24024
af7c11d7f9
- 新增图像生成接口，支持试用、积分和自定义API Key模式 - 实现生成图片结果异步上传至MinIO存储，带重试机制 - 优化积分预扣除和异常退还逻辑，保障用户积分准确 - 添加获取生成历史记录接口，支持时间范围和分页 - 提供本地字典配置接口，支持模型、比例、提示模板和尺寸 - 实现图片批量上传接口，支持S3兼容对象存储 feat(admin): 增加管理员角色管理与权限分配接口 - 实现角色列表查询、角色创建、更新及删除功能 - 增加权限列表查询接口 - 实现用户角色分配接口，便于统一管理用户权限 - 增加系统字典增删查改接口，支持分类过滤和排序 - 权限控制全面覆盖管理接口，保证安全访问 feat(auth): 完善用户登录注册及权限相关接口与页面 - 实现手机号验证码发送及校验功能，保障注册安全 - 支持手机号注册、登录及退出接口，集成日志记录 - 增加修改密码功能，验证原密码后更新 - 提供动态导航菜单接口，基于权限展示不同菜单 - 实现管理界面路由及日志、角色、字典管理页面访问权限控制 - 添加系统日志查询接口，支持关键词和等级筛选 feat(app): 初始化Flask应用并配置蓝图与数据库 - 创建应用程序工厂，加载配置，初始化数据库和Redis客户端 - 注册认证、API及管理员蓝图，整合路由 - 根路由渲染主页模板 - 应用上下文中自动创建数据库表，保证运行环境准备完毕 feat(database): 提供数据库创建与迁移支持脚本 - 新增数据库创建脚本，支持自动检测是否已存在 - 添加数据库表初始化脚本，支持创建和删除所有表 - 实现RBAC权限初始化，包含基础权限和角色创建 - 新增字段手动修复脚本，添加用户API Key和积分字段 - 强制迁移脚本支持清理连接和修复表结构，初始化默认数据及角色分配 feat(config): 新增系统配置参数 - 配置数据库、Redis、Session和MinIO相关参数 - 添加AI接口地址及试用Key配置 - 集成阿里云短信服务配置及开发模式相关参数 feat(extensions): 初始化数据库、Redis和MinIO客户端 - 创建全局SQLAlchemy数据库实例和Redis客户端 - 配置基于boto3的MinIO兼容S3客户端 chore(logs): 添加示例系统日志文件 - 记录用户请求、验证码发送成功与失败的日志信息
316 lines
15 KiB
Python
316 lines
15 KiB
Python
# This file is dual licensed under the terms of the Apache License, Version
|
|
# 2.0, and the BSD License. See the LICENSE file in the root of this repository
|
|
# for complete details.
|
|
|
|
from __future__ import annotations
|
|
|
|
from cryptography.hazmat.bindings._rust import (
|
|
ObjectIdentifier as ObjectIdentifier,
|
|
)
|
|
from cryptography.hazmat.primitives import hashes
|
|
|
|
|
|
class ExtensionOID:
|
|
SUBJECT_DIRECTORY_ATTRIBUTES = ObjectIdentifier("2.5.29.9")
|
|
SUBJECT_KEY_IDENTIFIER = ObjectIdentifier("2.5.29.14")
|
|
KEY_USAGE = ObjectIdentifier("2.5.29.15")
|
|
SUBJECT_ALTERNATIVE_NAME = ObjectIdentifier("2.5.29.17")
|
|
ISSUER_ALTERNATIVE_NAME = ObjectIdentifier("2.5.29.18")
|
|
BASIC_CONSTRAINTS = ObjectIdentifier("2.5.29.19")
|
|
NAME_CONSTRAINTS = ObjectIdentifier("2.5.29.30")
|
|
CRL_DISTRIBUTION_POINTS = ObjectIdentifier("2.5.29.31")
|
|
CERTIFICATE_POLICIES = ObjectIdentifier("2.5.29.32")
|
|
POLICY_MAPPINGS = ObjectIdentifier("2.5.29.33")
|
|
AUTHORITY_KEY_IDENTIFIER = ObjectIdentifier("2.5.29.35")
|
|
POLICY_CONSTRAINTS = ObjectIdentifier("2.5.29.36")
|
|
EXTENDED_KEY_USAGE = ObjectIdentifier("2.5.29.37")
|
|
FRESHEST_CRL = ObjectIdentifier("2.5.29.46")
|
|
INHIBIT_ANY_POLICY = ObjectIdentifier("2.5.29.54")
|
|
