commit 54024493bd50ea6f27aa094dce2d0ddac43221f0
author Paul Kehrer <paul.l.kehrer@gmail.com> Thu Sep 14 01:55:31 2017 +0800
committer Alex Gaynor <alex.gaynor@gmail.com> Wed Sep 13 13:55:31 2017 -0400
tree 2cb83e82fc20a7884ef9219233762d1cad467231
parent 89aaecb518ced08d8e244583e75a8c3fb600758e

AIA hashing (#3911)

src/cryptography/x509/extensions.py

diff --git a/src/cryptography/x509/extensions.py b/src/cryptography/x509/extensions.py
index 9eff343..44d5be9 100644
--- a/src/cryptography/x509/extensions.py
+++ b/src/cryptography/x509/extensions.py
@@ -284,6 +284,9 @@
     def __getitem__(self, idx):
         return self._descriptions[idx]
 
+    def __hash__(self):
+        return hash(tuple(self._descriptions))
+
 
 class AccessDescription(object):
     def __init__(self, access_method, access_location):

tests/x509/test_x509_ext.py

diff --git a/tests/x509/test_x509_ext.py b/tests/x509/test_x509_ext.py
index 929a938..808b368 100644
--- a/tests/x509/test_x509_ext.py
+++ b/tests/x509/test_x509_ext.py
@@ -2749,6 +2749,40 @@
         assert aia[-1] == aia[4]
         assert aia[2:6:2] == [aia[2], aia[4]]
 
+    def test_hash(self):
+        aia = x509.AuthorityInformationAccess([
+            x509.AccessDescription(
+                AuthorityInformationAccessOID.OCSP,
+                x509.UniformResourceIdentifier(b"http://ocsp.domain.com")
+            ),
+            x509.AccessDescription(
+                AuthorityInformationAccessOID.CA_ISSUERS,
+                x509.UniformResourceIdentifier(b"http://domain.com/ca.crt")
+            )
+        ])
+        aia2 = x509.AuthorityInformationAccess([
+            x509.AccessDescription(
+                AuthorityInformationAccessOID.OCSP,
+                x509.UniformResourceIdentifier(b"http://ocsp.domain.com")
+            ),
+            x509.AccessDescription(
+                AuthorityInformationAccessOID.CA_ISSUERS,
+                x509.UniformResourceIdentifier(b"http://domain.com/ca.crt")
+            )
+        ])
+        aia3 = x509.AuthorityInformationAccess([
+            x509.AccessDescription(
+                AuthorityInformationAccessOID.OCSP,
+                x509.UniformResourceIdentifier(b"http://ocsp.other.com")
+            ),
+            x509.AccessDescription(
+                AuthorityInformationAccessOID.CA_ISSUERS,
+                x509.UniformResourceIdentifier(b"http://domain.com/ca.crt")
+            )
+        ])
+        assert hash(aia) == hash(aia2)
+        assert hash(aia) != hash(aia3)
+
 
 @pytest.mark.requires_backend_interface(interface=RSABackend)
 @pytest.mark.requires_backend_interface(interface=X509Backend)