| Server IP : 209.38.156.173 / Your IP : 216.73.216.122 [ Web Server : Apache/2.4.52 (Ubuntu) System : Linux lakekumayuhotel 5.15.0-136-generic #147-Ubuntu SMP Sat Mar 15 15:53:30 UTC 2025 x86_64 User : root ( 0) PHP Version : 8.1.2-1ubuntu2.22 Disable Function : NONE Domains : 2 Domains MySQL : OFF | cURL : ON | WGET : ON | Perl : ON | Python : OFF | Sudo : ON | Pkexec : ON Directory : /proc/thread-self/root/usr/lib/python3/dist-packages/acme/__pycache__/ |
Upload File : |
o
6��a�b � @ s� d Z ddlmZ ddlZddlmZ ddlmZ ddlmZ ddlmZ ddlm Z dd lm
Z
dd
lm Z dd lm Z dd lm
Z
ddlZdd
lmZ ddlmZ ddlmZ ddlmZ ddlmZ ddlmZ dZdZi dd�dd�dd�dd �d d �d d �d!d"�d#d$�d%d&�d'd(�d)d*�d+d,�d-d.�d/d0�d1d2�d3d4�d5d6�d7d8d9d:d;d<d=d>d?d@� �ZedAdB� e� � D ��Z e � edCdB� e� � D ��� dDe dEe fdFdG�Z!G dHdI� dIej"ej#�Z#G dJdK� dKej$e�Z%G dLdM� dMe%�Z&e&dN�Z'e&dO�Z(e&dP�Z)e&dQ�Z*e&dR�Z+e&dS�Z,e&dT�Z-e&dU�Z.G dVdW� dWe%�Z/e/d)�Z0e/dX�Z1G dYdZ� dZej"�Z2G d[d\� d\ej$�Z3G d]d^� d^ej"�Z4G d_d`� d`e4�Z5G dadb� dbej"�Z6G dcdd� dd�Z7G dedf� dfe6�Z8e3j9G dgdh� dhee8��Z:G didj� djee8�Z;G dkdl� dle5�Z<G dmdn� dne6�Z=G dodp� dpe4�Z>G dqdr� dre6�Z?e3j9G dsdt� dtee?��Z@G dudv� dvee?�ZAG dwdx� dxe5�ZBe3j9G dydz� dzeej"��ZCG d{d|� d|e5�ZDe3j9G d}d~� d~eej"��ZEG dd�� d�e6�ZFG d�d�� d�e5�ZGe3j9G d�d�� d�eF��ZHdS )�zACME protocol messages.� )�HashableN)�Any)�Dict)�Iterator)�List)�Mapping)�MutableMapping)�Tuple)�Type)�Optional��
challenges)�errors)�fields)�jws)�util)�
ResourceMixinzurn:acme:error:zurn:ietf:params:acme:error:�accountDoesNotExistz4The request specified an account that does not exist�alreadyRevokedzOThe request specified a certificate to be revoked that has already been revoked�badCSRz2The CSR is unacceptable (e.g., due to a short key)�badNoncez1The client sent an unacceptable anti-replay nonce� badPublicKeyz>The JWS was signed by a public key the server does not support�badRevocationReasonz;The revocation reason provided is not allowed by the server�badSignatureAlgorithmz@The JWS was signed with an algorithm the server does not support�caaz\Certification Authority Authorization (CAA) records forbid the CA from issuing a certificate�compoundzBSpecific error conditions are indicated in the "subproblems" array�
connectionz?The server could not connect to the client to verify the domain�dnszAThere was a problem with a DNS query during identifier validation�dnssecz4The server could not validate a DNSSEC signed domain�incorrectResponsez;Response received didn't match the challenge's requirements� invalidEmailz1The provided email for a registration was invalid�invalidContactz$The provided contact URI was invalid� malformedz!The request message was malformed�rejectedIdentifierz9The server will not issue certificates for the identifierzLThe request attempted to finalize an order that is not ready to be finalizedz,There were too many requests of a given typez(The server experienced an internal errorz=The server experienced a TLS error during domain verificationz)The client lacks sufficient authorizationz@A contact URL for an account used an unsupported protocol schemez*The server could not resolve a domain namez'An identifier is of an unsupported typez,The server requires external account binding) �
orderNotReady� rateLimited�serverInternal�tls� unauthorized�unsupportedContact� unknownHost�unsupportedIdentifier�externalAccountRequiredc c � � | ] \}}t | |fV qd S �N)� ERROR_PREFIX��.0�name�desc� r4 �//usr/lib/python3/dist-packages/acme/messages.py� <genexpr>; � �
�r6 c c r- r. )�OLD_ERROR_PREFIXr0 r4 r4 r5 r6 > r7 �err�returnc C s, t | t�r| jdurt| jv pt| jv S dS )z#Check if argument is an ACME error.NF)�
isinstance�Error�typr/ r8 )r9 r4 r4 r5 �
is_acme_errorB s r> c @ s� e Zd ZdZejdddd�Zejddd�Zejddd�Ze d e
d
e d d fd d
��Z e
d ee
fdd��Ze
d ee
fdd��Zd e
fdd�ZdS )r< z�ACME error.
