aboutsummaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
* dead codeGlyph2015-06-271-1/+0
|
* consistency about underscores and prefixesGlyph2015-06-271-6/+6
|
* space before starGlyph2015-06-271-3/+3
|
* nothing pseudo about itGlyph2015-06-271-11/+2
|
* handle previous registration by raising RuntimeErrorGlyph2015-06-272-5/+3
|
* unnecessary belt-and-suspenders error checkingGlyph2015-06-271-2/+0
|
* coding standardGlyph2015-06-271-1/+2
|
* clear the error queueGlyph2015-06-271-0/+4
| | | | | | | make sure we're not in an error state when we start, because then all bets are off and we might consume an error we didn't cause. then clear the error queue, which restores the behavior of the way the C module was previously checking for existence of its engine.
* bind ERR_clear_errorGlyph2015-06-271-0/+1
|
* also retain method with a global referenceGlyph2015-06-271-5/+7
|
* move everything to module scope; much simpler that wayGlyph2015-06-271-67/+58
|
* don't need the intermediary 'struct' declaration.Glyph2015-06-271-10/+8
|
* comply with C coding standard, for which there is no linterGlyph2015-06-262-9/+9
|
* lintGlyph2015-06-261-0/+1
|
* pointer shenanigansGlyph2015-06-262-11/+11
| | | | | | | | apparently (?) ENGINE_by_id treats its ID as an opaque *pointer* key and not actually as a string, and while CPython's CFFI support seems to manage to preserve the pointer identity when using the same Python string, PyPy doesn't. Fix things to use a cffi-wrapped pointer again and tests pass on PyPy.
* remove remaining vestiges, make adding twice workGlyph2015-06-267-212/+4
|
* python implementationGlyph2015-06-261-1/+65
|
* use new constantGlyph2015-06-261-1/+1
|
* compare contents and not pointersGlyph2015-06-261-9/+12
|
* a place for a couple of new constants to liveGlyph2015-06-261-0/+2
|
* deopaque a couple of thingsGlyph2015-06-261-2/+11
|
* Merge pull request #2069 from alex/param-orderingPaul Kehrer2015-06-263-20/+10
|\ | | | | Make the parameter ordering in sign() consistent with other code
| * fix this testAlex Gaynor2015-06-261-1/+1
| |
| * Merge branch 'master' into param-orderingAlex Gaynor2015-06-262-3/+35
| |\
| * | fixed docsAlex Gaynor2015-06-261-1/+1
| | |
| * | Make the parameter ordering in sign() consistent with other codeAlex Gaynor2015-06-263-18/+8
| | |
* | | Merge pull request #2068 from reaperhulk/wildcard-idna-san-vectorAlex Gaynor2015-06-262-0/+21
|\ \ \ | |_|/ |/| | add wildcard IDNA SAN
| * | add wildcard IDNA SANPaul Kehrer2015-06-262-0/+21
| |/
* | Merge pull request #2066 from reaperhulk/csr-builder-set-subjectAlex Gaynor2015-06-262-3/+35
|\ \ | |/ |/| fix coverage in CSR builder
| * test notimplementederror for unsupported csr extensions in backendsPaul Kehrer2015-06-262-0/+18
| |
| * add test for CSR builder setting subject twicePaul Kehrer2015-06-261-3/+17
|/
* Merge pull request #2064 from reaperhulk/simplify-x509Alex Gaynor2015-06-261-40/+0
|\ | | | | simplify x509 csr builder tests
| * simplify x509 csr builder testsPaul Kehrer2015-06-261-40/+0
| |
* | Merge pull request #2063 from reaperhulk/improve-backend-docsAlex Gaynor2015-06-261-0/+31
|\ \ | |/ |/| Improve backend interface docs
| * add two missing methods to backend interface docsPaul Kehrer2015-06-261-0/+31
|/
* Merge pull request #2045 from sigmavirus24/csr-builderPaul Kehrer2015-06-269-3/+543
|\ | | | | Adds CSR Builder (Redux of #1927)
| * Use SECP256R1 instead of SECT283K1 in CSR testsIan Cordasco2015-06-242-4/+4
| |
| * Add test for unicode attributes in CSRsIan Cordasco2015-06-241-0/+32
| | | | | | | | | | This creates a CSR, converts it to bytes, and then loads it again to ensure that the unicode strings are parsed properly.
| * Skip tests when the EC curve is unsupportedIan Cordasco2015-06-242-0/+3
| |
| * Use utf8 to encode attribute values instead of asciiIan Cordasco2015-06-241-2/+2
| |
| * Add tests to the CSR Builder for EC and DSA keysIan Cordasco2015-06-243-5/+120
| | | | | | | | | | | | This skips certain tests on certain versions of differences in how X509_REQ_sign works on those versions. A separate pull request will address those differences.
| * Simplify test for unsupported extensionsIan Cordasco2015-06-241-9/+1
| |
| * Address review comments around add_extension methodIan Cordasco2015-06-243-6/+8
| | | | | | | | | | | | | | | | | | - Fix typo in the docs (s/buidlder/builder/) - Remove default from the method declaration and docs - Replace ValueError with NotImpelementedError for unsupported X.509 extensions - Add TODO comment as requested by Alex - Fix test to pass critical=False since it no longer is a default value
| * Only allow subject_name to be set once on a BuilderIan Cordasco2015-06-241-0/+2
| |
| * Unconditionally encode values to asciiIan Cordasco2015-06-241-5/+2
| |
| * Properly use RSA fixtures to generate private keysIan Cordasco2015-06-242-5/+11
| |
| * Update registering pp with ffi.gcIan Cordasco2015-06-241-4/+3
| | | | | | | | | | This makes it more in-line with existing functions, e.g., L40-L47 of src/cryptography/hazmat/backends/openssl/x509.py @ b0e8ffa
| * Update CSR tests and implementationIan Cordasco2015-06-243-23/+8
| | | | | | | | | | | | | | | | | | | | - Use keyword arguments for x509.BasicConstraints in tests (missed in b790edbdc8fb9a026353d6fb99994326197705c7). - Place X509_request garbage collection under assertion. - Assert that X509 extensions created are not null. - Don't copy the extensions list in CertificateSigningBuilder. They're never appended to, so copying isn't necessary. - Use RSA key fixtures instead of generating new ones on each test run
| * Fix new tests to pass text value to NameAttributeIan Cordasco2015-06-241-20/+20
| |
| * Address code review regarding style and gcIan Cordasco2015-06-243-20/+17
| | | | | | | | | | | | | | | | | | - Use keyword arguments for x509.BasicConstraints in several places - Use SHA256 instead of SHA1 in documented examples - Give function variables meaningful names in _encode_asn1_str - Accept a x509.BasicConstraints object in _encode_basic_constraints - Properly garbage-collect some things - Raise a NotImplementedError instead of a ValueError