a k#d@svdZddlmZddlmZddlZddlZddlZddlmZm Z ddl m m Z ddl mZddlmZddlmZdd lmZdd lmZmZmZmZmZmZmZmZmZdd lm Z m!Z!m"Z"m#Z#dd l$m%Z%m&Z&ej'rdd l(m)Z)ddl*m+Z+ddl,m-Z-m.Z.ddl/m0Z0dZ1dZ2dZ3ej4j5d:ddZ6ej4j5ddZ7ddZ8Gddde9Z:Gddde;Ze=e9Z?Gd"d#d#e?e"Z@Gd$d%d%e?ZAGd&d'd'e<ZBGd(d)d)eZCGd*d+d+e >eBe9ZDGd,d-d-eDe"e#ZEGd.d/d/eDZFGd0d1d1e<ZGGd2d3d3e >eGe9ZHGd4d5d5e<ZIGd6d7d7e >eIe9ZJGd8d9d9eKZLdS);a( High-level methods for PKI objects (X.509 certificates, CRLs, asymmetric keys). Supports both RSA and ECDSA objects. The classes below are wrappers for the ASN.1 objects defined in x509.py. By collecting their attributes, we bypass the ASN.1 structure, hence there is no direct method for exporting a new full DER-encoded version of a Cert instance after its serial has been modified (for example). If you need to modify an import, just use the corresponding ASN1_Packet. For instance, here is what you could do in order to modify the serial of 'cert' and then resign it with whatever 'key':: f = open('cert.der') c = X509_Cert(f.read()) c.tbsCertificate.serialNumber = 0x4B1D k = PrivKey('key.pem') new_x509_cert = k.resignCert(c) No need for obnoxious openssl tweaking anymore. :) )absolute_import)print_functionN)confcrypto_validator)warning)binrepr)ASN1_BIT_STRING) hash_by_oid) X509_SubjectPublicKeyInfo RSAPublicKey RSAPrivateKeyECDSAPublicKeyECDSAPrivateKeyRSAPrivateKey_OpenSSLECDSAPrivateKey_OpenSSL X509_CertX509_CRL) pkcs_os2ip _get_hash_EncryptAndVerifyRSA_DecryptAndSignRSA)raw bytes_encode)default_backend) serialization)rsaec)InvalidSignatureiiUNKNOWNcsVd|}t|fddtdtdD}|d|7}|d|7}|S)z=Convert DER octet string to PEM format (with optional header)z-----BEGIN %s----- csg|]}||dqS)@).0i base64_stringr L/var/www/html/gsl.tools/lib/python3.9/site-packages/scapy/layers/tls/cert.py Jzder2pem..rr z -----END %s----- )encodebase64 b64encoderangelenjoin) der_stringobj pem_stringchunksr r#r%der2pemDs   r3cCsl|dd}|dd}|d|dkr2td|dd |d}|||}|d dt|}|S) z Convert PEM string to DER format r's-----  -----BEGINz-pem2der() expects only one PEM-encoded objects-----rr()replacefind Exceptionrfindr* b64decode)r1Z first_idxZlast_idxr$r/r r r%pem2derPs    r=cCs~g}|dkrz|d}|dkr qz|d}|dkr:td|d|d}|dkrZt|}||||||d }q|S) zI Split PEM objects. Useful to process concatenated certificates. r'r6r7s-----ENDz$Invalid PEM object (missing END tag)r(rN)r9r:r-append)sZ pem_stringsZ start_idxZend_idxr r r% split_pem_s  rAc@seZdZddZddZdS)_PKIObjcCs||_||_||_dSN)frmtderpem)selfrDrErFr r r%__init__usz_PKIObj.__init__cCs|jSrC)rErGr r r%__str__}sz_PKIObj.__str__N)__name__ __module__ __qualname__rHrJr r r r%rBtsrBc@seZdZdddZdS) _PKIObjMakerNc Csd}|durt|t|}d|vrtj|rtj|}||krLt|z6t|d}|}Wdn1sv0YWqtyt|Yq0n|}zLd|vrd}|} t|} d t t | } nd}|} d} |durt ||} Wnty t|Yn0t || | } | S) NzUnable to import datarbr6PEMr'DER)r:rospathisfilegetsizeopenreadrAr.mapr=r3rB) clsZobj_pathZ obj_max_sizeZ pem_marker error_msg_sizef_rawrDrFZder_listrEpr r r%__call__s:  *  z_PKIObjMaker.