tests/krb5: Move ‘rfc4120_pyasn1’ to ‘rfc4120_pyasn1_generated’

‘rfc4120_pyasn1_generated’ is not to be used directly. Its contents are
now reexported from ‘rfc4120_pyasn1’, which becomes a simple wrapper.

Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz>
Reviewed-by: Andrew Bartlett <abartlet@samba.org>

3 files changed, 2728 insertions, 2710 deletions

diff --git a/python/samba/tests/krb5/rfc4120_pyasn1.py b/python/samba/tests/krb5/rfc4120_pyasn1.py
index 8bf7e3fb66a..da38d3f9309 100644
--- a/python/samba/tests/krb5/rfc4120_pyasn1.py
+++ b/python/samba/tests/krb5/rfc4120_pyasn1.py
@@ -1,2708 +1,18 @@
-# Auto-generated by asn1ate v.0.6.1.dev0 from rfc4120.asn1
-# (last modified on 2023-07-04 13:41:26.112349)
-
-# KerberosV5Spec2
-from pyasn1.type import univ, char, namedtype, namedval, tag, constraint, useful
-
-
-def _OID(*components):
-    output = []
-    for x in tuple(components):
-        if isinstance(x, univ.ObjectIdentifier):
-            output.extend(list(x))
-        else:
-            output.append(int(x))
-
-    return univ.ObjectIdentifier(output)
-
-
-class Int32(univ.Integer):
-    pass
-
-
-Int32.subtypeSpec = constraint.ValueRangeConstraint(-2147483648, 2147483647)
-
-
-class AuthDataType(Int32):
-    pass
-
-
-class AuthorizationData(univ.SequenceOf):
-    pass
-
-
-AuthorizationData.componentType = univ.Sequence(componentType=namedtype.NamedTypes(
-    namedtype.NamedType('ad-type', AuthDataType().subtype(explicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatSimple, 0))),
-    namedtype.NamedType('ad-data', univ.OctetString().subtype(explicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatSimple, 1)))
-))
-
-
-class AD_AND_OR(univ.Sequence):
-    pass
-
-
-AD_AND_OR.componentType = namedtype.NamedTypes(
-    namedtype.NamedType('condition-count', Int32().subtype(explicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatSimple, 0))),
-    namedtype.NamedType('elements', AuthorizationData().subtype(explicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatSimple, 1)))
-)
-
-
-class AD_IF_RELEVANT(AuthorizationData):
-    pass
-
-
-class ExternalPrincipalIdentifier(univ.Sequence):
-    pass
-
-
-ExternalPrincipalIdentifier.componentType = namedtype.NamedTypes(
-    namedtype.OptionalNamedType('subjectName', univ.OctetString().subtype(implicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatSimple, 0))),
-    namedtype.OptionalNamedType('issuerAndSerialNumber', univ.OctetString().subtype(implicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatSimple, 1))),
-    namedtype.OptionalNamedType('subjectKeyIdentifier', univ.OctetString().subtype(implicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatSimple, 2)))
-)
-
-
-class AD_INITIAL_VERIFIED_CAS(univ.SequenceOf):
-    pass
-
-
-AD_INITIAL_VERIFIED_CAS.componentType = ExternalPrincipalIdentifier()
-
-
-class ChecksumType(Int32):
-    pass
-
-
-class Checksum(univ.Sequence):
-    pass
-
-
-Checksum.componentType = namedtype.NamedTypes(
-    namedtype.NamedType('cksumtype', ChecksumType().subtype(explicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatSimple, 0))),
-    namedtype.NamedType('checksum', univ.OctetString().subtype(explicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatSimple, 1)))
-)
-
-
-class KerberosString(char.GeneralString):
-    pass
-
-
-class NameType(Int32):
-    pass
-
-
-class PrincipalName(univ.Sequence):
-    pass
-
-
-PrincipalName.componentType = namedtype.NamedTypes(
-    namedtype.NamedType('name-type', NameType().subtype(explicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatSimple, 0))),
-    namedtype.NamedType('name-string', univ.SequenceOf(componentType=KerberosString()).subtype(explicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatSimple, 1)))
-)
-
-
-class Realm(KerberosString):
-    pass
-
-
-class AD_KDCIssued(univ.Sequence):
-    pass
-
-
-AD_KDCIssued.componentType = namedtype.NamedTypes(
-    namedtype.NamedType('ad-checksum', Checksum().subtype(explicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatConstructed, 0))),
-    namedtype.OptionalNamedType('i-realm', Realm().subtype(explicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatSimple, 1))),
-    namedtype.OptionalNamedType('i-sname', PrincipalName().subtype(explicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatConstructed, 2))),
-    namedtype.NamedType('elements', AuthorizationData().subtype(explicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatSimple, 3)))
