You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
787 lines
23 KiB
787 lines
23 KiB
2 years ago
|
# This file is being contributed to pyasn1-modules software.
|
||
|
|
#
|
||
|
|
# Created by Russ Housley with assistance from asn1ate v.0.6.0.
|
||
|
|
#
|
||
|
|
# Copyright (c) 2019, Vigil Security, LLC
|
||
|
|
# License: http://snmplabs.com/pyasn1/license.html
|
||
|
|
#
|
||
|
|
# Trust Anchor Format
|
||
|
|
#
|
||
|
|
# ASN.1 source from:
|
||
|
|
# https://www.rfc-editor.org/rfc/rfc5934.txt
|
||
|
|
|
||
|
|
from pyasn1.type import univ, char, namedtype, namedval, tag, constraint, useful
|
||
|
|
|
||
|
|
from pyasn1_modules import rfc2985
|
||
|
|
from pyasn1_modules import rfc5280
|
||
|
|
from pyasn1_modules import rfc5652
|
||
|
|
from pyasn1_modules import rfc5914
|
||
|
|
|
||
|
|
MAX = float('inf')
|
||
|
|
|
||
|
|
|
||
|
|
def _OID(*components):
|
||
|
|
output = []
|
||
|
|
for x in tuple(components):
|
||
|
|
if isinstance(x, univ.ObjectIdentifier):
|
||
|
|
output.extend(list(x))
|
||
|
|
else:
|
||
|
|
output.append(int(x))
|
||
|
|
return univ.ObjectIdentifier(output)
|
||
|
|
|
||
|
|
|
||
|
|
# Imports from RFC 2985
|
||
|
|
|
||
|
|
SingleAttribute = rfc2985.SingleAttribute
|
||
|
|
|
||
|
|
|
||
|
|
# Imports from RFC5914
|
||
|
|
|
||
|
|
CertPathControls = rfc5914.CertPathControls
|
||
|
|
|
||
|
|
TrustAnchorChoice = rfc5914.TrustAnchorChoice
|
||
|
|
|
||
|
|
TrustAnchorTitle = rfc5914.TrustAnchorTitle
|
||
|
|
|
||
|
|
|
||
|
|
# Imports from RFC 5280
|
||
|
|
|
||
|
|
AlgorithmIdentifier = rfc5280.AlgorithmIdentifier
|
||
|
|
|
||
|
|
AnotherName = rfc5280.AnotherName
|
||
|
|
|
||
|
|
Attribute = rfc5280.Attribute
|
||
|
|
|
||
|
|
Certificate = rfc5280.Certificate
|
||
|
|
|
||
|
|
CertificateSerialNumber = rfc5280.CertificateSerialNumber
|
||
|
|
|
||
|
|
Extension = rfc5280.Extension
|
||
|
|
|
||
|
|
Extensions = rfc5280.Extensions
|
||
|
|
|
||
|
|
KeyIdentifier = rfc5280.KeyIdentifier
|
||
|
|
|
||
|
|
Name = rfc5280.Name
|
||
|
|
|
||
|
|
SubjectPublicKeyInfo = rfc5280.SubjectPublicKeyInfo
|
||
|
|
|
||
|
|
TBSCertificate = rfc5280.TBSCertificate
|
||
|
|
|
||
|
|
Validity = rfc5280.Validity
|
||
|
|
|
||
|
|
|
||
|
|
# Object Identifier Arc for TAMP Message Content Types
|
||
|
|
|
||
|
|
id_tamp = univ.ObjectIdentifier('2.16.840.1.101.2.1.2.77')
|
||
|
|
|
||
|
|
|
||
|
|
# TAMP Status Query Message
|
||
|
|
|
||
|
|
id_ct_TAMP_statusQuery = _OID(id_tamp, 1)
|
||
|
|
|
||
|
|
|
||
|
|
class TAMPVersion(univ.Integer):
|
||
|
|
pass
|
||
|
|
|
||
|
|
TAMPVersion.namedValues = namedval.NamedValues(
|
||
|
|
('v1', 1),
|
||
|
|
('v2', 2)
|
||
|
|
)
|
||
|
|
|
||
|
|
|
||
|
|
class TerseOrVerbose(univ.Enumerated):
|
||
|
|
pass
|
||
|
|
|
||
|
|
TerseOrVerbose.namedValues = namedval.NamedValues(
|
||
|
|
('terse', 1),
|
||
|
|
('verbose', 2)
|
||
|
|
)
|
||
|
|
|
||
|
|
|
||
|
|
class HardwareSerialEntry(univ.Choice):
|
||
|
|
pass
|
||
|
|
|
||
|
|
HardwareSerialEntry.componentType = namedtype.NamedTypes(
|
||
|
|
namedtype.NamedType('all', univ.Null()),
|
||
|
|
namedtype.NamedType('single', univ.OctetString()),
|
||
|
|
namedtype.NamedType('block', univ.Sequence(componentType=namedtype.NamedTypes(
|
||
|
|
namedtype.NamedType('low', univ.OctetString()),
|
||
|
|
namedtype.NamedType('high', univ.OctetString())
|
||
|
|
))
|
||
|
|
)
|
||
|
|
)
|
||
|
|
|
||
|
|
|
||
|
|
class HardwareModules(univ.Sequence):
|
||
|
|
pass
|
||
|
|
|
||
|
|
HardwareModules.componentType = namedtype.NamedTypes(
|
||
|
|
namedtype.NamedType('hwType', univ.ObjectIdentifier()),
|
||
|
|
namedtype.NamedType('hwSerialEntries', univ.SequenceOf(
|
||
|
|
componentType=HardwareSerialEntry()).subtype(
