Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | add bindings to parse and create challenge passwords in X509 CSRs (#4943) | Paul Kehrer | 2019-07-09 | 1 | -0/+7 |
| | | | | | | * add bindings to parse and create challenge passwords in X509 CSRs * moved away from the 1.1.0 section | ||||
* | Switch to new notBefore/After APIs (#4914) | Rosen Penev | 2019-06-07 | 1 | -0/+9 |
| | | | Introduced in OpenSSL 1.1. Added compatibility for older versions. | ||||
* | remove unused x509 bindings (#4776) | Paul Kehrer | 2019-02-26 | 1 | -87/+1 |
| | |||||
* | Add flags to error on compile with incompatible pointer type (#4455) | Paul Kehrer | 2018-09-05 | 1 | -4/+4 |
| | | | | | | | | | | | | | | | | * try something a bit different. * newer compiler plz * permute * fix some warnings * fix getters on OpenSSL < 1.1.0 * this is getting involved * given our compiler flags we can't have SSL_CTX_set_cookie_verify_cb | ||||
* | Fixed two memory leaks in x509 csr extensions (#4434) | Alex Gaynor | 2018-08-31 | 1 | -0/+3 |
| | | | | | | | | | | | | * Fixed a memory leak in x.509 OCSP no check * Fix the _actual_ leak * Speed up symbolizations * Disable backtrace by default, because it doesn't work on Windows * line length | ||||
* | add crl.get_revoked_certificate method (#4331) | Paul Kehrer | 2018-07-16 | 1 | -0/+2 |
| | | | | | | | | * add crl.get_revoked_certificate method * lexicographic is the best ographic * rename | ||||
* | LibreSSL 2.7.x support (#4270) | Paul Kehrer | 2018-05-30 | 1 | -11/+12 |
| | | | | | | | | * libre 2.7.3 compatibility * add a changelog * actually build against 2.7.3 | ||||
* | add X509_CRL_dup function (#4127) | Dominic Chen | 2018-03-05 | 1 | -0/+1 |
| | |||||
* | Use the real X509_REVOKED_dup when available. (#4080) | David Benjamin | 2018-01-12 | 1 | -0/+4 |
| | | | This avoids reaching into the ASN1_ITEM mess if not necessary. | ||||
* | add X509_up_ref (#4028) | Paul Kehrer | 2017-11-28 | 1 | -0/+5 |
| | |||||
* | Remove branches for 1.0.2 betas. (#3870) | Alex Gaynor | 2017-08-20 | 1 | -2/+2 |
| | | | There's no sense in which we actually support them | ||||
* | Funcs macros gone (#3695) | Paul Kehrer | 2017-06-27 | 1 | -3/+0 |
| | | | | | | | | * No more FUNCS/MACROS distinction * change the docs to not talk about MACROS since they're gone * remove out of date comment | ||||
* | some wconversion fixes (#3727) | Paul Kehrer | 2017-06-26 | 1 | -1/+1 |
| | |||||
* | Attempt to simplify the libressl checing (#3482) | Alex Gaynor | 2017-03-26 | 1 | -3/+3 |
| | | | | | | | | | | * Attempt to simplify the libressl checing * SHENANGINS * Attempted fix * More simplification | ||||
* | Ec is a thing (#3453) | Alex Gaynor | 2017-03-15 | 1 | -14/+0 |
| | | | | | | | | | | | | | | | | * We always have EC * We always have ECDH * We always have ECDSA * We always have EC codes * This can go as well * And this * unused import | ||||
* | opaque structs for 1.1.0 compatibility (#3109) | Paul Kehrer | 2016-08-26 | 1 | -29/+5 |
| | | | We're so close. | ||||
* | constify and reorder getter args (#3103) | Paul Kehrer | 2016-08-24 | 1 | -17/+24 |
| | | | | | | | | | | * constify more things in x509 and reorder a few func args Post pre6 they changed some function argument order... * fix the function arg order where we call it * still need arg names when implementing the function...whoops | ||||
* | move functions that were const-ified in 1.1.0-pre6 (#3090) | Paul Kehrer | 2016-08-16 | 1 | -10/+18 |
| | |||||
* | Use a series of constants for OpenSSL version checks (#3037) | Alex Gaynor | 2016-07-11 | 1 | -4/+5 |
| | | | | | | | | | | | | | | | | | | | | | | | | * Use a series of constants for OpenSSL version checks. N.B. I removed several qualifiers that were being used to express beta vs. release in OpenSSL version numbers. Reviewers please look closely! * Convert some python as well, also add the file * flake8 * Simplify code, remove functionality that can be expressed more simply * clean up the tests as well * more constants * wrap long lines * reflect feedback * unused * add this back? | ||||
