Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | open master for eighth release development | Paul Kehrer | 2014-12-17 | 1 | -1/+1 |
| | |||||
* | Merge pull request #1540 from reaperhulk/update-changelog-0.7 | Alex Gaynor | 2014-12-17 | 1 | -1/+1 |
|\ | | | | | 0.7 changelog and version bump | ||||
| * | 0.7 changelog and version bump | Paul Kehrer | 2014-12-17 | 1 | -1/+1 |
| | | |||||
* | | Merge pull request #1538 from reaperhulk/named-curve | Alex Gaynor | 2014-12-17 | 1 | -0/+14 |
|\ \ | | | | | | | Set OPENSSL_EC_NAMED_CURVE on our EC_KEY instances | ||||
| * | | british english? never heard of it. | Paul Kehrer | 2014-12-17 | 1 | -2/+2 |
| | | | |||||
| * | | mark named curve inside EC key classes | Paul Kehrer | 2014-12-17 | 2 | -19/+14 |
| | | | |||||
| * | | _backend is not a property on a backend | Paul Kehrer | 2014-12-17 | 1 | -2/+1 |
| | | | |||||
| * | | Set OPENSSL_EC_NAMED_CURVE on our EC_KEY instances | Alex Stapleton | 2014-12-17 | 2 | -0/+20 |
| | | | | | | | | | | | | | | | This means any X.509 certs generated from our keys will be encoded along with the curve OID so that we can still load them afterwards. | ||||
* | | | Merge pull request #1539 from reaperhulk/move-ec-named-curve-check | Alex Gaynor | 2014-12-17 | 2 | -20/+7 |
|\ \ \ | |_|/ |/| | | move the NID_undef check for EC named curve | ||||
| * | | move the NID_undef check for EC named curve | Paul Kehrer | 2014-12-17 | 2 | -20/+7 |
| |/ | |||||
* | | Merge pull request #1537 from alex/cleanup-ssh-serialization | Paul Kehrer | 2014-12-17 | 1 | -2/+2 |
|\ \ | |/ |/| | Use the slightly more natural API here | ||||
| * | Use the slightly more natural API here | Alex Gaynor | 2014-12-17 | 1 | -2/+2 |
| | | |||||
* | | Merge pull request #1499 from reaperhulk/x509-ossl-impl | Alex Gaynor | 2014-12-17 | 5 | -3/+230 |
|\ \ | |/ |/| | X509Backend support in OpenSSL backend | ||||
| * | add parsed_version attribute to InvalidVersion | Paul Kehrer | 2014-12-15 | 2 | -2/+4 |
| | | |||||
| * | update error msg text based on feedback | Paul Kehrer | 2014-12-15 | 1 | -1/+1 |
| | | |||||
| * | revert asn1 time parsing to avoid locale problems | Paul Kehrer | 2014-12-15 | 1 | -5/+14 |
| | | |||||
| * | rename X509 classes to remove X509 and improve some tests | Paul Kehrer | 2014-12-15 | 3 | -11/+11 |
| | | |||||
| * | sigh | Paul Kehrer | 2014-12-15 | 2 | -2/+2 |
| | | |||||
| * | raise error on unnamed EC curve certificates when calling public_key | Paul Kehrer | 2014-12-15 | 1 | -0/+20 |
| | | | | | | | | ...for now | ||||
| * | move to macros due to const/non-const | Paul Kehrer | 2014-12-15 | 1 | -1/+1 |
| | | |||||
| * | try using ASN1_TIME_print to get ASN1_TIME data | Paul Kehrer | 2014-12-15 | 2 | -14/+6 |
| | | |||||
| * | simplify serial conversion | Paul Kehrer | 2014-12-15 | 1 | -3/+2 |
| | | |||||
| * | reorganize a bunch of things related to the x509certificate interface | Paul Kehrer | 2014-12-15 | 2 | -2/+44 |
| | | |||||
| * | move mem_bio creation/reading to backend | Paul Kehrer | 2014-12-15 | 2 | -18/+24 |
| | | |||||
| * | change it to not_valid_* why not | Paul Kehrer | 2014-12-15 | 2 | -4/+4 |
| | | |||||
| * | py3 fixes | Paul Kehrer | 2014-12-15 | 1 | -1/+1 |
| | | |||||