ISSUING_DISTRIBUTION_POINT = ObjectIdentifier("2.5.29.28")
|
|
AUTHORITY_INFORMATION_ACCESS = ObjectIdentifier("1.3.6.1.5.5.7.1.1")
|
|
SUBJECT_INFORMATION_ACCESS = ObjectIdentifier("1.3.6.1.5.5.7.1.11")
|
|
OCSP_NO_CHECK = ObjectIdentifier("1.3.6.1.5.5.7.48.1.5")
|
|
TLS_FEATURE = ObjectIdentifier("1.3.6.1.5.5.7.1.24")
|
|
CRL_NUMBER = ObjectIdentifier("2.5.29.20")
|
|
DELTA_CRL_INDICATOR = ObjectIdentifier("2.5.29.27")
|
|
PRECERT_SIGNED_CERTIFICATE_TIMESTAMPS = ObjectIdentifier(
|
|
"1.3.6.1.4.1.11129.2.4.2"
|
|
)
|
|
PRECERT_POISON = ObjectIdentifier("1.3.6.1.4.1.11129.2.4.3")
|
|
SIGNED_CERTIFICATE_TIMESTAMPS = ObjectIdentifier("1.3.6.1.4.1.11129.2.4.5")
|
|
MS_CERTIFICATE_TEMPLATE = ObjectIdentifier("1.3.6.1.4.1.311.21.7")
|
|
ADMISSIONS = ObjectIdentifier("1.3.36.8.3.3")
|
|
|
|
|
|
class OCSPExtensionOID:
|
|
NONCE = ObjectIdentifier("1.3.6.1.5.5.7.48.1.2")
|
|
ACCEPTABLE_RESPONSES = ObjectIdentifier("1.3.6.1.5.5.7.48.1.4")
|
|
|
|
|
|
class CRLEntryExtensionOID:
|
|
CERTIFICATE_ISSUER = ObjectIdentifier("2.5.29.29")
|
|
CRL_REASON = ObjectIdentifier("2.5.29.21")
|
|
INVALIDITY_DATE = ObjectIdentifier("2.5.29.24")
|
|
|
|
|
|
class NameOID:
|
|
COMMON_NAME = ObjectIdentifier("2.5.4.3")
|
|
COUNTRY_NAME = ObjectIdentifier("2.5.4.6")
|
|
LOCALITY_NAME = ObjectIdentifier("2.5.4.7")
|
|
STATE_OR_PROVINCE_NAME = ObjectIdentifier("2.5.4.8")
|
|
STREET_ADDRESS = ObjectIdentifier("2.5.4.9")
|
|
ORGANIZATION_IDENTIFIER = ObjectIdentifier("2.5.4.97")
|
|
ORGANIZATION_NAME = ObjectIdentifier("2.5.4.10")
|
|
ORGANIZATIONAL_UNIT_NAME = ObjectIdentifier("2.5.4.11")
|
|
SERIAL_NUMBER = ObjectIdentifier("2.5.4.5")
|
|
SURNAME = ObjectIdentifier("2.5.4.4")
|
|
GIVEN_NAME = ObjectIdentifier("2.5.4.42")
|
|
TITLE = ObjectIdentifier("2.5.4.12")
|
|
INITIALS = ObjectIdentifier("2.5.4.43")
|
|
GENERATION_QUALIFIER = ObjectIdentifier("2.5.4.44")
|
|
X500_UNIQUE_IDENTIFIER = ObjectIdentifier("2.5.4.45")
|
|
DN_QUALIFIER = ObjectIdentifier("2.5.4.46")
|
|
PSEUDONYM = ObjectIdentifier("2.5.4.65")
|
|
USER_ID = ObjectIdentifier("0.9.2342.19200300.100.1.1")
|
|
DOMAIN_COMPONENT = ObjectIdentifier("0.9.2342.19200300.100.1.25")
|
|
EMAIL_ADDRESS = ObjectIdentifier("1.2.840.113549.1.9.1")
|
|
JURISDICTION_COUNTRY_NAME = ObjectIdentifier("1.3.6.1.4.1.311.60.2.1.3")
|
|
JURISDICTION_LOCALITY_NAME = ObjectIdentifier("1.3.6.1.4.1.311.60.2.1.1")
|
|
