Properly add AKID to issued child certificates

[pygost.git] / pygost / asn1schemas / x509.py

diff --git a/pygost/asn1schemas/x509.py b/pygost/asn1schemas/x509.py
index 29a0a601eb285cc25a07dd6f0c1b171d202e372e..cda11da42dcb4d1a8daff65bb054b9c6d02108f4 100644 (file)
--- a/pygost/asn1schemas/x509.py
+++ b/pygost/asn1schemas/x509.py
@@ -215,23 +215,34 @@ class CertificateList(Sequence):
 
 class GeneralName(Choice):
     schema = (
-        # ('otherName', AnotherName(impl=tag_ctxc(0))),
-        # ('rfc822Name', IA5String(impl=tag_ctxp(1))),
-        ('dNSName', IA5String(impl=tag_ctxp(2))),
-        # ('x400Address', ORAddress(impl=tag_ctxp(3))),
-        # ('x400Address', OctetString(impl=tag_ctxp(3))),
-        # ('directoryName', Name(expl=tag_ctxc(4))),
-        # ('ediPartyName', EDIPartyName(impl=tag_ctxc(5))),
-        # ('uniformResourceIdentifier', IA5String(impl=tag_ctxp(6))),
-        # ('iPAddress', OctetString(impl=tag_ctxp(7))),
-        # ('registeredID', ObjectIdentifier(impl=tag_ctxp(8))),
+        # ("otherName", AnotherName(impl=tag_ctxc(0))),
+        # ("rfc822Name", IA5String(impl=tag_ctxp(1))),
+        ("dNSName", IA5String(impl=tag_ctxp(2))),
+        # ("x400Address", ORAddress(impl=tag_ctxp(3))),
+        # ("x400Address", OctetString(impl=tag_ctxp(3))),
+        # ("directoryName", Name(expl=tag_ctxc(4))),
+        # ("ediPartyName", EDIPartyName(impl=tag_ctxc(5))),
+        # ("uniformResourceIdentifier", IA5String(impl=tag_ctxp(6))),
+        # ("iPAddress", OctetString(impl=tag_ctxp(7))),
+        # ("registeredID", ObjectIdentifier(impl=tag_ctxp(8))),
     )
 
 
 class GeneralNames(SequenceOf):
     schema = GeneralName()
-    bounds = (1, float('+inf'))
+    bounds = (1, float("+inf"))
 
 
 class SubjectAltName(GeneralNames):
     pass
+
+
+class AuthorityKeyIdentifier(Sequence):
+    schema = (
+        ("keyIdentifier", KeyIdentifier(impl=tag_ctxp(0), optional=True)),
+        # ("authorityCertIssuer", GeneralNames(impl=tag_ctxc(1), optional=True)),
+        # (
+        #     "authorityCertSerialNumber",
+        #     CertificateSerialNumber(impl=tag_ctxp(2), optional=True),
+        # ),
+    )