mirror of
https://github.com/hakril/PythonForWindows
synced 2026-06-08 14:31:45 +00:00
545 lines
63 KiB
HTML
545 lines
63 KiB
HTML
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
|
|
"http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
|
|
|
|
|
|
<html xmlns="http://www.w3.org/1999/xhtml">
|
|
<head>
|
|
<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
|
|
|
|
<title>windows.crypto.certificate — PythonForWindows 0.2 documentation</title>
|
|
|
|
<link rel="stylesheet" href="../../../_static/classic.css" type="text/css" />
|
|
<link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
|
|
|
|
<script type="text/javascript">
|
|
var DOCUMENTATION_OPTIONS = {
|
|
URL_ROOT: '../../../',
|
|
VERSION: '0.2',
|
|
COLLAPSE_INDEX: false,
|
|
FILE_SUFFIX: '.html',
|
|
HAS_SOURCE: true,
|
|
SOURCELINK_SUFFIX: '.txt'
|
|
};
|
|
</script>
|
|
<script type="text/javascript" src="../../../_static/jquery.js"></script>
|
|
<script type="text/javascript" src="../../../_static/underscore.js"></script>
|
|
<script type="text/javascript" src="../../../_static/doctools.js"></script>
|
|
<link rel="index" title="Index" href="../../../genindex.html" />
|
|
<link rel="search" title="Search" href="../../../search.html" />
|
|
</head>
|
|
<body role="document">
|
|
<div class="related" role="navigation" aria-label="related navigation">
|
|
<h3>Navigation</h3>
|
|
<ul>
|
|
<li class="right" style="margin-right: 10px">
|
|
<a href="../../../genindex.html" title="General Index"
|
|
accesskey="I">index</a></li>
|
|
<li class="right" >
|
|
<a href="../../../py-modindex.html" title="Python Module Index"
|
|
>modules</a> |</li>
|
|
<li class="nav-item nav-item-0"><a href="../../../index.html">PythonForWindows 0.2 documentation</a> »</li>
|
|
<li class="nav-item nav-item-1"><a href="../../index.html" accesskey="U">Module code</a> »</li>
|
|
</ul>
|
|
</div>
|
|
|
|
<div class="document">
|
|
<div class="documentwrapper">
|
|
<div class="bodywrapper">
|
|
<div class="body" role="main">
|
|
|
|
<h1>Source code for windows.crypto.certificate</h1><div class="highlight"><pre>
|
|
<span></span><span class="kn">import</span> <span class="nn">itertools</span>
|
|
<span class="kn">import</span> <span class="nn">ctypes</span>
|
|
|
|
<span class="kn">import</span> <span class="nn">windows</span>
|
|
<span class="kn">from</span> <span class="nn">windows</span> <span class="k">import</span> <span class="n">winproxy</span>
|
|
<span class="kn">from</span> <span class="nn">windows.generated_def</span> <span class="k">import</span> <span class="o">*</span>
|
|
|
|
<span class="kn">from</span> <span class="nn">windows.crypto</span> <span class="k">import</span> <span class="n">DEFAULT_ENCODING</span>
|
|
<span class="kn">from</span> <span class="nn">windows.crypto.helper</span> <span class="k">import</span> <span class="n">ECRYPT_DATA_BLOB</span>
|
|
|
|
|
|
<span class="n">CRYPT_OBJECT_FORMAT_TYPE</span> <span class="o">=</span> <span class="p">[</span>
|
|
<span class="n">CERT_QUERY_OBJECT_FILE</span><span class="p">,</span>
|
|
<span class="n">CERT_QUERY_OBJECT_BLOB</span><span class="p">,</span>
|
|
<span class="n">CERT_QUERY_CONTENT_CERT</span><span class="p">,</span>
|
|
<span class="n">CERT_QUERY_CONTENT_CTL</span><span class="p">,</span>
|
|
<span class="n">CERT_QUERY_CONTENT_CRL</span><span class="p">,</span>
|
|
<span class="n">CERT_QUERY_CONTENT_SERIALIZED_STORE</span><span class="p">,</span>
|
|
<span class="n">CERT_QUERY_CONTENT_SERIALIZED_CERT</span><span class="p">,</span>
|
|
<span class="n">CERT_QUERY_CONTENT_SERIALIZED_CTL</span><span class="p">,</span>
|
|
<span class="n">CERT_QUERY_CONTENT_SERIALIZED_CRL</span><span class="p">,</span>
|
|
<span class="n">CERT_QUERY_CONTENT_PKCS7_SIGNED</span><span class="p">,</span>
|
|
<span class="n">CERT_QUERY_CONTENT_PKCS7_UNSIGNED</span><span class="p">,</span>
|
|
<span class="n">CERT_QUERY_CONTENT_PKCS7_SIGNED_EMBED</span><span class="p">,</span>
|
|
<span class="n">CERT_QUERY_CONTENT_PKCS10</span><span class="p">,</span>
|
|
<span class="n">CERT_QUERY_CONTENT_PFX</span><span class="p">,</span>
|
|
<span class="n">CERT_QUERY_CONTENT_CERT_PAIR</span><span class="p">,</span>
|
|
<span class="n">CERT_QUERY_CONTENT_PFX_AND_LOAD</span>
|
|
<span class="p">]</span>
|
|
|
|
<span class="n">CRYPT_OBJECT_FORMAT_TYPE_DICT</span> <span class="o">=</span> <span class="p">{</span><span class="n">x</span><span class="p">:</span><span class="n">x</span> <span class="k">for</span> <span class="n">x</span> <span class="ow">in</span> <span class="n">CRYPT_OBJECT_FORMAT_TYPE</span><span class="p">}</span>
|
|
|
|
<span class="c1">## Move CryptObject to new .py ?</span>
|
|
<div class="viewcode-block" id="CryptObject"><a class="viewcode-back" href="../../../crypto.html#windows.crypto.CryptObject">[docs]</a><span class="k">class</span> <span class="nc">CryptObject</span><span class="p">(</span><span class="nb">object</span><span class="p">):</span>
|
|
<span class="sd">"""Extract information from an CryptoAPI object.</span>
|
|
|
|
<span class="sd"> Current main use is extracting the signers certificates from a PE file.</span>
|
|
<span class="sd"> """</span>
|
|
<span class="n">MSG_PARAM_KNOW_TYPES</span> <span class="o">=</span> <span class="p">{</span><span class="n">CMSG_SIGNER_INFO_PARAM</span><span class="p">:</span> <span class="n">CMSG_SIGNER_INFO</span><span class="p">,</span>
|
|
<span class="n">CMSG_SIGNER_COUNT_PARAM</span><span class="p">:</span> <span class="n">DWORD</span><span class="p">,</span>
|
|
<span class="n">CMSG_CERT_COUNT_PARAM</span><span class="p">:</span> <span class="n">DWORD</span><span class="p">}</span>
|
|
|
|
<span class="k">def</span> <span class="nf">__init__</span><span class="p">(</span><span class="bp">self</span><span class="p">,</span> <span class="n">filename</span><span class="p">,</span> <span class="n">content_type</span><span class="o">=</span><span class="n">CERT_QUERY_CONTENT_FLAG_ALL</span><span class="p">):</span>
|
|
<span class="c1"># No other API than filename for now..</span>
|
|
<span class="bp">self</span><span class="o">.</span><span class="n">filename</span> <span class="o">=</span> <span class="n">filename</span>
|
|
|
|
<span class="n">dwEncoding</span> <span class="o">=</span> <span class="n">DWORD</span><span class="p">()</span>
|
|
<span class="n">dwContentType</span> <span class="o">=</span> <span class="n">DWORD</span><span class="p">()</span>
|
|
<span class="n">dwFormatType</span> <span class="o">=</span> <span class="n">DWORD</span><span class="p">()</span>
|
|
<span class="n">hStore</span> <span class="o">=</span> <span class="n">PVOID</span><span class="p">()</span>
|
|
<span class="n">hMsg</span> <span class="o">=</span> <span class="n">PVOID</span><span class="p">()</span>
|
|
|
|
<span class="n">winproxy</span><span class="o">.</span><span class="n">CryptQueryObject</span><span class="p">(</span><span class="n">CERT_QUERY_OBJECT_FILE</span><span class="p">,</span>
|
|
<span class="n">LPWSTR</span><span class="p">(</span><span class="n">filename</span><span class="p">),</span>
|
|
<span class="n">content_type</span><span class="p">,</span>
|
|
<span class="n">CERT_QUERY_FORMAT_FLAG_BINARY</span><span class="p">,</span>
|
|
<span class="mi">0</span><span class="p">,</span>
|
|
<span class="n">dwEncoding</span><span class="p">,</span>
|
|
<span class="n">dwContentType</span><span class="p">,</span>
|
|
<span class="n">dwFormatType</span><span class="p">,</span>
|
|
<span class="n">hStore</span><span class="p">,</span>
|
|
<span class="n">hMsg</span><span class="p">,</span>
|
|
<span class="kc">None</span><span class="p">)</span>
|
|
|
|
<span class="bp">self</span><span class="o">.</span><span class="n">hstore</span> <span class="o">=</span> <span class="n">hStore</span>
|
|
