aboutsummaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
...
* | Merge pull request #2168 from reaperhulk/encode-kuAlex Gaynor2015-07-235-2/+109
|\ \ | | | | | | Support encoding KeyUsage into certificate signing requests
| * | Support encoding KeyUsage into certificate signing requestsPaul Kehrer2015-07-235-2/+109
| | |
* | | Merge pull request #2166 from reaperhulk/fix-multi-extension-bugAlex Gaynor2015-07-232-1/+26
|\| | | | | | | | when building a CSR adding > 1 extension would trigger a bug
| * | when building a CSR adding > 1 extension would trigger a bugPaul Kehrer2015-07-232-1/+26
|/ / | | | | | | | | | | We were checking sk_X509_EXTENSION_push for a value == 1, but in reality it returns the number of extensions on the stack. We now assert >= 1 and added a test.
| * Add test coverage for MultiBackend.sign_x509_certificateIan Cordasco2015-08-021-0/+8
| |
| * Use :doc: instead of :ref: for random-numbersIan Cordasco2015-08-022-4/+1
| |
| * Add sign_x509_certificate to MultiBackendIan Cordasco2015-08-022-0/+51
| | | | | | | | Add example of CertificateBuilder to the reference documentation
| * Add note to serial_number parameter about entropyIan Cordasco2015-08-024-15/+17
| | | | | | | | | | | | | | | | | | | | - Add reference to random-numbers.rst for easy intra-linking - Document critical parameter of CertificateBuilder.add_extension - Support InhibitAnyPolicy in the CertificateBuilder frontend but not in the backend - Slim down more tests - Fix up test that asserts the backend does not allow for unsupported extensions
| * Check for subject alternative name in testIan Cordasco2015-08-021-5/+18
| | | | | | | | Slim RSA key too small test
| * Update the docs to be more accurateIan Cordasco2015-08-021-3/+7
| |
| * Add some extra test coverageIan Cordasco2015-08-011-0/+19
| |
| * Slim tests by removing extra NameAttributesIan Cordasco2015-08-011-32/+0
| |
| * Minor pep8 and doc fixesIan Cordasco2015-08-012-3/+3
| |
| * Add _encode_asn1_int_gcIan Cordasco2015-08-011-1/+7
| | | | | | | | Ensure the certificate serial number is freed
| * Fix up parameter names in the docsIan Cordasco2015-08-011-4/+4
| |
| * Add check for an RSA Key being too smallIan Cordasco2015-08-013-15/+8
| | | | | | | | | | - Remove outdated/unnecessary/illegitimate TODOs - Fix up test for an RSA key that is too small
| * Document other two parameters from sign methodIan Cordasco2015-07-312-11/+32
| | | | | | | | | | | | | | - Remove incorrect CertificateBuilder doc-string - Check that serial numbers are non-negative and < 160 bits - Check that dates passed aren't earlier than the unix epoch - Remove version from CertificateBuilder.__init__ and version method
| * Add extra CertificateBuilder test using SHA512 and 512-bit RSA keyIan Cordasco2015-07-241-1/+49
| |
| * Check result of setting the serial numberIan Cordasco2015-07-242-2/+140
| | | | | | | | | | - Add checks for private key types - Add tests around new checks for types of private keys
| * Remove CertificateBuilder.versionIan Cordasco2015-07-244-46/+4
| | | | | | | | Default CertificateBuilder to Version.v3
| * Fix documentation referring to CertificateBuilder.set_versionIan Cordasco2015-07-211-1/+1
| |
| * Add tests to test_openssl backend for extra coverageIan Cordasco2015-07-202-0/+48
| |
| * Add another extension to our CertificateBuilder testIan Cordasco2015-07-201-0/+9
| |
| * Use correct exception class in openssl backendIan Cordasco2015-07-201-1/+1
| |
| * Add test coverage for x509.CertificateBuilderIan Cordasco2015-07-191-0/+133
| |
| * Remove unnecessary type checkIan Cordasco2015-07-191-2/+0
| |
| * Use explicit keyword args in the testsIan Cordasco2015-07-191-1/+1
| |
| * Handle SubjectAlternativeName extensions in the backendIan Cordasco2015-07-191-0/+2
| | | | | | | | They are handled in cryptography.x509 so they need to be handled here
| * Use test fixtures instead of generating private keysIan Cordasco2015-07-191-10/+2
| |
| * Construct extensions like a CSRIan Cordasco2015-07-191-6/+9
| | | | | | | | | | | | - Use _encode_basic_constraints appropriately - Create an appropriate object from the oid dotted string - Create the X509 Extension appropriately
| * Fix copy-paste errorsIan Cordasco2015-07-191-3/+3
| |
| * Fix x509.Name creation in CertificateBuilder testsIan Cordasco2015-07-181-10/+10
| |
| * Remove unnecessary helper functionsIan Cordasco2015-07-183-29/+10
| | | | | | | | | | - Update documented methods - Do not mute the CertificateBuilder object if no version is set
| * Make the CertificateBuilder interface more like the CSRBuilderIan Cordasco2015-07-182-44/+111
| |
| * Adds certificate builder.Andre Caron2015-07-184-0/+319
|/
* Merge pull request #2154 from alex/generating-a-csrPaul Kehrer2015-07-162-0/+80
|\ | | | | Fixed #2091 -- describe how to generate a CSR.
| * fixAlex Gaynor2015-07-161-1/+1
| |
| * fixed indentAlex Gaynor2015-07-131-1/+1
| |
| * line length and grammarAlex Gaynor2015-07-131-5/+7
| |
| * spellingAlex Gaynor2015-07-131-2/+2
| |
| * Fixed #2091 -- describe how to generate a CSR.Alex Gaynor2015-07-132-0/+78
| |
* | Merge pull request #2150 from reaperhulk/encode-uriAlex Gaynor2015-07-142-7/+33
|\ \ | | | | | | support URI general name encoding
| * | remove unused importPaul Kehrer2015-07-141-2/+0
| | |
| * | encode uriPaul Kehrer2015-07-132-7/+35
|/ /
* | Merge pull request #2149 from reaperhulk/better-uriAlex Gaynor2015-07-132-0/+58
|\ \ | |/ |/| expand UniformResourceIdentifier to parse and internally IDNA encode
| * expand UniformResourceIdentiier to parse and internally IDNA encodePaul Kehrer2015-07-122-0/+58
| |
* | Merge pull request #2137 from reaperhulk/encode-rfc822nameAlex Gaynor2015-07-122-1/+15
|\ \ | | | | | | Encode rfc822name
| * | support rfc822Name general name encodingPaul Kehrer2015-07-122-1/+15
| | |
* | | Merge pull request #2148 from reaperhulk/fix-random-orderAlex Gaynor2015-07-121-0/+1
|\ \ \ | |_|/ |/| | clear the error stack if d2i_ASN1_TYPE fails
| * | clear the error stack if d2i_ASN1_TYPE failsPaul Kehrer2015-07-121-0/+1
| |/ | | | | | | The random order jenkins job found a bug!