Commit message (Collapse) | Author | Age | Files | Lines | ||
---|---|---|---|---|---|---|
... | ||||||
* | support IPAddress encoding for general names | Paul Kehrer | 2015-07-11 | 1 | -2/+16 | |
| | ||||||
* | modify _encode_name, add _encode_name_gc | Paul Kehrer | 2015-07-11 | 1 | -5/+10 | |
| | ||||||
* | support DirectoryName encoding for general names | Paul Kehrer | 2015-07-10 | 1 | -0/+9 | |
| | ||||||
* | support registeredID general name encoding | Paul Kehrer | 2015-07-05 | 1 | -1/+12 | |
| | ||||||
* | fixed a leak in the event of non-DNS GN | Alex Gaynor | 2015-07-05 | 1 | -2/+3 | |
| | ||||||
* | Make the error check match how the openssl codebase does it | Alex Gaynor | 2015-07-05 | 1 | -1/+1 | |
| | ||||||
* | Wildcards. Also fixed a bug with multiple GNs | Alex Gaynor | 2015-07-05 | 1 | -2/+7 | |
| | ||||||
* | Paul says openssl just does the right thing here. | Alex Gaynor | 2015-07-05 | 1 | -2/+0 | |
| | ||||||
* | this needs to be freed as well | Alex Gaynor | 2015-07-05 | 1 | -0/+1 | |
| | ||||||
* | idna here | Alex Gaynor | 2015-07-05 | 1 | -2/+3 | |
| | ||||||
* | Organize code a bit better | Alex Gaynor | 2015-07-05 | 1 | -10/+15 | |
| | ||||||
* | Merge branch 'master' into encode-san | Alex Gaynor | 2015-07-03 | 1 | -12/+7 | |
|\ | ||||||
| * | Shift around the x509 code, all the extensions are going to have the same thing | Alex Gaynor | 2015-07-02 | 1 | -20/+12 | |
| | | ||||||
| * | Merge pull request #2073 from glyph/no-c-random | Paul Kehrer | 2015-06-30 | 1 | -1/+1 | |
| |\ | | | | | | | Replace C implementation of OS Random engine with Python one that just calls os.urandom | |||||
| | * | use new constant | Glyph | 2015-06-26 | 1 | -1/+1 | |
| | | | ||||||
* | | | resolved merge conflict | Alex Gaynor | 2015-06-28 | 1 | -0/+3 | |
|\| | | ||||||
| * | | fix a memory leak in basic constraints encoding | Paul Kehrer | 2015-06-28 | 1 | -0/+3 | |
| | | | ||||||
* | | | Clean up code and fix. | Alex Gaynor | 2015-06-28 | 1 | -36/+18 | |
| | | | ||||||
* | | | Initial code to encode SANs | Alex Gaynor | 2015-06-28 | 1 | -0/+47 | |
|/ / | ||||||
* | | Improvemed branch coverage for ssh public key loading | Alex Gaynor | 2015-06-27 | 1 | -2/+1 | |
| | | ||||||
* | | More branch coverage improvements. By virtue of reorganization and a new test | Alex Gaynor | 2015-06-27 | 1 | -8/+6 | |
| | | ||||||
* | | Fixed #2067 -- raise an error if a CSRbuilder doesn't hav a subject | Alex Gaynor | 2015-06-27 | 1 | -1/+1 | |
|/ | ||||||
* | Use utf8 to encode attribute values instead of ascii | Ian Cordasco | 2015-06-24 | 1 | -2/+2 | |
| | ||||||
* | Add tests to the CSR Builder for EC and DSA keys | Ian Cordasco | 2015-06-24 | 1 | -1/+12 | |
| | | | | | | This skips certain tests on certain versions of differences in how X509_REQ_sign works on those versions. A separate pull request will address those differences. | |||||
* | Unconditionally encode values to ascii | Ian Cordasco | 2015-06-24 | 1 | -5/+2 | |
| | ||||||
* | Update registering pp with ffi.gc | Ian Cordasco | 2015-06-24 | 1 | -4/+3 | |
| | | | | | This makes it more in-line with existing functions, e.g., L40-L47 of src/cryptography/hazmat/backends/openssl/x509.py @ b0e8ffa | |||||
* | Update CSR tests and implementation | Ian Cordasco | 2015-06-24 | 1 | -1/+2 | |
