Commit message (Collapse) | Author | Age | Files | Lines | ||
---|---|---|---|---|---|---|
... | ||||||
| * | | | | these bio types no longer exist in 1.1.0 | Paul Kehrer | 2016-03-13 | 1 | -2/+0 | |
| |/ / / | | | | | | | | | | | | | and...you guessed it, we don't use them and neither does pyOpenSSL | |||||
* | | | | Merge pull request #2821 from reaperhulk/encode-policy-constraints | Alex Gaynor | 2016-03-13 | 3 | -2/+70 | |
|\ \ \ \ | |/ / / |/| | | | support encoding PolicyConstraints in certificates | |||||
| * | | | wrong assert | Paul Kehrer | 2016-03-13 | 1 | -1/+1 | |
| | | | | ||||||
| * | | | update changelog | Paul Kehrer | 2016-03-13 | 1 | -2/+4 | |
| | | | | ||||||
| * | | | support PolicyConstraints in the CertificateBuilder | Paul Kehrer | 2016-03-13 | 2 | -0/+66 | |
|/ / / | ||||||
* | | | Merge pull request #2809 from reaperhulk/110-patch-28 | Alex Gaynor | 2016-03-13 | 2 | -10/+82 | |
|\ \ \ | | | | | | | | | add 5 accessor functions that exist in 1.1.0 to help opaque x509 structs | |||||
| * | | | remove pointless comments | Paul Kehrer | 2016-03-13 | 1 | -8/+0 | |
| | | | | ||||||
| * | | | add 5 accessor functions that exist in 1.1.0 to help opaque x509 structs | Paul Kehrer | 2016-03-11 | 2 | -10/+90 | |
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | X509_REVOKED_get0_serialNumber X509_REVOKED_get0_revocationDate X509_CRL_get0_signature i2d_re_X509_REQ_tbs i2d_re_X509_CRL_tbs X509_REQ_get0_signature | |||||
* | | | | Merge pull request #2820 from reaperhulk/110-patch-31 | Alex Gaynor | 2016-03-13 | 1 | -0/+46 | |
|\ \ \ \ | | | | | | | | | | | bind some new functions to access elements of the SSL struct | |||||
| * | | | | bind some new functions to access elements of the SSL struct | Paul Kehrer | 2016-03-13 | 1 | -0/+46 | |
|/ / / / | | | | | | | | | | | | | | | | | | | | | SSL_SESSION_get_master_key (added 1.1.0) SSL_get_client_random (added 1.1.0) SSL_get_server_random (added 1.1.0) | |||||
* | | | | Merge pull request #2819 from reaperhulk/110-patch-30 | Alex Gaynor | 2016-03-13 | 1 | -0/+24 | |
|\ \ \ \ | | | | | | | | | | | bind SSL_SESSION_set1_id_context | |||||
| * | | | | bind SSL_SESSION_set1_id_context | Paul Kehrer | 2016-03-13 | 1 | -0/+24 | |
|/ / / / | | | | | | | | | | | | | added in 1.0.1 | |||||
* | | | | Merge pull request #2808 from reaperhulk/110-patch-27 | Alex Gaynor | 2016-03-13 | 1 | -7/+12 | |
|\ \ \ \ | | | | | | | | | | | bind SSL_CTX_get_ssl_method | |||||
| * | | | | bind one new function to access part of the SSL struct | Paul Kehrer | 2016-03-13 | 1 | -7/+12 | |
| |/ / / | | | | | | | | | | | | | | | | | | | | | SSL_CTX_get_ssl_method (added 1.0.2) also remove the internally invented symbol we had (that was not in use) | |||||
* | | | | Merge pull request #2818 from reaperhulk/simplify-extension-creation | Alex Gaynor | 2016-03-13 | 2 | -67/+48 | |
|\ \ \ \ | | | | | | | | | | | simplify extension creation by using X509V3_EXT_i2d | |||||
