m�
���Pc@sa
dZd
k
lZlZlZlZ
dkZdef
d��YZei	e�

ei
Zddd�Zdfd	��YZ
d
fd��YZdfd
��YZdfd��YZdfd��YZd�Zd�Zd�Zdfd��YZdfd��YZdfd��YZd�Zdfd��YZd�Zdfd ��YZd!�ZdS("s�M2Crypto wrapper for OpenSSL X509 API.

Copyright (c) 1999-2004 Ng Pheng Siong. All rights reserved.

Portions created by Open Source Applications Foundation (OSAF) are
Copyright (C) 2004-2005 OSAF. All Rights Reserved.
Author: Heikki Toivonen
(sASN1sBIOsErrsEVPNt	X509Errorc
BstZ
RS(
N(t__name__t
__module__(((t1/usr/lib/python2.4/site-packages/M2Crypto/X509.pyRsii
cCsSti
�}ti|�
}ti||||
�}t	||�}|i|�

|S(s-
    Create new X509_Extension instance.
    N(tm2tx509v3_lhashtlhashtx509v3_set_conf_lhashtctxtx509v3_ext_conftnametvaluetx509_ext_ptrtX509_Extensiont_pyfreetx509_exttset_criticaltcritical(R
RRRRRRR((Rt
new_extensions






R
cBs_tZ
dZeiZed
d�Zd�Zd�Z	d
d�
Z
d�Zd�Zd�Z
RS(	s
    X509 Extension
    i
cCs|
|_||_dS(
N(RtselfRR(RRR((Rt__init__'s
	
c

Cs5t|d
d�o
|io
|i|i�

n

dS(NRi(tgetattrRRtm2_x509_extension_free(
R((Rt__del__+s

c


Cs|i
S(
N(RR(
R((Rt_ptr/s
cCsti
|i|
�S(sL

        Mark this extension critical or noncritical. By default an
        extension is not critical.

        @type critical:  int
        @param critical: Nonzero sets this extension as critical.
                         Calling this method without arguments will
                         set this extension to critical.
        N(Rtx509_extension_set_criticalRRR(RR((RR2s	
c

Csti
|i�
S(s�
        Return whether or not this is a critical extension.

        @rtype:   int
        @return:  Nonzero if this is a critical extension.
        N(Rtx509_extension_get_criticalRR(
R((Rtget_critical>s
c

Csti
|i�
S(sG
        Get the extension name, for example 'subjectAltName'.
        N(Rtx509_extension_get_nameRR(
R((Rtget_nameGs
c
Cs5ti
�}
ti|
i�|id
d
�
|
i�S(sM
        Get the extension value, for example 'DNS:www.example.com'.
        iN(	tBIOtMemoryBuffertbufRtx509_ext_printtbio_ptrRRtread_all(RR ((Rt	get_valueMs


(R
Rt__doc__Rtx509_extension_freeRtNoneRRRRRRR$(((RR
 s						tX509_Extension_StackcBsetZ
dZeiZed
d�Zd�Zd�Z	d�Z
d�Zd�Zd�Z
d	�ZRS(
sZ

    X509 Extension Stack
    
    @warning: Do not modify the underlying OpenSSL stack
    except through this interface, or use any OpenSSL functions that do so
    indirectly. Doing so will get the OpenSSL stack and the internal pystack
    of this class out of sync, leading to python memory leaks, exceptions
    or even python crashes!
    icCs�|
dj	oj
|
|_||_ti|i�
}xdt|�
D]1}|i	i
tti|i|�d
|�

�

q>Wn"
ti
�|_d|_g|_	dS(NRi
(tstackR'RRRtsk_x509_extension_numtnumtranget
itpystacktappendR
tsk_x509_extension_valuetsk_x509_extension_new_null(RR)RR-R+((RRcs


	
	





	
c

Cs+t|d
d�o
|i|i�

n

dS(NRi(RRtm2_sk_x509_extension_freeR)(
R((RRps

c

Cs
t|i�
S(
N(tlenRR.(
R((Rt__len__ts

cCs|i
|
S(
N(RR.tidx(RR5((Rt__getitem__xs
c

Cs
t|i�
S(
N(titerRR.(
R((Rt__iter__{s
c


Cs|i
S(
N(RR)(
R((RR~s
cCs/|i
i|
�

ti|i|
i��}|S(s�
        Push X509_Extension object onto the stack.

