Commit message (Collapse) | Author | Age | Files | Lines | ||
---|---|---|---|---|---|---|
... | ||||||
* | | Merge pull request #2076 from alex/more-branch-coverage | Paul Kehrer | 2015-06-27 | 1 | -8/+6 | |
|\ \ | | | | | | | More branch coverage improvements. By virtue of reorganization and a new test | |||||
| * | | More branch coverage improvements. By virtue of reorganization and a new test | Alex Gaynor | 2015-06-27 | 1 | -8/+6 | |
| | | | ||||||
* | | | Reorganized some code to improve branch coverage | Alex Gaynor | 2015-06-27 | 1 | -6/+6 | |
|/ / | ||||||
* | | Fixed #2067 -- raise an error if a CSRbuilder doesn't hav a subject | Alex Gaynor | 2015-06-27 | 1 | -1/+1 | |
| | | ||||||
* | | do this much more simply | Paul Kehrer | 2015-06-26 | 1 | -7/+4 | |
| | | ||||||
* | | handle wildcard DNSNames with IDNA. | Paul Kehrer | 2015-06-26 | 1 | -1/+14 | |
|/ | | | | fixes #2054 | |||||
* | Use utf8 to encode attribute values instead of ascii | Ian Cordasco | 2015-06-24 | 1 | -2/+2 | |
| | ||||||
* | Add tests to the CSR Builder for EC and DSA keys | Ian Cordasco | 2015-06-24 | 1 | -1/+12 | |
| | | | | | | This skips certain tests on certain versions of differences in how X509_REQ_sign works on those versions. A separate pull request will address those differences. | |||||
* | Unconditionally encode values to ascii | Ian Cordasco | 2015-06-24 | 1 | -5/+2 | |
| | ||||||
* | Update registering pp with ffi.gc | Ian Cordasco | 2015-06-24 | 1 | -4/+3 | |
| | | | | | This makes it more in-line with existing functions, e.g., L40-L47 of src/cryptography/hazmat/backends/openssl/x509.py @ b0e8ffa | |||||
* | Update CSR tests and implementation | Ian Cordasco | 2015-06-24 | 1 | -1/+2 | |
| | | | | | | | | | | - Use keyword arguments for x509.BasicConstraints in tests (missed in b790edbdc8fb9a026353d6fb99994326197705c7). - Place X509_request garbage collection under assertion. - Assert that X509 extensions created are not null. - Don't copy the extensions list in CertificateSigningBuilder. They're never appended to, so copying isn't necessary. - Use RSA key fixtures instead of generating new ones on each test run | |||||
* | Address code review regarding style and gc | Ian Cordasco | 2015-06-24 | 1 | -12/+13 | |
| | | | | | | | | | - Use keyword arguments for x509.BasicConstraints in several places - Use SHA256 instead of SHA1 in documented examples - Give function variables meaningful names in _encode_asn1_str - Accept a x509.BasicConstraints object in _encode_basic_constraints - Properly garbage-collect some things - Raise a NotImplementedError instead of a ValueError | |||||
* | Removes CSR builder version setter. | Andre Caron | 2015-06-24 | 1 | -1/+1 | |
| | ||||||
* | Fixes memory leak, | Andre Caron | 2015-06-24 | 1 | -0/+6 | |
| | ||||||
* | Extends supported range for integer conversion, | Andre Caron | 2015-06-24 | 1 | -2/+9 | |
| | ||||||
* | Removes OID to txt to OID conversion. | Andre Caron | 2015-06-24 | 1 | -10/+3 | |
| | ||||||
* | Cleans up some GC semantics. | Andre Caron | 2015-06-24 | 1 | -3/+16 | |
| | ||||||
* | Renames sign_509_request to create_x509_csr. | Andre Caron | 2015-06-24 | 1 | -1/+1 | |
| | ||||||
* | Fixes memory allocation. | Andre Caron | 2015-06-24 | 1 | -12/+4 | |
| | ||||||
* | Adds CSR builder. | Andre Caron | 2015-06-24 | 1 | -1/+144 | |
| | ||||||
* | fix ec_cdata_to_evp_pkey bug | Paul Kehrer | 2015-06-22 | 1 | -0/+1 | |
| | | | | | | We weren't actually returning the object and the tests weren't catching it because we didn't try to use the evp_pkey property in the tests. The added test confirms it actually works. | |||||