<span class="bp">self</span><span class="o">.</span><span class="n">hmsg</span> <span class="o">=</span> <span class="n">hMsg</span>
|
|
<span class="bp">self</span><span class="o">.</span><span class="n">encoding</span> <span class="o">=</span> <span class="n">dwEncoding</span>
|
|
<span class="bp">self</span><span class="o">.</span><span class="n">content_type</span> <span class="o">=</span> <span class="n">CRYPT_OBJECT_FORMAT_TYPE_DICT</span><span class="o">.</span><span class="n">get</span><span class="p">(</span><span class="n">dwContentType</span><span class="o">.</span><span class="n">value</span><span class="p">,</span> <span class="n">dwContentType</span><span class="p">)</span>
|
|
|
|
<span class="k">def</span> <span class="nf">msg_get_param</span><span class="p">(</span><span class="bp">self</span><span class="p">,</span> <span class="n">param_type</span><span class="p">,</span> <span class="n">index</span><span class="o">=</span><span class="mi">0</span><span class="p">):</span>
|
|
<span class="n">signer_info</span> <span class="o">=</span> <span class="n">DWORD</span><span class="p">()</span>
|
|
<span class="c1"># https://msdn.microsoft.com/en-us/library/windows/desktop/aa380227(v=vs.85).aspx</span>
|
|
<span class="n">winproxy</span><span class="o">.</span><span class="n">CryptMsgGetParam</span><span class="p">(</span><span class="bp">self</span><span class="o">.</span><span class="n">hmsg</span><span class="p">,</span> <span class="n">param_type</span><span class="p">,</span> <span class="n">index</span><span class="p">,</span> <span class="kc">None</span><span class="p">,</span> <span class="n">signer_info</span><span class="p">)</span>
|
|
<span class="n">buffer</span> <span class="o">=</span> <span class="n">ctypes</span><span class="o">.</span><span class="n">c_buffer</span><span class="p">(</span><span class="n">signer_info</span><span class="o">.</span><span class="n">value</span><span class="p">)</span>
|
|
<span class="n">winproxy</span><span class="o">.</span><span class="n">CryptMsgGetParam</span><span class="p">(</span><span class="bp">self</span><span class="o">.</span><span class="n">hmsg</span><span class="p">,</span> <span class="n">param_type</span><span class="p">,</span> <span class="n">index</span><span class="p">,</span> <span class="n">buffer</span><span class="p">,</span> <span class="n">signer_info</span><span class="p">)</span>
|
|
|
|
<span class="k">if</span> <span class="n">param_type</span> <span class="ow">in</span> <span class="bp">self</span><span class="o">.</span><span class="n">MSG_PARAM_KNOW_TYPES</span><span class="p">:</span>
|
|
<span class="n">buffer</span> <span class="o">=</span> <span class="bp">self</span><span class="o">.</span><span class="n">MSG_PARAM_KNOW_TYPES</span><span class="p">[</span><span class="n">param_type</span><span class="p">]</span><span class="o">.</span><span class="n">from_buffer</span><span class="p">(</span><span class="n">buffer</span><span class="p">)</span>
|
|
<span class="k">return</span> <span class="n">buffer</span>
|
|
|
|
<span class="nd">@property</span>
|
|
<span class="k">def</span> <span class="nf">nb_signer</span><span class="p">(</span><span class="bp">self</span><span class="p">):</span>
|
|
<span class="sd">"""The number of signers for the CryptObject</span>
|
|
|
|
<span class="sd"> :type: :class:`int`</span>
|
|
<span class="sd"> """</span>
|
|
<span class="k">return</span> <span class="bp">self</span><span class="o">.</span><span class="n">msg_get_param</span><span class="p">(</span><span class="n">CMSG_SIGNER_COUNT_PARAM</span><span class="p">)</span><span class="o">.</span><span class="n">value</span>
|
|
|
|
<div class="viewcode-block" id="CryptObject.get_signer_data"><a class="viewcode-back" href="../../../crypto.html#windows.crypto.CryptObject.get_signer_data">[docs]</a> <span class="k">def</span> <span class="nf">get_signer_data</span><span class="p">(</span><span class="bp">self</span><span class="p">,</span> <span class="n">index</span><span class="o">=</span><span class="mi">0</span><span class="p">):</span>
|
|
<span class="sd">"""Returns the signer informations for signer nb ``index``</span>
|
|
|
|
<span class="sd"> :return: :class:`CMSG_SIGNER_INFO`</span>
|
|
<span class="sd"> """</span>
|
|
<span class="k">return</span> <span class="bp">self</span><span class="o">.</span><span class="n">msg_get_param</span><span class="p">(</span><span class="n">CMSG_SIGNER_INFO_PARAM</span><span class="p">,</span> <span class="n">index</span><span class="p">)</span></div>
|
|
|
|
<div class="viewcode-block" id="CryptObject.get_signer_certificate"><a class="viewcode-back" href="../../../crypto.html#windows.crypto.CryptObject.get_signer_certificate">[docs]</a> <span class="k">def</span> <span class="nf">get_signer_certificate</span><span class="p">(</span><span class="bp">self</span><span class="p">,</span> <span class="n">index</span><span class="o">=</span><span class="mi">0</span><span class="p">):</span>
|
|
<span class="sd">"""Return the certificate used for signer nb ``index``</span>
|
|
|
|
<span class="sd"> :return: :class:`CertificateContext`</span>
|
|
<span class="sd"> """</span>
|
|
<span class="n">data</span> <span class="o">=</span> <span class="bp">self</span><span class="o">.</span><span class="n">get_signer_data</span><span class="p">(</span><span class="n">index</span><span class="p">)</span>
|
|
<span class="n">cert_info</span> <span class="o">=</span> <span class="n">CERT_INFO</span><span class="p">()</span>
|
|
<span class="n">cert_info</span><span class="o">.</span><span class="n">Issuer</span> <span class="o">=</span> <span class="n">data</span><span class="o">.</span><span class="n">Issuer</span>
|
|
<span class="n">cert_info</span><span class="o">.</span><span class="n">SerialNumber</span> <span class="o">=</span> <span class="n">data</span><span class="o">.</span><span class="n">SerialNumber</span>
|
|
<span class="n">rawcertcontext</span> <span class="o">=</span> <span class="n">winproxy</span><span class="o">.</span><span class="n">CertFindCertificateInStore</span><span class="p">(</span><span class="bp">self</span><span class="o">.</span><span class="n">hstore</span><span class="p">,</span> <span class="bp">self</span><span class="o">.</span><span class="n">encoding</span><span class="p">,</span> <span class="mi">0</span><span class="p">,</span> <span class="n">CERT_FIND_SUBJECT_CERT</span><span class="p">,</span> <span class="n">byref</span><span class="p">(</span><span class="n">cert_info</span><span class="p">),</span> <span class="kc">None</span><span class="p">)</span>
|
|
<span class="c1">#return rawcertcontext</span>
|
|
<span class="k">return</span> <span class="n">CertificateContext</span><span class="p">(</span><span class="n">rawcertcontext</span><span class="p">[</span><span class="mi">0</span><span class="p">])</span></div>
|
|
|
|
<span class="k">def</span> <span class="nf">get_raw_cert</span><span class="p">(</span><span class="bp">self</span><span class="p">,</span> <span class="n">index</span><span class="o">=</span><span class="mi">0</span><span class="p">):</span>
|
|
<span class="k">return</span> <span class="bp">self</span><span class="o">.</span><span class="n">msg_get_param</span><span class="p">(</span><span class="n">CMSG_CERT_PARAM</span><span class="p">,</span> <span class="n">index</span><span class="p">)</span>
|
|
|
|
<div class="viewcode-block" id="CryptObject.get_cert"><a class="viewcode-back" href="../../../crypto.html#windows.crypto.CryptObject.get_cert">[docs]</a> <span class="k">def</span> <span class="nf">get_cert</span><span class="p">(</span><span class="bp">self</span><span class="p">,</span> <span class="n">index</span><span class="o">=</span><span class="mi">0</span><span class="p">):</span>
|
|
<span class="sd">"""Return embded certificate number ``index``.</span>
|
|
|
|
