← Back
Editing: ocsp.cpython-312.pyc
� n�h�; � � � d Z ddlmZ ddlmZ ddlmZ ddlZddlZddlZddlmZ ddlm Z ddlm Z ddlZdd lm Z dd lmZ ddlmZ ddlmZ dd lmZ ddlmZ ddlmZ ddlZddlmZ ddlmZ ddlmZ ddlmZ ddlm Z ejB e"� Z# G d� d� Z$de%de e e% e e% f fd�Z&de%de%de%de'de(f d�Z)ddd d!d"e jT de%ddf d#�Z+ddd"e jT de%ddfd$�Z,de%d%e%d&e%de(fd'�Z-y)(z*Tools for checking certificate revocation.� )�datetime)� timedelta)�timezoneN)�PIPE)�Optional)�Tuple)�x509)�InvalidSignature)�UnsupportedAlgorithm)�default_backend)�hashes)� serialization)�ocsp)�crypto_util)�errors)�util)�getenv)� RenewableCertc �l � e Zd ZdZddeddfd�Zdedefd�Zdded ed e defd�Z ded eded ed e defd�Zy)�RevocationCheckerzEThis class figures out OCSP checking on this system, and performs it.�enforce_openssl_binary_usage�returnNc � � d| _ |rt j dt � || _ | j r�t j d� st j d� d| _ y t j g d�t t ddt j � �� }d|j v r d � | _ y d � | _ y y )NFztenforce_openssl_binary_usage parameter is deprecated and will be removed in an upcoming certbot major version update�opensslz-openssl not installed, can't check revocationT)r r �-header�var�val)�stdout�stderr�universal_newlines�check�envz Missing =c � � d| z gS )NzHost=� ��hosts �1/usr/lib/python3.12/site-packages/certbot/ocsp.py�<lambda>z,RevocationChecker.__init__.<locals>.<lambda>5 s � �w��~�.>� c � � d| gS )N�Hostr$ r% s r'