Commit message (Collapse) | Author | Age | Files | Lines | ||
---|---|---|---|---|---|---|
... | ||||||
| * | | document the constructors for our extensions and general names | Paul Kehrer | 2015-10-28 | 1 | -25/+50 | |
| |/ | | | | | | | | | | | Most of these extensions have the same attributes as constructor args, so for those I only added the args to the class name to avoid large scale duplication. | |||||
* | | Merge pull request #2435 from reaperhulk/fix-2407 | Alex Gaynor | 2015-10-27 | 5 | -6/+52 | |
|\ \ | | | | | | | encode countryName with PrintableString | |||||
| * | | update comment to include a bit more detail | Paul Kehrer | 2015-10-27 | 1 | -2/+2 | |
| | | | ||||||
| * | | work on py3 | Paul Kehrer | 2015-10-27 | 1 | -2/+2 | |
| | | | ||||||
| * | | remove unneeded str | Paul Kehrer | 2015-10-27 | 1 | -2/+2 | |
| | | | ||||||
| * | | switch to using pyasn1_modules for the test | Paul Kehrer | 2015-10-27 | 4 | -15/+17 | |
| | | | ||||||
| * | | encode countryName with PrintableString | Paul Kehrer | 2015-10-20 | 5 | -6/+50 | |
| | | | | | | | | | | | | | | | | | | | | | This commit adds a dependency on asn1crypto for testing purposes to parse the certificate and confirm that countryName is encoded with PrintableString while other fields are UTF8String. This is a test only dep. | |||||
* | | | Merge pull request #2446 from reaperhulk/init-locks | Alex Gaynor | 2015-10-26 | 2 | -2/+8 | |
|\ \ \ | |_|/ |/| | | move lock initialization to during binding import | |||||
| * | | modify sadness prose | Paul Kehrer | 2015-10-27 | 1 | -3/+5 | |
| | | | ||||||
| * | | expand comment | Paul Kehrer | 2015-10-24 | 1 | -1/+3 | |
| | | | ||||||
| * | | move lock initialization to during binding import | Paul Kehrer | 2015-10-24 | 2 | -2/+4 | |
| | | | | | | | | | | | | | | | | | | | | | | | | Previously we attempted to register our openssl locks only if the backend was initialized, but we should really just do it immediately. Consumers like PyOpenSSL already call init_static_locks after importing the binding and if a library wants to replace the locks with something else they can do so themselves. | |||||
* | | | Merge pull request #2220 from reaperhulk/encode-cp | Alex Gaynor | 2015-10-24 | 2 | -0/+179 | |
|\ \ \ | |/ / |/| | | support encoding certificate policies in CertificateBuilder | |||||
| * | | use new ExtensionOID | Paul Kehrer | 2015-10-24 | 1 | -1/+1 | |
| | | | ||||||
| * | | one more assert | Paul Kehrer | 2015-10-24 | 1 | -1/+1 | |
| | | | ||||||
| * | | convert asserts to openssl_assert | Paul Kehrer | 2015-10-24 | 1 | -10/+10 | |
| | | | ||||||
| * | | support encoding certificate policies in CertificateBuilder | Paul Kehrer | 2015-10-24 | 2 | -0/+179 | |
| | | | ||||||
* | | | Merge pull request #2293 from reaperhulk/idempotent-engine-add | Alex Gaynor | 2015-10-24 | 3 | -8/+11 | |
|\ \ \ | |/ / |/| | | idempotent engine add | |||||
| * | | address review comments | Paul Kehrer | 2015-10-24 | 1 | -5/+2 | |
| | | | ||||||
| * | | make engine addition idempotent | Paul Kehrer | 2015-10-21 | 3 | -7/+13 | |
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Threading issues keep cropping up. ENGINE_add already acquires a lock at the C layer via CRYPTO_w_lock (provided you have registered the locking callbacks) so let's try to use that. As part of this we'll try to init the openssl locks, but of course there's potentially a race there as well. Clearly this isn't the real fix but it might improve the situation while we try to determine what to do. | |||||
* | | | Merge pull request #2445 from alex/name-hash | Paul Kehrer | 2015-10-24 | 3 | -0/+26 | |
|\ \ \ | | | | | | | | | Fixed #2444 -- added an __hash__ to x509 Names | |||||
| * | | | typo | Alex Gaynor | 2015-10-24 | 1 | -1/+1 | |