-)
-
-
-class AD_MANDATORY_FOR_KDC(AuthorizationData):
-    pass
-
-
-class EncryptionType(Int32):
-    pass
-
-
-class EncryptedData(univ.Sequence):
-    pass
-
-
-EncryptedData.componentType = namedtype.NamedTypes(
-    namedtype.NamedType('etype', EncryptionType().subtype(explicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatSimple, 0))),
-    namedtype.OptionalNamedType('kvno', Int32().subtype(explicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatSimple, 1))),
-    namedtype.NamedType('cipher', univ.OctetString().subtype(explicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatSimple, 2)))
-)
-
-
-class AP_REP(univ.Sequence):
-    pass
-
-
-AP_REP.tagSet = univ.Sequence.tagSet.tagExplicitly(tag.Tag(tag.tagClassApplication, tag.tagFormatConstructed, 15))
-AP_REP.componentType = namedtype.NamedTypes(
-    namedtype.NamedType('pvno', univ.Integer().subtype(subtypeSpec=constraint.SingleValueConstraint(5)).subtype(explicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatSimple, 0))),
-    namedtype.NamedType('msg-type', univ.Integer().subtype(subtypeSpec=constraint.SingleValueConstraint(15)).subtype(explicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatSimple, 1))),
-    namedtype.NamedType('enc-part', EncryptedData().subtype(explicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatConstructed, 2)))
-)
-
-
-class KerberosFlags(univ.BitString):
-    pass
-
-
-KerberosFlags.subtypeSpec=constraint.ValueSizeConstraint(1, 32)
-
-
-class APOptions(KerberosFlags):
-    pass
-
-
-class Ticket(univ.Sequence):
-    pass
-
-
-Ticket.tagSet = univ.Sequence.tagSet.tagExplicitly(tag.Tag(tag.tagClassApplication, tag.tagFormatConstructed, 1))
-Ticket.componentType = namedtype.NamedTypes(
-    namedtype.NamedType('tkt-vno', univ.Integer().subtype(subtypeSpec=constraint.SingleValueConstraint(5)).subtype(explicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatSimple, 0))),
-    namedtype.NamedType('realm', Realm().subtype(explicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatSimple, 1))),
-    namedtype.NamedType('sname', PrincipalName().subtype(explicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatConstructed, 2))),
-    namedtype.NamedType('enc-part', EncryptedData().subtype(explicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatConstructed, 3)))
-)
-
-
-class AP_REQ(univ.Sequence):
-    pass
-
-
-AP_REQ.tagSet = univ.Sequence.tagSet.tagExplicitly(tag.Tag(tag.tagClassApplication, tag.tagFormatConstructed, 14))
-AP_REQ.componentType = namedtype.NamedTypes(
-    namedtype.NamedType('pvno', univ.Integer().subtype(subtypeSpec=constraint.SingleValueConstraint(5)).subtype(explicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatSimple, 0))),
-    namedtype.NamedType('msg-type', univ.Integer().subtype(subtypeSpec=constraint.SingleValueConstraint(14)).subtype(explicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatSimple, 1))),
-    namedtype.NamedType('ap-options', APOptions().subtype(explicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatSimple, 2))),
-    namedtype.NamedType('ticket', Ticket().subtype(explicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatSimple, 3))),
-    namedtype.NamedType('authenticator', EncryptedData().subtype(explicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatConstructed, 4)))
-)
-
-
-class APOptionsValues(univ.BitString):
-    pass
-
-
-APOptionsValues.namedValues = namedval.NamedValues(
-    ('reserved', 0),
-    ('use-session-key', 1),
-    ('mutual-required', 2)
-)
-
-
-class APOptionsSequence(univ.Sequence):
-    pass
-
-
-APOptionsSequence.componentType = namedtype.NamedTypes(
-    namedtype.NamedType('dummy', APOptionsValues().subtype(explicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatSimple, 0)))
-)
-
-
-class PADataType(Int32):
-    pass
-
-
-class PA_DATA(univ.Sequence):
-    pass
-
-
-PA_DATA.componentType = namedtype.NamedTypes(
-    namedtype.NamedType('padata-type', PADataType().subtype(explicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatSimple, 1))),
-    namedtype.NamedType('padata-value', univ.OctetString().subtype(explicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatSimple, 2)))
-)
-
-
-class KDC_REP(univ.Sequence):
-    pass
-
-
-KDC_REP.componentType = namedtype.NamedTypes(
-    namedtype.NamedType('pvno', univ.Integer().subtype(subtypeSpec=constraint.SingleValueConstraint(5)).subtype(explicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatSimple, 0))),
