Cji SSKJr SSKrSSKrSSKrSSKJr SSKJr SSK J r SSK J r SSKJrJrJrJrJrJrJrJrJr SSKJrJr SS KJrJrJr SS KJ r J!r! SS K"J#r# \R"S S S 5r$\RJ\ RL\ RN\ RP\ RR\ RT\ RV\ RX\ RZ4r."SS\/5r0S$Sjr1S%Sjr2S&Sjr3"SS5r4"SS5r5"SS\Rl5r7"SS\/5r8\ Rrr9\ Rtr:\ Rvr;\ Rxr<\ Rzr=\ R|r>\ R~r?\ Rr@\ RrA\ RrB\ RrC"SS5rD"SS5rE"SS 5rF"S!S"5rGS'S#jrHg)() annotationsN)Iterable)utils)x509)hashes) dsaeced448ed25519mldsapaddingrsax448x25519) CertificateIssuerPrivateKeyTypesCertificatePublicKeyTypes) Extension ExtensionType_make_sequence_methods)Name _ASN1Type)ObjectIdentifieric,^\rSrSrSU4SjjrSrU=r$)AttributeNotFound6c0>[TU]U5 X lgN)super__init__oid)selfmsgr! __class__s h/home/rurouni/.local/share/pipx/venvs/strix-agent/lib/python3.13/site-packages/cryptography/x509/base.pyr AttributeNotFound.__init__7s )r!)r#strr!rreturnNone__name__ __module__ __qualname____firstlineno__r __static_attributes__ __classcell__r$s@r%rr6s r'rc`UH(nURUR:XdM[S5e g)Nz$This extension has already been set.)r! ValueError) extension extensionses r%_reject_duplicate_extensionr8<s*  55IMM !CD Dr'c>UHun nX :XdM[S5e g)Nz$This attribute has already been set.)r4)r! attributesattr_oid_s r%_reject_duplicate_attributer=Fs% %!Q ?CD D%r'cURb@UR5nU(aUO[R"5nUR SS9U- $U$)zNormalizes a datetime to a naive datetime in UTC. time -- datetime to normalize. Assumed to be in UTC if not timezone aware. N)tzinfo)r? utcoffsetdatetime timedeltareplace)timeoffsets r%_convert_to_naive_utc_timerFPsG  {{!!x'9'9';||4|(611 r'c\rSrSr\R R 4S Sjjr\S Sj5r \S Sj5rS Sjr SSjr SSjr Sr g ) Attribute^c(XlX lX0lgr)_oid_value_type)r"r!valuerMs r%r Attribute.__init___s    r'cUR$r)rKr"s r%r! Attribute.oidis yyr'cUR$r)rLrQs r%rNAttribute.valuems {{r'c>SURSUR<S3$)Nz)r!rNrQs r%__repr__Attribute.__repr__qs  (4::.CCr'c[U[5(d[$URUR:H=(a9 URUR:H=(a UR UR :H$r) isinstancerHNotImplementedr!rNrM)r"others r%__eq__Attribute.__eq__tsV%++! ! HH ! * ekk) * ekk) r'cZ[URURUR45$r)hashr!rNrMrQs r%__hash__Attribute.__hash__~s TXXtzz4::677r')rKrMrLN)r!rrNbytesrMintr)r*)r)r)r)rcr)r()r\objectr)boolr)rd)r,r-r.r/r UTF8StringrNr propertyr!rWr]rar0r'r%rHrH^sv ))//     D 8r'rHcR\rSrSrSSjr\"S5urrrS Sjr S Sjr Sr g) Attributesc$[U5Ulgr)list _attributes)r"r:s r%r Attributes.__init__s +r'rqc"SURS3$)Nz ?EEr'rtN)r:zIterable[Attribute]r)r*re)r!rr)rH) r,r-r.r/r r__len____iter__ __getitem__rWrxr0rkr'r%rmrms7,', , &[TU]U5 X lgr)rr parsed_version)r"r#rr$s r%r InvalidVersion.__init__s ,r')r)r#r(rrdr)r*r+r2s@r%rrs --r'rc\rSrSrS//4S SjjrS SjrS SjrSS.SSjjrSSSS.SS jjjrS r g) CertificateSigningRequestBuilderNc(XlX lX0lg)z2 Creates an empty X.509 certificate request (v1). N) _subject_name _extensionsrq)r" subject_namer6r:s r%r )CertificateSigningRequestBuilder.__init__s*%%r'c[U[5(d [S5eURb [ S5e[ XR UR5$)z6 Sets the certificate requestor's distinguished name. Expecting x509.Name object.