<span class="sd"> note: not all embded certificate are directly used to sign the :class:`CryptObject`.</span>
|
|
|
|
<span class="sd"> :return: :class:`CertificateContext`</span>
|
|
<span class="sd"> """</span>
|
|
<span class="k">return</span> <span class="n">CertificateContext</span><span class="o">.</span><span class="n">from_buffer</span><span class="p">(</span><span class="bp">self</span><span class="o">.</span><span class="n">get_raw_cert</span><span class="p">(</span><span class="n">index</span><span class="p">))</span></div>
|
|
|
|
<span class="n">cert</span> <span class="o">=</span> <span class="nb">property</span><span class="p">(</span><span class="n">get_cert</span><span class="p">)</span>
|
|
|
|
<span class="nd">@property</span>
|
|
<span class="k">def</span> <span class="nf">nb_cert</span><span class="p">(</span><span class="bp">self</span><span class="p">):</span>
|
|
<span class="sd">"""The number of certificate embded in the :class:`CryptObject`</span>
|
|
|
|
<span class="sd"> :type: :class:`int`</span>
|
|
<span class="sd"> """</span>
|
|
<span class="k">return</span> <span class="bp">self</span><span class="o">.</span><span class="n">msg_get_param</span><span class="p">(</span><span class="n">CMSG_CERT_COUNT_PARAM</span><span class="p">)</span><span class="o">.</span><span class="n">value</span>
|
|
|
|
<span class="k">def</span> <span class="nf">__repr__</span><span class="p">(</span><span class="bp">self</span><span class="p">):</span>
|
|
<span class="k">return</span> <span class="s1">'<</span><span class="si">{0}</span><span class="s1"> "</span><span class="si">{1}</span><span class="s1">" content_type=</span><span class="si">{2}</span><span class="s1">>'</span><span class="o">.</span><span class="n">format</span><span class="p">(</span><span class="nb">type</span><span class="p">(</span><span class="bp">self</span><span class="p">)</span><span class="o">.</span><span class="vm">__name__</span><span class="p">,</span> <span class="bp">self</span><span class="o">.</span><span class="n">filename</span><span class="p">,</span> <span class="bp">self</span><span class="o">.</span><span class="n">content_type</span><span class="p">)</span></div>
|
|
|
|
|
|
<div class="viewcode-block" id="EHCERTSTORE"><a class="viewcode-back" href="../../../crypto.html#windows.crypto.EHCERTSTORE">[docs]</a><span class="k">class</span> <span class="nc">EHCERTSTORE</span><span class="p">(</span><span class="n">HCERTSTORE</span><span class="p">):</span>
|
|
<span class="sd">"""A certificate store"""</span>
|
|
<span class="nd">@property</span>
|
|
<span class="k">def</span> <span class="nf">certs</span><span class="p">(</span><span class="bp">self</span><span class="p">):</span>
|
|
<span class="sd">"""The certificates in the store</span>
|
|
|
|
<span class="sd"> :type: [:class:`CertificateContext`] -- A list of Certificate</span>
|
|
<span class="sd"> """</span>
|
|
<span class="n">res</span> <span class="o">=</span> <span class="p">[]</span>
|
|
<span class="n">last</span> <span class="o">=</span> <span class="kc">None</span>
|
|
<span class="k">while</span> <span class="kc">True</span><span class="p">:</span>
|
|
<span class="k">try</span><span class="p">:</span>
|
|
<span class="n">cert</span> <span class="o">=</span> <span class="n">winproxy</span><span class="o">.</span><span class="n">CertEnumCertificatesInStore</span><span class="p">(</span><span class="bp">self</span><span class="p">,</span> <span class="n">last</span><span class="p">)</span>
|
|
<span class="k">except</span> <span class="n">winproxy</span><span class="o">.</span><span class="n">Kernel32Error</span> <span class="k">as</span> <span class="n">e</span><span class="p">:</span>
|
|
<span class="k">if</span> <span class="p">(</span><span class="n">e</span><span class="o">.</span><span class="n">winerror</span> <span class="o">&</span> <span class="mh">0xffffffff</span><span class="p">)</span> <span class="ow">in</span> <span class="p">(</span><span class="n">CRYPT_E_NOT_FOUND</span><span class="p">,):</span>
|
|
<span class="k">return</span> <span class="nb">tuple</span><span class="p">(</span><span class="n">res</span><span class="p">)</span>
|
|
<span class="k">raise</span>
|
|
<span class="c1"># Need to duplicate as CertEnumCertificatesInStore will free the context 'last'</span>
|
|
<span class="n">ecert</span> <span class="o">=</span> <span class="n">windows</span><span class="o">.</span><span class="n">crypto</span><span class="o">.</span><span class="n">CertificateContext</span><span class="p">(</span><span class="n">cert</span><span class="p">[</span><span class="mi">0</span><span class="p">])</span>
|
|
<span class="n">res</span><span class="o">.</span><span class="n">append</span><span class="p">(</span><span class="n">ecert</span><span class="o">.</span><span class="n">duplicate</span><span class="p">())</span>
|
|
<span class="n">last</span> <span class="o">=</span> <span class="n">ecert</span>
|
|
<span class="k">raise</span> <span class="ne">RuntimeError</span><span class="p">(</span><span class="s2">"Out of infinit loop"</span><span class="p">)</span>
|
|
|
|
<div class="viewcode-block" id="EHCERTSTORE.add_certificate"><a class="viewcode-back" href="../../../crypto.html#windows.crypto.EHCERTSTORE.add_certificate">[docs]</a> <span class="k">def</span> <span class="nf">add_certificate</span><span class="p">(</span><span class="bp">self</span><span class="p">,</span> <span class="n">certificate</span><span class="p">):</span>
|
|
<span class="sd">"""Add a certificate to the store"""</span>
|
|
<span class="n">winproxy</span><span class="o">.</span><span class="n">CertAddCertificateContextToStore</span><span class="p">(</span><span class="bp">self</span><span class="p">,</span> <span class="n">certificate</span><span class="p">,</span> <span class="n">CERT_STORE_ADD_NEW</span><span class="p">,</span> <span class="kc">None</span><span class="p">)</span></div>
|
|
|
|
<span class="nd">@classmethod</span>
|
|
<div class="viewcode-block" id="EHCERTSTORE.from_file"><a class="viewcode-back" href="../../../crypto.html#windows.crypto.EHCERTSTORE.from_file">[docs]</a> <span class="k">def</span> <span class="nf">from_file</span><span class="p">(</span><span class="bp">cls</span><span class="p">,</span> <span class="n">filename</span><span class="p">):</span>
|
|
<span class="sd">"""Create a new :class:`EHCERTSTORE` from ``filename``"""</span>
|
|
<span class="n">res</span> <span class="o">=</span> <span class="n">winproxy</span><span class="o">.</span><span class="n">CertOpenStore</span><span class="p">(</span><span class="n">CERT_STORE_PROV_FILENAME_A</span><span class="p">,</span> <span class="n">DEFAULT_ENCODING</span><span class="p">,</span> <span class="kc">None</span><span class="p">,</span> <span class="n">CERT_STORE_OPEN_EXISTING_FLAG</span><span class="p">,</span> <span class="n">filename</span><span class="p">)</span>
|
|
<span class="k">return</span> <span class="n">ctypes</span><span class="o">.</span><span class="n">cast</span><span class="p">(</span><span class="n">res</span><span class="p">,</span> <span class="bp">cls</span><span class="p">)</span></div>
|
|
|
|
|
|
<span class="c1"># See https://msdn.microsoft.com/en-us/library/windows/desktop/aa388136(v=vs.85).aspx</span>
|
|
<span class="nd">@classmethod</span>
|
|
<div class="viewcode-block" id="EHCERTSTORE.from_system_store"><a class="viewcode-back" href="../../../crypto.html#windows.crypto.EHCERTSTORE.from_system_store">[docs]</a> <span class="k">def</span> <span class="nf">from_system_store</span><span class="p">(</span><span class="bp">cls</span><span class="p">,</span> <span class="n">store_name</span><span class="p">):</span>
|
|
<span class="sd">"""Create a new :class:`EHCERTSTORE` from system store``store_name``</span>
|
|