        @type x509_ext: M2Crypto.X509.X509_Extension
        @param x509_ext: X509_Extension object to be pushed onto the stack.
        @return: The number of extensions on the stack.
        N(	RR.R/RRtsk_x509_extension_pushR)Rtret(RRR:((Rtpush�s




c
Cs4ti
|i�
}
|
d
jo
d
Sn

|ii�S(sk
        Pop X509_Extension object from the stack.
        
        @return: X509_Extension popped
        N(Rtsk_x509_extension_popRR)RR'R.tpop(RR((RR=�s





(R
RR%Rtsk_x509_extension_freeR2R'RRR4R6R8RR;R=(((RR(Vs		
						
tX509_Name_EntrycBsPtZ
dZeiZd
d�
Zd�Zd�Zd�Z	d�Z
d�ZRS(s
    X509 Name Entry
    icCs|
|_||_dS(
N(tx509_name_entryRR(RR@R((RR�s
	
c

Cs+t|d
d�o
|i|i�

n

dS(NRi(RRtm2_x509_name_entry_freeR@(
R((RR�s

c


Cs|i
S(
N(RR@(
R((RR�s
cCsti
|i|
i��S(
N(Rtx509_name_entry_set_objectRR@tasn1objR(RRC((Rt
set_object�s
c

Csti
ti|i�
�
S(
N(tASN1tASN1_StringRtx509_name_entry_get_dataRR@(
R((Rtget_data�s
cCs"ti
|ii�|
|||�S(
N(	Rtx509_name_entry_create_by_txtRR@RtfieldttypetentryR3(RRJRKRLR3((Rt
create_by_txt�s
(R
RR%Rtx509_name_entry_freeRARRRRDRHRM(((RR?�s					t	X509_NamecBs�
tZ
dZhd
ei<dei<dei<dei<dei<dei<dei<dei<d	ei<d
ei<dei	<dei	<d
ei
<dei
<dei<dei<dei<dei
<dei
<ZeiZedd�Zd�Zd�Zd�Zd�Zd�Zd�Zd�Zd�Zd�Zd�Zd �Zdeid!�ZRS("s
    X509 Name
    t
CtSPtSTtstateOrProvinceNamet
LtlocalityNamet
OtorganizationNametOUtorganizationUnitNametCNt
commonNametEmailtemailAddresstserialNumbertSNtsurnametGNt	givenNameicCs?|
dj	o
|
|_||_n
ti�|_d
|_dS(Ni
(t	x509_nameR'RRRt
x509_name_new(RRcR((RR�s



	


c

Cs+t|d
d�o
|i|i�

n

dS(NRi(RRtm2_x509_name_freeRc(
R((RR�s

c

Csti
|i�
S(
N(Rtx509_name_onelineRRc(
R((Rt__str__�s

cCs`|
|ijo
ti|i|i|
�Sn

|
|ijo
|i|
Sn

t||
f�dS(
N(tattrRtnidRtx509_name_by_nidRct__dict__tAttributeError(RRh((Rt__getattr__�s



cCsB|
|ijo!
ti|i|i|
|�Sn

||i|
<dS(
N(RhRRiRtx509_name_set_by_nidRcRRk(RRhR((Rt__setattr__�s


!c

Csti
|i�
S(
N(Rtx509_name_entry_countRRc(
R((RR4�s
cCsMd
|
j
o
|i�jn
p
td�
�
n

tti|i|
��
S(Nisindex out of range(R5Rtentry_countt
IndexErrorR?Rtx509_name_get_entryRc(RR5((RR6�s
$

c
cs)x"t|i��
D]}
||
VqWdS(
N(txrangeRRqR-(RR-((RR8�s

c


Cs|i
S(
N(RRc(
R((RR
scCs"ti
|i|
|||||�S(
N(
Rtx509_name_add_entry_by_txtRRcRJRKRLR3tloctset(RRJRKRLR3RvRw((Rtadd_entry_by_txt
s

c

Csti
|i�
S(
N(RRpRRc(
R((RRq
s
cCsZg}d
}xGto?
ti|i|
|�}|d
jo
Pn

|i||�

q
W|S(Ni����(	R:tlastpostTrueRtx509_name_get_index_by_nidRRcRiR/(RRiRyR:((Rtget_entries_by_nid
s



	


cCs5ti
�}ti|i�|i|
|�
|i
�S(s�
        as_text returns the name as a string.
        
