Commit message (Collapse) | Author | Age | Files | Lines | ||
---|---|---|---|---|---|---|
... | ||||||
* | Update registering pp with ffi.gc | Ian Cordasco | 2015-06-24 | 1 | -4/+3 | |
| | | | | | This makes it more in-line with existing functions, e.g., L40-L47 of src/cryptography/hazmat/backends/openssl/x509.py @ b0e8ffa | |||||
* | Update CSR tests and implementation | Ian Cordasco | 2015-06-24 | 2 | -2/+3 | |
| | | | | | | | | | | - Use keyword arguments for x509.BasicConstraints in tests (missed in b790edbdc8fb9a026353d6fb99994326197705c7). - Place X509_request garbage collection under assertion. - Assert that X509 extensions created are not null. - Don't copy the extensions list in CertificateSigningBuilder. They're never appended to, so copying isn't necessary. - Use RSA key fixtures instead of generating new ones on each test run | |||||
* | Address code review regarding style and gc | Ian Cordasco | 2015-06-24 | 1 | -12/+13 | |
| | | | | | | | | | - Use keyword arguments for x509.BasicConstraints in several places - Use SHA256 instead of SHA1 in documented examples - Give function variables meaningful names in _encode_asn1_str - Accept a x509.BasicConstraints object in _encode_basic_constraints - Properly garbage-collect some things - Raise a NotImplementedError instead of a ValueError | |||||
* | Removes set_ prefix on CSR builder method. | Andre Caron | 2015-06-24 | 1 | -1/+1 | |
| | ||||||
* | Changes builder extension API. | Andre Caron | 2015-06-24 | 1 | -3/+5 | |
| | ||||||
* | Removes CSR builder version setter. | Andre Caron | 2015-06-24 | 2 | -17/+4 | |
| | ||||||
* | Fixes memory leak, | Andre Caron | 2015-06-24 | 1 | -0/+6 | |
| | ||||||
* | Extends supported range for integer conversion, | Andre Caron | 2015-06-24 | 1 | -2/+9 | |
| | ||||||
* | Fixes docstring typo. | Andre Caron | 2015-06-24 | 1 | -1/+1 | |
| | ||||||
* | Adds method chaining to CSR builder. | Andre Caron | 2015-06-24 | 1 | -6/+12 | |
| | ||||||
* | Removes OID to txt to OID conversion. | Andre Caron | 2015-06-24 | 1 | -10/+3 | |
| | ||||||
* | Cleans up some GC semantics. | Andre Caron | 2015-06-24 | 1 | -3/+16 | |
| | ||||||
* | Renames sign_509_request to create_x509_csr. | Andre Caron | 2015-06-24 | 4 | -2/+17 | |
| | ||||||
* | Fixes memory allocation. | Andre Caron | 2015-06-24 | 1 | -12/+4 | |
| | ||||||
* | Adds CSR builder. | Andre Caron | 2015-06-24 | 2 | -1/+187 | |
| | ||||||
* | Added teh OID for ECDSA with SHA1. | Alex Gaynor | 2015-06-23 | 1 | -0/+3 | |
| | | | | In practice this is rare because the BR requires ECDSA signatures to use SHA256+ (or maybe the requirements for SHA256 just came at the same time as ECDSA, idk) | |||||
* | fix ec_cdata_to_evp_pkey bug | Paul Kehrer | 2015-06-22 | 1 | -0/+1 | |
| | | | | | | We weren't actually returning the object and the tests weren't catching it because we didn't try to use the evp_pkey property in the tests. The added test confirms it actually works. | |||||
* | remove unused import | Alex Gaynor | 2015-06-22 | 1 | -1/+0 | |
| | ||||||
* | Remove our workarounds for pyasn.1 bugs, a new pyasn.1 is out! | Alex Gaynor | 2015-06-22 | 1 | -5/+0 | |
| | ||||||
* | add name constraints and general subtree struct and macro stack defs | Paul Kehrer | 2015-06-21 | 1 | -0/+25 | |
| | ||||||
* | add eq/ne support to NameConstraints | Paul Kehrer | 2015-06-21 | 1 | -0/+12 | |
| | ||||||
* | add nameconstraints classes | Paul Kehrer | 2015-06-21 | 1 | -0/+52 | |
| | ||||||
* | Merge pull request #2036 from major/master | Alex Gaynor | 2015-06-21 | 1 | -0/+3 | |
|\ | | | | | Added a repr() method to x509._Certificate | |||||
| * | Added a repr() method to x509._Certificate | Major Hayden | 2015-06-21 | 1 | -0/+3 | |
| | | ||||||
* | | Merge pull request #2034 from reaperhulk/windows-flags | Alex Gaynor | 2015-06-20 | 4 | -8/+20 | |
|\ \ | | | | | | | enable ASLR and NX on windows builds (affects 2.x only) | |||||
