+ 1ji ^RIHt^RIt^RIt^RIt^RIHt^RIHt^RI H t ^RI H t ^RIHtHtHtHtHtHtHtHtHt^RIHtHt^R IHtHtHt^R IH t H!t!^R I"H#t#]P!R ^^4t$]PJ] PL] PN] PP] PR] PT] PV] PX] PZ3,t.!R R]/4t0RRlt1RRlt2RRlt3!RR4t4!RR4t5!RR]Pl4t7!RR]/4t8] Prt9] Ptt:] Pvt;] Pxt<] Pzt=] P|t>] P~t?] Pt@] PtA] PtB] PtC!RR4tD!RR 4tE!R!R"4tF!R#R$4tGR%R&ltHR#)') annotationsN)Iterable)utils)x509)hashes) dsaeced448ed25519mldsapaddingrsax448x25519) CertificateIssuerPrivateKeyTypesCertificatePublicKeyTypes) Extension ExtensionType_make_sequence_methods)Name _ASN1Type)ObjectIdentifieric.a]tRt^6tRV3RlltRtV;t#)AttributeNotFoundc$V^8dQhRRRRRR/#)msgstroidrreturnNone)formats"6lib/python3.14/site-packages/cryptography/x509/base.py __annotate__AttributeNotFound.__annotate__7s"C&64c 2<\SV`V4W nR#N)super__init__r)selfrr __class__s&&&r$r+AttributeNotFound.__init__7s r')r__name__ __module__ __qualname____firstlineno__r+__static_attributes__ __classcell__r-s@r$rr6s r'rc$V^8dQhRRRRRR/#)r extensionzExtension[ExtensionType] extensionslist[Extension[ExtensionType]]r r!r")r#s"r$r%r%<s+EE'E.E Er'cdVF)pVPVP8XgK \R4h R#)z$This extension has already been set.N)r ValueError)r8r9es&& r$_reject_duplicate_extensionr><s*  55IMM !CD Dr'c$V^8dQhRRRRRR/#)rrr attributes0list[tuple[ObjectIdentifier, bytes, int | None]]r r!r")r#s"r$r%r%Fs+EE E@E Er'cBVFwppW 8XgK\R4h R#)z$This attribute has already been set.N)r<)rr@attr_oid_s&& r$_reject_duplicate_attributerEFs% %!Q ?CD D%r'c V^8dQhRRRR/#)rtimedatetime.datetimer r")r#s"r$r%r%Ps  %6 ;L r'cVPeIVP4pV'dTM\P!4pVP RR7V, #V#)zNormalizes a datetime to a naive datetime in UTC. time -- datetime to normalize. Assumed to be in UTC if not timezone aware. N)tzinfo)rJ utcoffsetdatetime timedeltareplace)rGoffsets& r$_convert_to_naive_utc_timerPPsG  {{!!x'9'9';||4|(611 r'c]tRt^^t]P P 3RRllt]RRl4t ]RRl4tRRlt R R lt R R lt R t R#) Attributec(V^8dQhRRRRRRRR/#) rrrvaluebytes_typeintr r!r")r#s"r$r%Attribute.__annotate___s2    r'c *WnW nW0nR#r))_oid_valuerV)r,rrTrVs&&&&r$r+Attribute.__init___s    r'cV^8dQhRR/#)rr rr")r#s"r$r%rXjs%r'c VP#r))rZr,s&r$r Attribute.oidis yyr'cV^8dQhRR/#)rr rUr")r#s"r$r%rXnsur'c VP#r))r[r_s&r$rTAttribute.valuems {{r'cV^8dQhRR/#rr rr")r#s"r$r%rXqsDD#Dr'c >RVP RVP: R2#)z)rrTr_s&r$__repr__Attribute.__repr__qs  (4::.CCr'c V^8dQhRRRR/#)rotherobjectr boolr")r#s"r$r%rXts  F t r'c \V\4'g\#VPVP8H;'d;VPVP8H;'dVP VP 8H#r)) isinstancerRNotImplementedrrTrV)r,rks&&r$__eq__Attribute.__eq__ts`%++! ! HH ! * * ekk) * * ekk) r'cV^8dQhRR/#rr rWr")r#s"r$r%rX~s88#8r'c Z\VPVPVP34#r))hashrrTrVr_s&r$__hash__Attribute.__hash__~s TXXtzz4::677r')rZrVr[N)r0r1r2r3r UTF8StringrTr+propertyrrhrqrwr4r"r'r$rRrR^sU ))// D 88r'rRcR]tRt^tRRlt]!R4wtttRRlt RRlt Rt R #) Attributesc V^8dQhRRRR/#)rr@zIterable[Attribute]r r!r")r#s"r$r%Attributes.