Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | support InhibitAnyPolicy in CertificateBuilder | Paul Kehrer | 2015-08-08 | 1 | -0/+30 |
| | |||||
* | add support for AuthorityKeyIdentifier in CertificateBuilder | Paul Kehrer | 2015-08-08 | 1 | -0/+76 |
| | |||||
* | Merge pull request #2210 from reaperhulk/aki-classmethod | Alex Gaynor | 2015-08-08 | 1 | -0/+19 |
|\ | | | | | AuthorityKeyIdentifier classmethod | ||||
| * | add AuthorityKeyIdentifier from_issuer_public_key | Paul Kehrer | 2015-08-08 | 1 | -0/+19 |
| | | | | | | | | | | Refactored SKI's creation code into a separate function, added doctest examples | ||||
* | | add support for encoding SubjectKeyIdentifier to CertificateBuilder | Paul Kehrer | 2015-08-08 | 1 | -0/+36 |
|/ | |||||
* | Merge pull request #2204 from reaperhulk/ski-classmethod | Alex Gaynor | 2015-08-08 | 1 | -3/+60 |
|\ | | | | | SubjectKeyIdentifier classmethod | ||||
| * | rename to classmethod to from_public_key | Paul Kehrer | 2015-08-05 | 1 | -6/+6 |
| | | |||||
| * | add SubjectKeyIdentifier.create_from_public_key | Paul Kehrer | 2015-08-05 | 1 | -3/+60 |
| | | |||||
* | | modify a CRL encode test to have multiple full_names | Paul Kehrer | 2015-08-08 | 1 | -3/+8 |
| | | |||||
* | | add missing test | Paul Kehrer | 2015-08-08 | 1 | -0/+25 |
| | | |||||
* | | support CRLDistributionPoints in the CertificateBuilder | Paul Kehrer | 2015-08-08 | 1 | -0/+118 |
| | | |||||
* | | rename sign_x509_certificate backend method to create_x509_certificate | Paul Kehrer | 2015-08-06 | 2 | -4/+4 |
| | | |||||
* | | fix a few tests that were missed | Paul Kehrer | 2015-08-05 | 2 | -0/+28 |
| | | |||||
* | | check that required fields are present in builder when signing | Paul Kehrer | 2015-08-04 | 1 | -0/+121 |
|/ | |||||
* | Merge pull request #2180 from reaperhulk/easy-conditional-fix | Donald Stufft | 2015-08-04 | 1 | -0/+18 |
|\ | | | | | create a ConditionalLibrary and remove unsupported items | ||||
| * | add test for conditional removal | Paul Kehrer | 2015-08-01 | 1 | -0/+18 |
| | | |||||
* | | Merge pull request #2193 from reaperhulk/encode-aia | Alex Gaynor | 2015-08-03 | 1 | -0/+43 |
|\ \ | | | | | | | Support AuthorityInformationAccess in CertificateBuilder | ||||
| * | | add support for AIA to CertificateBuilder and OpenSSL backend | Paul Kehrer | 2015-08-03 | 1 | -0/+43 |
| | | | |||||
* | | | Fixes #2199 -- allow SSH keys to have spaces in their comments | Alex Gaynor | 2015-08-03 | 1 | -6/+4 |
| | | | |||||
* | | | support keyusage and extendedkeyusage in certificatebuilder | Paul Kehrer | 2015-08-03 | 1 | -0/+89 |
|/ / | |||||
* | | missed one | Paul Kehrer | 2015-08-03 | 1 | -1/+1 |
| | | |||||
* | | reorder CertificateBuilder sign arguments | Paul Kehrer | 2015-08-03 | 1 | -7/+7 |
| | | |||||
* | | Merge remote-tracking branch 'upstream/master' into cert-builder | Ian Cordasco | 2015-08-03 | 6 | -39/+176 |
|\ \ | |||||
| * \ | Merge pull request #2186 from reaperhulk/handle-corrupt-extensions | Alex Gaynor | 2015-08-01 | 1 | -0/+15 |
| |\ \ | | | | | | | | | Handle invalid x509 extension payloads | ||||
| | * | | corrupt -> invalid | Paul Kehrer | 2015-08-01 | 1 | -1/+1 |
| | | | | |||||
| | * | | check if the extension decoded to internal openssl repr | Paul Kehrer | 2015-08-01 | 1 | -0/+15 |
| | | | | | | | | | | | | | | | | ...and if not, raise an error (plus consume the error stack) | ||||
| * | | | Merge pull request #2184 from reaperhulk/remove-more-branches | Alex Gaynor | 2015-08-01 | 2 | -7/+9 |
| |\ \ \ | | |/ / | |/| | | Branch coverage to 100% | ||||
| | * | | add test to cover partial branch in load_kasvs_ecdh_vectors | Paul Kehrer | 2015-08-01 | 1 | -0/+4 |
| | | | | | | | | | | | | | | | | The loop to find supported parameter sets is partially covered otherwise | ||||