|
||
|
|
subtypeSpec=constraint.ValueSizeConstraint(1, MAX)))
|
||
|
|
)
|
||
|
|
|
||
|
|
|
||
|
|
class HardwareModuleIdentifierList(univ.SequenceOf):
|
||
|
|
pass
|
||
|
|
|
||
|
|
HardwareModuleIdentifierList.componentType = HardwareModules()
|
||
|
|
HardwareModuleIdentifierList.subtypeSpec=constraint.ValueSizeConstraint(1, MAX)
|
||
|
|
|
||
|
|
|
||
|
|
class Community(univ.ObjectIdentifier):
|
||
|
|
pass
|
||
|
|
|
||
|
|
|
||
|
|
class CommunityIdentifierList(univ.SequenceOf):
|
||
|
|
pass
|
||
|
|
|
||
|
|
CommunityIdentifierList.componentType = Community()
|
||
|
|
CommunityIdentifierList.subtypeSpec=constraint.ValueSizeConstraint(0, MAX)
|
||
|
|
|
||
|
|
|
||
|
|
class TargetIdentifier(univ.Choice):
|
||
|
|
pass
|
||
|
|
|
||
|
|
TargetIdentifier.componentType = namedtype.NamedTypes(
|
||
|
|
namedtype.NamedType('hwModules', HardwareModuleIdentifierList().subtype(
|
||
|
|
implicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatSimple, 1))),
|
||
|
|
namedtype.NamedType('communities', CommunityIdentifierList().subtype(
|
||
|
|
implicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatSimple, 2))),
|
||
|
|
namedtype.NamedType('allModules', univ.Null().subtype(
|
||
|
|
implicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatSimple, 3))),
|
||
|
|
namedtype.NamedType('uri', char.IA5String().subtype(
|
||
|
|
implicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatSimple, 4))),
|
||
|
|
namedtype.NamedType('otherName', AnotherName().subtype(
|
||
|
|
implicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatSimple, 5)))
|
||
|
|
)
|
||
|
|
|
||
|
|
|
||
|
|
class SeqNumber(univ.Integer):
|
||
|
|
pass
|
||
|
|
|
||
|
|
SeqNumber.subtypeSpec = constraint.ValueRangeConstraint(0, 9223372036854775807)
|
||
|
|
|
||
|
|
|
||
|
|
class TAMPMsgRef(univ.Sequence):
|
||
|
|
pass
|
||
|
|
|
||
|
|
TAMPMsgRef.componentType = namedtype.NamedTypes(
|
||
|
|
namedtype.NamedType('target', TargetIdentifier()),
|
||
|
|
namedtype.NamedType('seqNum', SeqNumber())
|
||
|
|
)
|
||
|
|
|
||
|
|
|
||
|
|
class TAMPStatusQuery(univ.Sequence):
|
||
|
|
pass
|
||
|
|
|
||
|
|
TAMPStatusQuery.componentType = namedtype.NamedTypes(
|
||
|
|
namedtype.DefaultedNamedType('version', TAMPVersion().subtype(
|
||
|
|
implicitTag=tag.Tag(tag.tagClassContext,
|
||
|
|
tag.tagFormatSimple, 0)).subtype(value='v2')),
|
||
|
|
namedtype.DefaultedNamedType('terse', TerseOrVerbose().subtype(
|
||
|
|
implicitTag=tag.Tag(tag.tagClassContext,
|
||
|
|
tag.tagFormatSimple, 1)).subtype(value='verbose')),
|
||
|
|
namedtype.NamedType('query', TAMPMsgRef())
|
||
|
|
)
|
||
|
|
|
||
|
|
|
||
|
|
tamp_status_query = rfc5652.ContentInfo()
|
||
|
|
tamp_status_query['contentType'] = id_ct_TAMP_statusQuery
|
||
|
|
tamp_status_query['content'] = TAMPStatusQuery()
|
||
|
|
|
||
|
|
|
||
|
|
# TAMP Status Response Message
|
||
|
|
|
||
|
|
id_ct_TAMP_statusResponse = _OID(id_tamp, 2)
|
||
|
|
|
||
|
|
|
||
|
|
class KeyIdentifiers(univ.SequenceOf):
|
||
|
|
pass
|
||
|
|
|
||
|
|
KeyIdentifiers.componentType = KeyIdentifier()
|
||
|
|
KeyIdentifiers.subtypeSpec=constraint.ValueSizeConstraint(1, MAX)
|
||
|
|
|
||
|
|
|
||
|
|
class TrustAnchorChoiceList(univ.SequenceOf):
|
||
|
|
pass
|
||
|
|
|
||
|
|
TrustAnchorChoiceList.componentType = TrustAnchorChoice()
|
||
|
|
TrustAnchorChoiceList.subtypeSpec=constraint.ValueSizeConstraint(1, MAX)
|
||
|
|
|
||
|
|
|
||
|
|
class TAMPSequenceNumber(univ.Sequence):
|
||
|
|
pass
|
||
|
|
|
||
|
|
TAMPSequenceNumber.componentType = namedtype.NamedTypes(
|
||
|
|
namedtype.NamedType('keyId', KeyIdentifier()),
|
||
|
|
namedtype.NamedType('seqNumber', SeqNumber())
