+  4iRt^RIHt^RIt^RIHt^RIHtHtH t H t H t H t H t ^RIHt^RIHt^RIHt^RIHt^R IHtHtHtHtHtHtHtHtR .tR R lt R Rlt!] !R4t"RRlt#RRlt$R#)zL `cryptography.x509 `_-specific code. ) annotationsN)Sequence) CertificateDNSName ExtensionOID IPAddressObjectIdentifier OtherNameUniformResourceIdentifier)ExtensionNotFound)decode) IA5String)CertificateError)DNS_IDCertificatePattern DNSPattern IPAddress_IDIPAddressPattern SRVPattern URIPatternverify_service_identityverify_certificate_hostnamec$V^8dQhRRRRRR/#) certificaterhostnamestrreturnNone)formats"?/usr/lib/python3/dist-packages/service_identity/cryptography.py __annotate__r"(s$!!!(+! !cH\\V4\V4..R7R#)aX Verify whether *certificate* is valid for *hostname*. .. note:: Nothing is verified about the *authority* of the certificate; the caller must verify that the certificate chains to an appropriate trust root themselves. Args: certificate: A *cryptography* X509 certificate object. hostname: The hostname that *certificate* should be valid for. Raises: service_identity.VerificationError: If *certificate* is not valid for *hostname*. service_identity.CertificateError: If *certificate* contains invalid / unexpected data. This includes the case where the certificate contains no `subjectAltName`\ s. .. versionchanged:: 24.1.0 :exc:`~service_identity.CertificateError` is raised if the certificate contains no ``subjectAltName``\ s instead of :exc:`~service_identity.VerificationError`.  cert_patternsobligatory_ids optional_idsN)rextract_patternsr)rrs&&r!rr(s":&{3x()r#c$V^8dQhRRRRRR/#)rrr ip_addressrrrr)r s"r!r"r"Ls$%%%*-% %r#cH\\V4\V4..R7R#)a Verify whether *certificate* is valid for *ip_address*. .. note:: Nothing is verified about the *authority* of the certificate; the caller must verify that the certificate chains to an appropriate trust root themselves. Args: certificate: A *cryptography* X509 certificate object. ip_address: The IP address that *connection* should be valid for. Can be an IPv4 or IPv6 address. Raises: service_identity.VerificationError: If *certificate* is not valid for *ip_address*. service_identity.CertificateError: If *certificate* contains invalid / unexpected data. This includes the case where the certificate contains no ``subjectAltName``\ s. .. versionadded:: 18.1.0 .. versionchanged:: 24.1.0 :exc:`~service_identity.CertificateError` is raised if the certificate contains no ``subjectAltName``\ s instead of :exc:`~service_identity.VerificationError`. r%N)rr)r)rr+s&&r!verify_certificate_ip_addressr-Ls#B&{3$Z01r#z1.3.6.1.5.5.7.8.7c V^8dQhRRRR/#rcertrrzSequence[CertificatePattern]r)r s"r!r"r"ws22;2+G2r#c .pVPP\P4pTP VP P \4Uu.uF(p\P!VPR44NK* up4TP VP P \4Uu.uF(p\P!VPR44NK* up4TP VP P \4Uu.uFp\V4NK up4VP P \4FpVP \"8XgK\%VP 4wrx\'V\(4'd6VP+\,P!VP/444K|Rp \1V 4h V#uupiuupiuupi \2dT#i;i)z Extract all valid ID patterns from a certificate for service verification. Args: cert: The certificate to be dissected. Returns: List of IDs. .. versionchanged:: 23.1.0 ``commonName`` is not used as a fallback anymore. zutf-8zUnexpected certificate content.) extensionsget_extension_for_oidrSUBJECT_ALTERNATIVE_NAMEextendvalueget_values_for_typerr from_bytesencoder rrrr type_id ID_ON_DNS_SRVr isinstancer appendrasOctetsrr ) r0idsextnameuriipothersrv_msgs & r!r)r)ws%'C"0oo33  1 1   II99'B BD%%dkk'&:;B  9988- C%%cjj&9:   ))77 B BB!$B  YY229=E}} - ,c9--JJz44S\\^DE;C*3//> J9    %   > JA s#)G1.G":.G'G,1 H?Hc V^8dQhRRRR/#r/r)r s"r!r"r"s " "k "&B "r#cR\P!\R^R7\V4#)za Deprecated and never public API. Use :func:`extract_patterns` instead. .. deprecated:: 23.1.0 z?`extract_ids()` is deprecated, please use `extract_patterns()`.)categorymessage stacklevel)warningswarnDeprecationWarningr))r0s&r! extract_idsrPs&  MM#Q D !!r#)%__doc__ __future__rrMtypingrcryptography.x509rrrrrr r cryptography.x509.extensionsr pyasn1.codec.der.decoderr pyasn1.type.charr exceptionsrhazmatrrrrrrrr__all__rr-r;r)rPrr#r!r[so#;+&(    ) )!H%P!!45 2j "r#