|
123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455456457458459460461462463464465466467468469470471472473474475476477478479480481482483484485486487488489490491492493494495496497498499500501502503504505506507508509510511512513514515516517518519520521522523524525526527528529530531532533534535536537538539540541542543544545546547548549550551552553554555556557558559560561562563564565566567568569570571572573574575576577578579580581582583584585586587588589590591592593594595596597598599600601602603604605606607608609610611612613614615616617618619620621622623624625626627628629630631632633634635636637638639640641642643644645646647648649650651652653654655656657658659660661662663664665666667668669670671672673674675676677678679680681682683684685686687688689690691692693694695696697698699700701702703704705706707708709710711712713714715716717718719720721722723724725726727728729730731732733734735736737738739740741742743744745746747748749750751752753754755756757758759760761762763764765766767768769770771772773774775776777778779780781782783784785786 |
- # This file is being contributed to pyasn1-modules software.
- #
- # Created by Russ Housley with assistance from asn1ate v.0.6.0.
- #
- # Copyright (c) 2019, Vigil Security, LLC
- # License: http://snmplabs.com/pyasn1/license.html
- #
- # Trust Anchor Format
- #
- # ASN.1 source from:
- # https://www.rfc-editor.org/rfc/rfc5934.txt
-
- from pyasn1.type import univ, char, namedtype, namedval, tag, constraint, useful
-
- from pyasn1_modules import rfc2985
- from pyasn1_modules import rfc5280
- from pyasn1_modules import rfc5652
- from pyasn1_modules import rfc5914
-
- MAX = float('inf')
-
-
- def _OID(*components):
- output = []
- for x in tuple(components):
- if isinstance(x, univ.ObjectIdentifier):
- output.extend(list(x))
- else:
- output.append(int(x))
- return univ.ObjectIdentifier(output)
-
-
- # Imports from RFC 2985
-
- SingleAttribute = rfc2985.SingleAttribute
-
-
- # Imports from RFC5914
-
- CertPathControls = rfc5914.CertPathControls
-
- TrustAnchorChoice = rfc5914.TrustAnchorChoice
-
- TrustAnchorTitle = rfc5914.TrustAnchorTitle
-
-
- # Imports from RFC 5280
-
- AlgorithmIdentifier = rfc5280.AlgorithmIdentifier
-
- AnotherName = rfc5280.AnotherName
-
- Attribute = rfc5280.Attribute
-
- Certificate = rfc5280.Certificate
-
- CertificateSerialNumber = rfc5280.CertificateSerialNumber
-
- Extension = rfc5280.Extension
-
- Extensions = rfc5280.Extensions
-
- KeyIdentifier = rfc5280.KeyIdentifier
-
- Name = rfc5280.Name
-
- SubjectPublicKeyInfo = rfc5280.SubjectPublicKeyInfo
-
- TBSCertificate = rfc5280.TBSCertificate
-
- Validity = rfc5280.Validity
-
-
- # Object Identifier Arc for TAMP Message Content Types
-
- id_tamp = univ.ObjectIdentifier('2.16.840.1.101.2.1.2.77')
-
-
- # TAMP Status Query Message
-
- id_ct_TAMP_statusQuery = _OID(id_tamp, 1)
-
-
- class TAMPVersion(univ.Integer):
- pass
-
- TAMPVersion.namedValues = namedval.NamedValues(
- ('v1', 1),
- ('v2', 2)
- )
-
-
- class TerseOrVerbose(univ.Enumerated):
- pass
-
- TerseOrVerbose.namedValues = namedval.NamedValues(
- ('terse', 1),