|
||
|
|
)
|
||
|
|
|
||
|
|
|
||
|
|
class TAMPSequenceNumbers(univ.SequenceOf):
|
||
|
|
pass
|
||
|
|
|
||
|
|
TAMPSequenceNumbers.componentType = TAMPSequenceNumber()
|
||
|
|
TAMPSequenceNumbers.subtypeSpec=constraint.ValueSizeConstraint(1, MAX)
|
||
|
|
|
||
|
|
|
||
|
|
class TerseStatusResponse(univ.Sequence):
|
||
|
|
pass
|
||
|
|
|
||
|
|
TerseStatusResponse.componentType = namedtype.NamedTypes(
|
||
|
|
namedtype.NamedType('taKeyIds', KeyIdentifiers()),
|
||
|
|
namedtype.OptionalNamedType('communities', CommunityIdentifierList())
|
||
|
|
)
|
||
|
|
|
||
|
|
|
||
|
|
class VerboseStatusResponse(univ.Sequence):
|
||
|
|
pass
|
||
|
|
|
||
|
|
VerboseStatusResponse.componentType = namedtype.NamedTypes(
|
||
|
|
namedtype.NamedType('taInfo', TrustAnchorChoiceList()),
|
||
|
|
namedtype.OptionalNamedType('continPubKeyDecryptAlg',
|
||
|
|
AlgorithmIdentifier().subtype(implicitTag=tag.Tag(
|
||
|
|
tag.tagClassContext, tag.tagFormatSimple, 0))),
|
||
|
|
namedtype.OptionalNamedType('communities',
|
||
|
|
CommunityIdentifierList().subtype(implicitTag=tag.Tag(
|
||
|
|
tag.tagClassContext, tag.tagFormatSimple, 1))),
|
||
|
|
namedtype.OptionalNamedType('tampSeqNumbers',
|
||
|
|
TAMPSequenceNumbers().subtype(implicitTag=tag.Tag(
|
||
|
|
tag.tagClassContext, tag.tagFormatSimple, 2)))
|
||
|
|
)
|
||
|
|
|
||
|
|
|
||
|
|
class StatusResponse(univ.Choice):
|
||
|
|
pass
|
||
|
|
|
||
|
|
StatusResponse.componentType = namedtype.NamedTypes(
|
||
|
|
namedtype.NamedType('terseResponse', TerseStatusResponse().subtype(
|
||
|
|
implicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatConstructed, 0))),
|
||
|
|
namedtype.NamedType('verboseResponse', VerboseStatusResponse().subtype(
|
||
|
|
implicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatConstructed, 1)))
|
||
|
|
)
|
||
|
|
|
||
|
|
|
||
|
|
class TAMPStatusResponse(univ.Sequence):
|
||
|
|
pass
|
||
|
|
|
||
|
|
TAMPStatusResponse.componentType = namedtype.NamedTypes(
|
||
|
|
namedtype.DefaultedNamedType('version', TAMPVersion().subtype(
|
||
|
|
implicitTag=tag.Tag(tag.tagClassContext,
|
||
|
|
tag.tagFormatSimple, 0)).subtype(value='v2')),
|
||
|
|
namedtype.NamedType('query', TAMPMsgRef()),
|
||
|
|
namedtype.NamedType('response', StatusResponse()),
|
||
|
|
namedtype.DefaultedNamedType('usesApex', univ.Boolean().subtype(value=1))
|
||
|
|
)
|
||
|
|
|
||
|
|
|
||
|
|
tamp_status_response = rfc5652.ContentInfo()
|
||
|
|
tamp_status_response['contentType'] = id_ct_TAMP_statusResponse
|
||
|
|
tamp_status_response['content'] = TAMPStatusResponse()
|
||
|
|
|
||
|
|
|
||
|
|
# Trust Anchor Update Message
|
||
|
|
|
||
|
|
id_ct_TAMP_update = _OID(id_tamp, 3)
|
||
|
|
|
||
|
|
|
||
|
|
class TBSCertificateChangeInfo(univ.Sequence):
|
||
|
|
pass
|
||
|
|
|
||
|
|
TBSCertificateChangeInfo.componentType = namedtype.NamedTypes(
|
||
|
|
namedtype.OptionalNamedType('serialNumber', CertificateSerialNumber()),
|
||
|
|
namedtype.OptionalNamedType('signature', AlgorithmIdentifier().subtype(
|
||
|
|
implicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatSimple, 0))),
|
||
|
|
namedtype.OptionalNamedType('issuer', Name().subtype(implicitTag=tag.Tag(
|
||
|
|
tag.tagClassContext, tag.tagFormatSimple, 1))),
|
||
|
|
namedtype.OptionalNamedType('validity', Validity().subtype(
|
||
|
|
implicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatSimple, 2))),
|
||
|
|
namedtype.OptionalNamedType('subject', Name().subtype(implicitTag=tag.Tag(
|
||
|
|
tag.tagClassContext, tag.tagFormatSimple, 3))),
|
||
|
|
namedtype.NamedType('subjectPublicKeyInfo', SubjectPublicKeyInfo().subtype(
|
||
|
|
implicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatSimple, 4))),
