Commit message (Collapse) | Author | Age | Files | Lines | ||
---|---|---|---|---|---|---|
... | ||||||
* | parametrize a bunch of x509 extension tests that were identical (#3931) | Paul Kehrer | 2017-09-21 | 1 | -377/+139 | |
| | ||||||
* | docs for what bytes means for DNSName, URI, and RFC822Name (#3904) | Paul Kehrer | 2017-09-20 | 2 | -9/+41 | |
| | ||||||
* | add Freshest CRL and Delta CRL Indicator test vectors (#3932) | Paul Kehrer | 2017-09-20 | 3 | -0/+34 | |
| | ||||||
* | Mark our custom sphinx extension as parallel safe (#3935) | Alex Gaynor | 2017-09-20 | 1 | -0/+4 | |
| | ||||||
* | correct the docs for CRLReason (#3930) | Paul Kehrer | 2017-09-20 | 1 | -2/+1 | |
| | ||||||
* | Switch NIST PDFs from nvlpubs to csrc which is HTTPS (#3929) | Alex Gaynor | 2017-09-20 | 5 | -8/+8 | |
| | ||||||
* | disable travis mac builders and add a mac jenkins build (#3933) | Paul Kehrer | 2017-09-20 | 2 | -41/+41 | |
| | | | | we'll re-enable mac builders when travis recovers and remove the jenkins build | |||||
* | Update the rest of the NIST urls to their new HTTPS homes (#3928) | Alex Gaynor | 2017-09-20 | 3 | -4/+4 | |
| | ||||||
* | add unique identifier test vector (#3925) | Paul Kehrer | 2017-09-19 | 2 | -2/+15 | |
| | | | | | | * add unique identifier test vector * wrap a line I didn't even touch... | |||||
* | remove py26 windows and macOS wheels (#3921) | Paul Kehrer | 2017-09-19 | 1 | -5/+3 | |
| | | | The wheel package is starting to drop support and download counts for them represent less than .02% of downloads for the month. | |||||
* | Update PKITS link (#3923) | Alex Gaynor | 2017-09-20 | 1 | -1/+1 | |
| | ||||||
* | Update NIST CAVP url (#3922) | Alex Gaynor | 2017-09-19 | 1 | -1/+1 | |
| | ||||||
* | bump libressl version (#3920) | Alex Gaynor | 2017-09-15 | 1 | -1/+1 | |
| | ||||||
* | add chacha20 test vectors from RFC 7539 (#3918) | Paul Kehrer | 2017-09-14 | 2 | -0/+24 | |
| | ||||||
* | implement __hash__ on DistributionPoint and CRLDistributionPoints (#3915) | Paul Kehrer | 2017-09-13 | 2 | -0/+90 | |
| | ||||||
* | add __hash__ to GeneralNames, SAN, IAN, and CertificateIssuer (#3916) | Paul Kehrer | 2017-09-13 | 2 | -0/+46 | |
| | ||||||
* | add __hash__ to PolicyConstraints and Extension (#3917) | Paul Kehrer | 2017-09-13 | 2 | -0/+34 | |
| | ||||||
* | implement __hash__ on KeyUsage and ExtendedKeyUsage (#3913) | Paul Kehrer | 2017-09-13 | 2 | -0/+60 | |
| | | | | | | * implement __hash__ on KeyUsage and ExtendedKeyUsage * properly use private values and alter test to catch that bug | |||||
* | implement __hash__ on CertificatePolicies and its child classes (#3914) | Paul Kehrer | 2017-09-13 | 2 | -0/+62 | |
| | ||||||
* | add aki hash (#3910) | Paul Kehrer | 2017-09-13 | 2 | -1/+19 | |
| | | | | | | | | | | * Implement __hash__ on AuthorityKeyIdentifier * Adding dirname to fix build issue on AuthorityKeyIdentifier test * .authority_cert_issuer to str * use a tuple and not a str repr | |||||
* | name constraints __hash__ (#3912) | Paul Kehrer | 2017-09-13 | 2 | -0/+34 | |
| | ||||||
* | AIA hashing (#3911) | Paul Kehrer | 2017-09-13 | 2 | -0/+37 | |
| | ||||||
* | remove u-label conversion during general name decode (#3905) | Paul Kehrer | 2017-09-13 | 1 | -49/+4 | |
| | | | | We support directly passing bytes now and these code paths are duplicated in the deprecated value attributes. | |||||
* | fix a bug with URI value when parsing a string with no hostname (#3909) | Paul Kehrer | 2017-09-13 | 3 | -6/+9 | |
| | | | | | strings of the form "scheme:///anything" would incorrectly have two slashes dropped. This is fixed in two code paths in this PR but one of those code paths will be entirely removed in a followup PR. | |||||
* | implement __hash__ on all GeneralName types (#3907) | Paul Kehrer | 2017-09-13 | 2 | -2/+58 | |
| | | | Needed to implement __hash__ on AuthorityKeyIdentifier | |||||
* | coverage pin test part deux (#3908) | Paul Kehrer | 2017-09-12 | 3 | -1/+6 | |
| | | | | | | * we pinned coverage for xml generation...let's try everywhere * add so many comments | |||||
* | compare against bytes values, not the U-label decoded ones (#3906) | Paul Kehrer | 2017-09-12 | 2 | -2/+7 | |
| | | | | We need to add one small test to cover a case that is no longer covered with this switch. | |||||
* | add a faq note about having a compiler that is too old (#3902) | Paul Kehrer | 2017-09-11 | 1 | -0/+9 | |
| | | | | | | | | | * add a faq note about having a compiler that is too old Also add a bit of text explaining what to do on OpenBSD 6.1 and earlier since that is the most likely place this will occur. * I always forget it spell checks titles | |||||