- ('verbose', 2)
- )
-
-
- class HardwareSerialEntry(univ.Choice):
- pass
-
- HardwareSerialEntry.componentType = namedtype.NamedTypes(
- namedtype.NamedType('all', univ.Null()),
- namedtype.NamedType('single', univ.OctetString()),
- namedtype.NamedType('block', univ.Sequence(componentType=namedtype.NamedTypes(
- namedtype.NamedType('low', univ.OctetString()),
- namedtype.NamedType('high', univ.OctetString())
- ))
- )
- )
-
-
- class HardwareModules(univ.Sequence):
- pass
-
- HardwareModules.componentType = namedtype.NamedTypes(
- namedtype.NamedType('hwType', univ.ObjectIdentifier()),
- namedtype.NamedType('hwSerialEntries', univ.SequenceOf(
- componentType=HardwareSerialEntry()).subtype(
- subtypeSpec=constraint.ValueSizeConstraint(1, MAX)))
- )
-
-
- class HardwareModuleIdentifierList(univ.SequenceOf):
- pass
-
- HardwareModuleIdentifierList.componentType = HardwareModules()
- HardwareModuleIdentifierList.subtypeSpec=constraint.ValueSizeConstraint(1, MAX)
-
-
- class Community(univ.ObjectIdentifier):
- pass
-
-
- class CommunityIdentifierList(univ.SequenceOf):
- pass
-
- CommunityIdentifierList.componentType = Community()
- CommunityIdentifierList.subtypeSpec=constraint.ValueSizeConstraint(0, MAX)
-
-
- class TargetIdentifier(univ.Choice):
- pass
-
- TargetIdentifier.componentType = namedtype.NamedTypes(
- namedtype.NamedType('hwModules', HardwareModuleIdentifierList().subtype(
- implicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatSimple, 1))),
- namedtype.NamedType('communities', CommunityIdentifierList().subtype(
- implicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatSimple, 2))),
- namedtype.NamedType('allModules', univ.Null().subtype(
- implicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatSimple, 3))),
- namedtype.NamedType('uri', char.IA5String().subtype(
- implicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatSimple, 4))),
- namedtype.NamedType('otherName', AnotherName().subtype(
- implicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatSimple, 5)))
- )
-
-
- class SeqNumber(univ.Integer):
- pass
-
- SeqNumber.subtypeSpec = constraint.ValueRangeConstraint(0, 9223372036854775807)
-
-
- class TAMPMsgRef(univ.Sequence):
- pass
-
- TAMPMsgRef.componentType = namedtype.NamedTypes(
- namedtype.NamedType('target', TargetIdentifier()),
- namedtype.NamedType('seqNum', SeqNumber())
- )
-
-
- class TAMPStatusQuery(univ.Sequence):
- pass
-
- TAMPStatusQuery.componentType = namedtype.NamedTypes(
- namedtype.DefaultedNamedType('version', TAMPVersion().subtype(
- implicitTag=tag.Tag(tag.tagClassContext,
- tag.tagFormatSimple, 0)).subtype(value='v2')),
- namedtype.DefaultedNamedType('terse', TerseOrVerbose().subtype(
- implicitTag=tag.Tag(tag.tagClassContext,
- tag.tagFormatSimple, 1)).subtype(value='verbose')),
- namedtype.NamedType('query', TAMPMsgRef())
- )
-
-
- tamp_status_query = rfc5652.ContentInfo()
- tamp_status_query['contentType'] = id_ct_TAMP_statusQuery
- tamp_status_query['content'] = TAMPStatusQuery()
-
-
- # TAMP Status Response Message
-
- id_ct_TAMP_statusResponse = _OID(id_tamp, 2)
-
-