JURISDICTION_STATE_OR_PROVINCE_NAME = ObjectIdentifier(
|
|
"1.3.6.1.4.1.311.60.2.1.2"
|
|
)
|
|
BUSINESS_CATEGORY = ObjectIdentifier("2.5.4.15")
|
|
POSTAL_ADDRESS = ObjectIdentifier("2.5.4.16")
|
|
POSTAL_CODE = ObjectIdentifier("2.5.4.17")
|
|
INN = ObjectIdentifier("1.2.643.3.131.1.1")
|
|
OGRN = ObjectIdentifier("1.2.643.100.1")
|
|
SNILS = ObjectIdentifier("1.2.643.100.3")
|
|
UNSTRUCTURED_NAME = ObjectIdentifier("1.2.840.113549.1.9.2")
|
|
|
|
|
|
class SignatureAlgorithmOID:
|
|
RSA_WITH_MD5 = ObjectIdentifier("1.2.840.113549.1.1.4")
|
|
RSA_WITH_SHA1 = ObjectIdentifier("1.2.840.113549.1.1.5")
|
|
# This is an alternate OID for RSA with SHA1 that is occasionally seen
|
|
_RSA_WITH_SHA1 = ObjectIdentifier("1.3.14.3.2.29")
|
|
RSA_WITH_SHA224 = ObjectIdentifier("1.2.840.113549.1.1.14")
|
|
RSA_WITH_SHA256 = ObjectIdentifier("1.2.840.113549.1.1.11")
|
|
RSA_WITH_SHA384 = ObjectIdentifier("1.2.840.113549.1.1.12")
|
|
RSA_WITH_SHA512 = ObjectIdentifier("1.2.840.113549.1.1.13")
|
|
RSA_WITH_SHA3_224 = ObjectIdentifier("2.16.840.1.101.3.4.3.13")
|
|
RSA_WITH_SHA3_256 = ObjectIdentifier("2.16.840.1.101.3.4.3.14")
|
|
RSA_WITH_SHA3_384 = ObjectIdentifier("2.16.840.1.101.3.4.3.15")
|
|
RSA_WITH_SHA3_512 = ObjectIdentifier("2.16.840.1.101.3.4.3.16")
|
|
RSASSA_PSS = ObjectIdentifier("1.2.840.113549.1.1.10")
|
|
ECDSA_WITH_SHA1 = ObjectIdentifier("1.2.840.10045.4.1")
|
|
ECDSA_WITH_SHA224 = ObjectIdentifier("1.2.840.10045.4.3.1")
|
|
ECDSA_WITH_SHA256 = ObjectIdentifier("1.2.840.10045.4.3.2")
|
|
ECDSA_WITH_SHA384 = ObjectIdentifier("1.2.840.10045.4.3.3")
|
|
ECDSA_WITH_SHA512 = ObjectIdentifier("1.2.840.10045.4.3.4")
|
|
ECDSA_WITH_SHA3_224 = ObjectIdentifier("2.16.840.1.101.3.4.3.9")
|
|
ECDSA_WITH_SHA3_256 = ObjectIdentifier("2.16.840.1.101.3.4.3.10")
|
|
ECDSA_WITH_SHA3_384 = ObjectIdentifier("2.16.840.1.101.3.4.3.11")
|
|
ECDSA_WITH_SHA3_512 = ObjectIdentifier("2.16.840.1.101.3.4.3.12")
|
|
DSA_WITH_SHA1 = ObjectIdentifier("1.2.840.10040.4.3")
|
|
DSA_WITH_SHA224 = ObjectIdentifier("2.16.840.1.101.3.4.3.1")
|
|
DSA_WITH_SHA256 = ObjectIdentifier("2.16.840.1.101.3.4.3.2")
|
|
DSA_WITH_SHA384 = ObjectIdentifier("2.16.840.1.101.3.4.3.3")
|
|
DSA_WITH_SHA512 = ObjectIdentifier("2.16.840.1.101.3.4.3.4")
|
|
ED25519 = ObjectIdentifier("1.3.101.112")
|
|
ED448 = ObjectIdentifier("1.3.101.113")
|
|