https://tools.ietf.org/html/draft-ietf-appsawg-http-problem-00
:ivar unicode typ:
:ivar unicode title:
:ivar unicode detail:
�typeTz about:blank�� omitempty�default�title�rA �detail�code�kwargsr: c K s. |t vr
td| ��t| }| dd|i|��S )z�Create an Error instance with an ACME Error code.
:unicode code: An ACME error code, like 'dnssec'.
:kwargs: kwargs to pass to Error.
z4The supplied code: %s is not a known ACME error coder= Nr4 )� ERROR_CODES�
ValueErrorr/ )�clsrF rG r= r4 r4 r5 � with_codeW s �zError.with_codec C s t �| j�S )z�Hardcoded error description based on its type.
:returns: Description if standard ACME error or ``None``.
:rtype: unicode
)�ERROR_TYPE_DESCRIPTIONS�getr= ��selfr4 r4 r5 � descriptiong s zError.descriptionc C s( t | j�jddd�d }|tv r|S dS )z�ACME error code.
Basically self.typ without the ERROR_PREFIX.
:returns: error code if standard ACME code or ``None``.
:rtype: unicode
�:� )�maxsplit���N)�strr= �rsplitrH )rO rF r4 r4 r5 rF q s
z
Error.codec C s( d� dd� | j| j| j| jfD ���� S )Ns :: c s s$ � | ]
}|d ur|� dd�V qd S )N�ascii�backslashreplace)�encode)r1 �partr4 r4 r5 r6 � s �
��z Error.__str__.<locals>.<genexpr>)�joinr= rP rE rC �decoderN r4 r4 r5 �__str__� s
��z
Error.__str__N)�__name__�
__module__� __qualname__�__doc__�jose�Fieldr= rC rE � classmethodrU r rK �propertyr rP rF r] r4 r4 r4 r5 r< I s r< c s� e Zd ZU dZdZeZeed f e d< deddf� fdd� Z
defd d
�Z e d edd fd d
��Z
defdd�Zdedefdd�Zdefdd�Z� ZS )� _ConstantzACME constant.�r2 �POSSIBLE_NAMESr2 r: Nc s t � �� | | j|< || _d S r. )�super�__init__rh r2 �rO r2 �� __class__r4 r5 rj � s
z_Constant.__init__c C � | j S r. rg rN r4 r4 r5 �to_partial_json� � z_Constant.to_partial_json�jobjc C s& || j vrt�d�| j���| j | S )Nz{0} not recognized)rh rb �DeserializationError�formatr^ �rJ rq r4 r4 r5 � from_json� s
�
z_Constant.from_jsonc C s d� | jj| j�S )Nz{0}({1}))rs rm r^ r2 rN r4 r4 r5 �__repr__� � z_Constant.__repr__�otherc C s t |t| ��o |j| jkS r. )r; r? r2 )rO rx r4 r4 r5 �__eq__� s z_Constant.__eq__c C s t | j| jf�S r. )�hashrm r2 rN r4 r4 r5 �__hash__� s z_Constant.__hash__)r^ r_ r` ra � __slots__�NotImplementedrh r rU �__annotations__rj ro rd ru rv r �boolry �intr{ �
__classcell__r4 r4 rl r5 rf � s
rf c @ �& e Zd ZU dZi Zeed f ed< dS )�StatuszACME "status" field.rh N�r^ r_ r` ra rh r rU r~ r4 r4 r4 r5 r� � �
r� �unknown�pending�
processing�valid�invalid�revoked�ready� deactivatedc @ r� )�IdentifierTypezACME identifier type.rh Nr� r4 r4 r4 r5 r� � r� r� �ipc @ s* e Zd ZdZejdejd�Ze�d�Z dS )�
IdentifierzNACME identifier.
