aboutsummaryrefslogtreecommitdiffstats
path: root/src
Commit message (Collapse)AuthorAgeFilesLines
...
| * | switch ReasonFlags bit string setting to use a dict mappingPaul Kehrer2015-08-081-40/+18
| | |
| * | support relativename encoding using X509_NAMEPaul Kehrer2015-08-081-3/+6
| | | | | | | | | | | | X509_NAME contains a STACK_OF(X509_NAME_ENTRY) which we duplicate
| * | support CRLDistributionPoints in the CertificateBuilderPaul Kehrer2015-08-082-0/+97
| | |
* | | Provide a better error message here.Alex Gaynor2015-08-081-1/+2
|/ /
* | Merge pull request #2217 from reaperhulk/extensions-oidsAlex Gaynor2015-08-071-1/+47
|\ \ | | | | | | Add OIDs to extension types and add ExtensionType interface
| * | add ExtensionType interfacePaul Kehrer2015-08-061-0/+22
| | |
| * | add oid attribute to all extension typesPaul Kehrer2015-08-061-1/+25
| | |
* | | Merge pull request #2222 from reaperhulk/memleak-partdeuxAlex Gaynor2015-08-061-0/+2
|\ \ \ | | | | | | | | X509_add_ext dupes the X509_EXTENSION when adding it. fix the leak
| * | | X509_add_ext dupes the X509_EXTENSION when adding it. fix the leakPaul Kehrer2015-08-061-0/+2
| | | |
* | | | fix a memory leak in certificate creation during extension creationPaul Kehrer2015-08-061-1/+1
|/ / /
* / / rename sign_x509_certificate backend method to create_x509_certificatePaul Kehrer2015-08-064-6/+6
|/ /
* | add a few additional bindings for AuthorityKeyIdentifier in OpenSSLPaul Kehrer2015-08-051-0/+2
| |
* | Merge pull request #2206 from reaperhulk/refactor-encode-sanAlex Gaynor2015-08-051-7/+11
|\ \ | | | | | | refactor SAN encoding to separate out general names in openssl backend
| * | we still need to gc in encode_subject_alt_namePaul Kehrer2015-08-051-0/+3
| | |
| * | refactor SAN encoding to separate out general names in openssl backendPaul Kehrer2015-08-051-7/+8
| | |
* | | more bindings for CRLDistributionPoints encodingPaul Kehrer2015-08-052-2/+11
|/ /
* / check that required fields are present in builder when signingPaul Kehrer2015-08-041-0/+18
|/
* Merge pull request #2180 from reaperhulk/easy-conditional-fixDonald Stufft2015-08-0444-515/+432
|\ | | | | create a ConditionalLibrary and remove unsupported items
| * change approach for pypy performance reasonsPaul Kehrer2015-08-041-12/+13
| |
| * only copy the attrs we know should exist (courtesy dstufft)Paul Kehrer2015-08-031-7/+9
| |
| * remove commoncrypto CONDITIONAL_NAMESPaul Kehrer2015-08-0312-25/+0
| |
| * remove openssl CONDITIONAL_NAMESPaul Kehrer2015-08-0330-489/+0
| |
| * pass in the imports to make it a bit clearer what's going onPaul Kehrer2015-08-031-3/+3
| |
| * move the attr setting to the __init__ of _ConditionalLibraryPaul Kehrer2015-08-031-12/+10
| |
| * create a ConditionalLibrary and remove unsupported itemsPaul Kehrer2015-08-012-1/+431
| |
* | Merge pull request #2193 from reaperhulk/encode-aiaAlex Gaynor2015-08-033-0/+40
|\ \ | | | | | | Support AuthorityInformationAccess in CertificateBuilder
| * | add support for AIA to CertificateBuilder and OpenSSL backendPaul Kehrer2015-08-032-1/+11
| | |
| * | encode authority information accessPaul Kehrer2015-08-032-0/+30
| | |
* | | Fixes #2199 -- allow SSH keys to have spaces in their commentsAlex Gaynor2015-08-031-2/+2
| | |
* | | support keyusage and extendedkeyusage in certificatebuilderPaul Kehrer2015-08-032-0/+8
|/ /
* | reorder CertificateBuilder sign argumentsPaul Kehrer2015-08-031-1/+1
| |
* | Add sign_x509_certificate to X509Backend interfaceIan Cordasco2015-08-031-0/+6
| | | | | | | | Add note about CertificateBuilder to the changelog
* | Merge remote-tracking branch 'upstream/master' into cert-builderIan Cordasco2015-08-039-204/+276
|\ \
| * \ Merge pull request #2187 from reaperhulk/csr-decode-all-extsAlex Gaynor2015-08-011-23/+21
| |\ \ | | | | | | | | allow certificate and CSR to both parse the same set of extensions
| | * | allow certificate and CSR to both parse the same set of extensionsPaul Kehrer2015-08-011-23/+21
| | | |
| * | | Merge pull request #2186 from reaperhulk/handle-corrupt-extensionsAlex Gaynor2015-08-011-1/+7
| |\ \ \ | | | | | | | | | | Handle invalid x509 extension payloads
| | * | | corrupt -> invalidPaul Kehrer2015-08-011-1/+2
| | | | |
| | * | | check if the extension decoded to internal openssl reprPaul Kehrer2015-08-011-1/+6
| | |/ / | | | | | | | | | | | | ...and if not, raise an error (plus consume the error stack)
| * | | Merge pull request #2184 from reaperhulk/remove-more-branchesAlex Gaynor2015-08-013-10/+18
| |\ \ \ | | |/ / | |/| | Branch coverage to 100%
| | * | Remove elifs and replace with else + assertPaul Kehrer2015-08-013-10/+18
| | |/ | | | | | | | | | This is kind of ugly, but resolves many partial branch coverage issues.
| * / simplify x509 extension decodingPaul Kehrer2015-08-011-73/+28
| |/
| * Merge pull request #2177 from reaperhulk/cp-bindingsAlex Gaynor2015-07-271-0/+21
| |\ | | | | | | add many bindings we'll need to encode a certificate policies extension
| | * add many bindings we'll need to encode a certificate policies extensionPaul Kehrer2015-07-261-0/+21
| | |
| * | openssl error codes are clearly not considered part of the api contractPaul Kehrer2015-07-251-5/+2
| | |
| * | extra parensPaul Kehrer2015-07-251-5/+3
| | |
| * | == instead of inPaul Kehrer2015-07-251-2/+2
| | |
| * | handle RSA key too small and consume errors on CSR signature failurePaul Kehrer2015-07-252-1/+11
| |/
| * remove windows link type, update docsPaul Kehrer2015-07-241-14/+1
| |
| * Merge pull request #2171 from reaperhulk/refactor-gn-encodingAlex Gaynor2015-07-241-83/+88
| |\ | | | | | | refactor general name encoding to its own function
| | * refactor general name encoding to its own functionPaul Kehrer2015-07-241-83/+88
| | |