GOSTR3411_94_WITH_3410_2001 = ObjectIdentifier("1.2.643.2.2.3")
|
|
GOSTR3410_2012_WITH_3411_2012_256 = ObjectIdentifier("1.2.643.7.1.1.3.2")
|
|
GOSTR3410_2012_WITH_3411_2012_512 = ObjectIdentifier("1.2.643.7.1.1.3.3")
|
|
|
|
|
|
_SIG_OIDS_TO_HASH: dict[ObjectIdentifier, hashes.HashAlgorithm | None] = {
|
|
SignatureAlgorithmOID.RSA_WITH_MD5: hashes.MD5(),
|
|
SignatureAlgorithmOID.RSA_WITH_SHA1: hashes.SHA1(),
|
|
SignatureAlgorithmOID._RSA_WITH_SHA1: hashes.SHA1(),
|
|
SignatureAlgorithmOID.RSA_WITH_SHA224: hashes.SHA224(),
|
|
SignatureAlgorithmOID.RSA_WITH_SHA256: hashes.SHA256(),
|
|
SignatureAlgorithmOID.RSA_WITH_SHA384: hashes.SHA384(),
|
|
SignatureAlgorithmOID.RSA_WITH_SHA512: hashes.SHA512(),
|
|
SignatureAlgorithmOID.RSA_WITH_SHA3_224: hashes.SHA3_224(),
|
|
SignatureAlgorithmOID.RSA_WITH_SHA3_256: hashes.SHA3_256(),
|
|
SignatureAlgorithmOID.RSA_WITH_SHA3_384: hashes.SHA3_384(),
|
|
SignatureAlgorithmOID.RSA_WITH_SHA3_512: hashes.SHA3_512(),
|
|
SignatureAlgorithmOID.ECDSA_WITH_SHA1: hashes.SHA1(),
|
|
SignatureAlgorithmOID.ECDSA_WITH_SHA224: hashes.SHA224(),
|
|
SignatureAlgorithmOID.ECDSA_WITH_SHA256: hashes.SHA256(),
|
|
SignatureAlgorithmOID.ECDSA_WITH_SHA384: hashes.SHA384(),
|
|
SignatureAlgorithmOID.ECDSA_WITH_SHA512: hashes.SHA512(),
|
|
SignatureAlgorithmOID.ECDSA_WITH_SHA3_224: hashes.SHA3_224(),
|
|
SignatureAlgorithmOID.ECDSA_WITH_SHA3_256: hashes.SHA3_256(),
|
|
SignatureAlgorithmOID.ECDSA_WITH_SHA3_384: hashes.SHA3_384(),
|
|
SignatureAlgorithmOID.ECDSA_WITH_SHA3_512: hashes.SHA3_512(),
|
|
SignatureAlgorithmOID.DSA_WITH_SHA1: hashes.SHA1(),
|
|
SignatureAlgorithmOID.DSA_WITH_SHA224: hashes.SHA224(),
|
|
SignatureAlgorithmOID.DSA_WITH_SHA256: hashes.SHA256(),
|
|
SignatureAlgorithmOID.ED25519: None,
|
|
SignatureAlgorithmOID.ED448: None,
|
|
SignatureAlgorithmOID.GOSTR3411_94_WITH_3410_2001: None,
|
|
SignatureAlgorithmOID.GOSTR3410_2012_WITH_3411_2012_256: None,
|
|
SignatureAlgorithmOID.GOSTR3410_2012_WITH_3411_2012_512: None,
|
|
}
|
|
|
|
|
|
class PublicKeyAlgorithmOID:
|
|
DSA = ObjectIdentifier("1.2.840.10040.4.1")
|
|
EC_PUBLIC_KEY = ObjectIdentifier("1.2.840.10045.2.1")
|
|
RSAES_PKCS1_v1_5 = ObjectIdentifier("1.2.840.113549.1.1.1")
|
|
RSASSA_PSS = ObjectIdentifier("1.2.840.113549.1.1.10")
|
|
X25519 = ObjectIdentifier("1.3.101.110")
|
|
X448 = ObjectIdentifier("1.3.101.111")
|
|
ED25519 = ObjectIdentifier("1.3.101.112")
