py2docfx 0.1.16.dev2064350__py3-none-any.whl → 0.1.17__py3-none-any.whl

py2docfx/venv/venv1/Lib/site-packages/cryptography/x509/base.py

@@ -9,6 +9,7 @@ import datetime
 import os
 import typing
 import warnings
+from collections.abc import Iterable
 
 from cryptography import utils
 from cryptography.hazmat.bindings._rust import x509 as rust_x509
@@ -131,7 +132,7 @@ class Attribute:
 class Attributes:
     def __init__(
         self,
-        attributes: typing.Iterable[Attribute],
+        attributes: Iterable[Attribute],
     ) -> None:
         self._attributes = list(attributes)
 
@@ -330,6 +331,7 @@ class CertificateSigningRequestBuilder:
         backend: typing.Any = None,
         *,
         rsa_padding: padding.PSS | padding.PKCS1v15 | None = None,
+        ecdsa_deterministic: bool | None = None,
     ) -> CertificateSigningRequest:
         """
         Signs the request using the requestor's private key.
@@ -343,8 +345,18 @@ class CertificateSigningRequestBuilder:
             if not isinstance(private_key, rsa.RSAPrivateKey):
                 raise TypeError("Padding is only supported for RSA keys")
 
+        if ecdsa_deterministic is not None:
+            if not isinstance(private_key, ec.EllipticCurvePrivateKey):
+                raise TypeError(
+                    "Deterministic ECDSA is only supported for EC keys"
+                )
+
         return rust_x509.create_x509_csr(
-            self, private_key, algorithm, rsa_padding
+            self,
+            private_key,
+            algorithm,
+            rsa_padding,
+            ecdsa_deterministic,
         )
 
 
@@ -510,8 +522,7 @@ class CertificateBuilder:
         time = _convert_to_naive_utc_time(time)
         if time < _EARLIEST_UTC_TIME:
             raise ValueError(
-                "The not valid after date must be on or after"
-                " 1950 January 1."
+                "The not valid after date must be on or after 1950 January 1."
             )
         if (
             self._not_valid_before is not None
@@ -560,6 +571,7 @@ class CertificateBuilder:
         backend: typing.Any = None,
         *,
         rsa_padding: padding.PSS | padding.PKCS1v15 | None = None,
+        ecdsa_deterministic: bool | None = None,
     ) -> Certificate:
         """
         Signs the certificate using the CA's private key.
@@ -588,8 +600,18 @@ class CertificateBuilder:
             if not isinstance(private_key, rsa.RSAPrivateKey):
                 raise TypeError("Padding is only supported for RSA keys")
 
+        if ecdsa_deterministic is not None:
+            if not isinstance(private_key, ec.EllipticCurvePrivateKey):
+                raise TypeError(
+                    "Deterministic ECDSA is only supported for EC keys"
+                )
+
         return rust_x509.create_x509_certificate(
-            self, private_key, algorithm, rsa_padding
+            self,
+            private_key,
+            algorithm,
+            rsa_padding,
+            ecdsa_deterministic,
         )
 
 
@@ -717,6 +739,7 @@ class CertificateRevocationListBuilder:
         backend: typing.Any = None,
         *,
         rsa_padding: padding.PSS | padding.PKCS1v15 | None = None,
+        ecdsa_deterministic: bool | None = None,
     ) -> CertificateRevocationList:
         if self._issuer_name is None:
             raise ValueError("A CRL must have an issuer name")
@@ -733,8 +756,18 @@ class CertificateRevocationListBuilder:
             if not isinstance(private_key, rsa.RSAPrivateKey):
                 raise TypeError("Padding is only supported for RSA keys")
 
+        if ecdsa_deterministic is not None:
+            if not isinstance(private_key, ec.EllipticCurvePrivateKey):
+                raise TypeError(
+                    "Deterministic ECDSA is only supported for EC keys"
+                )
+
         return rust_x509.create_x509_crl(
-            self, private_key, algorithm, rsa_padding
+            self,
+            private_key,
+            algorithm,
+            rsa_padding,
+            ecdsa_deterministic,
         )
 
