB±s żrBc @s&eZdZdZe ddddddd”Zd S) Ś PKIStatusa+ PKIStatus ::= INTEGER { accepted (0), grantedWithMods (1), rejection (2), waiting (3), revocationWarning (4), revocationNotification (5), keyUpdateWarning (6) } )Śacceptedr)ZgrantedWithModsr)Z rejectioné)Zwaitingé)ZrevocationWarningé)ZrevocationNotificationé)ZkeyUpdateWarningéN©rrrrrŚ NamedValuesŚ namedValuesrrrrrGĄs łrGc@sNeZdZdZe dddddddd d d d d ddddddddddddddd”ZdS)ŚPKIFailureInfoaĻ PKIFailureInfo ::= BIT STRING { badAlg (0), badMessageCheck (1), badRequest (2), badTime (3), badCertId (4), badDataFormat (5), wrongAuthority (6), incorrectData (7), missingTimeStamp (8), badPOP (9), certRevoked (10), certConfirmed (11), wrongIntegrity (12), badRecipientNonce (13), timeNotAvailable (14), unacceptedPolicy (15), unacceptedExtension (16), addInfoNotAvailable (17), badSenderNonce (18), badCertTemplate (19), signerNotTrusted (20), transactionIdInUse (21), unsupportedVersion (22), notAuthorized (23), systemUnavail (24), systemFailure (25), duplicateCertReq (26) )ZbadAlgr)ZbadMessageCheckr)Z badRequestrI)ZbadTimerJ)Z badCertIdrK)Z badDataFormatrL)ZwrongAuthorityrM)Z incorrectDataé)ZmissingTimeStampé)ZbadPOPé )Z certRevokedé )Z certConfirmedé )ZwrongIntegrityé )ZbadRecipientNonceé )ZtimeNotAvailableé)ZunacceptedPolicyé)ZunacceptedExtensioné)ZaddInfoNotAvailableé)ZbadSenderNonceé)ZbadCertTemplateé)ZsignerNotTrustedé)ZtransactionIdInUseé)ZunsupportedVersioné)Z notAuthorizedé)Z systemUnavailé)Z systemFailureé)ZduplicateCertReqéNrNrrrrrQ×s<årQc@s<eZdZdZe e deƒ”e de ƒ”e de ƒ””Z dS)Ś PKIStatusInfoz° PKIStatusInfo ::= SEQUENCE { status PKIStatus, statusString PKIFreeText OPTIONAL, failInfo PKIFailureInfo OPTIONAL } ŚstatusZ statusStringZfailInfoN) rrrrrr"r#rGr%rrQrrrrrrfs    żrfc@s>eZdZdZe e deƒ”e de   ””e de ƒ””Z dS)ŚErrorMsgContenta7 ErrorMsgContent ::= SEQUENCE { pKIStatusInfo PKIStatusInfo, errorCode INTEGER OPTIONAL, -- implementation-specific error codes errorDetails PKIFreeText OPTIONAL -- implementation-specific error details } Z pKIStatusInfoZ errorCodeZ errorDetailsN) rrrrrr"r#rfr%rr$rrrrrrrh$s    żrhc@s@eZdZdZe e de ””e de  ””e  de ƒ””Z dS)Ś CertStatusz” CertStatus ::= SEQUENCE { certHash OCTET STRING, certReqId INTEGER, statusInfo PKIStatusInfo OPTIONAL } ZcertHashr Z statusInfoN) rrrrrr"r#rrFr$r%rfrrrrrri5s  żric@seZdZeƒZdS)ŚCertConfirmContentN)rrrrirrrrrrjDsrjc @s\eZdZdZe e deƒ”e de  ””e de   ””e de   ””e  de  ”””ZdS)Ś RevAnnContenta RevAnnContent ::= SEQUENCE { status PKIStatus, certId CertId, willBeRevokedAt GeneralizedTime, badSinceDate GeneralizedTime, crlDetails Extensions OPTIONAL } rgŚcertIdZwillBeRevokedAtZ badSinceDateZ crlDetailsN)rrrrrr"r#rGr ŚCertIdrŚGeneralizedTimer%r r6rrrrrrkHs  ūrkc@s¢eZdZdZe e deje ƒe   de ”d”e  deje ”dje   de ”e ejejd”d”e  d eje ”dje   de ”e ejejd”d””Zd S) Ś RevRepContentaI RevRepContent ::= SEQUENCE { status SEQUENCE SIZE (1..MAX) OF PKIStatusInfo, revCerts [0] SEQUENCE SIZE (1..MAX) OF CertId OPTIONAL, crls [1] SEQUENCE SIZE (1..MAX) OF CertificateList OPTIONAL rgr)rrZrevCerts©rr©rr:ZcrlsN)rrrrrr"r#rrrfrrrr%r rmr;rr<r=r>r r3rrrrrro[s* ž’ ž’ ž’óroc@s®eZdZdZe e deƒ”e de ƒj e   e j e jd”d”e deje ƒdj e   e j e jd”e de”d ”e d ejeƒdj e   e j e jd ”e de”d ””Zd S) ŚKeyRecRepContenta KeyRecRepContent ::= SEQUENCE { status PKIStatusInfo, newSigCert [0] CMPCertificate OPTIONAL, caCerts [1] SEQUENCE SIZE (1..MAX) OF CMPCertificate OPTIONAL, keyPairHist [2] SEQUENCE SIZE (1..MAX) OF CertifiedKeyPair OPTIONAL } rgZ newSigCertrr9ZcaCertsrpr)r:rZ keyPairHistrIN)rrrrrr"r#rfr%rr;rr<r=r>rrrrrr@rrrrrrrzs&  ’’ ž’ žórrc @sLeZdZdZe e de ””e de ƒ”e  de ƒ”e  de  ”””Z dS)Ś CertResponsezó CertResponse ::= SEQUENCE { certReqId INTEGER, status PKIStatusInfo, certifiedKeyPair CertifiedKeyPair OPTIONAL, rspInfo OCTET STRING OPTIONAL } r rgZcertifiedKeyPairZrspInfoN)rrrrrr"r#rr$rfr%r@rFrrrrrrs™s  ürsc @s`eZdZdZe e deje ƒdj e   de ”e ejejd”d”e dejeƒd””ZdS)ŚCertRepMessagezČ CertRepMessage ::= SEQUENCE { caPubs [1] SEQUENCE SIZE (1..MAX) OF CMPCertificate OPTIONAL, response SEQUENCE OF CertResponse } ZcaPubsrprrqŚresponseN)rrrrrr"r%rrrr;rrrrr<r=r>r#rsrrrrrrtŖs’ ż’łrtc@seZdZeƒZdS)ŚPOPODecKeyChallContentN)rrrrBrrrrrrv½srvc @sneZdZdZe e de ”j e   e j e j d”d”e de ”j e   e j e j d”d”e de ”””ZdS) Ś OOBCertHashzÅ OOBCertHash ::= SEQUENCE { hashAlg [0] AlgorithmIdentifier OPTIONAL, certId [1] CertId OPTIONAL, hashVal BIT STRING } ZhashAlgrr9rlrZhashValN)rrrrrr"r%r rEr;rr<r=r>r rmr#rŚ BitStringrrrrrrwĮs’’łrwc@seZdZdZe ”ZdS)ŚNestedMessageContentz. NestedMessageContent ::= PKIMessages N)rrrrrr-rrrrrryÖsryc@s4eZdZdZe e de ””e de ”””Z dS)Ś DHBMParametera1 DHBMParameter ::= SEQUENCE { owf AlgorithmIdentifier, -- AlgId for a One-Way Function (SHA-1 recommended) mac AlgorithmIdentifier -- the MAC AlgId (e.g., DES-MAC, Triple-DES-MAC [PKCS11], } -- or HMAC [RFC2104, RFC2202]) rCŚmacN) rrrrrr"r#r rErrrrrrzŻs žrzz1.2.840.113533.7.66.30c @s`eZdZdZe e de ”j e   dd”d”e de   ””e de ””e de   ”””Zd S) Ś PBMParameterzą PBMParameter ::= SEQUENCE { salt OCTET STRING, owf AlgorithmIdentifier, iterationCount INTEGER, mac AlgorithmIdentifier } Śsaltré€)Z subtypeSpecrCZiterationCountr{N)rrrrrr"r#rrFr;rrr rEr$rrrrrr|ļs’śr|z1.2.840.113533.7.66.13c@s eZdZdS)Ś PKIProtectionNrrrrrrsrr_r9c%@s¢eZdZdZe e de ”j e   e j e j d”d”e deƒj e   e j e j d”d”e de ”j e   e j e j d”d”e d eƒj e   e j e j d ”d”e d e ”j e   e j e j d ”d”e d eƒj e   e j e j d”d”e deƒj e   e j e j d”d”e de ”j e   e j e j d”d”e deƒj e   e j e j d”d”e de ”j e   e j e j d”d”e deƒj e   e j e j d”d”e deƒj e   e j e j d”d”e deƒj e   e j e j d”d”e de ”j e   e j e j d”d”e deƒj e   e j e j d ”d”e d!eƒj e   e j e j d"”d”e d#eƒj e   e j e j d$”d”e d%eƒj e   e j e j d&”d”e d'eƒj e   e j e j d(”d”e d)eƒj e   e j e j d*”d”e d+e”e d,eƒj e   e j e j d-”d”e d.eƒj e   e j e j d/”d”e d0eƒj e   e j e j d1”d”e d2eƒj e   e j e j d3”d”e d4e ƒj e   e j e j d5”d”e d6e!ƒj e   e j e j d7”d””Z"d8S)9ŚPKIBodyag PKIBody ::= CHOICE { -- message-specific body elements ir [0] CertReqMessages, --Initialization Request ip [1] CertRepMessage, --Initialization Response cr [2] CertReqMessages, --Certification Request cp [3] CertRepMessage, --Certification Response p10cr [4] CertificationRequest, --imported from [PKCS10] popdecc [5] POPODecKeyChallContent, --pop Challenge popdecr [6] POPODecKeyRespContent, --pop Response kur [7] CertReqMessages, --Key Update Request kup [8] CertRepMessage, --Key Update Response krr [9] CertReqMessages, --Key Recovery Request krp [10] KeyRecRepContent, --Key Recovery Response rr [11] RevReqContent, --Revocation Request rp [12] RevRepContent, --Revocation Response ccr [13] CertReqMessages, --Cross-Cert. Request ccp [14] CertRepMessage, --Cross-Cert. Response ckuann [15] CAKeyUpdAnnContent, --CA Key Update Ann. cann [16] CertAnnContent, --Certificate Ann. rann [17] RevAnnContent, --Revocation Ann. crlann [18] CRLAnnContent, --CRL Announcement pkiconf [19] PKIConfirmContent, --Confirmation nested [20] NestedMessageContent, --Nested Message genm [21] GenMsgContent, --General Message genp [22] GenRepContent, --General Response error [23] ErrorMsgContent, --Error Message certConf [24] CertConfirmContent, --Certificate confirm pollReq [25] PollReqContent, --Polling request pollRep [26] PollRepContent --Polling response Zirrr9ŚiprŚcrrIŚcprJZp10crrKZpopdeccrLZpopdecrrMZkurrRZkuprSZkrrrTZkrprUŚrrrVŚrprWZccrrXZccprYZckuannrZZcannr[Zrannr\Zcrlannr]Zpkiconfr^ŚnestedZgenmr`ŚgenraŚerrorrbZcertConfrcZpollReqrdZpollRepreN)#rrrrrr"r#r ZCertReqMessagesr;rr<r=r>rtr ZCertificationRequestrvrArrr7ror4rrkr2r1ŚnestedMessageContentr0r.rhrjr)rrrrrrr€s ’’’’ ’’’’ ’’’’’’ ’’’’ ’’’’’’’’ ’’’’’’’’’’’’’’’’’’’’’’’’’’’€ūr€c@s¦eZdZdZe e deje   dd”d”e de   ””e de   ””e  de ”je ejejd ”d ”e  d e  ”je ejejd ”d ”e  d e  ”je ejejd”d ”e  de  ”je ejejd”d ”e  de ”je ejejd”d ”e  de ”je ejejd”d ”e  de ”je ejejd”d ”e  deƒje ejejd”d ”e  dejeƒje d e”ddje ejejd”d ”” ZdS)Ś PKIHeaderač PKIHeader ::= SEQUENCE { pvno INTEGER { cmp1999(1), cmp2000(2) }, sender GeneralName, recipient GeneralName, messageTime [0] GeneralizedTime OPTIONAL, protectionAlg [1] AlgorithmIdentifier OPTIONAL, senderKID [2] KeyIdentifier OPTIONAL, recipKID [3] KeyIdentifier OPTIONAL, transactionID [4] OCTET STRING OPTIONAL, senderNonce [5] OCTET STRING OPTIONAL, recipNonce [6] OCTET STRING OPTIONAL, freeText [7] PKIFreeText OPTIONAL, generalInfo [8] SEQUENCE SIZE (1..MAX) OF InfoTypeAndValue OPTIONAL } Zpvno)Zcmp1999r)Zcmp2000rI)rPZsenderZ recipientZ messageTimerr9Z protectionAlgrZ senderKIDrIZrecipKIDrJZ transactionIDrKZ senderNoncerLZ recipNoncerMZfreeTextrRZ generalInfo)rrprSN) rrrrrr"r#rr$rrOr Z GeneralNamer%rrnr;rr<r=ŚtagFormatSimplerEr>r rFrrr*rrrrrrrrrŠ¼sV ’’’’’’’’’ ’ ’’ū’črŠc@s0eZdZdZe e deƒ”e deƒ””Z dS)Ś ProtectedPartzg ProtectedPart ::= SEQUENCE { header PKIHeader, body PKIBody } Śheaderr+N) rrrrrr"r#rŠr€rrrrrrŒņs   žrŒc@s†eZdZdZe e deƒ”e deƒ”e  de ƒj e   e je jd”d”e  dejeƒdj e d e”e   e je jd ”d ””Zd S) Ś PKIMessagezé PKIMessage ::= SEQUENCE { header PKIHeader, body PKIBody, protection [0] PKIProtection OPTIONAL, extraCerts [1] SEQUENCE SIZE (1..MAX) OF CMPCertificate OPTIONAL }rŚbodyZ protectionrr9Z extraCertsrprrqN)rrrrrr"r#rŠr€r%rr;rr<r=r‹rrrrrrr>rrrrrrŽ’s    ’’ ü’ūrŽc@s*eZdZdZeƒZejje   de ”ZdS)Ś PKIMessagesz> PKIMessages ::= SEQUENCE SIZE (1..MAX) OF PKIMessage rN) rrrrrŽrrrrrrrrrrrrsrN)HZ pyasn1.typerrrrrrrZpyasn1_modulesr r r ŚfloatrrFr Z Certificaterrrrrrr)r(r*r.r0ŚNullr1r2r4r5r7ŚChoicer8r@rArBr$rGrxrQrfrhrirjrkrorrrsrtrvrwryrzr,Z id_DHBasedMacr|Zid_PasswordBasedMacrr;r<r=r>r‰r€rŠrŒrŽrZ_componentTyperrrrŚ sv             >  ’.6