__call__)N)rKrLrMrar r r r%rNsrNc@seZdZdZdddZdS)_PubKeyFactoryz Metaclass for PubKey creation. It casts the appropriate class on the fly, then fills in the appropriate attributes with import_from_asn1pkt() submethod. Nc CsR|dur6t|}|turt}||_d|_||St|trdt|}t|_d|_| ||St ||t }zlt |j }|j}t|trt|_||n8t|trt|_z||j WqtyYq0nd}WnTty2z"t|j }t|_||d}Wnty,tdYn0Yn0|jdkrNt|j ||_|S)Noriginaltuples PUBLIC KEYsRSA PUBLIC KEYzUnable to import public keyrR)typeraPubKey PubKeyRSA __class__rDfill_and_store isinstancerdimport_from_tuplerN _MAX_KEY_SIZEr rEZsubjectPublicKeyr import_from_asn1pktr PubKeyECDSAimport_from_der ImportErrorr:r3rF)r[key_pathr0Zspkipubkeymarkerr r r%rasP            z_PubKeyFactory.__call__)NrKrLrM__doc__rar r r r%rbsrbc@seZdZdZddZdS)rfze Parent class for both PubKeyRSA and PubKeyECDSA. Provides a common verifyCert() method. cCs8|j}|j}t|jj}t|j}|jt|||ddSz) Verifies either a Cert or an X509_Cert. pkcshttbsCertificate signaturer algorithmvalrsignatureValueverifyrGcerttbsCertsigAlgrysigValr r r% verifyCerts   zPubKey.verifyCertN)rKrLrMrurr r r r%rfsrfc@sFeZdZdZedddZeddZddZdd d Zdd dZ dS)rgz Wrapper for RSA keys based on _EncryptAndVerifyRSA from crypto/pkcs1.py Use the 'key' attribute to access original object. NcCs|pd}|s2|pd}tj||td}||_ns zPubKeyECDSA.fill_and_storecCstj|td|_dSN)r)rZload_der_public_keyrrr)rGrrr r r%roDszPubKeyECDSA.import_from_derrcKs tddS)NzNo ECDSA encryption support)r:)rGrrykwargsr r r%rJszPubKeyECDSA.encryptcKs:z |j||tt|WdSty4YdS0dSNTFrrrrECDSArrrGrrryrr r r%rNs  zPubKeyECDSA.verify)N)r)r) rKrLrMrurrirorrr r r r%rn9s   rnc@seZdZdZdddZdS)_PrivKeyFactoryz Metaclass for PrivKey creation. It casts the appropriate class on the fly, then fills in the appropriate attributes with import_from_asn1pkt() submethod. NcCsr|dur6t|}|turt}||_d|_||St||t}d}zt |j }|j }t |_d}Wnt yz"t|j }|j }t|_d}d}Wnxt yzt|j }t |_d}WnJt y zt|j }t|_d}Wnt yt dYn0Yn0Yn0Yn0z||Wnty:Yn0|jd krn|r`tt|||_nt|j ||_|S) z key_path may be the path to either: _an RSAPrivateKey_OpenSSL (as generated by openssl); _an ECDSAPrivateKey_OpenSSL (as generated by openssl); _an RSAPrivateKey; _an ECDSAPrivateKey. NrcFs PRIVATE KEYsEC PRIVATE KEYTsRSA PRIVATE KEYzUnable to import private keyrR)reraPrivKey PrivKeyECDSArhrDrirNrlrrEZ privateKey PrivKeyRSAr:rr rrmrpr3rrF)r[rqr0ZmultiPEMprivkeyrsr r r%rabsV       z_PrivKeyFactory.__call__)Nrtr r r r%r\src@seZdZdZddZeZdS)_Raw_ASN1_BIT_STRINGz+A ASN1_BIT_STRING that ignores BER encodingcCs|jSrC)Z val_readablerIr r r% __bytes__sz_Raw_ASN1_BIT_STRING.