 

py2docfx/venv/venv1/Lib/site-packages/cryptography/x509/extensions.py

@@ -9,6 +9,7 @@ import datetime
 import hashlib
 import ipaddress
 import typing
+from collections.abc import Iterable, Iterator
 
 from cryptography import utils
 from cryptography.hazmat.bindings._rust import asn1
@@ -109,9 +110,7 @@ class ExtensionType(metaclass=abc.ABCMeta):
 
 
 class Extensions:
-    def __init__(
-        self, extensions: typing.Iterable[Extension[ExtensionType]]
-    ) -> None:
+    def __init__(self, extensions: Iterable[Extension[ExtensionType]]) -> None:
         self._extensions = list(extensions)
 
     def get_extension_for_oid(
@@ -182,7 +181,7 @@ class AuthorityKeyIdentifier(ExtensionType):
     def __init__(
         self,
         key_identifier: bytes | None,
-        authority_cert_issuer: typing.Iterable[GeneralName] | None,
+        authority_cert_issuer: Iterable[GeneralName] | None,
         authority_cert_serial_number: int | None,
     ) -> None:
         if (authority_cert_issuer is None) != (
@@ -323,9 +322,7 @@ class SubjectKeyIdentifier(ExtensionType):
 class AuthorityInformationAccess(ExtensionType):
     oid = ExtensionOID.AUTHORITY_INFORMATION_ACCESS
 
-    def __init__(
-        self, descriptions: typing.Iterable[AccessDescription]
-    ) -> None:
+    def __init__(self, descriptions: Iterable[AccessDescription]) -> None:
         descriptions = list(descriptions)
         if not all(isinstance(x, AccessDescription) for x in descriptions):
             raise TypeError(
@@ -356,9 +353,7 @@ class AuthorityInformationAccess(ExtensionType):
 class SubjectInformationAccess(ExtensionType):
     oid = ExtensionOID.SUBJECT_INFORMATION_ACCESS
 
-    def __init__(
-        self, descriptions: typing.Iterable[AccessDescription]
-    ) -> None:
+    def __init__(self, descriptions: Iterable[AccessDescription]) -> None:
         descriptions = list(descriptions)
         if not all(isinstance(x, AccessDescription) for x in descriptions):
             raise TypeError(
@@ -456,8 +451,7 @@ class BasicConstraints(ExtensionType):
 
     def __repr__(self) -> str:
         return (
-            f"<BasicConstraints(ca={self.ca}, "
-            f"path_length={self.path_length})>"
+            f"<BasicConstraints(ca={self.ca}, path_length={self.path_length})>"
         )
 
     def __eq__(self, other: object) -> bool:
@@ -506,7 +500,7 @@ class CRLDistributionPoints(ExtensionType):
     oid = ExtensionOID.CRL_DISTRIBUTION_POINTS
 
     def __init__(
-        self, distribution_points: typing.Iterable[DistributionPoint]
+        self, distribution_points: Iterable[DistributionPoint]
     ) -> None:
         distribution_points = list(distribution_points)
         if not all(
@@ -543,7 +537,7 @@ class FreshestCRL(ExtensionType):
     oid = ExtensionOID.FRESHEST_CRL
 
     def __init__(
-        self, distribution_points: typing.Iterable[DistributionPoint]
+        self, distribution_points: Iterable[DistributionPoint]
     ) -> None:
         distribution_points = list(distribution_points)
         if not all(
@@ -579,10 +573,10 @@ class FreshestCRL(ExtensionType):
 class DistributionPoint:
     def __init__(
         self,
-        full_name: typing.Iterable[GeneralName] | None,
+        full_name: Iterable[GeneralName] | None,
         relative_name: RelativeDistinguishedName | None,
         reasons: frozenset[ReasonFlags] | None,
-        crl_issuer: typing.Iterable[GeneralName] | None,
+        crl_issuer: Iterable[GeneralName] | None,
     ) -> None:
         if full_name and relative_name:
             raise ValueError(
@@ -824,12 +818,11 @@ class PolicyConstraints(ExtensionType):
 class CertificatePolicies(ExtensionType):
     oid = ExtensionOID.CERTIFICATE_POLICIES
 
