aboutsummaryrefslogtreecommitdiffstats
path: root/src/_cffi_src/openssl/x509.py
Commit message (Collapse)AuthorAgeFilesLines
* add bindings to parse and create challenge passwords in X509 CSRs (#4943)Paul Kehrer2019-07-091-0/+7
| | | | | | * add bindings to parse and create challenge passwords in X509 CSRs * moved away from the 1.1.0 section
* Switch to new notBefore/After APIs (#4914)Rosen Penev2019-06-071-0/+9
| | | Introduced in OpenSSL 1.1. Added compatibility for older versions.
* remove unused x509 bindings (#4776)Paul Kehrer2019-02-261-87/+1
|
* Add flags to error on compile with incompatible pointer type (#4455)Paul Kehrer2018-09-051-4/+4
| | | | | | | | | | | | | | | | * try something a bit different. * newer compiler plz * permute * fix some warnings * fix getters on OpenSSL < 1.1.0 * this is getting involved * given our compiler flags we can't have SSL_CTX_set_cookie_verify_cb
* Fixed two memory leaks in x509 csr extensions (#4434)Alex Gaynor2018-08-311-0/+3
| | | | | | | | | | | | * Fixed a memory leak in x.509 OCSP no check * Fix the _actual_ leak * Speed up symbolizations * Disable backtrace by default, because it doesn't work on Windows * line length
* add crl.get_revoked_certificate method (#4331)Paul Kehrer2018-07-161-0/+2
| | | | | | | | * add crl.get_revoked_certificate method * lexicographic is the best ographic * rename
* LibreSSL 2.7.x support (#4270)Paul Kehrer2018-05-301-11/+12
| | | | | | | | * libre 2.7.3 compatibility * add a changelog * actually build against 2.7.3
* add X509_CRL_dup function (#4127)Dominic Chen2018-03-051-0/+1
|
* Use the real X509_REVOKED_dup when available. (#4080)David Benjamin2018-01-121-0/+4
| | | This avoids reaching into the ASN1_ITEM mess if not necessary.
* add X509_up_ref (#4028)Paul Kehrer2017-11-281-0/+5
|
* Remove branches for 1.0.2 betas. (#3870)Alex Gaynor2017-08-201-2/+2
| | | There's no sense in which we actually support them
* Funcs macros gone (#3695)Paul Kehrer2017-06-271-3/+0
| | | | | | | | * No more FUNCS/MACROS distinction * change the docs to not talk about MACROS since they're gone * remove out of date comment
* some wconversion fixes (#3727)Paul Kehrer2017-06-261-1/+1
|
* Attempt to simplify the libressl checing (#3482)Alex Gaynor2017-03-261-3/+3
| | | | | | | | | | * Attempt to simplify the libressl checing * SHENANGINS * Attempted fix * More simplification
* Ec is a thing (#3453)Alex Gaynor2017-03-151-14/+0
| | | | | | | | | | | | | | | | * We always have EC * We always have ECDH * We always have ECDSA * We always have EC codes * This can go as well * And this * unused import
* opaque structs for 1.1.0 compatibility (#3109)Paul Kehrer2016-08-261-29/+5
| | | We're so close.
* constify and reorder getter args (#3103)Paul Kehrer2016-08-241-17/+24
| | | | | | | | | | * constify more things in x509 and reorder a few func args Post pre6 they changed some function argument order... * fix the function arg order where we call it * still need arg names when implementing the function...whoops
* move functions that were const-ified in 1.1.0-pre6 (#3090)Paul Kehrer2016-08-161-10/+18
|
* Use a series of constants for OpenSSL version checks (#3037)Alex Gaynor2016-07-111-4/+5
| | | | | | | | | | | | | | | | | | | | | | | | * Use a series of constants for OpenSSL version checks. N.B. I removed several qualifiers that were being used to express beta vs. release in OpenSSL version numbers. Reviewers please look closely! * Convert some python as well, also add the file * flake8 * Simplify code, remove functionality that can be expressed more simply * clean up the tests as well * more constants * wrap long lines * reflect feedback * unused * add this back?