- class KeyIdentifiers(univ.SequenceOf):
- pass
-
- KeyIdentifiers.componentType = KeyIdentifier()
- KeyIdentifiers.subtypeSpec=constraint.ValueSizeConstraint(1, MAX)
-
-
- class TrustAnchorChoiceList(univ.SequenceOf):
- pass
-
- TrustAnchorChoiceList.componentType = TrustAnchorChoice()
- TrustAnchorChoiceList.subtypeSpec=constraint.ValueSizeConstraint(1, MAX)
-
-
- class TAMPSequenceNumber(univ.Sequence):
- pass
-
- TAMPSequenceNumber.componentType = namedtype.NamedTypes(
- namedtype.NamedType('keyId', KeyIdentifier()),
- namedtype.NamedType('seqNumber', SeqNumber())
- )
-
-
- class TAMPSequenceNumbers(univ.SequenceOf):
- pass
-
- TAMPSequenceNumbers.componentType = TAMPSequenceNumber()
- TAMPSequenceNumbers.subtypeSpec=constraint.ValueSizeConstraint(1, MAX)
-
-
- class TerseStatusResponse(univ.Sequence):
- pass
-
- TerseStatusResponse.componentType = namedtype.NamedTypes(
- namedtype.NamedType('taKeyIds', KeyIdentifiers()),
- namedtype.OptionalNamedType('communities', CommunityIdentifierList())
- )
-
-
- class VerboseStatusResponse(univ.Sequence):
- pass
-
- VerboseStatusResponse.componentType = namedtype.NamedTypes(
- namedtype.NamedType('taInfo', TrustAnchorChoiceList()),
- namedtype.OptionalNamedType('continPubKeyDecryptAlg',
- AlgorithmIdentifier().subtype(implicitTag=tag.Tag(
- tag.tagClassContext, tag.tagFormatSimple, 0))),
- namedtype.OptionalNamedType('communities',
- CommunityIdentifierList().subtype(implicitTag=tag.Tag(
- tag.tagClassContext, tag.tagFormatSimple, 1))),
- namedtype.OptionalNamedType('tampSeqNumbers',
- TAMPSequenceNumbers().subtype(implicitTag=tag.Tag(
- tag.tagClassContext, tag.tagFormatSimple, 2)))
- )
-
-
- class StatusResponse(univ.Choice):
- pass
-
- StatusResponse.componentType = namedtype.NamedTypes(
- namedtype.NamedType('terseResponse', TerseStatusResponse().subtype(
- implicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatConstructed, 0))),
- namedtype.NamedType('verboseResponse', VerboseStatusResponse().subtype(
- implicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatConstructed, 1)))
- )
-
-
- class TAMPStatusResponse(univ.Sequence):
- pass
-
- TAMPStatusResponse.componentType = namedtype.NamedTypes(
- namedtype.DefaultedNamedType('version', TAMPVersion().subtype(
- implicitTag=tag.Tag(tag.tagClassContext,
- tag.tagFormatSimple, 0)).subtype(value='v2')),
- namedtype.NamedType('query', TAMPMsgRef()),
- namedtype.NamedType('response', StatusResponse()),
- namedtype.DefaultedNamedType('usesApex', univ.Boolean().subtype(value=1))
- )
-
-
- tamp_status_response = rfc5652.ContentInfo()
- tamp_status_response['contentType'] = id_ct_TAMP_statusResponse
- tamp_status_response['content'] = TAMPStatusResponse()
-
-
- # Trust Anchor Update Message
-
- id_ct_TAMP_update = _OID(id_tamp, 3)
-
-
- class TBSCertificateChangeInfo(univ.Sequence):
- pass
-
- TBSCertificateChangeInfo.componentType = namedtype.NamedTypes(
- namedtype.OptionalNamedType('serialNumber', CertificateSerialNumber()),
- namedtype.OptionalNamedType('signature', AlgorithmIdentifier().subtype(
- implicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatSimple, 0))),
