123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305 |
- # This file is dual licensed under the terms of the Apache License, Version
- # 2.0, and the BSD License. See the LICENSE file in the root of this repository
- # for complete details.
- import abc
- import ipaddress
- import typing
- from email.utils import parseaddr
- from cryptography.x509.name import Name
- from cryptography.x509.oid import ObjectIdentifier
- _IPADDRESS_TYPES = typing.Union[
- ipaddress.IPv4Address,
- ipaddress.IPv6Address,
- ipaddress.IPv4Network,
- ipaddress.IPv6Network,
- ]
- class UnsupportedGeneralNameType(Exception):
- pass
- class GeneralName(metaclass=abc.ABCMeta):
- @abc.abstractproperty
- def value(self) -> typing.Any:
- """
- Return the value of the object
- """
- class RFC822Name(GeneralName):
- def __init__(self, value: str) -> None:
- if isinstance(value, str):
- try:
- value.encode("ascii")
- except UnicodeEncodeError:
- raise ValueError(
- "RFC822Name values should be passed as an A-label string. "
- "This means unicode characters should be encoded via "
- "a library like idna."
- )
- else:
- raise TypeError("value must be string")
- name, address = parseaddr(value)
- if name or not address:
- # parseaddr has found a name (e.g. Name <email>) or the entire
- # value is an empty string.
- raise ValueError("Invalid rfc822name value")
- self._value = value
- @property
- def value(self) -> str:
- return self._value
- @classmethod
- def _init_without_validation(cls, value: str) -> "RFC822Name":
- instance = cls.__new__(cls)
- instance._value = value
- return instance
- def __repr__(self) -> str:
- return "<RFC822Name(value={0!r})>".format(self.value)
- def __eq__(self, other: object) -> bool:
- if not isinstance(other, RFC822Name):
- return NotImplemented
- return self.value == other.value
- def __ne__(self, other: object) -> bool:
- return not self == other
- def __hash__(self) -> int:
- return hash(self.value)
- class DNSName(GeneralName):
- def __init__(self, value: str) -> None:
- if isinstance(value, str):
- try:
- value.encode("ascii")
- except UnicodeEncodeError:
- raise ValueError(
- "DNSName values should be passed as an A-label string. "
- "This means unicode characters should be encoded via "
- "a library like idna."
- )
- else:
- raise TypeError("value must be string")
- self._value = value
- @property
- def value(self) -> str:
- return self._value
- @classmethod
- def _init_without_validation(cls, value: str) -> "DNSName":
- instance = cls.__new__(cls)
- instance._value = value
- return instance
- def __repr__(self) -> str:
- return "<DNSName(value={0!r})>".format(self.value)
- def __eq__(self, other: object) -> bool:
- if not isinstance(other, DNSName):
- return NotImplemented
- return self.value == other.value
- def __ne__(self, other: object) -> bool:
- return not self == other
- def __hash__(self) -> int:
- return hash(self.value)
- class UniformResourceIdentifier(GeneralName):
- def __init__(self, value: str) -> None:
- if isinstance(value, str):
- try:
- value.encode("ascii")
- except UnicodeEncodeError:
- raise ValueError(
- "URI values should be passed as an A-label string. "
- "This means unicode characters should be encoded via "
- "a library like idna."
- )
- else:
- raise TypeError("value must be string")
- self._value = value
- @property
- def value(self) -> str:
- return self._value
- @classmethod
- def _init_without_validation(
- cls, value: str
- ) -> "UniformResourceIdentifier":
- instance = cls.__new__(cls)
- instance._value = value
- return instance
- def __repr__(self) -> str:
- return "<UniformResourceIdentifier(value={0!r})>".format(self.value)
- def __eq__(self, other: object) -> bool:
- if not isinstance(other, UniformResourceIdentifier):
- return NotImplemented
- return self.value == other.value
- def __ne__(self, other: object) -> bool:
- return not self == other
- def __hash__(self) -> int:
- return hash(self.value)
- class DirectoryName(GeneralName):
- def __init__(self, value: Name) -> None:
- if not isinstance(value, Name):
- raise TypeError("value must be a Name")
- self._value = value
- @property
- def value(self) -> Name:
- return self._value
- def __repr__(self) -> str:
- return "<DirectoryName(value={})>".format(self.value)
- def __eq__(self, other: object) -> bool:
- if not isinstance(other, DirectoryName):
- return NotImplemented
- return self.value == other.value
- def __ne__(self, other: object) -> bool:
- return not self == other
- def __hash__(self) -> int:
- return hash(self.value)
- class RegisteredID(GeneralName):
- def __init__(self, value: ObjectIdentifier) -> None:
- if not isinstance(value, ObjectIdentifier):
- raise TypeError("value must be an ObjectIdentifier")
- self._value = value
- @property
- def value(self) -> ObjectIdentifier:
- return self._value
- def __repr__(self) -> str:
- return "<RegisteredID(value={})>".format(self.value)
- def __eq__(self, other: object) -> bool:
- if not isinstance(other, RegisteredID):
- return NotImplemented
- return self.value == other.value
- def __ne__(self, other: object) -> bool:
- return not self == other
- def __hash__(self) -> int:
- return hash(self.value)
- class IPAddress(GeneralName):
- def __init__(self, value: _IPADDRESS_TYPES) -> None:
- if not isinstance(
- value,
- (
- ipaddress.IPv4Address,
- ipaddress.IPv6Address,
- ipaddress.IPv4Network,
- ipaddress.IPv6Network,
- ),
- ):
- raise TypeError(
- "value must be an instance of ipaddress.IPv4Address, "
- "ipaddress.IPv6Address, ipaddress.IPv4Network, or "
- "ipaddress.IPv6Network"
- )
- self._value = value
- @property
- def value(self) -> _IPADDRESS_TYPES:
- return self._value
- def _packed(self) -> bytes:
- if isinstance(
- self.value, (ipaddress.IPv4Address, ipaddress.IPv6Address)
- ):
- return self.value.packed
- else:
- return (
- self.value.network_address.packed + self.value.netmask.packed
- )
- def __repr__(self) -> str:
- return "<IPAddress(value={})>".format(self.value)
- def __eq__(self, other: object) -> bool:
- if not isinstance(other, IPAddress):
- return NotImplemented
- return self.value == other.value
- def __ne__(self, other: object) -> bool:
- return not self == other
- def __hash__(self) -> int:
- return hash(self.value)
- class OtherName(GeneralName):
- def __init__(self, type_id: ObjectIdentifier, value: bytes) -> None:
- if not isinstance(type_id, ObjectIdentifier):
- raise TypeError("type_id must be an ObjectIdentifier")
- if not isinstance(value, bytes):
- raise TypeError("value must be a binary string")
- self._type_id = type_id
- self._value = value
- @property
- def type_id(self) -> ObjectIdentifier:
- return self._type_id
- @property
- def value(self) -> bytes:
- return self._value
- def __repr__(self) -> str:
- return "<OtherName(type_id={}, value={!r})>".format(
- self.type_id, self.value
- )
- def __eq__(self, other: object) -> bool:
- if not isinstance(other, OtherName):
- return NotImplemented
- return self.type_id == other.type_id and self.value == other.value
- def __ne__(self, other: object) -> bool:
- return not self == other
- def __hash__(self) -> int:
- return hash((self.type_id, self.value))
|