|
|
ED448 = ObjectIdentifier("1.3.101.113")
|
|
|
|
|
|
class ExtendedKeyUsageOID:
|
|
SERVER_AUTH = ObjectIdentifier("1.3.6.1.5.5.7.3.1")
|
|
CLIENT_AUTH = ObjectIdentifier("1.3.6.1.5.5.7.3.2")
|
|
CODE_SIGNING = ObjectIdentifier("1.3.6.1.5.5.7.3.3")
|
|
EMAIL_PROTECTION = ObjectIdentifier("1.3.6.1.5.5.7.3.4")
|
|
TIME_STAMPING = ObjectIdentifier("1.3.6.1.5.5.7.3.8")
|
|
OCSP_SIGNING = ObjectIdentifier("1.3.6.1.5.5.7.3.9")
|
|
ANY_EXTENDED_KEY_USAGE = ObjectIdentifier("2.5.29.37.0")
|
|
SMARTCARD_LOGON = ObjectIdentifier("1.3.6.1.4.1.311.20.2.2")
|
|
KERBEROS_PKINIT_KDC = ObjectIdentifier("1.3.6.1.5.2.3.5")
|
|
IPSEC_IKE = ObjectIdentifier("1.3.6.1.5.5.7.3.17")
|
|
CERTIFICATE_TRANSPARENCY = ObjectIdentifier("1.3.6.1.4.1.11129.2.4.4")
|
|
|
|
|
|
class AuthorityInformationAccessOID:
|
|
CA_ISSUERS = ObjectIdentifier("1.3.6.1.5.5.7.48.2")
|
|
OCSP = ObjectIdentifier("1.3.6.1.5.5.7.48.1")
|
|
|
|
|
|
class SubjectInformationAccessOID:
|
|
CA_REPOSITORY = ObjectIdentifier("1.3.6.1.5.5.7.48.5")
|
|
|
|
|
|
class CertificatePoliciesOID:
|
|
CPS_QUALIFIER = ObjectIdentifier("1.3.6.1.5.5.7.2.1")
|
|
CPS_USER_NOTICE = ObjectIdentifier("1.3.6.1.5.5.7.2.2")
|
|
ANY_POLICY = ObjectIdentifier("2.5.29.32.0")
|
|
|
|
|
|
class AttributeOID:
|
|
CHALLENGE_PASSWORD = ObjectIdentifier("1.2.840.113549.1.9.7")
|
|
UNSTRUCTURED_NAME = ObjectIdentifier("1.2.840.113549.1.9.2")
|
|
|
|
|
|
_OID_NAMES = {
|
|
NameOID.COMMON_NAME: "commonName",
|
|
NameOID.COUNTRY_NAME: "countryName",
|
|
NameOID.LOCALITY_NAME: "localityName",
|
|
NameOID.STATE_OR_PROVINCE_NAME: "stateOrProvinceName",
|
|
NameOID.STREET_ADDRESS: "streetAddress",
|
|
NameOID.ORGANIZATION_NAME: "organizationName",
|
|
NameOID.ORGANIZATIONAL_UNIT_NAME: "organizationalUnitName",
|
|
NameOID.SERIAL_NUMBER: "serialNumber",
|
|
NameOID.SURNAME: "surname",
|
|
NameOID.GIVEN_NAME: "givenName",
|
|
NameOID.TITLE: "title",
|
|
NameOID.GENERATION_QUALIFIER: "generationQualifier",
|
|
NameOID.X500_UNIQUE_IDENTIFIER: "x500UniqueIdentifier",
|
|
NameOID.DN_QUALIFIER: "dnQualifier",
|
|
NameOID.PSEUDONYM: "pseudonym",
|
|
NameOID.USER_ID: "userID",
|
|
NameOID.DOMAIN_COMPONENT: "domainComponent",
|
|
NameOID.EMAIL_ADDRESS: "emailAddress",
|
|
NameOID.JURISDICTION_COUNTRY_NAME: "jurisdictionCountryName",
|
|
NameOID.JURISDICTION_LOCALITY_NAME: "jurisdictionLocalityName",
|
|