-    namedtype.NamedType('msg-type', univ.Integer().subtype(subtypeSpec=constraint.SingleValueConstraint(11, 13)).subtype(explicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatSimple, 1))),
-    namedtype.OptionalNamedType('padata', univ.SequenceOf(componentType=PA_DATA()).subtype(explicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatSimple, 2))),
-    namedtype.NamedType('crealm', Realm().subtype(explicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatSimple, 3))),
-    namedtype.NamedType('cname', PrincipalName().subtype(explicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatConstructed, 4))),
-    namedtype.NamedType('ticket', Ticket().subtype(explicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatSimple, 5))),
-    namedtype.NamedType('enc-part', EncryptedData().subtype(explicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatConstructed, 6)))
-)
-
-
-class AS_REP(KDC_REP):
-    pass
-
-
-AS_REP.tagSet = KDC_REP.tagSet.tagExplicitly(tag.Tag(tag.tagClassApplication, tag.tagFormatConstructed, 11))
-
-
-class HostAddress(univ.Sequence):
-    pass
-
-
-HostAddress.componentType = namedtype.NamedTypes(
-    namedtype.NamedType('addr-type', Int32().subtype(explicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatSimple, 0))),
-    namedtype.NamedType('address', univ.OctetString().subtype(explicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatSimple, 1)))
-)
-
-
-class HostAddresses(univ.SequenceOf):
-    pass
-
-
-HostAddresses.componentType = HostAddress()
-
-
-class KDCOptions(KerberosFlags):
-    pass
-
-
-class KerberosTime(useful.GeneralizedTime):
-    pass
-
-
-class UInt32(univ.Integer):
-    pass
-
-
-UInt32.subtypeSpec = constraint.ValueRangeConstraint(0, 4294967295)
-
-
-class KDC_REQ_BODY(univ.Sequence):
-    pass
-
-
-KDC_REQ_BODY.componentType = namedtype.NamedTypes(
-    namedtype.NamedType('kdc-options', KDCOptions().subtype(explicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatSimple, 0))),
-    namedtype.OptionalNamedType('cname', PrincipalName().subtype(explicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatConstructed, 1))),
-    namedtype.NamedType('realm', Realm().subtype(explicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatSimple, 2))),
-    namedtype.OptionalNamedType('sname', PrincipalName().subtype(explicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatConstructed, 3))),
-    namedtype.OptionalNamedType('from', KerberosTime().subtype(explicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatSimple, 4))),
-    namedtype.NamedType('till', KerberosTime().subtype(explicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatSimple, 5))),
-    namedtype.OptionalNamedType('rtime', KerberosTime().subtype(explicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatSimple, 6))),
-    namedtype.NamedType('nonce', UInt32().subtype(explicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatSimple, 7))),
-    namedtype.NamedType('etype', univ.SequenceOf(componentType=EncryptionType()).subtype(explicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatSimple, 8))),
-    namedtype.OptionalNamedType('addresses', HostAddresses().subtype(explicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatSimple, 9))),
-    namedtype.OptionalNamedType('enc-authorization-data', EncryptedData().subtype(explicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatConstructed, 10))),
-    namedtype.OptionalNamedType('additional-tickets', univ.SequenceOf(componentType=Ticket()).subtype(explicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatSimple, 11)))
-)
-
-
-class KDC_REQ(univ.Sequence):
-    pass
-
-
-KDC_REQ.componentType = namedtype.NamedTypes(
-    namedtype.NamedType('pvno', univ.Integer().subtype(subtypeSpec=constraint.SingleValueConstraint(5)).subtype(explicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatSimple, 1))),
-    namedtype.NamedType('msg-type', univ.Integer().subtype(subtypeSpec=constraint.SingleValueConstraint(10, 12)).subtype(explicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatSimple, 2))),
-    namedtype.OptionalNamedType('padata', univ.SequenceOf(componentType=PA_DATA()).subtype(explicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatSimple, 3))),
-    namedtype.NamedType('req-body', KDC_REQ_BODY().subtype(explicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatConstructed, 4)))
