+ wje ^RIHt^RIt^RIt^RIt^RIHt^RIHt^RI H t ^RI H t ^RIHtHtHtHtHtHtHtHt^RIHtHt^R IHtHtHt^R IHtH t ^R I!H"t"]P!R ^^4t#]PH] PJ] PL] PN] PP] PR] PT] PV] PX3,t-!R R].4t/RRlt0RRlt1RRlt2!RR4t3!RR4t4!RR]Pj4t6!RR].4t7] Ppt8] Prt9] Ptt:] Pvt;] Pxt<] Pzt=] P|t>] P~t?] Pt@] PtA] PtB!RR4tC!RR 4tD!R!R"4tE!R#R$4tFR%R&ltGR#)') annotationsN)Iterable)utils)x509)hashes)dsaeced448ed25519paddingrsax448x25519) CertificateIssuerPrivateKeyTypesCertificatePublicKeyTypes) Extension ExtensionType_make_sequence_methods)Name _ASN1Type)ObjectIdentifieric.a]tRt^5tRV3RlltRtV;t#)AttributeNotFoundc$V^8dQhRRRRRR/#)msgstroidrreturnNone)formats"n/Users/bertmahoney/workspace/ai-archive/.venv-openbrain/lib/python3.14/site-packages/cryptography/x509/base.py __annotate__AttributeNotFound.__annotate__6s"C&64c 2<\SV`V4W nR#N)super__init__r)selfrr __class__s&&&r#r*AttributeNotFound.__init__6s r&)r__name__ __module__ __qualname____firstlineno__r*__static_attributes__ __classcell__r,s@r#rr5s r&rc$V^8dQhRRRRRR/#)r extensionzExtension[ExtensionType] extensionslist[Extension[ExtensionType]]rr r!)r"s"r#r$r$;s+EE'E.E Er&cdVF)pVPVP8XgK \R4h R#)z$This extension has already been set.N)r ValueError)r7r8es&& r#_reject_duplicate_extensionr=;s*  55IMM !CD Dr&c$V^8dQhRRRRRR/#)rrr attributes0list[tuple[ObjectIdentifier, bytes, int | None]]rr r!)r"s"r#r$r$Es+EE E@E Er&cBVFwppW 8XgK\R4h R#)z$This attribute has already been set.N)r;)rr?attr_oid_s&& r#_reject_duplicate_attributerDEs% %!Q ?CD D%r&c V^8dQhRRRR/#)rtimedatetime.datetimerr!)r"s"r#r$r$Os  %6 ;L r&cVPeIVP4pV'dTM\P!4pVP RR7V, #V#)zNormalizes a datetime to a naive datetime in UTC. time -- datetime to normalize. Assumed to be in UTC if not timezone aware. N)tzinfo)rI utcoffsetdatetime timedeltareplace)rFoffsets& r#_convert_to_naive_utc_timerOOsG  {{!!x'9'9';||4|(611 r&c]tRt^]t]P P 3RRllt]RRl4t ]RRl4tRRlt R R lt R R lt R t R#) Attributec(V^8dQhRRRRRRRR/#) rrrvaluebytes_typeintrr r!)r"s"r#r$Attribute.__annotate__^s2    r&c *WnW nW0nR#r()_oid_valuerU)r+rrSrUs&&&&r#r*Attribute.__init__^s    r&cV^8dQhRR/#)rrrr!)r"s"r#r$rWis%r&c VP#r()rYr+s&r#r Attribute.oidhs yyr&cV^8dQhRR/#)rrrTr!)r"s"r#r$rWmsur&c VP#r()rZr^s&r#rSAttribute.valuels {{r&cV^8dQhRR/#rrrr!)r"s"r#r$rWpsDD#Dr&c >RVP RVP: R2#)z)rrSr^s&r#__repr__Attribute.__repr__ps  (4::.CCr&c V^8dQhRRRR/#)rotherobjectrboolr!)r"s"r#r$rWss  F t r&c \V\4'g\#VPVP8H;'d;VPVP8H;'dVP VP 8H#r() isinstancerQNotImplementedrrSrU)r+rjs&&r#__eq__Attribute.__eq__ss`%++! ! HH ! * * ekk) * * ekk) r&cV^8dQhRR/#rrrVr!)r"s"r#r$rW}s88#8r&c Z\VPVPVP34#r()hashrrSrUr^s&r#__hash__Attribute.__hash__}s TXXtzz4::677r&)rYrUrZN)r/r0r1r2r UTF8StringrSr*propertyrrgrprvr3r!r&r#rQrQ]sU ))// D 88r&rQcR]tRt^tRRlt]!R4wtttRRlt RRlt Rt R #) Attributesc V^8dQhRRRR/#)rr?zIterable[Attribute]rr r!)r"s"r#r$Attributes.__annotate__s,,', ,r&c &\V4VnR#r()list _attributes)r+r?s&&r#r*Attributes.