| | | | | ||||||
| * | | | changelog entry | Alex Gaynor | 2015-10-24 | 1 | -0/+1 | |
| | | | | ||||||
| * | | | Fixed #2444 -- added an __hash__ to x509 Names | Alex Gaynor | 2015-10-24 | 2 | -0/+25 | |
|/ / / | ||||||
* | | | Merge pull request #2441 from reaperhulk/better-linking-docs | Alex Gaynor | 2015-10-23 | 1 | -1/+4 | |
|\ \ \ | | | | | | | | | some ec key exchange doc improvements | |||||
| * | | | some ec key exchange doc improvements | Paul Kehrer | 2015-10-22 | 1 | -1/+4 | |
|/ / / | ||||||
* | | | Merge pull request #1970 from reaperhulk/aes-keywrap-python | lvh | 2015-10-22 | 5 | -0/+264 | |
|\ \ \ | |/ / |/| | | AES keywrap support | |||||
| * | | add comments on test cases to explain reasons a bit better | Paul Kehrer | 2015-10-22 | 1 | -0/+5 | |
| | | | ||||||
| * | | update a comment | Paul Kehrer | 2015-10-22 | 1 | -2/+3 | |
| | | | ||||||
| * | | add info about the rfc | Paul Kehrer | 2015-10-22 | 1 | -0/+6 | |
| | | | ||||||
| * | | expand keywrap intro docs | Paul Kehrer | 2015-10-21 | 1 | -1/+4 | |
| | | | ||||||
| * | | make skip message more verbose | Paul Kehrer | 2015-10-21 | 1 | -11/+10 | |
| | | | ||||||
| * | | add version added info and doc exception | Paul Kehrer | 2015-10-21 | 1 | -0/+7 | |
| | | | ||||||
| * | | pep8! | Paul Kehrer | 2015-10-21 | 1 | -1/+1 | |
| | | | ||||||
| * | | add changelog entry | Paul Kehrer | 2015-10-21 | 1 | -0/+3 | |
| | | | ||||||
| * | | AES keywrap support | Paul Kehrer | 2015-10-21 | 5 | -1/+241 | |
|/ / | ||||||
* | | Merge pull request #2440 from reaperhulk/small-cleanups | Alex Gaynor | 2015-10-21 | 4 | -19/+22 | |
|\ \ | | | | | | | Some CRL cleanups | |||||
| * | | hoist a dict up to module scope so we don't recreate it every call | Paul Kehrer | 2015-10-21 | 1 | -12/+15 | |
| | | | ||||||
| * | | add changelog entry | Paul Kehrer | 2015-10-21 | 1 | -0/+3 | |
| | | | ||||||
| * | | move revoked_certificate assignment in the doctests | Paul Kehrer | 2015-10-21 | 1 | -5/+2 | |
| | | | ||||||
| * | | fix some indentation | Paul Kehrer | 2015-10-21 | 1 | -2/+2 | |
|/ / | ||||||
* | | Merge pull request #2315 from etrauschke/crl_ossl_backend | Paul Kehrer | 2015-10-21 | 8 | -26/+644 | |
|\ \ | | | | | | | OpenSSL backend code for CRLs | |||||
| * | | test fix | Erik Trauschke | 2015-10-21 | 1 | -0/+2 | |
| | | | ||||||
| * | | remove convenience functions for revoked extensions | Erik Trauschke | 2015-10-21 | 3 | -42/+12 | |
| | | | | | | | | | | | | fix docs regarding CRL PEM format | |||||
| * | | add comments | Erik Trauschke | 2015-10-20 | 2 | -26/+37 | |
| | | | ||||||
| * | | Merge branch 'master' into crl_ossl_backend | Erik Trauschke | 2015-10-20 | 29 | -73/+352 | |
| |\ \ | ||||||
| | * | | Merge branch 'master', remote-tracking branch 'upstream/master' | Erik Trauschke | 2015-10-20 | 0 | -0/+0 | |
| | | | | ||||||
| * | | | Merge branch 'crl_ossl_backend' of github.com:etrauschke/cryptography into ↵ | Erik Trauschke | 2015-10-20 | 10 | -26/+672 | |
| |\ \ \ | | | | | | | | | | | | | | | | crl_ossl_backend | |||||
| | * | | | removing caching mechanism for x509 properties | Erik Trauschke | 2015-10-15 | 6 | -95/+80 | |
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | undo name change of CRLExtensionOID use custom parsing mechanism for certIssuer entry extension add new crl to vectors for testing invalid certIssuer entry ext | |||||
| | * | | | import fix | Erik Trauschke | 2015-10-14 | 1 | -2/+2 | |
| | | | | | ||||||
| | * | | | use X509ExtensionParser for Revoked extensions | Erik Trauschke | 2015-10-14 | 6 | -145/+106 | |
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | remove revoked_certificates property from RevokedCertificate class CRLExtensions should actually be RevokedExtensions doctest cleanup for RevokedCertificate |