Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | handle previous registration by raising RuntimeError | Glyph | 2015-06-27 | 1 | -3/+1 |
| | |||||
* | unnecessary belt-and-suspenders error checking | Glyph | 2015-06-27 | 1 | -2/+0 |
| | |||||
* | coding standard | Glyph | 2015-06-27 | 1 | -1/+2 |
| | |||||
* | clear the error queue | Glyph | 2015-06-27 | 1 | -0/+4 |
| | | | | | | | make sure we're not in an error state when we start, because then all bets are off and we might consume an error we didn't cause. then clear the error queue, which restores the behavior of the way the C module was previously checking for existence of its engine. | ||||
* | bind ERR_clear_error | Glyph | 2015-06-27 | 1 | -0/+1 |
| | |||||
* | also retain method with a global reference | Glyph | 2015-06-27 | 1 | -5/+7 |
| | |||||
* | move everything to module scope; much simpler that way | Glyph | 2015-06-27 | 1 | -67/+58 |
| | |||||
* | don't need the intermediary 'struct' declaration. | Glyph | 2015-06-27 | 1 | -10/+8 |
| | |||||
* | comply with C coding standard, for which there is no linter | Glyph | 2015-06-26 | 2 | -9/+9 |
| | |||||
* | lint | Glyph | 2015-06-26 | 1 | -0/+1 |
| | |||||
* | pointer shenanigans | Glyph | 2015-06-26 | 1 | -2/+3 |
| | | | | | | | | apparently (?) ENGINE_by_id treats its ID as an opaque *pointer* key and not actually as a string, and while CPython's CFFI support seems to manage to preserve the pointer identity when using the same Python string, PyPy doesn't. Fix things to use a cffi-wrapped pointer again and tests pass on PyPy. | ||||
* | remove remaining vestiges, make adding twice work | Glyph | 2015-06-26 | 5 | -208/+2 |
| | |||||
* | python implementation | Glyph | 2015-06-26 | 1 | -1/+65 |
| | |||||
* | use new constant | Glyph | 2015-06-26 | 1 | -1/+1 |
| | |||||
* | a place for a couple of new constants to live | Glyph | 2015-06-26 | 1 | -0/+2 |
| | |||||
* | deopaque a couple of things | Glyph | 2015-06-26 | 1 | -2/+11 |
| | |||||
* | Merge branch 'master' into param-ordering | Alex Gaynor | 2015-06-26 | 1 | -0/+4 |
|\ | |||||
| * | test notimplementederror for unsupported csr extensions in backends | Paul Kehrer | 2015-06-26 | 1 | -0/+4 |
| | | |||||
* | | Make the parameter ordering in sign() consistent with other code | Alex Gaynor | 2015-06-26 | 1 | -1/+1 |
|/ | |||||
* | Use utf8 to encode attribute values instead of ascii | Ian Cordasco | 2015-06-24 | 1 | -2/+2 |
| | |||||
* | Add tests to the CSR Builder for EC and DSA keys | Ian Cordasco | 2015-06-24 | 1 | -1/+12 |
| | | | | | | This skips certain tests on certain versions of differences in how X509_REQ_sign works on those versions. A separate pull request will address those differences. | ||||
* | Address review comments around add_extension method | Ian Cordasco | 2015-06-24 | 1 | -2/+3 |
| | | | | | | | | | - Fix typo in the docs (s/buidlder/builder/) - Remove default from the method declaration and docs - Replace ValueError with NotImpelementedError for unsupported X.509 extensions - Add TODO comment as requested by Alex - Fix test to pass critical=False since it no longer is a default value | ||||
* | Only allow subject_name to be set once on a Builder | Ian Cordasco | 2015-06-24 | 1 | -0/+2 |
| | |||||
* | Unconditionally encode values to ascii | Ian Cordasco | 2015-06-24 | 1 | -5/+2 |
| | |||||
* | Update registering pp with ffi.gc | Ian Cordasco | 2015-06-24 | 1 | -4/+3 |
| | | | | | This makes it more in-line with existing functions, e.g., L40-L47 of src/cryptography/hazmat/backends/openssl/x509.py @ b0e8ffa | ||||
