Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | support revoked certificates in CertificateRevocationListBuilder | Paul Kehrer | 2015-12-25 | 3 | -0/+23 |
| | |||||
* | RevokedCertificateBuilder | Paul Kehrer | 2015-12-25 | 3 | -3/+65 |
| | |||||
* | add create_x509_revoked_certificate to x509backend interface | Paul Kehrer | 2015-12-25 | 3 | -0/+19 |
| | |||||
* | use _create_x509_extensions in create_x509_crl | Paul Kehrer | 2015-12-25 | 1 | -20/+8 |
| | |||||
* | add extension support to the CRLBuilder | Paul Kehrer | 2015-12-25 | 2 | -1/+59 |
| | |||||
* | a different approach to refactoring the x509 extension addition | Paul Kehrer | 2015-12-24 | 2 | -21/+25 |
| | |||||
* | don't reuse a variable, it's confusing | Paul Kehrer | 2015-12-24 | 1 | -4/+6 |
| | |||||
* | refactor x509 extension creation to make it a bit more reusable | Paul Kehrer | 2015-12-24 | 1 | -38/+39 |
| | | | | | Unfortunately X509 certs and CSRs add extensions differently, so we can't reuse quite as much as we'd like to... | ||||
* | CertificateRevocationListBuilder | Paul Kehrer | 2015-12-24 | 3 | -1/+135 |
| | | | | | RSA keys only. Currently does not support CRL extensions or CRLEntry extensions. | ||||
* | Merge pull request #2565 from reaperhulk/crl-interface | Alex Gaynor | 2015-12-24 | 3 | -0/+19 |
|\ | | | | | add create_x509_crl interface | ||||
| * | coverage | Paul Kehrer | 2015-12-24 | 1 | -1/+1 |
| | | |||||
| * | add create_x509_crl interface | Paul Kehrer | 2015-12-24 | 3 | -0/+19 |
| | | |||||
* | | Add PEM_write_bio_DHparams binding | evilaliv3 | 2015-12-24 | 1 | -0/+1 |
|/ | |||||
* | please the great flake8 in the sky | Alex Gaynor | 2015-12-24 | 1 | -3/+1 |
| | |||||
* | full indexing support + testsg | Alex Gaynor | 2015-12-24 | 1 | -4/+12 |
| | |||||
* | Make indexing a CRL O(1) instead of O(n). | Alex Gaynor | 2015-12-24 | 1 | -2/+5 |
| | | | | This drops support for slicing, if that's important someone say something and I can add it back | ||||
* | Simplify implementation of CRL indexing and iteration. | Alex Gaynor | 2015-12-24 | 1 | -13/+8 |
| | | | | No longer allocates a list just to iterate over it. | ||||
* | Merge pull request #2561 from alex/crl-len-perf | Paul Kehrer | 2015-12-24 | 1 | -10/+12 |
|\ | | | | | Improve the performance of len(crl) | ||||
| * | coverage fix | Alex Gaynor | 2015-12-24 | 1 | -8/+7 |
| | | |||||
| * | Improve the performance of len(crl) | Alex Gaynor | 2015-12-23 | 1 | -3/+6 |
| | | |||||
* | | add binding for setting the revocation date of an X509_REVOKED | Paul Kehrer | 2015-12-23 | 1 | -0/+2 |
|/ | |||||
* | Merge pull request #2558 from reaperhulk/managing-memory-is-fun | Alex Gaynor | 2015-12-23 | 1 | -2/+13 |
|\ | | | | | fix a potential memory issue when retaining revoked certs from a CRL | ||||
| * | fix a potential memory issue when retaining revoked certs from a CRL | Paul Kehrer | 2015-12-23 | 1 | -2/+13 |
| | | |||||
* | | Remove spaces. | Cory Benfield | 2015-12-23 | 1 | -1/+1 |
| | | |||||
* | | Add binding for CommonCrypto SecTrustCopyAnchorCertificates | Cory Benfield | 2015-12-23 | 2 | -0/+23 |
|/ | |||||
* | CRLNumber needs to be a class for reasons. | Paul Kehrer | 2015-12-22 | 3 | -2/+28 |