|
||
|
|
namedtype.OptionalNamedType('exts', Extensions().subtype(explicitTag=tag.Tag(
|
||
|
|
tag.tagClassContext, tag.tagFormatSimple, 5)))
|
||
|
|
)
|
||
|
|
|
||
|
|
|
||
|
|
class TrustAnchorChangeInfo(univ.Sequence):
|
||
|
|
pass
|
||
|
|
|
||
|
|
TrustAnchorChangeInfo.componentType = namedtype.NamedTypes(
|
||
|
|
namedtype.NamedType('pubKey', SubjectPublicKeyInfo()),
|
||
|
|
namedtype.OptionalNamedType('keyId', KeyIdentifier()),
|
||
|
|
namedtype.OptionalNamedType('taTitle', TrustAnchorTitle()),
|
||
|
|
namedtype.OptionalNamedType('certPath', CertPathControls()),
|
||
|
|
namedtype.OptionalNamedType('exts', Extensions().subtype(
|
||
|
|
implicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatSimple, 1)))
|
||
|
|
)
|
||
|
|
|
||
|
|
|
||
|
|
class TrustAnchorChangeInfoChoice(univ.Choice):
|
||
|
|
pass
|
||
|
|
|
||
|
|
TrustAnchorChangeInfoChoice.componentType = namedtype.NamedTypes(
|
||
|
|
namedtype.NamedType('tbsCertChange', TBSCertificateChangeInfo().subtype(
|
||
|
|
implicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatConstructed, 0))),
|
||
|
|
namedtype.NamedType('taChange', TrustAnchorChangeInfo().subtype(
|
||
|
|
implicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatConstructed, 1)))
|
||
|
|
)
|
||
|
|
|
||
|
|
|
||
|
|
class TrustAnchorUpdate(univ.Choice):
|
||
|
|
pass
|
||
|
|
|
||
|
|
TrustAnchorUpdate.componentType = namedtype.NamedTypes(
|
||
|
|
namedtype.NamedType('add', TrustAnchorChoice().subtype(
|
||
|
|
implicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatSimple, 1))),
|
||
|
|
namedtype.NamedType('remove', SubjectPublicKeyInfo().subtype(
|
||
|
|
implicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatSimple, 2))),
|
||
|
|
namedtype.NamedType('change', TrustAnchorChangeInfoChoice().subtype(
|
||
|
|
explicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatConstructed, 3)))
|
||
|
|
)
|
||
|
|
|
||
|
|
|
||
|
|
class TAMPUpdate(univ.Sequence):
|
||
|
|
pass
|
||
|
|
|
||
|
|
TAMPUpdate.componentType = namedtype.NamedTypes(
|
||
|
|
namedtype.DefaultedNamedType('version',
|
||
|
|
TAMPVersion().subtype(implicitTag=tag.Tag(tag.tagClassContext,
|
||
|
|
tag.tagFormatSimple, 0)).subtype(value='v2')),
|
||
|
|
namedtype.DefaultedNamedType('terse',
|
||
|
|
TerseOrVerbose().subtype(implicitTag=tag.Tag(tag.tagClassContext,
|
||
|
|
tag.tagFormatSimple, 1)).subtype(value='verbose')),
|
||
|
|
namedtype.NamedType('msgRef', TAMPMsgRef()),
|
||
|
|
namedtype.NamedType('updates',
|
||
|
|
univ.SequenceOf(componentType=TrustAnchorUpdate()).subtype(
|
||
|
|
subtypeSpec=constraint.ValueSizeConstraint(1, MAX))),
|
||
|
|
namedtype.OptionalNamedType('tampSeqNumbers',
|
||
|
|
TAMPSequenceNumbers().subtype(implicitTag=tag.Tag(
|
||
|
|
tag.tagClassContext, tag.tagFormatSimple, 2)))
|
||
|
|
)
|
||
|
|
|
||
|
|
|
||
|
|
tamp_update = rfc5652.ContentInfo()
|
||
|
|
tamp_update['contentType'] = id_ct_TAMP_update
|
||
|
|
tamp_update['content'] = TAMPUpdate()
|
||
|
|
|
||
|
|
|
||
|
|
# Trust Anchor Update Confirm Message
|
||
|
|
|
||
|
|
id_ct_TAMP_updateConfirm = _OID(id_tamp, 4)
|
||
|
|
|
||
|
|
|
||
|
|
class StatusCode(univ.Enumerated):
|
||
|
|
pass
|
||
|
|
|
||
|
|
StatusCode.namedValues = namedval.NamedValues(
|
||
|
|
('success', 0),
|
||
|
|
('decodeFailure', 1),
|
||
|
|
('badContentInfo', 2),
|
||
|
|
('badSignedData', 3),
|
||
|
|
('badEncapContent', 4),
|
||
|
|
('badCertificate', 5),
|
||
|
|
('badSignerInfo', 6),
|
||
|
|
('badSignedAttrs', 7),
|
||
|
|
('badUnsignedAttrs', 8),
|
||
|
|
('missingContent', 9),
|
||
|
|
('noTrustAnchor', 10),
|
||
|
|
('notAuthorized', 11),
|
||
|
|