NameOID.JURISDICTION_STATE_OR_PROVINCE_NAME: (
|
|
"jurisdictionStateOrProvinceName"
|
|
),
|
|
NameOID.BUSINESS_CATEGORY: "businessCategory",
|
|
NameOID.POSTAL_ADDRESS: "postalAddress",
|
|
NameOID.POSTAL_CODE: "postalCode",
|
|
NameOID.INN: "INN",
|
|
NameOID.OGRN: "OGRN",
|
|
NameOID.SNILS: "SNILS",
|
|
NameOID.UNSTRUCTURED_NAME: "unstructuredName",
|
|
SignatureAlgorithmOID.RSA_WITH_MD5: "md5WithRSAEncryption",
|
|
SignatureAlgorithmOID.RSA_WITH_SHA1: "sha1WithRSAEncryption",
|
|
SignatureAlgorithmOID.RSA_WITH_SHA224: "sha224WithRSAEncryption",
|
|
SignatureAlgorithmOID.RSA_WITH_SHA256: "sha256WithRSAEncryption",
|
|
SignatureAlgorithmOID.RSA_WITH_SHA384: "sha384WithRSAEncryption",
|
|
SignatureAlgorithmOID.RSA_WITH_SHA512: "sha512WithRSAEncryption",
|
|
SignatureAlgorithmOID.RSASSA_PSS: "RSASSA-PSS",
|
|
SignatureAlgorithmOID.ECDSA_WITH_SHA1: "ecdsa-with-SHA1",
|
|
SignatureAlgorithmOID.ECDSA_WITH_SHA224: "ecdsa-with-SHA224",
|
|
SignatureAlgorithmOID.ECDSA_WITH_SHA256: "ecdsa-with-SHA256",
|
|
SignatureAlgorithmOID.ECDSA_WITH_SHA384: "ecdsa-with-SHA384",
|
|
SignatureAlgorithmOID.ECDSA_WITH_SHA512: "ecdsa-with-SHA512",
|
|
SignatureAlgorithmOID.DSA_WITH_SHA1: "dsa-with-sha1",
|
|
SignatureAlgorithmOID.DSA_WITH_SHA224: "dsa-with-sha224",
|
|
SignatureAlgorithmOID.DSA_WITH_SHA256: "dsa-with-sha256",
|
|
SignatureAlgorithmOID.ED25519: "ed25519",
|
|
SignatureAlgorithmOID.ED448: "ed448",
|
|
SignatureAlgorithmOID.GOSTR3411_94_WITH_3410_2001: (
|
|
"GOST R 34.11-94 with GOST R 34.10-2001"
|
|
),
|
|
SignatureAlgorithmOID.GOSTR3410_2012_WITH_3411_2012_256: (
|
|
"GOST R 34.10-2012 with GOST R 34.11-2012 (256 bit)"
|
|
),
|
|
SignatureAlgorithmOID.GOSTR3410_2012_WITH_3411_2012_512: (
|
|
"GOST R 34.10-2012 with GOST R 34.11-2012 (512 bit)"
|
|
),
|
|
PublicKeyAlgorithmOID.DSA: "dsaEncryption",
|
|
PublicKeyAlgorithmOID.EC_PUBLIC_KEY: "id-ecPublicKey",
|
|
PublicKeyAlgorithmOID.RSAES_PKCS1_v1_5: "rsaEncryption",
|
|
PublicKeyAlgorithmOID.RSASSA_PSS: "rsassaPss",
|
|
PublicKeyAlgorithmOID.X25519: "X25519",
|
|
PublicKeyAlgorithmOID.X448: "X448",
|
|
ExtendedKeyUsageOID.SERVER_AUTH: "serverAuth",
|
|
ExtendedKeyUsageOID.CLIENT_AUTH: "clientAuth",
|
|
ExtendedKeyUsageOID.CODE_SIGNING: "codeSigning",
|
|
ExtendedKeyUsageOID.EMAIL_PROTECTION: "emailProtection",
|
|
ExtendedKeyUsageOID.TIME_STAMPING: "timeStamping",
|
|
