aboutsummaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
* bump libressl version (#3920)Alex Gaynor2017-09-151-1/+1
|
* add chacha20 test vectors from RFC 7539 (#3918)Paul Kehrer2017-09-142-0/+24
|
* implement __hash__ on DistributionPoint and CRLDistributionPoints (#3915)Paul Kehrer2017-09-132-0/+90
|
* add __hash__ to GeneralNames, SAN, IAN, and CertificateIssuer (#3916)Paul Kehrer2017-09-132-0/+46
|
* add __hash__ to PolicyConstraints and Extension (#3917)Paul Kehrer2017-09-132-0/+34
|
* implement __hash__ on KeyUsage and ExtendedKeyUsage (#3913)Paul Kehrer2017-09-132-0/+60
| | | | | | * implement __hash__ on KeyUsage and ExtendedKeyUsage * properly use private values and alter test to catch that bug
* implement __hash__ on CertificatePolicies and its child classes (#3914)Paul Kehrer2017-09-132-0/+62
|
* add aki hash (#3910)Paul Kehrer2017-09-132-1/+19
| | | | | | | | | | * Implement __hash__ on AuthorityKeyIdentifier * Adding dirname to fix build issue on AuthorityKeyIdentifier test * .authority_cert_issuer to str * use a tuple and not a str repr
* name constraints __hash__ (#3912)Paul Kehrer2017-09-132-0/+34
|
* AIA hashing (#3911)Paul Kehrer2017-09-132-0/+37
|
* remove u-label conversion during general name decode (#3905)Paul Kehrer2017-09-131-49/+4
| | | | We support directly passing bytes now and these code paths are duplicated in the deprecated value attributes.
* fix a bug with URI value when parsing a string with no hostname (#3909)Paul Kehrer2017-09-133-6/+9
| | | | | strings of the form "scheme:///anything" would incorrectly have two slashes dropped. This is fixed in two code paths in this PR but one of those code paths will be entirely removed in a followup PR.
* implement __hash__ on all GeneralName types (#3907)Paul Kehrer2017-09-132-2/+58
| | | Needed to implement __hash__ on AuthorityKeyIdentifier
* coverage pin test part deux (#3908)Paul Kehrer2017-09-123-1/+6
| | | | | | * we pinned coverage for xml generation...let's try everywhere * add so many comments
* compare against bytes values, not the U-label decoded ones (#3906)Paul Kehrer2017-09-122-2/+7
| | | | We need to add one small test to cover a case that is no longer covered with this switch.
* add a faq note about having a compiler that is too old (#3902)Paul Kehrer2017-09-111-0/+9
| | | | | | | | | * add a faq note about having a compiler that is too old Also add a bit of text explaining what to do on OpenBSD 6.1 and earlier since that is the most likely place this will occur. * I always forget it spell checks titles
* refactor AES keywrap into a wrap core and unwrap core (#3901)Paul Kehrer2017-09-111-23/+30
| | | | | | | | * refactor AES keywrap into a wrap core and unwrap core This refactor makes adding AES keywrap with padding much simpler. * remove an unneeded arg
* [WIP] add support for the TLSFeature extension in x509 (#3899)Paul Kehrer2017-09-109-10/+258
| | | | | | | | | | | | | | | | | | * add support for the TLSFeature extension in x509 This extension is used for OCSP Must-Staple. * fix changelog link * pep8 * refactor to support the sequence properly and add status_request_v2 * update some language * add test vector, implement eq/ne/hash on TLSFeature * address review comments
* RSA OAEP label support for OpenSSL 1.0.2+ (#3897)Paul Kehrer2017-09-085-18/+153
| | | | | | | | | | * RSA OAEP label support for OpenSSL 1.0.2+ * changelog * move around tests, address review feedback, use backend supported method * unsupported padding catches this now
* add X509 test vector with a TLS Feature (RFC 7633) extension (#3898)Paul Kehrer2017-09-082-0/+36
|
* oaep label vector (#3895)Paul Kehrer2017-09-072-0/+10
| | | | | | | | | | * oaep label vector * add count so we can use the nist vector loader * add RSA key from the boring vectors as well https://boringssl.googlesource.com/boringssl/+/ce3773f9fe25c3b54390bc51d72572f251c7d7e6/crypto/evp/evp_tests.txt#8
* add initial OCSP request test vector (#3890)Paul Kehrer2017-09-072-0/+5
|
* add set0_rsa_oaep_label binding (#3894)Paul Kehrer2017-09-072-0/+17
|
* move x509 tests into a module (#3889)Paul Kehrer2017-09-066-12/+12
| | | | | | | | | | | * move x509 tests into a module This is just to make grouping things like test_ocsp, etc a bit simpler in the future * fix path * pep8
* add OCSP binding for obtaining information from CertID structure (#3888)Paul Kehrer2017-09-061-0/+2
| | | | | | * add OCSP binding for obtaining information from CertID structure * empty commit