        @param indent: Each line in multiline format is indented 
                       by this many spaces.
        @param flags:  Flags that control how the output should be formatted.
        N(RRR Rtx509_name_print_exR"RRctindenttflagsR#(RR~RR ((Rtas_text
s




( R
RR%RtNID_countryNametNID_stateOrProvinceNametNID_localityNametNID_organizationNametNID_organizationalUnitNametNID_commonNametNID_pkcs9_emailAddresstNID_serialNumbertNID_surnamet
NID_givenNameRitx509_name_freeReR'RRRgRmRoR4R6R8RRxRqR|tXN_FLAG_COMPATR�(((RRO�s �					
								tX509cBs7
tZ
dZeiZed
d�Zd�Zd�Z	d�Z
d�Zd�Zd�Z
d	�Zd
�Zd�Zd�Zd
�Zd�Zd�Zd�Zd�Zd�Zd�Zd�Zd�Zd�Zd�Zd�Zd�Zd�Zd�Z d�Z!d�Z"ed�
Z#d�Z$d �Z%RS(!s
    X.509 Certificate
    icCs?|
dj	o
|
|_||_n
ti�|_d
|_dS(Ni
(tx509R'RRRtx509_new(RR�R((RR.
s



	


c

Cs+t|d
d�o
|i|i�

n

dS(NRi(RRtm2_x509_freeR�(
R((RR7
s

c


Cs|i
S(
N(RR�(
R((RR;
s

c
Cs/ti
�}
ti|
i�|i�
|
i�S(
N(	RRR Rt
x509_printR"RR�R#(RR ((RR�?
s



c
Cs/ti
�}
ti|
i�|i�
|
i�S(
N(	RRR Rti2d_x509R"RR�R#(RR ((Rtas_derE
s



c
Cs/ti
�}
ti|
i�|i�
|
i�S(
N(	RRR Rtx509_write_pemR"RR�R#(RR ((Rtas_pemK
s


cCs+ti
|
d
�}ti|i�|i�S(s
        save_pem
        twbN(	RtopenfiletfilenametbioRR�R"RR�(RR�R�((Rtsave_pemP
s

cCsti
|i|
�S(s�
        Set version.

        @type version:  int
        @param version: Version number.
        @rtype:         int
        @return:        Returns 0 on failure.
        N(Rtx509_set_versionRR�tversion(RR�((Rtset_versionW
s

cCsti
|i|
i��S(
N(Rtx509_set_not_beforeRR�tasn1_utctimeR(RR�((Rtset_not_beforec
s

cCsti
|i|
i��S(
N(Rtx509_set_not_afterRR�R�R(RR�((Rt
set_not_afterg
s

cCsti
|i|
i�S(
N(Rtx509_set_subject_nameRR�R
Rc(RR
((Rtset_subject_namek
s

cCsti
|i|
i�S(
N(Rtx509_set_issuer_nameRR�R
Rc(RR
((Rtset_issuer_nameo
s

c

Csti
|i�
S(
N(Rtx509_get_versionRR�(
R((Rtget_versions
s

c
Csti
|i�
}
ti|
�
S(
N(Rtx509_get_serial_numberRR�tasn1_integertasn1_integer_get(RR�((Rtget_serial_numberw
s


cCs"ti
|i�
}ti||
�S(sh
        Set serial number.

        @type serial:   int
        @param serial:  Serial number.
        N(RR�RR�R�tasn1_integer_settserial(RR�R�((Rtset_serial_number|
s

c

Csti
ti|i�
�
S(
N(REtASN1_UTCTIMERtx509_get_not_beforeRR�(
R((Rtget_not_before�
s

c

Csti
ti|i�
�
S(
N(RER�Rtx509_get_not_afterRR�(
R((Rt
get_not_after�
s

c

Csti
ti|i�
d
d�

S(NRi
(tEVPtPKeyRtx509_get_pubkeyRR�(
R((Rt
get_pubkey�
s

cCsti
|i|
i�S(sw
        Set the public key for the certificate

        @type pkey:  EVP_PKEY
        @param pkey: Public key
        N(Rtx509_set_pubkeyRR�tpkey(RR�((Rt
set_pubkey�
s

c

Cstt
i|i�
�
S(
N(RORtx509_get_issuer_nameRR�(
R((Rt
get_issuer�
s

cCsti
|i|
i�S(sp
        Set issuer name.

