Commit message (Collapse) | Author | Age | Files | Lines | ||
---|---|---|---|---|---|---|
... | ||||||
| * | | add many bindings we'll need to encode a certificate policies extension | Paul Kehrer | 2015-07-26 | 1 | -0/+21 | |
| | | | ||||||
* | | | Merge pull request #2175 from reaperhulk/csr-better-err-msg | Alex Gaynor | 2015-07-25 | 3 | -1/+19 | |
|\ \ \ | |/ / |/| | | handle RSA key too small and consume errors on CSR signature failure | |||||
| * | | openssl error codes are clearly not considered part of the api contract | Paul Kehrer | 2015-07-25 | 1 | -5/+2 | |
| | | | ||||||
| * | | py3 fixin' | Paul Kehrer | 2015-07-25 | 1 | -1/+1 | |
| | | | ||||||
| * | | extra parens | Paul Kehrer | 2015-07-25 | 1 | -5/+3 | |
| | | | ||||||
| * | | == instead of in | Paul Kehrer | 2015-07-25 | 1 | -2/+2 | |
| | | | ||||||
| * | | handle RSA key too small and consume errors on CSR signature failure | Paul Kehrer | 2015-07-25 | 3 | -1/+24 | |
|/ / | ||||||
* | | Merge pull request #2174 from reaperhulk/remove-windows-link-type | Alex Gaynor | 2015-07-24 | 2 | -31/+9 | |
|\ \ | | | | | | | remove windows link type, update docs | |||||
| * | | remove windows link type, update docs | Paul Kehrer | 2015-07-24 | 2 | -31/+9 | |
|/ / | ||||||
* | | Merge pull request #2171 from reaperhulk/refactor-gn-encoding | Alex Gaynor | 2015-07-24 | 1 | -83/+88 | |
|\ \ | | | | | | | refactor general name encoding to its own function | |||||
| * | | refactor general name encoding to its own function | Paul Kehrer | 2015-07-24 | 1 | -83/+88 | |
| | | | ||||||
* | | | Merge pull request #2170 from reaperhulk/crl-encode-bindings | Alex Gaynor | 2015-07-24 | 1 | -0/+8 | |
|\ \ \ | |/ / |/| | | bindings for CRL encoding | |||||
| * | | let's also add the binding to make a new GENERAL_SUBTREE stack | Paul Kehrer | 2015-07-24 | 1 | -0/+1 | |
| | | | ||||||
| * | | bindings for CRL encoding | Paul Kehrer | 2015-07-24 | 1 | -0/+7 | |
|/ / | ||||||
* | | Merge pull request #2169 from reaperhulk/encode-eku | Alex Gaynor | 2015-07-23 | 6 | -2/+59 | |
|\ \ | | | | | | | Support encoding ExtendedKeyUsage into certificate signing requests | |||||
| * | | Support encoding ExtendedKeyUsage into certificate signing requests | Paul Kehrer | 2015-07-23 | 6 | -2/+59 | |
|/ / | ||||||
* | | Merge pull request #2168 from reaperhulk/encode-ku | Alex Gaynor | 2015-07-23 | 5 | -2/+109 | |
|\ \ | | | | | | | Support encoding KeyUsage into certificate signing requests | |||||
| * | | Support encoding KeyUsage into certificate signing requests | Paul Kehrer | 2015-07-23 | 5 | -2/+109 | |
| | | | ||||||
* | | | Merge pull request #2166 from reaperhulk/fix-multi-extension-bug | Alex Gaynor | 2015-07-23 | 2 | -1/+26 | |
|\| | | | | | | | | when building a CSR adding > 1 extension would trigger a bug | |||||
| * | | when building a CSR adding > 1 extension would trigger a bug | Paul Kehrer | 2015-07-23 | 2 | -1/+26 | |
|/ / | | | | | | | | | | | We were checking sk_X509_EXTENSION_push for a value == 1, but in reality it returns the number of extensions on the stack. We now assert >= 1 and added a test. | |||||
| * | Add test coverage for MultiBackend.sign_x509_certificate | Ian Cordasco | 2015-08-02 | 1 | -0/+8 | |
| | | ||||||
| * | Use :doc: instead of :ref: for random-numbers | Ian Cordasco | 2015-08-02 | 2 | -4/+1 | |
| | | ||||||
| * | Add sign_x509_certificate to MultiBackend | Ian Cordasco | 2015-08-02 | 2 | -0/+51 | |
| | | | | | | | | Add example of CertificateBuilder to the reference documentation | |||||
| * | Add note to serial_number parameter about entropy | Ian Cordasco | 2015-08-02 | 4 | -15/+17 | |
| | | | | | | | | | | | | | | | | | | | | - Add reference to random-numbers.rst for easy intra-linking - Document critical parameter of CertificateBuilder.add_extension - Support InhibitAnyPolicy in the CertificateBuilder frontend but not in the backend - Slim down more tests - Fix up test that asserts the backend does not allow for unsupported extensions | |||||
