/
var
/
opt
/
nydus
/
ops
/
oscrypto
/
_win
/
__pycache__
/
up file
home
� ;�j� � � � d dl mZmZmZmZ d dlZd dlZd dlZddlm Z ddl m Z m Z m Z mZmZmZmZmZmZmZ ddlmZmZmZmZ ddlmZ d d gZ d � Z dd �Z d � Z y)� )�unicode_literals�division�absolute_import�print_functionN� )� Certificate) �array_from_pointer�buffer_from_bytes�bytes_from_buffer�cast�deref�is_null�new�null�struct_from_buffer�unwrap� )�crypt32� Crypt32Const� get_error� handle_error)�str_cls�extract_from_system� system_pathc � � y )N� r � �I/opt/nydus/tmp/pip-target-hb7welcc/lib/python/oscrypto/_win/trust_list.pyr r s � � r c � � i }i }t j j � }dD �]� }t j t � |� }t |� t � } t j ||� }t |� r�nXt |� }d} d} d} |j t j k7 r�St |j t |j � � } t! j" | � j% � } | |v r��d|| < t |j& � } t) | j* � } t j j- | � }||kD r | r | t/ j0 | � d� �� t) | j6 � } t j j- |� }||k r | r | t/ j0 | � d� ��s t= � }t= � }t? t d d� }t j@ |t jB t � |� }tE � \ }}|s |t jF k7 r t |� |t jF k( rd} n�tI tK |� � }t j@ |t jB tM t d |� |� }t |� tO t d |� }t |� }|jP dk( r | r | t/ j0 | � d � ���tS t d|jT |jP � } | D ]" } |jW | jY d� � �$ d} | sTt/ j0 | � } | jZ r3| jZ D ]$ } | j\ } | |vs�|jW | � �& | r"|s | �t/ j0 | � } | | d� | ||f|| < ��{t j^ |d� } t | � d}��� |ja � S # t2 t4 f$ r Y ���w xY w# t2 t4 f$ rH}|dk r8|j8 d dz t; |� z }|f|j8 d d z |_ |�Y d}~���d}~ww xY w)a� Extracts trusted CA certificates from the Windows certificate store :param cert_callback: A callback that is called once for each certificate in the trust store. It should accept two parameters: an asn1crypto.x509.Certificate object, and a reason. The reason will be None if the certificate is being exported, otherwise it will be a unicode string of the reason it won't. :param callback_only_on_failure: A boolean - if the callback should only be called when a certificate is not exported. :raises: OSError - when an error is returned by the OS crypto library :return: A list of 3-element tuples: - 0: a byte string of a DER-encoded certificate - 1: a set of unicode strings that are OIDs of purposes to trust the certificate for - 2: a set of unicode strings that are OIDs of purposes to reject the certificate for )�ROOT�CATFNz not yet validzno longer validr z - r zDWORD *zCERT_ENHKEY_USAGE *�CERT_ENHKEY_USAGEzexplicitly distrusted�LPCSTR�ascii)1�datetime�utcnowr �CertOpenSystemStoreWr r �CertEnumCertificatesInStorer r �dwCertEncodingTyper �X509_ASN_ENCODINGr � pbCertEncoded�int� cbCertEncoded�hashlib�sha1�digest� pCertInfo� _convert_filetime_to_timestamp� NotBefore� fromtimestampr �load� ValueError�OSError�NotAfter�argsr �setr �CertGetEnhancedKeyUsage�%CERT_FIND_PROP_ONLY_ENHKEY_USAGE_FLAGr �CRYPT_E_NOT_FOUNDr r r r �cUsageIdentifierr �rgpszUsageIdentifier�add�decode�extended_key_usage_value�dotted�CertCloseStore�values)!� cert_callback�callback_only_on_failure� certificates� processed�now�store� store_handle�context_pointer�context� trust_all�datar0 � cert_info�not_before_seconds� not_before�not_after_seconds� not_after�e�message� trust_oids� reject_oids�to_read�res� error_code�_� usage_buffer�key_usage_pointer� key_usage�oids�oid�cert�cert_oid�results! r r r # s1 � �4 �L��I� � � � "� "� $�C� �� �3�3�D�F�E�B� ��\�"� �&��� %� A� A�,�P_� `�O���'�� �_�-�G� �I��D��F��)�)�\�-K�-K�K��$�W�%:�%:�C��@U�@U�<V�W�D� �\�\�$�'�.�.�0�F���"�� $�I�f� � �w� 0� 0�1�I�!?� �@S�@S�!T� � � %� .� .� <� <�=O� P� � ��#�$�%�k�&6�&6�t�&<�o�N� � $� !?�y�?Q�?Q� R� � � $� -� -� ;� ;�<M� N� � �s�?�$�%�k�&6�&6�t�&<�>O�P� � #� ��J� �%�K� �'�9�a�0�G��1�1� � �B�B���� �C� &�K�M�J���:� �)G�)G�G� �S�!��\� ;� ;�;� � � 0��w� � @� � �5�5�#� �F�F���"7� �F�� �� �S�!�$6�w�@S�Ua�$b�!� "�#4� 5� � �-�-��2�$�%�k�&6�&6�t�&<�>U�V� �)�� � �2�2� �.�.� �� �C� �N�N�3�:�:�g�#6�7� � �D� �"�'�'��-���0�0�$(�$A�$A�� &�o�o�� �j�0� '�O�O�C� 0� %B� �%=��<�&�+�+�D�1�D� �d�D�)�$(�*�k�#B�L�� �y �| �'�'� �a�8���V� �� �K �N � � � � ��M ��(� � � �� ��(� � %�q�(� �f�f�Q�i�%� /�'�:K�2L� L�G� %�Z�!�&�&���*� 4�A�F��G� )�� �s, �0AP� AP$�P!� P!�$Q;�3=Q6�6Q;c � � t j dt j d| j | j � � d }|dz }|dz S )a Windows returns times as 64-bit unsigned longs that are the number of hundreds of nanoseconds since Jan 1 1601. This converts it to a datetime object. :param filetime: A FILETIME struct object :return: An integer unix timestamp s >Qs >LLr i��� l !l )�struct�unpack�pack�dwHighDateTime� dwLowDateTime)�filetime�hundreds_nano_seconds�seconds_since_1601s r r2 r2 � sY � � #�M�M� �� � � � � #� #� � "� "� � � � �� /��9�� � � +�+r )NF) � __future__r r r r r% r. rg �_asn1r �_ffir r r r r r r r r r �_crypt32r r r r �_typesr �__all__r r r2 r r r �<module>ru sR �� R� R� � � � � � � � E� D� � �� �� �f!�R,r