Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | Use a series of constants for OpenSSL version checks (#3037) | Alex Gaynor | 2016-07-11 | 1 | -8/+8 |
| | | | | | | | | | | | | | | | | | | | | | | | | * Use a series of constants for OpenSSL version checks. N.B. I removed several qualifiers that were being used to express beta vs. release in OpenSSL version numbers. Reviewers please look closely! * Convert some python as well, also add the file * flake8 * Simplify code, remove functionality that can be expressed more simply * clean up the tests as well * more constants * wrap long lines * reflect feedback * unused * add this back? | ||||
* | Complete the removal of the string '0.9.8' (#3005) | Alex Gaynor | 2016-06-20 | 1 | -1/+1 |
| | | | We have always been at war with OpenSSL 0.9.8 | ||||
* | Remove a binding and comments that reference 0.9.8 (#2984) | Alex Gaynor | 2016-06-18 | 1 | -1/+1 |
| | |||||
* | Drop OpenSSL 0.9.8 (#2978) | Alex Gaynor | 2016-06-18 | 1 | -25/+0 |
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * Drop OpenSSL 0.9.8 * Drop this test, it's not relevant any longer * unused import * Remove CRYPTOGRAPHY_ALLOW_OPENSSL_098=1 from our tox * removed unused code for Cryptography_HAS_PKEY_CTX * return unused code for _AESCTRCipherContext * syntax :-( * remove some unused tests and skips * remove unused code for Cryptography_HAS_PBKDF2_HMAC * Revert "return unused code for _AESCTRCipherContext" This reverts commit 7d149729205aa4c9735eb322414b167a75b302df. * Remove unused RSA code * Remove unused test code for conditional bindings * Remove unused dsa code * unused import * Remove unused x509 extension code * Remove unused EC code * Attempt to remove unused DER key loading code * document this * grammar * Added back this paragraph * Update docs | ||||
* | RSA OAEP SHA2 Support (#2956) | Paul Kehrer | 2016-06-04 | 1 | -2/+74 |
| | | | | | | | | | | | | | | | | | | | | * some rsa oaep sha2 support * various improvements * fix a thing * simplify * update the test * styyyyyle * more styyyyle * fix libre, remove a skip that should never be hit * OAEP version check fixes | ||||
* | Use teardown since we ignore the method arg anyways (#2928) | Alex Gaynor | 2016-05-30 | 1 | -2/+1 |
| | |||||
* | Replacing test_osrandom_engine_is_default. (#2905) | Andreas Moser | 2016-05-29 | 1 | -0/+12 |
| | | | | | | | | | | | | | | | | | | | * Removing test_osrandom_engine_is_default. test_osrandom_engine_is_default depends on having a valid sys.executable. This attribute is not always set (see https://docs.python.org/2/library/sys.html#sys.executable ) so, in some environments, this test fails. I moved the functionality of the test into the setup and teardown methods so the correct behavior is still tested. * Fixing some style issues. * Removing an unnecessary newline. * Putting back the test. * Moving the assert from teardown to setup. | ||||
* | Merge pull request #2815 from reaperhulk/error-on-unusual-encodings | Alex Gaynor | 2016-03-12 | 1 | -0/+21 |
|\ | | | | | Error on unusual encodings | ||||
| * | py3 is a thing | Paul Kehrer | 2016-03-12 | 1 | -1/+1 |
| | | |||||
| * | move NUMERICSTRING certificate test to test_openssl & make it more specific | Paul Kehrer | 2016-03-12 | 1 | -0/+21 |
| | | |||||
* | | make multibackend error with an empty list. fixes #2717 | Paul Kehrer | 2016-03-11 | 1 | -5/+15 |
|/ | |||||
* | Un-double the test doubles | Alex Gaynor | 2016-03-05 | 2 | -50/+16 |
| | |||||
* | Send stderr someplace | Alex Gaynor | 2016-02-27 | 1 | -1/+2 |
| | | | | Otherwise there's noise in the test output on python 2.6 | ||||
* | Actually allocate a buffer that is the correct size. | Tristan Seligmann | 2016-02-08 | 1 | -2/+3 |
| | |||||
* | give a real EVP_PKEY with an invalid default key type to the test | Paul Kehrer | 2016-01-07 | 1 | -2/+0 |
| | |||||
* | opaque EVP_PKEY since EVP_PKEY_id exists | Paul Kehrer | 2016-01-07 | 1 | -1/+1 |
| | |||||
* | Support EC and DSA signing of CRLs in the OpenSSL backend | Paul Kehrer | 2015-12-27 | 1 | -0/+37 |
| | |||||
* | move two tests to the openssl backend tests where they belong | Paul Kehrer | 2015-12-26 | 1 | -1/+51 |