        @type name:     X509_Name
        @param name:    subjectName field.
        N(RR�RR�R
Rc(RR
((Rt
set_issuer�
s

c

Cstt
i|i�
�
S(
N(RORtx509_get_subject_nameRR�(
R((Rtget_subject�
s

cCsti
|i|
i�S(sq
        Set subject name.

        @type name:     X509_Name
        @param name:    subjectName field.
        N(RR�RR�R
Rc(RR
((Rtset_subject�
s

cCsti
|i|
id
�S(s�
        Add X509 extension to this certificate.

        @type ext:     X509_Extension
        @param ext:    Extension
        i����N(Rtx509_add_extRR�textR(RR�((Rtadd_ext�
s

cCsQxDt|i��
D]0}|i|�
}|i�|
jo
|Sq
qWt�
d
S(s�
        Get X509 extension by name.

        @type name:    Name of the extension
        @param name:   str
        @return:       X509_Extension
        N(	R,Rt
get_ext_countR-t
get_ext_atR�RR
tLookupError(RR
R-R�((Rtget_ext�
s



cCsI|
d
jp
|
|i�jo

t�
n

tti|i|
�dd
�

S(s�
        Get X509 extension by index.

        @type index:    Name of the extension
        @param index:   int
        @return:        X509_Extension
        iRN(tindexRR�RrR
Rtx509_get_extR�(RR�((RR��
s

 


c

Csti
|i�
S(s+
        Get X509 extension count.
        N(Rtx509_get_ext_countRR�(
R((RR��
s
cCsNtt
|d�}|djo
td
|f�n

t
i|i|
i	|��S(s�
        Sign the certificate.

        @type pkey:  EVP_PKEY
        @param pkey: Public key
        @type md:    str
        @param md:   Message digest algorithm to use for signing,
                     for example 'sha1'.
        sunknown message digestN(
RRtmdR'tmdat
ValueErrort	x509_signRR�R�(RR�R�R�((Rtsign�
s	





cCsD|
o
t
i|i|
i�Sn 
t
i|it
i|i�
�SdS(
N(R�Rtx509_verifyRR�R�(RR�((Rtverify�
s


c

Csti
|i�
S(s�
        Check if the certificate is a Certificate Authority (CA) certificate.
        
        @return: 0 if the certificate is not CA, nonzero otherwise.
        
        @requires: OpenSSL 0.9.8 or newer 
        N(Rt
x509_check_caRR�(
R((Rtcheck_cas
cCsti
|i|
|�S(s)

        Check if the certificate's purpose matches the asked purpose.
        
        @param id: Purpose id. See X509_PURPOSE_* constants.
        @param ca: 1 if the certificate should be CA, 0 otherwise.
        @return: 0 if the certificate purpose does not match, nonzero otherwise.
        N(Rtx509_check_purposeRR�tidtca(RR�R�((Rt
check_purpose
s
(&R
RR%Rt	x509_freeR�R'RRRR�R�R�R�R�R�R�R�R�R�R�R�R�R�R�R�R�R�R�R�R�R�R�R�R�R�R�R�(((RR�'
sB																				
		
		
	
					
c
Csti
|�
}
t|
�
S(s�
    Load certificate from file.

    @type file: string
    @param file: Name of file containing certificate in PEM format.

    @rtype: M2Crypto.X509.X509
    @return: M2Crypto.X509.X509 object.
    N(RR�tfileR�t
load_cert_bio(R�R�((Rt	load_certs	

c

Cstt
i|i��
d
�S(Ni
(R�Rt
x509_read_pemR�R(
R�((RR�&s
c
Csti
|�
}
t|
�
S(
N(RRtstringR�R�(R�R�((Rtload_cert_string*s

tX509_Store_ContextcBsPtZ
dZeiZd
d�
Zd�Zd�Zd�Z	d�Z
d�ZRS(s
    X509 Store Context
    icCs|
|_||_dS(
N(tx509_store_ctxRRR(RR�R((RR6s
	
c

Cs"|i
o
|i|i�

n

dS(
N(RRtm2_x509_store_ctx_freeR(
R((RR:s


c


Cs|i
S(
N(RR(
R((RR>s
c

Cstt
i|i�
d
d�

S(s�
        Get current X.509 certificate.
        
