aboutsummaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
...
* when you :%s/\:/=/g sometimes there's a colon you shouldn't have touched (#3678)Paul Kehrer2017-06-041-1/+1
|
* Change the link to appease linkcheck (#3677)Alex Gaynor2017-06-041-1/+1
|
* fix symmetric encryption interfaces heading (#3676)Paul Kehrer2017-06-041-1/+1
|
* document invalidtag (#3675)Paul Kehrer2017-06-041-0/+11
| | | | | | * document invalidtag * move invalidtag
* add ChaCha20Poly1305 test vectors from OpenSSL/RFC7539 (#3673)Paul Kehrer2017-06-043-0/+579
| | | | | | | | * add ChaCha20Poly1305 test vectors from OpenSSL/RFC7539 * add the boringssl tests as well * highlight the lines
* typo fix (#3674)Alex Gaynor2017-06-041-1/+1
|
* Remove a line from "Why do we exist" (#3672)Alex Gaynor2017-06-041-1/+0
| | | I have no idea what this meant
* Refs #3646 -- include stdout in the output when spawning a process fails in ↵Alex Gaynor2017-06-041-1/+6
| | | | the release script (#3671)
* Refs #3461 -- parse SCTs from x.509 extension (#3480)Alex Gaynor2017-06-048-6/+173
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * Stub API for SCTs, feedback wanted * grr, flake8 * finish up the __init__ * Initial implementation and tests * write a test. it fails because computer * get the tests passing and fix some TODOs * changelog entry * This can go now * Put a skip in this test * grump * Removed unreachable code * moved changelog to the correct section * Use the deocrator for expressing requirements * This needs f for the right entry_type * coverage * syntax error * tests for coverage * better sct eq tests * docs * technically correct, the most useless kind of correct * typo and more details * bug * drop __eq__
* Fixes #2347 -- link to the stdlib secrets module in our random number ↵Alex Gaynor2017-06-041-0/+5
| | | | generation section (#3669)
* deprecate signer/verifier on asymmetric keys (#3663)Paul Kehrer2017-06-0313-210/+160
| | | | | | * deprecate signer/verifier on asymmetric keys * review feedback, switch deprecated_call to work around a bug
* call check_backend_support directly from backend fixture (#3666)Alex Gaynor2017-06-033-40/+15
|
* Switched our backend to be a normal fixture in tests (#3665)Alex Gaynor2017-06-033-39/+17
|
* revert codecov.yml workaround and pin coverage to 4.3.4 (#3662)Paul Kehrer2017-06-033-12/+4
| | | | | | | | * Revert "Attempted workaround for intermittent coverage issues (#3661)" This reverts commit 84a634c1e7645970382a3a271dfae9ef95685e7a. * pin coverage to 4.3.4
* Attempted workaround for intermittent coverage issues (#3661)Alex Gaynor2017-06-031-0/+9
| | | The root cause is https://bitbucket.org/ned/coveragepy/issues/578/incomplete-file-path-in-xml-report
* Fixes #3653 -- attempt to retry git clones up to 3 times (#3660)Alex Gaynor2017-06-031-28/+30
|
* make signature and verification contexts error better re: prehashed (#3658)Paul Kehrer2017-06-028-3/+86
| | | | | | * make signature and verification contexts error better re: prehashed * code review feedback
* Simplify git clones in Jenkinsfile (#3654)Alex Gaynor2017-06-011-4/+4
|
* FreeBSD 10 and higher use Fortuna, not Yarrow (#3652)Jeroen Ruigrok van der Werven2017-06-011-2/+4
|
* runtime detection of getentropy for macOS via weak-linking (#3650)Paul Kehrer2017-05-303-23/+56
| | | | | | | | | | | | | | | | | | | | | | | | | * runtime detection of getentropy for macOS via weak-linking In the before time, in the long long ago, there was a desire to use getentropy on macOS. So some code was written and it detected getentropy support by seeing if SYS_getentropy was available in the headers. But lo, it turns out Apple ships headers for different SDK versions and users on < 10.12 were getting headers that had SYS_getentropy even though their OS did not support it. There was much wailing and gnashing of teeth, but the frustrated developers remembered that Apple wants their developers to use weak linking. With weak linking the mighty developer can specify a minimum version and any symbol that was added after that version will be weakly linked. Then, at runtime, the dynamic linker will make unavailable symbols thus marked into NULLs. So, the developer need only alter their code to do runtime detection of weakly linked symbols and then a single binary may be compiled that will correctly select getentropy or /dev/urandom at runtime. Hallelujah! * oops * separate the enum * okay just apple
* move files to make the next PR easier to read (#3651)Paul Kehrer2017-05-301-43/+43
|
* Remove a binding that hasn't been used for a while (#3643)Alex Gaynor2017-05-301-7/+0
|
* for humans is irritating, let's stop saying it (#3647)Paul Kehrer2017-05-301-2/+2
|
* download artifacts from new jenkins (#3645)Paul Kehrer2017-05-291-42/+27
| | | turns out new jenkins changed its JSON a bit.