* | Opaque everything else we can of X509 (#3027) | Alex Gaynor | 2016-06-30 | 1 | -11/+1 |
| | |||||
* | Opaque another OpenSSL struct (#3025) | Alex Gaynor | 2016-06-29 | 1 | -8/+1 |
| | |||||
* | Remove some 0.9.8 code in x509 extension land (#2999) | Alex Gaynor | 2016-06-19 | 1 | -5/+2 |
| | |||||
* | Remove a few more 0.9.8 bindings (#2994) | Alex Gaynor | 2016-06-18 | 1 | -4/+0 |
| | |||||
* | Added an additional binding that we need (#2942) | Alex Gaynor | 2016-06-02 | 1 | -0/+1 |
| | |||||
* | Bind another function because reasons (#2940) | Alex Gaynor | 2016-06-01 | 1 | -0/+7 |
| | | | | | | | | * Bind another function because reasons * ptr * move to the correct section | ||||
* | backport a function from 1.1.0 for x.509 (#2939) | Alex Gaynor | 2016-06-01 | 1 | -0/+7 |
| | |||||
* | Merge pull request #2809 from reaperhulk/110-patch-28 | Alex Gaynor | 2016-03-13 | 1 | -0/+48 |
|\ | | | | | add 5 accessor functions that exist in 1.1.0 to help opaque x509 structs | ||||
| * | remove pointless comments | Paul Kehrer | 2016-03-13 | 1 | -8/+0 |
| | | |||||
| * | add 5 accessor functions that exist in 1.1.0 to help opaque x509 structs | Paul Kehrer | 2016-03-11 | 1 | -0/+56 |
| | | | | | | | | | | | | | | | | | | X509_REVOKED_get0_serialNumber X509_REVOKED_get0_revocationDate X509_CRL_get0_signature i2d_re_X509_REQ_tbs i2d_re_X509_CRL_tbs X509_REQ_get0_signature | ||||
* | | Merge pull request #2802 from reaperhulk/110-patch-23 | Alex Gaynor | 2016-03-13 | 1 | -6/+38 |
|\ \ | |/ |/| | move crypto_ex_data to macros, add i2d_re_X509_tbs & X509_get0_signature | ||||
| * | improve comments | Paul Kehrer | 2016-03-12 | 1 | -4/+5 |
| | | |||||
| * | this was actually added in 1.0.2-beta3 | Paul Kehrer | 2016-03-10 | 1 | -1/+1 |
| | | |||||
| * | move crypto_ex_data to macros, add i2d_re_X509_tbs & X509_get0_signature | Paul Kehrer | 2016-03-10 | 1 | -6/+37 |
| | | | | | | | | | | | | And, of course, use them in the openssl bindings. These changes are a start towards opaquing all the X509 structs. The actual opaquing won't take place until the very end though to minimize pyOpenSSL breakage | ||||
* | | deopaque X509_EXTENSION so we can keep moving on 1.1.0 support | Paul Kehrer | 2016-03-10 | 1 | -1/+7 |
| | | |||||
* | | opaque X509_EXTENSION | Paul Kehrer | 2016-03-09 | 1 | -5/+1 |
|/ | |||||
* | X509_REVOKED_dup isn't available everywhere, we get to define our own | Paul Kehrer | 2015-12-25 | 1 | -1/+10 |
| | |||||
* | support revoked certificates in CertificateRevocationListBuilder | Paul Kehrer | 2015-12-25 | 1 | -0/+1 |
| | |||||
* | a different approach to refactoring the x509 extension addition | Paul Kehrer | 2015-12-24 | 1 | -0/+1 |
| | |||||
* | add binding for setting the revocation date of an X509_REVOKED | Paul Kehrer | 2015-12-23 | 1 | -0/+2 |
| | |||||
* | expose tbs_certrequest_bytes and signature on CertificateSigningRequest | Paul Kehrer | 2015-12-03 | 1 | -0/+4 |
| | |||||
* | Add more CRYPTO_EX_DATA functions | Christian Heimes | 2015-11-20 | 1 | -0/+6 |
| | | | | | | | | The patch adds a couple of additional functions to create, store and retrieve ex_data on SSL, SSL_CTX and X509 objects. It also adds the missing get_ex_new_index function for X509_STORE_CTX. Signed-off-by: Christian Heimes <cheimes@redhat.com> | ||||
* | add tbsCertList and signature interfaces to CRLs | Erik Trauschke | 2015-11-19 | 1 | -0/+3 |
| | |||||
* | add support for Certificate signature and tbs_certificate | Paul Kehrer | 2015-11-03 | 1 | -0/+2 |
| | |||||
* | remove openssl CONDITIONAL_NAMES | Paul Kehrer | 2015-08-03 | 1 | -15/+0 |
| | |||||
* | Support encoding ExtendedKeyUsage into certificate signing requests | Paul Kehrer | 2015-07-23 | 1 | -0/+2 |
| | |||||
* | Add additional CRL bindings | Stephen Holsapple | 2015-06-20 | 1 | -7/+9 |
| | | | | | | | | | | I sorted the X50_CRL bindings and added two additional bindings: 1. X509_CRL_set_version 2. X509_CRL_sort These two functions are required to make CRL useful in pyOpenSSL re: https://github.com/pyca/pyopenssl/issues/256 | ||||
* | convert to cffi 1.0 precompile system | Paul Kehrer | 2015-06-07 | 1 | -0/+361 |