Mini Shell
#
# This file is part of pyasn1-modules software.
#
# Created by Russ Housley with assistance from asn1ate v.0.6.0.
#
# Copyright (c) 2019, Vigil Security, LLC
# License: http://snmplabs.com/pyasn1/license.html
#
# Electronic Signature Policies
#
# ASN.1 source from:
# https://www.rfc-editor.org/rfc/rfc3125.txt
# https://www.rfc-editor.org/errata/eid5901
# https://www.rfc-editor.org/errata/eid5902
#
from pyasn1.type import constraint
from pyasn1.type import namedtype
from pyasn1.type import namedval
from pyasn1.type import tag
from pyasn1.type import useful
from pyasn1.type import univ
from pyasn1_modules import rfc5280
MAX = float('inf')
# Imports from RFC 5280
AlgorithmIdentifier = rfc5280.AlgorithmIdentifier
Attribute = rfc5280.Attribute
AttributeType = rfc5280.AttributeType
AttributeTypeAndValue = rfc5280.AttributeTypeAndValue
AttributeValue = rfc5280.AttributeValue
Certificate = rfc5280.Certificate
CertificateList = rfc5280.CertificateList
DirectoryString = rfc5280.DirectoryString
GeneralName = rfc5280.GeneralName
GeneralNames = rfc5280.GeneralNames
Name = rfc5280.Name
PolicyInformation = rfc5280.PolicyInformation
# Electronic Signature Policies
class CertPolicyId(univ.ObjectIdentifier):
pass
class AcceptablePolicySet(univ.SequenceOf):
componentType = CertPolicyId()
class SignPolExtn(univ.Sequence):
componentType = namedtype.NamedTypes(
namedtype.NamedType('extnID', univ.ObjectIdentifier()),
namedtype.NamedType('extnValue', univ.OctetString())
)
class SignPolExtensions(univ.SequenceOf):
componentType = SignPolExtn()
class AlgAndLength(univ.Sequence):
componentType = namedtype.NamedTypes(
namedtype.NamedType('algID', univ.ObjectIdentifier()),
namedtype.OptionalNamedType('minKeyLength', univ.Integer()),
namedtype.OptionalNamedType('other', SignPolExtensions())
)
class AlgorithmConstraints(univ.SequenceOf):
componentType = AlgAndLength()
class AlgorithmConstraintSet(univ.Sequence):
componentType = namedtype.NamedTypes(
namedtype.OptionalNamedType('signerAlgorithmConstraints',
AlgorithmConstraints().subtype(explicitTag=tag.Tag(
tag.tagClassContext, tag.tagFormatSimple, 0))),
namedtype.OptionalNamedType('eeCertAlgorithmConstraints',
AlgorithmConstraints().subtype(explicitTag=tag.Tag(
tag.tagClassContext, tag.tagFormatSimple, 1))),
namedtype.OptionalNamedType('caCertAlgorithmConstraints',
AlgorithmConstraints().subtype(explicitTag=tag.Tag(
tag.tagClassContext, tag.tagFormatSimple, 2))),
namedtype.OptionalNamedType('aaCertAlgorithmConstraints',
AlgorithmConstraints().subtype(explicitTag=tag.Tag(
tag.tagClassContext, tag.tagFormatSimple, 3))),
namedtype.OptionalNamedType('tsaCertAlgorithmConstraints',
AlgorithmConstraints().subtype(explicitTag=tag.Tag(
tag.tagClassContext, tag.tagFormatSimple, 4)))
)
class AttributeValueConstraints(univ.SequenceOf):
componentType = AttributeTypeAndValue()
class AttributeTypeConstraints(univ.SequenceOf):
componentType = AttributeType()
class AttributeConstraints(univ.Sequence):
componentType = namedtype.NamedTypes(
namedtype.OptionalNamedType('attributeTypeConstarints',
AttributeTypeConstraints().subtype(explicitTag=tag.Tag(
tag.tagClassContext, tag.tagFormatSimple, 0))),
namedtype.OptionalNamedType('attributeValueConstarints',
AttributeValueConstraints().subtype(explicitTag=tag.Tag(
tag.tagClassContext, tag.tagFormatSimple, 1)))
)
class HowCertAttribute(univ.Enumerated):
namedValues = namedval.NamedValues(
('claimedAttribute', 0),
('certifiedAttribtes', 1),
('either', 2)
)
class SkipCerts(univ.Integer):
subtypeSpec = constraint.ValueRangeConstraint(0, MAX)
