| Commit message (Collapse) | Author | Age | Files | Lines | |
|---|---|---|---|---|---|
| * | Refs #3002 -- clearly document that OpenSSL 1.0 support will be removed in ↵ | Alex Gaynor | 2016-08-27 | 1 | -3/+3 |
| | | | | | the next release. (#3113) | ||||
| * | Reopen master for 1.6 (#3112) | Alex Gaynor | 2016-08-27 | 1 | -1/+1 |
| | | |||||
| * | update changelog and bump version for 1.5 release (#3111) | Paul Kehrer | 2016-08-26 | 1 | -1/+1 |
| | | |||||
| * | OpenSSL 1.1.0 support (#2826) | Paul Kehrer | 2016-08-26 | 2 | -1/+13 |
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * make pre5 work * add a blank line to make the diff happier * 1.1.0-pre6 working * support the changes since 1.1.0-pre6 * fixes * add 1.1.0 to travis * expose the symbol * better testing for numericstring * handle libre... * actually use the 1.1.0 we compile * cache the ossl-110 dir on travis * add some newlines * changelog entry for 1.1.0 support * note that we test on 1.1.0 * proper skip on this test * reorder | ||||
| * | be a bit more robust about detecting locking callback declarations (#3107) | Paul Kehrer | 2016-08-26 | 1 | -3/+11 |
| | | |||||
| * | remove a few more unneeded and no longer extant functions for 1.1.0 (#3110) | Paul Kehrer | 2016-08-26 | 2 | -3/+0 |
| | | |||||
| * | opaque structs for 1.1.0 compatibility (#3109) | Paul Kehrer | 2016-08-26 | 3 | -48/+9 |
| | | | | We're so close. | ||||
| * | Allow passing iterators where collections are expected (#3078) | Marti | 2016-08-26 | 2 | -31/+45 |
| | | | | | | | | | | | | | | | Iterators can only be enumerated once, breaking code like this in Python 3 for example: san = SubjectAlternativeName(map(DNSName, lst)) This is also a slight behavior change if the caller modifies the list after passing it to the constructor, because input lists are now copied. Which seems like a good thing. Also: * Name now checks that attributes elements are of type NameAttribute * NoticeReference now allows notice_numbers to be any iterable | ||||
| * | remove two more constants that no longer exist and we don't use (#3101) | Paul Kehrer | 2016-08-25 | 2 | -2/+0 |
| | | |||||
| * | two more functions that became const, one removed that we don't use (#3102) | Paul Kehrer | 2016-08-25 | 1 | -4/+6 |
| | | |||||
| * | constify and reorder getter args (#3103) | Paul Kehrer | 2016-08-24 | 2 | -21/+28 |
| | | | | | | | | | | | * constify more things in x509 and reorder a few func args Post pre6 they changed some function argument order... * fix the function arg order where we call it * still need arg names when implementing the function...whoops | ||||
| * | constify x509name functions (#3104) | Paul Kehrer | 2016-08-24 | 1 | -8/+12 |
| | | |||||
| * | const some more ASN1 (#3100) | Paul Kehrer | 2016-08-24 | 1 | -2/+2 |
| | | |||||
| * | CertificateBuilder accepts aware datetimes for not_valid_after and ↵ | InvalidInterrupt | 2016-08-16 | 1 | -0/+19 |
| | | | | | | | | | | | | | | | | | | | | not_valid_before (#2920) * CertificateBuilder accepts aware datetimes for not_valid_after and not_valid_before These functions now accept aware datetimes and convert them to UTC * Added pytz to test requirements * Correct pep8 error and improve Changelog wording * Improve tests and clarify changelog message * Trim Changelog line length * Allow RevokedCertificateBuilder and CertificateRevocationListBuilder to accept aware datetimes * Fix accidental changelog entry | ||||
