aboutsummaryrefslogtreecommitdiffstats
path: root/src
Commit message (Collapse)AuthorAgeFilesLines
* remove convenience functions for revoked extensionsErik Trauschke2015-10-211-30/+0
| | | | fix docs regarding CRL PEM format
* add commentsErik Trauschke2015-10-202-26/+37
|
* Merge branch 'master' into crl_ossl_backendErik Trauschke2015-10-2011-23/+102
|\
| * add __repr__ to x509.ExtensionsPaul Kehrer2015-10-201-0/+5
| | | | | | | | fix #2434
| * Merge pull request #2427 from alex/ecdhPaul Kehrer2015-10-196-0/+56
| |\ | | | | | | ECDH take 4
| | * better document hte ifaceAlex Gaynor2015-10-171-0/+7
| | |
| | * unused importAlex Gaynor2015-10-171-1/+0
| | |
| | * a refactor to the APIAlex Gaynor2015-10-175-43/+35
| | |
| | * Add an Elliptic Curve Key Exchange Algorithm(ECDH)Simo Sorce2015-10-175-0/+58
| | | | | | | | | | | | | | | | | | | | | | | | | | | The ECDH Key Exchange algorithm as standardized in NIST publication 800-56A Revision 2 Includes tests with vectors from NIST. Signed-off-by: Simo Sorce <simo@redhat.com>
| * | Fix wrong mention of class in docstring.Terry Chia2015-10-181-1/+1
| |/
| * Kill Key Exchange as a separate interfaceSimo Sorce2015-10-151-18/+0
| | | | | | | | | | | | | | | | Ultimately it was decided that ECDH and the others can be implemented as simple classes without the overhead of an interface. So ... let's kill it, it was a fun process. Signed-off-by: Simo Sorce <simo@redhat.com>
| * add binding for d2i_GENERAL_NAMES()Erik Trauschke2015-10-151-0/+2
| |
| * extend pkcs7 openssl bindingsDominic Chen2015-10-132-2/+32
| |
| * Catch Invalid X or Y points and raise a ValueErrorSimo Sorce2015-10-121-2/+6
| | | | | | | | Signed-off-by: Simo Sorce <simo@redhat.com>
* | Merge branch 'crl_ossl_backend' of github.com:etrauschke/cryptography into ↵Erik Trauschke2015-10-206-22/+282
|\ \ | |/ |/| | | crl_ossl_backend
| * removing caching mechanism for x509 propertiesErik Trauschke2015-10-154-76/+51
| | | | | | | | | | | | undo name change of CRLExtensionOID use custom parsing mechanism for certIssuer entry extension add new crl to vectors for testing invalid certIssuer entry ext
| * import fixErik Trauschke2015-10-141-2/+2
| |
| * use X509ExtensionParser for Revoked extensionsErik Trauschke2015-10-144-113/+88
| | | | | | | | | | | | remove revoked_certificates property from RevokedCertificate class CRLExtensions should actually be RevokedExtensions doctest cleanup for RevokedCertificate
| * fix indentationsErik Trauschke2015-10-131-68/+65
| | | | | | | | | | | | | | | | change docs to indicate CRL objects are iterable fix docs for revoked certs make _decode_crl_reason more readable add __getitem__ method to CRL object remove double underscores
| * use openssl assertErik Trauschke2015-09-281-22/+27
| | | | | | | | | | | | change _build* to _decode* make CRLs into iterators various fixes
| * Merge branch 'master' into crl_ossl_backendErik Trauschke2015-09-286-44/+22
| |\
| * \ Merge branch 'crl_ossl_backend' of github.com:etrauschke/cryptography into ↵Erik Trauschke2015-09-285-4/+312
| |\ \ | | | | | | | | | | | | crl_ossl_backend
| | * \ Merge branch 'master' into crl_ossl_backendErik Trauschke2015-09-251-153/+172
| | |\ \