-)
-
-
-class AS_REQ(KDC_REQ):
-    pass
-
-
-AS_REQ.tagSet = KDC_REQ.tagSet.tagExplicitly(tag.Tag(tag.tagClassApplication, tag.tagFormatConstructed, 10))
-
-
-ub_domain_name_length = univ.Integer(16)
-
-
-class AdministrationDomainName(univ.Choice):
-    pass
-
-
-AdministrationDomainName.tagSet = univ.Choice.tagSet.tagExplicitly(tag.Tag(tag.tagClassApplication, tag.tagFormatConstructed, 2))
-AdministrationDomainName.componentType = namedtype.NamedTypes(
-    namedtype.NamedType('numeric', char.NumericString().subtype(subtypeSpec=constraint.ValueSizeConstraint(0, ub_domain_name_length))),
-    namedtype.NamedType('printable', char.PrintableString().subtype(subtypeSpec=constraint.ValueSizeConstraint(0, ub_domain_name_length)))
-)
-
-
-class AlgorithmIdentifier(univ.Sequence):
-    pass
-
-
-AlgorithmIdentifier.componentType = namedtype.NamedTypes(
-    namedtype.NamedType('algorithm', univ.ObjectIdentifier()),
-    namedtype.OptionalNamedType('parameters', univ.Any())
-)
-
-
-class DirectoryString(univ.Choice):
-    pass
-
-
-DirectoryString.componentType = namedtype.NamedTypes(
-    namedtype.NamedType('teletexString', char.TeletexString().subtype(subtypeSpec=constraint.ValueSizeConstraint(1, 256))),
-    namedtype.NamedType('printableString', char.PrintableString().subtype(subtypeSpec=constraint.ValueSizeConstraint(1, 256))),
-    namedtype.NamedType('universalString', char.UniversalString().subtype(subtypeSpec=constraint.ValueSizeConstraint(1, 256))),
-    namedtype.NamedType('utf8String', char.UTF8String().subtype(subtypeSpec=constraint.ValueSizeConstraint(1, 256))),
-    namedtype.NamedType('bmpString', char.BMPString().subtype(subtypeSpec=constraint.ValueSizeConstraint(1, 256)))
-)
-
-
-class EDIPartyName(univ.Sequence):
-    pass
-
-
-EDIPartyName.componentType = namedtype.NamedTypes(
-    namedtype.OptionalNamedType('nameAssigner', DirectoryString().subtype(explicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatConstructed, 0))),
-    namedtype.NamedType('partyName', DirectoryString().subtype(explicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatConstructed, 1)))
-)
-
-
-class AttributeType(univ.ObjectIdentifier):
-    pass
-
-
-class AttributeValue(univ.Any):
-    pass
-
-
-class AttributeTypeAndValue(univ.Sequence):
-    pass
-
-
-AttributeTypeAndValue.componentType = namedtype.NamedTypes(
-    namedtype.NamedType('type', AttributeType()),
-    namedtype.NamedType('value', AttributeValue())
-)
-
-
-class RelativeDistinguishedName(univ.SetOf):
-    pass
-
-
-RelativeDistinguishedName.componentType = AttributeTypeAndValue()
-RelativeDistinguishedName.subtypeSpec=constraint.ValueSizeConstraint(1, 256)
-
-
-class RDNSequence(univ.SequenceOf):
-    pass
-
-
-RDNSequence.componentType = RelativeDistinguishedName()
-
-
-class Name(univ.Choice):
-    pass
-
-
-Name.componentType = namedtype.NamedTypes(
-    namedtype.NamedType('rdnSequence', RDNSequence())
-)
-
-
-ub_domain_defined_attribute_type_length = univ.Integer(8)
-
-
-ub_domain_defined_attribute_value_length = univ.Integer(128)
-
-
-class BuiltInDomainDefinedAttribute(univ.Sequence):
-    pass
-
-
-BuiltInDomainDefinedAttribute.componentType = namedtype.NamedTypes(
-    namedtype.NamedType('type', char.PrintableString().subtype(subtypeSpec=constraint.ValueSizeConstraint(1, ub_domain_defined_attribute_type_length))),
-    namedtype.NamedType('value', char.PrintableString().subtype(subtypeSpec=constraint.ValueSizeConstraint(1, ub_domain_defined_attribute_value_length)))
-)
-
-
-ub_domain_defined_attributes = univ.Integer(4)
-
-
-class BuiltInDomainDefinedAttributes(univ.SequenceOf):
-    pass
-
-
-BuiltInDomainDefinedAttributes.componentType = BuiltInDomainDefinedAttribute()
-BuiltInDomainDefinedAttributes.subtypeSpec=constraint.ValueSizeConstraint(1, ub_domain_defined_attributes)
-
-
-ub_country_name_alpha_length = univ.Integer(2)
-
-
-ub_country_name_numeric_length = univ.Integer(3)
-
-
-class CountryName(univ.Choice):
-    pass
-
-
-CountryName.tagSet = univ.Choice.tagSet.tagExplicitly(tag.Tag(tag.tagClassApplication, tag.tagFormatConstructed, 1))
-CountryName.componentType = namedtype.NamedTypes(
-    namedtype.NamedType('x121-dcc-code', char.NumericString().subtype(subtypeSpec=constraint.ValueSizeConstraint(ub_country_name_numeric_length, ub_country_name_numeric_length))),
