aboutsummaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
* add create_x509_revoked_certificate to x509backend interfacePaul Kehrer2015-12-256-0/+40
|
* Merge pull request #2568 from reaperhulk/crlbuilder-extensionsAlex Gaynor2015-12-254-2/+176
|\ | | | | add extension support to the CRLBuilder
| * use type instead of __class__Paul Kehrer2015-12-251-1/+1
| |
| * use _create_x509_extensions in create_x509_crlPaul Kehrer2015-12-251-20/+8
| |
| * coverage for invalid extensionsPaul Kehrer2015-12-251-0/+8
| |
| * add extension support to the CRLBuilderPaul Kehrer2015-12-254-2/+180
|/
* Merge pull request #2569 from reaperhulk/extension-builderAlex Gaynor2015-12-252-41/+48
|\ | | | | refactor x509 extension creation to make it a bit more reusable
| * a different approach to refactoring the x509 extension additionPaul Kehrer2015-12-242-21/+25
| |
| * don't reuse a variable, it's confusingPaul Kehrer2015-12-241-4/+6
| |
| * refactor x509 extension creation to make it a bit more reusablePaul Kehrer2015-12-241-38/+39
| | | | | | | | | | Unfortunately X509 certs and CSRs add extensions differently, so we can't reuse quite as much as we'd like to...
* | Merge pull request #2567 from alex/this-is-americaPaul Kehrer2015-12-241-1/+1
|\ \ | |/ |/| Spell serialization consistently
| * Spell serialization consistentlyAlex Gaynor2015-12-241-1/+1
| |
* | Merge pull request #2559 from reaperhulk/crlbuilderAlex Gaynor2015-12-247-6/+446
|\ \ | |/ |/| CertificateRevocationListBuilder
| * fix rebase mistake in the docsPaul Kehrer2015-12-241-21/+1
| |
| * update docs with review feedbackPaul Kehrer2015-12-241-12/+12
| |
| * CertificateRevocationListBuilderPaul Kehrer2015-12-247-4/+464
|/ | | | | RSA keys only. Currently does not support CRL extensions or CRLEntry extensions.
* Merge pull request #2565 from reaperhulk/crl-interfaceAlex Gaynor2015-12-246-0/+52
|\ | | | | add create_x509_crl interface
| * coveragePaul Kehrer2015-12-242-1/+6
| |
| * better languagePaul Kehrer2015-12-241-2/+2
| |
| * add create_x509_crl interfacePaul Kehrer2015-12-245-0/+47
| |
* | Merge pull request #2562 from evilaliv3/PEM_write_bio_DHparamsAlex Gaynor2015-12-241-0/+1
|\ \ | | | | | | Add PEM_write_bio_DHparams binding
| * | Add PEM_write_bio_DHparams bindingevilaliv32015-12-241-0/+1
| |/
* | Merge pull request #2566 from alex/better-languagePaul Kehrer2015-12-241-4/+3
|\ \ | |/ |/| Use clearer language in the backend interface docs.
| * Use clearer language in the backend interface docs.Alex Gaynor2015-12-241-4/+3
|/ | | | Refs #2565
* Merge pull request #2564 from alex/crl-index-perfPaul Kehrer2015-12-242-3/+28
|\ | | | | Make indexing a CRL O(1) instead of O(n).
| * please the great flake8 in the skyAlex Gaynor2015-12-241-3/+1
| |
| * full indexing support + testsgAlex Gaynor2015-12-242-7/+20
| |
| * tests on indexingAlex Gaynor2015-12-241-1/+12
| |
| * Make indexing a CRL O(1) instead of O(n).Alex Gaynor2015-12-241-2/+5
|/ | | | This drops support for slicing, if that's important someone say something and I can add it back
* Merge pull request #2563 from alex/crl-iter-perfPaul Kehrer2015-12-241-13/+8
|\ | | | | Simplify implementation of CRL indexing and iteration.
| * Simplify implementation of CRL indexing and iteration.Alex Gaynor2015-12-241-13/+8
|/ | | | No longer allocates a list just to iterate over it.
* Merge pull request #2561 from alex/crl-len-perfPaul Kehrer2015-12-241-10/+12
|\ | | | | Improve the performance of len(crl)
| * coverage fixAlex Gaynor2015-12-241-8/+7
| |
| * Improve the performance of len(crl)Alex Gaynor2015-12-231-3/+6
| |
* | Merge pull request #2560 from reaperhulk/setrevocation-bindingAlex Gaynor2015-12-231-0/+2
|\ \ | |/ |/| add binding for setting the revocation date of an X509_REVOKED
| * add binding for setting the revocation date of an X509_REVOKEDPaul Kehrer2015-12-231-0/+2
|/
* Merge pull request #2558 from reaperhulk/managing-memory-is-funAlex Gaynor2015-12-232-2/+27
|\ | | | | fix a potential memory issue when retaining revoked certs from a CRL
| * address review commentsPaul Kehrer2015-12-231-8/+3
| |
| * add test that fails if CRL references aren't properly retainedPaul Kehrer2015-12-231-0/+19
| | | | | | | | | | | | If the X509_CRL reference is not properly retained then this test will return an openssl error or potentially a crash as it's reading freed memory to obtain the revocation_date and serial_number
| * fix a potential memory issue when retaining revoked certs from a CRLPaul Kehrer2015-12-231-2/+13
| |
* | Merge pull request #2556 from Lukasa/osx-cert-storeAlex Gaynor2015-12-232-0/+23
|\ \ | |/ |/| Add binding for CommonCrypto SecTrustCopyAnchorCertificates
| * Remove spaces.Cory Benfield2015-12-231-1/+1
| |
| * Add binding for CommonCrypto SecTrustCopyAnchorCertificatesCory Benfield2015-12-232-0/+23
|/
* Merge pull request #2545 from reaperhulk/death-to-mac-098Alex Gaynor2015-12-234-32/+10
|\ | | | | remove all mac 0.9.8 tests
| * remove all mac 0.9.8 testsPaul Kehrer2015-12-234-32/+10
|/ | | | | | This will probably slow down the test infrastructure as we're running far more CommonCrypto tests than before. We should figure out what to do there before merging this.
* Merge pull request #2552 from reaperhulk/crlnumberAlex Gaynor2015-12-237-4/+69
|\ | | | | CRLNumber needs to be a class for reasons
| * missed a test for CRLNumber not being an integer, oopsPaul Kehrer2015-12-221-0/+4
| |
| * update the languagePaul Kehrer2015-12-221-5/+4
| |
| * CRLNumber needs to be a class for reasons.Paul Kehrer2015-12-227-4/+66
|/
* Merge pull request #2549 from reaperhulk/more-crl-extensionsAlex Gaynor2015-12-223-4/+28
|\ | | | | More CRL extensions