aboutsummaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
...
| * | document the constructors for our extensions and general namesPaul Kehrer2015-10-281-25/+50
| |/ | | | | | | | | | | Most of these extensions have the same attributes as constructor args, so for those I only added the args to the class name to avoid large scale duplication.
* | Merge pull request #2435 from reaperhulk/fix-2407Alex Gaynor2015-10-275-6/+52
|\ \ | | | | | | encode countryName with PrintableString
| * | update comment to include a bit more detailPaul Kehrer2015-10-271-2/+2
| | |
| * | work on py3Paul Kehrer2015-10-271-2/+2
| | |
| * | remove unneeded strPaul Kehrer2015-10-271-2/+2
| | |
| * | switch to using pyasn1_modules for the testPaul Kehrer2015-10-274-15/+17
| | |
| * | encode countryName with PrintableStringPaul Kehrer2015-10-205-6/+50
| | | | | | | | | | | | | | | | | | | | | This commit adds a dependency on asn1crypto for testing purposes to parse the certificate and confirm that countryName is encoded with PrintableString while other fields are UTF8String. This is a test only dep.
* | | Merge pull request #2446 from reaperhulk/init-locksAlex Gaynor2015-10-262-2/+8
|\ \ \ | |_|/ |/| | move lock initialization to during binding import
| * | modify sadness prosePaul Kehrer2015-10-271-3/+5
| | |
| * | expand commentPaul Kehrer2015-10-241-1/+3
| | |
| * | move lock initialization to during binding importPaul Kehrer2015-10-242-2/+4
| | | | | | | | | | | | | | | | | | | | | | | | Previously we attempted to register our openssl locks only if the backend was initialized, but we should really just do it immediately. Consumers like PyOpenSSL already call init_static_locks after importing the binding and if a library wants to replace the locks with something else they can do so themselves.
* | | Merge pull request #2220 from reaperhulk/encode-cpAlex Gaynor2015-10-242-0/+179
|\ \ \ | |/ / |/| | support encoding certificate policies in CertificateBuilder
| * | use new ExtensionOIDPaul Kehrer2015-10-241-1/+1
| | |
| * | one more assertPaul Kehrer2015-10-241-1/+1
| | |
| * | convert asserts to openssl_assertPaul Kehrer2015-10-241-10/+10
| | |
| * | support encoding certificate policies in CertificateBuilderPaul Kehrer2015-10-242-0/+179
| | |
* | | Merge pull request #2293 from reaperhulk/idempotent-engine-addAlex Gaynor2015-10-243-8/+11
|\ \ \ | |/ / |/| | idempotent engine add
| * | address review commentsPaul Kehrer2015-10-241-5/+2
| | |
| * | make engine addition idempotentPaul Kehrer2015-10-213-7/+13
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Threading issues keep cropping up. ENGINE_add already acquires a lock at the C layer via CRYPTO_w_lock (provided you have registered the locking callbacks) so let's try to use that. As part of this we'll try to init the openssl locks, but of course there's potentially a race there as well. Clearly this isn't the real fix but it might improve the situation while we try to determine what to do.
* | | Merge pull request #2445 from alex/name-hashPaul Kehrer2015-10-243-0/+26
|\ \ \ | | | | | | | | Fixed #2444 -- added an __hash__ to x509 Names
| * | | typoAlex Gaynor2015-10-241-1/+1
| | | |
| * | | changelog entryAlex Gaynor2015-10-241-0/+1
| | | |
| * | | Fixed #2444 -- added an __hash__ to x509 NamesAlex Gaynor2015-10-242-0/+25
|/ / /
* | | Merge pull request #2441 from reaperhulk/better-linking-docsAlex Gaynor2015-10-231-1/+4
|\ \ \ | | | | | | | | some ec key exchange doc improvements
| * | | some ec key exchange doc improvementsPaul Kehrer2015-10-221-1/+4
|/ / /
* | | Merge pull request #1970 from reaperhulk/aes-keywrap-pythonlvh2015-10-225-0/+264
|\ \ \ | |/ / |/| | AES keywrap support
| * | add comments on test cases to explain reasons a bit betterPaul Kehrer2015-10-221-0/+5
| | |
| * | update a commentPaul Kehrer2015-10-221-2/+3
| | |
| * | add info about the rfcPaul Kehrer2015-10-221-0/+6
| | |
| * | expand keywrap intro docsPaul Kehrer2015-10-211-1/+4
| | |
| * | make skip message more verbosePaul Kehrer2015-10-211-11/+10
| | |
| * | add version added info and doc exceptionPaul Kehrer2015-10-211-0/+7
| | |
| * | pep8!Paul Kehrer2015-10-211-1/+1
| | |
| * | add changelog entryPaul Kehrer2015-10-211-0/+3
| | |
| * | AES keywrap supportPaul Kehrer2015-10-215-1/+241
|/ /
* | Merge pull request #2440 from reaperhulk/small-cleanupsAlex Gaynor2015-10-214-19/+22
|\ \ | | | | | | Some CRL cleanups
| * | hoist a dict up to module scope so we don't recreate it every callPaul Kehrer2015-10-211-12/+15
| | |
| * | add changelog entryPaul Kehrer2015-10-211-0/+3
| | |
| * | move revoked_certificate assignment in the doctestsPaul Kehrer2015-10-211-5/+2
| | |
| * | fix some indentationPaul Kehrer2015-10-211-2/+2
|/ /
* | Merge pull request #2315 from etrauschke/crl_ossl_backendPaul Kehrer2015-10-218-26/+644
|\ \ | | | | | | OpenSSL backend code for CRLs
| * | test fixErik Trauschke2015-10-211-0/+2
| | |
| * | remove convenience functions for revoked extensionsErik Trauschke2015-10-213-42/+12
| | | | | | | | | | | | fix docs regarding CRL PEM format
| * | add commentsErik Trauschke2015-10-202-26/+37
| | |
| * | Merge branch 'master' into crl_ossl_backendErik Trauschke2015-10-2029-73/+352
| |\ \
| | * | Merge branch 'master', remote-tracking branch 'upstream/master'Erik Trauschke2015-10-200-0/+0
| | | |
| * | | Merge branch 'crl_ossl_backend' of github.com:etrauschke/cryptography into ↵Erik Trauschke2015-10-2010-26/+672
| |\ \ \ | | | | | | | | | | | | | | | crl_ossl_backend
| | * | | removing caching mechanism for x509 propertiesErik Trauschke2015-10-156-95/+80
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | undo name change of CRLExtensionOID use custom parsing mechanism for certIssuer entry extension add new crl to vectors for testing invalid certIssuer entry ext
| | * | | import fixErik Trauschke2015-10-141-2/+2
| | | | |
| | * | | use X509ExtensionParser for Revoked extensionsErik Trauschke2015-10-146-145/+106
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | remove revoked_certificates property from RevokedCertificate class CRLExtensions should actually be RevokedExtensions doctest cleanup for RevokedCertificate