- namedtype.OptionalNamedType('issuer', Name().subtype(implicitTag=tag.Tag(
- tag.tagClassContext, tag.tagFormatSimple, 1))),
- namedtype.OptionalNamedType('validity', Validity().subtype(
- implicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatSimple, 2))),
- namedtype.OptionalNamedType('subject', Name().subtype(implicitTag=tag.Tag(
- tag.tagClassContext, tag.tagFormatSimple, 3))),
- namedtype.NamedType('subjectPublicKeyInfo', SubjectPublicKeyInfo().subtype(
- implicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatSimple, 4))),
- namedtype.OptionalNamedType('exts', Extensions().subtype(explicitTag=tag.Tag(
- tag.tagClassContext, tag.tagFormatSimple, 5)))
- )
-
-
- class TrustAnchorChangeInfo(univ.Sequence):
- pass
-
- TrustAnchorChangeInfo.componentType = namedtype.NamedTypes(
- namedtype.NamedType('pubKey', SubjectPublicKeyInfo()),
- namedtype.OptionalNamedType('keyId', KeyIdentifier()),
- namedtype.OptionalNamedType('taTitle', TrustAnchorTitle()),
- namedtype.OptionalNamedType('certPath', CertPathControls()),
- namedtype.OptionalNamedType('exts', Extensions().subtype(
- implicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatSimple, 1)))
- )
-
-
- class TrustAnchorChangeInfoChoice(univ.Choice):
- pass
-
- TrustAnchorChangeInfoChoice.componentType = namedtype.NamedTypes(
- namedtype.NamedType('tbsCertChange', TBSCertificateChangeInfo().subtype(
- implicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatConstructed, 0))),
- namedtype.NamedType('taChange', TrustAnchorChangeInfo().subtype(
- implicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatConstructed, 1)))
- )
-
-
- class TrustAnchorUpdate(univ.Choice):
- pass
-
- TrustAnchorUpdate.componentType = namedtype.NamedTypes(
- namedtype.NamedType('add', TrustAnchorChoice().subtype(
- implicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatSimple, 1))),
- namedtype.NamedType('remove', SubjectPublicKeyInfo().subtype(
- implicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatSimple, 2))),
- namedtype.NamedType('change', TrustAnchorChangeInfoChoice().subtype(
- explicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatConstructed, 3)))
- )
-
-
- class TAMPUpdate(univ.Sequence):
- pass
-
- TAMPUpdate.componentType = namedtype.NamedTypes(
- namedtype.DefaultedNamedType('version',
- TAMPVersion().subtype(implicitTag=tag.Tag(tag.tagClassContext,
- tag.tagFormatSimple, 0)).subtype(value='v2')),
- namedtype.DefaultedNamedType('terse',
- TerseOrVerbose().subtype(implicitTag=tag.Tag(tag.tagClassContext,
- tag.tagFormatSimple, 1)).subtype(value='verbose')),
- namedtype.NamedType('msgRef', TAMPMsgRef()),
- namedtype.NamedType('updates',
- univ.SequenceOf(componentType=TrustAnchorUpdate()).subtype(
- subtypeSpec=constraint.ValueSizeConstraint(1, MAX))),
- namedtype.OptionalNamedType('tampSeqNumbers',
- TAMPSequenceNumbers().subtype(implicitTag=tag.Tag(
- tag.tagClassContext, tag.tagFormatSimple, 2)))
- )
-
-
- tamp_update = rfc5652.ContentInfo()
- tamp_update['contentType'] = id_ct_TAMP_update
- tamp_update['content'] = TAMPUpdate()
-
-