class PolicyConstraints(univ.Sequence):
componentType = namedtype.NamedTypes(
namedtype.OptionalNamedType('requireExplicitPolicy',
SkipCerts().subtype(explicitTag=tag.Tag(
tag.tagClassContext, tag.tagFormatSimple, 0))),
namedtype.OptionalNamedType('inhibitPolicyMapping',
SkipCerts().subtype(explicitTag=tag.Tag(
tag.tagClassContext, tag.tagFormatSimple, 1)))
)
class BaseDistance(univ.Integer):
subtypeSpec = constraint.ValueRangeConstraint(0, MAX)
class GeneralSubtree(univ.Sequence):
componentType = namedtype.NamedTypes(
namedtype.NamedType('base', GeneralName()),
namedtype.DefaultedNamedType('minimum',
BaseDistance().subtype(explicitTag=tag.Tag(
tag.tagClassContext, tag.tagFormatSimple, 0)).subtype(
value=0)),
namedtype.OptionalNamedType('maximum',
BaseDistance().subtype(explicitTag=tag.Tag(
tag.tagClassContext, tag.tagFormatSimple, 1)))
)
class GeneralSubtrees(univ.SequenceOf):
componentType = GeneralSubtree()
subtypeSpec = constraint.ValueSizeConstraint(1, MAX)
class NameConstraints(univ.Sequence):
componentType = namedtype.NamedTypes(
namedtype.OptionalNamedType('permittedSubtrees',
GeneralSubtrees().subtype(explicitTag=tag.Tag(
tag.tagClassContext, tag.tagFormatSimple, 0))),
namedtype.OptionalNamedType('excludedSubtrees',
GeneralSubtrees().subtype(explicitTag=tag.Tag(
tag.tagClassContext, tag.tagFormatSimple, 1)))
)
class PathLenConstraint(univ.Integer):
subtypeSpec = constraint.ValueRangeConstraint(0, MAX)
class CertificateTrustPoint(univ.Sequence):
componentType = namedtype.NamedTypes(
namedtype.NamedType('trustpoint', Certificate()),
namedtype.OptionalNamedType('pathLenConstraint',
PathLenConstraint().subtype(explicitTag=tag.Tag(
tag.tagClassContext, tag.tagFormatSimple, 0))),
namedtype.OptionalNamedType('acceptablePolicySet',
AcceptablePolicySet().subtype(explicitTag=tag.Tag(
tag.tagClassContext, tag.tagFormatSimple, 1))),
namedtype.OptionalNamedType('nameConstraints',
NameConstraints().subtype(explicitTag=tag.Tag(
tag.tagClassContext, tag.tagFormatConstructed, 2))),
namedtype.OptionalNamedType('policyConstraints',
PolicyConstraints().subtype(explicitTag=tag.Tag(
tag.tagClassContext, tag.tagFormatConstructed, 3)))
)
class CertificateTrustTrees(univ.SequenceOf):
componentType = CertificateTrustPoint()
class EnuRevReq(univ.Enumerated):
namedValues = namedval.NamedValues(
('clrCheck', 0),
('ocspCheck', 1),
('bothCheck', 2),
('eitherCheck', 3),
('noCheck', 4),
('other', 5)
)
class RevReq(univ.Sequence):
componentType = namedtype.NamedTypes(
namedtype.NamedType('enuRevReq', EnuRevReq()),
namedtype.OptionalNamedType('exRevReq', SignPolExtensions())
)
class CertRevReq(univ.Sequence):
componentType = namedtype.NamedTypes(
namedtype.NamedType('endCertRevReq', RevReq()),
namedtype.NamedType('caCerts',
RevReq().subtype(explicitTag=tag.Tag(
tag.tagClassContext, tag.tagFormatConstructed, 0)))
)
class AttributeTrustCondition(univ.Sequence):
componentType = namedtype.NamedTypes(
namedtype.NamedType('attributeMandated', univ.Boolean()),
namedtype.NamedType('howCertAttribute', HowCertAttribute()),
namedtype.OptionalNamedType('attrCertificateTrustTrees',
CertificateTrustTrees().subtype(explicitTag=tag.Tag(
tag.tagClassContext, tag.tagFormatSimple, 0))),
namedtype.OptionalNamedType('attrRevReq',
CertRevReq().subtype(explicitTag=tag.Tag(
tag.tagClassContext, tag.tagFormatConstructed, 1))),
namedtype.OptionalNamedType('attributeConstraints',
AttributeConstraints().subtype(explicitTag=tag.Tag(
tag.tagClassContext, tag.tagFormatConstructed, 2)))
)
class CMSAttrs(univ.SequenceOf):
componentType = univ.ObjectIdentifier()
