o .jL*@sUddlmZddlZddlZddlZddlmZmZmZmZm Z m Z ddl m Z ddl mZgdZded <d Zd ed <dd0d1Z1d?d4d5Z2d@d7d8Z3dAd:d;Z4dZ5dS)B) annotationsN)POINTERc_char_pc_int32c_ubytec_uint32c_void_p)enum_certificates)root_der_certificates)ROOTMYCAz list[str]WINDOWS_STORESz1.3.6.1.5.5.7.3.1strSERVER_AUTH_OIDreturn list[bytes]c Csg}t}tD]7}z,t|D]%\}}}|sqt|ts t|vr q|dkr3||vr)q||||qWqty>Yqwt t D]}||vrT||||qD|S)Nx509_asn) setrr isinstanceboolraddappendPermissionError_os_trusted_subset_ccadb_root_certificates) certificatesseen system_store cert_bytes encoding_typetrustr#I/home/thesage/.local/lib/python3.10/site-packages/wassima/_os/_windows.pyr s2      r iz9SOFTWARE\Microsoft\SystemCertificates\AuthRoot\AutoUpdate EncodedCtls1.3.6.1.4.1.311.10.11.906082B06010505070301 0604551D2500c@ eZdZdefdeeffZdS) _CRYPT_BLOBcbDatapbDataN)__name__ __module__ __qualname___DWORDrr_fields_r#r#r#r$r)]s r)c@r() _CTL_USAGEcUsageIdentifierrgpszUsageIdentifierN)r,r-r.r/rrr0r#r#r#r$r1fs r1c@seZdZdefdeffZdS) _FILETIME dwLowDateTimedwHighDateTimeN)r,r-r.r/r0r#r#r#r$r4nr4c@seZdZdefdeffZdS)_CRYPT_ALGORITHM_IDENTIFIERpszObjId ParametersN)r,r-r.rr)r0r#r#r#r$r8vr7r8c@&eZdZdefdefdeeffZdS)_CRYPT_ATTRIBUTEr9cValuergValueN)r,r-r.rr/rr)r0r#r#r#r$r<~  r<c@r;) _CTL_ENTRYSubjectIdentifier cAttribute rgAttributeN)r,r-r.r)r/rr<r0r#r#r#r$r@r?r@c @sVeZdZdefdefdefdefdefdefdefdefd ee fd efd e ff Z d S) _CTL_INFO dwVersion SubjectUsageListIdentifierSequenceNumber ThisUpdate NextUpdateSubjectAlgorithm cCTLEntry rgCTLEntry cExtension rgExtensionN) r,r-r.r/r1r)r4r8rr@rr0r#r#r#r$rDs rDc @sLeZdZdefdeefdefdeefdefdefdeefdeffZd S) _CTL_CONTEXTdwMsgAndCertEncodingType pbCtlEncoded cbCtlEncodedpCtlInfo hCertStore hCryptMsg pbCtlContent cbCtlContentN) r,r-r.r/rrrDrr0r#r#r#r$rPs   rPwin32crypt32T)use_last_errordatabytescCs6z tj|ddWStyt|YSw)zASHA-1 digest used purely as an identity/join key against the CTL.F)usedforsecurity)hashlibsha1digest TypeError)r\r#r#r$_sha1s  rc bytes | Nonec CstjdkrdSddl}z ||jt}Wn tyYdSwzt |vrBdSq!dSdS)zDReturn True if a CTL entry is trusted for TLS server authentication.TF) rBrCranger9 _EKU_PROP_OIDr=r>r*r+ctypes string_at_SERVER_AUTH_OID_DER_ANY_EKU_OID_DER)rtcountattrsjattrkblobrawr#r#r$_entry_allows_server_auths"    r set[bytes]cCst}tdus tdus |stStt|t|}|stSt}z4|jjj}|j}t |j D]}||}t |s9q.|j }|j rM|jrM|t|j|j q.Wt||St|w)zUSHA-1 thumbprints of the roots the AuthRoot CTL trusts for TLS server authentication.N)rs_CertCreateCTLContext_CertFreeCTLContextr_ENCODING_TYPESlencontentsrTrMrurLrrAr*r+rrwrx)encodedctl thumbprintsinfoentriesirtrr#r#r$_authroot_ctl_thumbprintss,   r candidatescs(|sgSts gSfdd|DS)zIGuarantees every added certificate is one the OS's trust list recognizes!csg|] }t|vr|qSr#)rc).0dertrustedr#r$ sz&_os_trusted_subset..)r)rr#rr$rs r)rr)r\r]rr])rrd)rtr@rr)rr)rrrr)6 __future__rrwr_rfrrrrrrsslr _embedr rr__annotations__rr/_BOOLrrkrnrvr]fromhexryrz Structurer)r1r4r8r<r@rDrP_crypt32rrrgWinDLLrlCertCreateCTLContextargtypesrestypeCertFreeCTLContextrcrsrrr__all__r#r#r#r$s^     /