pki.models.extension

Module that contains X.509 Extension Models.

Module Contents

class pki.models.extension.AttributeTypeAndValue(*args, **kwargs)

Bases: django.db.models.Model

AttributeTypeAndValue Model.

Used for subject entries as well as the GeneralNameDirectoryName entries within the SubjectAlternativeName and IssuerAlternativeName.

See RFC5280 for more information.

oid

value

class Meta

unique_together = ('oid', 'value')

property abbreviation: str | None

Returns the abbreviation of the attribute’s OID.

Return type:

str | None

property verbose_name: str

Returns the verbose name of the attribute’s OID.

Return type:

str

class pki.models.extension.GeneralNameRFC822Name(*args, **kwargs)

Bases: util.db.OrphanDeletionMixin, django.db.models.Model

GeneralNameRFC822Name Model.

Entries of either SubjectAlternativeNames or IssuerAlternativeNames.

See RFC5280 for more information.

value

check_references_on_delete = ('general_names_set',)

class pki.models.extension.GeneralNameDNSName(*args, **kwargs)

Bases: util.db.OrphanDeletionMixin, django.db.models.Model

GeneralNameDNSName Model.

See RFC5280 for more information.

value

check_references_on_delete = ('general_names_set',)

class pki.models.extension.GeneralNameDirectoryName(*args, **kwargs)

Bases: util.db.OrphanDeletionMixin, django.db.models.Model

GeneralNameDirectoryName Model.

Entries of either SubjectAlternativeNames or IssuerAlternativeNames.

See RFC5280 for more information.

names

check_references_on_delete = ('general_names_set',)

class pki.models.extension.GeneralNameUniformResourceIdentifier(*args, **kwargs)

Bases: util.db.OrphanDeletionMixin, django.db.models.Model

GeneralNameUniformResourceIdentifier Model.

Entries of either SubjectAlternativeNames or IssuerAlternativeNames.

See RFC5280 for more information.

value

check_references_on_delete = ('general_names_set',)

class pki.models.extension.GeneralNameIpAddress(*args, **kwargs)

Bases: util.db.OrphanDeletionMixin, django.db.models.Model

GeneralNameIpAddress Model.

Entries of either SubjectAlternativeNames or IssuerAlternativeNames.

See RFC5280 for more information.

class IpType(*args, **kwds)

Bases: django.db.models.TextChoices

Class for creating enumerated string choices.

IPV4_ADDRESS

IPV6_ADDRESS

IPV4_NETWORK

IPV6_NETWORK

ip_type

value

check_references_on_delete = ('general_names_set',)

class Meta

unique_together = ('ip_type', 'value')

class pki.models.extension.GeneralNameRegisteredId(*args, **kwargs)

Bases: util.db.OrphanDeletionMixin, django.db.models.Model

GeneralNameRegisteredId Model.

Entries of either SubjectAlternativeNames or IssuerAlternativeNames.

See RFC5280 for more information.

value

check_references_on_delete = ('general_names_set',)

class pki.models.extension.GeneralNameOtherName(*args, **kwargs)

Bases: util.db.OrphanDeletionMixin, django.db.models.Model

GeneralNameOtherName Model.

Entries of either SubjectAlternativeNames or IssuerAlternativeNames.

See RFC5280 for more information.

type_id

value

check_references_on_delete = ('general_names_set',)

class Meta

unique_together = ('type_id', 'value')

class pki.models.extension.CertificateExtension(*args, **kwargs)

Bases: util.db.OrphanDeletionMixin

Abstract Base Class of Extension Models.

Due to a Metaclass conflict, this class is not derived from abc.ABC on purpose. # TODO: check if this can be rectified

property extension_oid: str

Returns the OID of the extension.

Return type:

str

classmethod save_from_crypto_extensions(extension)

Abstractmethod:

Parameters:

extension (cryptography.x509.Extension[T])

Return type:

CertificateExtension | None

Stores the extension in the database.

Meant to be called within an atomic transaction while storing a certificate.

Parameters:

extension (x509.Extension) – The X.509 extension object.

Returns:

The instance of the saved extension.

Return type:

CertificateExtension

classmethod delete_if_orphaned(instance)

Removes the Extension instance if no longer referenced.

Since all extension classes are only referenced by the Certificate model with on_delete=models.PROTECT, we can rely on the database protection to remove the instance if it is no longer referenced. This saves an extra query to check if the ‘certificates’ reverse relation still exists.