<span class="sd"> (see https://msdn.microsoft.com/en-us/library/windows/desktop/aa388136(v=vs.85).aspx)</span>
|
|
<span class="sd"> """</span>
|
|
<span class="n">res</span> <span class="o">=</span> <span class="n">winproxy</span><span class="o">.</span><span class="n">CertOpenStore</span><span class="p">(</span><span class="n">CERT_STORE_PROV_SYSTEM_A</span><span class="p">,</span> <span class="n">DEFAULT_ENCODING</span><span class="p">,</span> <span class="kc">None</span><span class="p">,</span> <span class="n">CERT_SYSTEM_STORE_LOCAL_MACHINE</span> <span class="o">|</span> <span class="n">CERT_STORE_READONLY_FLAG</span><span class="p">,</span> <span class="n">store_name</span><span class="p">)</span>
|
|
<span class="k">return</span> <span class="n">ctypes</span><span class="o">.</span><span class="n">cast</span><span class="p">(</span><span class="n">res</span><span class="p">,</span> <span class="bp">cls</span><span class="p">)</span></div>
|
|
|
|
<span class="nd">@classmethod</span>
|
|
<div class="viewcode-block" id="EHCERTSTORE.new_in_memory"><a class="viewcode-back" href="../../../crypto.html#windows.crypto.EHCERTSTORE.new_in_memory">[docs]</a> <span class="k">def</span> <span class="nf">new_in_memory</span><span class="p">(</span><span class="bp">cls</span><span class="p">):</span>
|
|
<span class="sd">"""Create a new temporary :class:`EHCERTSTORE` in memory"""</span>
|
|
<span class="n">res</span> <span class="o">=</span> <span class="n">winproxy</span><span class="o">.</span><span class="n">CertOpenStore</span><span class="p">(</span><span class="n">CERT_STORE_PROV_MEMORY</span><span class="p">,</span> <span class="n">DEFAULT_ENCODING</span><span class="p">,</span> <span class="kc">None</span><span class="p">,</span> <span class="mi">0</span><span class="p">,</span> <span class="kc">None</span><span class="p">)</span>
|
|
<span class="k">return</span> <span class="n">ctypes</span><span class="o">.</span><span class="n">cast</span><span class="p">(</span><span class="n">res</span><span class="p">,</span> <span class="bp">cls</span><span class="p">)</span></div></div>
|
|
|
|
<span class="c1"># Add API arround 'CertFindCertificateInStore' ?</span>
|
|
|
|
<span class="c1"># PKCS12_NO_PERSIST_KEY -> do not save it in a key container on disk</span>
|
|
<span class="c1"># Without it, a key container is created at 'C:\Users\USERNAME\AppData\Roaming\Microsoft\Crypto\RSA\S-1-5-21-3241049326-165485355-1070449050-1001'</span>
|
|
<div class="viewcode-block" id="import_pfx"><a class="viewcode-back" href="../../../crypto.html#windows.crypto.import_pfx">[docs]</a><span class="k">def</span> <span class="nf">import_pfx</span><span class="p">(</span><span class="n">pfx</span><span class="p">,</span> <span class="n">password</span><span class="o">=</span><span class="kc">None</span><span class="p">,</span> <span class="n">flags</span><span class="o">=</span><span class="n">CRYPT_USER_KEYSET</span> <span class="o">|</span> <span class="n">PKCS12_NO_PERSIST_KEY</span><span class="p">):</span>
|
|
<span class="sd">"""Import the file ``pfx`` with the ``password``.</span>
|
|
|
|
<span class="sd"> ``default flags = PKCS12_NO_PERSIST_KEY | CRYPT_USER_KEYSET``.</span>
|
|
|
|
<span class="sd"> ``PKCS12_NO_PERSIST_KEY`` tells ``CryptoAPI`` to NOT save the keys in a on-disk container.</span>
|
|
|
|
<span class="sd"> :return: :class:`EHCERTSTORE`</span>
|
|
<span class="sd"> """</span>
|
|
<span class="k">if</span> <span class="nb">isinstance</span><span class="p">(</span><span class="n">pfx</span><span class="p">,</span> <span class="n">basestring</span><span class="p">):</span>
|
|
<span class="n">pfx</span> <span class="o">=</span> <span class="n">ECRYPT_DATA_BLOB</span><span class="o">.</span><span class="n">from_string</span><span class="p">(</span><span class="n">pfx</span><span class="p">)</span>
|
|
<span class="n">cert_store</span> <span class="o">=</span> <span class="n">winproxy</span><span class="o">.</span><span class="n">PFXImportCertStore</span><span class="p">(</span><span class="n">pfx</span><span class="p">,</span> <span class="n">password</span><span class="p">,</span> <span class="n">flags</span><span class="p">)</span>
|
|
<span class="k">return</span> <span class="n">EHCERTSTORE</span><span class="p">(</span><span class="n">cert_store</span><span class="p">)</span></div>
|
|
|
|
|
|
<span class="c1"># Why PCCERT_CONTEXT (pointer type) and not _CERT_CONTEXT ?</span>
|
|
<div class="viewcode-block" id="CertificateContext"><a class="viewcode-back" href="../../../crypto.html#windows.crypto.CertificateContext">[docs]</a><span class="k">class</span> <span class="nc">CertificateContext</span><span class="p">(</span><span class="n">PCCERT_CONTEXT</span><span class="p">):</span>
|
|
<span class="sd">"""Represent a Certificate.</span>
|
|
|
|
<span class="sd"> note: It is a pointer ctypes structure (``PCCERT_CONTEXT``)</span>
|
|
<span class="sd"> """</span>
|
|
<span class="n">_type_</span> <span class="o">=</span> <span class="n">PCCERT_CONTEXT</span><span class="o">.</span><span class="n">_type_</span> <span class="c1"># Not herited from PCCERT_CONTEXT</span>
|
|
|
|
|
|
<span class="k">def</span> <span class="nf">__repr__</span><span class="p">(</span><span class="bp">self</span><span class="p">):</span>
|
|
<span class="k">return</span> <span class="s1">'<</span><span class="si">{0}</span><span class="s1"> "</span><span class="si">{1}</span><span class="s1">" serial="</span><span class="si">{2}</span><span class="s1">">'</span><span class="o">.</span><span class="n">format</span><span class="p">(</span><span class="nb">type</span><span class="p">(</span><span class="bp">self</span><span class="p">)</span><span class="o">.</span><span class="vm">__name__</span><span class="p">,</span> <span class="bp">self</span><span class="o">.</span><span class="n">name</span><span class="p">,</span> <span class="bp">self</span><span class="o">.</span><span class="n">serial</span><span class="p">)</span>
|
|
|
|
<span class="nd">@property</span>
|
|
<span class="k">def</span> <span class="nf">raw_serial</span><span class="p">(</span><span class="bp">self</span><span class="p">):</span>
|
|
<span class="sd">"""The raw serial number of the certificate.</span>
|
|
|
|
<span class="sd"> :type: [:class:`int`]: A list of int ``0 <= x <= 255``"""</span>
|
|
<span class="n">serial_number</span> <span class="o">=</span> <span class="bp">self</span><span class="p">[</span><span class="mi">0</span><span class="p">]</span><span class="o">.</span><span class="n">pCertInfo</span><span class="p">[</span><span class="mi">0</span><span class="p">]</span><span class="o">.</span><span class="n">SerialNumber</span>
|
|
<span class="k">return</span> <span class="p">[(</span><span class="n">c</span> <span class="o">&</span> <span class="mh">0xff</span><span class="p">)</span> <span class="k">for</span> <span class="n">c</span> <span class="ow">in</span> <span class="n">serial_number</span><span class="o">.</span><span class="n">pbData</span><span class="p">[:</span><span class="n">serial_number</span><span class="o">.</span><span class="n">cbData</span><span class="p">][::</span><span class="o">-</span><span class="mi">1</span><span class="p">]]</span>
|
|
|
|
<span class="nd">@property</span>
|
|
<span class="k">def</span> <span class="nf">serial</span><span class="p">(</span><span class="bp">self</span><span class="p">):</span>
|
|
<span class="sd">"""The string representation of the certificate's serial.</span>
|
|
|
|
<span class="sd"> :type: :class:`str`</span>
|
|
<span class="sd"> """</span>
|
|
<span class="n">serial_number</span> <span class="o">=</span> <span class="bp">self</span><span class="p">[</span><span class="mi">0</span><span class="p">]</span><span class="o">.</span><span class="n">pCertInfo</span><span class="p">[</span><span class="mi">0</span><span class="p">]</span><span class="o">.</span><span class="n">SerialNumber</span>