| * | | | | support openssl 0.9.8's nonsense hopefully | Paul Kehrer | 2016-03-13 | 1 | -1/+26 | |
| | | | | | ||||||
| * | | | | also bytes. | Paul Kehrer | 2016-03-13 | 1 | -1/+3 | |
| | | | | | ||||||
| * | | | | bytes, my nemesis | Paul Kehrer | 2016-03-13 | 1 | -1/+1 | |
| | | | | | ||||||
| * | | | | simplify extension creation by using X509V3_EXT_i2d | Paul Kehrer | 2016-03-13 | 2 | -69/+23 | |
| | | | | | ||||||
* | | | | | Merge pull request #2802 from reaperhulk/110-patch-23 | Alex Gaynor | 2016-03-13 | 2 | -10/+51 | |
|\ \ \ \ \ | |/ / / / |/| | | | | move crypto_ex_data to macros, add i2d_re_X509_tbs & X509_get0_signature | |||||
| * | | | | improve comments | Paul Kehrer | 2016-03-12 | 1 | -4/+5 | |
| | | | | | ||||||
| * | | | | this was actually added in 1.0.2-beta3 | Paul Kehrer | 2016-03-10 | 1 | -1/+1 | |
| | | | | | ||||||
| * | | | | move crypto_ex_data to macros, add i2d_re_X509_tbs & X509_get0_signature | Paul Kehrer | 2016-03-10 | 2 | -10/+50 | |
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | And, of course, use them in the openssl bindings. These changes are a start towards opaquing all the X509 structs. The actual opaquing won't take place until the very end though to minimize pyOpenSSL breakage | |||||
* | | | | | Merge pull request #2815 from reaperhulk/error-on-unusual-encodings | Alex Gaynor | 2016-03-12 | 2 | -1/+26 | |
|\ \ \ \ \ | | | | | | | | | | | | | Error on unusual encodings | |||||
| * | | | | | py3 is a thing | Paul Kehrer | 2016-03-12 | 1 | -1/+1 | |
| | | | | | | ||||||
| * | | | | | move NUMERICSTRING certificate test to test_openssl & make it more specific | Paul Kehrer | 2016-03-12 | 3 | -13/+22 | |
| | | | | | | ||||||
| * | | | | | raise type error rather than internalerror w/ unsupported asn1 in subject | Paul Kehrer | 2016-03-12 | 2 | -1/+17 | |
| | | | | | | ||||||
* | | | | | | Merge pull request #2817 from reaperhulk/mod-wsgi-workaround | Alex Gaynor | 2016-03-12 | 1 | -0/+19 | |
|\ \ \ \ \ \ | | | | | | | | | | | | | | | add two faq entries for common errors | |||||
| * | | | | | | add more language | Paul Kehrer | 2016-03-12 | 1 | -0/+4 | |
| | | | | | | | ||||||
| * | | | | | | add two faq entries for common errors | Paul Kehrer | 2016-03-12 | 1 | -0/+15 | |
|/ / / / / / | ||||||
* | | | | | | Merge pull request #2807 from reaperhulk/110-patch-26 | Alex Gaynor | 2016-03-12 | 2 | -3/+32 | |
|\ \ \ \ \ \ | | | | | | | | | | | | | | | conditionally bind/remove the SSL_ST/TLS_ST state machine statuses | |||||
| * | | | | | | conditionally bind/remove the SSL_ST/TLS_ST state machine statuses | Paul Kehrer | 2016-03-11 | 2 | -3/+32 | |
| | |_|/ / / | |/| | | | | ||||||
* | | | | | | Merge pull request #2813 from reaperhulk/fix-2758 | Alex Gaynor | 2016-03-12 | 4 | -0/+70 | |
|\ \ \ \ \ \ | | | | | | | | | | | | | | | Add AuthorityKeyIdentifier.from_issuer_subject_key_identifier | |||||
| * | | | | | | add some notes about when to use these classmethods | Paul Kehrer | 2016-03-12 | 1 | -0/+12 | |