| * | address review feedback | Paul Kehrer | 2014-12-15 | 3 | -7/+6 |
| | | |||||
| * | improve tests, remove some outdated comments | Paul Kehrer | 2014-12-15 | 1 | -3/+0 |
| | | |||||
| * | improve x509 load error handling | Paul Kehrer | 2014-12-15 | 1 | -2/+8 |
| | | |||||
| * | update docs, test invalid x509 version | Paul Kehrer | 2014-12-15 | 2 | -1/+8 |
| | | |||||
| * | move x509 to top level, add more docs | Paul Kehrer | 2014-12-15 | 3 | -6/+25 |
| | | |||||
| * | initial x509 version support | Paul Kehrer | 2014-12-15 | 1 | -1/+11 |
| | | | | | | | | Adds enum34 as a dependency | ||||
| * | initial x509 openssl implementation | Paul Kehrer | 2014-12-15 | 3 | -1/+120 |
| | | |||||
* | | Merge pull request #1532 from reaperhulk/fix-1531 | Alex Gaynor | 2014-12-17 | 1 | -10/+37 |
|\ \ | | | | | | | add OpenSSH DSS public key loading | ||||
| * | | use the right comparison | Paul Kehrer | 2014-12-17 | 1 | -2/+2 |
| | | | |||||
| * | | update docs, hoist b64decode up and re-add test for it | Paul Kehrer | 2014-12-17 | 1 | -10/+11 |
| | | | |||||
| * | | add OpenSSH DSS public key loading | Paul Kehrer | 2014-12-16 | 1 | -7/+33 |
| | | | | | | | | | | | | fixes #1531 | ||||
* | | | Merge pull request #1534 from callidus/master | Alex Gaynor | 2014-12-17 | 5 | -2/+29 |
|\ \ \ | |/ / |/| | | Adding more X509 related cffi bindings | ||||
| * | | Moving things about to prevent compiler warnings with newer OpenSSL | Tim Kelsey | 2014-12-17 | 2 | -4/+4 |
| | | | | | | | | | | | | | | | - some of these bindings changed to const in various newer OpenSSL versions. Moving them to macros section to acccount for this | ||||
| * | | Making EVP_sha* bindings none conditional. | Tim Kelsey | 2014-12-17 | 1 | -7/+4 |
| | | | | | | | | | | | | - these were added in OpenSSL 0.9.8, a supported version. | ||||
| * | | Adding more cffi bindings to openssl backend. | Tim Kelsey | 2014-12-17 | 5 | -1/+31 |
| | | | | | | | | | | | | - specifically adding items relating to X509 certificates. | ||||
* | | | fix some cffi related warnings | Paul Kehrer | 2014-12-16 | 1 | -20/+20 |
| | | | |||||
* | | | properly remove flags that don't exist when CMS is not available | Paul Kehrer | 2014-12-16 | 1 | -0/+20 |
| | | | |||||
* | | | bind some cms flags | Paul Kehrer | 2014-12-16 | 1 | -0/+41 |
| |/ |/| | |||||
* | | Merge pull request #1527 from alex/pr/1517 | Paul Kehrer | 2014-12-15 | 2 | -3/+81 |
|\ \ | | | | | | | Added SSH public key loading | ||||
| * | | two flake8 fixes | Alex Gaynor | 2014-12-15 | 1 | -2/+0 |
| | | | |||||
| * | | A handful of tiny fixes | Alex Gaynor | 2014-12-15 | 2 | -22/+34 |
| | | | |||||
| * | | Added optimization for Python 3 to use int.from_bytes instead of Python code | Mark Adams | 2014-12-14 | 1 | -1/+7 |
| | | | |||||
| * | | Made a couple of minor tweaks to clean up _read_next_string and _read_next_mpint | Mark Adams | 2014-12-14 | 1 | -3/+1 |
| | | | |||||
| * | | Added better parsing for RFC 4251 string and mpint values. | Mark Adams | 2014-12-14 | 1 | -22/+40 |
| | | | | | | | | | | | | | | | Also moved several of the SSH key splitting and validation checks up into the load_ssh_public_key method since they will apply to more than just RSA. Added additional checks to make sure the key doesn't contain extraneous data |