|
|
<span class="n">serial_bytes</span> <span class="o">=</span> <span class="bp">self</span><span class="o">.</span><span class="n">raw_serial</span>
|
|
<span class="k">return</span> <span class="s2">" "</span><span class="o">.</span><span class="n">join</span><span class="p">(</span><span class="s2">"</span><span class="si">{:02x}</span><span class="s2">"</span><span class="o">.</span><span class="n">format</span><span class="p">(</span><span class="n">x</span><span class="p">)</span> <span class="k">for</span> <span class="n">x</span> <span class="ow">in</span> <span class="n">serial_bytes</span><span class="p">)</span>
|
|
|
|
|
|
<div class="viewcode-block" id="CertificateContext.get_name"><a class="viewcode-back" href="../../../crypto.html#windows.crypto.CertificateContext.get_name">[docs]</a> <span class="k">def</span> <span class="nf">get_name</span><span class="p">(</span><span class="bp">self</span><span class="p">,</span> <span class="n">nametype</span><span class="o">=</span><span class="n">CERT_NAME_SIMPLE_DISPLAY_TYPE</span><span class="p">,</span> <span class="n">flags</span><span class="o">=</span><span class="mi">0</span><span class="p">):</span>
|
|
<span class="sd">"""Retrieve the subject or issuer name of the certificate. See ``CertGetNameStringA``</span>
|
|
|
|
<span class="sd"> :returns: :class:`str`</span>
|
|
<span class="sd"> """</span>
|
|
<span class="n">size</span> <span class="o">=</span> <span class="n">winproxy</span><span class="o">.</span><span class="n">CertGetNameStringA</span><span class="p">(</span><span class="bp">self</span><span class="p">,</span> <span class="n">nametype</span><span class="p">,</span> <span class="n">flags</span><span class="p">,</span> <span class="kc">None</span><span class="p">,</span> <span class="kc">None</span><span class="p">,</span> <span class="mi">0</span><span class="p">)</span>
|
|
<span class="n">namebuff</span> <span class="o">=</span> <span class="n">ctypes</span><span class="o">.</span><span class="n">c_buffer</span><span class="p">(</span><span class="n">size</span><span class="p">)</span>
|
|
<span class="n">size</span> <span class="o">=</span> <span class="n">winproxy</span><span class="o">.</span><span class="n">CertGetNameStringA</span><span class="p">(</span><span class="bp">self</span><span class="p">,</span> <span class="n">nametype</span><span class="p">,</span> <span class="n">flags</span><span class="p">,</span> <span class="kc">None</span><span class="p">,</span> <span class="n">namebuff</span><span class="p">,</span> <span class="n">size</span><span class="p">)</span>
|
|
<span class="k">return</span> <span class="n">namebuff</span><span class="p">[:</span><span class="o">-</span><span class="mi">1</span><span class="p">]</span></div>
|
|
|
|
<span class="n">name</span> <span class="o">=</span> <span class="nb">property</span><span class="p">(</span><span class="n">get_name</span><span class="p">)</span>
|
|
<span class="sd">"""The name of the certificate.</span>
|
|
|
|
<span class="sd"> :type: :class:`str`"""</span>
|
|
|
|
<span class="nd">@property</span>
|
|
<span class="k">def</span> <span class="nf">issuer</span><span class="p">(</span><span class="bp">self</span><span class="p">):</span>
|
|
<span class="sd">"""The name of the certificate's issuer.</span>
|
|
|
|
<span class="sd"> :type: :class:`str`"""</span>
|
|
<span class="k">return</span> <span class="bp">self</span><span class="o">.</span><span class="n">get_name</span><span class="p">(</span><span class="n">flags</span><span class="o">=</span><span class="n">CERT_NAME_ISSUER_FLAG</span><span class="p">)</span>
|
|
|
|
<span class="nd">@property</span>
|
|
<span class="k">def</span> <span class="nf">store</span><span class="p">(</span><span class="bp">self</span><span class="p">):</span>
|
|
<span class="sd">"""The certificate store that contains the certificate</span>
|
|
|
|
<span class="sd"> :type: :class:`EHCERTSTORE`</span>
|
|
<span class="sd"> """</span>
|
|
<span class="k">return</span> <span class="n">EHCERTSTORE</span><span class="p">(</span><span class="bp">self</span><span class="p">[</span><span class="mi">0</span><span class="p">]</span><span class="o">.</span><span class="n">hCertStore</span><span class="p">)</span>
|
|
|
|
<span class="k">def</span> <span class="nf">get_raw_certificate_chains</span><span class="p">(</span><span class="bp">self</span><span class="p">):</span> <span class="c1"># Rename to all_chains ?</span>
|
|
<span class="n">chain_context</span> <span class="o">=</span> <span class="n">EPCCERT_CHAIN_CONTEXT</span><span class="p">()</span>
|
|
|
|
<span class="n">enhkey_usage</span> <span class="o">=</span> <span class="n">CERT_ENHKEY_USAGE</span><span class="p">()</span>
|
|
<span class="n">enhkey_usage</span><span class="o">.</span><span class="n">cUsageIdentifier</span> <span class="o">=</span> <span class="mi">0</span>
|
|
<span class="n">enhkey_usage</span><span class="o">.</span><span class="n">rgpszUsageIdentifier</span> <span class="o">=</span> <span class="kc">None</span>
|
|
|
|
<span class="n">cert_usage</span> <span class="o">=</span> <span class="n">CERT_USAGE_MATCH</span><span class="p">()</span>
|
|
<span class="n">cert_usage</span><span class="o">.</span><span class="n">dwType</span> <span class="o">=</span> <span class="n">USAGE_MATCH_TYPE_AND</span>
|
|
<span class="n">cert_usage</span><span class="o">.</span><span class="n">Usage</span> <span class="o">=</span> <span class="n">enhkey_usage</span>
|
|
|
|
<span class="n">chain_para</span> <span class="o">=</span> <span class="n">CERT_CHAIN_PARA</span><span class="p">()</span>
|
|
<span class="n">chain_para</span><span class="o">.</span><span class="n">cbSize</span> <span class="o">=</span> <span class="n">sizeof</span><span class="p">(</span><span class="n">chain_para</span><span class="p">)</span>
|
|
<span class="n">chain_para</span><span class="o">.</span><span class="n">RequestedUsage</span> <span class="o">=</span> <span class="n">cert_usage</span>
|
|
|
|
<span class="n">winproxy</span><span class="o">.</span><span class="n">CertGetCertificateChain</span><span class="p">(</span><span class="kc">None</span><span class="p">,</span> <span class="bp">self</span><span class="p">,</span> <span class="kc">None</span><span class="p">,</span> <span class="bp">self</span><span class="p">[</span><span class="mi">0</span><span class="p">]</span><span class="o">.</span><span class="n">hCertStore</span><span class="p">,</span> <span class="n">byref</span><span class="p">(</span><span class="n">chain_para</span><span class="p">),</span> <span class="mi">0</span><span class="p">,</span> <span class="kc">None</span><span class="p">,</span> <span class="n">byref</span><span class="p">(</span><span class="n">chain_context</span><span class="p">))</span>
|
|
<span class="c1">#return CertficateChain(chain_context)</span>
|
|
<span class="k">return</span> <span class="n">chain_context</span>
|
|
|
|
<span class="nd">@property</span> <span class="c1"># fixedproperty ?</span>
|
|
<span class="k">def</span> <span class="nf">chains</span><span class="p">(</span><span class="bp">self</span><span class="p">):</span>
|
|
<span class="sd">"""The list of chain context available for this certificate. Each elements of this list is a list of ``CertificateContext`` that should</span>
|
|
<span class="sd"> go from the ``self`` certificate to a trusted certificate.</span>
|
|
|
|
<span class="sd"> :type: [[:class:`CertificateContext`]] -- A list of chain (list) of :class:`CertificateContext`</span>
|
|
<span class="sd"> """</span>
|
|
<span class="n">chain_context</span> <span class="o">=</span> <span class="bp">self</span><span class="o">.</span><span class="n">get_raw_certificate_chains</span><span class="p">()</span>