| * | | enable ASLR and NX on windows builds (affects 2.x only) | Paul Kehrer | 2015-06-20 | 4 | -8/+20 | |
| | | | ||||||
* | | | Add additional CRL bindings | Stephen Holsapple | 2015-06-20 | 1 | -7/+9 | |
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | I sorted the X50_CRL bindings and added two additional bindings: 1. X509_CRL_set_version 2. X509_CRL_sort These two functions are required to make CRL useful in pyOpenSSL re: https://github.com/pyca/pyopenssl/issues/256 | |||||
* | | | Refs #1947 -- add support for IAN to the OpenSSL backend | Alex Gaynor | 2015-06-20 | 1 | -2/+15 | |
| | | | ||||||
* | | | evp_pkey in openssl asymmetric key constructors | Paul Kehrer | 2015-06-20 | 4 | -76/+75 | |
|/ / | ||||||
* | | Merge pull request #2046 from Ayrx/style-nits | Alex Gaynor | 2015-06-19 | 3 | -12/+12 | |
|\ \ | | | | | | | Change ' to ". | |||||
| * | | Change ' to ". | Terry Chia | 2015-06-19 | 3 | -12/+12 | |
| | | | ||||||
* | | | inhibit any policy extension support for the openssl backend | Paul Kehrer | 2015-06-17 | 1 | -0/+13 | |
|/ / | ||||||
* | | Merge pull request #2038 from sholsapp/add-x509store-functions | Alex Gaynor | 2015-06-17 | 1 | -1/+5 | |
|\ \ | | | | | | | Add additional X509_STORE functions | |||||
| * | | Add additional X509_STORE functions | Stephen Holsapple | 2015-06-17 | 1 | -1/+5 | |
| |/ | | | | | | | | | | | | | I'm working on https://github.com/pyca/pyopenssl/issues/256 and can't seem to get the X509_STORE_CTX objects to be able to find a CRL. I suspect it is because I'm not adding the CRL to the underlying X509_STORE object, so I'd like to add them. | |||||
* / | support OCSPNoCheck in the OpenSSL backend | Paul Kehrer | 2015-06-17 | 1 | -0/+2 | |
|/ | ||||||
* | Enforce text type of NameAttribute.value | Ian Cordasco | 2015-06-16 | 1 | -0/+5 | |
| | ||||||
* | Merge pull request #2017 from reaperhulk/issuer-alternative-name | Alex Gaynor | 2015-06-13 | 1 | -0/+26 | |
|\ | | | | | issuer alternative name support | |||||
| * | issuer alternative name support | Paul Kehrer | 2015-06-07 | 1 | -0/+26 | |
| | | ||||||
* | | Add ConcatKDF from NIST SP 800-56A | Simo Sorce | 2015-06-12 | 1 | -0/+125 | |
| | | | | | | | | | | | | | | | | | | The implemention allows the use an HMAC function as per Revision 2 of the document. Conformance of the formatting of the OtherInfo argument is responsability of the calling application. Signed-off-by: Simo Sorce <simo@redhat.com> | |||||
* | | convert to cffi 1.0 precompile system | Paul Kehrer | 2015-06-07 | 60 | -245/+212 | |
|/ | ||||||
* | don't double free DSA cdata when verifying things | Paul Kehrer | 2015-06-06 | 1 | -4/+1 | |
| | ||||||
* | Merge pull request #1965 from reaperhulk/more-client-bindings | Alex Gaynor | 2015-06-04 | 1 | -0/+24 | |
|\ | | | | | Add more client cert related bindings | |||||
| * | SSL_CTX_set_client_cert_engine was added in 0.9.8i | Paul Kehrer | 2015-06-02 | 1 | -2/+14 | |
| | | ||||||
| * | add some client cert bindings | Paul Kehrer | 2015-05-19 | 1 | -0/+12 | |
| | | ||||||
* | | Merge pull request #1990 from tonyseek/key-uri | Paul Kehrer | 2015-06-03 | 3 | -0/+42 | |
|\ \ | | | | | | | Add "get_provisioning_uri" utility for HOTP/TOTP. | |||||
| * | | add license header and fix grammar errors. | Jiangge Zhang | 2015-06-03 | 1 | -0/+4 | |
| | | | ||||||
| * | | Remove a default argument and rename a private function. | Jiangge Zhang | 2015-06-03 | 3 | -8/+8 | |
| | | | ||||||
| * | | Follow the review advice: turn URI generator into methods. | Jiangge Zhang | 2015-06-03 | 3 | -27/+15 | |
| | | | ||||||
| * | | Add "generate_key_uri" utility for HOTP/TOTP. | Jiangge Zhang | 2015-05-26 | 1 | -0/+50 | |
| | | | ||||||
* | | | Remove remaining UTCTIME variables | Stanisław Pitucha | 2015-06-03 | 1 | -2/+2 | |
| | | | | | | | | | | | | | | | | | | set_not{Before,After} use ASN1_TIME in openssl. UTCTIME has been removed in 0.9.6. get_... functions have been fixed before, but set_... bindings still used the old type. |