diff options
| author | Alex Gaynor <alex.gaynor@gmail.com> | 2015-05-03 00:13:08 -0400 |
|---|---|---|
| committer | Alex Gaynor <alex.gaynor@gmail.com> | 2015-05-03 00:13:08 -0400 |
| commit | 71fc677b6a35356d32244ec81ea49d06dfb0ad8e (patch) | |
| tree | f3b9206790a07fe1ec7d0ef5eca6dc6fd7f529e6 /docs/x509.rst | |
| parent | 04ee495f2b8c9d0d4f9d0a5462901feeeb7eba0c (diff) | |
| parent | f506bca3d2bb449c3889cbbaba11749304e81563 (diff) | |
| download | cryptography-71fc677b6a35356d32244ec81ea49d06dfb0ad8e.tar.gz cryptography-71fc677b6a35356d32244ec81ea49d06dfb0ad8e.tar.bz2 cryptography-71fc677b6a35356d32244ec81ea49d06dfb0ad8e.zip | |
Merge pull request #1892 from reaperhulk/x509-aia
add authority information access classes
Diffstat (limited to 'docs/x509.rst')
| -rw-r--r-- | docs/x509.rst | 43 |
1 files changed, 43 insertions, 0 deletions
diff --git a/docs/x509.rst b/docs/x509.rst index 5f36a921..42468626 100644 --- a/docs/x509.rst +++ b/docs/x509.rst @@ -719,6 +719,36 @@ X.509 Extensions :returns: A list of values extracted from the matched general names. +.. class:: AuthorityInformationAccess + + .. versionadded:: 0.9 + + The authority information access extension indicates how to access + information and services for the issuer of the certificate in which + the extension appears. Information and services may include online + validation services (such as OCSP) and issuer data. It is an iterable, + containing one or more :class:`AccessDescription` instances. + + +.. class:: AccessDescription + + .. attribute:: access_method + + :type: :class:`ObjectIdentifier` + + The access method defines what the ``access_location`` means. It must + be either :data:`OID_OCSP` or :data:`OID_CA_ISSUERS`. If it is + :data:`OID_OCSP` the access location will be where to obtain OCSP + information for the certificate. If it is :data:`OID_CA_ISSUERS` the + access location will provide additional information about the issuing + certificate. + + .. attribute:: access_location + + :type: :class:`GeneralName` + + Where to access the information defined by the access method. + Object Identifiers ~~~~~~~~~~~~~~~~~~ @@ -911,6 +941,19 @@ Extended Key Usage OIDs Corresponds to the dotted string ``"1.3.6.1.5.5.7.3.9"``. This is used to denote that a certificate may be used for signing OCSP responses. +Authority Information Access OIDs +~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ + +.. data:: OID_OCSP + + Corresponds to the dotted string ``"1.3.6.1.5.5.7.48.1"``. Used as the + identifier for OCSP data in :class:`AccessDescription` objects. + +.. data:: OID_CA_ISSUERS + + Corresponds to the dotted string ``"1.3.6.1.5.5.7.48.2"``. Used as the + identifier for CA issuer data in :class:`AccessDescription` objects. + .. _extension_oids: Extension OIDs |