def name_constraints(asn): email = ('rfc822Name', 'muni.cz') constraint = x509.general_subtree(email) return x509.name_constraints(asn, permitted=[constraint])
def name_constraints(asn): ip_range = x509.general_ip_address_range('127.0.0.1', 1) constraint = x509.general_subtree(ip_range) return x509.name_constraints(asn, excluded=[constraint])
def name_constraints(asn): ip_range = x509.general_ip_address_range('126.0.0.0', 32) constraint = x509.general_subtree(ip_range) return x509.name_constraints(asn, permitted=[constraint])
def invalid_name_constraints(asn): ip_range = x509.general_ip_address_range('127.0.0.0', 32) constraint = x509.general_subtree(ip_range, maximum=1) return x509.name_constraints(asn, permitted=[constraint])
def nonsense_name_constraints(asn): name = {'type-id': '1.2.3.4.5', 'value': b'\xff\xff'} constraint = x509.general_subtree(('otherName', name)) return x509.name_constraints(asn, permitted=[constraint])