:ivar IdentifierType typ:
:ivar unicode value:
r? ��decoder�valueN)
r^ r_ r` ra rb rc r� ru r= r� r4 r4 r4 r5 r� � s r� c @ s� e Zd ZU dZi Zeeed f ed< G dd� de j
�Z e dedefdd��Z
e d ed ded fd
d ��Zd eeef dd
fdd�Zdedefdd�Zdedefdd�Zdeeef fdd�Ze d eeef dd fdd��Zd
S )� Directoryz
Directory.�_REGISTERED_TYPESc s� e Zd ZdZejddd�Zejddd�Zejddd�Zejddd�Z ejddd�Z
d e d
d f� fd d
� Z e
d
efdd��Zd
ee f� fdd� Zded
efdd�Z� ZS )zDirectory.MetazDirectory Meta.zterms-of-serviceTrD �termsOfService�website�
caaIdentitiesr, rG r: Nc �, � fdd�|� � D �}t� jdi |�� d S )Nc � i | ]
\}}� � |�|�qS r4 ��_internal_name�r1 �k�vrN r4 r5 �
<dictcomp>� � z+Directory.Meta.__init__.<locals>.<dictcomp>r4 ��itemsri rj �rO rG rl rN r5 rj � � zDirectory.Meta.__init__c C � | j p| jS )zURL for the CA TOS)�_terms_of_service�_terms_of_service_v2rN r4 r4 r5 �terms_of_service� � z Directory.Meta.terms_of_servicec # �0 � t � �� D ]}|dkr|dd � n|V qd S )Nr� rR �ri �__iter__rk rl r4 r5 r� � � � �zDirectory.Meta.__iter__r2 c C � |dkrd| S |S )Nr� �_r4 rk r4 r4 r5 r� � � z Directory.Meta._internal_name)r^ r_ r` ra rb rc r� r� r� �caa_identities�external_account_requiredr rj re rU r� r r� r� r� r4 r4 rl r5 �Meta� s r� �keyr: c C s t |d|�S )N�
resource_type)�getattr)rJ r� r4 r4 r5 �
_canon_key� s zDirectory._canon_key�resource_body_clsc C s" |j }|| jvs
J �|| j|< |S )zRegister resource.)r� r� )rJ r� r� r4 r4 r5 �register� s
zDirectory.registerrq Nc C s t �|| j�}|| _d S r. )r �map_keysr� �_jobj)rO rq �
canon_jobjr4 r4 r5 rj � s
zDirectory.__init__r2 c
C s8 z | |� dd� W S ty } ztt|���d }~ww )Nr� �-)�replace�KeyError�AttributeErrorrU )rO r2 �errorr4 r4 r5 � __getattr__� s ��zDirectory.__getattr__c C s8 z | j | �|� W S ty td| �|� d ��w )NzDirectory field "z " not found)r� r� r� rk r4 r4 r5 � __getitem__� s
�zDirectory.__getitem__c C rn r. )r� rN r4 r4 r5 ro rp zDirectory.to_partial_jsonc C s | j �|�di ��|d< | |�S )N�meta)r� ru �poprt r4 r4 r5 ru s zDirectory.from_json)r^ r_ r` ra r� r rU r
r~ rb �JSONObjectWithFieldsr� rd r� r� r r rj r� r� ro r ru r4 r4 r4 r5 r� � s
r� c @ � e Zd ZdZe�d�ZdS )�ResourcezOACME Resource.