&The subject name may only be set once.)rZr TypeErrorrr4rrrqr"names r%r-CertificateSigningRequestBuilder.subject_namesS$%%9: :    )EF F/ ""D$4$4  r'c[U[5(d [S5e[URX!5n[ X0R 5 [UR/UR QUPUR5$)z5 Adds an X.509 extension to the certificate request. "extension must be an ExtensionType) rZrrrr!r8rrrrqr"extvalcriticalr5s r% add_extension.CertificateSigningRequestBuilder.add_extensionsm &-00@A Afjj(; #I/?/?@/    *d * *     r')_tagcx[U[5(d [S5e[U[5(d [S5eUb [U[5(d [S5e[ XR 5 Ub URnOSn[URUR/UR QXU4P5$)z; Adds an X.509 attribute with an OID and associated value. zoid must be an ObjectIdentifierzvalue must be bytesNztag must be _ASN1Type) rZrrrcrr=rqrNrrr)r"r!rNrtags r% add_attribute.CertificateSigningRequestBuilder.add_attributes#/00=> >%''12 2  JtY$?$?34 4#C)9)9:  **CC/       2d 2S 1 2  r' rsa_paddingecdsa_deterministiccURc [S5eUbd[U[R[R 45(d [ S5e[U[R5(d [ S5eUb*[U[R5(d [ S5e[R"UUUUU5$)z6 Signs the request using the requestor's private key. z/A CertificateSigningRequest must have a subjectPadding must be PSS or PKCS1v15&Padding is only supported for RSA keys1Deterministic ECDSA is only supported for EC keys) rr4rZr PSSPKCS1v15rr RSAPrivateKeyr EllipticCurvePrivateKey rust_x509create_x509_csrr" private_key algorithmbackendrrs r%sign%CertificateSigningRequestBuilder.signs    %NO O  "kGKK9I9I+JKK ABBk3+<+<== HII  *k2+E+EFFG((        r')rqrr)r Name | Noner6list[Extension[ExtensionType]]r:0list[tuple[ObjectIdentifier, bytes, int | None]])rrr)r)rrrrgr)r)r!rrNrcrz_ASN1Type | Noner)rr) rrr_AllowedHashTypes | Noner typing.Anyr%padding.PSS | padding.PKCS1v15 | Noner bool | Noner)CertificateSigningRequest) r,r-r.r/r rrrrr0rkr'r%rrs%)57GI &! &3 &E &   # /3 ) ."&      *  H# ! >B+/! 5! ,!  ! ; ! )!  #! ! r'rc\rSrSr%S\S'SSSSSS/S4SSjjrSSjrSSjrSS.SS jjrSS jr SS jr SS jr SS jr SSSS.SSjjjr Srg)CertificateBuilderi%rrNc [RUlXlX lX0lX@lXPlX`lXpl Xl gr) r~r_version _issuer_namer _public_key_serial_number_not_valid_before_not_valid_afterr_public_key_rsa_padding) r" issuer_namer public_key serial_numbernot_valid_beforenot_valid_afterr6public_key_rsa_paddings r%r CertificateBuilder.__init__(s?  ')%+!1 /%'=$r'c "[U[5(d [S5eURb [ S5e[ UUR URURURURURUR5$)z# Sets the CA's distinguished name. r%The issuer name may only be set once.) rZrrrr4rrrrrrrrrs r%rCertificateBuilder.issuer_name=s$%%9: :    (DE E!            " "  ! !     ( (  r'c "[U[5(d [S5eURb [ S5e[ UR UURURURURURUR5$)z* Sets the requestor's distinguished name. rr) rZrrrr4rrrrrrrrrs r%rCertificateBuilder.subject_namePs$%%9: :    )EF F!            " "  ! !     ( (  r')rc [U[R[R[ R [R[R[R[R[R[R ["R$4 5(d ['S5eUbHU[(R*La ['S5e[U[R5(d ['S5eUR,b [/S5e[1UR2UR4UUR6UR8UR:UR<U5$)zD Sets the requestor's public key (as found in the signing request). zExpecting one of DSAPublicKey, RSAPublicKey, EllipticCurvePublicKey, Ed25519PublicKey, Ed448PublicKey, MLDSA44PublicKey, MLDSA65PublicKey, MLDSA87PublicKey, X25519PublicKey, or X448PublicKey.z2rsa_padding must be the PSS class, not an instancez2rsa_padding is only supported with RSA public keysz$The public key may only be set once.)rZr DSAPublicKeyr RSAPublicKeyr EllipticCurvePublicKeyr Ed25519PublicKeyr Ed448PublicKeyr MLDSA44PublicKeyMLDSA65PublicKeyMLDSA87PublicKeyrX25519PublicKeyr X448PublicKeyrr rrr4rrrrrrr)r"keyrs r%rCertificateBuilder.public_keycs3     ))(($$&&&&&&&&""   !   "'++-Hc3#3#344H    'CD D!            " "  ! !      r'c [U[5(d [S5eURb [ S5eUS::a [ S5eUR 5S:a [ S5e[ URURURUURURURUR5$)z% Sets the certificate serial number. 'Serial number must be of integral type.'The serial number may only be set once.rz%The serial number should be positive.3The serial number should not be more than 159 bits.)rZrdrrr4 bit_lengthrrrrrrrrr"numbers r%r CertificateBuilder.serial_numbers&#&&EF F    *FG G Q;DE E    # %E "            " "  ! !     ( (  r'c [U[R5(d [S5eURb [ S5e[ U5nU[ :a [ S5eURbXR:a [ S5e[URURURURUURURUR5$)z' Sets the certificate activation time. Expecting datetime object.z*The not valid before may only be set once.z>The not valid before date must be on or after 1950 January 1).zBThe not valid before date must be before the not valid after date.)rZrArrr4rF_EARLIEST_UTC_TIMErrrrrrrrr"rDs r%r#CertificateBuilder.not_valid_befores$ 1 12289 9  ! ! -IJ J)$/ $ $$   ,8M8M1M "               ! !     ( (  r'c [U[R5(d [S5eURb [ S5e[ U5nU[ :a [ S5eURbXR:a [ S5e[URURURURURUURUR5$)z' Sets the certificate expiration time. rz)The not valid after may only be set once.z >">5 > " > 3 >2>3>!9> >* & .15 3 &3 . 3  3 j 8 < @ # /3  6# 0 >B+/0 50 ,0  0 ; 0 )0  0 0 r'rc\rSrSr%S\S'S\S'SSS//4SSjjrSSjrSS jrSS jrSS jr SS jr SSSS .SSjjjr Sr g) CertificateRevocationListBuilderi<rrlist[RevokedCertificate]_revoked_certificatesNc@XlX lX0lX@lXPlgr)r _last_update _next_updaterr)r"r last_update next_updater6revoked_certificatess r%r )CertificateRevocationListBuilder.__init__@s"(''%%9"r'c[U[5(d [S5eURb [ S5e[ UUR URURUR5$)Nrr) rZrrrr4rrrrr)r"rs r%r,CertificateRevocationListBuilder.issuer_nameNsi+t,,9: :    (DE E/            & &   r'c[U[R5(d [S5eURb [ S5e[ U5nU[ :a [ S5eURbXR:a [ S5e[URUURURUR5$)Nr!Last update may only be set once.8The last update date must be on or after 1950 January 1.z9The last update date must be before the next update date.) rZrArrr4rFrrrrrr)r"rs r%r,CertificateRevocationListBuilder.last_update]s+x'8'89989 9    (@A A0= + +J     ([;L;L-LK 0            & &   r'c[U[R5(d [S5eURb [ S5e[ U5nU[ :a [ S5eURbXR:a [ S5e[URURUURUR5$)Nrr r z8The next update date must be after the last update date.) rZrArrr4rFrrrrrr)r"rs r%r,CertificateRevocationListBuilder.next_updateus+x'8'89989 9    (@A A0= + +J     ([;L;L-LJ 0            & &   r'c"[U[5(d [S5e[URX!5n[ X0R 5 [URURUR/UR QUPUR5$)z= Adds an X.509 extension to the certificate revocation list. r) rZrrrr!r8rrrrrrrs r%r.CertificateRevocationListBuilder.add_extensions &-00@A Afjj(; #I/?/?