| | |||||
* | RevokedCertificateBuilder | Paul Kehrer | 2015-12-25 | 1 | -2/+2 |
| | |||||
* | add create_x509_revoked_certificate to x509backend interface | Paul Kehrer | 2015-12-25 | 2 | -0/+12 |
| | |||||
* | Merge pull request #2567 from alex/this-is-america | Paul Kehrer | 2015-12-24 | 1 | -1/+1 |
|\ | | | | | Spell serialization consistently | ||||
| * | Spell serialization consistently | Alex Gaynor | 2015-12-24 | 1 | -1/+1 |
| | | |||||
* | | CertificateRevocationListBuilder | Paul Kehrer | 2015-12-24 | 1 | -3/+6 |
|/ | | | | | RSA keys only. Currently does not support CRL extensions or CRLEntry extensions. | ||||
* | coverage | Paul Kehrer | 2015-12-24 | 1 | -0/+5 |
| | |||||
* | add create_x509_crl interface | Paul Kehrer | 2015-12-24 | 1 | -0/+8 |
| | |||||
* | Change password callback to use userdata pointer | Christian Heimes | 2015-12-20 | 1 | -2/+15 |
| | | | | | | | | | Instead of a closure the pem_password_cb now uses the void *userdata argument to exchange data with the callback function. It's a necessary step to port all callbacks to new static callbacks. See: #2477 Signed-off-by: Christian Heimes <christian@python.org> | ||||
* | Merge branch 'master' into crl_ossl_backend | Erik Trauschke | 2015-10-20 | 2 | -4/+21 |
|\ | |||||
| * | better place for this test | Alex Gaynor | 2015-10-19 | 1 | -7/+0 |
| | | |||||
| * | another test | Alex Gaynor | 2015-10-19 | 1 | -0/+7 |
| | | |||||
| * | a refactor to the API | Alex Gaynor | 2015-10-17 | 2 | -23/+18 |
| | | |||||
| * | Add an Elliptic Curve Key Exchange Algorithm(ECDH) | Simo Sorce | 2015-10-17 | 2 | -2/+24 |
| | | | | | | | | | | | | | | | | | | The ECDH Key Exchange algorithm as standardized in NIST publication 800-56A Revision 2 Includes tests with vectors from NIST. Signed-off-by: Simo Sorce <simo@redhat.com> | ||||
* | | Merge branch 'master' into crl_ossl_backend | Erik Trauschke | 2015-09-28 | 1 | -19/+1 |
|\| | |||||
| * | Use InternalError for stuff | Alex Gaynor | 2015-09-26 | 1 | -19/+1 |
| | | |||||
* | | Merge branch 'crl_ossl_backend' of github.com:etrauschke/cryptography into ↵ | Erik Trauschke | 2015-09-28 | 1 | -0/+12 |
|\ \ | |/ |/| | | | crl_ossl_backend | ||||
| * | Merge branch 'master' into crl_ossl_backend | Erik Trauschke | 2015-09-25 | 1 | -1/+6 |
| |\ | |||||
| * | | OpenSSL backend code for CRLs | Erik Trauschke | 2015-09-24 | 1 | -0/+12 |
| | | | |||||
* | | | fix the tests | Alex Gaynor | 2015-09-26 | 1 | -1/+2 |
| |/ |/| | |||||
* | | add test for openssl_assert | Paul Kehrer | 2015-09-25 | 1 | -1/+6 |
|/ | |||||
* | fix up test coverage on multibackend | Alex Gaynor | 2015-09-22 | 1 | -2/+9 |
| | |||||
* | pep8 fix | Paul Kehrer | 2015-08-09 | 1 | -2/+0 |
| | |||||
* | move a test | Paul Kehrer | 2015-08-09 | 1 | -26/+0 |
| | |||||
* | support issuer alternative name encoding | Paul Kehrer | 2015-08-09 | 1 | -1/+6 |
| | |||||
* | fix unsupported test | Paul Kehrer | 2015-08-08 | 1 | -1/+1 |
| | |||||
* | rename sign_x509_certificate backend method to create_x509_certificate | Paul Kehrer | 2015-08-06 | 2 | -4/+4 |
| | |||||
* | fix a few tests that were missed | Paul Kehrer | 2015-08-05 | 1 | -0/+2 |
| | |||||
* | missed one | Paul Kehrer | 2015-08-03 | 1 | -1/+1 |
| | |||||
* | Merge remote-tracking branch 'upstream/master' into cert-builder | Ian Cordasco | 2015-08-03 | 1 | -0/+27 |
|\ | |||||
| * | this is gonna be unicode now | Paul Kehrer | 2015-08-01 | 1 | -3/+3 |
| | | |||||
| * | move urandom engine test | Paul Kehrer | 2015-08-01 | 1 | -0/+27 |
| | | | | | | | | | | | | | | | | | | | | This test was in the bindings dir, which is incorrect. We do not set the urandom engine to default unless the openssl backend is loaded. The reason the test wasn't failing (even in the random test case) is that the backends are loaded during pytest_generate_tests by a call to _available_backends. So no matter what order it occurred in the engine was already set to default. I discovered this when I tried to run the test_openssl.py bindings tests directly via pytest. Hooray global state. | ||||
* | | Add test coverage for MultiBackend.sign_x509_certificate | Ian Cordasco | 2015-08-02 | 1 | -0/+8 |
| | |