('badDigestAlgorithm', 12),
|
||
|
|
('badSignatureAlgorithm', 13),
|
||
|
|
('unsupportedKeySize', 14),
|
||
|
|
('unsupportedParameters', 15),
|
||
|
|
('signatureFailure', 16),
|
||
|
|
('insufficientMemory', 17),
|
||
|
|
('unsupportedTAMPMsgType', 18),
|
||
|
|
('apexTAMPAnchor', 19),
|
||
|
|
('improperTAAddition', 20),
|
||
|
|
('seqNumFailure', 21),
|
||
|
|
('contingencyPublicKeyDecrypt', 22),
|
||
|
|
('incorrectTarget', 23),
|
||
|
|
('communityUpdateFailed', 24),
|
||
|
|
('trustAnchorNotFound', 25),
|
||
|
|
('unsupportedTAAlgorithm', 26),
|
||
|
|
('unsupportedTAKeySize', 27),
|
||
|
|
('unsupportedContinPubKeyDecryptAlg', 28),
|
||
|
|
('missingSignature', 29),
|
||
|
|
('resourcesBusy', 30),
|
||
|
|
('versionNumberMismatch', 31),
|
||
|
|
('missingPolicySet', 32),
|
||
|
|
('revokedCertificate', 33),
|
||
|
|
('unsupportedTrustAnchorFormat', 34),
|
||
|
|
('improperTAChange', 35),
|
||
|
|
('malformed', 36),
|
||
|
|
('cmsError', 37),
|
||
|
|
('unsupportedTargetIdentifier', 38),
|
||
|
|
('other', 127)
|
||
|
|
)
|
||
|
|
|
||
|
|
|
||
|
|
class StatusCodeList(univ.SequenceOf):
|
||
|
|
pass
|
||
|
|
|
||
|
|
StatusCodeList.componentType = StatusCode()
|
||
|
|
StatusCodeList.subtypeSpec=constraint.ValueSizeConstraint(1, MAX)
|
||
|
|
|
||
|
|
|
||
|
|
class TerseUpdateConfirm(StatusCodeList):
|
||
|
|
pass
|
||
|
|
|
||
|
|
|
||
|
|
class VerboseUpdateConfirm(univ.Sequence):
|
||
|
|
pass
|
||
|
|
|
||
|
|
VerboseUpdateConfirm.componentType = namedtype.NamedTypes(
|
||
|
|
namedtype.NamedType('status', StatusCodeList()),
|
||
|
|
namedtype.NamedType('taInfo', TrustAnchorChoiceList()),
|
||
|
|
namedtype.OptionalNamedType('tampSeqNumbers', TAMPSequenceNumbers()),
|
||
|
|
namedtype.DefaultedNamedType('usesApex', univ.Boolean().subtype(value=1))
|
||
|
|
)
|
||
|
|
|
||
|
|
|
||
|
|
class UpdateConfirm(univ.Choice):
|
||
|
|
pass
|
||
|
|
|
||
|
|
UpdateConfirm.componentType = namedtype.NamedTypes(
|
||
|
|
namedtype.NamedType('terseConfirm', TerseUpdateConfirm().subtype(
|
||
|
|
implicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatSimple, 0))),
|
||
|
|
namedtype.NamedType('verboseConfirm', VerboseUpdateConfirm().subtype(
|
||
|
|
implicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatConstructed, 1)))
|
||
|
|
)
|
||
|
|
|
||
|
|
|
||
|
|
class TAMPUpdateConfirm(univ.Sequence):
|
||
|
|
pass
|
||
|
|
|
||
|
|
TAMPUpdateConfirm.componentType = namedtype.NamedTypes(
|
||
|
|
namedtype.DefaultedNamedType('version', TAMPVersion().subtype(
|
||
|
|
implicitTag=tag.Tag(tag.tagClassContext,
|
||
|
|
tag.tagFormatSimple, 0)).subtype(value='v2')),
|
||
|
|
namedtype.NamedType('update', TAMPMsgRef()),
|
||
|
|
namedtype.NamedType('confirm', UpdateConfirm())
|
||
|
|
)
|
||
|
|
|
||
|
|
|
||
|
|
tamp_update_confirm = rfc5652.ContentInfo()
|
||
|
|
tamp_update_confirm['contentType'] = id_ct_TAMP_updateConfirm
|
||
|
|
tamp_update_confirm['content'] = TAMPUpdateConfirm()
|
||
|
|
|
||
|
|
|
||
|
|
# Apex Trust Anchor Update Message
|
||
|
|
|
||
|
|
id_ct_TAMP_apexUpdate = _OID(id_tamp, 5)
|
||
|
|
|
||
|
|
|
||
|
|
class TAMPApexUpdate(univ.Sequence):
|
||
|
|
pass
|
||
|
|
|
||
|
|
TAMPApexUpdate.componentType = namedtype.NamedTypes(
|
||
|
|
namedtype.DefaultedNamedType('version',
|
||
|
|
TAMPVersion().subtype(implicitTag=tag.Tag(tag.tagClassContext,
|
||
|
|
tag.tagFormatSimple, 0)).subtype(value='v2')),
|
||
|
|
namedtype.DefaultedNamedType('terse',
|
||
|
|
TerseOrVerbose().subtype(implicitTag=tag.Tag(tag.tagClassContext,
|
||
|
|
tag.tagFormatSimple, 1)).subtype(value='verbose')),
|
||
|
|
namedtype.NamedType('msgRef', TAMPMsgRef()),
|
||
|
|
namedtype.NamedType('clearTrustAnchors', univ.Boolean()),