|
|
<span class="n">res</span> <span class="o">=</span> <span class="p">[]</span>
|
|
<span class="k">for</span> <span class="n">chain</span> <span class="ow">in</span> <span class="n">chain_context</span><span class="o">.</span><span class="n">chains</span><span class="p">:</span>
|
|
<span class="n">chain_res</span> <span class="o">=</span> <span class="p">[</span><span class="n">elt</span><span class="o">.</span><span class="n">cert</span> <span class="k">for</span> <span class="n">elt</span> <span class="ow">in</span> <span class="n">chain</span><span class="o">.</span><span class="n">elements</span><span class="p">]</span>
|
|
<span class="n">res</span><span class="o">.</span><span class="n">append</span><span class="p">(</span><span class="n">chain_res</span><span class="p">)</span>
|
|
<span class="k">return</span> <span class="n">res</span>
|
|
|
|
<span class="c1"># API Arround CertSelectCertificateChains ?</span>
|
|
<span class="c1"># https://msdn.microsoft.com/en-us/library/windows/desktop/dd433797(v=vs.85).aspx</span>
|
|
|
|
<div class="viewcode-block" id="CertificateContext.duplicate"><a class="viewcode-back" href="../../../crypto.html#windows.crypto.CertificateContext.duplicate">[docs]</a> <span class="k">def</span> <span class="nf">duplicate</span><span class="p">(</span><span class="bp">self</span><span class="p">):</span>
|
|
<span class="sd">"""Duplicate the certificate by incrementing the internal refcount. (see ``CertDuplicateCertificateContext``)</span>
|
|
|
|
<span class="sd"> note: The object returned is ``self``</span>
|
|
|
|
<span class="sd"> :return: :class:`CertificateContext`</span>
|
|
<span class="sd"> """</span>
|
|
<span class="n">res</span> <span class="o">=</span> <span class="n">winproxy</span><span class="o">.</span><span class="n">CertDuplicateCertificateContext</span><span class="p">(</span><span class="bp">self</span><span class="p">)</span>
|
|
<span class="c1"># Check what the doc says: the pointer returned is actually the PCERT in parameter</span>
|
|
<span class="c1"># Only the refcount is incremented</span>
|
|
<span class="c1"># This postulate allow us to return 'self' directly</span>
|
|
<span class="c1"># https://msdn.microsoft.com/en-us/library/windows/desktop/aa376045(v=vs.85).aspx</span>
|
|
<span class="k">if</span> <span class="ow">not</span> <span class="n">ctypes</span><span class="o">.</span><span class="n">cast</span><span class="p">(</span><span class="n">res</span><span class="p">,</span> <span class="n">PVOID</span><span class="p">)</span><span class="o">.</span><span class="n">value</span> <span class="o">==</span> <span class="n">ctypes</span><span class="o">.</span><span class="n">cast</span><span class="p">(</span><span class="bp">self</span><span class="p">,</span> <span class="n">PVOID</span><span class="p">)</span><span class="o">.</span><span class="n">value</span><span class="p">:</span>
|
|
<span class="k">raise</span> <span class="ne">ValueError</span><span class="p">(</span><span class="s2">"CertDuplicateCertificateContext did not returned the argument (check doc)"</span><span class="p">)</span>
|
|
<span class="k">return</span> <span class="bp">self</span></div>
|
|
|
|
<span class="k">def</span> <span class="nf">enum_properties</span><span class="p">(</span><span class="bp">self</span><span class="p">):</span>
|
|
<span class="n">prop</span> <span class="o">=</span> <span class="mi">0</span>
|
|
<span class="n">res</span> <span class="o">=</span> <span class="p">[]</span>
|
|
<span class="k">while</span> <span class="kc">True</span><span class="p">:</span>
|
|
<span class="n">prop</span> <span class="o">=</span> <span class="n">winproxy</span><span class="o">.</span><span class="n">CertEnumCertificateContextProperties</span><span class="p">(</span><span class="bp">self</span><span class="p">,</span> <span class="n">prop</span><span class="p">)</span>
|
|
<span class="k">if</span> <span class="ow">not</span> <span class="n">prop</span><span class="p">:</span>
|
|
<span class="k">return</span> <span class="n">res</span>
|
|
<span class="n">res</span><span class="o">.</span><span class="n">append</span><span class="p">(</span><span class="n">prop</span><span class="p">)</span>
|
|
<span class="k">raise</span> <span class="ne">RuntimeError</span><span class="p">(</span><span class="s2">"Unreachable code"</span><span class="p">)</span>
|
|
|
|
<span class="n">properties</span> <span class="o">=</span> <span class="nb">property</span><span class="p">(</span><span class="n">enum_properties</span><span class="p">)</span>
|
|
|
|
<span class="c1">#def get_property(self):</span>
|
|
<span class="c1"># https://msdn.microsoft.com/en-us/library/windows/desktop/aa376079(v=vs.85).aspx</span>
|
|
<span class="c1"># - Usefull:</span>
|
|
<span class="c1"># CERT_SHA1_HASH_PROP_ID</span>
|
|
|
|
|
|
<span class="nd">@property</span>
|
|
<span class="k">def</span> <span class="nf">encoded</span><span class="p">(</span><span class="bp">self</span><span class="p">):</span>
|
|
<span class="sd">"""The encoded certificate.</span>
|
|
|
|
<span class="sd"> :type: :class:`bytearray`"""</span>
|
|
<span class="k">return</span> <span class="nb">bytearray</span><span class="p">(</span><span class="bp">self</span><span class="p">[</span><span class="mi">0</span><span class="p">]</span><span class="o">.</span><span class="n">pbCertEncoded</span><span class="p">[:</span><span class="bp">self</span><span class="p">[</span><span class="mi">0</span><span class="p">]</span><span class="o">.</span><span class="n">cbCertEncoded</span><span class="p">])</span>
|
|
|
|
<span class="nd">@classmethod</span>
|
|
<div class="viewcode-block" id="CertificateContext.from_file"><a class="viewcode-back" href="../../../crypto.html#windows.crypto.CertificateContext.from_file">[docs]</a> <span class="k">def</span> <span class="nf">from_file</span><span class="p">(</span><span class="bp">cls</span><span class="p">,</span> <span class="n">filename</span><span class="p">):</span>
|
|
<span class="sd">"""Create a :class:`CertificateContext` from the file ``filename``</span>
|
|
|
|
<span class="sd"> :return: :class:`CertificateContext`</span>
|
|
<span class="sd"> """</span>
|
|
<span class="k">with</span> <span class="nb">open</span><span class="p">(</span><span class="n">filename</span><span class="p">,</span> <span class="s2">"rb"</span><span class="p">)</span> <span class="k">as</span> <span class="n">f</span><span class="p">:</span>
|
|
<span class="n">data</span> <span class="o">=</span> <span class="n">f</span><span class="o">.</span><span class="n">read</span><span class="p">()</span>
|
|
<span class="n">buf</span> <span class="o">=</span> <span class="p">(</span><span class="n">ctypes</span><span class="o">.</span><span class="n">c_ubyte</span> <span class="o">*</span> <span class="nb">len</span><span class="p">(</span><span class="n">data</span><span class="p">))(</span><span class="o">*</span><span class="nb">bytearray</span><span class="p">(</span><span class="n">data</span><span class="p">))</span>
|
|
<span class="n">res</span> <span class="o">=</span> <span class="n">windows</span><span class="o">.</span><span class="n">winproxy</span><span class="o">.</span><span class="n">CertCreateCertificateContext</span><span class="p">(</span><span class="n">windows</span><span class="o">.</span><span class="n">crypto</span><span class="o">.</span><span class="n">DEFAULT_ENCODING</span><span class="p">,</span> <span class="n">buf</span><span class="p">,</span> <span class="nb">len</span><span class="p">(</span><span class="n">data</span><span class="p">))</span>
|
|
<span class="k">return</span> <span class="n">ctypes</span><span class="o">.</span><span class="n">cast</span><span class="p">(</span><span class="n">res</span><span class="p">,</span> <span class="bp">cls</span><span class="p">)</span></div>
