aboutsummaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
...
* update supported versions and some grammar (#3594)Paul Kehrer2017-05-241-3/+3
|
* Update the docs to not be redundant and wrong (#3593)Paul Kehrer2017-05-241-3/+0
|
* allow global suppression of link flags (#3592)Paul Kehrer2017-05-246-43/+29
| | | | | CRYPTOGRAPHY_SUPPRESS_LINK_FLAGS will now suppress link flags regardless of platform. Additionally, CRYPTOGRAPHY_WINDOWS_LINK_LEGACY_OPENSSL is now the flag you need if you want to link against < 1.1.0 on windows.
* Removed branches that are now unused (#3589)Alex Gaynor2017-05-241-3/+0
|
* can we convince people we're pyca/cryptography and not cryptography.io (#3588)Paul Kehrer2017-05-232-4/+4
|
* add convenience methods for key_size on EC{Public,Private}Key (#3587)Paul Kehrer2017-05-235-1/+54
|
* Simplify the update (#3586)Alex Gaynor2017-05-231-7/+3
| | | | | | * Simplify the update * wtf, cant reproduce issue
* master builds should use the commit at the time it was merged (#3577)Paul Kehrer2017-05-231-11/+28
|
* Bump the minimum PyPy/cffi version and simplify as a result (#3585)Alex Gaynor2017-05-237-96/+14
| | | | | | | | * Bump the minimum PyPy/cffi version and simplify as a result * unused imports * grumble, fix
* let's deprecate some hashes we should never have exposed (#3584)Paul Kehrer2017-05-233-16/+17
|
* update the docs index (#3583)Paul Kehrer2017-05-231-23/+19
|
* let's use xcode8.3 (still macOS 10.12) (#3582)Paul Kehrer2017-05-231-9/+9
| | | | | | * let's use xcode8.3 (still macOS 10.12) * update comment
* Document DH in serialization (#3569)Aviv Palivoda2017-05-231-1/+10
|
* Close stdout and stderr when spawning a process (#3578)Alex Gaynor2017-05-231-9/+13
|
* Fixes #3573 -- archive the built docs in that builder (#3580)Alex Gaynor2017-05-231-4/+16
| | | | | | | | | | | | | | | | | | | | | | | | | | * Fixes #3573 -- archive the built docs in that builder * syntax * try it without this * I am an idiot * this is unused * uhh, let's try this * maybe this? * eh, html is the only thing * ffffuuuu * Ignore doctree * broader exclude * This works now
* More deprecation warnings (#3579)Alex Gaynor2017-05-231-7/+3
| | | | | | * Fixed more deprecation warnings * unused import
* Fix deprecation warning (#3574)Alex Gaynor2017-05-231-1/+5
|
* Let's help out the newbies (#3572)Cory Benfield2017-05-221-2/+5
|
* Remove dependency on setuptools (#3567)Alex Gaynor2017-05-221-1/+0
|
* Deprecate Python 3.3 support, with the intention of being removed in the ↵Alex Gaynor2017-05-223-0/+10
| | | | | | | | next release (#3566) * Deprecate Python 3.3 support, with the intention of being removed in the next release * whoops
* Switch to jenkinsfile (#3525)Paul Kehrer2017-05-221-0/+343
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * [WIP] add a jenkinsfile * various jenkinsfile fixes [ci skip] * experiments * escape the escaping * can't do that with /usr/bin/env bash * continue isolation * bleh * optimistically enable everything * things * add timeout, codecov * derp * sigh * add credentials for codecov upload * print the env * nonsense * checkout without jenkins because jenkins sucks * maybe we're not allowed to shadow * maybe if we actually pass the variable * scope * cd into a thing * also here * print the commit and run all the jobs again * son of a * add labels * ch-ch-ch-changes * damn it * add docs, pep8, py3pep8 * try some downstreams * make this maybe work * this is probably what we need * faster testing * run this in docker duh * delete me some dirs * wtf * god * more things * oh boy locales * re-enable everything, remove the locales now that they're embedded * refactor, this will probably break everything * small test * sigh * actually bind some variables. also rename things to be camelCase * oookay * this is not gonna work * test all the things * add docs-linkcheck, remove libre 2.5.3 because it is bad * syntax is for losers * append a thing * add yosemite, run this thing daily * oops * some finally cleanup * twisted is dead to us for a brief moment * add randomorder and setup.py test * whatever * re-enable twisted * delete everything. eat arby's * delete everything this time * all is emptiness
