Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | put the AAD and encrypted byte limit checks in the parent context | Paul Kehrer | 2015-07-01 | 2 | -0/+21 |
| | |||||
* | Merge pull request #2084 from reaperhulk/name-constraints-ossl | Alex Gaynor | 2015-07-01 | 1 | -0/+30 |
|\ | | | | | Name constraints ossl | ||||
| * | support name constraints in the openssl backend | Paul Kehrer | 2015-06-29 | 1 | -0/+30 |
| | | |||||
* | | Merge pull request #2073 from glyph/no-c-random | Paul Kehrer | 2015-06-30 | 8 | -210/+58 |
|\ \ | |/ |/| | Replace C implementation of OS Random engine with Python one that just calls os.urandom | ||||
| * | the assertier the merrier | Glyph | 2015-06-27 | 1 | -0/+1 |
| | | |||||
| * | comment on longer correct - not aliases any more | Glyph | 2015-06-27 | 1 | -5/+3 |
| | | | | | | | | also group all the class-level variables together for style points | ||||
| * | do the hokey pokey | Glyph | 2015-06-27 | 1 | -13/+13 |
| | | | | | | | | | | you put the functions in, you take the functions out, you make the linter work, and you shake it all about | ||||
| * | shuffle everything back onto the class | Glyph | 2015-06-27 | 1 | -50/+45 |
| | | |||||
| * | dead code | Glyph | 2015-06-27 | 1 | -1/+0 |
| | | |||||
| * | consistency about underscores and prefixes | Glyph | 2015-06-27 | 1 | -6/+6 |
| | | |||||
| * | space before star | Glyph | 2015-06-27 | 1 | -3/+3 |
| | | |||||
| * | nothing pseudo about it | Glyph | 2015-06-27 | 1 | -11/+2 |
| | | |||||
| * | handle previous registration by raising RuntimeError | Glyph | 2015-06-27 | 1 | -3/+1 |
| | | |||||
| * | unnecessary belt-and-suspenders error checking | Glyph | 2015-06-27 | 1 | -2/+0 |
| | | |||||
| * | coding standard | Glyph | 2015-06-27 | 1 | -1/+2 |
| | | |||||
| * | clear the error queue | Glyph | 2015-06-27 | 1 | -0/+4 |
| | | | | | | | | | | | | | | make sure we're not in an error state when we start, because then all bets are off and we might consume an error we didn't cause. then clear the error queue, which restores the behavior of the way the C module was previously checking for existence of its engine. | ||||
| * | bind ERR_clear_error | Glyph | 2015-06-27 | 1 | -0/+1 |
| | | |||||
| * | also retain method with a global reference | Glyph | 2015-06-27 | 1 | -5/+7 |
| | | |||||
| * | move everything to module scope; much simpler that way | Glyph | 2015-06-27 | 1 | -67/+58 |
| | | |||||
| * | don't need the intermediary 'struct' declaration. | Glyph | 2015-06-27 | 1 | -10/+8 |
| | | |||||
| * | comply with C coding standard, for which there is no linter | Glyph | 2015-06-26 | 2 | -9/+9 |
| | | |||||
| * | lint | Glyph | 2015-06-26 | 1 | -0/+1 |
| | | |||||
| * | pointer shenanigans | Glyph | 2015-06-26 | 1 | -2/+3 |
| | | | | | | | | | | | | | | | | apparently (?) ENGINE_by_id treats its ID as an opaque *pointer* key and not actually as a string, and while CPython's CFFI support seems to manage to preserve the pointer identity when using the same Python string, PyPy doesn't. Fix things to use a cffi-wrapped pointer again and tests pass on PyPy. | ||||
| * | remove remaining vestiges, make adding twice work | Glyph | 2015-06-26 | 5 | -208/+2 |
| | | |||||
| * | python implementation | Glyph | 2015-06-26 | 1 | -1/+65 |
| | | |||||
| * | use new constant | Glyph | 2015-06-26 | 1 | -1/+1 |
| | | |||||