| * | ERR_load_RAND_strings changed function signature in 1.1.0 (#3093) | Paul Kehrer | 2016-08-16 | 1 | -1/+6 |
| | | | | | | | | | * ERR_load_RAND_strings changed function signature in 1.1.0 Here is a hack to avoid breaking pyOpenSSL. * not sure how I managed that. I blame vim | ||||
| * | move functions that were const-ified in 1.1.0-pre6 (#3090) | Paul Kehrer | 2016-08-16 | 3 | -19/+33 |
| | | |||||
| * | OPENSSL_no_config is a macro in 1.1.0 (#3091) | Paul Kehrer | 2016-08-16 | 1 | -1/+2 |
| | | |||||
| * | BIO_set has been removed in 1.1.0 (#3092) | Paul Kehrer | 2016-08-16 | 1 | -1/+0 |
| | | | | Since we aren't using it bye bye | ||||
| * | Disallow X509 certificate serial numbers bigger than 159 bits (#3064) (#3067) | Коренберг Марк | 2016-08-02 | 1 | -8/+14 |
| | | |||||
| * | Add code style settings, new excludes, run 'test_x509_ext (Py3)' (#3041) | Marti | 2016-08-02 | 1 | -5/+10 |
| | | | | | | | Fix DNSName wildcard encoding for NameConstraints Previously '.example.com' would get normalised to 'example.com', making it impossible to add wildcard NameConstraints. | ||||
| * | disable static callbacks on Python 3.5 (refs #2970) (#3063) | Maximilian Hils | 2016-07-29 | 1 | -1/+4 |
| | | |||||
| * | Fixed openssl binding if no-cmac (#3062) | Jeffery To | 2016-07-27 | 1 | -2/+2 |
| | | |||||
| * | Unconditional SecureTransport bindings, round 2. (#3059) | Cory Benfield | 2016-07-23 | 2 | -0/+309 |
| | | | | | | | | | | | | | * Add the unconditional SecureTransport bindings * Looks like the PSK cipher suites got removed in 10.8 * Line-length. * Style. * Remove further troublesome bindings. | ||||
| * | Revert "Add the unconditional SecureTransport bindings" (#3058) | Alex Gaynor | 2016-07-23 | 2 | -314/+0 |
| | | |||||
| * | Add the unconditional SecureTransport bindings (#3054) | Cory Benfield | 2016-07-23 | 2 | -0/+314 |
| | | | | | | | | | | | * Add the unconditional SecureTransport bindings * Line-length. * Looks like the PSK cipher suites got removed in 10.8 * Style. | ||||
| * | Enforce that p > q to improve OpenSSL compatibility (fixes #2990) (#3010) | Dirkjan Ochtman | 2016-07-19 | 1 | -1/+1 |
| | | |||||
| * | Add flag to toggle key length check for HOTP and TOTP. (#3012) | Terry Chia | 2016-07-16 | 2 | -4/+6 |
| | | | | | | | | | | | * Add an enforce_key_length parameter to HOTP and TOTP. * Document changes in docs. * Add some words to the wordlist. * Add versionadded to docs. | ||||
| * | Add OPENSSL_config binding (#2972) (#2974) | Anton | 2016-07-13 | 2 | -0/+24 |
| | | | | | | | | >>> lib.EVP_get_digestbyname(b'md_gost94') <cdata 'EVP_MD *' NULL> >>> lib.OPENSSL_config(ffi.NULL) >>> lib.EVP_get_digestbyname(b'md_gost94') <cdata 'EVP_MD *' 0x10adc7440> | ||||
| * | Use a series of constants for OpenSSL version checks (#3037) | Alex Gaynor | 2016-07-11 | 16 | -57/+99 |
| | | | | | | | | | | | | | | | | | | | | | | | | | * Use a series of constants for OpenSSL version checks. N.B. I removed several qualifiers that were being used to express beta vs. release in OpenSSL version numbers. Reviewers please look closely! * Convert some python as well, also add the file * flake8 * Simplify code, remove functionality that can be expressed more simply * clean up the tests as well * more constants * wrap long lines * reflect feedback * unused * add this back? | ||||
| * | disable blowfish in commoncrypto backend for key lengths under 64-bit (#3040) | Paul Kehrer | 2016-07-10 | 1 | -1/+6 |
| | | | | | This is due to a bug in CommonCrypto present in 10.11.x. Filed as radar://26636600 | ||||