ExtendedKeyUsageOID.OCSP_SIGNING: "OCSPSigning",
|
|
ExtendedKeyUsageOID.SMARTCARD_LOGON: "msSmartcardLogin",
|
|
ExtendedKeyUsageOID.KERBEROS_PKINIT_KDC: "pkInitKDC",
|
|
ExtensionOID.SUBJECT_DIRECTORY_ATTRIBUTES: "subjectDirectoryAttributes",
|
|
ExtensionOID.SUBJECT_KEY_IDENTIFIER: "subjectKeyIdentifier",
|
|
ExtensionOID.KEY_USAGE: "keyUsage",
|
|
ExtensionOID.SUBJECT_ALTERNATIVE_NAME: "subjectAltName",
|
|
ExtensionOID.ISSUER_ALTERNATIVE_NAME: "issuerAltName",
|
|
ExtensionOID.BASIC_CONSTRAINTS: "basicConstraints",
|
|
ExtensionOID.PRECERT_SIGNED_CERTIFICATE_TIMESTAMPS: (
|
|
"signedCertificateTimestampList"
|
|
),
|
|
ExtensionOID.SIGNED_CERTIFICATE_TIMESTAMPS: (
|
|
"signedCertificateTimestampList"
|
|
),
|
|
ExtensionOID.PRECERT_POISON: "ctPoison",
|
|
ExtensionOID.MS_CERTIFICATE_TEMPLATE: "msCertificateTemplate",
|
|
ExtensionOID.ADMISSIONS: "Admissions",
|
|
CRLEntryExtensionOID.CRL_REASON: "cRLReason",
|
|
CRLEntryExtensionOID.INVALIDITY_DATE: "invalidityDate",
|
|
CRLEntryExtensionOID.CERTIFICATE_ISSUER: "certificateIssuer",
|
|
ExtensionOID.NAME_CONSTRAINTS: "nameConstraints",
|
|
ExtensionOID.CRL_DISTRIBUTION_POINTS: "cRLDistributionPoints",
|
|
ExtensionOID.CERTIFICATE_POLICIES: "certificatePolicies",
|
|
ExtensionOID.POLICY_MAPPINGS: "policyMappings",
|
|
ExtensionOID.AUTHORITY_KEY_IDENTIFIER: "authorityKeyIdentifier",
|
|
ExtensionOID.POLICY_CONSTRAINTS: "policyConstraints",
|
|
ExtensionOID.EXTENDED_KEY_USAGE: "extendedKeyUsage",
|
|
ExtensionOID.FRESHEST_CRL: "freshestCRL",
|
|
ExtensionOID.INHIBIT_ANY_POLICY: "inhibitAnyPolicy",
|
|
ExtensionOID.ISSUING_DISTRIBUTION_POINT: "issuingDistributionPoint",
|
|
ExtensionOID.AUTHORITY_INFORMATION_ACCESS: "authorityInfoAccess",
|
|
ExtensionOID.SUBJECT_INFORMATION_ACCESS: "subjectInfoAccess",
|
|
ExtensionOID.OCSP_NO_CHECK: "OCSPNoCheck",
|
|
ExtensionOID.CRL_NUMBER: "cRLNumber",
|
|
ExtensionOID.DELTA_CRL_INDICATOR: "deltaCRLIndicator",
|
|
ExtensionOID.TLS_FEATURE: "TLSFeature",
|
|
AuthorityInformationAccessOID.OCSP: "OCSP",
|
|
AuthorityInformationAccessOID.CA_ISSUERS: "caIssuers",
|
|
SubjectInformationAccessOID.CA_REPOSITORY: "caRepository",
|
|
CertificatePoliciesOID.CPS_QUALIFIER: "id-qt-cps",
|
|
CertificatePoliciesOID.CPS_USER_NOTICE: "id-qt-unotice",
|
|
OCSPExtensionOID.NONCE: "OCSPNonce",
|
|
AttributeOID.CHALLENGE_PASSWORD: "challengePassword",
|
|
}
|