-    namedtype.NamedType('iso-3166-alpha2-code', char.PrintableString().subtype(subtypeSpec=constraint.ValueSizeConstraint(ub_country_name_alpha_length, ub_country_name_alpha_length)))
-)
-
-
-ub_x121_address_length = univ.Integer(16)
-
-
-class X121Address(char.NumericString):
-    pass
-
-
-X121Address.subtypeSpec = constraint.ValueSizeConstraint(1, ub_x121_address_length)
-
-
-class NetworkAddress(X121Address):
-    pass
-
-
-ub_numeric_user_id_length = univ.Integer(32)
-
-
-class NumericUserIdentifier(char.NumericString):
-    pass
-
-
-NumericUserIdentifier.subtypeSpec = constraint.ValueSizeConstraint(1, ub_numeric_user_id_length)
-
-
-ub_organization_name_length = univ.Integer(64)
-
-
-class OrganizationName(char.PrintableString):
-    pass
-
-
-OrganizationName.subtypeSpec = constraint.ValueSizeConstraint(1, ub_organization_name_length)
-
-
-ub_organizational_unit_name_length = univ.Integer(32)
-
-
-class OrganizationalUnitName(char.PrintableString):
-    pass
-
-
-OrganizationalUnitName.subtypeSpec = constraint.ValueSizeConstraint(1, ub_organizational_unit_name_length)
-
-
-ub_organizational_units = univ.Integer(4)
-
-
-class OrganizationalUnitNames(univ.SequenceOf):
-    pass
-
-
-OrganizationalUnitNames.componentType = OrganizationalUnitName()
-OrganizationalUnitNames.subtypeSpec=constraint.ValueSizeConstraint(1, ub_organizational_units)
-
-
-ub_generation_qualifier_length = univ.Integer(3)
-
-
-ub_given_name_length = univ.Integer(16)
-
-
-ub_initials_length = univ.Integer(5)
-
-
-ub_surname_length = univ.Integer(40)
-
-
-class PersonalName(univ.Set):
-    pass
-
-
-PersonalName.componentType = namedtype.NamedTypes(
-    namedtype.NamedType('surname', char.PrintableString().subtype(subtypeSpec=constraint.ValueSizeConstraint(1, ub_surname_length)).subtype(implicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatSimple, 0))),
-    namedtype.OptionalNamedType('given-name', char.PrintableString().subtype(subtypeSpec=constraint.ValueSizeConstraint(1, ub_given_name_length)).subtype(implicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatSimple, 1))),
-    namedtype.OptionalNamedType('initials', char.PrintableString().subtype(subtypeSpec=constraint.ValueSizeConstraint(1, ub_initials_length)).subtype(implicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatSimple, 2))),
-    namedtype.OptionalNamedType('generation-qualifier', char.PrintableString().subtype(subtypeSpec=constraint.ValueSizeConstraint(1, ub_generation_qualifier_length)).subtype(implicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatSimple, 3)))
-)
-
-
-class PrivateDomainName(univ.Choice):
-    pass
-
-
-PrivateDomainName.componentType = namedtype.NamedTypes(
-    namedtype.NamedType('numeric', char.NumericString().subtype(subtypeSpec=constraint.ValueSizeConstraint(1, ub_domain_name_length))),
-    namedtype.NamedType('printable', char.PrintableString().subtype(subtypeSpec=constraint.ValueSizeConstraint(1, ub_domain_name_length)))
-)
-
-
-ub_terminal_id_length = univ.Integer(24)
-
-
-class TerminalIdentifier(char.PrintableString):
-    pass
-
-
-TerminalIdentifier.subtypeSpec = constraint.ValueSizeConstraint(1, ub_terminal_id_length)
-
-
-class BuiltInStandardAttributes(univ.Sequence):
-    pass
-
-
-BuiltInStandardAttributes.componentType = namedtype.NamedTypes(
-    namedtype.OptionalNamedType('country-name', CountryName()),
-    namedtype.OptionalNamedType('administration-domain-name', AdministrationDomainName()),
-    namedtype.OptionalNamedType('network-address', NetworkAddress().subtype(implicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatSimple, 0))),
-    namedtype.OptionalNamedType('terminal-identifier', TerminalIdentifier().subtype(implicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatSimple, 1))),
-    namedtype.OptionalNamedType('private-domain-name', PrivateDomainName().subtype(explicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatConstructed, 2))),
-    namedtype.OptionalNamedType('organization-name', OrganizationName().subtype(implicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatSimple, 3))),
-    namedtype.OptionalNamedType('numeric-user-identifier', NumericUserIdentifier().subtype(implicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatSimple, 4))),
-    namedtype.OptionalNamedType('personal-name', PersonalName().subtype(implicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatConstructed, 5))),
-    namedtype.OptionalNamedType('organizational-unit-names', OrganizationalUnitNames().subtype(implicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatSimple, 6)))