* | refactor AES keywrap into a wrap core and unwrap core (#3901) | Paul Kehrer | 2017-09-11 | 1 | -23/+30 | |
| | | | | | | | | * refactor AES keywrap into a wrap core and unwrap core This refactor makes adding AES keywrap with padding much simpler. * remove an unneeded arg | |||||
* | [WIP] add support for the TLSFeature extension in x509 (#3899) | Paul Kehrer | 2017-09-10 | 9 | -10/+258 | |
| | | | | | | | | | | | | | | | | | | * add support for the TLSFeature extension in x509 This extension is used for OCSP Must-Staple. * fix changelog link * pep8 * refactor to support the sequence properly and add status_request_v2 * update some language * add test vector, implement eq/ne/hash on TLSFeature * address review comments | |||||
* | RSA OAEP label support for OpenSSL 1.0.2+ (#3897) | Paul Kehrer | 2017-09-08 | 5 | -18/+153 | |
| | | | | | | | | | | * RSA OAEP label support for OpenSSL 1.0.2+ * changelog * move around tests, address review feedback, use backend supported method * unsupported padding catches this now | |||||
* | add X509 test vector with a TLS Feature (RFC 7633) extension (#3898) | Paul Kehrer | 2017-09-08 | 2 | -0/+36 | |
| | ||||||
* | oaep label vector (#3895) | Paul Kehrer | 2017-09-07 | 2 | -0/+10 | |
| | | | | | | | | | | * oaep label vector * add count so we can use the nist vector loader * add RSA key from the boring vectors as well https://boringssl.googlesource.com/boringssl/+/ce3773f9fe25c3b54390bc51d72572f251c7d7e6/crypto/evp/evp_tests.txt#8 | |||||
* | add initial OCSP request test vector (#3890) | Paul Kehrer | 2017-09-07 | 2 | -0/+5 | |
| | ||||||
* | add set0_rsa_oaep_label binding (#3894) | Paul Kehrer | 2017-09-07 | 2 | -0/+17 | |
| | ||||||
* | move x509 tests into a module (#3889) | Paul Kehrer | 2017-09-06 | 6 | -12/+12 | |
| | | | | | | | | | | | * move x509 tests into a module This is just to make grouping things like test_ocsp, etc a bit simpler in the future * fix path * pep8 | |||||
* | add OCSP binding for obtaining information from CertID structure (#3888) | Paul Kehrer | 2017-09-06 | 1 | -0/+2 | |
| | | | | | | * add OCSP binding for obtaining information from CertID structure * empty commit | |||||
* | send a few more variables to distinguish our jobs in codecov (#3892) | Paul Kehrer | 2017-09-06 | 1 | -3/+3 | |
| | | | | | | * send a few more variables to distinguish our jobs in codecov * put the labels in the right places | |||||
* | added binding support for rfc 5705 (#3878) | Kelby Ludwig | 2017-08-29 | 1 | -0/+2 | |
| | | | | | | | | | | | | | | * added binding support for rfc 5705 * WIP: testing some cffi updates * added openssl version check * updated cffi defs to align with pep8 * removed superfluous version checks * remove more unecessary boilerplate | |||||
* | Switch to using the other style of environment markers (#3796) | Alex Gaynor | 2017-08-24 | 2 | -11/+9 | |
| | | | | | | | | * Switch to using the other style of environment markers * We don't do py3.3 any more! * changelog | |||||
* | Document that we care about our infrastructure's security as well (#3874) | Alex Gaynor | 2017-08-24 | 1 | -0/+8 | |
| | ||||||
* | add blake2b/blake2s support for hmac (#3873) | Paul Kehrer | 2017-08-22 | 3 | -5/+35 | |
| | | | | | | | | | | * add blake2b/blake2s support for hmac This was a bug, but it turns out the noise protocol suggests using the HMAC construction with BLAKE2 (rather than BLAKE2's own keyed functionality) for a few reasons, so we should support it. * actually test the thing | |||||
* | Remove branches for 1.0.2 betas. (#3870) | Alex Gaynor | 2017-08-20 | 3 | -8/+6 | |
| | | | There's no sense in which we actually support them | |||||
* | Fix `load_rsa_public_numbers` documentation (#3871) | David Sanders | 2017-08-20 | 1 | -1/+1 | |
| | ||||||
* | Fix mistake in `RSAPublicKey.verify` documentation (#3872) | David Sanders | 2017-08-20 | 1 | -1/+1 | |
| | ||||||
* | add test vector with invalid basicconstraints (#3866) | Paul Kehrer | 2017-08-15 | 3 | -0/+38 | |
| | | | | | | * add test vector with invalid basicconstraints * sigh | |||||
* | Get our travis from pypy (#3865) | Alex Gaynor | 2017-08-14 | 3 | -15/+14 | |
| | | | | | | * Get our travis from pypy * doh | |||||
* | add changelog and a warning for is_signature_valid on crl (#3861) | Paul Kehrer | 2017-08-12 | 2 | -0/+8 | |
| | | | | | | * add changelog and a warning * document this properly | |||||
* | Add is_signature_valid method on CertificateRevocationList (#3849) | Vincent Pelletier | 2017-08-12 | 7 | -0/+130 | |
| | ||||||
* | bump pytest version (#3860) | Alex Gaynor | 2017-08-10 | 1 | -1/+1 | |
| |