|
||
|
|
namedtype.NamedType('clearCommunities', univ.Boolean()),
|
||
|
|
namedtype.OptionalNamedType('seqNumber', SeqNumber()),
|
||
|
|
namedtype.NamedType('apexTA', TrustAnchorChoice())
|
||
|
|
)
|
||
|
|
|
||
|
|
|
||
|
|
tamp_apex_update = rfc5652.ContentInfo()
|
||
|
|
tamp_apex_update['contentType'] = id_ct_TAMP_apexUpdate
|
||
|
|
tamp_apex_update['content'] = TAMPApexUpdate()
|
||
|
|
|
||
|
|
|
||
|
|
# Apex Trust Anchor Update Confirm Message
|
||
|
|
|
||
|
|
id_ct_TAMP_apexUpdateConfirm = _OID(id_tamp, 6)
|
||
|
|
|
||
|
|
|
||
|
|
class TerseApexUpdateConfirm(StatusCode):
|
||
|
|
pass
|
||
|
|
|
||
|
|
|
||
|
|
class VerboseApexUpdateConfirm(univ.Sequence):
|
||
|
|
pass
|
||
|
|
|
||
|
|
VerboseApexUpdateConfirm.componentType = namedtype.NamedTypes(
|
||
|
|
namedtype.NamedType('status', StatusCode()),
|
||
|
|
namedtype.NamedType('taInfo', TrustAnchorChoiceList()),
|
||
|
|
namedtype.OptionalNamedType('communities',
|
||
|
|
CommunityIdentifierList().subtype(implicitTag=tag.Tag(tag.tagClassContext,
|
||
|
|
tag.tagFormatSimple, 0))),
|
||
|
|
namedtype.OptionalNamedType('tampSeqNumbers',
|
||
|
|
TAMPSequenceNumbers().subtype(implicitTag=tag.Tag(tag.tagClassContext,
|
||
|
|
tag.tagFormatSimple, 1)))
|
||
|
|
)
|
||
|
|
|
||
|
|
|
||
|
|
class ApexUpdateConfirm(univ.Choice):
|
||
|
|
pass
|
||
|
|
|
||
|
|
ApexUpdateConfirm.componentType = namedtype.NamedTypes(
|
||
|
|
namedtype.NamedType('terseApexConfirm',
|
||
|
|
TerseApexUpdateConfirm().subtype(implicitTag=tag.Tag(tag.tagClassContext,
|
||
|
|
tag.tagFormatSimple, 0))),
|
||
|
|
namedtype.NamedType('verboseApexConfirm',
|
||
|
|
VerboseApexUpdateConfirm().subtype(implicitTag=tag.Tag(tag.tagClassContext,
|
||
|
|
tag.tagFormatConstructed, 1)))
|
||
|
|
)
|
||
|
|
|
||
|
|
|
||
|
|
class TAMPApexUpdateConfirm(univ.Sequence):
|
||
|
|
pass
|
||
|
|
|
||
|
|
TAMPApexUpdateConfirm.componentType = namedtype.NamedTypes(
|
||
|
|
namedtype.DefaultedNamedType('version',
|
||
|
|
TAMPVersion().subtype(implicitTag=tag.Tag(tag.tagClassContext,
|
||
|
|
tag.tagFormatSimple, 0)).subtype(value='v2')),
|
||
|
|
namedtype.NamedType('apexReplace', TAMPMsgRef()),
|
||
|
|
namedtype.NamedType('apexConfirm', ApexUpdateConfirm())
|
||
|
|
)
|
||
|
|
|
||
|
|
|
||
|
|
tamp_apex_update_confirm = rfc5652.ContentInfo()
|
||
|
|
tamp_apex_update_confirm['contentType'] = id_ct_TAMP_apexUpdateConfirm
|
||
|
|
tamp_apex_update_confirm['content'] = TAMPApexUpdateConfirm()
|
||
|
|
|
||
|
|
|
||
|
|
# Community Update Message
|
||
|
|
|
||
|
|
id_ct_TAMP_communityUpdate = _OID(id_tamp, 7)
|
||
|
|
|
||
|
|
|
||
|
|
class CommunityUpdates(univ.Sequence):
|
||
|
|
pass
|
||
|
|
|
||
|
|
CommunityUpdates.componentType = namedtype.NamedTypes(
|
||
|
|
namedtype.OptionalNamedType('remove',
|
||
|
|
CommunityIdentifierList().subtype(implicitTag=tag.Tag(tag.tagClassContext,
|
||
|
|
tag.tagFormatSimple, 1))),
|
||
|
|
namedtype.OptionalNamedType('add',
|
||
|
|
CommunityIdentifierList().subtype(implicitTag=tag.Tag(tag.tagClassContext,
|
||
|
|
tag.tagFormatSimple, 2)))
|
||
|
|
)
|
||
|
|
|
||
|
|
|
||
|
|
class TAMPCommunityUpdate(univ.Sequence):
|
||
|
|
pass
|
||
|
|
|
||
|
|
TAMPCommunityUpdate.componentType = namedtype.NamedTypes(
|
||
|
|
namedtype.DefaultedNamedType('version',
|
||
|
|
TAMPVersion().subtype(implicitTag=tag.Tag(tag.tagClassContext,
|
||
|
|
tag.tagFormatSimple, 0)).subtype(value='v2')),
|
||
|
|
namedtype.DefaultedNamedType('terse',
|
||
|
|
TerseOrVerbose().subtype(implicitTag=tag.Tag(tag.tagClassContext,
|
||
|
|
tag.tagFormatSimple, 1)).subtype(value='verbose')),
|
||
|
|
namedtype.NamedType('msgRef', TAMPMsgRef()),
