o vh @sBddlmZddlmZddlmZddlmZGdddZdS))Optional)x509ValidationPath)ConsListc@sjeZdZddddeedeedefddZe d d Z e d efd d Z de j fddZdddZdS) ValProcStateNF)ee_name_overrideis_side_validationcert_path_stackrr cCs8|jdur tdd|_||_t|p|j|_||_dS)NzEmpty path stackr)head ValueErrorindexrbooltailr r )selfr rr rZ/var/www/html/hyperkenya/venv/lib/python3.10/site-packages/pyhanko_certvalidator/_state.py__init__ s  zValProcState.__init__cCs(ddlm}|jj}t||sJ|jS)z Length of the path being validated. .. note:: This is the path length in the sense of RFC 5280, i.e. the root doesn't count. rr)pyhanko_certvalidator.pathrr r isinstancepkix_len)rrpathrrrpath_lens zValProcState.path_lenreturncCs |j|jkS)N)r r)rrrr is_ee_cert(s zValProcState.is_ee_certee_certcCs<ddlm}|jD]}|}|r|j|jkr|Sq dS)a Helper method to avoid recursion in indirect CRL validation. There are some questionable-but-technically-valid CA setups where a CRL issuer is authorised to assert its own revocation status, which could cause a naive implementation to recurse. rrN)rrr get_ee_cert_safesha256)rrrrcertrrrcheck_path_verif_recursion,s  z'ValProcState.check_path_verif_recursioncCsb| }|jdkr|jdurd}n|js||M}d|j}n |jdur'|j}nd}|r/d|S|S)zy :return: A unicode string describing the position of a certificate in the chain N certificatezintermediate certificate zend-entity certificatezthe )r rr)r def_interm never_defprefixresultrrr describe_cert<s zValProcState.describe_cert)FF)__name__ __module__ __qualname__rrrstrrrpropertyrrr Certificaterr&rrrrrs   rN) typingr asn1cryptorrrpyhanko_certvalidator.utilrrrrrrs