Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | add a CRL public_bytes method | Paul Kehrer | 2015-12-20 | 2 | -0/+19 |
| | |||||
* | Merge pull request #2538 from reaperhulk/empty-crls-are-beautiful-too | Alex Gaynor | 2015-12-20 | 1 | -7/+6 |
|\ | | | | | support CRLs with no revoked certificates | ||||
| * | support CRLs with no revoked certificates | Paul Kehrer | 2015-12-20 | 1 | -7/+6 |
| | | |||||
* | | Merge pull request #2525 from nbastin/20151112-access-method | Paul Kehrer | 2015-12-20 | 1 | -8/+3 |
|\ \ | |/ |/| | issue-2524 | ||||
| * | PEP8 fixes | Nick Bastin | 2015-12-20 | 1 | -3/+1 |
| | | |||||
| * | 4-space indent for this repo | Nick Bastin | 2015-12-20 | 1 | -1/+1 |
| | | |||||
| * | Allow any OID for access_method, validate OIDs at creation time, fix tests. | Nick Bastin | 2015-12-20 | 1 | -5/+2 |
| | | |||||
* | | Merge pull request #2534 from alex/ev-oid | Paul Kehrer | 2015-12-19 | 1 | -0/+13 |
|\ \ | | | | | | | Fixed #2531 -- added missing EV oid | ||||
| * | | updated the short names of oids | Alex Gaynor | 2015-12-19 | 1 | -7/+3 |
| | | | |||||
| * | | added oid names | Alex Gaynor | 2015-12-19 | 1 | -0/+11 |
| | | | |||||
| * | | added business category oid | Alex Gaynor | 2015-12-19 | 1 | -0/+1 |
| | | | |||||
| * | | too many newlines | Alex Gaynor | 2015-12-19 | 1 | -1/+0 |
| | | | |||||
| * | | added two more oids | Alex Gaynor | 2015-12-19 | 1 | -0/+5 |
| | | | |||||
| * | | Fixed #2531 -- added missing EV oid | Alex Gaynor | 2015-12-19 | 1 | -0/+1 |
| | | | |||||
* | | | Change password callback to use userdata pointer | Christian Heimes | 2015-12-20 | 1 | -33/+48 |
| |/ |/| | | | | | | | | | | | | | | | Instead of a closure the pem_password_cb now uses the void *userdata argument to exchange data with the callback function. It's a necessary step to port all callbacks to new static callbacks. See: #2477 Signed-off-by: Christian Heimes <christian@python.org> | ||||
* | | Merge pull request #2530 from nbastin/20151214-oid-val | Paul Kehrer | 2015-12-18 | 1 | -0/+29 |
|\ \ | |/ |/| | OID validation | ||||
| * | Typo | Nick Bastin | 2015-12-17 | 1 | -1/+1 |
| | | |||||
| * | Avoid IndexError on too-short OIDs, add test for regression | Nick Bastin | 2015-12-17 | 1 | -0/+5 |
| | | |||||
| * | OID validation | Nick Bastin | 2015-12-14 | 1 | -0/+24 |
| | | |||||
* | | Merge pull request #2532 from reaperhulk/fix-memory-leak | Alex Gaynor | 2015-12-15 | 1 | -2/+2 |
|\ \ | | | | | | | X509_set_subject_name and X509_set_issuer_name copy the object | ||||
| * | | X509_set_subject_name and X509_set_issuer_name copy the object | Paul Kehrer | 2015-12-15 | 1 | -2/+2 |
| | | | | | | | | | | | | | | | So we need to register our own copy for gc. This fixes a memory leak reported by Wulf. | ||||
* | | | Comment lingering SSLv2 symbol. | Cory Benfield | 2015-12-14 | 1 | -0/+4 |
| | | | |||||
* | | | Remove SSLv2 bindings. | Cory Benfield | 2015-12-14 | 2 | -22/+1 |
|/ / | | | | | | | | | | | | | | | | | This commit removes bindings that allow users to set SSLv2 handshake methods. These are regarded as unnecessary and out-of-date: see #2527. This commit does leave in a few options that refer to SSLv2 in order to avoid breaking deployments that rely on them, and in order to allow users to continue to request that SSLv2 not be enabled at all in their OpenSSL. | ||||
* / | require not_valid_after >= not_valid_before | Paul Kehrer | 2015-12-13 | 1 | -0/+11 |
|/ | |||||
* | Merge pull request #2515 from reaperhulk/sigbus | Alex Gaynor | 2015-12-09 | 2 | -22/+0 |
|\ | | | | | remove the bindings for these x86_64 specific EC functions | ||||