* | Update CSR tests and implementation | Ian Cordasco | 2015-06-24 | 2 | -2/+3 |
| | | | | | | | | | | - Use keyword arguments for x509.BasicConstraints in tests (missed in b790edbdc8fb9a026353d6fb99994326197705c7). - Place X509_request garbage collection under assertion. - Assert that X509 extensions created are not null. - Don't copy the extensions list in CertificateSigningBuilder. They're never appended to, so copying isn't necessary. - Use RSA key fixtures instead of generating new ones on each test run | ||||
* | Address code review regarding style and gc | Ian Cordasco | 2015-06-24 | 1 | -12/+13 |
| | | | | | | | | | - Use keyword arguments for x509.BasicConstraints in several places - Use SHA256 instead of SHA1 in documented examples - Give function variables meaningful names in _encode_asn1_str - Accept a x509.BasicConstraints object in _encode_basic_constraints - Properly garbage-collect some things - Raise a NotImplementedError instead of a ValueError | ||||
* | Removes set_ prefix on CSR builder method. | Andre Caron | 2015-06-24 | 1 | -1/+1 |
| | |||||
* | Changes builder extension API. | Andre Caron | 2015-06-24 | 1 | -3/+5 |
| | |||||
* | Removes CSR builder version setter. | Andre Caron | 2015-06-24 | 2 | -17/+4 |
| | |||||
* | Fixes memory leak, | Andre Caron | 2015-06-24 | 1 | -0/+6 |
| | |||||
* | Extends supported range for integer conversion, | Andre Caron | 2015-06-24 | 1 | -2/+9 |
| | |||||
* | Fixes docstring typo. | Andre Caron | 2015-06-24 | 1 | -1/+1 |
| | |||||
* | Adds method chaining to CSR builder. | Andre Caron | 2015-06-24 | 1 | -6/+12 |
| | |||||
* | Removes OID to txt to OID conversion. | Andre Caron | 2015-06-24 | 1 | -10/+3 |
| | |||||
* | Cleans up some GC semantics. | Andre Caron | 2015-06-24 | 1 | -3/+16 |
| | |||||
* | Renames sign_509_request to create_x509_csr. | Andre Caron | 2015-06-24 | 4 | -2/+17 |
| | |||||
* | Fixes memory allocation. | Andre Caron | 2015-06-24 | 1 | -12/+4 |
| | |||||
* | Adds CSR builder. | Andre Caron | 2015-06-24 | 2 | -1/+187 |
| | |||||
* | Added teh OID for ECDSA with SHA1. | Alex Gaynor | 2015-06-23 | 1 | -0/+3 |
| | | | | In practice this is rare because the BR requires ECDSA signatures to use SHA256+ (or maybe the requirements for SHA256 just came at the same time as ECDSA, idk) | ||||
* | fix ec_cdata_to_evp_pkey bug | Paul Kehrer | 2015-06-22 | 1 | -0/+1 |
| | | | | | | We weren't actually returning the object and the tests weren't catching it because we didn't try to use the evp_pkey property in the tests. The added test confirms it actually works. | ||||
* | remove unused import | Alex Gaynor | 2015-06-22 | 1 | -1/+0 |
| | |||||
* | Remove our workarounds for pyasn.1 bugs, a new pyasn.1 is out! | Alex Gaynor | 2015-06-22 | 1 | -5/+0 |
| | |||||
* | add name constraints and general subtree struct and macro stack defs | Paul Kehrer | 2015-06-21 | 1 | -0/+25 |
| | |||||
* | add eq/ne support to NameConstraints | Paul Kehrer | 2015-06-21 | 1 | -0/+12 |
| | |||||
* | add nameconstraints classes | Paul Kehrer | 2015-06-21 | 1 | -0/+52 |
| | |||||
* | Merge pull request #2036 from major/master | Alex Gaynor | 2015-06-21 | 1 | -0/+3 |
|\ | | | | | Added a repr() method to x509._Certificate | ||||
| * | Added a repr() method to x509._Certificate | Major Hayden | 2015-06-21 | 1 | -0/+3 |
| | | |||||
* | | Merge pull request #2034 from reaperhulk/windows-flags | Alex Gaynor | 2015-06-20 | 4 | -8/+20 |
|\ \ | | | | | | | enable ASLR and NX on windows builds (affects 2.x only) | ||||
| * | | enable ASLR and NX on windows builds (affects 2.x only) | Paul Kehrer | 2015-06-20 | 4 | -8/+20 |
| | | |