Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | Add X963KDF from ANSI X9.63:2001 | Simo Sorce | 2015-09-24 | 1 | -0/+120 |
| | | | | | | | | | | The implemention allows the use a Hash function to implement a KDF very similar to ConcatKDFHash, just different enough to require a separate derivation function. Closes #2203 Signed-off-by: Simo Sorce <simo@redhat.com> | ||||
* | fix up test coverage on multibackend | Alex Gaynor | 2015-09-22 | 1 | -2/+9 |
| | |||||
* | skip if check on ec test | Paul Kehrer | 2015-08-12 | 1 | -1/+2 |
| | |||||
* | Merge pull request #2262 from viraptor/non-bytes-signatures | Paul Kehrer | 2015-08-12 | 3 | -0/+31 |
|\ | | | | | Ensure early exeption on non-bytes signature | ||||
| * | Enforce signature type in ECDSA and add tests | Stanisław Pitucha | 2015-08-12 | 3 | -0/+31 |
| | | | | | | | | | | Ensure that ECDSA signatures are bytes to match RSA/DSA and add tests for all three. | ||||
* | | resolve incorrect docs/naming around DSA (r, s) tuple encode/decode | Paul Kehrer | 2015-08-10 | 2 | -23/+31 |
|/ | |||||
* | pep8 fix | Paul Kehrer | 2015-08-09 | 1 | -2/+0 |
| | |||||
* | move a test | Paul Kehrer | 2015-08-09 | 1 | -26/+0 |
| | |||||
* | support issuer alternative name encoding | Paul Kehrer | 2015-08-09 | 1 | -1/+6 |
| | |||||
* | fix unsupported test | Paul Kehrer | 2015-08-08 | 1 | -1/+1 |
| | |||||
* | rename sign_x509_certificate backend method to create_x509_certificate | Paul Kehrer | 2015-08-06 | 2 | -4/+4 |
| | |||||
* | fix a few tests that were missed | Paul Kehrer | 2015-08-05 | 1 | -0/+2 |
| | |||||
* | Merge pull request #2180 from reaperhulk/easy-conditional-fix | Donald Stufft | 2015-08-04 | 1 | -0/+18 |
|\ | | | | | create a ConditionalLibrary and remove unsupported items | ||||
| * | add test for conditional removal | Paul Kehrer | 2015-08-01 | 1 | -0/+18 |
| | | |||||
* | | Fixes #2199 -- allow SSH keys to have spaces in their comments | Alex Gaynor | 2015-08-03 | 1 | -6/+4 |
| | | |||||
* | | missed one | Paul Kehrer | 2015-08-03 | 1 | -1/+1 |
| | | |||||
* | | Merge remote-tracking branch 'upstream/master' into cert-builder | Ian Cordasco | 2015-08-03 | 2 | -30/+27 |
|\ \ | |||||
| * | | this is gonna be unicode now | Paul Kehrer | 2015-08-01 | 1 | -3/+3 |
| | | | |||||
| * | | move urandom engine test | Paul Kehrer | 2015-08-01 | 2 | -30/+27 |
| |/ | | | | | | | | | | | | | | | | | | | This test was in the bindings dir, which is incorrect. We do not set the urandom engine to default unless the openssl backend is loaded. The reason the test wasn't failing (even in the random test case) is that the backends are loaded during pytest_generate_tests by a call to _available_backends. So no matter what order it occurred in the engine was already set to default. I discovered this when I tried to run the test_openssl.py bindings tests directly via pytest. Hooray global state. | ||||
* | | Add test coverage for MultiBackend.sign_x509_certificate | Ian Cordasco | 2015-08-02 | 1 | -0/+8 |
| | | |||||
* | | Add note to serial_number parameter about entropy | Ian Cordasco | 2015-08-02 | 1 | -11/+3 |
| | | | | | | | | | | | | | | | | | | | | - Add reference to random-numbers.rst for easy intra-linking - Document critical parameter of CertificateBuilder.add_extension - Support InhibitAnyPolicy in the CertificateBuilder frontend but not in the backend - Slim down more tests - Fix up test that asserts the backend does not allow for unsupported extensions | ||||
* | | Remove CertificateBuilder.version | Ian Cordasco | 2015-07-24 | 1 | -3/+1 |
| | | | | | | | | Default CertificateBuilder to Version.v3 | ||||
* | | Add tests to test_openssl backend for extra coverage | Ian Cordasco | 2015-07-20 | 1 | -0/+39 |
|/ | |||||
