+ xi£cs‚€Rt^RIHt^RIHt]'d^RIHtHt^RIH t R RRllt R RR llt !R R 4t R#)zŠModule for handling signed PSKC files. This module defines a Signature class that handles the signature checking, keys and certificates. )Ú annotations)Ú TYPE_CHECKING)Ú_ElementÚ _ElementTree©ÚPSKCNcs4€V^8„dQhRRRRRRRRR RR RR R/#) éÚxmlrÚkeyÚbytesÚ certificateZstrÚ algorithmú str | NoneÚdigest_algorithmÚcanonicalization_methodÚreturn©©Zformató"Ú3/usr/lib/python3.14/site-packages/pskc/signature.pyÚ __annotate__r%sN€÷+ñ+Ø ð+à ð+ðð+ðð +ð !ð +ð (ð +ðñ+ócsj€^RIHpHpHpT;'gRpT;'gRpT;'g\ VRR4;'gRpV!VP VP R^4R ,P4VP R^4R ,P4VR7PWVR 7#) z—Sign PSKC data using X.509 certificate and private key. xml: an XML document key: the private key in binary format certificate: the X.509 certificate )Ú XMLSignerÚXMLSignatureProcessorÚmethodsz rsa-sha256Zsha256Zdefault_c14n_algorithmNz$http://www.w3.org/2006/12/xml-c14n11Z#)ZmethodZsignature_algorithmr Zc14n_algorithm)rZcertiÿÿÿÿ) ÚsignxmlrrrZgetattrZ envelopedZrsplitZlowerÚsign) rrr r r rrrrs &&&&&& rÚ sign_x509r%sº€÷BÑAØ×)Ð)˜\€IØ'×3Ð3¨8Ðà÷ /ð /ÜÐ%Ð'?ÀÓF÷ /ð /à.ðñ Ø× Ñ Ø%×,Ñ,¨S°!Ó4°RÕ8×>Ñ>Ó@Ø)×0Ñ0°°aÓ8¸Õ<×BÑBÓDØ.ô  ÷  dˆ3˜k€dÓ*ð +rcs(€V^8„dQhRRRRRRRR/#)rÚtreerr r Ú ca_pem_filerrrrrrrBs)€÷ñhð¨ZðÈZðÐckñrcsR€^RIHpV!4PWVR7P#)aVerify signature in PSKC data against a trusted X.509 certificate. :param certificate: a PEM encoded certificate that is used for verification :param ca_pem_file: the name of a file that contains a CA certificate The signature can be verified in three ways: * The signature has an embedded certificate that is signed by a CA that is configured in the system CA store. In this case neither `certificate` or `ca_pem_file` need to be specified * The signature was made and a certificate was transmitted out-of-band. In this case the `certificate` argument needs to be present. * The signature has a certificate that is signed by a specific CA who's certificate was transmitted out-of-band. In this case the `ca_pem_file` is used to point to a CA certificate file (but a certificate needs to be embedded inside the PSKC file). This function will raise an exception when the validation fails. After calling this function a verified version of the PSKC file will be present in the :attr:`signed_pskc` attribute. )Ú XMLVerifier)Z x509_certr)rrÚverifyÚ signed_xml)rr rrs&&& rÚ verify_x509r!Bs.€õ.$Ù ‹=× Ñ Ø Øð ó ÷jðrcs¾€]tRt^`tRtRRlt]RRl4t]RRl4t]PRR l4t]R R l4t RR Rllt RRRllt RRlt RtR #)Ú SignatureasClass for handling signature checking of the PSKC file. Instances of this class provide the following properties: is_signed: boolean to indicate whether a signature is present algorithm: identifier of the signing algorithm used canonicalization_method: identifier of the XML canonicalization used digest_algorithm: algorithm used for creating the hash issuer: issuer of the certificate serial: serial number of the certificate key: key that will be used when creating a signed PSKC file certificate: the certificate that is embedded in the signature signed_pskc: a PSKC instance with the signed information có €V^8„dQhRRRR/#)rÚpskcrrÚNonerrrrrÚSignature.