-    def __init__(self, policies: typing.Iterable[PolicyInformation]) -> None:
+    def __init__(self, policies: Iterable[PolicyInformation]) -> None:
         policies = list(policies)
         if not all(isinstance(x, PolicyInformation) for x in policies):
             raise TypeError(
-                "Every item in the policies list must be a "
-                "PolicyInformation"
+                "Every item in the policies list must be a PolicyInformation"
             )
 
         self._policies = policies
@@ -856,7 +849,7 @@ class PolicyInformation:
     def __init__(
         self,
         policy_identifier: ObjectIdentifier,
-        policy_qualifiers: typing.Iterable[str | UserNotice] | None,
+        policy_qualifiers: Iterable[str | UserNotice] | None,
     ) -> None:
         if not isinstance(policy_identifier, ObjectIdentifier):
             raise TypeError("policy_identifier must be an ObjectIdentifier")
@@ -956,7 +949,7 @@ class NoticeReference:
     def __init__(
         self,
         organization: str | None,
-        notice_numbers: typing.Iterable[int],
+        notice_numbers: Iterable[int],
     ) -> None:
         self._organization = organization
         notice_numbers = list(notice_numbers)
@@ -995,7 +988,7 @@ class NoticeReference:
 class ExtendedKeyUsage(ExtensionType):
     oid = ExtensionOID.EXTENDED_KEY_USAGE
 
-    def __init__(self, usages: typing.Iterable[ObjectIdentifier]) -> None:
+    def __init__(self, usages: Iterable[ObjectIdentifier]) -> None:
         usages = list(usages)
         if not all(isinstance(x, ObjectIdentifier) for x in usages):
             raise TypeError(
@@ -1063,7 +1056,7 @@ class PrecertPoison(ExtensionType):
 class TLSFeature(ExtensionType):
     oid = ExtensionOID.TLS_FEATURE
 
-    def __init__(self, features: typing.Iterable[TLSFeatureType]) -> None:
+    def __init__(self, features: Iterable[TLSFeatureType]) -> None:
         features = list(features)
         if (
             not all(isinstance(x, TLSFeatureType) for x in features)
@@ -1273,13 +1266,78 @@ class KeyUsage(ExtensionType):
         return rust_x509.encode_extension_value(self)
 
 
+class PrivateKeyUsagePeriod(ExtensionType):
+    oid = ExtensionOID.PRIVATE_KEY_USAGE_PERIOD
+
+    def __init__(
+        self,
+        not_before: datetime.datetime | None,
+        not_after: datetime.datetime | None,
+    ) -> None:
+        if (
+            not isinstance(not_before, datetime.datetime)
+            and not_before is not None
+        ):
+            raise TypeError("not_before must be a datetime.datetime or None")
+
+        if (
+            not isinstance(not_after, datetime.datetime)
+            and not_after is not None
+        ):
+            raise TypeError("not_after must be a datetime.datetime or None")
+
+        if not_before is None and not_after is None:
+            raise ValueError(
+                "At least one of not_before and not_after must not be None"
+            )
+
+        if (
+            not_before is not None
+            and not_after is not None
+            and not_before > not_after
+        ):
+            raise ValueError("not_before must be before not_after")
+
+        self._not_before = not_before
+        self._not_after = not_after
+
+    @property
+    def not_before(self) -> datetime.datetime | None:
+        return self._not_before
+
+    @property
+    def not_after(self) -> datetime.datetime | None:
+        return self._not_after
+
+    def __repr__(self) -> str:
+        return (
+            f"<PrivateKeyUsagePeriod(not_before={self.not_before}, "
+            f"not_after={self.not_after})>"
+        )
+
+    def __eq__(self, other: object) -> bool:
+        if not isinstance(other, PrivateKeyUsagePeriod):
+            return NotImplemented
+
+        return (
+            self.not_before == other.not_before
+            and self.not_after == other.not_after
+        )
+
+    def __hash__(self) -> int:
+        return hash((self.not_before, self.not_after))
+
+    def public_bytes(self) -> bytes:
+        return rust_x509.encode_extension_value(self)
+
+
 class NameConstraints(ExtensionType):
     oid = ExtensionOID.NAME_CONSTRAINTS
 