- # Trust Anchor Update Confirm Message
-
- id_ct_TAMP_updateConfirm = _OID(id_tamp, 4)
-
-
- class StatusCode(univ.Enumerated):
- pass
-
- StatusCode.namedValues = namedval.NamedValues(
- ('success', 0),
- ('decodeFailure', 1),
- ('badContentInfo', 2),
- ('badSignedData', 3),
- ('badEncapContent', 4),
- ('badCertificate', 5),
- ('badSignerInfo', 6),
- ('badSignedAttrs', 7),
- ('badUnsignedAttrs', 8),
- ('missingContent', 9),
- ('noTrustAnchor', 10),
- ('notAuthorized', 11),
- ('badDigestAlgorithm', 12),
- ('badSignatureAlgorithm', 13),
- ('unsupportedKeySize', 14),
- ('unsupportedParameters', 15),
- ('signatureFailure', 16),
- ('insufficientMemory', 17),
- ('unsupportedTAMPMsgType', 18),
- ('apexTAMPAnchor', 19),
- ('improperTAAddition', 20),
- ('seqNumFailure', 21),
- ('contingencyPublicKeyDecrypt', 22),
- ('incorrectTarget', 23),
- ('communityUpdateFailed', 24),
- ('trustAnchorNotFound', 25),
- ('unsupportedTAAlgorithm', 26),
- ('unsupportedTAKeySize', 27),
- ('unsupportedContinPubKeyDecryptAlg', 28),
- ('missingSignature', 29),
- ('resourcesBusy', 30),
- ('versionNumberMismatch', 31),
- ('missingPolicySet', 32),
- ('revokedCertificate', 33),
- ('unsupportedTrustAnchorFormat', 34),
- ('improperTAChange', 35),
- ('malformed', 36),
- ('cmsError', 37),
- ('unsupportedTargetIdentifier', 38),
- ('other', 127)
- )
-
-
- class StatusCodeList(univ.SequenceOf):
- pass
-
- StatusCodeList.componentType = StatusCode()
- StatusCodeList.subtypeSpec=constraint.ValueSizeConstraint(1, MAX)
-
-
- class TerseUpdateConfirm(StatusCodeList):
- pass
-
-
- class VerboseUpdateConfirm(univ.Sequence):
- pass
-
- VerboseUpdateConfirm.componentType = namedtype.NamedTypes(
- namedtype.NamedType('status', StatusCodeList()),
- namedtype.NamedType('taInfo', TrustAnchorChoiceList()),
- namedtype.OptionalNamedType('tampSeqNumbers', TAMPSequenceNumbers()),
- namedtype.DefaultedNamedType('usesApex', univ.Boolean().subtype(value=1))
- )
-
-
- class UpdateConfirm(univ.Choice):
- pass
-
- UpdateConfirm.componentType = namedtype.NamedTypes(
- namedtype.NamedType('terseConfirm', TerseUpdateConfirm().subtype(
- implicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatSimple, 0))),
- namedtype.NamedType('verboseConfirm', VerboseUpdateConfirm().subtype(
- implicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatConstructed, 1)))
- )
-
-
- class TAMPUpdateConfirm(univ.Sequence):
- pass
-
- TAMPUpdateConfirm.componentType = namedtype.NamedTypes(
- namedtype.DefaultedNamedType('version', TAMPVersion().subtype(
- implicitTag=tag.Tag(tag.tagClassContext,
- tag.tagFormatSimple, 0)).subtype(value='v2')),
- namedtype.NamedType('update', TAMPMsgRef()),
- namedtype.NamedType('confirm', UpdateConfirm())
- )
-
-
- tamp_update_confirm = rfc5652.ContentInfo()
- tamp_update_confirm['contentType'] = id_ct_TAMP_updateConfirm
- tamp_update_confirm['content'] = TAMPUpdateConfirm()
-
-
- # Apex Trust Anchor Update Message
-
- id_ct_TAMP_apexUpdate = _OID(id_tamp, 5)
-
-
- class TAMPApexUpdate(univ.Sequence):
- pass
-
- TAMPApexUpdate.componentType = namedtype.NamedTypes(
- namedtype.DefaultedNamedType('version',