:ivar acme.messages.ResourceBody body: Resource body.
�bodyN)r^ r_ r` ra rb rc r� r4 r4 r4 r5 r� � r� c @ r� )�ResourceWithURIzQACME Resource with URI.
:ivar unicode ~.uri: Location of the resource.
�uriN)r^ r_ r` ra rb rc r� r4 r4 r4 r5 r� r� r� c @ s e Zd ZdZdS )� ResourceBodyzACME Resource Body.N)r^ r_ r` ra r4 r4 r4 r5 r� s r� c
@ s< e Zd ZdZedejdededede ee
f f
dd��Z d S )
�ExternalAccountBindingz ACME External Account Binding�account_public_key�kid�hmac_key� directoryr: c C sR t �|�� ��� }tj�|�}|d }tj� |tj
j |d�tj j
d||�}|�� S )zLCreate External Account Binding Resource from contact details, kid and hmac.�
newAccount)r� N)�json�dumpsro rY rb �b64� b64decoder �JWS�sign�jwk�JWKOct�jwa�HS256) rJ r� r� r� r� �key_json�decoded_hmac_key�url�eabr4 r4 r5 � from_data' s �z ExternalAccountBinding.from_dataN) r^ r_ r` ra rd rb �JWKrU r� r r r� r4 r4 r4 r5 r� $ s �
�r� c st e Zd ZdZejddejjd�Zejdddd�Z ejddd �Z
ejd
dd �Z ejd dd �Z ejd dd �Z
ejd
dd �ZdZdZe d)dee dee dee dedd f
dd��Zdeddf� fdd� Zdedeedf fd d �Zd eeef deeef fd d �Zdeeef f� fd!d"� Z deeef f� fd#d$� Z e deedf fd%d&��Z e deedf fd'd(��Z � Z!S )*� Registrationz�Registration Resource Body.
:ivar josepy.jwk.JWK key: Public key.
:ivar tuple contact: Contact information following ACME spec,
`tuple` of `unicode`.
:ivar unicode agreement:
r� T�rA r� �contactr4 r@ � agreementrD �status�termsOfServiceAgreed�onlyReturnExisting�externalAccountBindingztel:zmailto:N�phone�email�external_account_bindingrG r: c s� d|v }t |�dd��}|dur|�� j| � |dur+|�� fdd�|�d�D �� |s/|r5t|�|d< |r;||d< � di |��S )a
Create registration resource from contact details.
The `contact` keyword being passed to a Registration object is meaningful, so
this function represents empty iterables in its kwargs by passing on an empty
`tuple`.
r� r4 Nc s g | ]}� j | �qS r4 )� email_prefix)r1 �mail�rJ r4 r5 �
<listcomp>d s z*Registration.from_data.<locals>.<listcomp>�,r� )�listr� �append� phone_prefix�extend�split�tuple)rJ r� r� r� rG �contact_provided�detailsr4 r� r5 r� P s
zRegistration.from_datac s8 d|v r|d durt �| dd� t� jdi |�� dS )z;Note if the user provides a value for the `contact` member.r� N� _add_contactTr4 )�object� __setattr__ri rj r� rl r4 r5 rj p s zRegistration.__init__�prefix.c s t � fdd�| jD ��S )Nc 3 s* � | ]}|� � �r|t� �d � V qd S r. )�
startswith�len)r1 rE �r r4 r5 r6 x s � �
�z/Registration._filter_contact.<locals>.<genexpr>)r� r� )rO r r4 r r5 �_filter_contactw s �z Registration._filter_contactrq c C s t | dd�r
| �d�|d< |S )a�
The `contact` member of Registration objects should not be required when
de-serializing (as it would be if the Fields' `omitempty` flag were `False`), but
it should be included in serializations if it was provided.