|
||
|
|
namedtype.NamedType('updates', CommunityUpdates())
|
||
|
|
)
|
||
|
|
|
||
|
|
|
||
|
|
tamp_community_update = rfc5652.ContentInfo()
|
||
|
|
tamp_community_update['contentType'] = id_ct_TAMP_communityUpdate
|
||
|
|
tamp_community_update['content'] = TAMPCommunityUpdate()
|
||
|
|
|
||
|
|
|
||
|
|
# Community Update Confirm Message
|
||
|
|
|
||
|
|
id_ct_TAMP_communityUpdateConfirm = _OID(id_tamp, 8)
|
||
|
|
|
||
|
|
|
||
|
|
class TerseCommunityConfirm(StatusCode):
|
||
|
|
pass
|
||
|
|
|
||
|
|
|
||
|
|
class VerboseCommunityConfirm(univ.Sequence):
|
||
|
|
pass
|
||
|
|
|
||
|
|
VerboseCommunityConfirm.componentType = namedtype.NamedTypes(
|
||
|
|
namedtype.NamedType('status', StatusCode()),
|
||
|
|
namedtype.OptionalNamedType('communities', CommunityIdentifierList())
|
||
|
|
)
|
||
|
|
|
||
|
|
|
||
|
|
class CommunityConfirm(univ.Choice):
|
||
|
|
pass
|
||
|
|
|
||
|
|
CommunityConfirm.componentType = namedtype.NamedTypes(
|
||
|
|
namedtype.NamedType('terseCommConfirm',
|
||
|
|
TerseCommunityConfirm().subtype(implicitTag=tag.Tag(tag.tagClassContext,
|
||
|
|
tag.tagFormatSimple, 0))),
|
||
|
|
namedtype.NamedType('verboseCommConfirm',
|
||
|
|
VerboseCommunityConfirm().subtype(implicitTag=tag.Tag(tag.tagClassContext,
|
||
|
|
tag.tagFormatConstructed, 1)))
|
||
|
|
)
|
||
|
|
|
||
|
|
|
||
|
|
class TAMPCommunityUpdateConfirm(univ.Sequence):
|
||
|
|
pass
|
||
|
|
|
||
|
|
TAMPCommunityUpdateConfirm.componentType = namedtype.NamedTypes(
|
||
|
|
namedtype.DefaultedNamedType('version',
|
||
|
|
TAMPVersion().subtype(implicitTag=tag.Tag(tag.tagClassContext,
|
||
|
|
tag.tagFormatSimple, 0)).subtype(value='v2')),
|
||
|
|
namedtype.NamedType('update', TAMPMsgRef()),
|
||
|
|
namedtype.NamedType('commConfirm', CommunityConfirm())
|
||
|
|
)
|
||
|
|
|
||
|
|
|
||
|
|
tamp_community_update_confirm = rfc5652.ContentInfo()
|
||
|
|
tamp_community_update_confirm['contentType'] = id_ct_TAMP_communityUpdateConfirm
|
||
|
|
tamp_community_update_confirm['content'] = TAMPCommunityUpdateConfirm()
|
||
|
|
|
||
|
|
|
||
|
|
# Sequence Number Adjust Message
|
||
|
|
|
||
|
|
id_ct_TAMP_seqNumAdjust = _OID(id_tamp, 10)
|
||
|
|
|
||
|
|
|
||
|
|
|
||
|
|
class SequenceNumberAdjust(univ.Sequence):
|
||
|
|
pass
|
||
|
|
|
||
|
|
SequenceNumberAdjust.componentType = namedtype.NamedTypes(
|
||
|
|
namedtype.DefaultedNamedType('version',
|
||
|
|
TAMPVersion().subtype(implicitTag=tag.Tag(tag.tagClassContext,
|
||
|
|
tag.tagFormatSimple, 0)).subtype(value='v2')),
|
||
|
|
namedtype.NamedType('msgRef', TAMPMsgRef())
|
||
|
|
)
|
||
|
|
|
||
|
|
|
||
|
|
tamp_sequence_number_adjust = rfc5652.ContentInfo()
|
||
|
|
tamp_sequence_number_adjust['contentType'] = id_ct_TAMP_seqNumAdjust
|
||
|
|
tamp_sequence_number_adjust['content'] = SequenceNumberAdjust()
|
||
|
|
|
||
|
|
|
||
|
|
# Sequence Number Adjust Confirm Message
|
||
|
|
|
||
|
|
id_ct_TAMP_seqNumAdjustConfirm = _OID(id_tamp, 11)
|
||
|
|
|
||
|
|
|
||
|
|
class SequenceNumberAdjustConfirm(univ.Sequence):
|
||
|
|
pass
|
||
|
|
|
||
|
|
SequenceNumberAdjustConfirm.componentType = namedtype.NamedTypes(
|
||
|
|
namedtype.DefaultedNamedType('version',
|
||
|
|
TAMPVersion().subtype(implicitTag=tag.Tag(tag.tagClassContext,
|
||
|
|
tag.tagFormatSimple, 0)).subtype(value='v2')),
|
||
|
|
namedtype.NamedType('adjust', TAMPMsgRef()),
|
||
|
|
namedtype.NamedType('status', StatusCode())
|
||
|
|
)
|
||
|
|
|
||
|
|
|
||
|
|
tamp_sequence_number_adjust_confirm = rfc5652.ContentInfo()
|
||
|
|
tamp_sequence_number_adjust_confirm['contentType'] = id_ct_TAMP_seqNumAdjustConfirm
|
||
|
|
tamp_sequence_number_adjust_confirm['content'] = SequenceNumberAdjustConfirm()
