aboutsummaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
* reorder the primitives list and improve a few titles (#3640)Paul Kehrer2017-05-293-9/+9
|
* add a jenkinsfile for building wheels (#3636)Paul Kehrer2017-05-293-127/+127
| | | | | | | | | | * add a jenkinsfile for building wheels * remove scripts we don't need now * still do the list of installed items on the mac builder * build 2.6, don't bother with 2.7 ucs4 on mac, simplify batch
* Enlarge _oid2txt buffer to handle larger OIDs (#3612)Fraser Tweedale2017-05-294-0/+70
| | | | | | | | | The OpenSSL manual recommends a buffer size of 80 for OBJ_oid2txt: https://www.openssl.org/docs/crypto/OBJ_nid2ln.html#return_values. But OIDs longer than this occur in real life (e.g. Active Directory makes some very long OIDs). If the length of the stringified OID exceeds the buffer size, allocate a new buffer that is big enough to hold the stringified OID, and re-do the conversion into the new buffer.
* move MACContext to mac.py and eliminate interfaces.py (#3631)Paul Kehrer2017-05-2914-106/+89
| | | | | | | | | | | | | * move MACContext to mac.py and eliminate interfaces.py finally * improve title * re-add and deprecate interfaces.MACContext * use pytest.warns instead of deprecated_call The pytest docs insist that deprecation warnings are handled differently and that you should use deprecated_call, but this works so okay then
* add a jenkinsfile for updating homebrew openssl on jenkins builders (#3630)Paul Kehrer2017-05-291-0/+35
|
* reorganize our toc to look nicer and make more sense (#3632)Paul Kehrer2017-05-291-5/+5
|
* Ignore linkcheck errors from cryptrec (#3629)Alex Gaynor2017-05-281-0/+5
|
* Simplify int to hex string conversion (#3628)Alex Gaynor2017-05-281-3/+3
|
* add windows OpenSSL 1.1 jenkinsfile builder (#3624)Paul Kehrer2017-05-281-0/+86
| | | | | | | | | | | | | * add windows OpenSSL 1.1 jenkinsfile builder I tested this before submitting. You can see the output here: https://ci.cryptography.io/blue/organizations/jenkins/openssl-release-1.1/detail/openssl-release-1.1/8/pipeline Once this merges we can switch the jenkins job to pull this directly from the repository. Unfortunately the job does not get created automatically in jenkins, so that's a new step in building our infra * add comments
* Sphinx 1.6.2 is also broken (#3627)Alex Gaynor2017-05-281-1/+1
|
* Improve accuracy of install docs page (#3626)Paul Kehrer2017-05-271-5/+5
| | | | | | * Improve accuracy of install docs page * fix line length
* Typo fix (#3625)Paul Kehrer2017-05-271-1/+1
|
* strongly encourage the use of fernet, document its limitation (#3623)Paul Kehrer2017-05-272-0/+10
|
* Modify DH/ECDH examples to be explicit for DHE/ECDHE (#3622)Paul Kehrer2017-05-272-3/+32
| | | | | | | | * Modify DH/ECDH examples to be explicit for DHE/ECDHE Also add note to DH docs that you should probably use ECDH * give a reason
* re-add the why of cryptography to the faq with some small updates (#3621)Paul Kehrer2017-05-271-0/+19
| | | | | | * re-add the why of cryptography to the faq with some small updates * reorder the items a bit
* Remove unused line from mac wheel builder (#3619)Alex Gaynor2017-05-261-1/+0
|
* port 1.8.2 changelog to master (#3616)Paul Kehrer2017-05-261-1/+5
| | | | | | * port 1.8.2 changelog to master * we did this in 1.8.2
* fix libressl error/refactor some error handling (#3609)Paul Kehrer2017-05-267-59/+67
| | | | | | | | | | | | | | | | | | | | | | | * add libre so I can see the error * add the libre error needed and refactor error handling a bit We were historically matching on lib + func + reason, but func is somewhat unstable so now we match on lib + reason only. Of course, in this case libressl changed both lib and reason so it wouldn't have mattered. All error handling from the error queue in openssl is an illusion * fix a typo, probably an unneeded branch * review feedback * refactor tests to support libressl insert additional rant about libre here, although admittedly these tests were assuming stability where openssl itself guarantees none * better assert, fix flake8
* Document when OpenSSL changed its default (#3611)Alex Gaynor2017-05-251-1/+1
| | | | | | | | | | * Figure out when this came into existance by deleting it * Revert "Figure out when this came into existance by deleting it" This reverts commit 2fb9b8e104742bfa12eb5feedccebacfc23c66bb. * Clearly document when this became true
