Commit message (Collapse) | Author | Age | Files | Lines | ||
---|---|---|---|---|---|---|
... | ||||||
* | disable smart quotes in sphinx to workaround a spellchecker issue (#3946) | Paul Kehrer | 2017-10-03 | 1 | -0/+2 | |
| | | | | This makes it so we don't have to pin sphinx while we wait for sphinxcontrib-spelling to properly handle smart quotes | |||||
* | Add support for AES XTS (#3900) | Paul Kehrer | 2017-10-01 | 2 | -0/+43 | |
| | | | | | | | | | | | | | | | | | | | | | | | | * Add support for AES XTS We drop the non-byte aligned test vectors because according to NIST http://csrc.nist.gov/groups/STM/cavp/documents/aes/XTSVS.pdf "An implementation may support a data unit length that is not a multiple of 8 bits." OpenSSL does not support this, so we can't use those test vectors. * fix docs and pep8 * docs fix * the spellchecker is so frustrating * add note about AES 192 for XTS (it's not supported) * docs work * enforce key length on ECB mode in AES as well (thanks XTS) * a few more words about why we exclude some test vectors for XTS | |||||
* | Declare that 2.1 is the last version to support Python 2.6 (#3944) | Alex Gaynor | 2017-10-01 | 1 | -2/+2 | |
| | | | | | | * Declare that 2.1 is the last version to support Python 2.6 * It's the Final Countdown! | |||||
* | add ChaCha20 support (#3919) | Paul Kehrer | 2017-09-28 | 1 | -0/+49 | |
| | | | | | | | | | | * add ChaCha20 support * review feedback * 256 divided by 8 is what again? * ... | |||||
* | Update the list of macOS versions we test on to match reality (#3942) | Alex Gaynor | 2017-09-27 | 1 | -1/+1 | |
| | ||||||
* | FreshestCRL extension support (#3937) | Paul Kehrer | 2017-09-23 | 1 | -0/+23 | |
| | | | | | | | | | | * add freshest CRL support * add tests * add changelog * add tests for FreshestCRL generation | |||||
* | support delta crl indicator extension (#3936) | Paul Kehrer | 2017-09-22 | 1 | -0/+32 | |
| | | | This is an extension for CRLs | |||||
* | docs for what bytes means for DNSName, URI, and RFC822Name (#3904) | Paul Kehrer | 2017-09-20 | 2 | -9/+41 | |
| | ||||||
* | add Freshest CRL and Delta CRL Indicator test vectors (#3932) | Paul Kehrer | 2017-09-20 | 1 | -0/+4 | |
| | ||||||
* | Mark our custom sphinx extension as parallel safe (#3935) | Alex Gaynor | 2017-09-20 | 1 | -0/+4 | |
| | ||||||
* | correct the docs for CRLReason (#3930) | Paul Kehrer | 2017-09-20 | 1 | -2/+1 | |
| | ||||||
* | Switch NIST PDFs from nvlpubs to csrc which is HTTPS (#3929) | Alex Gaynor | 2017-09-20 | 5 | -8/+8 | |
| | ||||||
* | Update the rest of the NIST urls to their new HTTPS homes (#3928) | Alex Gaynor | 2017-09-20 | 3 | -4/+4 | |
| | ||||||
* | add unique identifier test vector (#3925) | Paul Kehrer | 2017-09-19 | 1 | -2/+4 | |
| | | | | | | * add unique identifier test vector * wrap a line I didn't even touch... | |||||
* | Update PKITS link (#3923) | Alex Gaynor | 2017-09-20 | 1 | -1/+1 | |
| | ||||||
* | Update NIST CAVP url (#3922) | Alex Gaynor | 2017-09-19 | 1 | -1/+1 | |
| | ||||||
* | add chacha20 test vectors from RFC 7539 (#3918) | Paul Kehrer | 2017-09-14 | 1 | -0/+1 | |
| | ||||||
* | add a faq note about having a compiler that is too old (#3902) | Paul Kehrer | 2017-09-11 | 1 | -0/+9 | |
| | | | | | | | | | * add a faq note about having a compiler that is too old Also add a bit of text explaining what to do on OpenBSD 6.1 and earlier since that is the most likely place this will occur. * I always forget it spell checks titles | |||||
* | [WIP] add support for the TLSFeature extension in x509 (#3899) | Paul Kehrer | 2017-09-10 | 1 | -0/+45 | |
| | | | | | | | | | | | | | | | | | | * add support for the TLSFeature extension in x509 This extension is used for OCSP Must-Staple. * fix changelog link * pep8 * refactor to support the sequence properly and add status_request_v2 * update some language * add test vector, implement eq/ne/hash on TLSFeature * address review comments | |||||
* | add X509 test vector with a TLS Feature (RFC 7633) extension (#3898) | Paul Kehrer | 2017-09-08 | 1 | -0/+3 | |
| | ||||||
* | oaep label vector (#3895) | Paul Kehrer | 2017-09-07 | 1 | -0/+2 | |
| | | | | | | | | | | * oaep label vector * add count so we can use the nist vector loader * add RSA key from the boring vectors as well https://boringssl.googlesource.com/boringssl/+/ce3773f9fe25c3b54390bc51d72572f251c7d7e6/crypto/evp/evp_tests.txt#8 | |||||
* | add initial OCSP request test vector (#3890) | Paul Kehrer | 2017-09-07 | 1 | -0/+5 | |
| | ||||||
* | Document that we care about our infrastructure's security as well (#3874) | Alex Gaynor | 2017-08-24 | 1 | -0/+8 | |
| | ||||||
* | Fix `load_rsa_public_numbers` documentation (#3871) | David Sanders | 2017-08-20 | 1 | -1/+1 | |
| | ||||||