:param jobj: Dictionary containing this Registrations' data
:type jobj: dict
:returns: Dictionary containing Registrations data to transmit to the server
:rtype: dict
r� Fr� )r� rY �rO rq r4 r4 r5 �_add_contact_if_appropriate| s z(Registration._add_contact_if_appropriatec � t � �� }| �|�S )z2Modify josepy.JSONDeserializable.to_partial_json())ri ro r r rl r4 r5 ro � �
z Registration.to_partial_jsonc r )z;Modify josepy.JSONObjectWithFields.fields_to_partial_json())ri �fields_to_partial_jsonr r rl r4 r5 r � r z#Registration.fields_to_partial_jsonc C � | � | j�S )z*All phones found in the ``contact`` field.)r r� rN r4 r4 r5 �phones� r� zRegistration.phonesc C r
)z*All emails found in the ``contact`` field.)r r� rN r4 r4 r5 �emails� r� zRegistration.emails)NNN)"r^ r_ r` ra rb rc r� ru r� r� r� r� �terms_of_service_agreed�only_return_existingr� r� r� rd r rU r� r r� rj r r r r ro r re r r r� r4 r4 rl r5 r� 7 s<
��� � " r� c @ � e Zd ZdZdZe�e�ZdS )�NewRegistrationzNew registration.znew-regN�r^ r_ r` ra r� r r� �resourcer4 r4 r4 r5 r � � r c @ r )�UpdateRegistrationzUpdate registration.�regNr r4 r4 r4 r5 r � � r c @ s< e Zd ZdZejdejd�Zejddd�Z ejddd�Z
dS ) �RegistrationResourcez�Registration Resource.
:ivar acme.messages.Registration body:
:ivar unicode new_authzr_uri: Deprecated. Do not use.
:ivar unicode terms_of_service: URL for the CA TOS.
r� r� �new_authzr_uriTrD r� N) r^ r_ r` ra rb rc r� ru r� r r� r4 r4 r4 r5 r � s
r c s* e Zd ZdZdZejdddd�Zejdddd�Zejde j
de d �Z e
jd
dd �Zejd ej
ddd �Zd
eddf� fdd� Zdedef� fdd� Zdeeef f� fdd� Zedeeef deeef f� fdd� �Zedefdd��Z dedefdd �Z de e f� fd d � Z dedefd d �Z � Z!S )!�
ChallengeBodya> Challenge Resource Body.
.. todo::
Confusingly, this has a similar name to `.challenges.Challenge`,
as well as `.achallenges.AnnotatedChallenge`. Please use names
such as ``challb`` to distinguish instances of this class from
``achall``.
:ivar acme.challenges.Challenge: Wrapped challenge.
Conveniently, all challenge fields are proxied, i.e. you can
call ``challb.x`` to get ``challb.chall.x`` contents.
:ivar acme.messages.Status status:
:ivar datetime.datetime validated:
:ivar messages.Error error:
)�challr� TNr@ r� r� )r� rA rB � validatedrD r� rG r: c r� )Nc r� r4 r� r� rN r4 r5 r� � r� z*ChallengeBody.__init__.<locals>.<dictcomp>r4 r� r� rl rN r5 rj � r� zChallengeBody.__init__r2 c s t � �| �|��S r. )ri rY r� rk rl r4 r5 rY � rw zChallengeBody.encodec s t � �� }|�| j�� � |S r. )ri ro �updater r rl r4 r5 ro � s
z ChallengeBody.to_partial_jsonrq c s t � �|�}tj�|�|d< |S )Nr )ri �fields_from_jsonr
� Challengeru )rJ rq � jobj_fieldsrl r4 r5 r � s z ChallengeBody.fields_from_jsonc C r� )zThe URL of this challenge.)�_url�_urirN r4 r4 r5 r� � r� zChallengeBody.uric C s t | j|�S r. )r� r rk r4 r4 r5 r� � s zChallengeBody.__getattr__c # r� )Nr! rR r� rk rl r4 r5 r� � r� zChallengeBody.__iter__c C r� )Nr� r� r4 rk r4 r4 r5 r� � r� z ChallengeBody._internal_name)"r^ r_ r` ra r| rb rc r! r r� ru �STATUS_PENDINGr� r � RFC3339Fieldr r< r� r rj rU rY r ro rd r r re r� r� r r� r� r� r4 r4 rl r5 r � s,
�
�(r c @ s< e Zd ZdZejdejd�Ze�d�Z e
de fdd��Z dS ) �ChallengeResourcez�Challenge Resource.