__init__s +r&rcV^8dQhRR/#rdr!)r"s"r#r$r}s33#3r&c "RVP R2#)z ?EEr&rN) r/r0r1r2r*r__len____iter__ __getitem__rgrr3r!r&r#r{r{s+, & >%''12 2  JtY$?$?34 4#C)9)9:  **CC/       2d 2S 1 2  r& rsa_paddingecdsa_deterministicc 0V^8dQhRRRRRRRRR R R R /#) r private_keyr algorithm_AllowedHashTypes | Nonebackend typing.Anyr%padding.PSS | padding.PKCS1v15 | Noner bool | NonerCertificateSigningRequestr!)r"s"r#r$rsF! ! 5! ,!  ! ; ! )!  #! r&c VPf \R4hVeg\V\P\P 34'g \ R4h\V\P4'g \ R4hVe,\V\P4'g \ R4h\P!VVVVV4#)z6 Signs the request using the requestor's private key. z/A CertificateSigningRequest must have a subjectPadding must be PSS or PKCS1v15&Padding is only supported for RSA keys1Deterministic ECDSA is only supported for EC keys) rr;rnr PSSPKCS1v15rr RSAPrivateKeyr EllipticCurvePrivateKey rust_x509create_x509_csrr+rrrrrs&&&&$$r#sign%CertificateSigningRequestBuilder.signs    %NO O  "kGKK9I9I+JKK ABBk3+<+<== HII  *k2+E+EFFG((        r&)rrrr() r/r0r1r2r*rrrrr3r!r&r#rrsK%)57GI &   $ "&  @! >B ! ,0! ! r&rc]tRtRt$R]R&RRRRRR.3RRlltRRltR R ltR R ltR Rlt RRlt RRlt RRlt RRRRR/RRlllt RtR#)CertificateBuilderi$r9rNc8V^8dQhRRRRRRRRRR R R R R R R/#)r issuer_namerr public_keyz CertificatePublicKeyTypes | None serial_number int | Nonenot_valid_beforedatetime.datetime | Nonenot_valid_afterr8r9rr r!)r"s"r#r$CertificateBuilder.__annotate__'sZ&& &"&5 & " & 3 &2&3& &r&c \PVnWnW nW0nW@nWPnW`nWpn R#r() rr_version _issuer_namer _public_key_serial_number_not_valid_before_not_valid_afterr)r+rrrrrrr8s&&&&&&&&r#r*CertificateBuilder.__init__'s9  ')%+!1 /%r&c V^8dQhRRRR/#rrrrrr!)r"s"r#r$r:s   ); r&c  \V\4'g \R4hVPe \ R4h\ VVP VPVPVPVPVP4#)z# Sets the CA's distinguished name. r%The issuer name may only be set once.) rnrrrr;rrrrrrrrs&&r#rCertificateBuilder.issuer_name:s{$%%9: :    (DE E!            " "  ! !     r&c V^8dQhRRRR/#rr!)r"s"r#r$rLs   *< r&c  \V\4'g \R4hVPe \ R4h\ VP VVPVPVPVPVP4#)z* Sets the requestor's distinguished name. rr) rnrrrr;rrrrrrrrs&&r#rCertificateBuilder.subject_nameLs{$%%9: :    )EF F!            " "  ! !     r&c V^8dQhRRRR/#)rkeyrrrr!)r"s"r#r$r^s# # &#  # r&c  \V\P\P\ P \P\P\P\P34'g \R4hVP e \#R4h\%VP&VP(VVP*VP,VP.VP04#)zD Sets the requestor's public key (as found in the signing request). zExpecting one of DSAPublicKey, RSAPublicKey, EllipticCurvePublicKey, Ed25519PublicKey, Ed448PublicKey, X25519PublicKey, or X448PublicKey.z$The public key may only be set once.)rnr DSAPublicKeyr RSAPublicKeyr EllipticCurvePublicKeyr Ed25519PublicKeyr Ed448PublicKeyrX25519PublicKeyr X448PublicKeyrrr;rrrrrrr)r+rs&&r#rCertificateBuilder.public_key^s     ))(($$&&""    !     'CD D!            " "  ! !     r&c V^8dQhRRRR/#)rnumberrVrrr!)r"s"r#r$rs  C ,> r&c  t\V\4'g \R4hVPe \ R4hV^8:d \ R4hVP 4^8d \ R4h\ VPVPVPVVPVPVP4#)z% Sets the certificate serial number. 