__annotate__ps€÷,ñ,˜Tð, dñ,rc st€WnRVnRVnRVnRVnRVnRVnRVnR#©N)r$Ú _algorithmrr ÚissuerÚserialrr )Úselfr$ó&&rÚ__init__ZSignature.__init__ps;€ØŒ Ø&*ˆŒØ37ˆÔ$Ø,0ˆÔØ"&ˆŒ Ø"&ˆŒ Ø!%ˆŒØ'+ˆÖrcó€V^8„dQhRR/#)rrÚboolrrrrrr&{s€÷FñF˜4ñFrc sÌ€\VP;'gIVP;'g5VP;'g!VP;'g VP 4#)zšTest whether the PSKC file contains a signature. This method does not check whether the signature is valid but only if one was present in the PSKC file. )r/r rr r)r ©r+ó&rÚ is_signedZSignature.is_signedzsk€ôØ N‰N÷ Eð E˜d×:Ñ:÷ Eð EØ × !Ñ !÷ Eð EØ%)§[¡[÷ Eð EØ48×4DÑ4DóFð Frcr.)rrr rrrrrr&†s€÷ñ˜:ñrc sB€VP'd VP#R#)z#Provide the signing algorithm used.N)r(r0r1rr ÚSignature.algorithm…s€ð ??ˆ?Ø—?‘?Ð "Ùrcr#)rÚvaluer rr%rrrrrr&s€÷5ñ5˜zð5¨dñ5rc s,€^RIHpV!V4VnR#)i)Únormalise_algorithmN)Zpskc.algorithmsr5r()r+r4r5s&& rr r3Œs€å7Ù-¨eÓ4ˆŽrcr.)rrrrrrrrr&’s€÷!ñ!˜Tñ!rc s^€\VR4'gVP4VP#)z$Provide the signed PSKC information.Ú _signed_pskc)Zhasattrrr6r0r1rÚ signed_pskcZSignature.signed_pskc‘s&€ôt˜^×,Ò,Ø K‰KŒMØ× Ñ Ð rNcs$€V^8„dQhRRRRRR/#)rr r rrr/rrrrrr&˜s"€÷ñ *ðÀ*ðÐX\ñrc sŠ€^RIHp^RIHpV\ VP W4pV!4pVP We4W`nR#)aþVerify signature in PSKC data against a trusted X.509 certificate. The signature can be verified in three ways: * The signature has an embedded certificate that is signed by a CA that is configured in the system CA store. In this case neither `certificate` or `ca_pem_file` need to be specified * The signature was made and a certificate was transmitted out-of-band. In this case the `certificate` argument needs to be present. * The signature has a certificate that is signed by a specific CA who's certificate was transmitted out-of-band. In this case the `ca_pem_file` is used to point to a CA certificate file (but a certificate needs to be embedded inside the PSKC file). This function will raise an exception when the validation fails. The `certificate` is expected to be passed as a PEM encoded string. The `ca_pem_file` should point to a CA certificate store (PEM encoded file). After calling this function a verified version of the PSKC file will be present in the :attr:`signed_pskc` attribute. r)Ú PSKCParserT)r$rZ pskc.parserr8r!rZparse_documentr6)r+r rrr8r r$s&&& rrZSignature.verify˜s;€õ, Ý*Ù Ü  §¡¨KÓEˆ Ù‹vˆØ×!Ñ! $Ô3Ø ÔÙrcs$€V^8„dQhRRRRRR/#)rrr r r rr%rrrrrr&·s!€÷ 'ñ '˜ð '¨Jð 'À$ñ 'rc s€WnW nR#)aAdd an XML signature to the file. Set up a key and optionally a certificate that will be used to create an embedded XML signature when writing the file. This is a utility function that is used to configure the properties needed to create a signed PSKC file. N)rr )r+rr s&&&rrZSignature.sign·s€ðŒØ&Örcs €V^8„dQhRRRR/#)rrrrrrrrrr&Ãs€÷AñA˜HðA¨ñArc sÔ€VP'gQhVP'gQh\WPVPVPVPVP 4#)z=Sign an XML document with the configured key and certificate.)rr rr r r)r+rr,rÚsign_xmlZSignature.sign_xmlÃsV€àxxˆxˆˆxØ××ÐÐÐÜØ —‘˜4×+Ñ+¨T¯^©^Ø × !Ñ ! 4×#?Ñ#?óAð Ar) r(r6rr r r)rr$r*©NNr')Z__name__Z __module__Z __qualname__Z__firstlineno__Ú__doc__r-Zpropertyr2r Zsetterr7rrr9Z__static_attributes__rrrr"r"`sz†ñ õ,ðôFóðFðôóðð ×Ñô5óð5ðô!óð!÷ ÷> '÷AñArr")NNNr:) r;Z __future__rZtypingrZ lxml.etreerrr$rrr!r"rrrÚr<s3ðñ*õ #å çß1å÷+÷:÷