- TAMPVersion().subtype(implicitTag=tag.Tag(tag.tagClassContext,
- tag.tagFormatSimple, 0)).subtype(value='v2')),
- namedtype.DefaultedNamedType('terse',
- TerseOrVerbose().subtype(implicitTag=tag.Tag(tag.tagClassContext,
- tag.tagFormatSimple, 1)).subtype(value='verbose')),
- namedtype.NamedType('msgRef', TAMPMsgRef()),
- namedtype.NamedType('clearTrustAnchors', univ.Boolean()),
- namedtype.NamedType('clearCommunities', univ.Boolean()),
- namedtype.OptionalNamedType('seqNumber', SeqNumber()),
- namedtype.NamedType('apexTA', TrustAnchorChoice())
- )
-
-
- tamp_apex_update = rfc5652.ContentInfo()
- tamp_apex_update['contentType'] = id_ct_TAMP_apexUpdate
- tamp_apex_update['content'] = TAMPApexUpdate()
-
-
- # Apex Trust Anchor Update Confirm Message
-
- id_ct_TAMP_apexUpdateConfirm = _OID(id_tamp, 6)
-
-
- class TerseApexUpdateConfirm(StatusCode):
- pass
-
-
- class VerboseApexUpdateConfirm(univ.Sequence):
- pass
-
- VerboseApexUpdateConfirm.componentType = namedtype.NamedTypes(
- namedtype.NamedType('status', StatusCode()),
- namedtype.NamedType('taInfo', TrustAnchorChoiceList()),
- namedtype.OptionalNamedType('communities',
- CommunityIdentifierList().subtype(implicitTag=tag.Tag(tag.tagClassContext,
- tag.tagFormatSimple, 0))),
- namedtype.OptionalNamedType('tampSeqNumbers',
- TAMPSequenceNumbers().subtype(implicitTag=tag.Tag(tag.tagClassContext,
- tag.tagFormatSimple, 1)))
- )
-
-
- class ApexUpdateConfirm(univ.Choice):
- pass
-
- ApexUpdateConfirm.componentType = namedtype.NamedTypes(
- namedtype.NamedType('terseApexConfirm',
- TerseApexUpdateConfirm().subtype(implicitTag=tag.Tag(tag.tagClassContext,
- tag.tagFormatSimple, 0))),
- namedtype.NamedType('verboseApexConfirm',
- VerboseApexUpdateConfirm().subtype(implicitTag=tag.Tag(tag.tagClassContext,
- tag.tagFormatConstructed, 1)))
- )
-
-
- class TAMPApexUpdateConfirm(univ.Sequence):
- pass
-
- TAMPApexUpdateConfirm.componentType = namedtype.NamedTypes(
- namedtype.DefaultedNamedType('version',
- TAMPVersion().subtype(implicitTag=tag.Tag(tag.tagClassContext,
- tag.tagFormatSimple, 0)).subtype(value='v2')),
- namedtype.NamedType('apexReplace', TAMPMsgRef()),
- namedtype.NamedType('apexConfirm', ApexUpdateConfirm())
- )
-
-
- tamp_apex_update_confirm = rfc5652.ContentInfo()
- tamp_apex_update_confirm['contentType'] = id_ct_TAMP_apexUpdateConfirm
- tamp_apex_update_confirm['content'] = TAMPApexUpdateConfirm()
-
-
- # Community Update Message
-
- id_ct_TAMP_communityUpdate = _OID(id_tamp, 7)
-
-
- class CommunityUpdates(univ.Sequence):
- pass
-
- CommunityUpdates.componentType = namedtype.NamedTypes(
- namedtype.OptionalNamedType('remove',
- CommunityIdentifierList().subtype(implicitTag=tag.Tag(tag.tagClassContext,
- tag.tagFormatSimple, 1))),
- namedtype.OptionalNamedType('add',
- CommunityIdentifierList().subtype(implicitTag=tag.Tag(tag.tagClassContext,
- tag.tagFormatSimple, 2)))
- )
-
-
- class TAMPCommunityUpdate(univ.Sequence):
- pass
-
- TAMPCommunityUpdate.componentType = namedtype.NamedTypes(
- namedtype.DefaultedNamedType('version',
- TAMPVersion().subtype(implicitTag=tag.Tag(tag.tagClassContext,