|
|
|
|
<span class="nd">@classmethod</span>
|
|
<div class="viewcode-block" id="CertificateContext.from_buffer"><a class="viewcode-back" href="../../../crypto.html#windows.crypto.CertificateContext.from_buffer">[docs]</a> <span class="k">def</span> <span class="nf">from_buffer</span><span class="p">(</span><span class="bp">cls</span><span class="p">,</span> <span class="n">data</span><span class="p">):</span>
|
|
<span class="sd">"""Create a :class:`CertificateContext` from the buffer ``data``</span>
|
|
|
|
<span class="sd"> :return: :class:`CertificateContext`</span>
|
|
<span class="sd"> """</span>
|
|
<span class="n">buf</span> <span class="o">=</span> <span class="p">(</span><span class="n">ctypes</span><span class="o">.</span><span class="n">c_ubyte</span> <span class="o">*</span> <span class="nb">len</span><span class="p">(</span><span class="n">data</span><span class="p">))(</span><span class="o">*</span><span class="nb">bytearray</span><span class="p">(</span><span class="n">data</span><span class="p">))</span>
|
|
<span class="n">res</span> <span class="o">=</span> <span class="n">windows</span><span class="o">.</span><span class="n">winproxy</span><span class="o">.</span><span class="n">CertCreateCertificateContext</span><span class="p">(</span><span class="n">windows</span><span class="o">.</span><span class="n">crypto</span><span class="o">.</span><span class="n">DEFAULT_ENCODING</span><span class="p">,</span> <span class="n">buf</span><span class="p">,</span> <span class="nb">len</span><span class="p">(</span><span class="n">data</span><span class="p">))</span>
|
|
<span class="k">return</span> <span class="n">ctypes</span><span class="o">.</span><span class="n">cast</span><span class="p">(</span><span class="n">res</span><span class="p">,</span> <span class="bp">cls</span><span class="p">)</span></div>
|
|
|
|
<span class="k">def</span> <span class="nf">__eq__</span><span class="p">(</span><span class="bp">self</span><span class="p">,</span> <span class="n">other</span><span class="p">):</span>
|
|
<span class="k">if</span> <span class="ow">not</span> <span class="nb">isinstance</span><span class="p">(</span><span class="n">other</span><span class="p">,</span> <span class="n">CertificateContext</span><span class="p">):</span>
|
|
<span class="k">return</span> <span class="bp">NotImplemented</span>
|
|
<span class="k">return</span> <span class="n">windows</span><span class="o">.</span><span class="n">winproxy</span><span class="o">.</span><span class="n">CertCompareCertificate</span><span class="p">(</span><span class="n">DEFAULT_ENCODING</span><span class="p">,</span> <span class="bp">self</span><span class="p">[</span><span class="mi">0</span><span class="p">]</span><span class="o">.</span><span class="n">pCertInfo</span><span class="p">,</span> <span class="n">other</span><span class="p">[</span><span class="mi">0</span><span class="p">]</span><span class="o">.</span><span class="n">pCertInfo</span><span class="p">)</span></div>
|
|
|
|
<span class="c1"># CertCompareCertificate ?</span>
|
|
<span class="c1"># https://msdn.microsoft.com/en-us/library/windows/desktop/aa376027(v=vs.85).aspx</span>
|
|
|
|
|
|
<span class="c1"># class CertficateChain(object):</span>
|
|
<span class="c1"># def __init__(self, pc_chain_context):</span>
|
|
<span class="c1"># self.chain = pc_chain_context[0]</span>
|
|
<span class="c1">#</span>
|
|
<span class="c1"># def to_list(self):</span>
|
|
<span class="c1"># res = []</span>
|
|
<span class="c1"># for i in range(self.chain.rgpChain[0][0].cElement):</span>
|
|
<span class="c1"># res.append(CertificateContext(self.chain.rgpChain[0][0].rgpElement[i][0].pCertContext[0]))</span>
|
|
<span class="c1"># return res</span>
|
|
|
|
|
|
<span class="c1"># Those classes are more of a POC than anything else</span>
|
|
|
|
<span class="k">class</span> <span class="nc">EPCCERT_CHAIN_CONTEXT</span><span class="p">(</span><span class="n">PCCERT_CHAIN_CONTEXT</span><span class="p">):</span>
|
|
<span class="n">_type_</span> <span class="o">=</span> <span class="n">PCCERT_CHAIN_CONTEXT</span><span class="o">.</span><span class="n">_type_</span>
|
|
|
|
<span class="nd">@property</span>
|
|
<span class="k">def</span> <span class="nf">chains</span><span class="p">(</span><span class="bp">self</span><span class="p">):</span>
|
|
<span class="n">res</span> <span class="o">=</span> <span class="p">[]</span>
|
|
<span class="k">for</span> <span class="n">i</span> <span class="ow">in</span> <span class="nb">range</span><span class="p">(</span><span class="bp">self</span><span class="p">[</span><span class="mi">0</span><span class="p">]</span><span class="o">.</span><span class="n">cChain</span><span class="p">):</span>
|
|
<span class="n">simple_chain</span> <span class="o">=</span> <span class="n">ctypes</span><span class="o">.</span><span class="n">cast</span><span class="p">(</span><span class="bp">self</span><span class="p">[</span><span class="mi">0</span><span class="p">]</span><span class="o">.</span><span class="n">rgpChain</span><span class="p">[</span><span class="n">i</span><span class="p">],</span> <span class="n">EPCCERT_SIMPLE_CHAIN</span><span class="p">)</span>
|
|
<span class="n">res</span><span class="o">.</span><span class="n">append</span><span class="p">(</span><span class="n">simple_chain</span><span class="p">)</span>
|
|
<span class="k">return</span> <span class="n">res</span>
|
|
|
|
<span class="nd">@property</span>
|
|
<span class="k">def</span> <span class="nf">all_cert</span><span class="p">(</span><span class="bp">self</span><span class="p">):</span>
|
|
<span class="n">res</span> <span class="o">=</span> <span class="p">[]</span>
|
|
<span class="k">for</span> <span class="n">chain</span> <span class="ow">in</span> <span class="bp">self</span><span class="o">.</span><span class="n">chains</span><span class="p">:</span>
|
|
<span class="n">ch</span> <span class="o">=</span> <span class="p">[]</span>
|
|
<span class="n">res</span><span class="o">.</span><span class="n">append</span><span class="p">(</span><span class="n">ch</span><span class="p">)</span>
|
|
<span class="k">for</span> <span class="n">element</span> <span class="ow">in</span> <span class="n">chain</span><span class="o">.</span><span class="n">elements</span><span class="p">:</span>
|
|
<span class="n">ch</span><span class="o">.</span><span class="n">append</span><span class="p">(</span><span class="n">element</span><span class="o">.</span><span class="n">cert</span><span class="p">)</span>
|
|
<span class="k">return</span> <span class="n">res</span>
|
|
|
|
<span class="k">class</span> <span class="nc">EPCCERT_SIMPLE_CHAIN</span><span class="p">(</span><span class="n">PCCERT_SIMPLE_CHAIN</span><span class="p">):</span>
|
|
<span class="n">_type_</span> <span class="o">=</span> <span class="n">PCCERT_SIMPLE_CHAIN</span><span class="o">.</span><span class="n">_type_</span>
|
|
|
|
<span class="nd">@property</span>
|
|
<span class="k">def</span> <span class="nf">elements</span><span class="p">(</span><span class="bp">self</span><span class="p">):</span>
|
|
<span class="n">res</span> <span class="o">=</span> <span class="p">[]</span>
|
|
<span class="k">for</span> <span class="n">i</span> <span class="ow">in</span> <span class="nb">range</span><span class="p">(</span><span class="bp">self</span><span class="p">[</span><span class="mi">0</span><span class="p">]</span><span class="o">.</span><span class="n">cElement</span><span class="p">):</span>
|
|
<span class="n">element</span> <span class="o">=</span> <span class="n">ctypes</span><span class="o">.</span><span class="n">cast</span><span class="p">(</span><span class="bp">self</span><span class="p">[</span><span class="mi">0</span><span class="p">]</span><span class="o">.</span><span class="n">rgpElement</span><span class="p">[</span><span class="n">i</span><span class="p">],</span> <span class="n">EPCERT_CHAIN_ELEMENT</span><span class="p">)</span>