| * | remove the bindings for these x86_64 specific EC functions | Paul Kehrer | 2015-12-09 | 2 | -22/+0 |
| | | | | | | | | | | | | | | | | We have no need to invoke them directly and their presence triggers a bug related to Fedora 23's hobbling of openssl EC functions (uugh) This also fixes the SIGBUS issue in #2503, although that is more appropriately resolved via header fixes for universal libraries on OS X. | ||||
* | | fix the comment so that it is no longer nonsense | Paul Kehrer | 2015-12-03 | 1 | -1/+1 |
| | | |||||
* | | expose tbs_certrequest_bytes and signature on CertificateSigningRequest | Paul Kehrer | 2015-12-03 | 3 | -0/+32 |
| | | |||||
* | | Merge pull request #2504 from reaperhulk/encode-name-constraints | Alex Gaynor | 2015-12-03 | 2 | -0/+49 |
|\ \ | | | | | | | implement support for encoding name constraints | ||||
| * | | move _encode_name_constraints and _encode_general_subtrees | Paul Kehrer | 2015-12-02 | 1 | -36/+36 |
| | | | |||||
| * | | implement support for encoding name constraints | Paul Kehrer | 2015-12-02 | 2 | -0/+49 |
| |/ | |||||
* | | shouldn't need values here | Paul Kehrer | 2015-12-01 | 1 | -3/+3 |
| | | |||||
* | | if EC isn't present we need to declare this enum | Paul Kehrer | 2015-12-01 | 1 | -1/+5 |
| | | |||||
* | | let the compiler figure out these values | Paul Kehrer | 2015-12-01 | 1 | -3/+4 |
| | | |||||
* | | fix a warning in cffi | Paul Kehrer | 2015-12-01 | 2 | -1/+8 |
|/ | | | | | cffi doesn't want to guess the type, so we'll deopaque the enum and strip the values out of the lib if EC is unavailable | ||||
* | Add support for 160 bit ARC4 keys | Ehren Kret | 2015-11-28 | 1 | -1/+1 |
| | |||||
* | Add more CRYPTO_EX_DATA functions | Christian Heimes | 2015-11-20 | 3 | -0/+20 |
| | | | | | | | | The patch adds a couple of additional functions to create, store and retrieve ex_data on SSL, SSL_CTX and X509 objects. It also adds the missing get_ex_new_index function for X509_STORE_CTX. Signed-off-by: Christian Heimes <cheimes@redhat.com> | ||||
* | add tbsCertList and signature interfaces to CRLs | Erik Trauschke | 2015-11-19 | 3 | -0/+30 |
| | |||||
* | RHEL 6.4 and below don't even claim to be 1.0.0 final... | Paul Kehrer | 2015-11-12 | 1 | -1/+1 |
| | |||||
* | whoops | Paul Kehrer | 2015-11-12 | 1 | -0/+1 |
| | |||||
* | reorganize and rename | Paul Kehrer | 2015-11-12 | 2 | -11/+11 |
| | |||||
* | these functions were added in 1.0.0, while CMS was added in 0.9.8h | Paul Kehrer | 2015-11-12 | 2 | -0/+15 |
| | | | | | We didn't catch this in our CI because all our 0.9.8 targets have CMS disabled or are older than 0.9.8h | ||||
* | Include the full OpenSSL error in the exception message | Alex Gaynor | 2015-11-08 | 1 | -1/+1 |
| | |||||
* | Merge pull request #2467 from reaperhulk/fix-version-check | Alex Gaynor | 2015-11-04 | 1 | -2/+2 |
|\ | | | | | these flags were actually added in 1.0.2beta2, not before that. | ||||
| * | these flags were actually added in 1.0.2beta2, not before that. | Paul Kehrer | 2015-11-05 | 1 | -2/+2 |
| | | |||||
* | | remove malloc_debug_init as it has occasionally caused compile issues | Paul Kehrer | 2015-11-05 | 1 | -1/+0 |
|/ | | | | We also don't use it in our backend (and neither does pyOpenSSL) | ||||
* | rename tbs_certificate to tbs_certificate_bytes, add a comment | Paul Kehrer | 2015-11-03 | 2 | -2/+3 |
| | |||||
* | add support for Certificate signature and tbs_certificate | Paul Kehrer | 2015-11-03 | 4 | -1/+29 |
| | |||||
* | Provide more aggressive language about dropping 2.6 | Alex Gaynor | 2015-11-01 | 1 | -1/+2 |
| | |||||
* | flake8 | Alex Gaynor | 2015-11-01 | 1 | -2/+2 |
| |