| | | | | | | | ||||||
| * | | | | | | Add AuthorityKeyIdentifier.from_issuer_subject_key_identifier | Paul Kehrer | 2016-03-11 | 4 | -0/+58 | |
| |/ / / / / | ||||||
* | | | | | | Merge pull request #2794 from reaperhulk/110-patch-15 | Alex Gaynor | 2016-03-12 | 2 | -11/+33 | |
|\ \ \ \ \ \ | | | | | | | | | | | | | | | opaque HMAC_CTX, which requires some helper functions | |||||
| * | | | | | | HMAC_CTX_new doesn't need commented out code for no reason | Paul Kehrer | 2016-03-10 | 1 | -5/+0 | |
| | | | | | | | ||||||
| * | | | | | | simplify HMAC_CTX_free | Paul Kehrer | 2016-03-10 | 1 | -4/+0 | |
| | | | | | | | ||||||
| * | | | | | | opaque HMAC_CTX, which requires some helper functions | Paul Kehrer | 2016-03-09 | 2 | -11/+42 | |
| | | | | | | | ||||||
* | | | | | | | Merge pull request #2812 from reaperhulk/fix-2717 | Alex Gaynor | 2016-03-12 | 2 | -5/+22 | |
|\ \ \ \ \ \ \ | |_|_|/ / / / |/| | | | | | | make multibackend error with an empty list. | |||||
| * | | | | | | parens | Paul Kehrer | 2016-03-11 | 1 | -1/+1 | |
| | | | | | | | ||||||
| * | | | | | | make multibackend error with an empty list. fixes #2717 | Paul Kehrer | 2016-03-11 | 2 | -5/+22 | |
| | |/ / / / | |/| | | | | ||||||
* | | | | | | Merge pull request #2814 from reaperhulk/add-russian-cert-vector | Alex Gaynor | 2016-03-11 | 2 | -0/+4 | |
|\ \ \ \ \ \ | | | | | | | | | | | | | | | add e-trust russian x509 test vector | |||||
| * | | | | | | add e-trust russian x509 test vector | Paul Kehrer | 2016-03-11 | 2 | -0/+4 | |
| |/ / / / / | ||||||
* | | | | | | Merge pull request #2811 from pyca/alex-patch-1 | Paul Kehrer | 2016-03-11 | 1 | -1/+1 | |
|\ \ \ \ \ \ | | | | | | | | | | | | | | | Don't make this struct opaque | |||||
| * | | | | | | struct is a keyword | Alex Gaynor | 2016-03-11 | 1 | -1/+1 | |
| | | | | | | | ||||||
| * | | | | | | Don't make this struct opaque | Alex Gaynor | 2016-03-11 | 1 | -1/+1 | |
|/ / / / / / | | | | | | | | | | | | | it breaks pyopenssl: https://jenkins.cryptography.io/job/pyopenssl-smoke/label=debian7,version=master/80/console | |||||
* | | | | | | Merge pull request #2805 from reaperhulk/110-patch-25 | Alex Gaynor | 2016-03-11 | 1 | -3/+6 | |
|\ \ \ \ \ \ | | | | | | | | | | | | | | | modify how revocation date is set on X509_REVOKED in the openssl backend | |||||
| * | | | | | | modify how revocation date is set on X509_REVOKED in the openssl backend | Paul Kehrer | 2016-03-10 | 1 | -3/+6 | |
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | In OpenSSL 1.1.0 there isn't a pre-existing ASN1_TIME object so we have ASN1_TIME_set make us a new one. In older OpenSSLs this is still safe because ASN1_TIME_set checks and frees any current value in the object. | |||||
* | | | | | | | Merge pull request #2800 from reaperhulk/110-patch-21 | Alex Gaynor | 2016-03-11 | 2 | -12/+27 | |
|\ \ \ \ \ \ \ | | | | | | | | | | | | | | | | | opaque EVP_MD_CTX and wrap EVP_MD_CTX_new + EVP_MD_CTX_free |