__bytes__N)rKrLrMrurrJr r r r%rsrc@s*eZdZdZd ddZddZddZd S) rzx Parent class for both PrivKeyRSA and PrivKeyECDSA. Provides common signTBSCert() and resignCert() methods. rcCsN|j}|pt|jj}|jt||dd}t}||_||_t |dd|_ |S)a Note that this will always copy the signature field from the tbsCertificate into the signatureAlgorithm field of the result, regardless of the coherence between its contents (which might indicate ecdsa-with-SHA512) and the result (e.g. RSA signing MD2). There is a small inheritance trick for the computation of sigVal below: in order to use a sign() method which would apply to both PrivKeyRSA and PrivKeyECDSA, the sign() methods of the subclasses accept any argument, be it from the RSA or ECDSA world, and then they keep the ones they're interested in. Here, t will be passed eventually to pkcs1._DecryptAndSignRSA.sign(). rwrxT)readable) r}r r~rsignrrr|ZsignatureAlgorithmrr)rGrryrrcr r r% signTBSCertszPrivKey.signTBSCertcCs|j|jddS)z9 Rewrite the signature of either a Cert or an X509_Cert. N)ry)rr|)rGrr r r% resignCertszPrivKey.resignCertcCs8|j}|j}t|jj}t|j}|jt|||ddSrvr{rr r r%rs   zPrivKey.verifyCertN)r)rKrLrMrurrrr r r r%rs rc @s:eZdZdZed ddZddZdd d Zdd d ZdS)rz Wrapper for RSA keys based on _DecryptAndSignRSA from crypto/pkcs1.py Use the 'key' attribute to access original object. Nc Cs|pd}d||||| ||fvrH|p$d} tj|| td|_|j|_n`tt|} |rh| |krhtdtj ||d} tj |||||| | d} | t|_|j|_|j } | |_ | j|_| j|_dS)Nrrrrr)r`qZdmp1Zdmq1Ziqmpdr)rrrkeyrrrr-rrrZRSAPrivateNumbersrrrrrrr) rGrrrprime1prime2 coefficient exponent1 exponent2privExprrZprivNumr r r%ris2     zPrivKeyRSA.fill_and_storec Cs^|jj}|jj}|jj}|jj}|jj}|jj}|jj}|jj} |j |||||||| ddS)N)rrrrrrrr) rrrZprivateExponentrrrrrri) rGrrrrrrrrrr r r%rmszPrivKeyRSA.import_from_asn1pktrwrc Cstj|||||||dSrrrr r r%rszPrivKeyRSA.verifycCstj||||||dSr)rr)rGdatarzryrrr r r%rszPrivKeyRSA.sign) NNNNNNNNN)rwrNN)rwrNN rKrLrMrurrirmrrr r r r%rs  rc@sFeZdZdZed ddZeddZed dd Zedd d ZdS)rz Wrapper for ECDSA keys based on SigningKey from ecdsa library. Use the 'key' attribute to access original object. NcCs,|ptj}t|t|_|j|_dSrC)rrrrrrrr)rGrr r r%ris zPrivKeyECDSA.fill_and_storecCs(tjt|dtd|_|j|_dSr)rZload_der_private_keyrrrrrr)rGrr r r%rms z PrivKeyECDSA.import_from_asn1pktrcKs:z |j||tt|WdSty4YdS0dSrrrr r r%rs  zPrivKeyECDSA.verifycKs|j|tt|SrC)rrrrr)rGrryrr r r%r#szPrivKeyECDSA.sign)N)r)rrr r r r%r s   rc@seZdZdZddZdS) _CertMakerz Metaclass for Cert creation. It is not necessary as it was for the keys, but we reuse the model instead of creating redundant constructors. cCsNt||td}t|_zt|j}Wnty>tdYn0|||S)N CERTIFICATEUnable to import certificate) rNra_MAX_CERT_SIZECertrhrrEr:rm)r[ cert_pathr0rr r r%ra1s  z_CertMaker.