| * | a place for a couple of new constants to live | Glyph | 2015-06-26 | 1 | -0/+2 |
| | | |||||
| * | deopaque a couple of things | Glyph | 2015-06-26 | 1 | -2/+11 |
| | | |||||
* | | fix a memory leak in basic constraints encoding | Paul Kehrer | 2015-06-28 | 1 | -0/+3 |
| | | |||||
* | | Merge pull request #2086 from alex/unify-parse-extensions | Paul Kehrer | 2015-06-28 | 1 | -80/+71 |
|\ \ | | | | | | | Initial stab at unifying the extension parsing code fro CSRs and certificates | ||||
| * | | use a dict here | Alex Gaynor | 2015-06-28 | 1 | -24/+24 |
| | | | |||||
| * | | Factor this code out. | Alex Gaynor | 2015-06-28 | 1 | -40/+35 |
| | | | |||||
| * | | Initial stab at unifying the extension parsing code fro CSRs and certificates | Alex Gaynor | 2015-06-28 | 1 | -79/+75 |
| | | | |||||
* | | | move int_from_bytes so we can use it elsewhere | Paul Kehrer | 2015-06-27 | 2 | -23/+30 |
|/ / | |||||
* | | Improvemed branch coverage for ssh public key loading | Alex Gaynor | 2015-06-27 | 2 | -8/+6 |
| | | |||||
* | | Merge pull request #2076 from alex/more-branch-coverage | Paul Kehrer | 2015-06-27 | 1 | -8/+6 |
|\ \ | | | | | | | More branch coverage improvements. By virtue of reorganization and a new test | ||||
| * | | More branch coverage improvements. By virtue of reorganization and a new test | Alex Gaynor | 2015-06-27 | 1 | -8/+6 |
| | | | |||||
* | | | Reorganized some code to improve branch coverage | Alex Gaynor | 2015-06-27 | 1 | -6/+6 |
|/ / | |||||
* | | Fixed #2067 -- raise an error if a CSRbuilder doesn't hav a subject | Alex Gaynor | 2015-06-27 | 2 | -1/+3 |
| | | |||||
* | | Merge pull request #2071 from reaperhulk/wildcard-oh-no | Alex Gaynor | 2015-06-27 | 1 | -1/+11 |
|\ \ | |/ |/| | handle wildcard DNSNames with IDNA. | ||||
| * | do this much more simply | Paul Kehrer | 2015-06-26 | 1 | -7/+4 |
| | | |||||
| * | handle wildcard DNSNames with IDNA. | Paul Kehrer | 2015-06-26 | 1 | -1/+14 |
| | | | | | | | | fixes #2054 | ||||
* | | Merge branch 'master' into param-ordering | Alex Gaynor | 2015-06-26 | 1 | -0/+4 |
|\| | |||||
| * | test notimplementederror for unsupported csr extensions in backends | Paul Kehrer | 2015-06-26 | 1 | -0/+4 |
| | | |||||
* | | Make the parameter ordering in sign() consistent with other code | Alex Gaynor | 2015-06-26 | 1 | -1/+1 |
|/ | |||||
* | Use utf8 to encode attribute values instead of ascii | Ian Cordasco | 2015-06-24 | 1 | -2/+2 |
| | |||||
* | Add tests to the CSR Builder for EC and DSA keys | Ian Cordasco | 2015-06-24 | 1 | -1/+12 |
| | | | | | | This skips certain tests on certain versions of differences in how X509_REQ_sign works on those versions. A separate pull request will address those differences. | ||||
* | Address review comments around add_extension method | Ian Cordasco | 2015-06-24 | 1 | -2/+3 |
| | | | | | | | | | - Fix typo in the docs (s/buidlder/builder/) - Remove default from the method declaration and docs - Replace ValueError with NotImpelementedError for unsupported X.509 extensions - Add TODO comment as requested by Alex - Fix test to pass critical=False since it no longer is a default value | ||||
* | Only allow subject_name to be set once on a Builder | Ian Cordasco | 2015-06-24 | 1 | -0/+2 |
| | |||||
* | Unconditionally encode values to ascii | Ian Cordasco | 2015-06-24 | 1 | -5/+2 |
| |