aboutsummaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
* add two missing methods to backend interface docsPaul Kehrer2015-06-261-0/+31
|
* Merge pull request #2045 from sigmavirus24/csr-builderPaul Kehrer2015-06-269-3/+543
|\ | | | | Adds CSR Builder (Redux of #1927)
| * Use SECP256R1 instead of SECT283K1 in CSR testsIan Cordasco2015-06-242-4/+4
| |
| * Add test for unicode attributes in CSRsIan Cordasco2015-06-241-0/+32
| | | | | | | | | | This creates a CSR, converts it to bytes, and then loads it again to ensure that the unicode strings are parsed properly.
| * Skip tests when the EC curve is unsupportedIan Cordasco2015-06-242-0/+3
| |
| * Use utf8 to encode attribute values instead of asciiIan Cordasco2015-06-241-2/+2
| |
| * Add tests to the CSR Builder for EC and DSA keysIan Cordasco2015-06-243-5/+120
| | | | | | | | | | | | This skips certain tests on certain versions of differences in how X509_REQ_sign works on those versions. A separate pull request will address those differences.
| * Simplify test for unsupported extensionsIan Cordasco2015-06-241-9/+1
| |
| * Address review comments around add_extension methodIan Cordasco2015-06-243-6/+8
| | | | | | | | | | | | | | | | | | - Fix typo in the docs (s/buidlder/builder/) - Remove default from the method declaration and docs - Replace ValueError with NotImpelementedError for unsupported X.509 extensions - Add TODO comment as requested by Alex - Fix test to pass critical=False since it no longer is a default value
| * Only allow subject_name to be set once on a BuilderIan Cordasco2015-06-241-0/+2
| |
| * Unconditionally encode values to asciiIan Cordasco2015-06-241-5/+2
| |
| * Properly use RSA fixtures to generate private keysIan Cordasco2015-06-242-5/+11
| |
| * Update registering pp with ffi.gcIan Cordasco2015-06-241-4/+3
| | | | | | | | | | This makes it more in-line with existing functions, e.g., L40-L47 of src/cryptography/hazmat/backends/openssl/x509.py @ b0e8ffa
| * Update CSR tests and implementationIan Cordasco2015-06-243-23/+8
| | | | | | | | | | | | | | | | | | | | - Use keyword arguments for x509.BasicConstraints in tests (missed in b790edbdc8fb9a026353d6fb99994326197705c7). - Place X509_request garbage collection under assertion. - Assert that X509 extensions created are not null. - Don't copy the extensions list in CertificateSigningBuilder. They're never appended to, so copying isn't necessary. - Use RSA key fixtures instead of generating new ones on each test run
| * Fix new tests to pass text value to NameAttributeIan Cordasco2015-06-241-20/+20
| |
| * Address code review regarding style and gcIan Cordasco2015-06-243-20/+17
| | | | | | | | | | | | | | | | | | - Use keyword arguments for x509.BasicConstraints in several places - Use SHA256 instead of SHA1 in documented examples - Give function variables meaningful names in _encode_asn1_str - Accept a x509.BasicConstraints object in _encode_basic_constraints - Properly garbage-collect some things - Raise a NotImplementedError instead of a ValueError
| * Fixes PEP8 issue in tests.Andre Caron2015-06-241-5/+0
| |
| * Removes set_ prefix on CSR builder method.Andre Caron2015-06-243-7/+7
| |
| * Lists support for DSA and EC in CSR builder.Andre Caron2015-06-241-1/+3
| |
| * Fully qualifies symbols in doc references.Andre Caron2015-06-241-5/+10
| |
| * Changes builder extension API.Andre Caron2015-06-243-40/+25
| |
| * Polishes builder documentation,Andre Caron2015-06-241-5/+28
| |
| * Removes CSR builder version setter.Andre Caron2015-06-243-40/+22
| |
| * Fixes memory leak,Andre Caron2015-06-241-0/+6
| |
| * Extends supported range for integer conversion,Andre Caron2015-06-241-2/+9
| |
| * Fixes docstring typo.Andre Caron2015-06-241-1/+1
| |
| * Adds updates docs for method chaining in CSR builder.Andre Caron2015-06-241-1/+4
| |
| * Adds method chaining to CSR builder.Andre Caron2015-06-242-35/+42
| |
| * Removes OID to txt to OID conversion.Andre Caron2015-06-241-10/+3
| |
| * Cleans up some GC semantics.Andre Caron2015-06-241-3/+16
| |
| * Renames sign_509_request to create_x509_csr.Andre Caron2015-06-245-2/+23
| |
| * Fixes memory allocation.Andre Caron2015-06-241-12/+4
| |
| * Adds CSR builder.Andre Caron2015-06-245-1/+377
|/
* Merge pull request #2062 from alex/x509-ecdsa-sha1Paul Kehrer2015-06-232-0/+8
|\ | | | | Added teh OID for ECDSA with SHA1.
| * Added teh OID for ECDSA with SHA1.Alex Gaynor2015-06-232-0/+8
|/ | | | In practice this is rare because the BR requires ECDSA signatures to use SHA256+ (or maybe the requirements for SHA256 just came at the same time as ECDSA, idk)
* Merge pull request #2059 from reaperhulk/add-wildcard-sanAlex Gaynor2015-06-233-0/+39
|\ | | | | add wildcard SAN x509 test vector
| * add wildcard SAN x509 test vectorPaul Kehrer2015-06-233-0/+39
| |
* | Merge pull request #2058 from reaperhulk/fix-nc-vectorsAlex Gaynor2015-06-233-36/+35
|\ \ | |/ |/| name constraints should not contain a wildcard character
| * name constraints should not contain a wildcard characterPaul Kehrer2015-06-233-36/+35
|/ | | | | According to RFC 5280 you should just start with a . (e.g. .domain.com instead of *.domain.com)
* Merge pull request #2057 from reaperhulk/i-are-dumbAlex Gaynor2015-06-232-0/+19
|\ | | | | fix ec_cdata_to_evp_pkey bug
| * fix ec_cdata_to_evp_pkey bugPaul Kehrer2015-06-222-0/+19
|/ | | | | | We weren't actually returning the object and the tests weren't catching it because we didn't try to use the evp_pkey property in the tests. The added test confirms it actually works.
* Merge pull request #2056 from alex/remove-workaroundsPaul Kehrer2015-06-223-10/+4
|\ | | | | Remove our workarounds for pyasn.1 bugs, a new pyasn.1 is out!
| * remove unused importAlex Gaynor2015-06-221-1/+0
| |
| * Remove our workarounds for pyasn.1 bugs, a new pyasn.1 is out!Alex Gaynor2015-06-223-9/+4
|/
* Merge pull request #2055 from reaperhulk/name-constraints-bindingsAlex Gaynor2015-06-221-0/+25
|\ | | | | add name constraints and general subtree struct and macro stack defs
| * add name constraints and general subtree struct and macro stack defsPaul Kehrer2015-06-211-0/+25
|/
* Merge pull request #2053 from reaperhulk/name-constraints-eqAlex Gaynor2015-06-212-0/+41
|\ | | | | add eq/ne support to NameConstraints
| * add eq/ne support to NameConstraintsPaul Kehrer2015-06-212-0/+41
|/
* Merge pull request #1974 from reaperhulk/name-constraintsAlex Gaynor2015-06-213-0/+151
|\ | | | | add nameconstraints classes
| * add nameconstraints classesPaul Kehrer2015-06-213-0/+151
|/
generated by cgit v1.2.3 (git 2.25.1) at 2024-08-22 14:47:02 +0000