Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | C locking callback (#3226) | Alex Gaynor | 2016-11-13 | 1 | -65/+0 |
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * Remove Python OpenSSL locking callback and replace it with one in C The Python OpenSSL locking callback is unsafe; if GC is triggered during the callback's invocation, it can result in the callback being invoked reentrantly, which can lead to deadlocks. This patch replaces it with one in C that gets built at compile time via cffi along with the rest of the OpenSSL binding. * fixes for some issues * unused * revert these changes * these two for good measure * missing param * sigh, syntax * delete tests that assumed an ability to mess with locks * style fixes * licensing stuff * utf8 * Unicode. Huh. What it isn't good for, absolutely nothing. | ||||
* | OpenSSL 1.1.0 support (#2826) | Paul Kehrer | 2016-08-26 | 1 | -0/+6 |
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * make pre5 work * add a blank line to make the diff happier * 1.1.0-pre6 working * support the changes since 1.1.0-pre6 * fixes * add 1.1.0 to travis * expose the symbol * better testing for numericstring * handle libre... * actually use the 1.1.0 we compile * cache the ossl-110 dir on travis * add some newlines * changelog entry for 1.1.0 support * note that we test on 1.1.0 * proper skip on this test * reorder | ||||
* | Use a series of constants for OpenSSL version checks (#3037) | Alex Gaynor | 2016-07-11 | 1 | -1/+1 |
| | | | | | | | | | | | | | | | | | | | | | | | | * Use a series of constants for OpenSSL version checks. N.B. I removed several qualifiers that were being used to express beta vs. release in OpenSSL version numbers. Reviewers please look closely! * Convert some python as well, also add the file * flake8 * Simplify code, remove functionality that can be expressed more simply * clean up the tests as well * more constants * wrap long lines * reflect feedback * unused * add this back? | ||||
* | Drop OpenSSL 0.9.8 (#2978) | Alex Gaynor | 2016-06-18 | 1 | -16/+1 |
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * Drop OpenSSL 0.9.8 * Drop this test, it's not relevant any longer * unused import * Remove CRYPTOGRAPHY_ALLOW_OPENSSL_098=1 from our tox * removed unused code for Cryptography_HAS_PKEY_CTX * return unused code for _AESCTRCipherContext * syntax :-( * remove some unused tests and skips * remove unused code for Cryptography_HAS_PBKDF2_HMAC * Revert "return unused code for _AESCTRCipherContext" This reverts commit 7d149729205aa4c9735eb322414b167a75b302df. * Remove unused RSA code * Remove unused test code for conditional bindings * Remove unused dsa code * unused import * Remove unused x509 extension code * Remove unused EC code * Attempt to remove unused DER key loading code * document this * grammar * Added back this paragraph * Update docs | ||||
* | Use runtimeerror for this | Alex Gaynor | 2016-03-19 | 1 | -2/+1 |
| | |||||
* | test for verify_openssl_version | Alex Gaynor | 2016-03-19 | 1 | -1/+8 |
| | |||||
* | use an error that's likely to be in all openssls we support | Paul Kehrer | 2016-03-08 | 1 | -12/+9 |
| | |||||
* | review feedback + make the test actually test a thing | Paul Kehrer | 2016-03-07 | 1 | -6/+15 |
| | |||||
* | only call ERR_error_string if we're going to raise InternalError | Paul Kehrer | 2016-03-07 | 1 | -1/+21 |
| | |||||
* | make engine addition idempotent | Paul Kehrer | 2015-10-21 | 1 | -2/+2 |
| | | | | | | | | | | | Threading issues keep cropping up. ENGINE_add already acquires a lock at the C layer via CRYPTO_w_lock (provided you have registered the locking callbacks) so let's try to use that. As part of this we'll try to init the openssl locks, but of course there's potentially a race there as well. Clearly this isn't the real fix but it might improve the situation while we try to determine what to do. | ||||
* | Merge pull request #2180 from reaperhulk/easy-conditional-fix | Donald Stufft | 2015-08-04 | 1 | -0/+18 |
|\ | | | | | create a ConditionalLibrary and remove unsupported items | ||||
| * | add test for conditional removal | Paul Kehrer | 2015-08-01 | 1 | -0/+18 |
| | | |||||
* | | move urandom engine test | Paul Kehrer | 2015-08-01 | 1 | -30/+0 |