'Serial number must be of integral type.'The serial number may only be set once.z%The serial number should be positive.3The serial number should not be more than 159 bits.) rnrVrrr; bit_lengthrrrrrrrr+rs&&r#r CertificateBuilder.serial_numbers&#&&EF F    *FG G Q;DE E    # %E "            " "  ! !     r&c V^8dQhRRRR/#rrFrGrrr!)r"s"r#r$rs  %6 ;M r&c  \V\P4'g \R4hVPe \ R4h\ V4pV\ 8d \ R4hVPeWP8d \ R4h\VPVPVPVPVVPVP4#)z' Sets the certificate activation time. Expecting datetime object.z*The not valid before may only be set once.z>The not valid before date must be on or after 1950 January 1).zBThe not valid before date must be before the not valid after date.)rnrKrrr;rO_EARLIEST_UTC_TIMErrrrrrrr+rFs&&r#r#CertificateBuilder.not_valid_befores$ 1 12289 9  ! ! -IJ J)$/ $ $$   ,8M8M1M "               ! !     r&c V^8dQhRRRR/#rr!)r"s"r#r$rs  $5 :L r&c  \V\P4'g \R4hVPe \ R4h\ V4pV\ 8d \ R4hVPeWP8d \ R4h\VPVPVPVPVPVVP4#)z' Sets the certificate expiration time. rz)The not valid after may only be set once.z ,0 >B 0 ,00 0 r&rc]tRtRt$R]R&R]R&RRR..3RRlltR R ltR R ltR RltRRlt RRlt RRRRR/RRlllt Rt R#) CertificateRevocationListBuilderi#r9rlist[RevokedCertificate]_revoked_certificatesNc ,V^8dQhRRRRRRRRRR /#) rrr last_updater next_updater8r9revoked_certificatesrr!)r"s"r#r$-CertificateRevocationListBuilder.__annotate__'s< : :  :. :. : 3 : 7 :r&c BWnW nW0nW@nWPnR#r()r _last_update _next_updaterr)r+rrrr8rs&&&&&&r#r*)CertificateRevocationListBuilder.__init__'s"(''%%9"r&c V^8dQhRRRR/#)rrrrrr!)r"s"r#r$r5s     )  r&c \V\4'g \R4hVPe \ R4h\ VVP VPVPVP4#)rr) rnrrrr;rrrrr)r+rs&&r#r,CertificateRevocationListBuilder.issuer_name5si+t,,9: :    (DE E/            & &   r&c V^8dQhRRRR/#)rrrGrrr!)r"s"r#r$rD  , ) r&c \V\P4'g \R4hVPe \ R4h\ V4pV\ 8d \ R4hVPeWP8d \ R4h\VPVVPVPVP4#)r!Last update may only be set once.8The last update date must be on or after 1950 January 1.z9The last update date must be before the next update date.) rnrKrrr;rOrrrrrr)r+rs&&r#r,CertificateRevocationListBuilder.last_updateDs+x'8'89989 9    (@A A0= + +J     ([;L;L-LK 0            & &   r&c V^8dQhRRRR/#)rrrGrrr!)r"s"r#r$r\r$r&c \V\P4'g \R4hVPe \ R4h\ V4pV\ 8d \ R4hVPeWP8d \ R4h\VPVPVVPVP4#)rr&r'z8The next update date must be after the last update date.) rnrKrrr;rOrrrrrr)r+rs&&r#r,CertificateRevocationListBuilder.next_update\s+x'8'89989 9    (@A A0= + +J     ([;L;L-LJ 0            & &   r&c$V^8dQhRRRRRR/#)rrrrrlrrr!)r"s"r#r$rts$  # /3 ) r&c $\V\4'g \R4h\VPW!4p\ W0P 4\VPVPVP.VP OVNVP4#)z= Adds an X.509 extension to the certificate revocation list. r) rnrrrrr=rrrrrrrs&&& r#r.CertificateRevocationListBuilder.add_extensionts &-00@A Afjj(; #I/?/?