        @warning: The returned certificate is NOT refcounted, so you can not
        rely on it being valid once the store context goes away or is modified.
        RiN(R�Rtx509_store_ctx_get_current_certRR(
R((Rtget_current_certAs
c

Csti
|i�
S(s!
        Get error code.
        N(Rtx509_store_ctx_get_errorRR(
R((Rt	get_errorJs
c

Csti
|i�
S(s"
        Get error depth.
        N(Rtx509_store_ctx_get_error_depthRR(
R((Rtget_error_depthPs
(R
RR%Rtx509_store_ctx_freeR�RRRR�R�R�(((RR�/s						t
X509_StorecBsVtZ
dZeiZed
d�Zd�Zd�Z	d�Z
e
Zd�ZeZ
RS(s
    X509 Store
    icCs?|
dj	o
|
|_||_n
ti�|_d
|_dS(Ni
(tstoreR'RRRtx509_store_new(RR�R((RR^s



	


c

Cs+t|d
d�o
|i|i�

n

dS(NRi(RRtm2_x509_store_freeR�(
R((RRfs

c


Cs|i
S(
N(RR�(
R((RRjs
cCsti
|i|
�
dS(
N(Rtx509_store_load_locationsRR�R�(RR�((Rt	load_infoms
cCsti
|i|
i��S(
N(Rtx509_store_add_certRR�R�R(RR�((Rtadd_x509rs

(R
RR%Rtx509_store_freeR�R'RRRR�tload_locationsR�tadd_cert(((RR�Ws					t
X509_StackcBsntZ
dZeiZed
d�Zd�Zd�Z	d�Z
d�Zd�Zd�Z
d	�Zd
�ZRS(sL

    X509 Stack

    @warning: Do not modify the underlying OpenSSL stack
    except through this interface, or use any OpenSSL functions that do so
    indirectly. Doing so will get the OpenSSL stack and the internal pystack
    of this class out of sync, leading to python memory leaks, exceptions
    or even python crashes!
    icCs�|
dj	os
|
|_||_g|_ti|i�
}xdt|�
D]1}|ii
tti|i|�d
|�

�

qGWn"
ti
�|_d|_g|_dS(NRi
(R)R'RRR.Rtsk_x509_numR+R,R-R/R�t
sk_x509_valuetsk_x509_new_null(RR)RR-R+((RR�s


	
	
	





	
c

Cs+t|d
d�o
|i|i�

n

dS(NRi(RRtm2_sk_x509_freeR)(
R((RR�s

c

Cs
t|i�
S(
N(R3RR.(
R((RR4�s

cCs|i
|
S(
N(RR.R5(RR5((RR6�s
c

Cs
t|i�
S(
N(R7RR.(
R((RR8�s
c


Cs|i
S(
N(RR)(
R((RR�s
cCs/|i
i|
�

ti|i|
i��}|S(s�
        push an X509 certificate onto the stack.
        
        @param x509: X509 object.
        @return: The number of X509 objects currently on the stack.
        N(	RR.R/R�Rtsk_x509_pushR)RR:(RR�R:((RR;�s




c
Cs4ti
|i�
}
|
d
jo
d
Sn

|ii�S(s�
        pop a certificate from the stack.
        
        @return: X509 object that was popped, or None if there is nothing
        to pop. 
        N(Rtsk_x509_popRR)tx509_ptrR'R.R=(RR�((RR=�s





c

Csti
|i�
S(s:
        Return the stack as a DER encoded string
        N(Rtget_der_encoding_stackRR)(
R((RR��s
(R
RR%Rtsk_x509_freeR�R'RRR4R6R8RR;R=R�(((RR�ys								
	
c
Csti
|�
}
t|
d
�S(sO
    Create a new X509_Stack from DER string.
    
    @return: X509_Stack
    i
N(Rtmake_stack_from_der_sequencet
der_stringt	stack_ptrR�(R
R

((Rtnew_stack_from_der�s

tRequestcBs�tZ
dZeiZed
d�Zd�Zd�Z	d�Z
d�Zd�Zd�Z
d	�Zd
�Zd�Zd�Zd
�Zd�Zd�ZRS(s#
    X509 Certificate Request.
    icCs?|
dj	o
|
|_||_n
ti�|_d
|_dS(Ni
(treqR'RRRtx509_req_new(RR
R((RR�s



	


c

Cs+t|d
d�o
|i|i�

n

dS(NRi(RRtm2_x509_req_freeR
(
R((RR�s

c
Cs/ti
�}
ti|
i�|i�
|
i�S(
N(	RRR Rtx509_req_printR"RR
R#(RR ((RR��s


c
Cs/ti
�}
ti|
i�|i�
|
i�S(
N(	RRR Rtx509_req_write_pemR"RR
R#(RR ((RR��s


cCs+ti
|
d
�}ti|i�|i�S(NR�(	RR�R�R�RR
R"RR
(RR�R�((RR��s

c

Csti
ti|i�
d
d�

S(s�
        Get the public key for the request.