     def __init__(
         self,
-        permitted_subtrees: typing.Iterable[GeneralName] | None,
-        excluded_subtrees: typing.Iterable[GeneralName] | None,
+        permitted_subtrees: Iterable[GeneralName] | None,
+        excluded_subtrees: Iterable[GeneralName] | None,
     ) -> None:
         if permitted_subtrees is not None:
             permitted_subtrees = list(permitted_subtrees)
@@ -1327,11 +1385,11 @@ class NameConstraints(ExtensionType):
             and self.permitted_subtrees == other.permitted_subtrees
         )
 
-    def _validate_tree(self, tree: typing.Iterable[GeneralName]) -> None:
+    def _validate_tree(self, tree: Iterable[GeneralName]) -> None:
         self._validate_ip_name(tree)
         self._validate_dns_name(tree)
 
-    def _validate_ip_name(self, tree: typing.Iterable[GeneralName]) -> None:
+    def _validate_ip_name(self, tree: Iterable[GeneralName]) -> None:
         if any(
             isinstance(name, IPAddress)
             and not isinstance(
@@ -1344,7 +1402,7 @@ class NameConstraints(ExtensionType):
                 " IPv6Network object"
             )
 
-    def _validate_dns_name(self, tree: typing.Iterable[GeneralName]) -> None:
+    def _validate_dns_name(self, tree: Iterable[GeneralName]) -> None:
         if any(
             isinstance(name, DNSName) and "*" in name.value for name in tree
         ):
@@ -1437,7 +1495,7 @@ class Extension(typing.Generic[ExtensionTypeVar]):
 
 
 class GeneralNames:
-    def __init__(self, general_names: typing.Iterable[GeneralName]) -> None:
+    def __init__(self, general_names: Iterable[GeneralName]) -> None:
         general_names = list(general_names)
         if not all(isinstance(x, GeneralName) for x in general_names):
             raise TypeError(
@@ -1519,7 +1577,7 @@ class GeneralNames:
 class SubjectAlternativeName(ExtensionType):
     oid = ExtensionOID.SUBJECT_ALTERNATIVE_NAME
 
-    def __init__(self, general_names: typing.Iterable[GeneralName]) -> None:
+    def __init__(self, general_names: Iterable[GeneralName]) -> None:
         self._general_names = GeneralNames(general_names)
 
     __len__, __iter__, __getitem__ = _make_sequence_methods("_general_names")
@@ -1591,7 +1649,7 @@ class SubjectAlternativeName(ExtensionType):
 class IssuerAlternativeName(ExtensionType):
     oid = ExtensionOID.ISSUER_ALTERNATIVE_NAME
 
-    def __init__(self, general_names: typing.Iterable[GeneralName]) -> None:
+    def __init__(self, general_names: Iterable[GeneralName]) -> None:
         self._general_names = GeneralNames(general_names)
 
     __len__, __iter__, __getitem__ = _make_sequence_methods("_general_names")
@@ -1663,7 +1721,7 @@ class IssuerAlternativeName(ExtensionType):
 class CertificateIssuer(ExtensionType):
     oid = CRLEntryExtensionOID.CERTIFICATE_ISSUER
 
-    def __init__(self, general_names: typing.Iterable[GeneralName]) -> None:
+    def __init__(self, general_names: Iterable[GeneralName]) -> None:
         self._general_names = GeneralNames(general_names)
 