* send a few more variables to distinguish our jobs in codecov (#3892)Paul Kehrer2017-09-061-3/+3
| | | | | | * send a few more variables to distinguish our jobs in codecov * put the labels in the right places
* added binding support for rfc 5705 (#3878)Kelby Ludwig2017-08-291-0/+2
| | | | | | | | | | | | | | * added binding support for rfc 5705 * WIP: testing some cffi updates * added openssl version check * updated cffi defs to align with pep8 * removed superfluous version checks * remove more unecessary boilerplate
* Switch to using the other style of environment markers (#3796)Alex Gaynor2017-08-242-11/+9
| | | | | | | | * Switch to using the other style of environment markers * We don't do py3.3 any more! * changelog
* Document that we care about our infrastructure's security as well (#3874)Alex Gaynor2017-08-241-0/+8
|
* add blake2b/blake2s support for hmac (#3873)Paul Kehrer2017-08-223-5/+35
| | | | | | | | | | * add blake2b/blake2s support for hmac This was a bug, but it turns out the noise protocol suggests using the HMAC construction with BLAKE2 (rather than BLAKE2's own keyed functionality) for a few reasons, so we should support it. * actually test the thing
* Remove branches for 1.0.2 betas. (#3870)Alex Gaynor2017-08-203-8/+6
| | | There's no sense in which we actually support them
* Fix `load_rsa_public_numbers` documentation (#3871)David Sanders2017-08-201-1/+1
|
* Fix mistake in `RSAPublicKey.verify` documentation (#3872)David Sanders2017-08-201-1/+1
|
* add test vector with invalid basicconstraints (#3866)Paul Kehrer2017-08-153-0/+38
| | | | | | * add test vector with invalid basicconstraints * sigh
* Get our travis from pypy (#3865)Alex Gaynor2017-08-143-15/+14
| | | | | | * Get our travis from pypy * doh
* add changelog and a warning for is_signature_valid on crl (#3861)Paul Kehrer2017-08-122-0/+8
| | | | | | * add changelog and a warning * document this properly
* Add is_signature_valid method on CertificateRevocationList (#3849)Vincent Pelletier2017-08-127-0/+130
|
* bump pytest version (#3860)Alex Gaynor2017-08-101-1/+1
|
* Fixes #3821 -- improve output during release.py (#3848)Alex Gaynor2017-08-041-7/+2
| | | This should cause stdout/stderr for command we run to be displayed, and also print which commands we're running
* fixed a typo (#3847)Alex Gaynor2017-08-031-1/+1
|
* (mostly) revert wheel builder config change (#3846)Paul Kehrer2017-08-031-4/+1
| | | | | | | | * Revert "Remve outdated comment and linewrap (#3838)" This reverts commit 990d7596ca5d8dfa1d9331cdcb072fabf9d10fca. * remove the outdated comment
* port 2.0.3 changelog (#3845)Paul Kehrer2017-08-031-0/+9
|
* Fix weak linking of getentropy when compiling on older macOS (#3841)Paul Kehrer2017-08-031-0/+3
| | | | | | | | | | | | | * Fix weak linking of getentropy when compiling on older macOS We use weak linking in macOS to determine if the getentropy symbol is available. However, to do that we need to have a declaration that states the function is __attribute((weak_import)) at compile time. On macOS 10.12 this is provided in sys/random.h, but on older macOS the declaration doesn't exist at all, so we need to forward declare it ourselves. * update a comment and a style nit
* Make changelog anchors stable ids (#3840)Christian Heimes2017-08-031-0/+165
| | | | | Closes: #3839 Signed-off-by: Christian Heimes <christian@python.org>
* Remve outdated comment and linewrap (#3838)Alex Gaynor2017-08-031-2/+4
|
* deprecate unicode input for RFC822Name (#3836)Paul Kehrer2017-08-015-41/+108
| | | | | | * deprecate unicode input for RFC822Name * pep8...?
* deprecate auto-idna on UniformResourceIdentifier (#3832)Paul Kehrer2017-08-016-162/+273
| | | | | | | | | | * deprecate auto-idna on UniformResourceIdentifier * fix repr test * docs * some updated language
* Blacklist pytest 3.2.0 because it breaks us (#3835)Alex Gaynor2017-08-011-1/+1
| | | See upstream: https://github.com/pytest-dev/pytest/issues/2644
* note version added and deprecated for bytes_value/value on DNSName (#3833)Paul Kehrer2017-08-011-0/+4
|
* Begin the deprecation of auto-idna for x509.DNSName (#3830)Alex Gaynor2017-07-3011-164/+281
| | | | | | | | | | | | | | | | | | | | | | | | | | | | * Begin the deprecation of auto-idna for x509.DNSName Refs #3357 * fix warning * py3k fixes * fix docs * sigh * flake8 * these are words * words * tests for coverage * another test * do idna things * more idna things
generated by cgit v1.2.3 (git 2.25.1) at 2024-11-17 21:57:46 +0000