|/ | | | | | | | | | | This test was in the bindings dir, which is incorrect. We do not set the urandom engine to default unless the openssl backend is loaded. The reason the test wasn't failing (even in the random test case) is that the backends are loaded during pytest_generate_tests by a call to _available_backends. So no matter what order it occurred in the engine was already set to default. I discovered this when I tried to run the test_openssl.py bindings tests directly via pytest. Hooray global state. | ||||
* | test libressl when there is no libressl | Glyph | 2015-06-30 | 1 | -2/+15 |
| | |||||
* | pep8 | Glyph | 2015-06-30 | 1 | -0/+1 |
| | |||||
* | Detect and ignore LibreSSL. | Glyph | 2015-06-30 | 1 | -1/+3 |
| | |||||
* | the output of RAND_bytes is os.urandom's result | Glyph | 2015-06-29 | 1 | -0/+14 |
| | |||||
* | handle previous registration by raising RuntimeError | Glyph | 2015-06-27 | 1 | -2/+2 |
| | |||||
* | remove remaining vestiges, make adding twice work | Glyph | 2015-06-26 | 1 | -1/+1 |
| | |||||
* | convert to cffi 1.0 precompile system | Paul Kehrer | 2015-06-07 | 3 | -56/+8 |
| | |||||
* | use setenv so we don't have to import os | Paul Kehrer | 2015-01-14 | 1 | -3/+1 |
| | |||||
* | monkeypatch PYCA_WINDOWS_LINK_TYPE in the tests to fix #1624 | Paul Kehrer | 2015-01-14 | 1 | -1/+4 |
| | |||||
* | Update the license header for every source file, as well as the documentation. | Alex Gaynor | 2014-11-16 | 3 | -36/+9 |
| | | | | Fixes #1209 | ||||
* | Monkeypatch the CFFI Verifier to prevent the implicit compile | Donald Stufft | 2014-11-14 | 1 | -0/+14 |
| | |||||
* | We can test this, we have the power! Fixes #874 | Alex Gaynor | 2014-11-07 | 1 | -1/+5 |
| | |||||
* | Update test for new API | Alex Gaynor | 2014-10-24 | 1 | -3/+3 |
| | |||||
* | test_ssl_mode should get current mode as well | Paul Kehrer | 2014-09-26 | 1 | -2/+4 |
| | |||||
* | In tests for setting SSL and SSL_CTX options, get current options first | Paul Kehrer | 2014-09-26 | 1 | -4/+8 |
| | | | | Fixes #1352 | ||||
* | Fix test failures | Terry Chia | 2014-07-28 | 2 | -4/+3 |
| | |||||
* | change env variable name, handle empty string | Paul Kehrer | 2014-07-05 | 1 | -0/+2 |
| | |||||
* | improve unit tests for _get_windows_libraries | Paul Kehrer | 2014-07-03 | 1 | -2/+2 |
| | |||||
* | switch to env variable based static/dynamic switch for windows | Paul Kehrer | 2014-07-02 | 1 | -1/+11 |
| | |||||
* | Fix some typos. | Alex Gaynor | 2014-04-25 | 1 | -1/+1 |
| | | | | Found with https://github.com/intgr/topy/ | ||||
* | move some comments | Paul Kehrer | 2014-04-20 | 1 | -3/+3 |
| | |||||
* | fix SSL_OP_ALL being unusable on Windows due to long being 32-bit signed | Paul Kehrer | 2014-04-20 | 1 | -0/+34 |
| | |||||
* | should probably update the test too | Paul Kehrer | 2014-03-17 | 1 | -7/+5 |
| | |||||
* | be less dumb | Paul Kehrer | 2014-03-13 | 1 | -4/+3 |
| | |||||
* | make create_modulename private, add test | Paul Kehrer | 2014-03-13 | 1 | -0/+28 |
| | |||||
* | Added future imports and licenses that are missing | Alex Gaynor | 2014-03-08 | 2 | -0/+4 |
| | |||||
* | test to confirm calling Cryptography_add_osrandom_engine > 1 is safe | Paul Kehrer | 2014-02-20 | 1 | -0/+5 |
| | |||||
* | Remove the contenious test of contention | Alex Stapleton | 2014-01-24 | 1 | -46/+0 |
| | |||||
* | Split a test in half | Alex Stapleton | 2014-01-24 | 1 | -6/+18 |
| | |||||
* | Also test the locking cb directly | Alex Stapleton | 2014-01-24 | 1 | -19/+20 |
| | |||||
* | Python implementation of OpenSSL locking callback | Alex Stapleton | 2014-01-24 | 1 | -0/+106 |
| | |||||
* | add is_available() to CommonCrypto binding, use it for skipif | Paul Kehrer | 2014-01-09 | 1 | -3/+4 |
| | |||||
* | cover a missing branch in the commoncrypto bindings | Paul Kehrer | 2014-01-09 | 1 | -2/+8 |
| | |||||
* | Add initial CommonCrypto bindings (no backend yet) | Paul Kehrer | 2014-01-09 | 1 | -0/+25 |
| | |||||
* | Fixed #408 -- cleanup how is_available works | Alex Gaynor | 2014-01-07 | 1 | -32/+0 |
| | |||||
* | missing # | Paul Kehrer | 2014-01-04 | 1 | -1/+1 |
| | |||||
* | make the dummy_initializer fail with an actual verify call | Paul Kehrer | 2014-01-04 | 1 | -1/+2 |
| |