-)
-
-
-ub_extension_attributes = univ.Integer(256)
-
-
-class ExtensionAttribute(univ.Sequence):
-    pass
-
-
-ExtensionAttribute.componentType = namedtype.NamedTypes(
-    namedtype.NamedType('extension-attribute-type', univ.Integer().subtype(subtypeSpec=constraint.ValueRangeConstraint(0, ub_extension_attributes)).subtype(implicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatSimple, 0))),
-    namedtype.NamedType('extension-attribute-value', univ.Any().subtype(explicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatSimple, 1)))
-)
-
-
-class ExtensionAttributes(univ.SetOf):
-    pass
-
-
-ExtensionAttributes.componentType = ExtensionAttribute()
-ExtensionAttributes.subtypeSpec=constraint.ValueSizeConstraint(1, ub_extension_attributes)
-
-
-class ORAddress(univ.Sequence):
-    pass
-
-
-ORAddress.componentType = namedtype.NamedTypes(
-    namedtype.NamedType('built-in-standard-attributes', BuiltInStandardAttributes()),
-    namedtype.OptionalNamedType('built-in-domain-defined-attributes', BuiltInDomainDefinedAttributes()),
-    namedtype.OptionalNamedType('extension-attributes', ExtensionAttributes())
-)
-
-
-class OtherName(univ.Sequence):
-    pass
-
-
-OtherName.componentType = namedtype.NamedTypes(
-    namedtype.NamedType('type-id', univ.ObjectIdentifier()),
-    namedtype.NamedType('value', univ.Any().subtype(explicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatSimple, 0)))
-)
-
-
-class GeneralName(univ.Choice):
-    pass
-
-
-GeneralName.componentType = namedtype.NamedTypes(
-    namedtype.NamedType('otherName', OtherName().subtype(explicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatConstructed, 0))),
-    namedtype.NamedType('rfc822Name', char.IA5String().subtype(explicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatSimple, 1))),
-    namedtype.NamedType('dNSName', char.IA5String().subtype(explicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatSimple, 2))),
-    namedtype.NamedType('x400Address', ORAddress().subtype(explicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatConstructed, 3))),
-    namedtype.NamedType('directoryName', Name().subtype(explicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatConstructed, 4))),
-    namedtype.NamedType('ediPartyName', EDIPartyName().subtype(explicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatConstructed, 5))),
-    namedtype.NamedType('uniformResourceIdentifier', char.IA5String().subtype(explicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatSimple, 6))),
-    namedtype.NamedType('iPAddress', univ.OctetString().subtype(explicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatSimple, 7))),
-    namedtype.NamedType('registeredID', univ.ObjectIdentifier().subtype(explicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatSimple, 8)))
-)
-
-
-class GeneralNames(univ.SequenceOf):
-    pass
-
-
-GeneralNames.componentType = GeneralName()
-GeneralNames.subtypeSpec=constraint.ValueSizeConstraint(1, 256)
-
-
-class CertificateSerialNumber(univ.Integer):
-    pass
-
-
-class UniqueIdentifier(univ.BitString):
-    pass
-
-
-class IssuerSerial(univ.Sequence):
-    pass
-
-
-IssuerSerial.componentType = namedtype.NamedTypes(
-    namedtype.NamedType('issuer', GeneralNames()),
-    namedtype.NamedType('serial', CertificateSerialNumber()),
-    namedtype.OptionalNamedType('issuerUID', UniqueIdentifier())
-)
-
-
-class ObjectDigestInfo(univ.Sequence):
-    pass
-
-
-ObjectDigestInfo.componentType = namedtype.NamedTypes(
-    namedtype.NamedType('digestedObjectType', univ.Enumerated(namedValues=namedval.NamedValues(('publicKey', 0), ('publicKeyCert', 1), ('otherObjectTypes', 2)))),
-    namedtype.OptionalNamedType('otherObjectTypeID', univ.ObjectIdentifier()),
-    namedtype.NamedType('digestAlgorithm', AlgorithmIdentifier()),
-    namedtype.NamedType('objectDigest', univ.BitString())
-)
-
-
-class V2Form(univ.Sequence):
-    pass
-
-
-V2Form.componentType = namedtype.NamedTypes(
-    namedtype.OptionalNamedType('issuerName', GeneralNames()),
-    namedtype.OptionalNamedType('baseCertificateID', IssuerSerial().subtype(explicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatConstructed, 0))),
-    namedtype.OptionalNamedType('objectDigestInfo', ObjectDigestInfo().subtype(explicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatConstructed, 1)))
-)
-
-