| * | One shot sign/verification ECDSA (#3029) | Aviv Palivoda | 2016-07-02 | 2 | -0/+22 |
| | | | | | | | | | | | | | | | * Add sign and verify methods to ECDSA * Documented ECDSA sign/verify methods * Added CHANGELOG entry * Skipping test verify and sign if curve is not supported * Fixed typo in documentation return type * Removed provider language from EllipticCurvePrivateKey and EllipticCurvePublicKey | ||||
| * | Remove a few SSL fields which are unused (#3032) | Alex Gaynor | 2016-06-30 | 1 | -5/+0 |
| | | |||||
| * | One shot sign/verify DSA (#3003) | Aviv Palivoda | 2016-06-30 | 2 | -0/+22 |
| | | | | | | | | | * Add sign and verify methods to DSA * Documented DSA sign/verify methods * Added CHANGELOG entry | ||||
| * | Opaque everything else we can of X509 (#3027) | Alex Gaynor | 2016-06-30 | 1 | -11/+1 |
| | | |||||
| * | change X509V3_EXT_nconf function signature (#3024) | Paul Kehrer | 2016-06-30 | 1 | -1/+2 |
| | | |||||
| * | Opaque another OpenSSL struct (#3025) | Alex Gaynor | 2016-06-29 | 1 | -8/+1 |
| | | |||||
| * | Fixed #3008 -- expose calculate max pss salt length (#3014) | Alex Gaynor | 2016-06-27 | 2 | -11/+19 |
| | | | | | | | | | | | | | | | * Fixed #3008 -- expose calculate max pss salt length * Fixed a few mistakes in the docs * move all the code around * oops * write a unit test * versionadded + changelog | ||||
| * | AES_ctr128_encrypt needs to be in macros as it's a conditional binding (#3023) | Paul Kehrer | 2016-06-27 | 1 | -4/+4 |
| | | |||||
| * | update RSA opaque getters/setters to latest code from openssl 1.1.0 master ↵ | Paul Kehrer | 2016-06-27 | 1 | -22/+20 |
| | | | | | | (#3022) constify + a few small changes to the null checks | ||||
| * | update DH opaque getters/setters to latest code from openssl 1.1.0 master ↵ | Paul Kehrer | 2016-06-27 | 1 | -14/+10 |
| | | | | | | (#3021) constify + a few small changes to the null checks | ||||
| * | update DSA opaque getters/setters to latest code from openssl 1.1.0 master ↵ | Paul Kehrer | 2016-06-27 | 1 | -15/+17 |
| | | | | | | (#3020) constify + a few small changes to the null checks | ||||
| * | opaque x509 store context (#3019) | Paul Kehrer | 2016-06-27 | 1 | -15/+1 |
| | | |||||
| * | Refs #2826 -- remove a no longer needed DSA binding (#3017) | Alex Gaynor | 2016-06-26 | 1 | -2/+0 |
| | | |||||
| * | Opaquify RSA and DSA structs in OpenSSL (#3016) | Alex Gaynor | 2016-06-26 | 2 | -24/+2 |
| | | |||||
| * | Use `d` instead of `private_exponent` for consistency (#2991) | Dirkjan Ochtman | 2016-06-22 | 1 | -2/+2 |
| | | | | | True story: I used `e` instead of `d` because it seemed more closely related to `e`. Should have looked it up, of course... but the docs could be better. | ||||
| * | Use DSAparams_dup in yet another please (#3007) | Alex Gaynor | 2016-06-20 | 1 | -27/+2 |
| | | |||||
| * | Complete the removal of the string '0.9.8' (#3005) | Alex Gaynor | 2016-06-20 | 1 | -15/+13 |
| | | | | We have always been at war with OpenSSL 0.9.8 | ||||
| * | use DSAparams_dup now that we no longer support 0.9.8 (#3006) | Paul Kehrer | 2016-06-20 | 2 | -35/+4 |
| | | |||||
| * | Rewrite a comment. (#3004) | Alex Gaynor | 2016-06-20 | 1 | -4/+4 |
| | | | | d2i_AutoPrivateKey is less useful than we thought | ||||
| * | Added function to access and alter opaque DH struct (#2976) | Aviv Palivoda | 2016-06-20 | 1 | -0/+82 |
| | | |||||
 |
index : cloud-email/cryptography | |
| python cryptography | James |
| aboutsummaryrefslogtreecommitdiffstats |