aboutsummaryrefslogtreecommitdiffstats
path: root/src/cryptography/hazmat/backends/openssl
Commit message (Collapse)AuthorAgeFilesLines
...
| * | support openssl 0.9.8's nonsense hopefullyPaul Kehrer2016-03-131-1/+26
| | |
| * | also bytes.Paul Kehrer2016-03-131-1/+3
| | |
| * | bytes, my nemesisPaul Kehrer2016-03-131-1/+1
| | |
| * | simplify extension creation by using X509V3_EXT_i2dPaul Kehrer2016-03-132-69/+23
| | |
* | | Merge pull request #2802 from reaperhulk/110-patch-23Alex Gaynor2016-03-131-4/+13
|\ \ \ | |/ / |/| | move crypto_ex_data to macros, add i2d_re_X509_tbs & X509_get0_signature
| * | move crypto_ex_data to macros, add i2d_re_X509_tbs & X509_get0_signaturePaul Kehrer2016-03-101-4/+13
| | | | | | | | | | | | | | | | | | And, of course, use them in the openssl bindings. These changes are a start towards opaquing all the X509 structs. The actual opaquing won't take place until the very end though to minimize pyOpenSSL breakage
* | | Merge pull request #2815 from reaperhulk/error-on-unusual-encodingsAlex Gaynor2016-03-121-1/+5
|\ \ \ | | | | | | | | Error on unusual encodings
| * | | move NUMERICSTRING certificate test to test_openssl & make it more specificPaul Kehrer2016-03-121-1/+1
| | | |
| * | | raise type error rather than internalerror w/ unsupported asn1 in subjectPaul Kehrer2016-03-121-1/+5
| | | |
* | | | Merge pull request #2794 from reaperhulk/110-patch-15Alex Gaynor2016-03-121-7/+6
|\ \ \ \ | |/ / / |/| | | opaque HMAC_CTX, which requires some helper functions
| * | | opaque HMAC_CTX, which requires some helper functionsPaul Kehrer2016-03-091-7/+6
| | | |
* | | | Merge pull request #2805 from reaperhulk/110-patch-25Alex Gaynor2016-03-111-3/+6
|\ \ \ \ | | | | | | | | | | modify how revocation date is set on X509_REVOKED in the openssl backend
| * | | | modify how revocation date is set on X509_REVOKED in the openssl backendPaul Kehrer2016-03-101-3/+6
| | |_|/ | |/| | | | | | | | | | | | | | | | | | In OpenSSL 1.1.0 there isn't a pre-existing ASN1_TIME object so we have ASN1_TIME_set make us a new one. In older OpenSSLs this is still safe because ASN1_TIME_set checks and frees any current value in the object.
* | | | Merge pull request #2800 from reaperhulk/110-patch-21Alex Gaynor2016-03-111-7/+6
|\ \ \ \ | |/ / / |/| | | opaque EVP_MD_CTX and wrap EVP_MD_CTX_new + EVP_MD_CTX_free
| * | | opaque EVP_MD_CTX and wrap EVP_MD_CTX_new + EVP_MD_CTX_freePaul Kehrer2016-03-101-7/+6
| | |/ | |/|
* | | Merge pull request #2798 from reaperhulk/110-patch-19Alex Gaynor2016-03-101-3/+6
|\ \ \ | |/ / |/| | opaque X509_EXTENSION
| * | opaque X509_EXTENSIONPaul Kehrer2016-03-091-3/+6
| |/
* / opaque X509_NAMEPaul Kehrer2016-03-091-13/+30
|/
* SSLeay begonePaul Kehrer2016-03-091-1/+1
| | | | | | | In OpenSSL 1.1.0 SSLeay is no longer a thing. Farewell Except not really farewell because we define them all again because old versions of pyOpenSSL will choke otherwise
* Merge pull request #2670 from joernheissler/x509_req_verifyPaul Kehrer2016-03-061-0/+13
|\ | | | | Add verify method on CertificateSigningRequest
| * Change method to propertyJoern Heissler2016-01-181-3/+6
| |
| * Add verify method on CertificateSigningRequestJoern Heissler2016-01-131-1/+11
| |
* | move keyAlex Gaynor2016-03-051-1/+1
| |