|
|
<span class="n">res</span><span class="o">.</span><span class="n">append</span><span class="p">(</span><span class="n">element</span><span class="p">)</span>
|
|
<span class="k">return</span> <span class="n">res</span>
|
|
|
|
<span class="k">class</span> <span class="nc">EPCERT_CHAIN_ELEMENT</span><span class="p">(</span><span class="n">PCERT_CHAIN_ELEMENT</span><span class="p">):</span>
|
|
<span class="n">_type_</span> <span class="o">=</span> <span class="n">PCERT_CHAIN_ELEMENT</span><span class="o">.</span><span class="n">_type_</span>
|
|
|
|
<span class="nd">@property</span>
|
|
<span class="k">def</span> <span class="nf">cert</span><span class="p">(</span><span class="bp">self</span><span class="p">):</span>
|
|
<span class="k">return</span> <span class="n">ctypes</span><span class="o">.</span><span class="n">cast</span><span class="p">(</span><span class="bp">self</span><span class="p">[</span><span class="mi">0</span><span class="p">]</span><span class="o">.</span><span class="n">pCertContext</span><span class="p">,</span> <span class="n">CertificateContext</span><span class="p">)</span>
|
|
|
|
|
|
<span class="c1"># Move this in another .py ?</span>
|
|
<div class="viewcode-block" id="CryptContext"><a class="viewcode-back" href="../../../crypto.html#windows.crypto.CryptContext">[docs]</a><span class="k">class</span> <span class="nc">CryptContext</span><span class="p">(</span><span class="n">HCRYPTPROV</span><span class="p">):</span>
|
|
<span class="sd">""" A context manager arround ``CryptAcquireContextW`` & ``CryptReleaseContext``"""</span>
|
|
<span class="n">_type_</span> <span class="o">=</span> <span class="n">HCRYPTPROV</span><span class="o">.</span><span class="n">_type_</span>
|
|
|
|
<span class="k">def</span> <span class="nf">__init__</span><span class="p">(</span><span class="bp">self</span><span class="p">,</span> <span class="n">pszContainer</span><span class="o">=</span><span class="kc">None</span><span class="p">,</span> <span class="n">pszProvider</span><span class="o">=</span><span class="kc">None</span><span class="p">,</span> <span class="n">dwProvType</span><span class="o">=</span><span class="mi">0</span><span class="p">,</span> <span class="n">dwFlags</span><span class="o">=</span><span class="mi">0</span><span class="p">,</span> <span class="n">retrycreate</span><span class="o">=</span><span class="kc">False</span><span class="p">):</span>
|
|
<span class="bp">self</span><span class="o">.</span><span class="n">pszContainer</span> <span class="o">=</span> <span class="n">pszContainer</span>
|
|
<span class="bp">self</span><span class="o">.</span><span class="n">pszProvider</span> <span class="o">=</span> <span class="n">pszProvider</span>
|
|
<span class="bp">self</span><span class="o">.</span><span class="n">dwProvType</span> <span class="o">=</span> <span class="n">dwProvType</span>
|
|
<span class="bp">self</span><span class="o">.</span><span class="n">dwFlags</span> <span class="o">=</span> <span class="n">dwFlags</span>
|
|
<span class="bp">self</span><span class="o">.</span><span class="n">retrycreate</span> <span class="o">=</span> <span class="kc">True</span>
|
|
<span class="c1">#self.value = HCRYPTPROV()</span>
|
|
<span class="k">pass</span>
|
|
|
|
<span class="k">def</span> <span class="nf">__enter__</span><span class="p">(</span><span class="bp">self</span><span class="p">):</span>
|
|
<span class="bp">self</span><span class="o">.</span><span class="n">acquire</span><span class="p">()</span>
|
|
<span class="k">return</span> <span class="bp">self</span>
|
|
|
|
<span class="k">def</span> <span class="nf">__exit__</span><span class="p">(</span><span class="bp">self</span><span class="p">,</span> <span class="o">*</span><span class="n">args</span><span class="p">):</span>
|
|
<span class="bp">self</span><span class="o">.</span><span class="n">release</span><span class="p">()</span>
|
|
|
|
<span class="k">def</span> <span class="nf">acquire</span><span class="p">(</span><span class="bp">self</span><span class="p">):</span>
|
|
<span class="k">try</span><span class="p">:</span>
|
|
<span class="k">return</span> <span class="n">winproxy</span><span class="o">.</span><span class="n">CryptAcquireContextW</span><span class="p">(</span><span class="bp">self</span><span class="p">,</span> <span class="bp">self</span><span class="o">.</span><span class="n">pszContainer</span><span class="p">,</span> <span class="bp">self</span><span class="o">.</span><span class="n">pszProvider</span><span class="p">,</span> <span class="bp">self</span><span class="o">.</span><span class="n">dwProvType</span><span class="p">,</span> <span class="bp">self</span><span class="o">.</span><span class="n">dwFlags</span><span class="p">)</span>
|
|
<span class="k">except</span> <span class="ne">WindowsError</span> <span class="k">as</span> <span class="n">e</span><span class="p">:</span>
|
|
<span class="k">if</span> <span class="ow">not</span> <span class="bp">self</span><span class="o">.</span><span class="n">retrycreate</span><span class="p">:</span>
|
|
<span class="k">raise</span>
|
|
<span class="k">return</span> <span class="n">winproxy</span><span class="o">.</span><span class="n">CryptAcquireContextW</span><span class="p">(</span><span class="bp">self</span><span class="p">,</span> <span class="bp">self</span><span class="o">.</span><span class="n">pszContainer</span><span class="p">,</span> <span class="bp">self</span><span class="o">.</span><span class="n">pszProvider</span><span class="p">,</span> <span class="bp">self</span><span class="o">.</span><span class="n">dwProvType</span><span class="p">,</span> <span class="bp">self</span><span class="o">.</span><span class="n">dwFlags</span> <span class="o">|</span> <span class="n">CRYPT_NEWKEYSET</span><span class="p">)</span>
|
|
|
|
<span class="k">def</span> <span class="nf">release</span><span class="p">(</span><span class="bp">self</span><span class="p">):</span>
|
|
<span class="k">return</span> <span class="n">winproxy</span><span class="o">.</span><span class="n">CryptReleaseContext</span><span class="p">(</span><span class="bp">self</span><span class="p">,</span> <span class="kc">False</span><span class="p">)</span></div>
|
|
</pre></div>
|
|
|
|
</div>
|
|
</div>
|
|
</div>
|
|
<div class="sphinxsidebar" role="navigation" aria-label="main navigation">
|
|
<div class="sphinxsidebarwrapper">
|
|
<div id="searchbox" style="display: none" role="search">
|
|
<h3>Quick search</h3>
|
|
<form class="search" action="../../../search.html" method="get">
|
|
<div><input type="text" name="q" /></div>
|
|
<div><input type="submit" value="Go" /></div>
|
|
<input type="hidden" name="check_keywords" value="yes" />
|
|
<input type="hidden" name="area" value="default" />
|
|
</form>
|
|
</div>
|
|
<script type="text/javascript">$('#searchbox').show(0);</script>
|
|
</div>
|
|
</div>
|
|
<div class="clearer"></div>
|
|
</div>
|
|
<div class="related" role="navigation" aria-label="related navigation">
|
|
<h3>Navigation</h3>
|
|
<ul>
|
|
<li class="right" style="margin-right: 10px">
|
|
<a href="../../../genindex.html" title="General Index"
|
|
>index</a></li>
|
|
<li class="right" >
|
|
<a href="../../../py-modindex.html" title="Python Module Index"
|
|
>modules</a> |</li>
|
|
<li class="nav-item nav-item-0"><a href="../../../index.html">PythonForWindows 0.2 documentation</a> »</li>
|
|
<li class="nav-item nav-item-1"><a href="../../index.html" >Module code</a> »</li>
|
|
</ul>
|
|
</div>
|
|
<div class="footer" role="contentinfo">
|
|
© Copyright 2015, Clement Rouault.
|
|
Created using <a href="http://sphinx-doc.org/">Sphinx</a> 1.5.5.
|
|
</div>
|
|
</body>
|
|
</html> |