| * | Check for subject alternative name in test | Ian Cordasco | 2015-08-02 | 1 | -5/+18 | |
| | | | | | | | | Slim RSA key too small test | |||||
| * | Update the docs to be more accurate | Ian Cordasco | 2015-08-02 | 1 | -3/+7 | |
| | | ||||||
| * | Add some extra test coverage | Ian Cordasco | 2015-08-01 | 1 | -0/+19 | |
| | | ||||||
| * | Slim tests by removing extra NameAttributes | Ian Cordasco | 2015-08-01 | 1 | -32/+0 | |
| | | ||||||
| * | Minor pep8 and doc fixes | Ian Cordasco | 2015-08-01 | 2 | -3/+3 | |
| | | ||||||
| * | Add _encode_asn1_int_gc | Ian Cordasco | 2015-08-01 | 1 | -1/+7 | |
| | | | | | | | | Ensure the certificate serial number is freed | |||||
| * | Fix up parameter names in the docs | Ian Cordasco | 2015-08-01 | 1 | -4/+4 | |
| | | ||||||
| * | Add check for an RSA Key being too small | Ian Cordasco | 2015-08-01 | 3 | -15/+8 | |
| | | | | | | | | | | - Remove outdated/unnecessary/illegitimate TODOs - Fix up test for an RSA key that is too small | |||||
| * | Document other two parameters from sign method | Ian Cordasco | 2015-07-31 | 2 | -11/+32 | |
| | | | | | | | | | | | | | | - Remove incorrect CertificateBuilder doc-string - Check that serial numbers are non-negative and < 160 bits - Check that dates passed aren't earlier than the unix epoch - Remove version from CertificateBuilder.__init__ and version method | |||||
| * | Add extra CertificateBuilder test using SHA512 and 512-bit RSA key | Ian Cordasco | 2015-07-24 | 1 | -1/+49 | |
| | | ||||||
| * | Check result of setting the serial number | Ian Cordasco | 2015-07-24 | 2 | -2/+140 | |
| | | | | | | | | | | - Add checks for private key types - Add tests around new checks for types of private keys | |||||
| * | Remove CertificateBuilder.version | Ian Cordasco | 2015-07-24 | 4 | -46/+4 | |
| | | | | | | | | Default CertificateBuilder to Version.v3 | |||||
| * | Fix documentation referring to CertificateBuilder.set_version | Ian Cordasco | 2015-07-21 | 1 | -1/+1 | |
| | | ||||||
| * | Add tests to test_openssl backend for extra coverage | Ian Cordasco | 2015-07-20 | 2 | -0/+48 | |
| | | ||||||
| * | Add another extension to our CertificateBuilder test | Ian Cordasco | 2015-07-20 | 1 | -0/+9 | |
| | | ||||||
| * | Use correct exception class in openssl backend | Ian Cordasco | 2015-07-20 | 1 | -1/+1 | |
| | | ||||||
| * | Add test coverage for x509.CertificateBuilder | Ian Cordasco | 2015-07-19 | 1 | -0/+133 | |
| | | ||||||
| * | Remove unnecessary type check | Ian Cordasco | 2015-07-19 | 1 | -2/+0 | |
| | | ||||||
| * | Use explicit keyword args in the tests | Ian Cordasco | 2015-07-19 | 1 | -1/+1 | |
| | | ||||||
| * | Handle SubjectAlternativeName extensions in the backend | Ian Cordasco | 2015-07-19 | 1 | -0/+2 | |
| | | | | | | | | They are handled in cryptography.x509 so they need to be handled here | |||||
| * | Use test fixtures instead of generating private keys | Ian Cordasco | 2015-07-19 | 1 | -10/+2 | |
| | | ||||||
| * | Construct extensions like a CSR | Ian Cordasco | 2015-07-19 | 1 | -6/+9 | |
| | | | | | | | | | | | | - Use _encode_basic_constraints appropriately - Create an appropriate object from the oid dotted string - Create the X509 Extension appropriately | |||||
| * | Fix copy-paste errors | Ian Cordasco | 2015-07-19 | 1 | -3/+3 | |
| | | ||||||
| * | Fix x509.Name creation in CertificateBuilder tests | Ian Cordasco | 2015-07-18 | 1 | -10/+10 | |
| | | ||||||
| * | Remove unnecessary helper functions | Ian Cordasco | 2015-07-18 | 3 | -29/+10 | |
| | | | | | | | | | | - Update documented methods - Do not mute the CertificateBuilder object if no version is set | |||||
| * | Make the CertificateBuilder interface more like the CSRBuilder | Ian Cordasco | 2015-07-18 | 2 | -44/+111 | |
| | |