__call__Nrtr r r r%r,src@sheZdZdZddZddZddZdd d Zdd dZdddZ ddZ dddZ ddZ ddZ d S)rzt Wrapper for the X509_Cert from layers/x509.py. Use the 'x509Cert' attribute to access original object. cCsd}||_|j}||_|jr,|jjd|_nd|_|jj|_|jjj|_ | |_ | |_ t|j |_||_||_t|j|_d|_|jjj|_z|jjj|_Wntyt|Yn0t d|j|_!|jj"j|_#z|jj"j|_$Wntyt|Yn0t d|j$|_%t&t'|j(|_)|j*r|j*D]}|j+jdkr|d|_,|j-j,r|j-j,jdk |_,nR|j+jdkr|j-.|_/n6|j+jdkr|j-0|_1n|j+jd krF|j-j2j|_qFt'|j3|_3t4|j3|_5dS) Nrr>%xZbasicConstraintsFrkeyUsage extKeyUsageZauthorityKeyIdentifier)6Zx509Certr|versionr serialNumberserialr}r~oidnamer get_issuerissuerget_issuer_str issuer_strhash issuer_hashZ get_subjectsubjectZget_subject_str subject_str subject_hashauthorityKeyIDZvalidityZ not_before pretty_time notBefore_strdatetime timetupleZ notBefore ValueErrorr:timestrftimeZnotBefore_str_simpleZ not_after notAfter_strnotAfterZnotAfter_str_simplerfrZsubjectPublicKeyInfopubKey extensionsextnIDZcA extnValueZ get_keyUsagerZget_extendedKeyUsagerZ keyIdentifierrr- signatureLen)rGrr\rZextnr r r%rmCsV              zCert.import_from_asn1pktcCs|j|jkrdS|j|S)z True if 'other' issued 'self', i.e.: - self.issuer == other.subject - self is signed by other FrrrrrGotherr r r% isIssuerCertys zCert.isIssuerCertcCs|j|jkr||SdS)z Return True if the certificate is self-signed: - issuer and subject are the same - the signature of the certificate is valid. F)rrrrIr r r% isSelfSigneds  zCert.isSelfSignedrwrNcCs|jj|||||dSr)rrrr r r%rsz Cert.encryptcCs|jj||||||dSr)rrrr r r%rsz Cert.verifycCs|durt}nTt|trfz&d|vr4t|d}n t|d}Wn"tydtdt}Yn0t|}t|j}||d}|S)af Based on the value of notAfter field, returns the number of days the certificate will still be valid. The date used for the comparison is the current and local date, as returned by time.localtime(), except if 'now' argument is provided another one. 'now' argument can be given as either a time tuple or a string representing the date. Accepted format for the string version are: - '%b %d %H:%M:%S %Y %Z' e.g. 'Jan 30 07:38:59 2008 GMT' - '%m/%d/%y' e.g. '01/30/08' (less precise) If the certificate is no more valid at the date considered, then a negative value is returned representing the number of days since it has expired. The number of days is returned as a float to deal with the unlikely case of certificates that are still just valid. N/z%m/%d/%yz%b %d %H:%M:%S %Y %Zz7Bad time string provided, will use localtime() instead.g@) r localtimerjstrstrptimer:rmktimer)rGnowZnftdiffr r r% remainingDayss      zCert.remainingDayscCsn|D]d}|jdurB|jdurB|j|jkrB|jdd|jDvS|j|jkr|jdd|jDvSqdS)a Given a list of trusted CRL (their signature has already been verified with trusted anchors), this function returns True if the certificate is marked as revoked by one of those CRL. Note that if the Certificate was on hold in a previous CRL and is now valid again in a