* upgrade our pypy2 5.6 builders to 5.7.1 (#3558)Paul Kehrer2017-05-201-2/+2
|
* Switch from 12.04 to 14.04 on travis (#3559)Alex Gaynor2017-05-202-9/+9
| | | | | | | | | | | | | | | | * Switch from 12.04 to 14.04 on travis * test? * fix for pyenv * sigh * try removing this entirely * one more try * empty commit to retrigger travis
* Delete some code (#3563)Alex Gaynor2017-05-203-72/+8
| | | | | | | | * Delete some code * removed import * delete more code
* add the x25519 NID (#3560)Paul Kehrer2017-05-202-0/+12
|
* Fixed #3533 -- made GCM mode object immutable (#3553)Alex Gaynor2017-05-205-40/+64
| | | | | | | | | | | | | | | | | | | | | | | | * Fixed #3533 -- made GCM mode object immutable * flake8 * Fix for older openssl * fix * fix * sigh, fix * fixed * dropped negation * computers are bad * A test * This implements an interface
* Replace release automation with click (#3557)Alex Gaynor2017-05-203-13/+24
| | | | | | | | * Replace release automation with click * Fix * fix
* remove multibackend (#3555)Paul Kehrer2017-05-2010-1280/+10
| | | | | | | | * remove multibackend * oops * goodbye pointless tests
* Dropped support for really old macOS (#3554)Alex Gaynor2017-05-202-5/+5
| | | | | | | | * Dropped support for really old macOS Fixes #3503 * literally, how does spelling
* changelog entry for libre (#3556)Paul Kehrer2017-05-201-0/+2
|
* More accurate LibreSSL detection (#3530)Moriyoshi Koizumi2017-05-201-0/+8
| | | | | | | | * More accurate LibreSSL detection * Update x509_vfy.py change approach to use ifndef
* time to remove commoncrypto, fare thee well (#3551)Paul Kehrer2017-05-2039-1932/+11
| | | | | | | | | | | | | | | | * time to remove commoncrypto, fare thee well * remove even more * update the changelog * remove more things * don't need this function * remove CAST5 CTR tests since that was only supported in commoncrypto * assert a thing
* Don't raise an UnsupportedExtension for critical extensions. (#3550)Alex Gaynor2017-05-208-51/+39
| | | | | | | | | | | | | | | | | | | | | | | | | | * Don't raise an UnsupportedExtension for critical extensions. Fixes #2903 Fixes #2901 Fixes #3325 * Don't link * Revert "Don't link" This reverts commit 4fe847f91d9dd45cdc28a4984c4e44aad62a5de6. * fix * Revert "Revert "Don't link"" This reverts commit 856031b5a1fbad04ac218fa94ebf37dcd402f3ed. * fix * Deprecate this * Better changelog entry
* Add PEM_write_bio_DHxparams, d2i_DHxparams_bio, i2d_DHxparams_bio (#3485)Aviv Palivoda2017-05-193-0/+23
| | | | | | | | | | | | | | | | | | | | | | | | | | | * Add PEM_write_bio_DHxparams * Define PEM_write_bio_DHxparams only if EVP_PKEY_DHX defined. Both added in commit afb14cda in openssl * Add d2i_DHxparams_bio and i2d_DHxparams_bio bindings * Fix bindings addition * change condtional bindings to be after 1.1.0f * Change i2d_DHxparams_bio return type * define Cryptography_d2i_DHxparams_bio and Cryptography_i2d_DHxparams_bio * Remove d2i_DHxparams_bio, i2d_DHxparams_bio bindings * Add declarations for Cryptography_d2i_DHxparams_bio and Cryptography_i2d_DHxparams_bio * Move Cryptography_d2i_DHxparams_bio and Cryptography_i2d_DHxparams_bio declaration to MACROS * Add Cryptography_d2i_DHxparams_bio, Cryptography_i2d_DHxparams_bio and PEM_write_bio_DHxparams to _coditionals.py * Make sure we did not define EVP_PKEY_DHX
* Don't skip DH tests when dhx unsupported and no dhx is required (#3484)Aviv Palivoda2017-05-191-17/+35