:ivar acme.messages.ChallengeBody body:
:ivar unicode authzr_uri: URI found in the 'up' ``Link`` header.
r� r� �
authzr_urir: c C s | j jS )z The URL of the challenge body.)r� r� rN r4 r4 r5 r� s zChallengeResource.uriN)
r^ r_ r` ra rb rc r ru r� r% re rU r� r4 r4 r4 r5 r$ � s
r$ c @ s� e Zd ZdZejdejdd�Zejddd�Z ejddd�Z
ejdde jd �Z e
jd
dd�Zejd dd�Ze jd eeeef d
eedf fdd��Z ed
eeeeef df df fdd��ZdS )�
Authorizationa^ Authorization Resource Body.
:ivar acme.messages.Identifier identifier:
:ivar list challenges: `list` of `.ChallengeBody`
:ivar tuple combinations: Challenge combinations (`tuple` of `tuple`
of `int`, as opposed to `list` of `list` from the spec).
:ivar acme.messages.Status status:
:ivar datetime.datetime expires:
�
identifierT�r� rA r
rD � combinationsr� r� �expires�wildcardr� r: .c C � t dd� | D ��S )Nc s � � | ]}t �|�V qd S r. )r ru )r1 r r4 r4 r5 r6 ) � � z+Authorization.challenges.<locals>.<genexpr>�r� �r� r4 r4 r5 r
' � zAuthorization.challengesc s t � fdd�� jD ��S )z0Combinations with challenges instead of indices.c 3 s& � | ]}t � fd d�|D ��V qdS )c 3 s � | ]}� j | V qd S r. r )r1 �idxrN r4 r5 r6 . r. z@Authorization.resolved_combinations.<locals>.<genexpr>.<genexpr>Nr/ )r1 �comborN r4 r5 r6 . s � �z6Authorization.resolved_combinations.<locals>.<genexpr>)r� r) rN r4 rN r5 �resolved_combinations+ s �z#Authorization.resolved_combinationsN)r^ r_ r` ra rb rc r� ru r' r
r) r� r� r r# r* r+ r� r r rU r r r re r r4 r4 r4 r4 r5 r& s
(,r& c @ r )�NewAuthorizationzNew authorization.z new-authzNr r4 r4 r4 r5 r5 2 r r5 c @ r )�UpdateAuthorizationzUpdate authorization.�authzNr r4 r4 r4 r5 r6 9 r r6 c @ s. e Zd ZdZejdejd�Zejddd�Z dS )�AuthorizationResourcez�Authorization Resource.
:ivar acme.messages.Authorization body:
:ivar unicode new_cert_uri: Deprecated. Do not use.
r� r� � new_cert_uriTrD N)
r^ r_ r` ra rb rc r& ru r� r9 r4 r4 r4 r5 r8 ? s r8 c @ s2 e Zd ZdZdZe�e�Zej dej
ej d�Z dS )�CertificateRequestz�ACME new-cert request.
:ivar josepy.util.ComparableX509 csr:
`OpenSSL.crypto.X509Req` wrapped in `.ComparableX509`
znew-cert�csr�r� �encoderN)
r^ r_ r` ra r� r r� r rb rc �
decode_csr�
encode_csrr; r4 r4 r4 r5 r: J s
r: c @ s$ e Zd ZdZe�d�Ze�d�ZdS )�CertificateResourcea Certificate Resource.
