Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | Add PEM_write_bio_DHparams binding | evilaliv3 | 2015-12-24 | 1 | -0/+1 |
| | |||||
* | add binding for setting the revocation date of an X509_REVOKED | Paul Kehrer | 2015-12-23 | 1 | -0/+2 |
| | |||||
* | Remove spaces. | Cory Benfield | 2015-12-23 | 1 | -1/+1 |
| | |||||
* | Add binding for CommonCrypto SecTrustCopyAnchorCertificates | Cory Benfield | 2015-12-23 | 2 | -0/+23 |
| | |||||
* | Comment lingering SSLv2 symbol. | Cory Benfield | 2015-12-14 | 1 | -0/+4 |
| | |||||
* | Remove SSLv2 bindings. | Cory Benfield | 2015-12-14 | 1 | -16/+1 |
| | | | | | | | | | This commit removes bindings that allow users to set SSLv2 handshake methods. These are regarded as unnecessary and out-of-date: see #2527. This commit does leave in a few options that refer to SSLv2 in order to avoid breaking deployments that rely on them, and in order to allow users to continue to request that SSLv2 not be enabled at all in their OpenSSL. | ||||
* | Merge pull request #2515 from reaperhulk/sigbus | Alex Gaynor | 2015-12-09 | 1 | -16/+0 |
|\ | | | | | remove the bindings for these x86_64 specific EC functions | ||||
| * | remove the bindings for these x86_64 specific EC functions | Paul Kehrer | 2015-12-09 | 1 | -16/+0 |
| | | | | | | | | | | | | | | | | We have no need to invoke them directly and their presence triggers a bug related to Fedora 23's hobbling of openssl EC functions (uugh) This also fixes the SIGBUS issue in #2503, although that is more appropriately resolved via header fixes for universal libraries on OS X. | ||||
* | | expose tbs_certrequest_bytes and signature on CertificateSigningRequest | Paul Kehrer | 2015-12-03 | 1 | -0/+4 |
| | | |||||
* | | Merge pull request #2504 from reaperhulk/encode-name-constraints | Alex Gaynor | 2015-12-03 | 1 | -0/+12 |
|\ \ | | | | | | | implement support for encoding name constraints | ||||
| * | | implement support for encoding name constraints | Paul Kehrer | 2015-12-02 | 1 | -0/+12 |
| |/ | |||||
* | | shouldn't need values here | Paul Kehrer | 2015-12-01 | 1 | -3/+3 |
| | | |||||
* | | if EC isn't present we need to declare this enum | Paul Kehrer | 2015-12-01 | 1 | -1/+5 |
| | | |||||
* | | let the compiler figure out these values | Paul Kehrer | 2015-12-01 | 1 | -3/+4 |
| | | |||||
* | | fix a warning in cffi | Paul Kehrer | 2015-12-01 | 1 | -1/+5 |
|/ | | | | | cffi doesn't want to guess the type, so we'll deopaque the enum and strip the values out of the lib if EC is unavailable | ||||
* | Add more CRYPTO_EX_DATA functions | Christian Heimes | 2015-11-20 | 3 | -0/+20 |
| | | | | | | | | The patch adds a couple of additional functions to create, store and retrieve ex_data on SSL, SSL_CTX and X509 objects. It also adds the missing get_ex_new_index function for X509_STORE_CTX. Signed-off-by: Christian Heimes <cheimes@redhat.com> | ||||
* | add tbsCertList and signature interfaces to CRLs | Erik Trauschke | 2015-11-19 | 1 | -0/+3 |
| | |||||
* | RHEL 6.4 and below don't even claim to be 1.0.0 final... | Paul Kehrer | 2015-11-12 | 1 | -1/+1 |
| | |||||
* | whoops | Paul Kehrer | 2015-11-12 | 1 | -0/+1 |
| | |||||
* | reorganize and rename | Paul Kehrer | 2015-11-12 | 1 | -10/+10 |
| | |||||
* | these functions were added in 1.0.0, while CMS was added in 0.9.8h | Paul Kehrer | 2015-11-12 | 1 | -0/+10 |
| | | | | | We didn't catch this in our CI because all our 0.9.8 targets have CMS disabled or are older than 0.9.8h | ||||
* | Merge pull request #2467 from reaperhulk/fix-version-check | Alex Gaynor | 2015-11-04 | 1 | -2/+2 |
|\ | | | | | these flags were actually added in 1.0.2beta2, not before that. | ||||
| * | these flags were actually added in 1.0.2beta2, not before that. | Paul Kehrer | 2015-11-05 | 1 | -2/+2 |