- tag.tagFormatSimple, 0)).subtype(value='v2')),
- namedtype.DefaultedNamedType('terse',
- TerseOrVerbose().subtype(implicitTag=tag.Tag(tag.tagClassContext,
- tag.tagFormatSimple, 1)).subtype(value='verbose')),
- namedtype.NamedType('msgRef', TAMPMsgRef()),
- namedtype.NamedType('updates', CommunityUpdates())
- )
-
-
- tamp_community_update = rfc5652.ContentInfo()
- tamp_community_update['contentType'] = id_ct_TAMP_communityUpdate
- tamp_community_update['content'] = TAMPCommunityUpdate()
-
-
- # Community Update Confirm Message
-
- id_ct_TAMP_communityUpdateConfirm = _OID(id_tamp, 8)
-
-
- class TerseCommunityConfirm(StatusCode):
- pass
-
-
- class VerboseCommunityConfirm(univ.Sequence):
- pass
-
- VerboseCommunityConfirm.componentType = namedtype.NamedTypes(
- namedtype.NamedType('status', StatusCode()),
- namedtype.OptionalNamedType('communities', CommunityIdentifierList())
- )
-
-
- class CommunityConfirm(univ.Choice):
- pass
-
- CommunityConfirm.componentType = namedtype.NamedTypes(
- namedtype.NamedType('terseCommConfirm',
- TerseCommunityConfirm().subtype(implicitTag=tag.Tag(tag.tagClassContext,
- tag.tagFormatSimple, 0))),
- namedtype.NamedType('verboseCommConfirm',
- VerboseCommunityConfirm().subtype(implicitTag=tag.Tag(tag.tagClassContext,
- tag.tagFormatConstructed, 1)))
- )
-
-
- class TAMPCommunityUpdateConfirm(univ.Sequence):
- pass
-
- TAMPCommunityUpdateConfirm.componentType = namedtype.NamedTypes(
- namedtype.DefaultedNamedType('version',
- TAMPVersion().subtype(implicitTag=tag.Tag(tag.tagClassContext,
- tag.tagFormatSimple, 0)).subtype(value='v2')),
- namedtype.NamedType('update', TAMPMsgRef()),
- namedtype.NamedType('commConfirm', CommunityConfirm())
- )
-
-
- tamp_community_update_confirm = rfc5652.ContentInfo()
- tamp_community_update_confirm['contentType'] = id_ct_TAMP_communityUpdateConfirm
- tamp_community_update_confirm['content'] = TAMPCommunityUpdateConfirm()
-
-
- # Sequence Number Adjust Message
-
- id_ct_TAMP_seqNumAdjust = _OID(id_tamp, 10)
-
-
-
- class SequenceNumberAdjust(univ.Sequence):
- pass
-
- SequenceNumberAdjust.componentType = namedtype.NamedTypes(
- namedtype.DefaultedNamedType('version',
- TAMPVersion().subtype(implicitTag=tag.Tag(tag.tagClassContext,
- tag.tagFormatSimple, 0)).subtype(value='v2')),
- namedtype.NamedType('msgRef', TAMPMsgRef())
- )
-
-
- tamp_sequence_number_adjust = rfc5652.ContentInfo()
- tamp_sequence_number_adjust['contentType'] = id_ct_TAMP_seqNumAdjust
- tamp_sequence_number_adjust['content'] = SequenceNumberAdjust()
-
-
- # Sequence Number Adjust Confirm Message
-
- id_ct_TAMP_seqNumAdjustConfirm = _OID(id_tamp, 11)
-
-
- class SequenceNumberAdjustConfirm(univ.Sequence):
- pass
-
- SequenceNumberAdjustConfirm.componentType = namedtype.NamedTypes(
- namedtype.DefaultedNamedType('version',
- TAMPVersion().subtype(implicitTag=tag.Tag(tag.tagClassContext,
- tag.tagFormatSimple, 0)).subtype(value='v2')),
- namedtype.NamedType('adjust', TAMPMsgRef()),
- namedtype.NamedType('status', StatusCode())
- )
-
-
- tamp_sequence_number_adjust_confirm = rfc5652.ContentInfo()