-class AttCertIssuer(univ.Choice):
-    pass
-
-
-AttCertIssuer.componentType = namedtype.NamedTypes(
-    namedtype.NamedType('v1Form', GeneralNames()),
-    namedtype.NamedType('v2Form', V2Form().subtype(explicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatConstructed, 0)))
-)
-
-
-class AttCertValidityPeriod(univ.Sequence):
-    pass
-
-
-AttCertValidityPeriod.componentType = namedtype.NamedTypes(
-    namedtype.NamedType('notBeforeTime', useful.GeneralizedTime()),
-    namedtype.NamedType('notAfterTime', useful.GeneralizedTime())
-)
-
-
-class AttCertVersion(univ.Integer):
-    pass
-
-
-AttCertVersion.namedValues = namedval.NamedValues(
-    ('v2', 1)
-)
-
-
-class AttCertVersionV1(univ.Integer):
-    pass
-
-
-AttCertVersionV1.namedValues = namedval.NamedValues(
-    ('v1', 0)
-)
-
-
-class Attribute(univ.Sequence):
-    pass
-
-
-Attribute.componentType = namedtype.NamedTypes(
-    namedtype.NamedType('type', AttributeType()),
-    namedtype.NamedType('values', univ.SetOf(componentType=AttributeValue()))
-)
-
-
-class Attribute(univ.Sequence):
-    pass
-
-
-Attribute.componentType = namedtype.NamedTypes(
-    namedtype.NamedType('attrType', univ.ObjectIdentifier()),
-    namedtype.NamedType('attrValues', univ.SetOf(componentType=AttributeValue()))
-)
-
-
-class Extension(univ.Sequence):
-    pass
-
-
-Extension.componentType = namedtype.NamedTypes(
-    namedtype.NamedType('extnID', univ.ObjectIdentifier()),
-    namedtype.DefaultedNamedType('critical', univ.Boolean().subtype(value=0)),
-    namedtype.NamedType('extnValue', univ.OctetString())
-)
-
-
-class Extensions(univ.SequenceOf):
-    pass
-
-
-Extensions.componentType = Extension()
-Extensions.subtypeSpec=constraint.ValueSizeConstraint(1, 256)
-
-
-class Holder(univ.Sequence):
-    pass
-
-
-Holder.componentType = namedtype.NamedTypes(
-    namedtype.OptionalNamedType('baseCertificateID', IssuerSerial().subtype(explicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatConstructed, 0))),
-    namedtype.OptionalNamedType('entityName', GeneralNames().subtype(explicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatSimple, 1))),
-    namedtype.OptionalNamedType('objectDigestInfo', ObjectDigestInfo().subtype(explicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatConstructed, 2)))
-)
-
-
-class AttributeCertificateInfo(univ.Sequence):
-    pass
-
-
-AttributeCertificateInfo.componentType = namedtype.NamedTypes(
-    namedtype.NamedType('version', AttCertVersion()),
-    namedtype.NamedType('holder', Holder()),
-    namedtype.NamedType('issuer', AttCertIssuer()),
-    namedtype.NamedType('signature', AlgorithmIdentifier()),
-    namedtype.NamedType('serialNumber', CertificateSerialNumber()),
-    namedtype.NamedType('attrCertValidityPeriod', AttCertValidityPeriod()),
-    namedtype.NamedType('attributes', univ.SequenceOf(componentType=Attribute())),
-    namedtype.OptionalNamedType('issuerUniqueID', UniqueIdentifier()),
-    namedtype.OptionalNamedType('extensions', Extensions())
-)
-
-
-class AttributeCertificate(univ.Sequence):
-    pass
-
-
-AttributeCertificate.componentType = namedtype.NamedTypes(
-    namedtype.NamedType('acinfo', AttributeCertificateInfo()),
-    namedtype.NamedType('signatureAlgorithm', AlgorithmIdentifier()),
-    namedtype.NamedType('signatureValue', univ.BitString())
-)
-
-
-class AttributeCertificateInfoV1(univ.Sequence):
-    pass
-
-
-AttributeCertificateInfoV1.componentType = namedtype.NamedTypes(
-    namedtype.DefaultedNamedType('version', AttCertVersionV1().subtype(value=1)),
-    namedtype.NamedType('subject', univ.Choice(componentType=namedtype.NamedTypes(
-        namedtype.NamedType('baseCertificateID', IssuerSerial().subtype(explicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatConstructed, 0))),
-        namedtype.NamedType('subjectName', GeneralNames().subtype(explicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatSimple, 1)))
-    ))
-    ),
-    namedtype.NamedType('issuer', GeneralNames()),
-    namedtype.NamedType('signature', AlgorithmIdentifier()),
-    namedtype.NamedType('serialNumber', CertificateSerialNumber()),
-    namedtype.NamedType('attCertValidityPeriod', AttCertValidityPeriod()),
-    namedtype.NamedType('attributes', univ.SequenceOf(componentType=Attribute())),
-    namedtype.OptionalNamedType('issuerUniqueID', UniqueIdentifier()),
-    namedtype.OptionalNamedType('extensions', Extensions())
-)
-
-