| | * \ \ Merge branch 'master' into crl_ossl_backendErik Trauschke2015-09-251-0/+70
| | |\ \ \
| | * | | | OpenSSL backend code for CRLsErik Trauschke2015-09-245-4/+312
| | | | | |
* | | | | | Merge pull request #2402 from ddcc/patch-1Paul Kehrer2015-10-111-2/+7
|\ \ \ \ \ \ | | | | | | | | | | | | | | minor fix to handle malformed certificates without hostname
| * | | | | | fix to handle malformed certificates without hostnameDominic Chen2015-10-101-2/+7
| | | | | | |
* | | | | | | typoAlex Gaynor2015-10-111-1/+1
| | | | | | |
* | | | | | | handle errorsAlex Gaynor2015-10-101-0/+2
| | | | | | |
* | | | | | | Fixed #2404 -- handle a certificate with an unknown public keyAlex Gaynor2015-10-101-1/+3
|/ / / / / /
* | | | | | Introduce Key Exchange Agreements interfaceSimo Sorce2015-10-071-0/+18
| | | | | | | | | | | | | | | | | | | | | | | | Signed-off-by: Simo Sorce <simo@redhat.com>
* | | | | | Change '!=' to 'is not'Manoel Domingues Junior2015-10-011-1/+1
| | | | | |
* | | | | | Handling path_length when ca is TrueManoel Domingues Junior2015-10-011-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Using CertificateBuilder: builder = builder.add_extension(x509.BasicConstraints(ca=True,path_length=None), critical=True) return TypeError in line 792 because None can't be converted to hex. In https://tools.ietf.org/html/rfc5280.html#section-4.2.1.9: CAs MUST NOT include the pathLenConstraint field unless the cA boolean is asserted and the key usage extension asserts the keyCertSign bit.
* | | | | | flake8Alex Gaynor2015-09-291-0/+1
| | | | | |
* | | | | | sigh, fixAlex Gaynor2015-09-291-1/+1
| | | | | |
* | | | | | use signature so stuff works on 3.6 -- fixes #2382Alex Gaynor2015-09-291-3/+8
| |_|_|_|/ |/| | | |
* | | | | unused importAlex Gaynor2015-09-261-3/+1
| | | | |
* | | | | Use InternalError for stuffAlex Gaynor2015-09-266-41/+21
|/ / / /
* | | | fix the testsAlex Gaynor2015-09-261-4/+4
| | | |
* | | | flake8 itAlex Gaynor2015-09-261-6/+4
| | | |
* | | | Convert asserts in bindings as wellAlex Gaynor2015-09-262-36/+49
| | | |
* | | | converted a few more assertsAlex Gaynor2015-09-263-3/+3
| | | |
* | | | move two asserts much closer to call sitePaul Kehrer2015-09-251-2/+2
| | | |
* | | | convert the rest of the openssl backend to using openssl_assertPaul Kehrer2015-09-258-87/+90
| |_|/ |/| |
* | | remove unnecessary checkPaul Kehrer2015-09-251-1/+0
| | |
* | | change some asserts back since they're not openssl specificPaul Kehrer2015-09-251-18/+19
| | | | | | | | | | | | plus bonus better exception msg
* | | start converting asserts to a function callPaul Kehrer2015-09-251-166/+185
| |/ |/| | | | | | | This prevents situations where asserts are bypassed when running python with -O.
* | Add X963KDF from ANSI X9.63:2001Simo Sorce2015-09-241-0/+70
|/ | | | | | | | | | The implemention allows the use a Hash function to implement a KDF very similar to ConcatKDFHash, just different enough to require a separate derivation function. Closes #2203 Signed-off-by: Simo Sorce <simo@redhat.com>
* should have _asn1_* utility functions in a common placeErik Trauschke2015-09-242-73/+63
|
* Made import order alphabetical.Predrag Gruevski2015-09-231-1/+1
|