| | |||||
* | add support for parsing AuthorityInfoAccess and IssuerAltName CRL exts | Paul Kehrer | 2015-12-22 | 1 | -0/+4 |
| | | | | Expand the CRL extensions test to check the value | ||||
* | lowercase the first letter since that's how it's actually declared | Paul Kehrer | 2015-12-22 | 1 | -1/+1 |
| | |||||
* | support parsing CRL extensions in the OpenSSL backend | Paul Kehrer | 2015-12-21 | 2 | -1/+20 |
| | |||||
* | add a CRL public_bytes method | Paul Kehrer | 2015-12-20 | 2 | -0/+19 |
| | |||||
* | Merge pull request #2538 from reaperhulk/empty-crls-are-beautiful-too | Alex Gaynor | 2015-12-20 | 1 | -7/+6 |
|\ | | | | | support CRLs with no revoked certificates | ||||
| * | support CRLs with no revoked certificates | Paul Kehrer | 2015-12-20 | 1 | -7/+6 |
| | | |||||
* | | Merge pull request #2525 from nbastin/20151112-access-method | Paul Kehrer | 2015-12-20 | 1 | -8/+3 |
|\ \ | |/ |/| | issue-2524 | ||||
| * | PEP8 fixes | Nick Bastin | 2015-12-20 | 1 | -3/+1 |
| | | |||||
| * | 4-space indent for this repo | Nick Bastin | 2015-12-20 | 1 | -1/+1 |
| | | |||||
| * | Allow any OID for access_method, validate OIDs at creation time, fix tests. | Nick Bastin | 2015-12-20 | 1 | -5/+2 |
| | | |||||
* | | Merge pull request #2534 from alex/ev-oid | Paul Kehrer | 2015-12-19 | 1 | -0/+13 |
|\ \ | | | | | | | Fixed #2531 -- added missing EV oid | ||||
| * | | updated the short names of oids | Alex Gaynor | 2015-12-19 | 1 | -7/+3 |
| | | | |||||
| * | | added oid names | Alex Gaynor | 2015-12-19 | 1 | -0/+11 |
| | | | |||||
| * | | added business category oid | Alex Gaynor | 2015-12-19 | 1 | -0/+1 |
| | | | |||||
| * | | too many newlines | Alex Gaynor | 2015-12-19 | 1 | -1/+0 |
| | | | |||||
| * | | added two more oids | Alex Gaynor | 2015-12-19 | 1 | -0/+5 |
| | | | |||||
| * | | Fixed #2531 -- added missing EV oid | Alex Gaynor | 2015-12-19 | 1 | -0/+1 |
| | | | |||||
* | | | Change password callback to use userdata pointer | Christian Heimes | 2015-12-20 | 1 | -33/+48 |
| |/ |/| | | | | | | | | | | | | | | | Instead of a closure the pem_password_cb now uses the void *userdata argument to exchange data with the callback function. It's a necessary step to port all callbacks to new static callbacks. See: #2477 Signed-off-by: Christian Heimes <christian@python.org> | ||||
* | | Merge pull request #2530 from nbastin/20151214-oid-val | Paul Kehrer | 2015-12-18 | 1 | -0/+29 |
|\ \ | |/ |/| | OID validation | ||||
| * | Typo | Nick Bastin | 2015-12-17 | 1 | -1/+1 |
| | | |||||
| * | Avoid IndexError on too-short OIDs, add test for regression | Nick Bastin | 2015-12-17 | 1 | -0/+5 |
| | | |||||
| * | OID validation | Nick Bastin | 2015-12-14 | 1 | -0/+24 |
| | | |||||
* | | Merge pull request #2532 from reaperhulk/fix-memory-leak | Alex Gaynor | 2015-12-15 | 1 | -2/+2 |
|\ \ | | | | | | | X509_set_subject_name and X509_set_issuer_name copy the object | ||||
| * | | X509_set_subject_name and X509_set_issuer_name copy the object | Paul Kehrer | 2015-12-15 | 1 | -2/+2 |
| | | | | | | | | | | | | | | | So we need to register our own copy for gc. This fixes a memory leak reported by Wulf. |