        @rtype:      EVP_PKEY
        @return:     Public key from the request.
        Ri
N(R�R�Rtx509_req_get_pubkeyRR
(
R((RR��s
cCsti
|i|
i�S(s�
        Set the public key for the request.

        @type pkey:  EVP_PKEY
        @param pkey: Public key

        @rtype:      int
        @return:     Return 1 for success and 0 for failure.
        N(Rtx509_req_set_pubkeyRR
R�(RR�((RR��s	
c

Csti
|i�
S(sd
        Get version.

        @rtype:         int
        @return:        Returns version.
        N(Rtx509_req_get_versionRR
(
R((RR�s
cCsti
|i|
�S(s�
        Set version.

        @type version:  int
        @param version: Version number.
        @rtype:         int
        @return:        Returns 0 on failure.
        N(Rtx509_req_set_versionRR
R�(RR�((RR�s
c

Cstt
i|i�
�
S(
N(RORtx509_req_get_subject_nameRR
(
R((RR�s
cCsti
|i|
i�S(sq
        Set subject name.

        @type name:     X509_Name
        @param name:    subjectName field.
        N(Rtx509_req_set_subject_nameRR
R
Rc(RR
((RR�s
cCsti
|i|
i��S(s�
        Add X509 extensions to this request.

        @type ext_stack:  X509_Extension_Stack
        @param ext_stack: Stack of extensions to add.
        N(Rtx509_req_add_extensionsRR
t	ext_stackR(RR
((Rtadd_extensions&s
cCsti
|i|
i�S(
N(Rtx509_req_verifyRR
R�(RR�((RR�/s
cCsNtt
|d�}|djo
td
|f�n

t
i|i|
i	|��S(Nsunknown message digest(
RRR�R'R�R�t
x509_req_signRR
R�(RR�R�R�((RR�2s




(R
RR%Rt
x509_req_freeR
R'RRR�R�R�R�R�R�R�R�R�R
R�R�(((RR
�s 																	c
CsXti
|�
}
ti|
i��
}|
i�
|djo
t
i��
n

t|d
�S(s�
    Load certificate request from file.

    @type file: string
    @param file: Name of file containing certificate request in PEM format.

    @rtype: M2Crypto.X509.Request
    @return: M2Crypto.X509.Request object.
    i
N(
RR�R�t
fRtx509_req_read_pemR"tcptrtcloseR'tErrR�R
(R�R
R
((Rtload_request9s	







tCRLcBs8tZ
dZeiZed
d�Zd�Zd�Z	RS(s*
    X509 Certificate Revocation List
    icCs?|
dj	o
|
|_||_n
ti�|_d
|_dS(Ni
(tcrlR'RRRtx509_crl_new(RR
R((RRRs



	


c

Cs+t|d
d�o
|i|i�

n

dS(NRi(RRtm2_x509_crl_freeR
(
R((RRZs

c
Cs/ti
�}
ti|
i�|i�
|
i�S(s�
        Return CRL in PEM format in a string.

        @rtype: string
        @return: String containing the CRL in PEM format.
        N(	RRR Rtx509_crl_printR"RR
R#(RR ((RR�^s


(
R
RR%Rt
x509_crl_freeR
R'RRR�(((RR
Ks
		c
CsXti
|�
}
ti|
i��
}|
i�
|djo
t
i��
n

t|d
�S(s�
    Load CRL from file.

    @type file: string
    @param file: Name of file containing CRL in PEM format.

    @rtype: M2Crypto.X509.CRL
    @return: M2Crypto.X509.CRL object.
    i
N(
RR�R�R
Rtx509_crl_read_pemR"R
R
R'R
R�R
(R�R
R
((Rtload_crljs	







(R%tM2CryptoRERR
R�Rt	ExceptionRt	x509_initt	X509_V_OKtV_OKRR
R(R?ROR�R�R�R�R�R�R�R
R
R
R
R"
(RR'
R
RER"
R�R
R�RR�R�R�R
RR?R(R
R
R�RR�ROR�R
((Rt
?s,
	
	6Eq�			("M	
i