:ivar josepy.util.ComparableX509 body:
`OpenSSL.crypto.X509` wrapped in `.ComparableX509`
:ivar unicode cert_chain_uri: URI found in the 'up' ``Link`` header
:ivar tuple authzrs: `tuple` of `AuthorizationResource`.
�cert_chain_uri�authzrsN)r^ r_ r` ra rb rc rA rB r4 r4 r4 r5 r@ W s
r@ c @ s< e Zd ZdZdZe�e�Zej dej
ej d�Z e� d�Z
dS )�
Revocationz|Revocation message.
:ivar .ComparableX509 certificate: `OpenSSL.crypto.X509` wrapped in
`.ComparableX509`
z revoke-cert� certificater< �reasonN)r^ r_ r` ra r� r r� r rb rc � decode_cert� encode_certrD rE r4 r4 r4 r5 rC d s
�rC c @ s� e Zd ZdZejddd�Zejdejdd�Z ejddd�Z
ejddd�Z ejd dd�Z e
jd
dd�Zejd dejd �Zejd
eeeef deedf fdd��ZdS )�Ordera_ Order Resource Body.
:ivar identifiers: List of identifiers for the certificate.
:vartype identifiers: `list` of `.Identifier`
:ivar acme.messages.Status status:
:ivar authorizations: URLs of authorizations.
:vartype authorizations: `list` of `str`
:ivar str certificate: URL to download certificate as a fullchain PEM.
:ivar str finalize: URL to POST to to request issuance once all
authorizations have "valid" status.
:ivar datetime.datetime expires: When the order expires.
:ivar ~.Error error: Any error that occurred during finalization, if applicable.
� identifiersTrD r� r( �authorizationsrD �finalizer* r� r� r� r: .c C r, )Nc s r- r. )r� ru )r1 r' r4 r4 r5 r6 � r. z$Order.identifiers.<locals>.<genexpr>r/ r0 r4 r4 r5 rI � r1 zOrder.identifiersN)r^ r_ r` ra rb rc rI r� ru r� rJ rD rK r r# r* r< r� r� r r rU r r r� r4 r4 r4 r5 rH s s
�,rH c @ sT e Zd ZdZejdejd�Zejddd�Z e�d�Z
ejddd�Z ejd dd�Z d
S ) �
OrderResourcea� Order Resource.
:ivar acme.messages.Order body:
:ivar str csr_pem: The CSR this Order will be finalized with.
:ivar authorizations: Fully-fetched AuthorizationResource objects.
:vartype authorizations: `list` of `acme.messages.AuthorizationResource`
:ivar str fullchain_pem: The fetched contents of the certificate URL
produced once the order was finalized, if it's present.
:ivar alternative_fullchains_pem: The fetched contents of alternative certificate
chain URLs produced once the order was finalized, if present and requested during
finalization.
:vartype alternative_fullchains_pem: `list` of `str`
r� r� �csr_pemTrD rJ �
fullchain_pem�alternative_fullchains_pemN)
r^ r_ r` ra rb rc rH ru r� rM rJ rN rO r4 r4 r4 r5 rL � s
rL c @ s e Zd ZdZdZdS )�NewOrderz
New order.z new-orderN)r^ r_ r` ra r� r4 r4 r4 r5 rP � s rP )Ira �collections.abcr r� �typingr r r r r r r r
r �josepyrb �acmer
r r r r � acme.mixinsr r8 r/ rH �dictr� rL r �
BaseExceptionr r> r� r< �JSONDeSerializablerf r� �STATUS_UNKNOWNr" �STATUS_PROCESSING� STATUS_VALID�STATUS_INVALID�STATUS_REVOKED� STATUS_READY�STATUS_DEACTIVATEDr� �IDENTIFIER_FQDN�
IDENTIFIER_IPr� r� r� r� r� r� r� r� r r r r r$ r& r5 r6 r8 r: r@ rC rH rL rP r4 r4 r4 r5 �<module> s� ������� � � ���������!�
�> F k
B$