@/          *d * *  & &   r&c V^8dQhRRRR/#)rrevoked_certificateRevokedCertificaterrr!)r"s"r#r$rs  #5 ) r&c \V\4'g \R4h\VPVP VP VP.VPOVN4#)z( Adds a revoked certificate to the CRL. z)Must be an instance of RevokedCertificate) rnr1rrrrrrr)r+r0s&&r#add_revoked_certificate8CertificateRevocationListBuilder.add_revoked_certificatesd -/ABBGH H/             >d(( >*= >   r&rrc 0V^8dQhRRRRRRRRR R R R /#) rrrrrrrrrrrrCertificateRevocationListr!)r"s"r#r$rsF$ $ 5$ ,$  $ ; $ )$  #$ r&c VPf \R4hVPf \R4hVPf \R4hVeg\ V\ P \ P34'g \R4h\ V\P4'g \R4hVe,\ V\P4'g \R4h\P!VVVVV4#)NzA CRL must have an issuer namez"A CRL must have a last update timez"A CRL must have a next update timerrr)rr;rrrnr rrrr rr rrcreate_x509_crlrs&&&&$$r#r%CertificateRevocationListBuilder.signs    $=> >    $AB B    $AB B  "kGKK9I9I+JKK ABBk3+<+<== HII  *k2+E+EFFG((        r&)rrrrrr() r/r0r1r2rr*rrrrr3rr3r!r&r#rr#s\//33$(0404579; :   0 0 & "$ >B $ ,0$ $ r&rc`]tRtRtRR.3RRlltRRltRRltR R ltRR R lltR t R#)RevokedCertificateBuilderiNc$V^8dQhRRRRRR/#)rrrrevocation_daterr8r9r!)r"s"r#r$&RevokedCertificateBuilder.__annotate__s(&&!&2&3 &r&c *WnW nW0nR#r()r_revocation_dater)r+rr=r8s&&&&r#r*"RevokedCertificateBuilder.__init__s , /%r&c V^8dQhRRRR/#)rrrVrr;r!)r"s"r#r$r>s  C ,E r&c \V\4'g \R4hVPe \ R4hV^8:d \ R4hVP 4^8d \ R4h\ WPVP4#)rrz$The serial number should be positiver) rnrVrrr;rr;r@rrs&&r#r'RevokedCertificateBuilder.serial_numbers&#&&EF F    *FG G Q;CD D    # %E ) ))4+;+;  r&c V^8dQhRRRR/#)rrFrGrr;r!)r"s"r#r$r>s  % " r&c \V\P4'g \R4hVPe \ R4h\ V4pV\ 8d \ R4h\VPWP4#)rz)The revocation date may only be set once.z7The revocation date must be on or after 1950 January 1.) rnrKrr@r;rOrr;rrrs&&r#r=)RevokedCertificateBuilder.revocation_dates~$ 1 12289 9  ,HI I)$/ $ $I )   '7'7  r&c$V^8dQhRRRRRR/#)rrrrrlrr;r!)r"s"r#r$r>s$   #  /3  "  r&c \V\4'g \R4h\VPW!4p\ W0P 4\VPVP.VP OVN4#)r) rnrrrrr=rr;rr@rs&&& r#r'RevokedCertificateBuilder.add_extensionsm&-00@A Afjj(; #I/?/?@(     ! ! *d * *  r&c V^8dQhRRRR/#)rrrrr1r!)r"s"r#r$r>s::Z:3E:r&c VPf \R4hVPf \R4h\P!V4#)Nz/A revoked certificate must have a serial numberz1A revoked certificate must have a revocation date)rr;r@rcreate_revoked_certificate)r+rs&&r#buildRevokedCertificateBuilder.buildsI    &NO O  (C 33D99r&)rr@rr() r/r0r1r2r*rr=rrNr3r!r&r#r;r;s+%)4857 & $  ::r&r;cV^8dQhRR/#rsr!)r"s"r#r$r$s66c6r&cd\P\P!^4R4^, #)big)rV from_bytesosurandomr!r&r#random_serial_numberrWs >>"**R.% 0A 55r&)H __future__rrKrUtypingcollections.abcr cryptographyr"cryptography.hazmat.bindings._rustrrcryptography.hazmat.primitivesr)cryptography.hazmat.primitives.asymmetricrr r r r r rr/cryptography.hazmat.primitives.asymmetric.typesrrcryptography.x509.extensionsrrrcryptography.x509.namerrcryptography.x509.oidrrUnionSHA224SHA256SHA384SHA512SHA3_224SHA3_256SHA3_384SHA3_512_AllowedHashTypes Exceptionrr=rDrOrQr{Enumrrrr1r6rload_pem_x509_certificateload_der_x509_certificateload_pem_x509_certificatesload_pem_x509_csrload_der_x509_csrload_pem_x509_crlload_der_x509_crlrrrr;rWr!r&r#rvs # $@1    32&&tQ2LL MM MM MM MM OO OO OO OO   EE !8!8HFF( ejj -Y- ## 11&??%??&??%??&AA////////m m `| | ~Y Y xB:B:J6r&