     __len__, __iter__, __getitem__ = _make_sequence_methods("_general_names")
@@ -1802,9 +1860,7 @@ class PrecertificateSignedCertificateTimestamps(ExtensionType):
 
     def __init__(
         self,
-        signed_certificate_timestamps: typing.Iterable[
-            SignedCertificateTimestamp
-        ],
+        signed_certificate_timestamps: Iterable[SignedCertificateTimestamp],
     ) -> None:
         signed_certificate_timestamps = list(signed_certificate_timestamps)
         if not all(
@@ -1845,9 +1901,7 @@ class SignedCertificateTimestamps(ExtensionType):
 
     def __init__(
         self,
-        signed_certificate_timestamps: typing.Iterable[
-            SignedCertificateTimestamp
-        ],
+        signed_certificate_timestamps: Iterable[SignedCertificateTimestamp],
     ) -> None:
         signed_certificate_timestamps = list(signed_certificate_timestamps)
         if not all(
@@ -1915,7 +1969,7 @@ class OCSPNonce(ExtensionType):
 class OCSPAcceptableResponses(ExtensionType):
     oid = OCSPExtensionOID.ACCEPTABLE_RESPONSES
 
-    def __init__(self, responses: typing.Iterable[ObjectIdentifier]) -> None:
+    def __init__(self, responses: Iterable[ObjectIdentifier]) -> None:
         responses = list(responses)
         if any(not isinstance(r, ObjectIdentifier) for r in responses):
             raise TypeError("All responses must be ObjectIdentifiers")
@@ -1934,7 +1988,7 @@ class OCSPAcceptableResponses(ExtensionType):
     def __repr__(self) -> str:
         return f"<OCSPAcceptableResponses(responses={self._responses})>"
 
-    def __iter__(self) -> typing.Iterator[ObjectIdentifier]:
+    def __iter__(self) -> Iterator[ObjectIdentifier]:
         return iter(self._responses)
 
     def public_bytes(self) -> bytes:
@@ -1946,7 +2000,7 @@ class IssuingDistributionPoint(ExtensionType):
 
     def __init__(
         self,
-        full_name: typing.Iterable[GeneralName] | None,
+        full_name: Iterable[GeneralName] | None,
         relative_name: RelativeDistinguishedName | None,
         only_contains_user_certs: bool,
         only_contains_ca_certs: bool,
@@ -2224,8 +2278,8 @@ class ProfessionInfo:
     def __init__(
         self,
         naming_authority: NamingAuthority | None,
-        profession_items: typing.Iterable[str],
-        profession_oids: typing.Iterable[ObjectIdentifier] | None,
+        profession_items: Iterable[str],
+        profession_oids: Iterable[ObjectIdentifier] | None,
         registration_number: str | None,
         add_profession_info: bytes | None,
     ) -> None:
@@ -2328,7 +2382,7 @@ class Admission:
         self,
         admission_authority: GeneralName | None,
         naming_authority: NamingAuthority | None,
-        profession_infos: typing.Iterable[ProfessionInfo],
+        profession_infos: Iterable[ProfessionInfo],
     ) -> None:
         if admission_authority is not None and not isinstance(
             admission_authority, GeneralName
@@ -2398,7 +2452,7 @@ class Admissions(ExtensionType):
     def __init__(
         self,
         authority: GeneralName | None,
-        admissions: typing.Iterable[Admission],
+        admissions: Iterable[Admission],
     ) -> None:
         if authority is not None and not isinstance(authority, GeneralName):
             raise TypeError("authority must be a GeneralName")
@@ -2459,10 +2513,7 @@ class UnrecognizedExtension(ExtensionType):
         return self._value
 
     def __repr__(self) -> str:
-        return (
-            f"<UnrecognizedExtension(oid={self.oid}, "
-            f"value={self.value!r})>"
-        )
+        return f"<UnrecognizedExtension(oid={self.oid}, value={self.value!r})>"
 
     def __eq__(self, other: object) -> bool:
         if not isinstance(other, UnrecognizedExtension):

py2docfx/venv/venv1/Lib/site-packages/cryptography/x509/name.py

@@ -9,6 +9,7 @@ import re
 import sys
 import typing
 import warnings
+from collections.abc import Iterable, Iterator
 
 from cryptography import utils
 from cryptography.hazmat.bindings._rust import x509 as rust_x509
@@ -114,11 +115,20 @@ def _unescape_dn_value(val: str) -> str:
     return _RFC4514NameParser._PAIR_RE.sub(sub, val)
 