* | Fix mistake in `RSAPublicKey.verify` documentation (#3872) | David Sanders | 2017-08-20 | 1 | -1/+1 | |
| | ||||||
* | add test vector with invalid basicconstraints (#3866) | Paul Kehrer | 2017-08-15 | 2 | -0/+4 | |
| | | | | | | * add test vector with invalid basicconstraints * sigh | |||||
* | add changelog and a warning for is_signature_valid on crl (#3861) | Paul Kehrer | 2017-08-12 | 1 | -0/+6 | |
| | | | | | | * add changelog and a warning * document this properly | |||||
* | Add is_signature_valid method on CertificateRevocationList (#3849) | Vincent Pelletier | 2017-08-12 | 2 | -0/+11 | |
| | ||||||
* | deprecate unicode input for RFC822Name (#3836) | Paul Kehrer | 2017-08-01 | 1 | -0/+16 | |
| | | | | | | * deprecate unicode input for RFC822Name * pep8...? | |||||
* | deprecate auto-idna on UniformResourceIdentifier (#3832) | Paul Kehrer | 2017-08-01 | 1 | -4/+15 | |
| | | | | | | | | | | * deprecate auto-idna on UniformResourceIdentifier * fix repr test * docs * some updated language | |||||
* | note version added and deprecated for bytes_value/value on DNSName (#3833) | Paul Kehrer | 2017-08-01 | 1 | -0/+4 | |
| | ||||||
* | Begin the deprecation of auto-idna for x509.DNSName (#3830) | Alex Gaynor | 2017-07-30 | 3 | -5/+13 | |
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | * Begin the deprecation of auto-idna for x509.DNSName Refs #3357 * fix warning * py3k fixes * fix docs * sigh * flake8 * these are words * words * tests for coverage * another test * do idna things * more idna things | |||||
* | Updating doing a release to have a correct path (#3790) | Alex Gaynor | 2017-07-17 | 1 | -1/+1 | |
| | ||||||
* | update docs to reflect #3364 (#3786) | Paul Kehrer | 2017-07-17 | 1 | -1/+1 | |
| | ||||||
* | add AESGCM AEAD support (#3785) | Paul Kehrer | 2017-07-17 | 2 | -0/+76 | |
| | | | | | | | | * add AESGCM AEAD support * remove stray newline * move AESGCM docs above CCM | |||||
* | move tag_length to the AESCCM constructor (#3783) | Paul Kehrer | 2017-07-16 | 1 | -11/+7 | |
| | | | | | | * move tag_length to the AESCCM constructor * review feedback | |||||
* | AESCCM support (#3700) | Paul Kehrer | 2017-07-16 | 1 | -0/+88 | |
| | ||||||
* | Fixed #3777 -- document an additional dependency (#3779) | Alex Gaynor | 2017-07-14 | 1 | -1/+2 | |
| | ||||||
* | Attempt to use coverage to quantify how many of the CONDITIONAL_NAMES we ↵ | Alex Gaynor | 2017-07-08 | 1 | -4/+11 | |
| | | | | | | | | | | | | | | | | | | really use (#3763) * Attempt to use coverage to quantify how many of the CONDITIONAL_NAMES we really use * rewrite file to improve coverage * Write it this way so we can use line coverage * lost this one :-( * fix comment and flake8 * update the docs as well * flake8 | |||||
* | add rfc 3526 DH groups (#3767) | Paul Kehrer | 2017-07-08 | 1 | -0/+3 | |
| | ||||||
* | we forgot to document these DH methods (#3757) | Paul Kehrer | 2017-07-06 | 1 | -0/+27 | |
| | ||||||
* | write some words about encrypt/decrypt in fernet (#3756) | Paul Kehrer | 2017-07-06 | 1 | -0/+8 | |
| | ||||||
* | update static wheel install docs (#3754) | Paul Kehrer | 2017-07-04 | 1 | -4/+5 | |
| | | | | | | * update static wheel install docs * parentheses | |||||
* | Order our supported OpenSSL versions reasonably (#3752) | Alex Gaynor | 2017-07-03 | 1 | -1/+1 | |
| | ||||||
* | Fixes #3745 -- add the any EKU EKU (#3750) | Alex Gaynor | 2017-07-03 | 1 | -0/+7 | |
| | | | | | | | | | | * Fixes #3745 -- add the any EKU EKU * docs * whitespace * versionadded | |||||
* | update linux install docs and release instructions (#3746) | Paul Kehrer | 2017-07-01 | 2 | -15/+52 | |
| | | | | | | * update linux install docs and release instructions * rhel/centos is so bad they don't even have python3 | |||||
* | don't use long keys because they can be confusing wrt bits/bytes (#3734) | Paul Kehrer | 2017-06-28 | 1 | -17/+17 | |
| | | | | | | | | * don't use long keys because they can be confusing wrt bits/bytes * make sure we say bytes everywhere * shorten the scrypt output to 32 bytes as well | |||||
* | Funcs macros gone (#3695) | Paul Kehrer | 2017-06-27 | 1 | -3/+1 | |
| | | | | | | | | * No more FUNCS/MACROS distinction * change the docs to not talk about MACROS since they're gone * remove out of date comment | |||||
* | remove python 3.3 from CI (#3729) | Paul Kehrer | 2017-06-26 | 1 | -3/+1 | |
| | | | | | | * remove python 3.3 from CI * remove 3.3 everywhere, not just from CI | |||||
* | doc the relationship between PrivateKey and PrivateKeyWithSerialization (#3721) | Paul Kehrer | 2017-06-24 | 5 | -8/+34 | |
| | | | | | | | | * doc the relationship between PrivateKey and PrivateKeyWithSerialization Or at least do it better. * let's talk about opaque keys |