| | * | | remove some more branching in the vector loaders | Paul Kehrer | 2015-08-01 | 1 | -7/+4 |
| | | | | |||||
| | * | | add a line for the ecdh vector loader to cover a missed branch | Paul Kehrer | 2015-08-01 | 1 | -0/+1 |
| | |/ | |||||
| * | | this is gonna be unicode now | Paul Kehrer | 2015-08-01 | 1 | -3/+3 |
| | | | |||||
| * | | move urandom engine test | Paul Kehrer | 2015-08-01 | 2 | -30/+27 |
| |/ | | | | | | | | | | | | | | | | | | | This test was in the bindings dir, which is incorrect. We do not set the urandom engine to default unless the openssl backend is loaded. The reason the test wasn't failing (even in the random test case) is that the backends are loaded during pytest_generate_tests by a call to _available_backends. So no matter what order it occurred in the engine was already set to default. I discovered this when I tried to run the test_openssl.py bindings tests directly via pytest. Hooray global state. | ||||
| * | py3 fixin' | Paul Kehrer | 2015-07-25 | 1 | -1/+1 |
| | | |||||
| * | handle RSA key too small and consume errors on CSR signature failure | Paul Kehrer | 2015-07-25 | 1 | -0/+13 |
| | | |||||
| * | Support encoding ExtendedKeyUsage into certificate signing requests | Paul Kehrer | 2015-07-23 | 1 | -0/+23 |
| | | |||||
| * | Support encoding KeyUsage into certificate signing requests | Paul Kehrer | 2015-07-23 | 1 | -2/+64 |
| | | |||||
| * | when building a CSR adding > 1 extension would trigger a bug | Paul Kehrer | 2015-07-23 | 1 | -0/+25 |
| | | | | | | | | | | | | We were checking sk_X509_EXTENSION_push for a value == 1, but in reality it returns the number of extensions on the stack. We now assert >= 1 and added a test. | ||||
* | | Add test coverage for MultiBackend.sign_x509_certificate | Ian Cordasco | 2015-08-02 | 1 | -0/+8 |
| | | |||||
* | | Add note to serial_number parameter about entropy | Ian Cordasco | 2015-08-02 | 1 | -11/+3 |
| | | | | | | | | | | | | | | | | | | | | - Add reference to random-numbers.rst for easy intra-linking - Document critical parameter of CertificateBuilder.add_extension - Support InhibitAnyPolicy in the CertificateBuilder frontend but not in the backend - Slim down more tests - Fix up test that asserts the backend does not allow for unsupported extensions | ||||
* | | Check for subject alternative name in test | Ian Cordasco | 2015-08-02 | 1 | -5/+18 |
| | | | | | | | | Slim RSA key too small test | ||||
* | | Add some extra test coverage | Ian Cordasco | 2015-08-01 | 1 | -0/+19 |
| | | |||||
* | | Slim tests by removing extra NameAttributes | Ian Cordasco | 2015-08-01 | 1 | -32/+0 |
| | | |||||
* | | Minor pep8 and doc fixes | Ian Cordasco | 2015-08-01 | 1 | -2/+2 |
| | | |||||
* | | Add check for an RSA Key being too small | Ian Cordasco | 2015-08-01 | 1 | -12/+3 |
| | | | | | | | | | | - Remove outdated/unnecessary/illegitimate TODOs - Fix up test for an RSA key that is too small | ||||
* | | Add extra CertificateBuilder test using SHA512 and 512-bit RSA key | Ian Cordasco | 2015-07-24 | 1 | -1/+49 |
| | | |||||
* | | Check result of setting the serial number | Ian Cordasco | 2015-07-24 | 1 | -0/+126 |
| | | | | | | | | | | - Add checks for private key types - Add tests around new checks for types of private keys | ||||
* | | Remove CertificateBuilder.version | Ian Cordasco | 2015-07-24 | 2 | -20/+2 |
| | | | | | | | | Default CertificateBuilder to Version.v3 | ||||
* | | Add tests to test_openssl backend for extra coverage | Ian Cordasco | 2015-07-20 | 2 | -0/+48 |
| | | |||||
* | | Add another extension to our CertificateBuilder test | Ian Cordasco | 2015-07-20 | 1 | -0/+9 |
| | | |||||
* | | Add test coverage for x509.CertificateBuilder | Ian Cordasco | 2015-07-19 | 1 | -0/+133 |
| | |