* Opaque everything else we can of X509 (#3027)Alex Gaynor2016-06-301-11/+1
|
* Opaque another OpenSSL struct (#3025)Alex Gaynor2016-06-291-8/+1
|
* Remove some 0.9.8 code in x509 extension land (#2999)Alex Gaynor2016-06-191-5/+2
|
* Remove a few more 0.9.8 bindings (#2994)Alex Gaynor2016-06-181-4/+0
|
* Added an additional binding that we need (#2942)Alex Gaynor2016-06-021-0/+1
|
* Bind another function because reasons (#2940)Alex Gaynor2016-06-011-0/+7
| | | | | | | | * Bind another function because reasons * ptr * move to the correct section
* backport a function from 1.1.0 for x.509 (#2939)Alex Gaynor2016-06-011-0/+7
|
* Merge pull request #2809 from reaperhulk/110-patch-28Alex Gaynor2016-03-131-0/+48
|\ | | | | add 5 accessor functions that exist in 1.1.0 to help opaque x509 structs
| * remove pointless commentsPaul Kehrer2016-03-131-8/+0
| |
| * add 5 accessor functions that exist in 1.1.0 to help opaque x509 structsPaul Kehrer2016-03-111-0/+56
| | | | | | | | | | | | | | | | | | X509_REVOKED_get0_serialNumber X509_REVOKED_get0_revocationDate X509_CRL_get0_signature i2d_re_X509_REQ_tbs i2d_re_X509_CRL_tbs X509_REQ_get0_signature
* | Merge pull request #2802 from reaperhulk/110-patch-23Alex Gaynor2016-03-131-6/+38
|\ \ | |/ |/| move crypto_ex_data to macros, add i2d_re_X509_tbs & X509_get0_signature
| * improve commentsPaul Kehrer2016-03-121-4/+5
| |
| * this was actually added in 1.0.2-beta3Paul Kehrer2016-03-101-1/+1
| |
| * move crypto_ex_data to macros, add i2d_re_X509_tbs & X509_get0_signaturePaul Kehrer2016-03-101-6/+37
| | | | | | | | | | | | And, of course, use them in the openssl bindings. These changes are a start towards opaquing all the X509 structs. The actual opaquing won't take place until the very end though to minimize pyOpenSSL breakage
* | deopaque X509_EXTENSION so we can keep moving on 1.1.0 supportPaul Kehrer2016-03-101-1/+7
| |
* | opaque X509_EXTENSIONPaul Kehrer2016-03-091-5/+1
|/
* X509_REVOKED_dup isn't available everywhere, we get to define our ownPaul Kehrer2015-12-251-1/+10
|
* support revoked certificates in CertificateRevocationListBuilderPaul Kehrer2015-12-251-0/+1
|
* a different approach to refactoring the x509 extension additionPaul Kehrer2015-12-241-0/+1
|
* add binding for setting the revocation date of an X509_REVOKEDPaul Kehrer2015-12-231-0/+2
|
* expose tbs_certrequest_bytes and signature on CertificateSigningRequestPaul Kehrer2015-12-031-0/+4
|
* Add more CRYPTO_EX_DATA functionsChristian Heimes2015-11-201-0/+6
| | | | | | | | The patch adds a couple of additional functions to create, store and retrieve ex_data on SSL, SSL_CTX and X509 objects. It also adds the missing get_ex_new_index function for X509_STORE_CTX. Signed-off-by: Christian Heimes <cheimes@redhat.com>
* add tbsCertList and signature interfaces to CRLsErik Trauschke2015-11-191-0/+3
|
* add support for Certificate signature and tbs_certificatePaul Kehrer2015-11-031-0/+2
|
* remove openssl CONDITIONAL_NAMESPaul Kehrer2015-08-031-15/+0
|
* Support encoding ExtendedKeyUsage into certificate signing requestsPaul Kehrer2015-07-231-0/+2
|
* Add additional CRL bindingsStephen Holsapple2015-06-201-7/+9
| | | | | | | | | | I sorted the X50_CRL bindings and added two additional bindings: 1. X509_CRL_set_version 2. X509_CRL_sort These two functions are required to make CRL useful in pyOpenSSL re: https://github.com/pyca/pyopenssl/issues/256
* convert to cffi 1.0 precompile systemPaul Kehrer2015-06-071-0/+361