new CRL and bot are in the list, it will be considered revoked: this is because _all_ CRLs are checked (not only the freshest) and revocation status is not handled. Also note that the check on the issuer is performed on the Authority Key Identifier if available in _both_ the CRL and the Cert. Otherwise, the issuers are simply compared. Ncss|]}|dVqdSrNr r!xr r r% r'z!Cert.isRevoked..css|]}|dVqdSrr rr r r%rr'F)rrrevoked_cert_serialsr)rGZcrl_listrr r r% isRevokeds   zCert.isRevokedrRcCsXt|d:}|dkr"||jn|dkr6||jWdn1sJ0YdS)zT Export certificate in 'fmt' format (DER or PEM) to file 'filename' wbrRrQN)rXwriterErF)rGfilenamefmtr^r r r%exports  z Cert.exportcCsBtd|jtd|jtd|jtd|j|jfdS)Nz Serial: %sIssuer: z Subject: zValidity: %s to %s)printrrrrrrIr r r%showsz Cert.showcCsd|j|jfS)Nz#[X.509 Cert. Subject:%s, Issuer:%s])rrrIr r r%__repr__sz Cert.__repr__)rwrNN)rwrNN)N)rR)rKrLrMrurmrrrrrrr r r r r r r%r=s6    % rc@seZdZdZddZdS) _CRLMakerz Metaclass for CRL creation. It is not necessary as it was for the keys, but we reuse the model instead of creating redundant constructors. cCsNt||td}t|_zt|j}Wnty>tdYn0|||S)NzX509 CRLUnable to import CRL) rNra _MAX_CRL_SIZECRLrhrrEr:rm)r[rr0crlr r r%ras  z_CRLMaker.__call__Nrtr r r r%rsrc@s0eZdZdZddZddZddZdd Zd S) rzr Wrapper for the X509_CRL from layers/x509.py. Use the 'x509CRL' attribute to access original object. c Csd}||_|j}t||_|jr0|jjd|_nd|_|jjj|_| |_ | |_ t |j |_|jj|_|jj}|ddkr|dd}zt|d|_Wntyt|Yn0td|j|_d|_d|_|jrJ|jj|_|jj}|ddkr |dd}zt|d|_Wnty8t|Yn0td|j|_|jrz|jD] }|jjdkrX|jjj|_ qXg}|j!r|j!D]l}|j"j} |j#j} | ddkr| dd} zt| dWntyt|Yn0|$| | fq||_%t|j&|_&t'|j&|_(dS)Nrr>r7Zz %y%m%d%H%M%Sr cRLNumber))Zx509CRL tbsCertListrrrr}r~rrrrrrrrZ this_updaterlastUpdate_strrr lastUpdater:rZlastUpdate_str_simple nextUpdateZnextUpdate_str_simpleZ next_updatenextUpdate_strZ crlExtensionsrrrnumberZrevokedCertificatesrZrevocationDater?rrr-r) rGrr\rrr extensionZrevokedrrdater r r%rmsf               zCRL.import_from_asn1pktcCs|j|jkrdS|j|S)NFrrr r r%r>s zCRL.isIssuerCertcstfdd|DS)Nc3s|]}|VqdSrC)r)r!arIr r%rFr'zCRL.verify..)any)rGanchorsr rIr%rDsz CRL.verifycCsJtd|jtd|jtd|jtd|jtd|jdS)Nz Version: %dzsigAlg: r zlastUpdate: %sznextUpdate: %s)r rrrrrrIr r r%r Hs zCRL.showN)rKrLrMrurmrrr r r r r%rs >rc@s@eZdZdZd ddZdddZdddZdd d Zd d ZdS)Chainz/ Basically, an enhanced array of Cert. NcCst|d|r||n*|D]$}|r ||||qFq t|dkr|rt|}|D]*}||drb||||qqbt||krRqqRdS)a Construct a chain of certificates starting with a self-signed certificate (or any certificate submitted by the user) and following issuer/subject matching and signature validity. If there is exactly one chain to be constructed, it will be, but if there are multiple potential chains, there is no guarantee that the retained one will be the longest one. As Cert and CRL classes both share an isIssuerCert() method, the trailing element of a Chain may alternatively be a CRL. Note that we do not check AKID/{SKID/issuer/serial} matching, nor the presence of keyCertSign in keyUsage extension (if present). r rr7N)listrHr?rremover-r)rGZcertListZcert0Zroot_candidateZtmp_lenrr r r%rHYs$        zChain.