* jurisdictionCountryName also must be PrintableString (#3516)Alex Gaynor2017-05-253-3/+22
| | | | | | | | | | | | | | * jurisdictionCountryName also must be PrintableString * flake8 + citation * Write a test, which fails. If my analysis is correct, this is blocked on: https://github.com/openssl/openssl/pull/3284 * This is only true on 1.1.0 * clearly express the version requirement
* only build master and our release branches (#3601)Paul Kehrer2017-05-251-0/+8
| | | | | | | | | | | | | | | | * only build master and our release branches * review feedback * also build the tags tags are of form `digit . digit` or `digit . digit . digit` * alex is right * that should match 0-1 times, not 0-infinity * so much regex
* 1.1.0f for the next release (#3599)Paul Kehrer2017-05-251-0/+1
|
* update to 1.1.0f in travis (#3607)Paul Kehrer2017-05-251-2/+2
|
* add a missing word (#3600)Paul Kehrer2017-05-251-1/+1
|
* Switch mac wheel builder to use new syntax (#3597)Alex Gaynor2017-05-251-1/+1
|
* Remove now unused env var from Windows wheel buidler (#3598)Alex Gaynor2017-05-251-2/+1
|
* fix compilation on 1.1.0f (#3603)Paul Kehrer2017-05-251-2/+4
|
* add some explicit instructions on determining key type in a cert (#3596)Paul Kehrer2017-05-241-0/+17
| | | | | | * add some explicit instructions on determining key type in a cert * can't call it a CSR
* comma comma comma (#3595)Paul Kehrer2017-05-241-2/+2
|
* Put the exchange method on the correct interface (#3591)Alex Gaynor2017-05-243-20/+20
| | | | | | * Put the exchange method on the correct interface * fixed links in docs
* update supported versions and some grammar (#3594)Paul Kehrer2017-05-241-3/+3
|
* Update the docs to not be redundant and wrong (#3593)Paul Kehrer2017-05-241-3/+0
|
* allow global suppression of link flags (#3592)Paul Kehrer2017-05-246-43/+29
| | | | | CRYPTOGRAPHY_SUPPRESS_LINK_FLAGS will now suppress link flags regardless of platform. Additionally, CRYPTOGRAPHY_WINDOWS_LINK_LEGACY_OPENSSL is now the flag you need if you want to link against < 1.1.0 on windows.
* Removed branches that are now unused (#3589)Alex Gaynor2017-05-241-3/+0
|
* can we convince people we're pyca/cryptography and not cryptography.io (#3588)Paul Kehrer2017-05-232-4/+4
|
* add convenience methods for key_size on EC{Public,Private}Key (#3587)Paul Kehrer2017-05-235-1/+54
|
* Simplify the update (#3586)Alex Gaynor2017-05-231-7/+3
| | | | | | * Simplify the update * wtf, cant reproduce issue
* master builds should use the commit at the time it was merged (#3577)Paul Kehrer2017-05-231-11/+28
|
* Bump the minimum PyPy/cffi version and simplify as a result (#3585)Alex Gaynor2017-05-237-96/+14
| | | | | | | | * Bump the minimum PyPy/cffi version and simplify as a result * unused imports * grumble, fix
* let's deprecate some hashes we should never have exposed (#3584)Paul Kehrer2017-05-233-16/+17
|
* update the docs index (#3583)Paul Kehrer2017-05-231-23/+19
|
* let's use xcode8.3 (still macOS 10.12) (#3582)Paul Kehrer2017-05-231-9/+9
| | | | | | * let's use xcode8.3 (still macOS 10.12) * update comment
* Document DH in serialization (#3569)Aviv Palivoda2017-05-231-1/+10
|
* Close stdout and stderr when spawning a process (#3578)Alex Gaynor2017-05-231-9/+13
|
* Fixes #3573 -- archive the built docs in that builder (#3580)Alex Gaynor2017-05-231-4/+16
| | | | | | | | | | | | | | | | | | | | | | | | | | * Fixes #3573 -- archive the built docs in that builder * syntax * try it without this * I am an idiot * this is unused * uhh, let's try this * maybe this? * eh, html is the only thing * ffffuuuu * Ignore doctree * broader exclude * This works now
* More deprecation warnings (#3579)Alex Gaynor2017-05-231-7/+3
| | | | | | * Fixed more deprecation warnings * unused import
* Fix deprecation warning (#3574)Alex Gaynor2017-05-231-1/+5
|
* Let's help out the newbies (#3572)Cory Benfield2017-05-221-2/+5
|
* Remove dependency on setuptools (#3567)Alex Gaynor2017-05-221-1/+0
|
* Deprecate Python 3.3 support, with the intention of being removed in the ↵Alex Gaynor2017-05-223-0/+10
| | | | | | | | next release (#3566) * Deprecate Python 3.3 support, with the intention of being removed in the next release * whoops