| | | | | | * Don't skip DH tests when dhx unsupported and no dhx is required * Add is_dhx parameter
* Added a binding that will be useful for AIA chasing (#3546)Alex Gaynor2017-05-182-1/+20
| | | | | | | | | | | | | | | | | | | | | | | | * Added a binding that will be useful for AIA chasing * another function * This is required * void arguments are morally complex * These are macros * fixes * This has existed for a while * long line * typo * Cory wants this as well * This is conditional
* Make the code compatible with the latest sphinx release (#3543)Alex Gaynor2017-05-171-15/+6
|
* pin sphinx version to avoid test breakage (#3544)Alex Gaynor2017-05-171-1/+1
|
* Fixes #3538 -- Make our OpenSSL EC verifier's implementation match the API ↵Alex Gaynor2017-05-104-18/+28
| | | | | | | | | | | | | | (#3539) * Document our real API for EC verification, not an accident * formatting consistency * fix the code itself * fixed class name * fixed a test too
* use openssl constants (#3534)Paul Kehrer2017-05-034-13/+35
|
* add a changelog entry for finalize_with_tag and move the note (#3531)Paul Kehrer2017-05-022-4/+8
|
* postpone GCM authentication tag requirement until finalization (#3421)Philipp Gesang2017-05-027-33/+208
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * postpone GCM authentication tag requirement until finalization Add a .finalize_with_tag() variant of the .finalize() function of the GCM context. At the same time, do not enforce the requirement of supplying the tag with the mode ctor. This facilitates streamed decryption when the MAC is appended to the ciphertext and cannot be efficiently retrieved ahead of decryption. According to the GCM spec (section 7.2: “Algorithm for the Authenticated Decryption Function”), the tag itself is not needed until the ciphertext has been decrypted. Addresses #3380 Signed-off-by: Philipp Gesang <philipp.gesang@intra2net.com> * disallow delayed GCM tag passing for legacy OpenSSL Old versions of Ubuntu supported by Cryptography ship a v1.0.1 of OpenSSL which is no longer supported by upstream. This library seems to cause erratic test failures with the delayed GCM tag functionality which are not reproducible outside the CI. Unfortunately OpenSSL v1.0.1 does not even document the required API (``EVP_EncryptInit(3)``) so there is no by-the-book fix. For backends of version 1.0.1 and earlier, verify the GCM tag at the same stage as before. Also, indicate to the user that late passing of GCM tags is unsupported by throwing ``NotImplementedError`` for these backend versions if - the method ``finalize_with_tag()`` is invoked, or - the mode ctor is called without passing a tag. Unit tests have been adapted to account for different backend versions.
* Delete dead code and update a comment (#3529)Alex Gaynor2017-04-302-5/+3
|
* Don't compare cffi version using strings (#3524)Alex Gaynor2017-04-295-15/+5
|
* Remove trailing space in vector #3522 (#3523)Alex Gaynor2017-04-281-1/+1
| | | The original source of this vector does not have a space, we added it by accident
* Remove unused assignment (#3519)Alex Gaynor2017-04-271-1/+1
|
* Update docs to reflect a change that occured long ago with bindings (#3517)Alex Gaynor2017-04-261-3/+4
|
* bump minimum setuptools version (#3513)Alex Gaynor2017-04-221-1/+1
| | | This is sort of a pre-req for #3508 (but not really, because setuptools needs to be this version before setup.py even runs for that PR). Because we still support older setuptools versions in our pkg_resources code, this is mostly a gentle nudge to the ecosystem.
* Additional SCT bindings (#3510)Alex Gaynor2017-04-212-0/+23
| | | | | | * Additional SCT bindings * forgot to conditional these
* format some function names in docs (#3511)Alex Gaynor2017-04-211-1/+1
|