Commit message (Collapse) | Author | Age | Files | Lines | ||
---|---|---|---|---|---|---|
... | ||||||
| * | a refactor to the API | Alex Gaynor | 2015-10-17 | 3 | -76/+59 | |
| | | ||||||
| * | Add an Elliptic Curve Key Exchange Algorithm(ECDH) | Simo Sorce | 2015-10-17 | 3 | -3/+117 | |
| | | | | | | | | | | | | | | | | | | The ECDH Key Exchange algorithm as standardized in NIST publication 800-56A Revision 2 Includes tests with vectors from NIST. Signed-off-by: Simo Sorce <simo@redhat.com> | |||||
| * | Catch Invalid X or Y points and raise a ValueError | Simo Sorce | 2015-10-12 | 1 | -0/+29 | |
| | | | | | | | | Signed-off-by: Simo Sorce <simo@redhat.com> | |||||
* | | Merge branch 'master' into crl_ossl_backend | Erik Trauschke | 2015-09-28 | 1 | -19/+1 | |
|\| | ||||||
| * | Use InternalError for stuff | Alex Gaynor | 2015-09-26 | 1 | -19/+1 | |
| | | ||||||
* | | Merge branch 'crl_ossl_backend' of github.com:etrauschke/cryptography into ↵ | Erik Trauschke | 2015-09-28 | 1 | -0/+12 | |
|\ \ | |/ |/| | | | crl_ossl_backend | |||||
| * | Merge branch 'master' into crl_ossl_backend | Erik Trauschke | 2015-09-25 | 1 | -1/+6 | |
| |\ | ||||||
| * \ | Merge branch 'master' into crl_ossl_backend | Erik Trauschke | 2015-09-25 | 2 | -0/+192 | |
| |\ \ | ||||||
| * | | | OpenSSL backend code for CRLs | Erik Trauschke | 2015-09-24 | 1 | -0/+12 | |
| | | | | ||||||
* | | | | fix the tests | Alex Gaynor | 2015-09-26 | 1 | -1/+2 | |
| | | | | ||||||
* | | | | rename this file for consistency | Alex Gaynor | 2015-09-26 | 1 | -0/+0 | |
| |_|/ |/| | | ||||||
* | | | add test for openssl_assert | Paul Kehrer | 2015-09-25 | 1 | -1/+6 | |
| |/ |/| | ||||||
* | | Some cleanups | Alex Gaynor | 2015-09-24 | 1 | -3/+3 | |
| | | ||||||
* | | Test X9.63 with NIST test vectors | Simo Sorce | 2015-09-24 | 1 | -0/+72 | |
| | | | | | | | | Signed-off-by: Simo Sorce <simo@redhat.com> | |||||
* | | Add X963KDF from ANSI X9.63:2001 | Simo Sorce | 2015-09-24 | 1 | -0/+120 | |
|/ | | | | | | | | | | The implemention allows the use a Hash function to implement a KDF very similar to ConcatKDFHash, just different enough to require a separate derivation function. Closes #2203 Signed-off-by: Simo Sorce <simo@redhat.com> | |||||
* | fix up test coverage on multibackend | Alex Gaynor | 2015-09-22 | 1 | -2/+9 | |
| | ||||||
* | skip if check on ec test | Paul Kehrer | 2015-08-12 | 1 | -1/+2 | |
| | ||||||
* | Merge pull request #2262 from viraptor/non-bytes-signatures | Paul Kehrer | 2015-08-12 | 3 | -0/+31 | |
|\ | | | | | Ensure early exeption on non-bytes signature | |||||
| * | Enforce signature type in ECDSA and add tests | Stanisław Pitucha | 2015-08-12 | 3 | -0/+31 | |
| | | | | | | | | | | Ensure that ECDSA signatures are bytes to match RSA/DSA and add tests for all three. | |||||
* | | resolve incorrect docs/naming around DSA (r, s) tuple encode/decode | Paul Kehrer | 2015-08-10 | 2 | -23/+31 | |
|/ | ||||||
* | pep8 fix | Paul Kehrer | 2015-08-09 | 1 | -2/+0 | |
| | ||||||
* | move a test | Paul Kehrer | 2015-08-09 | 1 | -26/+0 | |
| | ||||||
* | support issuer alternative name encoding | Paul Kehrer | 2015-08-09 | 1 | -1/+6 | |
| | ||||||
* | fix unsupported test | Paul Kehrer | 2015-08-08 | 1 | -1/+1 | |
| | ||||||
* | rename sign_x509_certificate backend method to create_x509_certificate | Paul Kehrer | 2015-08-06 | 2 | -4/+4 | |
| | ||||||
* | fix a few tests that were missed | Paul Kehrer | 2015-08-05 | 1 | -0/+2 | |
| | ||||||
* | Merge pull request #2180 from reaperhulk/easy-conditional-fix | Donald Stufft | 2015-08-04 | 1 | -0/+18 | |
|\ | | | | | create a ConditionalLibrary and remove unsupported items | |||||
