aboutsummaryrefslogtreecommitdiffstats
path: root/src/cryptography/hazmat/backends/openssl/backend.py
Commit message (Collapse)AuthorAgeFilesLines
...
* support IPAddress encoding for general namesPaul Kehrer2015-07-111-2/+16
|
* modify _encode_name, add _encode_name_gcPaul Kehrer2015-07-111-5/+10
|
* support DirectoryName encoding for general namesPaul Kehrer2015-07-101-0/+9
|
* support registeredID general name encodingPaul Kehrer2015-07-051-1/+12
|
* fixed a leak in the event of non-DNS GNAlex Gaynor2015-07-051-2/+3
|
* Make the error check match how the openssl codebase does itAlex Gaynor2015-07-051-1/+1
|
* Wildcards. Also fixed a bug with multiple GNsAlex Gaynor2015-07-051-2/+7
|
* Paul says openssl just does the right thing here.Alex Gaynor2015-07-051-2/+0
|
* this needs to be freed as wellAlex Gaynor2015-07-051-0/+1
|
* idna hereAlex Gaynor2015-07-051-2/+3
|
* Organize code a bit betterAlex Gaynor2015-07-051-10/+15
|
* Merge branch 'master' into encode-sanAlex Gaynor2015-07-031-12/+7
|\
| * Shift around the x509 code, all the extensions are going to have the same thingAlex Gaynor2015-07-021-20/+12
| |
| * Merge pull request #2073 from glyph/no-c-randomPaul Kehrer2015-06-301-1/+1
| |\ | | | | | | Replace C implementation of OS Random engine with Python one that just calls os.urandom
| | * use new constantGlyph2015-06-261-1/+1
| | |
* | | resolved merge conflictAlex Gaynor2015-06-281-0/+3
|\| |
| * | fix a memory leak in basic constraints encodingPaul Kehrer2015-06-281-0/+3
| | |
* | | Clean up code and fix.Alex Gaynor2015-06-281-36/+18
| | |
* | | Initial code to encode SANsAlex Gaynor2015-06-281-0/+47
|/ /
* | Improvemed branch coverage for ssh public key loadingAlex Gaynor2015-06-271-2/+1
| |
* | More branch coverage improvements. By virtue of reorganization and a new testAlex Gaynor2015-06-271-8/+6
| |
* | Fixed #2067 -- raise an error if a CSRbuilder doesn't hav a subjectAlex Gaynor2015-06-271-1/+1
|/
* Use utf8 to encode attribute values instead of asciiIan Cordasco2015-06-241-2/+2
|
* Add tests to the CSR Builder for EC and DSA keysIan Cordasco2015-06-241-1/+12
| | | | | | This skips certain tests on certain versions of differences in how X509_REQ_sign works on those versions. A separate pull request will address those differences.
* Unconditionally encode values to asciiIan Cordasco2015-06-241-5/+2
|
* Update registering pp with ffi.gcIan Cordasco2015-06-241-4/+3
| | | | | This makes it more in-line with existing functions, e.g., L40-L47 of src/cryptography/hazmat/backends/openssl/x509.py @ b0e8ffa
* Update CSR tests and implementationIan Cordasco2015-06-241-1/+2
| | | | | | | | | | - Use keyword arguments for x509.BasicConstraints in tests (missed in b790edbdc8fb9a026353d6fb99994326197705c7). - Place X509_request garbage collection under assertion. - Assert that X509 extensions created are not null. - Don't copy the extensions list in CertificateSigningBuilder. They're never appended to, so copying isn't necessary. - Use RSA key fixtures instead of generating new ones on each test run
* Address code review regarding style and gcIan Cordasco2015-06-241-12/+13
| | | | | | | | | - Use keyword arguments for x509.BasicConstraints in several places - Use SHA256 instead of SHA1 in documented examples - Give function variables meaningful names in _encode_asn1_str - Accept a x509.BasicConstraints object in _encode_basic_constraints - Properly garbage-collect some things - Raise a NotImplementedError instead of a ValueError
* Removes CSR builder version setter.Andre Caron2015-06-241-1/+1
|
* Fixes memory leak,Andre Caron2015-06-241-0/+6
|
* Extends supported range for integer conversion,Andre Caron2015-06-241-2/+9
|
* Removes OID to txt to OID conversion.Andre Caron2015-06-241-10/+3
|
* Cleans up some GC semantics.Andre Caron2015-06-241-3/+16
|
* Renames sign_509_request to create_x509_csr.Andre Caron2015-06-241-1/+1
|
* Fixes memory allocation.Andre Caron2015-06-241-12/+4
|
* Adds CSR builder.Andre Caron2015-06-241-1/+144
|
* fix ec_cdata_to_evp_pkey bugPaul Kehrer2015-06-221-0/+1
| | | | | | We weren't actually returning the object and the tests weren't catching it because we didn't try to use the evp_pkey property in the tests. The added test confirms it actually works.
* evp_pkey in openssl asymmetric key constructorsPaul Kehrer2015-06-201-17/+54
|
* add load_der_x509_csr to support loading DER encoded CSRsPaul Kehrer2015-03-301-0/+10
|
* Merge pull request #1796 from rev112/minor_refactoringsPaul Kehrer2015-03-291-13/+13
|\ | | | | Minor refactorings
| * Rename 'type' variable which shadows built-in name 'type'Anton Ovchinnikov2015-03-291-12/+12
| |
| * Remove redundant parenthesesAnton Ovchinnikov2015-03-291-1/+1
| |
* | rename to CertificateSigningRequestPaul Kehrer2015-03-291-2/+4
| |
* | rename request to CSRPaul Kehrer2015-03-291-3/+3
| |
* | basic support for parsing x509 requestsPaul Kehrer2015-03-291-1/+13
|/
* allow zero value bn using _bn_to_int in the openssl backendPaul Kehrer2015-03-251-1/+2
|
* DER serialization of DSA private keysPaul Kehrer2015-03-141-4/+2
|
* support DER encoded EC private key serializationPaul Kehrer2015-03-131-1/+4
|
* support RSA DER private key serializationPaul Kehrer2015-03-131-18/+44
|
* refactor OpenSSL backend private_key_bytesPaul Kehrer2015-03-111-2/+9
|