- tamp_sequence_number_adjust_confirm['contentType'] = id_ct_TAMP_seqNumAdjustConfirm
- tamp_sequence_number_adjust_confirm['content'] = SequenceNumberAdjustConfirm()
-
-
- # TAMP Error Message
-
- id_ct_TAMP_error = _OID(id_tamp, 9)
-
-
- class TAMPError(univ.Sequence):
- pass
-
- TAMPError.componentType = namedtype.NamedTypes(
- namedtype.DefaultedNamedType('version',
- TAMPVersion().subtype(implicitTag=tag.Tag(tag.tagClassContext,
- tag.tagFormatSimple, 0)).subtype(value='v2')),
- namedtype.NamedType('msgType', univ.ObjectIdentifier()),
- namedtype.NamedType('status', StatusCode()),
- namedtype.OptionalNamedType('msgRef', TAMPMsgRef())
- )
-
-
- tamp_error = rfc5652.ContentInfo()
- tamp_error['contentType'] = id_ct_TAMP_error
- tamp_error['content'] = TAMPError()
-
-
- # Object Identifier Arc for Attributes
-
- id_attributes = univ.ObjectIdentifier('2.16.840.1.101.2.1.5')
-
-
- # contingency-public-key-decrypt-key unsigned attribute
-
- id_aa_TAMP_contingencyPublicKeyDecryptKey = _OID(id_attributes, 63)
-
-
- class PlaintextSymmetricKey(univ.OctetString):
- pass
-
-
- contingency_public_key_decrypt_key = Attribute()
- contingency_public_key_decrypt_key['type'] = id_aa_TAMP_contingencyPublicKeyDecryptKey
- contingency_public_key_decrypt_key['values'][0] = PlaintextSymmetricKey()
-
-
- # id-pe-wrappedApexContinKey extension
-
- id_pe_wrappedApexContinKey =univ.ObjectIdentifier('1.3.6.1.5.5.7.1.20')
-
-
- class ApexContingencyKey(univ.Sequence):
- pass
-
- ApexContingencyKey.componentType = namedtype.NamedTypes(
- namedtype.NamedType('wrapAlgorithm', AlgorithmIdentifier()),
- namedtype.NamedType('wrappedContinPubKey', univ.OctetString())
- )
-
-
- wrappedApexContinKey = Extension()
- wrappedApexContinKey['extnID'] = id_pe_wrappedApexContinKey
- wrappedApexContinKey['critical'] = 0
- wrappedApexContinKey['extnValue'] = univ.OctetString()
-
-
- # Add to the map of CMS Content Type OIDs to Content Types in
- # rfc5652.py
-
- _cmsContentTypesMapUpdate = {
- id_ct_TAMP_statusQuery: TAMPStatusQuery(),
- id_ct_TAMP_statusResponse: TAMPStatusResponse(),
- id_ct_TAMP_update: TAMPUpdate(),
- id_ct_TAMP_updateConfirm: TAMPUpdateConfirm(),
- id_ct_TAMP_apexUpdate: TAMPApexUpdate(),
- id_ct_TAMP_apexUpdateConfirm: TAMPApexUpdateConfirm(),
- id_ct_TAMP_communityUpdate: TAMPCommunityUpdate(),
- id_ct_TAMP_communityUpdateConfirm: TAMPCommunityUpdateConfirm(),
- id_ct_TAMP_seqNumAdjust: SequenceNumberAdjust(),
- id_ct_TAMP_seqNumAdjustConfirm: SequenceNumberAdjustConfirm(),
- id_ct_TAMP_error: TAMPError(),
- }
-
- rfc5652.cmsContentTypesMap.update(_cmsContentTypesMapUpdate)
-
-
- # Add to the map of CMS Attribute OIDs to Attribute Values in
- # rfc5652.py
-
- _cmsAttributesMapUpdate = {
- id_aa_TAMP_contingencyPublicKeyDecryptKey: PlaintextSymmetricKey(),
- }
-
- rfc5652.cmsAttributesMap.update(_cmsAttributesMapUpdate)
-
-
- # Add to the map of Certificate Extension OIDs to Extensions in
- # rfc5280.py
-
- _certificateExtensionsMap = {
- id_pe_wrappedApexContinKey: ApexContingencyKey(),
- }
-
- rfc5280.certificateExtensionsMap.update(_certificateExtensionsMap)
|