 
-class NameAttribute:
+NameAttributeValueType = typing.TypeVar(
+    "NameAttributeValueType",
+    typing.Union[str, bytes],
+    str,
+    bytes,
+    covariant=True,
+)
+
+
+class NameAttribute(typing.Generic[NameAttributeValueType]):
     def __init__(
         self,
         oid: ObjectIdentifier,
-        value: str | bytes,
+        value: NameAttributeValueType,
         _type: _ASN1Type | None = None,
         *,
         _validate: bool = True,
@@ -166,15 +176,15 @@ class NameAttribute:
             raise TypeError("_type must be from the _ASN1Type enum")
 
         self._oid = oid
-        self._value = value
-        self._type = _type
+        self._value: NameAttributeValueType = value
+        self._type: _ASN1Type = _type
 
     @property
     def oid(self) -> ObjectIdentifier:
         return self._oid
 
     @property
-    def value(self) -> str | bytes:
+    def value(self) -> NameAttributeValueType:
         return self._value
 
     @property
@@ -216,7 +226,7 @@ class NameAttribute:
 
 
 class RelativeDistinguishedName:
-    def __init__(self, attributes: typing.Iterable[NameAttribute]):
+    def __init__(self, attributes: Iterable[NameAttribute]):
         attributes = list(attributes)
         if not attributes:
             raise ValueError("a relative distinguished name cannot be empty")
@@ -231,8 +241,9 @@ class RelativeDistinguishedName:
             raise ValueError("duplicate attributes are not allowed")
 
     def get_attributes_for_oid(
-        self, oid: ObjectIdentifier
-    ) -> list[NameAttribute]:
+        self,
+        oid: ObjectIdentifier,
+    ) -> list[NameAttribute[str | bytes]]:
         return [i for i in self if i.oid == oid]
 
     def rfc4514_string(
@@ -258,7 +269,7 @@ class RelativeDistinguishedName:
     def __hash__(self) -> int:
         return hash(self._attribute_set)
 
-    def __iter__(self) -> typing.Iterator[NameAttribute]:
+    def __iter__(self) -> Iterator[NameAttribute]:
         return iter(self._attributes)
 
     def __len__(self) -> int:
@@ -270,16 +281,16 @@ class RelativeDistinguishedName:
 
 class Name:
     @typing.overload
-    def __init__(self, attributes: typing.Iterable[NameAttribute]) -> None: ...
+    def __init__(self, attributes: Iterable[NameAttribute]) -> None: ...
 
     @typing.overload
     def __init__(
-        self, attributes: typing.Iterable[RelativeDistinguishedName]
+        self, attributes: Iterable[RelativeDistinguishedName]
     ) -> None: ...
 
     def __init__(
         self,
-        attributes: typing.Iterable[NameAttribute | RelativeDistinguishedName],
+        attributes: Iterable[NameAttribute | RelativeDistinguishedName],
     ) -> None:
         attributes = list(attributes)
         if all(isinstance(x, NameAttribute) for x in attributes):
@@ -324,8 +335,9 @@ class Name:
         )
 
     def get_attributes_for_oid(
-        self, oid: ObjectIdentifier
-    ) -> list[NameAttribute]:
+        self,
+        oid: ObjectIdentifier,
+    ) -> list[NameAttribute[str | bytes]]:
         return [i for i in self if i.oid == oid]
 
     @property
@@ -346,7 +358,7 @@ class Name:
         # for you, consider optimizing!
         return hash(tuple(self._attributes))
 
-    def __iter__(self) -> typing.Iterator[NameAttribute]:
+    def __iter__(self) -> Iterator[NameAttribute]:
         for rdn in self._attributes:
             yield from rdn