* | added the correct error handling for the failing testAlex Gaynor2016-03-051-0/+4
| |
* | sighAlex Gaynor2016-02-271-1/+0
| |
* | Write a function to write less codeAlex Gaynor2016-02-271-22/+20
| |
* | Fixed #2732 -- added support for x.509 policy constraints extensionAlex Gaynor2016-02-271-0/+24
| |
* | treat the RSA struct more opaquely when getting public key valuesPaul Kehrer2016-02-021-3/+1
|/
* move more functions out of the openssl backend classPaul Kehrer2016-01-103-77/+87
|
* move openssl asn1 decode functions to a new modulePaul Kehrer2016-01-103-710/+723
|
* remove duplicated memorybio namedtuplePaul Kehrer2016-01-101-4/+0
|
* move openssl asn1 encode functions to a new modulePaul Kehrer2016-01-102-587/+611
|
* Merge pull request #2646 from reaperhulk/static-callbacksAlex Gaynor2016-01-081-7/+15
|\ | | | | Static callbacks
| * Port callbacks to new static callbackChristian Heimes2016-01-071-8/+15
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | cffi 1.4.0 will introduce a new API to create static callbacks. Contrary to the old callback API, static callbacks no longer depend on libffi's dynamic code generation for closures. Static code has some benefits over dynamic generation. For example the code is faster. Also it doesn't need writeable and executable memory mappings, which makes it compatible with SELinux's deny execmem policy. The branch depends on PR #2488. https://bitbucket.org/cffi/cffi/issues/232/static-callbacks Closes: #2477 Signed-off-by: Christian Heimes <cheimes@redhat.com>
| * Change password callback to use userdata pointerChristian Heimes2016-01-071-0/+1
| | | | | | | | | | | | | | | | | | Instead of a closure the pem_password_cb now uses the void *userdata argument to exchange data with the callback function. It's a necessary step to port all callbacks to new static callbacks. See: #2477 Signed-off-by: Christian Heimes <christian@python.org>
* | Merge pull request #2647 from reaperhulk/opaque-evp-pkeyAlex Gaynor2016-01-081-9/+10
|\ \ | | | | | | opaque EVP_PKEY since EVP_PKEY_id exists
| * | add Cryptography_EVP_PKEY_idPaul Kehrer2016-01-071-4/+6
| | |
| * | opaque EVP_PKEY since EVP_PKEY_id existsPaul Kehrer2016-01-071-9/+8
| | |
* | | Merge pull request #2649 from reaperhulk/cleanup-namingAlex Gaynor2016-01-082-8/+8
|\ \ \ | |/ / |/| | rename _create_mem_bio to _create_mem_bio_gc for consistency
| * | rename _create_mem_bio to _create_mem_bio_gc for consistencyPaul Kehrer2016-01-072-8/+8
| |/
* / small cleanup to reduce code duplication for EVP_PKEY_new callsPaul Kehrer2016-01-071-7/+7
|/
* support unrecognized extensions in x509Paul Kehrer2015-12-301-0/+9
|
* RSA_R_OAEP_DECODING_ERROR is pretty ubiquitousPaul Kehrer2015-12-271-3/+1
|
* Add support for RSA_R_OAEP_DECODING_ERROR error flag.Christopher Grebs2015-12-271-0/+3
|
* Support EC and DSA signing of CRLs in the OpenSSL backendPaul Kehrer2015-12-271-10/+11
|
* fix a ptr liveness bugAlex Gaynor2015-12-271-2/+2
|
* Reduce duplication, write a functionAlex Gaynor2015-12-271-85/+39
|
* _encode_alt_name already does thisPaul Kehrer2015-12-271-15/+1
|
* move around a dictPaul Kehrer2015-12-271-17/+4
|
* support CRL entry extension encoding in the RevokedCertificateBuilderPaul Kehrer2015-12-271-3/+77
|
generated by cgit v1.2.3 (git 2.25.1) at 2025-07-06 02:42:23 +0000