-class AttributeCertificateV1(univ.Sequence):
-    pass
-
-
-AttributeCertificateV1.componentType = namedtype.NamedTypes(
-    namedtype.NamedType('acInfo', AttributeCertificateInfoV1()),
-    namedtype.NamedType('signatureAlgorithm', AlgorithmIdentifier()),
-    namedtype.NamedType('signature', univ.BitString())
-)
-
-
-class AttributeCertificateV2(AttributeCertificate):
-    pass
-
-
-class AttributeValue(univ.Any):
-    pass
-
-
-class AuthDataTypeValues(univ.Integer):
-    pass
-
-
-AuthDataTypeValues.namedValues = namedval.NamedValues(
-    ('kRB5-AUTHDATA-IF-RELEVANT', 1),
-    ('kRB5-AUTHDATA-INTENDED-FOR-SERVER', 2),
-    ('kRB5-AUTHDATA-INTENDED-FOR-APPLICATION-CLASS', 3),
-    ('kRB5-AUTHDATA-KDC-ISSUED', 4),
-    ('kRB5-AUTHDATA-AND-OR', 5),
-    ('kRB5-AUTHDATA-MANDATORY-TICKET-EXTENSIONS', 6),
-    ('kRB5-AUTHDATA-IN-TICKET-EXTENSIONS', 7),
-    ('kRB5-AUTHDATA-MANDATORY-FOR-KDC', 8),
-    ('kRB5-AUTHDATA-INITIAL-VERIFIED-CAS', 9),
-    ('kRB5-AUTHDATA-OSF-DCE', 64),
-    ('kRB5-AUTHDATA-SESAME', 65),
-    ('kRB5-AUTHDATA-OSF-DCE-PKI-CERTID', 66),
-    ('kRB5-AUTHDATA-WIN2K-PAC', 128),
-    ('kRB5-AUTHDATA-GSS-API-ETYPE-NEGOTIATION', 129),
-    ('kRB5-AUTHDATA-SIGNTICKET-OLDER', -17),
-    ('kRB5-AUTHDATA-SIGNTICKET-OLD', 142),
-    ('kRB5-AUTHDATA-SIGNTICKET', 512)
-)
-
-
-class AuthDataTypeSequence(univ.Sequence):
-    pass
-
-
-AuthDataTypeSequence.componentType = namedtype.NamedTypes(
-    namedtype.NamedType('dummy', AuthDataTypeValues().subtype(explicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatSimple, 0)))
-)
-
-
-class DHNonce(univ.OctetString):
-    pass
-
-
-class PKAuthenticator(univ.Sequence):
-    pass
-
-
-PKAuthenticator.componentType = namedtype.NamedTypes(
-    namedtype.NamedType('cusec', univ.Integer().subtype(subtypeSpec=constraint.ValueRangeConstraint(0, 999999)).subtype(explicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatSimple, 0))),
-    namedtype.NamedType('ctime', KerberosTime().subtype(explicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatSimple, 1))),
-    namedtype.NamedType('nonce', univ.Integer().subtype(subtypeSpec=constraint.ValueRangeConstraint(0, 4294967295)).subtype(explicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatSimple, 2))),
-    namedtype.OptionalNamedType('paChecksum', univ.OctetString().subtype(explicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatSimple, 3))),
-    namedtype.OptionalNamedType('freshnessToken', univ.OctetString().subtype(explicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatSimple, 4)))
-)
-
-
-class SubjectPublicKeyInfo(univ.Sequence):
-    pass
-
-
-SubjectPublicKeyInfo.componentType = namedtype.NamedTypes(
-    namedtype.NamedType('algorithm', AlgorithmIdentifier()),
-    namedtype.NamedType('subjectPublicKey', univ.BitString())
-)
-
-
-class AuthPack(univ.Sequence):
-    pass
-
-
-AuthPack.componentType = namedtype.NamedTypes(
-    namedtype.NamedType('pkAuthenticator', PKAuthenticator().subtype(explicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatConstructed, 0))),
-    namedtype.OptionalNamedType('clientPublicValue', SubjectPublicKeyInfo().subtype(explicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatConstructed, 1))),
-    namedtype.OptionalNamedType('supportedCMSTypes', univ.SequenceOf(componentType=AlgorithmIdentifier()).subtype(explicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatSimple, 2))),
-    namedtype.OptionalNamedType('clientDHNonce', DHNonce().subtype(explicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatSimple, 3)))
-)
-
-
-class PKAuthenticator_Win2k(univ.Sequence):
-    pass
-
-
-PKAuthenticator_Win2k.componentType = namedtype.NamedTypes(
-    namedtype.NamedType('kdcName', PrincipalName().subtype(explicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatConstructed, 0))),
-    namedtype.NamedType('kdcRealm', Realm().subtype(explicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatSimple, 1))),
-    namedtype.NamedType('cusec', univ.Integer().subtype(subtypeSpec=constraint.ValueRangeConstraint(0, 4294967295)).subtype(explicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatSimple, 2))),
-    namedtype.NamedType('ctime', KerberosTime().subtype(explicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatSimple, 3))),
-    namedtype.NamedType('nonce', univ.Integer().subtype(subtypeSpec=constraint.ValueRangeConstraint(-2147483648, 2147483647)).subtype(explicitTag=tag.Tag(tag.tagClassContext, ta