Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | Merge pull request #2809 from reaperhulk/110-patch-28 | Alex Gaynor | 2016-03-13 | 2 | -10/+82 |
|\ | | | | | add 5 accessor functions that exist in 1.1.0 to help opaque x509 structs | ||||
| * | remove pointless comments | Paul Kehrer | 2016-03-13 | 1 | -8/+0 |
| | | |||||
| * | add 5 accessor functions that exist in 1.1.0 to help opaque x509 structs | Paul Kehrer | 2016-03-11 | 2 | -10/+90 |
| | | | | | | | | | | | | | | | | | | X509_REVOKED_get0_serialNumber X509_REVOKED_get0_revocationDate X509_CRL_get0_signature i2d_re_X509_REQ_tbs i2d_re_X509_CRL_tbs X509_REQ_get0_signature | ||||
* | | Merge pull request #2820 from reaperhulk/110-patch-31 | Alex Gaynor | 2016-03-13 | 1 | -0/+46 |
|\ \ | | | | | | | bind some new functions to access elements of the SSL struct | ||||
| * | | bind some new functions to access elements of the SSL struct | Paul Kehrer | 2016-03-13 | 1 | -0/+46 |
|/ / | | | | | | | | | | | SSL_SESSION_get_master_key (added 1.1.0) SSL_get_client_random (added 1.1.0) SSL_get_server_random (added 1.1.0) | ||||
* | | Merge pull request #2819 from reaperhulk/110-patch-30 | Alex Gaynor | 2016-03-13 | 1 | -0/+24 |
|\ \ | | | | | | | bind SSL_SESSION_set1_id_context | ||||
| * | | bind SSL_SESSION_set1_id_context | Paul Kehrer | 2016-03-13 | 1 | -0/+24 |
|/ / | | | | | | | added in 1.0.1 | ||||
* | | Merge pull request #2808 from reaperhulk/110-patch-27 | Alex Gaynor | 2016-03-13 | 1 | -7/+12 |
|\ \ | | | | | | | bind SSL_CTX_get_ssl_method | ||||
| * | | bind one new function to access part of the SSL struct | Paul Kehrer | 2016-03-13 | 1 | -7/+12 |
| |/ | | | | | | | | | | | SSL_CTX_get_ssl_method (added 1.0.2) also remove the internally invented symbol we had (that was not in use) | ||||
* | | Merge pull request #2818 from reaperhulk/simplify-extension-creation | Alex Gaynor | 2016-03-13 | 2 | -67/+48 |
|\ \ | | | | | | | simplify extension creation by using X509V3_EXT_i2d | ||||
| * | | support openssl 0.9.8's nonsense hopefully | Paul Kehrer | 2016-03-13 | 1 | -1/+26 |
| | | | |||||
| * | | also bytes. | Paul Kehrer | 2016-03-13 | 1 | -1/+3 |
| | | | |||||
| * | | bytes, my nemesis | Paul Kehrer | 2016-03-13 | 1 | -1/+1 |
| | | | |||||
| * | | simplify extension creation by using X509V3_EXT_i2d | Paul Kehrer | 2016-03-13 | 2 | -69/+23 |
| | | | |||||
* | | | Merge pull request #2802 from reaperhulk/110-patch-23 | Alex Gaynor | 2016-03-13 | 2 | -10/+51 |
|\ \ \ | |/ / |/| | | move crypto_ex_data to macros, add i2d_re_X509_tbs & X509_get0_signature | ||||
| * | | improve comments | Paul Kehrer | 2016-03-12 | 1 | -4/+5 |
| | | | |||||
| * | | this was actually added in 1.0.2-beta3 | Paul Kehrer | 2016-03-10 | 1 | -1/+1 |
| | | | |||||
| * | | move crypto_ex_data to macros, add i2d_re_X509_tbs & X509_get0_signature | Paul Kehrer | 2016-03-10 | 2 | -10/+50 |
| | | | | | | | | | | | | | | | | | | And, of course, use them in the openssl bindings. These changes are a start towards opaquing all the X509 structs. The actual opaquing won't take place until the very end though to minimize pyOpenSSL breakage | ||||
* | | | Merge pull request #2815 from reaperhulk/error-on-unusual-encodings | Alex Gaynor | 2016-03-12 | 2 | -1/+26 |
|\ \ \ | | | | | | | | | Error on unusual encodings | ||||
| * | | | py3 is a thing | Paul Kehrer | 2016-03-12 | 1 | -1/+1 |
| | | | | |||||
| * | | | move NUMERICSTRING certificate test to test_openssl & make it more specific | Paul Kehrer | 2016-03-12 | 3 | -13/+22 |
| | | | | |||||
| * | | | raise type error rather than internalerror w/ unsupported asn1 in subject | Paul Kehrer | 2016-03-12 | 2 | -1/+17 |
| | | | | |||||
* | | | | Merge pull request #2817 from reaperhulk/mod-wsgi-workaround | Alex Gaynor | 2016-03-12 | 1 | -0/+19 |
|\ \ \ \ | | | | | | | | | | | add two faq entries for common errors | ||||
| * | | | | add more language | Paul Kehrer | 2016-03-12 | 1 | -0/+4 |
| | | | | | |||||
| * | | | | add two faq entries for common errors | Paul Kehrer | 2016-03-12 | 1 | -0/+15 |
|/ / / / | |||||
* | | | | Merge pull request #2807 from reaperhulk/110-patch-26 | Alex Gaynor | 2016-03-12 | 2 | -3/+32 |