| | | | | | | | | | | - Use keyword arguments for x509.BasicConstraints in tests (missed in b790edbdc8fb9a026353d6fb99994326197705c7). - Place X509_request garbage collection under assertion. - Assert that X509 extensions created are not null. - Don't copy the extensions list in CertificateSigningBuilder. They're never appended to, so copying isn't necessary. - Use RSA key fixtures instead of generating new ones on each test run | |||||
* | Address code review regarding style and gc | Ian Cordasco | 2015-06-24 | 1 | -12/+13 | |
| | | | | | | | | | - Use keyword arguments for x509.BasicConstraints in several places - Use SHA256 instead of SHA1 in documented examples - Give function variables meaningful names in _encode_asn1_str - Accept a x509.BasicConstraints object in _encode_basic_constraints - Properly garbage-collect some things - Raise a NotImplementedError instead of a ValueError | |||||
* | Removes CSR builder version setter. | Andre Caron | 2015-06-24 | 1 | -1/+1 | |
| | ||||||
* | Fixes memory leak, | Andre Caron | 2015-06-24 | 1 | -0/+6 | |
| | ||||||
* | Extends supported range for integer conversion, | Andre Caron | 2015-06-24 | 1 | -2/+9 | |
| | ||||||
* | Removes OID to txt to OID conversion. | Andre Caron | 2015-06-24 | 1 | -10/+3 | |
| | ||||||
* | Cleans up some GC semantics. | Andre Caron | 2015-06-24 | 1 | -3/+16 | |
| | ||||||
* | Renames sign_509_request to create_x509_csr. | Andre Caron | 2015-06-24 | 1 | -1/+1 | |
| | ||||||
* | Fixes memory allocation. | Andre Caron | 2015-06-24 | 1 | -12/+4 | |
| | ||||||
* | Adds CSR builder. | Andre Caron | 2015-06-24 | 1 | -1/+144 | |
| | ||||||
* | fix ec_cdata_to_evp_pkey bug | Paul Kehrer | 2015-06-22 | 1 | -0/+1 | |
| | | | | | | We weren't actually returning the object and the tests weren't catching it because we didn't try to use the evp_pkey property in the tests. The added test confirms it actually works. | |||||
* | evp_pkey in openssl asymmetric key constructors | Paul Kehrer | 2015-06-20 | 1 | -17/+54 | |
| | ||||||
* | add load_der_x509_csr to support loading DER encoded CSRs | Paul Kehrer | 2015-03-30 | 1 | -0/+10 | |
| | ||||||
* | Merge pull request #1796 from rev112/minor_refactorings | Paul Kehrer | 2015-03-29 | 1 | -13/+13 | |
|\ | | | | | Minor refactorings | |||||
| * | Rename 'type' variable which shadows built-in name 'type' | Anton Ovchinnikov | 2015-03-29 | 1 | -12/+12 | |
| | | ||||||
| * | Remove redundant parentheses | Anton Ovchinnikov | 2015-03-29 | 1 | -1/+1 | |
| | | ||||||
* | | rename to CertificateSigningRequest | Paul Kehrer | 2015-03-29 | 1 | -2/+4 | |
| | | ||||||
* | | rename request to CSR | Paul Kehrer | 2015-03-29 | 1 | -3/+3 | |
| | | ||||||
* | | basic support for parsing x509 requests | Paul Kehrer | 2015-03-29 | 1 | -1/+13 | |
|/ | ||||||
* | allow zero value bn using _bn_to_int in the openssl backend | Paul Kehrer | 2015-03-25 | 1 | -1/+2 | |
| | ||||||
* | DER serialization of DSA private keys | Paul Kehrer | 2015-03-14 | 1 | -4/+2 | |
| | ||||||
* | support DER encoded EC private key serialization | Paul Kehrer | 2015-03-13 | 1 | -1/+4 | |
| | ||||||
* | support RSA DER private key serialization | Paul Kehrer | 2015-03-13 | 1 | -18/+44 | |
| | ||||||
* | refactor OpenSSL backend private_key_bytes | Paul Kehrer | 2015-03-11 | 1 | -2/+9 | |
| |