__init__csv|pg}|D]d}t|||tdkr,q tfdd|Dr D]}|dkrFq\qF|dur Sq dS)a Perform verification of certificate chains for that certificate. A list of anchors is required. The certificates in the optional untrusted list may be used as additional elements to the final chain. On par with chain instantiation, only one chain constructed with the untrusted candidates will be retained. Eventually, dates are checked. r>c3s|]}|ddvVqdS)r>Nr r!rchainr r%rr'z$Chain.verifyChain..rr7N)r r-rr)rGr untrustedrrr r$r% verifyChain}s    zChain.verifyChaincCsz6t|d}|}Wdn1s*0YWntyPtdYn0ddt|D}d}|rz6t|d}|}Wdn1s0YWntytdYn0ddt|D}|||S)z Does the same job as .verifyChain() but using the list of anchors from the cafile. As for .verifyChain(), a list of untrusted certificates can be passed (as a file, this time). rPNzCould not read from cafilecSsg|] }t|qSr rr#r r r%r&r'z/Chain.verifyChainFromCAFile.."Could not read from untrusted_filecSsg|] }t|qSr r(r#r r r%r&r')rXrYr:rAr')rGcafileuntrusted_filer^ca_certsrr&untrusted_certsr r r%verifyChainFromCAFiles *  * zChain.verifyChainFromCAFilec Csz^g}t|D]J}ttj||d"}|t|Wdq1sP0YqWntyxtdYn0d}|rz6t|d}|}Wdn1s0YWntytdYn0ddt |D}| ||S)ae Does the same job as .verifyChainFromCAFile() but using the list of anchors in capath directory. The directory should (only) contain certificates files in PEM format. As for .verifyChainFromCAFile(), a list of untrusted certificates can be passed as a file (concatenation of the certificates in PEM format). rPNz(capath provided is not a valid cert pathr)cSsg|] }t|qSr r(r#r r r%r&r'z/Chain.verifyChainFromCAPath..) rTlistdirrXrUr.r?rrYr:rAr') rGcapathr+rr*fdr&r^r-r r r%verifyChainFromCAPaths 6  * zChain.verifyChainFromCAPathcCst|d}|dkrdS|d}d}|s<|d|j7}n|d|j7}d}||kr||}|dd|d |jf7}||kr|d 7}|d7}qN|S) Nr>rrSz__ z%s [Not Self Signed] z%s [Self Signed] z%s_ %s  )r-rr)rGZllenrr@idxr r r%r s   zChain.__repr__)N)N)N)N) rKrLrMrurHr'r.r2r r r r r%r Ts  $   r )r)Mru __future__rrr*rTrZ scapy.configrrZscapy.libs.sixZlibssixZ scapy.errorrZ scapy.utilsrZscapy.asn1.asn1rZscapy.asn1.mibr Zscapy.layers.x509r r r r rrrrrZscapy.layers.tls.crypto.pkcs1rrrrZ scapy.compatrrZ crypto_validZcryptography.hazmat.backendsrZcryptography.hazmat.primitivesrZ)cryptography.hazmat.primitives.asymmetricrrZ'cryptography.hazmat.backends.openssl.ecrrlrrcommandsregisterr3r=rAobjectrBrerNrbwith_metaclassrfrgrnrrrrrrrrrr!r r r r r%sX      ,      7<6#?*=#.Z