Parameters:

instance (util.db.OrphanDeletionMixin | None)

Return type:

None

class pki.models.extension.BasicConstraintsExtension(*args, **kwargs)

Bases: CertificateExtension, django.db.models.Model

Represents the BasicConstraints extension in X.509 certificates.

This extension indicates whether a certificate is a CA and its path length.

critical

ca

path_length_constraint

class Meta

unique_together = ('critical', 'ca', 'path_length_constraint')

classmethod save_from_crypto_extensions(crypto_basic_constraints_extension)

Stores the BasicConstraintsExtension in the database.

Parameters:

crypto_basic_constraints_extension (x509.Extension) – The X.509 extension containing BasicConstraints.

Returns:

The instance of the saved extension.

Return type:

BasicConstraintsExtension

class pki.models.extension.KeyUsageExtension(*args, **kwargs)

Bases: CertificateExtension, django.db.models.Model

Represents the KeyUsage extension in X.509 certificates.

Specifies the permitted usage of the certificate’s public key.

critical

digital_signature

content_commitment

key_encipherment

data_encipherment

key_agreement

key_cert_sign

crl_sign

encipher_only

decipher_only

class Meta

unique_together = ('digital_signature', 'content_commitment', 'key_encipherment', 'data_encipherment',...

classmethod save_from_crypto_extensions(crypto_basic_constraints_extension)

Stores the KeyUsage extension in the database.

Parameters:

crypto_basic_constraints_extension (x509.Extension) – The X.509 extension containing KeyUsage.

Returns:

The instance of the saved extension.

Return type:

KeyUsageExtension

class pki.models.extension.GeneralNamesModel(*args, **kwargs)

Bases: util.db.OrphanDeletionMixin, util.db.CustomDeleteActionModel

Represents a collection of general names as per RFC5280.

Used for both SubjectAlternativeName and IssuerAlternativeName extensions.

rfc822_names

dns_names

directory_names

uniform_resource_identifiers

ip_addresses

registered_ids

other_names

save_general_names(general_names)

Stores general names in the database.

Parameters:

general_names (x509.Extension | list[x509.GeneralName]) – The X.509 general names extension or a list of general names.

Returns:

The instance of the saved general names.

Return type:

GeneralNamesModel

class pki.models.extension.IssuerAlternativeNameExtension(*args, **kwargs)

Bases: CertificateExtension, util.db.CustomDeleteActionModel

IssuerAlternativeNameExtension Model.

See RFC5280 for more information.

critical

issuer_alt_name

post_delete()

Clean up related orphaned extension field models.

Return type:

None

classmethod save_from_crypto_extensions(extension)

Stores the IssuerAlternativeNameExtension in the database.

Meant to be called within an atomic transaction while storing a certificate.

Parameters:

extension (x509.Extension) – The x509.Extension object that contains all extensions of the certificate.

Returns:

The instance of the saved IssuerAlternativeNameExtension.

Return type:

trustpoint.pki.models.IssuerAlternativeNameExtension

class pki.models.extension.SubjectAlternativeNameExtension(*args, **kwargs)

Bases: CertificateExtension, util.db.CustomDeleteActionModel

Represents the SubjectAlternativeName extension in X.509 certificates.

Stores alternative names for the certificate’s subject.

critical

subject_alt_name

post_delete()

Clean up related orphaned extension field models.

Return type:

None

classmethod save_from_crypto_extensions(extension)

Stores the SubjectAlternativeName extension in the database.

Parameters:

extension (x509.Extension) – The X.509 extension containing SubjectAlternativeName.

Returns:

The instance of the saved extension.

Return type:

SubjectAlternativeNameExtension

class pki.models.extension.PolicyConstraintsExtension(*args, **kwargs)

Bases: CertificateExtension, django.db.models.Model

Represents the PolicyConstraints extension in X.509 certificates.

This extension specifies whether an explicit policy is required and whether policy mapping is inhibited.

critical

require_explicit_policy

inhibit_policy_mapping

objects: django.db.models.Manager[PolicyConstraintsExtension]

classmethod save_from_crypto_extensions(extension)

Stores the PolicyMappingsExtension in the database.

Parameters:

extension (x509.Extension) – The x509.Extension object containing PolicyConstraints.

Returns:

The saved instance of PolicyConstraintsExtension or None.

Return type:

PolicyConstraintsExtension