class CertInfoReq(univ.Enumerated):
namedValues = namedval.NamedValues(
('none', 0),
('signerOnly', 1),
('fullPath', 2)
)
class CertRefReq(univ.Enumerated):
namedValues = namedval.NamedValues(
('signerOnly', 1),
('fullPath', 2)
)
class DeltaTime(univ.Sequence):
componentType = namedtype.NamedTypes(
namedtype.NamedType('deltaSeconds', univ.Integer()),
namedtype.NamedType('deltaMinutes', univ.Integer()),
namedtype.NamedType('deltaHours', univ.Integer()),
namedtype.NamedType('deltaDays', univ.Integer())
)
class TimestampTrustCondition(univ.Sequence):
componentType = namedtype.NamedTypes(
namedtype.OptionalNamedType('ttsCertificateTrustTrees',
CertificateTrustTrees().subtype(explicitTag=tag.Tag(
tag.tagClassContext, tag.tagFormatSimple, 0))),
namedtype.OptionalNamedType('ttsRevReq',
CertRevReq().subtype(explicitTag=tag.Tag(
tag.tagClassContext, tag.tagFormatConstructed, 1))),
namedtype.OptionalNamedType('ttsNameConstraints',
NameConstraints().subtype(explicitTag=tag.Tag(
tag.tagClassContext, tag.tagFormatConstructed, 2))),
namedtype.OptionalNamedType('cautionPeriod',
DeltaTime().subtype(explicitTag=tag.Tag(
tag.tagClassContext, tag.tagFormatConstructed, 3))),
namedtype.OptionalNamedType('signatureTimestampDelay',
DeltaTime().subtype(explicitTag=tag.Tag(
tag.tagClassContext, tag.tagFormatConstructed, 4)))
)
class SignerRules(univ.Sequence):
componentType = namedtype.NamedTypes(
namedtype.OptionalNamedType('externalSignedData', univ.Boolean()),
namedtype.NamedType('mandatedSignedAttr', CMSAttrs()),
namedtype.NamedType('mandatedUnsignedAttr', CMSAttrs()),
namedtype.DefaultedNamedType('mandatedCertificateRef',
CertRefReq().subtype(explicitTag=tag.Tag(
tag.tagClassContext, tag.tagFormatSimple, 0)).subtype(
value='signerOnly')),
namedtype.DefaultedNamedType('mandatedCertificateInfo',
CertInfoReq().subtype(explicitTag=tag.Tag(
tag.tagClassContext, tag.tagFormatSimple, 1)).subtype(
value='none')),
namedtype.OptionalNamedType('signPolExtensions',
SignPolExtensions().subtype(explicitTag=tag.Tag(
tag.tagClassContext, tag.tagFormatSimple, 2)))
)
class MandatedUnsignedAttr(CMSAttrs):
pass
class VerifierRules(univ.Sequence):
componentType = namedtype.NamedTypes(
namedtype.NamedType('mandatedUnsignedAttr', MandatedUnsignedAttr()),
namedtype.OptionalNamedType('signPolExtensions', SignPolExtensions())
)
class SignerAndVerifierRules(univ.Sequence):
componentType = namedtype.NamedTypes(
namedtype.NamedType('signerRules', SignerRules()),
namedtype.NamedType('verifierRules', VerifierRules())
)
class SigningCertTrustCondition(univ.Sequence):
componentType = namedtype.NamedTypes(
namedtype.NamedType('signerTrustTrees', CertificateTrustTrees()),
namedtype.NamedType('signerRevReq', CertRevReq())
)
class CommitmentTypeIdentifier(univ.ObjectIdentifier):
pass
class FieldOfApplication(DirectoryString):
pass
class CommitmentType(univ.Sequence):
componentType = namedtype.NamedTypes(
namedtype.NamedType('identifier', CommitmentTypeIdentifier()),
namedtype.OptionalNamedType('fieldOfApplication',
FieldOfApplication().subtype(explicitTag=tag.Tag(
tag.tagClassContext, tag.tagFormatSimple, 0))),
namedtype.OptionalNamedType('semantics',
DirectoryString().subtype(explicitTag=tag.Tag(
tag.tagClassContext, tag.tagFormatSimple, 1)))
)
class SelectedCommitmentTypes(univ.SequenceOf):
componentType = univ.Choice(componentType=namedtype.NamedTypes(
namedtype.NamedType('empty', univ.Null()),
namedtype.NamedType('recognizedCommitmentType', CommitmentType())
))
class CommitmentRule(univ.Sequence):
componentType = namedtype.NamedTypes(
