You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
120 lines
3.6 KiB
120 lines
3.6 KiB
2 years ago
|
# This file is being contributed to pyasn1-modules software.
|
||
|
|
#
|
||
|
|
# Created by Russ Housley with assistance from asn1ate v.0.6.0.
|
||
|
|
#
|
||
|
|
# Copyright (c) 2019, Vigil Security, LLC
|
||
|
|
# License: http://snmplabs.com/pyasn1/license.html
|
||
|
|
#
|
||
|
|
# Trust Anchor Format
|
||
|
|
#
|
||
|
|
# ASN.1 source from:
|
||
|
|
# https://www.rfc-editor.org/rfc/rfc5914.txt
|
||
|
|
|
||
|
|
from pyasn1.type import char
|
||
|
|
from pyasn1.type import constraint
|
||
|
|
from pyasn1.type import namedtype
|
||
|
|
from pyasn1.type import namedval
|
||
|
|
from pyasn1.type import tag
|
||
|
|
from pyasn1.type import univ
|
||
|
|
|
||
|
|
from pyasn1_modules import rfc5280
|
||
|
|
|
||
|
|
|
||
|
|
MAX = float('inf')
|
||
|
|
|
||
|
|
Certificate = rfc5280.Certificate
|
||
|
|
|
||
|
|
Name = rfc5280.Name
|
||
|
|
|
||
|
|
Extensions = rfc5280.Extensions
|
||
|
|
|
||
|
|
SubjectPublicKeyInfo = rfc5280.SubjectPublicKeyInfo
|
||
|
|
|
||
|
|
TBSCertificate = rfc5280.TBSCertificate
|
||
|
|
|
||
|
|
CertificatePolicies = rfc5280.CertificatePolicies
|
||
|
|
|
||
|
|
KeyIdentifier = rfc5280.KeyIdentifier
|
||
|
|
|
||
|
|
NameConstraints = rfc5280.NameConstraints
|
||
|
|
|
||
|
|
|
||
|
|
class CertPolicyFlags(univ.BitString):
|
||
|
|
pass
|
||
|
|
|
||
|
|
CertPolicyFlags.namedValues = namedval.NamedValues(
|
||
|
|
('inhibitPolicyMapping', 0),
|
||
|
|
('requireExplicitPolicy', 1),
|
||
|
|
('inhibitAnyPolicy', 2)
|
||
|
|
)
|
||
|
|
|
||
|
|
|
||
|
|
class CertPathControls(univ.Sequence):
|
||
|
|
pass
|
||
|
|
|
||
|
|
CertPathControls.componentType = namedtype.NamedTypes(
|
||
|
|
namedtype.NamedType('taName', Name()),
|
||
|
|
namedtype.OptionalNamedType('certificate', Certificate().subtype(
|
||
|
|
implicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatSimple, 0))),
|
||
|
|
namedtype.OptionalNamedType('policySet', CertificatePolicies().subtype(
|
||
|
|
implicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatSimple, 1))),
|
||
|
|
namedtype.OptionalNamedType('policyFlags', CertPolicyFlags().subtype(
|
||
|
|
implicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatSimple, 2))),
|
||
|
|
namedtype.OptionalNamedType('nameConstr', NameConstraints().subtype(
|
||
|
|
implicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatSimple, 3))),
|
||
|
|
namedtype.OptionalNamedType('pathLenConstraint', univ.Integer().subtype(
|
||
|
|
subtypeSpec=constraint.ValueRangeConstraint(0, MAX)).subtype(
|
||
|
|
implicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatSimple, 4)))
|
||
|
|
)
|
||
|
|
|
||
|
|
|
||
|
|
class TrustAnchorTitle(char.UTF8String):
|
||
|
|
pass
|
||
|
|
|
||
|
|
TrustAnchorTitle.subtypeSpec = constraint.ValueSizeConstraint(1, 64)
|
||
|
|
|
||
|
|
|
||
|
|
class TrustAnchorInfoVersion(univ.Integer):
|
||
|
|
pass
|
||
|
|
|
||
|
|
TrustAnchorInfoVersion.namedValues = namedval.NamedValues(
|
||
|
|
('v1', 1)
|
||
|
|
)
|
||
|
|
|
||
|
|
|
||
|
|
class TrustAnchorInfo(univ.Sequence):
|
||
|
|
pass
|
||
|
|
|
||
|
|
TrustAnchorInfo.componentType = namedtype.NamedTypes(
|
||
|
|
namedtype.DefaultedNamedType('version', TrustAnchorInfoVersion().subtype(value='v1')),
|
||
|
|
namedtype.NamedType('pubKey', SubjectPublicKeyInfo()),
|
||
|
|
namedtype.NamedType('keyId', KeyIdentifier()),
|
||
|
|
namedtype.OptionalNamedType('taTitle', TrustAnchorTitle()),
|
||
|
|
namedtype.OptionalNamedType('certPath', CertPathControls()),
|
||
|
|
namedtype.OptionalNamedType('exts', Extensions().subtype(explicitTag=tag.Tag(
|
||
|
|
tag.tagClassContext, tag.tagFormatSimple, 1))),
|
||
|
|
namedtype.OptionalNamedType('taTitleLangTag', char.UTF8String().subtype(
|
||
|
|
implicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatSimple, 2)))
|
||
|
|
)
|
||
|
|
|
||
|
|
|
||
|
|
class TrustAnchorChoice(univ.Choice):
|
||
|
|
pass
|
||
|
|
|
||
|
|
TrustAnchorChoice.componentType = namedtype.NamedTypes(
|
||
|
|
namedtype.NamedType('certificate', Certificate()),
|
||
|
|
namedtype.NamedType('tbsCert', TBSCertificate().subtype(
|
||
|
|
explicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatSimple, 1))),
|
||
|
|
namedtype.NamedType('taInfo', TrustAnchorInfo().subtype(
|
||
|
|
explicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatConstructed, 2)))
|
||
|
|
)
|
||
|
|
|
||
|
|
|
||
|
|
id_ct_trustAnchorList = univ.ObjectIdentifier('1.2.840.113549.1.9.16.1.34')
|
||
|
|
|
||
|
|
class TrustAnchorList(univ.SequenceOf):
|
||
|
|
pass
|
||
|
|
|
||
|
|
TrustAnchorList.componentType = TrustAnchorChoice()
|
||
|
|
TrustAnchorList.subtypeSpec=constraint.ValueSizeConstraint(1, MAX)
|