__annotate__s,,', ,r'c &\V4VnR#r))list _attributes)r,r@s&&r$r+Attributes.__init__s +r'rcV^8dQhRR/#rer")r#s"r$r%r~s33#3r'c "RVP R2#)z ?EEr'rN) r0r1r2r3r+r__len____iter__ __getitem__rhrr4r"r'r$r|r|s+, &rrrrr,rrr8s&&& r$ add_extension.CertificateSigningRequestBuilder.add_extensionsm &-00@A Afjj(; #I/?/?@/    *d * *     r'_tagc(V^8dQhRRRRRRRR/#) rrrrTrUrz_ASN1Type | Noner rr")r#s"r$r%rs2      *  r'c \V\4'g \R4h\V\4'g \R4hVe"\V\4'g \R4h\ WP 4VeVPpMRp\VPVP.VP OWV3N4#)z; Adds an X.509 attribute with an OID and associated value. zoid must be an ObjectIdentifierzvalue must be bytesNztag must be _ASN1Type) rorrrUrrErrTrrr)r,rrTrtags&&&$ r$ add_attribute.CertificateSigningRequestBuilder.add_attributes#/00=> >%''12 2  JtY$?$?34 4#C)9)9:  **CC/       2d 2S 1 2  r' rsa_paddingecdsa_deterministicc 0V^8dQhRRRRRRRRR R R R /#) r private_keyr algorithm_AllowedHashTypes | Nonebackend typing.Anyr%padding.PSS | padding.PKCS1v15 | Noner bool | Noner CertificateSigningRequestr")r#s"r$r%rsF! ! 5! ,!  ! ; ! )!  #! r'c VPf \R4hVeg\V\P\P 34'g \ R4h\V\P4'g \ R4hVe,\V\P4'g \ R4h\P!VVVVV4#)z6 Signs the request using the requestor's private key. z/A CertificateSigningRequest must have a subjectPadding must be PSS or PKCS1v15&Padding is only supported for RSA keys1Deterministic ECDSA is only supported for EC keys) rr<ror PSSPKCS1v15rr RSAPrivateKeyr EllipticCurvePrivateKey rust_x509create_x509_csrr,rrrrrs&&&&$$r$sign%CertificateSigningRequestBuilder.signs    %NO O  "kGKK9I9I+JKK ABBk3+<+<== HII  *k2+E+EFFG((        r')rrrr)) r0r1r2r3r+rrrrr4r"r'r$rrsK%)57GI &   $ "&  @! >B ! ,0! ! r'rc]tRtRt$R]R&RRRRRR.R3RRlltRRltR R ltR R/R R lltRRlt RRlt RRlt RRlt RR RRR/RRlllt RtR#)CertificateBuilderi%r:rNc<V^8dQhRRRRRRRRRR R R R R R RRR/ #)r issuer_namerr public_keyz CertificatePublicKeyTypes | None serial_number int | Nonenot_valid_beforedatetime.datetime | Nonenot_valid_afterr9r:public_key_rsa_paddingtype[padding.PSS] | Noner r!r")r#s"r$r%CertificateBuilder.__annotate__(sd>> >">5 > " > 3 >2>3>!9> >r'c  \PVnWnW nW0nW@nWPnW`nWpn Wn R#r)) rr_version _issuer_namer _public_key_serial_number_not_valid_before_not_valid_afterr_public_key_rsa_padding) r,rrrrrrr9rs &&&&&&&&&r$r+CertificateBuilder.__init__(s?  ')%+!1 /%'=$r'c V^8dQhRRRR/#rrrr rr")r#s"r$r%r=s   ); r'c  &\V\4'g \R4hVPe \ R4h\ VVP VPVPVPVPVPVP4#)z# Sets the CA's distinguished name. r%The issuer name may only be set once.) rorrrr<rrrrrrrrrs&&r$rCertificateBuilder.issuer_name=s$%%9: :    (DE E!            " "  ! !     ( (  r'c V^8dQhRRRR/#rr")r#s"r$r%rPs   *< r'c  &\V\4'g \R4hVPe \ R4h\ VP VVPVPVPVPVPVP4#)z* Sets the requestor's distinguished name. rr) rorrrr<rrrrrrrrrs&&r$rCertificateBuilder.subject_namePs$%%9: :    )EF F!            " "  ! !     ( (  r'rc$V^8dQhRRRRRR/#)rkeyrrrr rr")r#s"r$r%rcs(3 3 &3 . 3  3 r'c  \V\P\P\ P \P\P\P\P\P\P \"P$3 4'g \'R4hVeKV\(P*Jd \'R4h\V\P4'g \'R4hVP,e \/R4h\1VP2VP4VVP6VP8VP:VP<V4#)zD Sets the requestor's public key (as found in the signing request). zExpecting one of DSAPublicKey, RSAPublicKey, EllipticCurvePublicKey, Ed25519PublicKey, Ed448PublicKey, MLDSA44PublicKey, MLDSA65PublicKey, MLDSA87PublicKey, X25519PublicKey, or X448PublicKey.z2rsa_padding must be the PSS class, not an instancez2rsa_padding is only supported with RSA public keysz$The public key may only be set once.)ror DSAPublicKeyr RSAPublicKeyr EllipticCurvePublicKeyr Ed25519PublicKeyr Ed448PublicKeyr MLDSA44PublicKeyMLDSA65PublicKeyMLDSA87PublicKeyrX25519PublicKeyr X448PublicKeyrr rrr<rrrrrrr)r,rrs&&$r$rCertificateBuilder.public_keycs3     ))(($$&&&&&&&&""   !   "'++-Hc3#3#344H    'CD D!            " "  ! !      r'c V^8dQhRRRR/#)rnumberrWr rr")r#s"r$r%rs  C ,> r'c  \V\4'g \R4hVPe \ R4hV^8:d \ R4hVP 4^8d \ R4h\ VPVPVPVVPVPVPVP4#)z% Sets the certificate serial number. 'Serial number must be of integral type.'The serial number may only be set once.z%The serial number should be positive.3The serial number should not be more than 159 bits.)rorWrrr< bit_lengthrrrrrrrrr,rs&&r$r CertificateBuilder.serial_numbers&#&&EF F    *FG G Q;DE E    # %E "            " "  ! !     ( (  r'c V^8dQhRRRR/#rrGrHr rr")r#s"r$r%rs  %6 ;M r'c  \V\P4'g \R4hVPe \ R4h\ V4pV\ 8d \ R4hVPeWP8d \ R4h\VPVPVPVPVVPVPVP4#)z' Sets the certificate activation time. Expecting datetime object.z*The not valid before may only be set once.z>The not valid before date must be on or after 1950 January 1).zBThe not valid before date must be before the not valid after date.)rorLrrr<rP_EARLIEST_UTC_TIMErrrrrrrrr,rGs&&r$r#CertificateBuilder.not_valid_befores$ 1 12289 9  ! ! -IJ J)$/ $ $$   ,8M8M1M "               ! !     ( (  r'c V^8dQhRRRR/#rr")r#s"r$r%rs  $5 :L r'c  \V\P4'g \R4hVPe \ R4h\ V4pV\ 8d \ R4hVPeWP8d \ R4h\VPVPVPVPVPVVPVP4#)z' Sets the certificate expiration time. r z)The not valid after may only be set once.zrrrrrrrrrrs&&& r$r CertificateBuilder.add_extensions &-00@A Afjj(; #I/?/?@!              " "  ! ! *d * *  ( (  r'rc 0V^8dQhRRRRRRRRR R R R /#) rrrrrrrrrrrr Certificater")r#s"r$r%r sF0 0 50 ,0  0 ; 0 )0  0 r'c VPf \R4hVPf \R4hVPf \R4hVPf \R4hVP f \R4hVP f \R4hVeg\V\P\P34'g \R4h\V\P4'g \R4hVe,\V\P4'g \R 4h\ P"!VVVVV4#) z3 Signs the certificate using the CA's private key. z&A certificate must have a subject namez&A certificate must have an issuer namez'A certificate must have a serial numberz/A certificate must have a not valid before timez.A certificate must have a not valid after timez$A certificate must have a public keyrrr)rr<rrrrrror rrrrrr rrcreate_x509_certificaters&&&&$$r$rCertificateBuilder.sign s.    %EF F    $EF F    &FG G  ! ! )NO O  (MN N    #CD D  "kGKK9I9I+JKK ABBk3+<+<== HII  *k2+E+EFFG00        r') rrrrrrrrrr))r0r1r2r3__annotations__r+rrrrrrrrr4r"r'r$rr%su//$($(7;$(594857;?>* & &3 15 3 j 8 < @ .0 >B 0 ,00 0 r'rc]tRtRt$R]R&R]R&RRR..3RRlltR R ltR R ltR RltRRlt RRlt RRRRR/RRlllt Rt R#) CertificateRevocationListBuilderi<r:rlist[RevokedCertificate]_revoked_certificatesNc ,V^8dQhRRRRRRRRRR /#) rrr last_updater next_updater9r:revoked_certificatesrr")r#s"r$r%-CertificateRevocationListBuilder.__annotate__@s< : :  :. :. : 3 : 7 :r'c BWnW nW0nW@nWPnR#r))r _last_update _next_updaterr)r,rrr r9r!s&&&&&&r$r+)CertificateRevocationListBuilder.__init__@s"(''%%9"r'c V^8dQhRRRR/#)rrrr rr")r#s"r$r%r"Ns     )  r'c \V\4'g \R4hVPe \ R4h\ VVP VPVPVP4#)rr) rorrrr<rr$r%rr)r,rs&&r$r,CertificateRevocationListBuilder.issuer_nameNsi+t,,9: :    (DE E/            & &   r'c V^8dQhRRRR/#)rrrHr rr")r#s"r$r%r"]  , ) r'c \V\P4'g \R4hVPe \ R4h\ V4pV\ 8d \ R4hVPeWP8d \ R4h\VPVVPVPVP4#)r !Last update may only be set once.8The last update date must be on or after 1950 January 1.z9The last update date must be before the next update date.) rorLrr$r<rPr r%rrrr)r,rs&&r$r,CertificateRevocationListBuilder.last_update]s+x'8'89989 9    (@A A0= + +J     ([;L;L-LK 0            & &   r'c V^8dQhRRRR/#)rr rHr rr")r#s"r$r%r"ur+r'c \V\P4'g \R4hVPe \ R4h\ V4pV\ 8d \ R4hVPeWP8d \ R4h\VPVPVVPVP4#)r r-r.z8The next update date must be after the last update date.) rorLrr%r<rPr r$rrrr)r,r s&&r$r ,CertificateRevocationListBuilder.next_updateus+x'8'89989 9    (@A A0= + +J     ([;L;L-LJ 0            & &   r'c$V^8dQhRRRRRR/#)rrrrrmr rr")r#s"r$r%r"s$  # /3 ) r'c $\V\4'g \R4h\VPW!4p\ W0P 4\VPVPVP.VP OVNVP4#)z= Adds an X.509 extension to the certificate revocation list. r) rorrrrr>rrrr$r%rrs&&& r$r.CertificateRevocationListBuilder.add_extensions &-00@A Afjj(; #I/?/?@/          *d * *  & &   r'c V^8dQhRRRR/#)rrevoked_certificateRevokedCertificater rr")r#s"r$r%r"s  #5 ) r'c \V\4'g \R4h\VPVP VP VP.VPOVN4#)z( Adds a revoked certificate to the CRL. z)Must be an instance of RevokedCertificate) ror8rrrr$r%rr)r,r7s&&r$add_revoked_certificate8CertificateRevocationListBuilder.add_revoked_certificatesd -/ABBGH H/             >d(( >*= >   r'rrc 0V^8dQhRRRRRRRRR R R R /#) rrrrrrrrrrrr CertificateRevocationListr")r#s"r$r%r"sF$ $ 5$ ,$  $ ; $ )$  #$ r'c