|
||
|
|
|
||
|
|
|
||
|
|
# TAMP Error Message
|
||
|
|
|
||
|
|
id_ct_TAMP_error = _OID(id_tamp, 9)
|
||
|
|
|
||
|
|
|
||
|
|
class TAMPError(univ.Sequence):
|
||
|
|
pass
|
||
|
|
|
||
|
|
TAMPError.componentType = namedtype.NamedTypes(
|
||
|
|
namedtype.DefaultedNamedType('version',
|
||
|
|
TAMPVersion().subtype(implicitTag=tag.Tag(tag.tagClassContext,
|
||
|
|
tag.tagFormatSimple, 0)).subtype(value='v2')),
|
||
|
|
namedtype.NamedType('msgType', univ.ObjectIdentifier()),
|
||
|
|
namedtype.NamedType('status', StatusCode()),
|
||
|
|
namedtype.OptionalNamedType('msgRef', TAMPMsgRef())
|
||
|
|
)
|
||
|
|
|
||
|
|
|
||
|
|
tamp_error = rfc5652.ContentInfo()
|
||
|
|
tamp_error['contentType'] = id_ct_TAMP_error
|
||
|
|
tamp_error['content'] = TAMPError()
|
||
|
|
|
||
|
|
|
||
|
|
# Object Identifier Arc for Attributes
|
||
|
|
|
||
|
|
id_attributes = univ.ObjectIdentifier('2.16.840.1.101.2.1.5')
|
||
|
|
|
||
|
|
|
||
|
|
# contingency-public-key-decrypt-key unsigned attribute
|
||
|
|
|
||
|
|
id_aa_TAMP_contingencyPublicKeyDecryptKey = _OID(id_attributes, 63)
|
||
|
|
|
||
|
|
|
||
|
|
class PlaintextSymmetricKey(univ.OctetString):
|
||
|
|
pass
|
||
|
|
|
||
|
|
|
||
|
|
contingency_public_key_decrypt_key = Attribute()
|
||
|
|
contingency_public_key_decrypt_key['type'] = id_aa_TAMP_contingencyPublicKeyDecryptKey
|
||
|
|
contingency_public_key_decrypt_key['values'][0] = PlaintextSymmetricKey()
|
||
|
|
|
||
|
|
|
||
|
|
# id-pe-wrappedApexContinKey extension
|
||
|
|
|
||
|
|
id_pe_wrappedApexContinKey =univ.ObjectIdentifier('1.3.6.1.5.5.7.1.20')
|
||
|
|
|
||
|
|
|
||
|
|
class ApexContingencyKey(univ.Sequence):
|
||
|
|
pass
|
||
|
|
|
||
|
|
ApexContingencyKey.componentType = namedtype.NamedTypes(
|
||
|
|
namedtype.NamedType('wrapAlgorithm', AlgorithmIdentifier()),
|
||
|
|
namedtype.NamedType('wrappedContinPubKey', univ.OctetString())
|
||
|
|
)
|
||
|
|
|
||
|
|
|
||
|
|
wrappedApexContinKey = Extension()
|
||
|
|
wrappedApexContinKey['extnID'] = id_pe_wrappedApexContinKey
|
||
|
|
wrappedApexContinKey['critical'] = 0
|
||
|
|
wrappedApexContinKey['extnValue'] = univ.OctetString()
|
||
|
|
|
||
|
|
|
||
|
|
# Add to the map of CMS Content Type OIDs to Content Types in
|
||
|
|
# rfc5652.py
|
||
|
|
|
||
|
|
_cmsContentTypesMapUpdate = {
|
||
|
|
id_ct_TAMP_statusQuery: TAMPStatusQuery(),
|
||
|
|
id_ct_TAMP_statusResponse: TAMPStatusResponse(),
|
||
|
|
id_ct_TAMP_update: TAMPUpdate(),
|
||
|
|
id_ct_TAMP_updateConfirm: TAMPUpdateConfirm(),
|
||
|
|
id_ct_TAMP_apexUpdate: TAMPApexUpdate(),
|
||
|
|
id_ct_TAMP_apexUpdateConfirm: TAMPApexUpdateConfirm(),
|
||
|
|
id_ct_TAMP_communityUpdate: TAMPCommunityUpdate(),
|
||
|
|
id_ct_TAMP_communityUpdateConfirm: TAMPCommunityUpdateConfirm(),
|
||
|
|
id_ct_TAMP_seqNumAdjust: SequenceNumberAdjust(),
|
||
|
|
id_ct_TAMP_seqNumAdjustConfirm: SequenceNumberAdjustConfirm(),
|
||
|
|
id_ct_TAMP_error: TAMPError(),
|
||
|
|
}
|
||
|
|
|
||
|
|
rfc5652.cmsContentTypesMap.update(_cmsContentTypesMapUpdate)
|
||
|
|
|
||
|
|
|
||
|
|
# Add to the map of CMS Attribute OIDs to Attribute Values in
|
||
|
|
# rfc5652.py
|
||
|
|
|
||
|
|
_cmsAttributesMapUpdate = {
|
||
|
|
id_aa_TAMP_contingencyPublicKeyDecryptKey: PlaintextSymmetricKey(),
|
||
|
|
}
|
||
|
|
|
||
|
|
rfc5652.cmsAttributesMap.update(_cmsAttributesMapUpdate)
|
||
|
|
|
||
|
|
|
||
|
|
# Add to the map of Certificate Extension OIDs to Extensions in
|
||
|
|
# rfc5280.py
|
||
|
|
|
||
|
|
_certificateExtensionsMap = {
|
||
|
|
id_pe_wrappedApexContinKey: ApexContingencyKey(),
|
||
|
|
}
|
||
|
|
|
||
|
|
rfc5280.certificateExtensionsMap.update(_certificateExtensionsMap)
|