o Œõ±jbã@s¤ddlmZmZmZmZddlZddlZddlmZddl m Z m Z ddl m Z mZddlmZmZmZejd kr;eZd d gZd d „Zddd „Zdd„Zdd„ZdS)é)Úunicode_literalsÚdivisionÚabsolute_importÚprint_functionNé)Ú Certificate)ÚnewÚunwrapé)ÚCoreFoundationÚ CFHelpers)ÚSecurityÚ SecurityConstÚhandle_sec_error)éÚextract_from_systemÚ system_pathcCsdS)N©rrrú‹/root/aizidognhua/tmp/workspace/projects/ec89d86c-575f-41c9-af57-ac45cbdbf775/venv/lib/python3.10/site-packages/oscrypto/_mac/trust_list.pyrsFcCs˜ttdƒ}t |¡}t|ƒt|ƒ}i}i}d}tƒtƒf}t |¡} td| ƒD]} t  || ¡} t | ƒ\} } | || <q(t  |¡t j t jfD]Ü}ttdƒ}t ||¡}|t jkrYqFt|ƒt|ƒ}t |¡} td| ƒD]±} t  || ¡} ttdƒ}t | ||¡}|t jkr…qk|t jkr t | ƒ\} } | |vrŸt||| dƒ|| =qkt|ƒt|ƒ}tƒ}tƒ}t |¡}td|ƒD]2}t  ||¡}t |¡}| di¡ d|¡}| dd¡}|dkoÜ|d k}|rå| |¡q¸| |¡q¸t | ƒ\} } ||vr| |vrt||| d ƒ|| =n||vrt|gƒ}||f|| <t  |¡qkt  |¡qFg}|D]"} |s4t||| d ƒ| | |¡}| || |d|df¡q'|S) aÇ Extracts trusted CA certificates from the OS X trusted root keychain. :param cert_callback: A callback that is called once for each certificate in the trust store. It should accept two parameters: an asn1crypto.x509.Certificate object, and a reason. The reason will be None if the certificate is being exported, otherwise it will be a unicode string of the reason it won't. :param callback_only_on_failure: A boolean - if the callback should only be called when a certificate is not exported. :raises: OSError - when an error is returned by the OS crypto library :return: A list of 3-element tuples: - 0: a byte string of a DER-encoded certificate - 1: a set of unicode strings that are OIDs of purposes to trust the certificate for - 2: a set of unicode strings that are OIDs of purposes to reject the certificate for z CFArrayRef *z 2.5.29.37.0rzinvalid trust settingsÚkSecTrustSettingsPolicyÚ SecPolicyOidÚkSecTrustSettingsResultr rzexplicitly distrustedN)rr r ÚSecTrustCopyAnchorCertificatesrr ÚsetÚCFArrayGetCountÚrangeÚCFArrayGetValueAtIndexÚ _cert_detailsÚ CFReleaserÚkSecTrustSettingsDomainUserÚkSecTrustSettingsDomainAdminÚ SecTrustSettingsCopyCertificatesÚerrSecNoTrustSettingsÚ!SecTrustSettingsCopyTrustSettingsÚerrSecItemNotFoundÚerrSecInvalidTrustSettingsÚ_cert_callbackr Úcf_dictionary_to_dictÚgetÚaddÚappend)Ú cert_callbackÚcallback_only_on_failureÚcerts_pointer_pointerÚresÚ certs_pointerÚ certificatesÚ trust_infoÚ all_purposesÚ default_trustÚlengthÚindexÚ cert_pointerÚder_certÚ cert_hashÚdomainÚ#cert_trust_settings_pointer_pointerÚcert_trust_settings_pointerÚtrust_settings_pointer_pointerÚtrust_settings_pointerÚ trust_oidsÚ reject_oidsÚsettings_lengthÚsettings_indexÚsettings_dict_entryÚ settings_dictÚ policy_oidÚ trust_resultÚ should_trustÚoutputÚcert_trust_inforrrrs”                 ý         ý€       cCs|sdS|t |¡|ƒdS)aY Constructs an asn1crypto.x509.Certificate object and calls the export callback :param callback: The callback to call :param der_cert: A byte string of the DER-encoded certificate :param reason: None if cert is being exported, or a unicode string of the reason it is not being exported N)rÚload)Úcallbackr7Úreasonrrrr&£sr&c Cs\d}z t |¡}t |¡}t |¡ ¡}||fW|dur"t |¡SS|dur-t |¡ww)a Return the certificate and a hash of it :param cert_pointer: A SecCertificateRef :return: A 2-element tuple: - [0]: A byte string of the SHA1 hash of the cert - [1]: A byte string of the DER-encoded contents of the cert N) r ÚSecCertificateCopyDatar Úcf_data_to_bytesÚhashlibÚsha1Údigestr r)r6Ú data_pointerr7r8rrrr¸s     ÿ ÿr)NF)Ú __future__rrrrrNÚsysÚ_asn1rÚ_ffirr Ú_core_foundationr r Ú _securityr rrÚ version_infoÚxrangerÚ__all__rrr&rrrrrÚs"  þ