| | | |||||
* | | remove malloc_debug_init as it has occasionally caused compile issues | Paul Kehrer | 2015-11-05 | 1 | -1/+0 |
|/ | | | | We also don't use it in our backend (and neither does pyOpenSSL) | ||||
* | add support for Certificate signature and tbs_certificate | Paul Kehrer | 2015-11-03 | 2 | -1/+3 |
| | |||||
* | make engine addition idempotent | Paul Kehrer | 2015-10-21 | 1 | -0/+2 |
| | | | | | | | | | | | Threading issues keep cropping up. ENGINE_add already acquires a lock at the C layer via CRYPTO_w_lock (provided you have registered the locking callbacks) so let's try to use that. As part of this we'll try to init the openssl locks, but of course there's potentially a race there as well. Clearly this isn't the real fix but it might improve the situation while we try to determine what to do. | ||||
* | Remove long comments and workarounds, use new cffi syntax | Alex Gaynor | 2015-10-21 | 2 | -36/+2 |
| | |||||
* | add binding for d2i_GENERAL_NAMES() | Erik Trauschke | 2015-10-15 | 1 | -0/+2 |
| | |||||
* | extend pkcs7 openssl bindings | Dominic Chen | 2015-10-13 | 2 | -2/+32 |
| | |||||
* | rename env var to CRYPTOGRAPHY_OSX_NO_LINK_FLAGS | Paul Kehrer | 2015-08-31 | 1 | -1/+1 |
| | |||||
* | no need for None | Paul Kehrer | 2015-08-29 | 1 | -1/+1 |
| | |||||
* | add support for static linking of the openssl backend on OS X | Paul Kehrer | 2015-08-29 | 1 | -3/+16 |
| | |||||
* | Removed SSL_renegotiate_abbreviated binding | kjav | 2015-08-28 | 1 | -1/+0 |
| | | | As this is not supported in OpenSSL < 1.01 | ||||
* | Added bindings for SSL_renegotiate_<pending/abbreviated> | kjav | 2015-08-28 | 1 | -0/+2 |
| | |||||
* | Add SSL_renegotiate binding. | Terry Chia | 2015-08-28 | 1 | -0/+1 |
| | |||||
* | add set_cert_cb | Maximilian Hils | 2015-08-25 | 1 | -0/+17 |
| | |||||
* | libre doesn't have these fields (and might only be used in sslv2 anyway) | Paul Kehrer | 2015-08-19 | 1 | -2/+0 |
| | |||||
* | compilation fix | Paul Kehrer | 2015-08-19 | 1 | -2/+4 |
| | |||||
* | style fix + remove some elements of the struct that aren't in 0.9.8 | Paul Kehrer | 2015-08-18 | 1 | -5/+2 |
| | |||||
* | added attribs to SSL_SESSION, SSL_SESSION_print. CIPHER_description | MiWCryptAnalytics | 2015-08-18 | 1 | -0/+11 |
| | | | For a project I am working on I need some session reflection directly from python. This change adds the required openssl SSL_SESSION struct attributes and functions within OpenSSL API | ||||
* | support InhibitAnyPolicy in CertificateBuilder | Paul Kehrer | 2015-08-08 | 1 | -0/+1 |
| | |||||
* | Merge pull request #2226 from lluixhi/master | Paul Kehrer | 2015-08-08 | 1 | -1/+1 |
|\ | | | | | Fix build with LibreSSL >= 2.2.2 | ||||
| * | Fix build with LibreSSL >= 2.2.2 | Lluixhi Scura | 2015-08-08 | 1 | -1/+1 |
| | | | | | | | | LIBRESSL_VERSION_NUMBER is now being incremented. | ||||
* | | more openssl bindings for encoding certificate policy structures | Paul Kehrer | 2015-08-08 | 2 | -0/+5 |
| | | |||||
* | | add support for encoding SubjectKeyIdentifier to CertificateBuilder | Paul Kehrer | 2015-08-08 | 1 | -0/+1 |
|/ | |||||
* | add a few additional bindings for AuthorityKeyIdentifier in OpenSSL | Paul Kehrer | 2015-08-05 | 1 | -0/+2 |
| | |||||
* | more bindings for CRLDistributionPoints encoding | Paul Kehrer | 2015-08-05 | 2 | -2/+11 |
| | |||||
* | Merge pull request #2180 from reaperhulk/easy-conditional-fix | Donald Stufft | 2015-08-04 | 42 | -514/+0 |
|\ | | | | | create a ConditionalLibrary and remove unsupported items | ||||
| * | remove commoncrypto CONDITIONAL_NAMES | Paul Kehrer | 2015-08-03 | 12 | -25/+0 |
| | | |||||
| * | remove openssl CONDITIONAL_NAMES | Paul Kehrer | 2015-08-03 | 30 | -489/+0 |
| | |