* | Fixed #2143 -- added __hash__ to RSA{Public,Private}Numbers | Alex Gaynor | 2015-07-12 | 1 | -0/+16 |
| | |||||
* | do the same simplification to the aad test | Paul Kehrer | 2015-07-01 | 1 | -3/+1 |
| | |||||
* | add missing test, simplify encrypted byte near limit calculation | Paul Kehrer | 2015-07-01 | 1 | -3/+15 |
| | |||||
* | add additional increment tests | Paul Kehrer | 2015-07-01 | 1 | -8/+18 |
| | |||||
* | put the AAD and encrypted byte limit checks in the parent context | Paul Kehrer | 2015-07-01 | 1 | -0/+30 |
| | |||||
* | Merge pull request #2073 from glyph/no-c-random | Paul Kehrer | 2015-06-30 | 2 | -8/+38 |
|\ | | | | | Replace C implementation of OS Random engine with Python one that just calls os.urandom | ||||
| * | test libressl when there is no libressl | Glyph | 2015-06-30 | 1 | -2/+15 |
| | | |||||
| * | pep8 | Glyph | 2015-06-30 | 1 | -0/+1 |
| | | |||||
| * | Detect and ignore LibreSSL. | Glyph | 2015-06-30 | 1 | -1/+3 |
| | | |||||
| * | the output of RAND_bytes is os.urandom's result | Glyph | 2015-06-29 | 1 | -0/+14 |
| | | |||||
| * | handle previous registration by raising RuntimeError | Glyph | 2015-06-27 | 1 | -2/+2 |
| | | |||||
| * | pointer shenanigans | Glyph | 2015-06-26 | 1 | -9/+8 |
| | | | | | | | | | | | | | | | | apparently (?) ENGINE_by_id treats its ID as an opaque *pointer* key and not actually as a string, and while CPython's CFFI support seems to manage to preserve the pointer identity when using the same Python string, PyPy doesn't. Fix things to use a cffi-wrapped pointer again and tests pass on PyPy. | ||||
| * | remove remaining vestiges, make adding twice work | Glyph | 2015-06-26 | 2 | -4/+2 |
| | | |||||
| * | compare contents and not pointers | Glyph | 2015-06-26 | 1 | -9/+12 |
| | | |||||
* | | require serialization in asym tests | Paul Kehrer | 2015-06-27 | 4 | -164/+70 |
| | | |||||
* | | More branch coverage improvements. By virtue of reorganization and a new test | Alex Gaynor | 2015-06-27 | 1 | -0/+21 |
|/ | |||||
* | Use SECP256R1 instead of SECT283K1 in CSR tests | Ian Cordasco | 2015-06-24 | 1 | -2/+2 |
| | |||||
* | Skip tests when the EC curve is unsupported | Ian Cordasco | 2015-06-24 | 1 | -0/+2 |
| | |||||
* | Add tests to the CSR Builder for EC and DSA keys | Ian Cordasco | 2015-06-24 | 1 | -1/+24 |
| | | | | | | This skips certain tests on certain versions of differences in how X509_REQ_sign works on those versions. A separate pull request will address those differences. | ||||
* | Renames sign_509_request to create_x509_csr. | Andre Caron | 2015-06-24 | 1 | -0/+6 |
| | |||||
* | fix ec_cdata_to_evp_pkey bug | Paul Kehrer | 2015-06-22 | 1 | -0/+18 |
| | | | | | | We weren't actually returning the object and the tests weren't catching it because we didn't try to use the evp_pkey property in the tests. The added test confirms it actually works. | ||||
* | Remove our workarounds for pyasn.1 bugs, a new pyasn.1 is out! | Alex Gaynor | 2015-06-22 | 1 | -2/+2 |
| | |||||
* | Add ConcatKDF from NIST SP 800-56A | Simo Sorce | 2015-06-12 | 1 | -0/+251 |
| | | | | | | | | | The implemention allows the use an HMAC function as per Revision 2 of the document. Conformance of the formatting of the OtherInfo argument is responsability of the calling application. Signed-off-by: Simo Sorce <simo@redhat.com> | ||||
* | convert to cffi 1.0 precompile system | Paul Kehrer | 2015-06-07 | 4 | -58/+14 |
| | |||||
* | Remove a default argument and rename a private function. | Jiangge Zhang | 2015-06-03 | 2 | -3/+3 |
| | |||||
* | Follow the review advice: turn URI generator into methods. | Jiangge Zhang | 2015-06-03 | 2 | -9/+4 |
| | |||||
* | Add "generate_key_uri" utility for HOTP/TOTP. | Jiangge Zhang | 2015-05-26 | 2 | -0/+31 |
| |