namedtype.NamedType('selCommitmentTypes', SelectedCommitmentTypes()),
namedtype.OptionalNamedType('signerAndVeriferRules',
SignerAndVerifierRules().subtype(explicitTag=tag.Tag(
tag.tagClassContext, tag.tagFormatConstructed, 0))),
namedtype.OptionalNamedType('signingCertTrustCondition',
SigningCertTrustCondition().subtype(explicitTag=tag.Tag(
tag.tagClassContext, tag.tagFormatConstructed, 1))),
namedtype.OptionalNamedType('timeStampTrustCondition',
TimestampTrustCondition().subtype(explicitTag=tag.Tag(
tag.tagClassContext, tag.tagFormatConstructed, 2))),
namedtype.OptionalNamedType('attributeTrustCondition',
AttributeTrustCondition().subtype(explicitTag=tag.Tag(
tag.tagClassContext, tag.tagFormatConstructed, 3))),
namedtype.OptionalNamedType('algorithmConstraintSet',
AlgorithmConstraintSet().subtype(explicitTag=tag.Tag(
tag.tagClassContext, tag.tagFormatConstructed, 4))),
namedtype.OptionalNamedType('signPolExtensions',
SignPolExtensions().subtype(explicitTag=tag.Tag(
tag.tagClassContext, tag.tagFormatSimple, 5)))
)
class CommitmentRules(univ.SequenceOf):
componentType = CommitmentRule()
class CommonRules(univ.Sequence):
componentType = namedtype.NamedTypes(
namedtype.OptionalNamedType('signerAndVeriferRules',
SignerAndVerifierRules().subtype(explicitTag=tag.Tag(
tag.tagClassContext, tag.tagFormatConstructed, 0))),
namedtype.OptionalNamedType('signingCertTrustCondition',
SigningCertTrustCondition().subtype(explicitTag=tag.Tag(
tag.tagClassContext, tag.tagFormatConstructed, 1))),
namedtype.OptionalNamedType('timeStampTrustCondition',
TimestampTrustCondition().subtype(explicitTag=tag.Tag(
tag.tagClassContext, tag.tagFormatConstructed, 2))),
namedtype.OptionalNamedType('attributeTrustCondition',
AttributeTrustCondition().subtype(explicitTag=tag.Tag(
tag.tagClassContext, tag.tagFormatConstructed, 3))),
namedtype.OptionalNamedType('algorithmConstraintSet',
AlgorithmConstraintSet().subtype(explicitTag=tag.Tag(
tag.tagClassContext, tag.tagFormatConstructed, 4))),
namedtype.OptionalNamedType('signPolExtensions',
SignPolExtensions().subtype(explicitTag=tag.Tag(
tag.tagClassContext, tag.tagFormatSimple, 5)))
)
class PolicyIssuerName(GeneralNames):
pass
class SignPolicyHash(univ.OctetString):
pass
class SignPolicyId(univ.ObjectIdentifier):
pass
class SigningPeriod(univ.Sequence):
componentType = namedtype.NamedTypes(
namedtype.NamedType('notBefore', useful.GeneralizedTime()),
namedtype.OptionalNamedType('notAfter', useful.GeneralizedTime())
)
class SignatureValidationPolicy(univ.Sequence):
componentType = namedtype.NamedTypes(
namedtype.NamedType('signingPeriod', SigningPeriod()),
namedtype.NamedType('commonRules', CommonRules()),
namedtype.NamedType('commitmentRules', CommitmentRules()),
namedtype.OptionalNamedType('signPolExtensions', SignPolExtensions())
)
class SignPolicyInfo(univ.Sequence):
componentType = namedtype.NamedTypes(
namedtype.NamedType('signPolicyIdentifier', SignPolicyId()),
namedtype.NamedType('dateOfIssue', useful.GeneralizedTime()),
namedtype.NamedType('policyIssuerName', PolicyIssuerName()),
namedtype.NamedType('fieldOfApplication', FieldOfApplication()),
namedtype.NamedType('signatureValidationPolicy', SignatureValidationPolicy()),
namedtype.OptionalNamedType('signPolExtensions', SignPolExtensions())
)
class SignaturePolicy(univ.Sequence):
componentType = namedtype.NamedTypes(
namedtype.NamedType('signPolicyHashAlg', AlgorithmIdentifier()),
namedtype.NamedType('signPolicyInfo', SignPolicyInfo()),
namedtype.OptionalNamedType('signPolicyHash', SignPolicyHash())
)
Zerion Mini Shell 1.0