| * | add test for conditional removal | Paul Kehrer | 2015-08-01 | 1 | -0/+18 | |
| | | ||||||
* | | Fixes #2199 -- allow SSH keys to have spaces in their comments | Alex Gaynor | 2015-08-03 | 1 | -6/+4 | |
| | | ||||||
* | | missed one | Paul Kehrer | 2015-08-03 | 1 | -1/+1 | |
| | | ||||||
* | | Merge remote-tracking branch 'upstream/master' into cert-builder | Ian Cordasco | 2015-08-03 | 2 | -30/+27 | |
|\ \ | ||||||
| * | | this is gonna be unicode now | Paul Kehrer | 2015-08-01 | 1 | -3/+3 | |
| | | | ||||||
| * | | move urandom engine test | Paul Kehrer | 2015-08-01 | 2 | -30/+27 | |
| |/ | | | | | | | | | | | | | | | | | | | This test was in the bindings dir, which is incorrect. We do not set the urandom engine to default unless the openssl backend is loaded. The reason the test wasn't failing (even in the random test case) is that the backends are loaded during pytest_generate_tests by a call to _available_backends. So no matter what order it occurred in the engine was already set to default. I discovered this when I tried to run the test_openssl.py bindings tests directly via pytest. Hooray global state. | |||||
* | | Add test coverage for MultiBackend.sign_x509_certificate | Ian Cordasco | 2015-08-02 | 1 | -0/+8 | |
| | | ||||||
* | | Add note to serial_number parameter about entropy | Ian Cordasco | 2015-08-02 | 1 | -11/+3 | |
| | | | | | | | | | | | | | | | | | | | | - Add reference to random-numbers.rst for easy intra-linking - Document critical parameter of CertificateBuilder.add_extension - Support InhibitAnyPolicy in the CertificateBuilder frontend but not in the backend - Slim down more tests - Fix up test that asserts the backend does not allow for unsupported extensions | |||||
* | | Remove CertificateBuilder.version | Ian Cordasco | 2015-07-24 | 1 | -3/+1 | |
| | | | | | | | | Default CertificateBuilder to Version.v3 | |||||
* | | Add tests to test_openssl backend for extra coverage | Ian Cordasco | 2015-07-20 | 1 | -0/+39 | |
|/ | ||||||
* | Fixed #2143 -- added __hash__ to RSA{Public,Private}Numbers | Alex Gaynor | 2015-07-12 | 1 | -0/+16 | |
| | ||||||
* | do the same simplification to the aad test | Paul Kehrer | 2015-07-01 | 1 | -3/+1 | |
| | ||||||
* | add missing test, simplify encrypted byte near limit calculation | Paul Kehrer | 2015-07-01 | 1 | -3/+15 | |
| | ||||||
* | add additional increment tests | Paul Kehrer | 2015-07-01 | 1 | -8/+18 | |
| | ||||||
* | put the AAD and encrypted byte limit checks in the parent context | Paul Kehrer | 2015-07-01 | 1 | -0/+30 | |
| | ||||||
* | Merge pull request #2073 from glyph/no-c-random | Paul Kehrer | 2015-06-30 | 2 | -8/+38 | |
|\ | | | | | Replace C implementation of OS Random engine with Python one that just calls os.urandom | |||||
| * | test libressl when there is no libressl | Glyph | 2015-06-30 | 1 | -2/+15 | |
| | | ||||||
| * | pep8 | Glyph | 2015-06-30 | 1 | -0/+1 | |
| | | ||||||
| * | Detect and ignore LibreSSL. | Glyph | 2015-06-30 | 1 | -1/+3 | |
| | | ||||||
| * | the output of RAND_bytes is os.urandom's result | Glyph | 2015-06-29 | 1 | -0/+14 | |
| | | ||||||
| * | handle previous registration by raising RuntimeError | Glyph | 2015-06-27 | 1 | -2/+2 | |
| | | ||||||
| * | pointer shenanigans | Glyph | 2015-06-26 | 1 | -9/+8 | |
| | | | | | | | | | | | | | | | | apparently (?) ENGINE_by_id treats its ID as an opaque *pointer* key and not actually as a string, and while CPython's CFFI support seems to manage to preserve the pointer identity when using the same Python string, PyPy doesn't. Fix things to use a cffi-wrapped pointer again and tests pass on PyPy. | |||||
| * | remove remaining vestiges, make adding twice work | Glyph | 2015-06-26 | 2 | -4/+2 | |
| | |