* Post release tasks to open master for 2.0 (#3644)Alex Gaynor2017-05-294-3/+8
|
* 1.9 version bump and changelog (#3641)Paul Kehrer2017-05-293-6/+4
|
* update to new CI server for wheels + switch to using a job token (#3638)Paul Kehrer2017-05-291-6/+6
| | | | | | * update to new CI server for wheels + switch to using a job token * avoid slash folding
* update the docs with new jenkins CI URL & mac openssl upgrade process (#3639)Paul Kehrer2017-05-292-3/+2
|
* reorder the primitives list and improve a few titles (#3640)Paul Kehrer2017-05-293-9/+9
|
* add a jenkinsfile for building wheels (#3636)Paul Kehrer2017-05-293-127/+127
| | | | | | | | | | * add a jenkinsfile for building wheels * remove scripts we don't need now * still do the list of installed items on the mac builder * build 2.6, don't bother with 2.7 ucs4 on mac, simplify batch
* Enlarge _oid2txt buffer to handle larger OIDs (#3612)Fraser Tweedale2017-05-294-0/+70
| | | | | | | | | The OpenSSL manual recommends a buffer size of 80 for OBJ_oid2txt: https://www.openssl.org/docs/crypto/OBJ_nid2ln.html#return_values. But OIDs longer than this occur in real life (e.g. Active Directory makes some very long OIDs). If the length of the stringified OID exceeds the buffer size, allocate a new buffer that is big enough to hold the stringified OID, and re-do the conversion into the new buffer.
* move MACContext to mac.py and eliminate interfaces.py (#3631)Paul Kehrer2017-05-2914-106/+89
| | | | | | | | | | | | | * move MACContext to mac.py and eliminate interfaces.py finally * improve title * re-add and deprecate interfaces.MACContext * use pytest.warns instead of deprecated_call The pytest docs insist that deprecation warnings are handled differently and that you should use deprecated_call, but this works so okay then
* add a jenkinsfile for updating homebrew openssl on jenkins builders (#3630)Paul Kehrer2017-05-291-0/+35
|
* reorganize our toc to look nicer and make more sense (#3632)Paul Kehrer2017-05-291-5/+5
|
* Ignore linkcheck errors from cryptrec (#3629)Alex Gaynor2017-05-281-0/+5
|
* Simplify int to hex string conversion (#3628)Alex Gaynor2017-05-281-3/+3
|
* add windows OpenSSL 1.1 jenkinsfile builder (#3624)Paul Kehrer2017-05-281-0/+86
| | | | | | | | | | | | | * add windows OpenSSL 1.1 jenkinsfile builder I tested this before submitting. You can see the output here: https://ci.cryptography.io/blue/organizations/jenkins/openssl-release-1.1/detail/openssl-release-1.1/8/pipeline Once this merges we can switch the jenkins job to pull this directly from the repository. Unfortunately the job does not get created automatically in jenkins, so that's a new step in building our infra * add comments
* Sphinx 1.6.2 is also broken (#3627)Alex Gaynor2017-05-281-1/+1
|
* Improve accuracy of install docs page (#3626)Paul Kehrer2017-05-271-5/+5
| | | | | | * Improve accuracy of install docs page * fix line length
* Typo fix (#3625)Paul Kehrer2017-05-271-1/+1
|
* strongly encourage the use of fernet, document its limitation (#3623)Paul Kehrer2017-05-272-0/+10
|
* Modify DH/ECDH examples to be explicit for DHE/ECDHE (#3622)Paul Kehrer2017-05-272-3/+32
| | | | | | | | * Modify DH/ECDH examples to be explicit for DHE/ECDHE Also add note to DH docs that you should probably use ECDH * give a reason
* re-add the why of cryptography to the faq with some small updates (#3621)Paul Kehrer2017-05-271-0/+19
| | | | | | * re-add the why of cryptography to the faq with some small updates * reorder the items a bit
* Remove unused line from mac wheel builder (#3619)Alex Gaynor2017-05-261-1/+0
|
* port 1.8.2 changelog to master (#3616)Paul Kehrer2017-05-261-1/+5
| | | | | | * port 1.8.2 changelog to master * we did this in 1.8.2
* fix libressl error/refactor some error handling (#3609)Paul Kehrer2017-05-267-59/+67
| | | | | | | | | | | | | | | | | | | | | | | * add libre so I can see the error * add the libre error needed and refactor error handling a bit We were historically matching on lib + func + reason, but func is somewhat unstable so now we match on lib + reason only. Of course, in this case libressl changed both lib and reason so it wouldn't have mattered. All error handling from the error queue in openssl is an illusion * fix a typo, probably an unneeded branch * review feedback * refactor tests to support libressl insert additional rant about libre here, although admittedly these tests were assuming stability where openssl itself guarantees none * better assert, fix flake8
* Document when OpenSSL changed its default (#3611)Alex Gaynor2017-05-251-1/+1
| | | | | | | | | | * Figure out when this came into existance by deleting it * Revert "Figure out when this came into existance by deleting it" This reverts commit 2fb9b8e104742bfa12eb5feedccebacfc23c66bb. * Clearly document when this became true
* jurisdictionCountryName also must be PrintableString (#3516)Alex Gaynor2017-05-253-3/+22
| | | | | | | | | | | | | | * jurisdictionCountryName also must be PrintableString * flake8 + citation * Write a test, which fails. If my analysis is correct, this is blocked on: https://github.com/openssl/openssl/pull/3284 * This is only true on 1.1.0 * clearly express the version requirement
* only build master and our release branches (#3601)Paul Kehrer2017-05-251-0/+8
| | | | | | | | | | | | | | | | * only build master and our release branches * review feedback * also build the tags tags are of form `digit . digit` or `digit . digit . digit` * alex is right * that should match 0-1 times, not 0-infinity * so much regex
* 1.1.0f for the next release (#3599)Paul Kehrer2017-05-251-0/+1
|
generated by cgit v1.2.3 (git 2.25.1) at 2025-04-08 18:36:53 +0000