@/          *d * *  & &   r'c[U[5(d [S5e[URUR UR UR/URQUP5$)z( Adds a revoked certificate to the CRL. z)Must be an instance of RevokedCertificate) rZRevokedCertificaterrrrrrr)r"revoked_certificates r%add_revoked_certificate8CertificateRevocationListBuilder.add_revoked_certificatesd -/ABBGH H/             >d(( >*= >   r'rcURc [S5eURc [S5eURc [S5eUbd[ U[ R [ R45(d [S5e[ U[R5(d [S5eUb*[ U[R5(d [S5e[R"UUUUU5$)NzA CRL must have an issuer namez"A CRL must have a last update timez"A CRL must have a next update timerrr)rr4rrrZr rrrrrr rrcreate_x509_crlrs r%r%CertificateRevocationListBuilder.signs    $=> >    $AB B    $AB B  "kGKK9I9I+JKK ABBk3+<+<== HII  *k2+E+EFFG((        r')rrrrr) rrrrrrr6rrr)rrr)r)rrr)r)rrr)r)rrrrgr)r)rrr)rr) rrrrrrrrrrr)CertificateRevocationList) r,r-r.r/rr rrrrrrr0rkr'r%rr<s//33$(0404579; :  :. :. : 3 : 7 :    )   , ) 0 , ) 0 # /3 ) & #5 ) *# $ >B+/$ 5$ ,$  $ ; $ )$  #$ $ r'rcr\rSrSrSS/4S SjjrS SjrS SjrS SjrS SSjjrSr g)RevokedCertificateBuilderiNc(XlX lX0lgr)r_revocation_dater)r"rrevocation_dater6s r%r "RevokedCertificateBuilder.__init__s , /%r'c[U[5(d [S5eURb [ S5eUS::a [ S5eUR 5S:a [ S5e[ XRUR5$)Nrrrz$The serial number should be positiverr) rZrdrrr4rrrrrs r%r'RevokedCertificateBuilder.serial_numbers&#&&EF F    *FG G Q;CD D    # %E ) ))4+;+;  r'c[U[R5(d [S5eURb [ S5e[ U5nU[ :a [ S5e[URXR5$)Nrz)The revocation date may only be set once.z7The revocation date must be on or after 1950 January 1.) rZrArrr4rFrrrrrs r%r)RevokedCertificateBuilder.revocation_dates~$ 1 12289 9  ,HI I)$/ $ $I )   '7'7  r'c[U[5(d [S5e[URX!5n[ X0R 5 [URUR/UR QUP5$)Nr) rZrrrr!r8rrrrrs r%r'RevokedCertificateBuilder.add_extensionsm&-00@A Afjj(; #I/?/?@(     ! ! *d * *  r'cURc [S5eURc [S5e[R"U5$)Nz/A revoked certificate must have a serial numberz1A revoked certificate must have a revocation date)rr4rrcreate_revoked_certificate)r"rs r%buildRevokedCertificateBuilder.buildsI    &NO O  (C 33D99r')rrr)rrrrr6r)rrdr)r)rDrr)r)rrrrgr)rr)rrr)r) r,r-r.r/r rrrr)r0rkr'r%rrso%)4857 &!&2&3 & $ % "  #  /3  "  ::r'rc\[R[R"S5S5S- $)Nbigr)rd from_bytesosurandomrkr'r%random_serial_numberr1s >>"**R.% 0A 55r')r5zExtension[ExtensionType]r6rr)r*)r!rr:rr)r*)rDrr)rrh)I __future__rrAr/typingcollections.abcr cryptographyr"cryptography.hazmat.bindings._rustrrcryptography.hazmat.primitivesr)cryptography.hazmat.primitives.asymmetricrr r r r r rrr/cryptography.hazmat.primitives.asymmetric.typesrrcryptography.x509.extensionsrrrcryptography.x509.namerrcryptography.x509.oidrrUnionSHA224SHA256SHA384SHA512SHA3_224SHA3_256SHA3_384SHA3_512_AllowedHashTypes Exceptionrr8r=rFrHrmEnumr~rrrrrload_pem_x509_certificateload_der_x509_certificateload_pem_x509_certificatesload_pem_x509_csrload_der_x509_csrload_pem_x509_crlload_der_x509_crlrrrrr1rkr'r%rPs # $@1    32&&tQ2LL MM MM MM MM OO OO OO OO   E'E.E EE E@E E !8!8HFF( ejj -Y- ## 11&??%??&??%??&AA////////m m `T T nY Y xB:B:J6r'