aboutsummaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
...
* another pkcs12 vector (#4557)Paul Kehrer2018-11-043-2/+8
| | | | | | | | * another pkcs12 vector also fixed the pathing to be consistent in the docs for PKCS12 vectors * add a cert with no key pkcs12 as well
* additional pkcs12 test vector (#4554)Paul Kehrer2018-11-032-0/+3
|
* add various new TLS bindings (#4555)Paul Kehrer2018-11-032-0/+31
| | | | | | | | | | * add SSL_OP_NO_TLSv1_3 * compiling now * bind SSL_CTX_set_ciphersuites as well * add some more
* add EC OIDs (#4435)Paul Kehrer2018-10-302-0/+42
| | | | | | * add EC OIDs * move ec oid docs to bottom
* move ObjectIdentifier to break an upcoming import cycle (#4550)Paul Kehrer2018-10-302-59/+68
|
* suppress healthcheck too slow error (#4548)Paul Kehrer2018-10-301-6/+2
|
* add pkcs12 test vectors (#4535)Paul Kehrer2018-10-306-0/+35
| | | | | | * add pkcs12 test vectors * add more explanatino
* Whitelist NTT for linkcheck (#4547)Alex Gaynor2018-10-301-0/+2
|
* Add eq/ne/hash to PrecertificateSignedCertificateTimestamps (#4534)Paul Kehrer2018-10-293-0/+189
| | | | | | | | | | | | | | * Add eq/ne/hash to PrecertificateSignedCertificateTimestamps This requires adding it to SignedCertificateTimestamps as well * slightly more consistent * right, these need to be conditional * compare by signature * don't use private API
* do not pass conversion on Solaris (#4545)Bernát Gábor2018-10-301-1/+1
|
* Put the linkcheck build next to the other docs build (#4546)Alex Gaynor2018-10-301-4/+4
|
* Simplify build matrix (#4543)Paul Kehrer2018-10-292-15/+1
| | | | | | * simplify pep8 * remove buster/sid 2.7 jobs
* move linkcheck to travis (#4544)Paul Kehrer2018-10-292-11/+4
| | | | | | | | * move linkcheck to travis only run it on master merges just like we do on jenkins * don't build for a PR
* create & use _evp_md_from_algorithm and _evp_md_non_null_from_algorithm (#4542)Paul Kehrer2018-10-295-47/+55
| | | | | | * create & use _evp_md_from_algorithm and _evp_md_non_null_from_algorithm * remove unused import
* add issuingDistributionPoint vectors (#4537)Paul Kehrer2018-10-299-0/+111
|
* add SCT_get0_signature (#4540)Paul Kehrer2018-10-282-0/+4
|
* OCSP response builder (#4485)Paul Kehrer2018-10-285-10/+846
| | | | | | | | * ocsp response builder * better prose * review changes
* add IDP OID and docs (#4533)Paul Kehrer2018-10-282-0/+10
|
* change ECDH documentation to show both classical ECDH and ECDHE (#4530)Paul Kehrer2018-10-281-6/+52
|
* reorder curves to put binary (SECT) curves down at the bottom (#4529)Paul Kehrer2018-10-281-48/+59
| | | also add a disclaimer that you shouldn't use them
* refactor _decode_dist_points (#4536)Paul Kehrer2018-10-281-64/+67
| | | | | | | | | | | * separate refactor _decode_dist_points We need to be able to parse reasons and distpoint for the CRL extension IssuingDistributionPoint * move comment, rename a variable * review feedback
* add bindings for supporting the issuing distribution point CRL extension (#4532)Paul Kehrer2018-10-271-0/+12
|
* add a new SCT vector (#4528)Paul Kehrer2018-10-273-0/+38
| | | | | | * add a new SCT vector * ridiculous
* run docker builds in travis instead of jenkins (#4526)Paul Kehrer2018-10-255-52/+69
| | | | | | | | | | | | | | | | | | | | | | * docker experiment in travis * let's run 'em all * okay run as travis * fine just use a number * remove xenial since we test that elsewhere * suspicion * review feedback * more comments * use workdir * heavy sigh
* Failure is not an option (#4527)Alex Gaynor2018-10-261-5/+0
|
* don't limit hypothesis's time to generate valid test permutations (#4525)Paul Kehrer2018-10-251-1/+6
| | | | | | | | * don't limit hypothesis's time to generate valid test permutations * add a comment * lol
* HTTPS one last URL (#4522)Alex Gaynor2018-10-251-1/+1
|
* add _create_asn1_time (#4524)Paul Kehrer2018-10-241-12/+10
|
* ignore new W504 from flake8/pycodestyle (#4521)Paul Kehrer2018-10-242-0/+6
| | | | | | * ignore new W504 from flake8/pycodestyle * allow josepy to fail for the moment
* OpenPGP's website is also HTTPS! (#4518)Alex Gaynor2018-10-241-1/+1
|
* refactor set_asn1_time to take a datetime (#4516)Paul Kehrer2018-10-231-14/+7
|
* oss-security page is https too! (#4517)Alex Gaynor2018-10-241-1/+1
|
* Colin's website went HTTPS! (#4515)Alex Gaynor2018-10-242-3/+3
|
* bind a constant for an error check (#4514)Paul Kehrer2018-10-231-0/+1
| | | I hate it when we have to do this.
