Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | always read files in binary mode | Maximilian Hils | 2013-06-16 | 1 | -6/+6 |
| | |||||
* | Add a request_client_cert argument to server SSL conversion. | Aldo Cortesi | 2013-05-13 | 1 | -3/+0 |
| | | | | | | | | | | By default, we now do not request the client cert. We're supposed to be able to do this with no negative effects - if the client has no cert to present, we're notified and proceed as usual. Unfortunately, Android seems to have a bug (tested on 4.2.2) - when an Android client is asked to present a certificate it does not have, it hangs up, which is frankly bogus. Some time down the track we may be able to make the proper behaviour the default again, but until then we're conservative. | ||||
* | extensions aren't supported in v1, set to v3 (value=2) if using them. | Tim Becker | 2013-04-19 | 1 | -0/+1 |
| | |||||
* | Housekeeping and cleanup, some minor argument name changes. | Aldo Cortesi | 2013-02-24 | 1 | -1/+0 |
| | |||||
* | More accurate description of an HTTP read error, make pyflakes happy. | Aldo Cortesi | 2013-02-24 | 1 | -1/+1 |
| | |||||
* | Beef up client certificate handling substantially. | Aldo Cortesi | 2013-01-20 | 1 | -3/+3 |
| | |||||
* | Sanity-check certstore common names. | Aldo Cortesi | 2013-01-06 | 1 | -0/+16 |
| | |||||
* | Generate certificates with a commencement date an hour in the past. | Aldo Cortesi | 2013-01-06 | 1 | -1/+1 |
| | | | | | This helps smooth over small discrepancies in client and server times, where it's possible for a certificate to seem to be "in the future" to the client. | ||||
* | Basic certificate store implementation and cert utils API cleanup. | Aldo Cortesi | 2013-01-06 | 1 | -19/+53 |
| | |||||
* | Ignore SAN entries that we don't understand. | Aldo Cortesi | 2012-07-24 | 1 | -1/+5 |
| | |||||
* | Fix cert path. | Aldo Cortesi | 2012-07-20 | 1 | -1/+1 |
| | |||||
* | fix relative certdir | Maximilian Hils | 2012-07-11 | 1 | -1/+2 |
| | |||||
* | Add utility function for converstion to PEM. | Aldo Cortesi | 2012-06-28 | 1 | -0/+3 |
| | |||||
* | Add a get_remote_cert method to tcp client. | Aldo Cortesi | 2012-06-28 | 1 | -4/+6 |
| | |||||
* | Refactor certutils.SSLCert API. | Aldo Cortesi | 2012-06-27 | 1 | -13/+18 |
| | |||||
* | Add certutils to netlib. | Aldo Cortesi | 2012-06-27 | 1 | -0/+219 |