VPf \R4hVPf \R4hVPf \R4hVeg\ V\ P \ P34'g \R4h\ V\P4'g \R4hVe,\ V\P4'g \R4h\P!VVVVV4#)NzA CRL must have an issuer namez"A CRL must have a last update timez"A CRL must have a next update timerrr)rr<r$r%ror rrrrrr rrcreate_x509_crlrs&&&&$$r$r%CertificateRevocationListBuilder.signs    $=> >    $AB B    $AB B  "kGKK9I9I+JKK ABBk3+<+<== HII  *k2+E+EFFG((        r')rrr$r%rr)) r0r1r2r3rr+rrr rr:rr4r"r'r$rr<s\//33$(0404579; :   0 0 & "$ >B $ ,0$ $ r'rc`]tRtRtRR.3RRlltRRltRRltR R ltRR R lltR t R#)RevokedCertificateBuilderiNc$V^8dQhRRRRRR/#)rrrrevocation_daterr9r:r")r#s"r$r%&RevokedCertificateBuilder.__annotate__s(&&!&2&3 &r'c *WnW nW0nR#r))r_revocation_dater)r,rrDr9s&&&&r$r+"RevokedCertificateBuilder.__init__s , /%r'c V^8dQhRRRR/#)rrrWr rBr")r#s"r$r%rEs  C ,E r'c \V\4'g \R4hVPe \ R4hV^8:d \ R4hVP 4^8d \ R4h\ WPVP4#)rrz$The serial number should be positiver) rorWrrr<rrBrGrrs&&r$r'RevokedCertificateBuilder.serial_numbers&#&&EF F    *FG G Q;CD D    # %E ) ))4+;+;  r'c V^8dQhRRRR/#)rrGrHr rBr")r#s"r$r%rEs  % " r'c \V\P4'g \R4hVPe \ R4h\ V4pV\ 8d \ R4h\VPWP4#)r z)The revocation date may only be set once.z7The revocation date must be on or after 1950 January 1.) rorLrrGr<rPr rBrrr s&&r$rD)RevokedCertificateBuilder.revocation_dates~$ 1 12289 9  ,HI I)$/ $ $I )   '7'7  r'c$V^8dQhRRRRRR/#)rrrrrmr rBr")r#s"r$r%rEs$   #  /3  "  r'c \V\4'g \R4h\VPW!4p\ W0P 4\VPVP.VP OVN4#)r) rorrrrr>rrBrrGrs&&& r$r'RevokedCertificateBuilder.add_extensionsm&-00@A Afjj(; #I/?/?@(     ! ! *d * *  r'c V^8dQhRRRR/#)rrrr r8r")r#s"r$r%rEs::Z:3E:r'c VPf \R4hVPf \R4h\P!V4#)Nz/A revoked certificate must have a serial numberz1A revoked certificate must have a revocation date)rr<rGrcreate_revoked_certificate)r,rs&&r$buildRevokedCertificateBuilder.buildsI    &NO O  (C 33D99r')rrGrr)) r0r1r2r3r+rrDrrUr4r"r'r$rBrBs+%)4857 & $  ::r'rBcV^8dQhRR/#rtr")r#s"r$r%r%s66c6r'cd\P\P!^4R4^, #)big)rW from_bytesosurandomr"r'r$random_serial_numberr^s >>"**R.% 0A 55r')I __future__rrLr\typingcollections.abcr cryptographyr"cryptography.hazmat.bindings._rustrrcryptography.hazmat.primitivesr)cryptography.hazmat.primitives.asymmetricrr r r r r rrr/cryptography.hazmat.primitives.asymmetric.typesrrcryptography.x509.extensionsrrrcryptography.x509.namerrcryptography.x509.oidrr UnionSHA224SHA256SHA384SHA512SHA3_224SHA3_256SHA3_384SHA3_512_AllowedHashTypes Exceptionrr>rErPrRr|Enumrrrr8r=rload_pem_x509_certificateload_der_x509_certificateload_pem_x509_certificatesload_pem_x509_csrload_der_x509_csrload_pem_x509_crlload_der_x509_crlrrrrBr^r"r'r$r}s # $@1    32&&tQ2LL MM MM MM MM OO OO OO OO   EE !8!8HFF( ejj -Y- ## 11&??%??&??%??&AA////////m m `T T nY Y xB:B:J6r'