123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119 |
- # This file is being contributed to pyasn1-modules software.
- #
- # Created by Russ Housley with assistance from asn1ate v.0.6.0.
- #
- # Copyright (c) 2019, Vigil Security, LLC
- # License: http://snmplabs.com/pyasn1/license.html
- #
- # Trust Anchor Format
- #
- # ASN.1 source from:
- # https://www.rfc-editor.org/rfc/rfc5914.txt
- from pyasn1.type import char
- from pyasn1.type import constraint
- from pyasn1.type import namedtype
- from pyasn1.type import namedval
- from pyasn1.type import tag
- from pyasn1.type import univ
- from pyasn1_modules import rfc5280
- MAX = float('inf')
- Certificate = rfc5280.Certificate
- Name = rfc5280.Name
- Extensions = rfc5280.Extensions
- SubjectPublicKeyInfo = rfc5280.SubjectPublicKeyInfo
- TBSCertificate = rfc5280.TBSCertificate
- CertificatePolicies = rfc5280.CertificatePolicies
- KeyIdentifier = rfc5280.KeyIdentifier
- NameConstraints = rfc5280.NameConstraints
- class CertPolicyFlags(univ.BitString):
- pass
- CertPolicyFlags.namedValues = namedval.NamedValues(
- ('inhibitPolicyMapping', 0),
- ('requireExplicitPolicy', 1),
- ('inhibitAnyPolicy', 2)
- )
- class CertPathControls(univ.Sequence):
- pass
- CertPathControls.componentType = namedtype.NamedTypes(
- namedtype.NamedType('taName', Name()),
- namedtype.OptionalNamedType('certificate', Certificate().subtype(
- implicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatSimple, 0))),
- namedtype.OptionalNamedType('policySet', CertificatePolicies().subtype(
- implicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatSimple, 1))),
- namedtype.OptionalNamedType('policyFlags', CertPolicyFlags().subtype(
- implicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatSimple, 2))),
- namedtype.OptionalNamedType('nameConstr', NameConstraints().subtype(
- implicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatSimple, 3))),
- namedtype.OptionalNamedType('pathLenConstraint', univ.Integer().subtype(
- subtypeSpec=constraint.ValueRangeConstraint(0, MAX)).subtype(
- implicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatSimple, 4)))
- )
- class TrustAnchorTitle(char.UTF8String):
- pass
- TrustAnchorTitle.subtypeSpec = constraint.ValueSizeConstraint(1, 64)
- class TrustAnchorInfoVersion(univ.Integer):
- pass
- TrustAnchorInfoVersion.namedValues = namedval.NamedValues(
- ('v1', 1)
- )
- class TrustAnchorInfo(univ.Sequence):
- pass
- TrustAnchorInfo.componentType = namedtype.NamedTypes(
- namedtype.DefaultedNamedType('version', TrustAnchorInfoVersion().subtype(value='v1')),
- namedtype.NamedType('pubKey', SubjectPublicKeyInfo()),
- namedtype.NamedType('keyId', KeyIdentifier()),
- namedtype.OptionalNamedType('taTitle', TrustAnchorTitle()),
- namedtype.OptionalNamedType('certPath', CertPathControls()),
- namedtype.OptionalNamedType('exts', Extensions().subtype(explicitTag=tag.Tag(
- tag.tagClassContext, tag.tagFormatSimple, 1))),
- namedtype.OptionalNamedType('taTitleLangTag', char.UTF8String().subtype(
- implicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatSimple, 2)))
- )
- class TrustAnchorChoice(univ.Choice):
- pass
- TrustAnchorChoice.componentType = namedtype.NamedTypes(
- namedtype.NamedType('certificate', Certificate()),
- namedtype.NamedType('tbsCert', TBSCertificate().subtype(
- explicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatSimple, 1))),
- namedtype.NamedType('taInfo', TrustAnchorInfo().subtype(
- explicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatConstructed, 2)))
- )
- id_ct_trustAnchorList = univ.ObjectIdentifier('1.2.840.113549.1.9.16.1.34')
- class TrustAnchorList(univ.SequenceOf):
- pass
- TrustAnchorList.componentType = TrustAnchorChoice()
- TrustAnchorList.subtypeSpec=constraint.ValueSizeConstraint(1, MAX)
|