* next_update is not a required field on OCSP responses (#4513)Paul Kehrer2018-10-234-2/+14
|
* Another URL goes https! (#4512)Alex Gaynor2018-10-241-1/+1
|
* Update the linkcheck ignores (#4511)Alex Gaynor2018-10-241-2/+5
| | | | | | | | * Update the linkcheck ignores * Hack? * Ok, this should work
* blacklist latest hypothesis and pytest (#4510)Paul Kehrer2018-10-231-2/+2
| | | | | | | | * ci is suffering again, is it the new pytest or hypothesis? * now try 3.79.2 hypothesis * it's a blacklist party
* Fixes #4500 -- use O_CLOEXEC when opening the /dev/urandom file descriptor ↵Alex Gaynor2018-10-231-9/+2
| | | | | | | | (#4507) * Fixes #4500 -- use O_CLOEXEC when opening the /dev/urandom file descriptor * Unused variable
* add note about dropping LibreSSL 2.4.x support (#4506)Paul Kehrer2018-10-191-0/+1
|
* Remove branch for old libressl versions that we don't support any more (#4505)Alex Gaynor2018-10-201-2/+1
|
* Add testing with LibreSSL 2.8.2 (#4501)Alex Gaynor2018-10-201-2/+2
| | | | | | * Add testing with LibreSSL 2.8.2 * Drop librsesl 2.4.5
* blacklist some pytests (#4502)Paul Kehrer2018-10-191-1/+1
|
* Enhance info on pip requirements intallation (#4499)André Almeida2018-10-191-0/+4
| | | | | | | | | | * Enhance info on pip requirements intallation * Remove virtualenv files from remote * Fix "pacakges" typo * Removing trailling whitespaces
* Add definitions that help with hostname checking (#4492)Kai Engert2018-10-103-0/+56
| | | | | | | | | | | | | | * Add definitions for SSL_get0_param and X509_CHECK_FLAG_NO_PARTIAL_WILDCARDS * remove unnecessary parameter name * Add version conditionals and more flags * extend cryptography_has_102_verification_params * X509_CHECK_FLAG_NEVER_CHECK_SUBJECT only available with openssl 1.1.0+ * add missing declaration
* simplify some language (#4495)Paul Kehrer2018-10-101-2/+7
| | | | | | | | | | | | * simplify some language * Update reference.rst * wrap * remove trailing whitespace the github web editor is bad and should feel bad
* Style nits for docs (#4494)Alex Gaynor2018-10-101-5/+5
|
* Use our cryptography-specific warning class (#4493)Alex Gaynor2018-10-101-1/+1
|
* Add a tutorial explaining how to check the signature of a certificate (#4478)g_goessel2018-10-101-0/+68
|
* Fixes #4459 -- switch all our builds to xenial on travis (#4486)Alex Gaynor2018-10-092-15/+22
| | | | | | | | | | | | | | * Fixes #4459 -- switch all our builds to xenial on travis * Attempt to fix tests * Try disabling sudo? * typo * try this? * shellcheck