|\ \ \ \ | | | | | | | | | | | conditionally bind/remove the SSL_ST/TLS_ST state machine statuses | ||||
| * | | | | conditionally bind/remove the SSL_ST/TLS_ST state machine statuses | Paul Kehrer | 2016-03-11 | 2 | -3/+32 |
| | |_|/ | |/| | | |||||
* | | | | Merge pull request #2813 from reaperhulk/fix-2758 | Alex Gaynor | 2016-03-12 | 4 | -0/+70 |
|\ \ \ \ | | | | | | | | | | | Add AuthorityKeyIdentifier.from_issuer_subject_key_identifier | ||||
| * | | | | add some notes about when to use these classmethods | Paul Kehrer | 2016-03-12 | 1 | -0/+12 |
| | | | | | |||||
| * | | | | Add AuthorityKeyIdentifier.from_issuer_subject_key_identifier | Paul Kehrer | 2016-03-11 | 4 | -0/+58 |
| |/ / / | |||||
* | | | | Merge pull request #2794 from reaperhulk/110-patch-15 | Alex Gaynor | 2016-03-12 | 2 | -11/+33 |
|\ \ \ \ | | | | | | | | | | | opaque HMAC_CTX, which requires some helper functions | ||||
| * | | | | HMAC_CTX_new doesn't need commented out code for no reason | Paul Kehrer | 2016-03-10 | 1 | -5/+0 |
| | | | | | |||||
| * | | | | simplify HMAC_CTX_free | Paul Kehrer | 2016-03-10 | 1 | -4/+0 |
| | | | | | |||||
| * | | | | opaque HMAC_CTX, which requires some helper functions | Paul Kehrer | 2016-03-09 | 2 | -11/+42 |
| | | | | | |||||
* | | | | | Merge pull request #2812 from reaperhulk/fix-2717 | Alex Gaynor | 2016-03-12 | 2 | -5/+22 |
|\ \ \ \ \ | |_|_|/ / |/| | | | | make multibackend error with an empty list. | ||||
| * | | | | parens | Paul Kehrer | 2016-03-11 | 1 | -1/+1 |
| | | | | | |||||
| * | | | | make multibackend error with an empty list. fixes #2717 | Paul Kehrer | 2016-03-11 | 2 | -5/+22 |
| | |/ / | |/| | | |||||
* | | | | Merge pull request #2814 from reaperhulk/add-russian-cert-vector | Alex Gaynor | 2016-03-11 | 2 | -0/+4 |
|\ \ \ \ | | | | | | | | | | | add e-trust russian x509 test vector | ||||
| * | | | | add e-trust russian x509 test vector | Paul Kehrer | 2016-03-11 | 2 | -0/+4 |
| |/ / / | |||||
* | | | | Merge pull request #2811 from pyca/alex-patch-1 | Paul Kehrer | 2016-03-11 | 1 | -1/+1 |
|\ \ \ \ | | | | | | | | | | | Don't make this struct opaque | ||||
| * | | | | struct is a keyword | Alex Gaynor | 2016-03-11 | 1 | -1/+1 |
| | | | | | |||||
| * | | | | Don't make this struct opaque | Alex Gaynor | 2016-03-11 | 1 | -1/+1 |
|/ / / / | | | | | | | | | it breaks pyopenssl: https://jenkins.cryptography.io/job/pyopenssl-smoke/label=debian7,version=master/80/console | ||||
* | | | | Merge pull request #2805 from reaperhulk/110-patch-25 | Alex Gaynor | 2016-03-11 | 1 | -3/+6 |
|\ \ \ \ | | | | | | | | | | | modify how revocation date is set on X509_REVOKED in the openssl backend | ||||
| * | | | | modify how revocation date is set on X509_REVOKED in the openssl backend | Paul Kehrer | 2016-03-10 | 1 | -3/+6 |
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | In OpenSSL 1.1.0 there isn't a pre-existing ASN1_TIME object so we have ASN1_TIME_set make us a new one. In older OpenSSLs this is still safe because ASN1_TIME_set checks and frees any current value in the object. | ||||
* | | | | | Merge pull request #2800 from reaperhulk/110-patch-21 | Alex Gaynor | 2016-03-11 | 2 | -12/+27 |
|\ \ \ \ \ | | | | | | | | | | | | | opaque EVP_MD_CTX and wrap EVP_MD_CTX_new + EVP_MD_CTX_free | ||||
| * | | | | | opaque EVP_MD_CTX and wrap EVP_MD_CTX_new + EVP_MD_CTX_free | Paul Kehrer | 2016-03-10 | 2 | -12/+27 |
| | |_|_|/ | |/| | | | |||||
* | | | | | Merge pull request #2810 from reaperhulk/110-patch-29 | Alex Gaynor | 2016-03-11 | 1 | -3/+1 |
|\ \ \ \ \ | |_|_|/ / |/| | | | | partially opaque RAND_METHOD | ||||
| * | | | | partially opaque RAND_METHOD | Paul Kehrer | 2016-03-11 | 1 | -3/+1 |
|/ / / / | | | | | | | | | | | | | | | | | We only populate bytes, pseudobytes, and status and in OpenSSL 1.1.0 seed and add changed signature (from void return to int). | ||||
* | | | | Merge pull request #2804 from reaperhulk/110-patch-24 | Alex Gaynor | 2016-03-11 | 1 | -2/+4 |
|\ \ \ \ | |_|/ / |/| | | | X509_STORE_CTX_get_ex_new_index is a macro in 1.1.0 | ||||
| * | | | X509_STORE_CTX_get_ex_new_index is a macro in 1.1.0 | Paul Kehrer | 2016-03-10 | 1 | -2/+4 |
|/ / / |