123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203 |
- #
- # This file is part of pyasn1-modules software.
- #
- # Created by Russ Housley with assistance from asn1ate v.0.6.0.
- # Modified by Russ Housley to add WithComponentsConstraints to
- # enforce the requirements that are indicated in comments.
- #
- # Copyright (c) 2019, Vigil Security, LLC
- # License: http://snmplabs.com/pyasn1/license.html
- #
- # Qualified Certificates
- #
- # ASN.1 source from:
- # https://www.rfc-editor.org/rfc/rfc3739.txt
- #
-
- from pyasn1.type import char
- from pyasn1.type import constraint
- from pyasn1.type import namedtype
- from pyasn1.type import namedval
- from pyasn1.type import opentype
- from pyasn1.type import univ
- from pyasn1.type import useful
-
- from pyasn1_modules import rfc5280
-
- MAX = float('inf')
-
-
- # Initialize the qcStatement map
-
- qcStatementMap = { }
-
-
- # Imports from RFC 5280
-
- AlgorithmIdentifier = rfc5280.AlgorithmIdentifier
-
- AttributeType = rfc5280.AttributeType
-
- DirectoryString = rfc5280.DirectoryString
-
- GeneralName = rfc5280.GeneralName
-
- id_pkix = rfc5280.id_pkix
-
- id_pe = rfc5280.id_pe
-
-
- # Arc for QC personal data attributes
-
- id_pda = id_pkix + (9, )
-
-
- # Arc for QC statements
-
- id_qcs = id_pkix + (11, )
-
-
- # Personal data attributes
-
- id_pda_dateOfBirth = id_pda + (1, )
-
- class DateOfBirth(useful.GeneralizedTime):
- pass
-
-
- id_pda_placeOfBirth = id_pda + (2, )
-
- class PlaceOfBirth(DirectoryString):
- pass
-
-
- id_pda_gender = id_pda + (3, )
-
- class Gender(char.PrintableString):
- subtypeSpec = constraint.ConstraintsIntersection(
- constraint.ValueSizeConstraint(1, 1),
- constraint.SingleValueConstraint('M', 'F', 'm', 'f')
- )
-
-
- id_pda_countryOfCitizenship = id_pda + (4, )
-
- class CountryOfCitizenship(char.PrintableString):
- subtypeSpec = constraint.ValueSizeConstraint(2, 2)
- # ISO 3166 Country Code
-
-
- id_pda_countryOfResidence = id_pda + (5, )
-
- class CountryOfResidence(char.PrintableString):
- subtypeSpec = constraint.ValueSizeConstraint(2, 2)
- # ISO 3166 Country Code
-
-
- # Biometric info certificate extension
-
- id_pe_biometricInfo = id_pe + (2, )
-
-
- class PredefinedBiometricType(univ.Integer):
- namedValues = namedval.NamedValues(
- ('picture', 0),
- ('handwritten-signature', 1)
- )
- subtypeSpec = constraint.SingleValueConstraint(0, 1)
-
-
- class TypeOfBiometricData(univ.Choice):
- componentType = namedtype.NamedTypes(
- namedtype.NamedType('predefinedBiometricType', PredefinedBiometricType()),
- namedtype.NamedType('biometricDataOid', univ.ObjectIdentifier())
- )
-
-
- class BiometricData(univ.Sequence):
- componentType = namedtype.NamedTypes(
- namedtype.NamedType('typeOfBiometricData', TypeOfBiometricData()),
- namedtype.NamedType('hashAlgorithm', AlgorithmIdentifier()),
- namedtype.NamedType('biometricDataHash', univ.OctetString()),
- namedtype.OptionalNamedType('sourceDataUri', char.IA5String())
- )
-
-
- class BiometricSyntax(univ.SequenceOf):
- componentType = BiometricData()
-
-
- # QC Statements certificate extension
- # NOTE: This extension does not allow to mix critical and
- # non-critical Qualified Certificate Statements. Either all
- # statements must be critical or all statements must be
- # non-critical.
-
- id_pe_qcStatements = id_pe + (3, )
-
-
- class NameRegistrationAuthorities(univ.SequenceOf):
- componentType = GeneralName()
- subtypeSpec=constraint.ValueSizeConstraint(1, MAX)
-
-
- class QCStatement(univ.Sequence):
- componentType = namedtype.NamedTypes(
- namedtype.NamedType('statementId', univ.ObjectIdentifier()),
- namedtype.OptionalNamedType('statementInfo', univ.Any(),
- openType=opentype.OpenType('statementId', qcStatementMap))
- )
-
-
- class QCStatements(univ.SequenceOf):
- componentType = QCStatement()
-
-
- class SemanticsInformation(univ.Sequence):
- componentType = namedtype.NamedTypes(
- namedtype.OptionalNamedType('semanticsIndentifier',
- univ.ObjectIdentifier()),
- namedtype.OptionalNamedType('nameRegistrationAuthorities',
- NameRegistrationAuthorities())
- )
- subtypeSpec = constraint.ConstraintsUnion(
- constraint.WithComponentsConstraint(
- ('semanticsIndentifier', constraint.ComponentPresentConstraint())),
- constraint.WithComponentsConstraint(
- ('nameRegistrationAuthorities', constraint.ComponentPresentConstraint()))
- )
-
-
- id_qcs = id_pkix + (11, )
-
-
- id_qcs_pkixQCSyntax_v1 = id_qcs + (1, )
-
-
- id_qcs_pkixQCSyntax_v2 = id_qcs + (2, )
-
-
- # Map of Certificate Extension OIDs to Extensions
- # To be added to the ones that are in rfc5280.py
-
- _certificateExtensionsMap = {
- id_pe_biometricInfo: BiometricSyntax(),
- id_pe_qcStatements: QCStatements(),
- }
-
- rfc5280.certificateExtensionsMap.update(_certificateExtensionsMap)
-
-
- # Map of AttributeType OIDs to AttributeValue added to the
- # ones that are in rfc5280.py
-
- _certificateAttributesMapUpdate = {
- id_pda_dateOfBirth: DateOfBirth(),
- id_pda_placeOfBirth: PlaceOfBirth(),
- id_pda_gender: Gender(),
- id_pda_countryOfCitizenship: CountryOfCitizenship(),
- id_pda_countryOfResidence: CountryOfResidence(),
- }
-
- rfc5280.certificateAttributesMap.update(_certificateAttributesMapUpdate)
|