| Commit message (Collapse) | Author | Age | Files | Lines |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
* Add a way to pass current time to Fernet
The motivation behind this is to be able to unit test code using Fernet
easily without having to monkey patch global state.
* Reformat to satisfy flake8
* Trigger a Fernet.encrypt() branch missing from coverage
* Revert specifying explicit current time in MultiFernet.rotate()
Message's timestamp is not verified anyway since ttl is None.
* Change the Fernet's explicit current time API slightly
This's been suggested in code review.
* Fix a typo
* Fix a typo
* Restore full MultiFernet test coverage and fix a typo
* Restore more coverage
time.time() is not called by MultiFernet.rotate() anymore so the monkey
patching and lambda need to go, because the patched function is not used
and coverage calculation will rightfully notice it.
* Remove an unused import
* Document when the *_at_time Fernet methods were added
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
primitives (#5271)
* Update key-derivation-functions.rst
Add missing exception to documentation
* Update key-derivation-functions.rst
Adding missing exception documentation for AlreadyFinalized to all the derive() functions missing it
* Removed trailing whitespace
|
| |
|
| |
|
|
|
|
| |
Keys are passed to base64.urlsafe_b64decode for decoding and it accepts
text as well as bytes.
|
|
|
| |
mis-named parameter
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
* goodbye azure
* Update tox.ini
Co-Authored-By: Alex Gaynor <alex.gaynor@gmail.com>
* review comments
* update a comment
* delete final azure yaml
* linting
Co-authored-by: Alex Gaynor <alex.gaynor@gmail.com>
|
|
|
|
|
|
|
| |
* Document that we test on bullseye
* Update spelling_wordlist.txt
* Update installation.rst
|
| |
|
|
|
|
|
|
|
|
|
| |
* Update insallation.rst to reflect our current test matrix
* Update installation.rst
* Update installation.rst
* Update installation.rst
|
| |
|
| |
|
| |
|
| |
|
|
|
|
|
| |
* Fixed linkcheck
* linkcheck
|
|
|
|
|
|
|
|
|
| |
* Replace dead link
* Explicitly run for all PRs
* Update azure-pipelines.yml
* Update wheel-builder.yml
|
|
|
|
|
|
|
|
| |
* Replace legacy file handling with a context manager.
* flake8 fix
Co-authored-by: Alex Gaynor <alex.gaynor@gmail.com>
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
| |
* drop python 3.4 support
Our dependencies have started dropping support so it is becoming
difficult to test. Additionally, Python 3.4 represents <2% of our
downloads, so taking on a large maintenance burden to maintain support
isn't a good use of limited time. Accordingly, we're dropping testing
infrastructure and migrating our abi3 wheels to py35+.
* use removed instead of dropped
|
| |
|
|
|
|
|
|
|
|
|
|
| |
* Windows Installation: fix link to binaries
While https://github.com/pyca/infra/tree/master/windows/openssl points a trusted source (which would be preferable),
pyca/infra currently does not provide any Windows binaries for download. Linking to the official OpenSSL wiki seems to
be a reasonable compromise.
* fix whitespace
|
|
|
|
|
|
|
|
|
|
|
|
| |
* add single_extensions to OCSPResponse (#4753)
* new vector, updateed docs, more stringent parser, changelog, etc
* simplify PR (no SCT for now)
* add a comment
* finish pulling out the sct stuff so tests might actually run
|
|
|
|
| |
(#5057)
|
| |
|
|
|
|
|
|
| |
* issue-5039: added documentation for curve attribute on EllipticCurvePrivateKey based on existing docs
* issue-5039: changed indentation
|
| |
|
| |
|
| |
|
|
|
|
| |
Move the `backend` argument up with the rest of the constructor
arguments, otherwise it's easy to miss it.
|
|
|
|
| |
The documentation states that `backend` should be a `HashBackend`
instance when in fact it should be a `HMACBackend` instance.
|
|
|
|
|
|
|
|
|
|
|
|
| |
* Fixes #5018 -- break users on OpenSSL 1.0.1
* Grammar
* Syntax error
* Missing import
* Missing import
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
* Support ed25519 in csr/crl creation
* Tests for ed25519/x509
* Support ed448 in crt/csr/crl creation
* Tests for ed448/x509
* Support ed25519/ed448 in OCSPResponseBuilder
* Tests for eddsa in OCSPResponseBuilder
* Builder check missing in create_x509_csr
* Documentation update for ed25519+ed448 in x509
|
|
|
|
|
|
|
|
|
|
| |
* fix coverage by adding two artificial DSA public keys
One key removes the optional parameters from the structure to cover a
branch conditional, and the other key has its BITSTRING padding value
set to a non-zero value.
* lexicographic? never heard of it
|
|
|
|
| |
- Note that signatures are DER-encoded
- Note that signatures can be encoded from r,s using util function
|
| |
|
| |
|
| |
|
|
|
|
|
|
|
|
|
|
| |
* ed25519 support in x509 certificate builder
This adds minimal ed25519 support. More to come.
* Apply suggestions from code review
Co-Authored-By: Alex Gaynor <alex.gaynor@gmail.com>
|
| |
|
|
|
|
|
|
|
|
| |
* more ed25519 vectors, better description of RFC 8410 vector
* typo
* oops, doc'd wrong
|
| |
|
| |
|
| |
|
|
|
|
|
|
| |
* Fixes #4731 -- update the secure memory wiping docs
* It's a word!
|
|
|
|
|
|
| |
* Refs #4923; deprecate OpenSSL 1.0.1
* changelog
|
|
|
|
|
|
|
|
|
|
|
|
| |
* add manylinux2010 wheel builder
* various updates
* empty commit
* need to pass a plat tag
* hacks need hacks
|
| |
|