* | Merge pull request #2036 from major/master | Alex Gaynor | 2015-06-21 | 1 | -0/+3 | |
|\ | | | | | Added a repr() method to x509._Certificate | |||||
| * | Added a repr() method to x509._Certificate | Major Hayden | 2015-06-21 | 1 | -0/+3 | |
| | | ||||||
* | | Refs #1947 -- add support for IAN to the OpenSSL backend | Alex Gaynor | 2015-06-20 | 1 | -2/+15 | |
| | | ||||||
* | | evp_pkey in openssl asymmetric key constructors | Paul Kehrer | 2015-06-20 | 4 | -76/+75 | |
| | | ||||||
* | | inhibit any policy extension support for the openssl backend | Paul Kehrer | 2015-06-17 | 1 | -0/+13 | |
| | | ||||||
* | | support OCSPNoCheck in the OpenSSL backend | Paul Kehrer | 2015-06-17 | 1 | -0/+2 | |
|/ | ||||||
* | don't double free DSA cdata when verifying things | Paul Kehrer | 2015-06-06 | 1 | -4/+1 | |
| | ||||||
* | Add the dual license header to hazmat/backends/openssl/x509.py | Eeshan Garg | 2015-05-24 | 1 | -12/+3 | |
| | ||||||
* | Adds certificate encoding to PEM and DER. | Andre Caron | 2015-05-19 | 1 | -0/+12 | |
| | ||||||
* | Removes PEM text prelude for CSRs. | Andre Caron | 2015-05-18 | 1 | -3/+0 | |
| | ||||||
* | Adds support for writing CSRs. | Andre Caron | 2015-05-18 | 1 | -1/+18 | |
| | ||||||
* | Adds support for CSR extensions. | Andre Caron | 2015-05-17 | 1 | -0/+32 | |
| | ||||||
* | Prepares X509 decoding functions for more CA functionality. | Andre Caron | 2015-05-15 | 1 | -295/+309 | |
| | | | | | | | | | Most of the existing `_build_*()` methods will need to be reused for CSR extensions, so it is more convenient to have them as free functinos. Since we will need to add the reverse functions, it is convenient to rename the `_build_*()` methods to `_decode_*()`. The reverse functions will be named `_encode_*()`. | |||||
* | change approach for parsing CDP reason flags | Paul Kehrer | 2015-05-13 | 1 | -18/+25 | |
| | ||||||
* | support CRLDistributionPoints in the OpenSSL backend | Paul Kehrer | 2015-05-13 | 1 | -11/+101 | |
| | ||||||
* | support certificate policies in the openssl backend | Paul Kehrer | 2015-05-12 | 1 | -0/+71 | |
| | ||||||
* | refactor asn1string->utf8 conversion into a separate function | Paul Kehrer | 2015-05-12 | 1 | -8/+12 | |
| | ||||||
* | asn1 integer to python integer helper function | Paul Kehrer | 2015-05-12 | 1 | -16/+12 | |
| | ||||||
* | extract some duplicate logic into a function | Paul Kehrer | 2015-05-10 | 1 | -18/+15 | |
| | ||||||
* | add support for authority information access in the openssl backend | Paul Kehrer | 2015-05-04 | 1 | -0/+23 | |
| | ||||||
* | authority key identifier support in the openssl backend | Paul Kehrer | 2015-05-03 | 1 | -0/+41 | |
| | ||||||
* | Extended key usage support for the openssl backend | Paul Kehrer | 2015-05-02 | 1 | -0/+20 | |
| | ||||||
* | Merge pull request #1881 from reaperhulk/san-rfc822name | Alex Gaynor | 2015-05-02 | 1 | -0/+22 | |
|\ | | | | | add support for rfc822name general names | |||||
| * | error if it's all empty | Paul Kehrer | 2015-05-02 | 1 | -1/+2 | |
| | | ||||||
| * | u prefixes for everyone | Paul Kehrer | 2015-05-02 | 1 | -1/+1 | |
| | | ||||||
| * | improve if/elif chain, add some comments | Paul Kehrer | 2015-05-01 | 1 | -6/+11 | |
| | | ||||||
| * | add support for rfc822name general names | Paul Kehrer | 2015-04-30 | 1 | -0/+16 | |
| | | ||||||
* | | add support for equality testing to x509.Certificate | Paul Kehrer | 2015-04-30 | 1 | -0/+10 | |
|/ | ||||||
* | add support for directory name general names | Paul Kehrer | 2015-04-30 | 1 | -0/+4 | |
| |