Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | Add note to serial_number parameter about entropy | Ian Cordasco | 2015-08-02 | 1 | -11/+3 |
| | | | | | | | | | | - Add reference to random-numbers.rst for easy intra-linking - Document critical parameter of CertificateBuilder.add_extension - Support InhibitAnyPolicy in the CertificateBuilder frontend but not in the backend - Slim down more tests - Fix up test that asserts the backend does not allow for unsupported extensions | ||||
* | Remove CertificateBuilder.version | Ian Cordasco | 2015-07-24 | 1 | -3/+1 |
| | | | | Default CertificateBuilder to Version.v3 | ||||
* | Add tests to test_openssl backend for extra coverage | Ian Cordasco | 2015-07-20 | 1 | -0/+39 |
| | |||||
* | Fixed #2143 -- added __hash__ to RSA{Public,Private}Numbers | Alex Gaynor | 2015-07-12 | 1 | -0/+16 |
| | |||||
* | do the same simplification to the aad test | Paul Kehrer | 2015-07-01 | 1 | -3/+1 |
| | |||||
* | add missing test, simplify encrypted byte near limit calculation | Paul Kehrer | 2015-07-01 | 1 | -3/+15 |
| | |||||
* | add additional increment tests | Paul Kehrer | 2015-07-01 | 1 | -8/+18 |
| | |||||
* | put the AAD and encrypted byte limit checks in the parent context | Paul Kehrer | 2015-07-01 | 1 | -0/+30 |
| | |||||
* | Merge pull request #2073 from glyph/no-c-random | Paul Kehrer | 2015-06-30 | 2 | -8/+38 |
|\ | | | | | Replace C implementation of OS Random engine with Python one that just calls os.urandom | ||||
| * | test libressl when there is no libressl | Glyph | 2015-06-30 | 1 | -2/+15 |
| | | |||||
| * | pep8 | Glyph | 2015-06-30 | 1 | -0/+1 |
| | | |||||
| * | Detect and ignore LibreSSL. | Glyph | 2015-06-30 | 1 | -1/+3 |
| | | |||||
| * | the output of RAND_bytes is os.urandom's result | Glyph | 2015-06-29 | 1 | -0/+14 |
| | | |||||
| * | handle previous registration by raising RuntimeError | Glyph | 2015-06-27 | 1 | -2/+2 |
| | | |||||
| * | pointer shenanigans | Glyph | 2015-06-26 | 1 | -9/+8 |
| | | | | | | | | | | | | | | | | apparently (?) ENGINE_by_id treats its ID as an opaque *pointer* key and not actually as a string, and while CPython's CFFI support seems to manage to preserve the pointer identity when using the same Python string, PyPy doesn't. Fix things to use a cffi-wrapped pointer again and tests pass on PyPy. | ||||
| * | remove remaining vestiges, make adding twice work | Glyph | 2015-06-26 | 2 | -4/+2 |
| | | |||||
| * | compare contents and not pointers | Glyph | 2015-06-26 | 1 | -9/+12 |
| | | |||||
* | | require serialization in asym tests | Paul Kehrer | 2015-06-27 | 4 | -164/+70 |
| | | |||||
* | | More branch coverage improvements. By virtue of reorganization and a new test | Alex Gaynor | 2015-06-27 | 1 | -0/+21 |
|/ | |||||
* | Use SECP256R1 instead of SECT283K1 in CSR tests | Ian Cordasco | 2015-06-24 | 1 | -2/+2 |
| | |||||
* | Skip tests when the EC curve is unsupported | Ian Cordasco | 2015-06-24 | 1 | -0/+2 |
| | |||||
* | Add tests to the CSR Builder for EC and DSA keys | Ian Cordasco | 2015-06-24 | 1 | -1/+24 |
| | | | | | | This skips certain tests on certain versions of differences in how X509_REQ_sign works on those versions. A separate pull request will address those differences. | ||||
* | Renames sign_509_request to create_x509_csr. | Andre Caron | 2015-06-24 | 1 | -0/+6 |
| | |||||
* | fix ec_cdata_to_evp_pkey bug | Paul Kehrer | 2015-06-22 | 1 | -0/+18 |
| | | | | | | We weren't actually returning the object and the tests weren't catching it because we didn't try to use the evp_pkey property in the tests. The added test confirms it actually works. | ||||
* | Remove our workarounds for pyasn.1 bugs, a new pyasn.1 is out! | Alex Gaynor | 2015-06-22 | 1 | -2/+2 |
| | |||||
* | Add ConcatKDF from NIST SP 800-56A | Simo Sorce | 2015-06-12 | 1 | -0/+251 |
| | | | | | | | | | The implemention allows the use an HMAC function as per Revision 2 of the document. Conformance of the formatting of the OtherInfo argument is responsability of the calling application. Signed-off-by: Simo Sorce <simo@redhat.com> | ||||
* | convert to cffi 1.0 precompile system | Paul Kehrer | 2015-06-07 | 4 | -58/+14 |
| | |||||
* | Remove a default argument and rename a private function. | Jiangge Zhang | 2015-06-03 | 2 | -3/+3 |
| | |||||
* | Follow the review advice: turn URI generator into methods. | Jiangge Zhang | 2015-06-03 | 2 | -9/+4 |
| | |||||
* | Add "generate_key_uri" utility for HOTP/TOTP. | Jiangge Zhang | 2015-05-26 | 2 | -0/+31 |
| | |||||
* | Merge pull request #1989 from elitest/fixapachelic | Paul Kehrer | 2015-05-24 | 1 | -12/+3 |
|\ | | | | | Fix dual license in test_dh.py | ||||
| * | Fix dual license in test_dh.py | Jim Shaver | 2015-05-24 | 1 | -12/+3 |
| | | |||||
* | | add support for secp256k1 | Paul Kehrer | 2015-05-08 | 1 | -4/+11 |
| | | |||||
* | | Refs #1870 - replace six.u with u prefix in tests/hazmat/primitives | Eeshan Garg | 2015-04-29 | 7 | -32/+18 |
|/ | |||||
* | Merge pull request #1848 from reaperhulk/invalid-token | Alex Gaynor | 2015-04-14 | 2 | -2/+4 |
|\ | | | | | Twofactor invalid token | ||||
| * | Move cryptography.exceptions.InvalidToken to ↵ | Steven Buss | 2015-04-13 | 2 | -2/+4 |
| | | | | | | | | cryptography.hazmat.primitives.twofactor | ||||
* | | Work around pyasn1's willingness to return endOfOctets in DER parsing | Geoffrey Thomas | 2015-04-13 | 1 | -0/+5 |
|/ | | | | See #1838 for discussion. | ||||
* | add load_der_x509_csr to support loading DER encoded CSRs | Paul Kehrer | 2015-03-30 | 1 | -0/+6 |
| | |||||
* | rename request to CSR | Paul Kehrer | 2015-03-29 | 1 | -3/+3 |
| | |||||
* | basic support for parsing x509 requests | Paul Kehrer | 2015-03-29 | 1 | -0/+6 |
| | |||||
* | allow zero value bn using _bn_to_int in the openssl backend | Paul Kehrer | 2015-03-25 | 1 | -0/+4 |
| | |||||
* | pep8! *shakes fist at the sky* | Paul Kehrer | 2015-03-14 | 1 | -1/+1 |
| | |||||
* | DER serialization of DSA private keys | Paul Kehrer | 2015-03-14 | 2 | -40/+86 |
| | |||||
* | support DER encoded EC private key serialization | Paul Kehrer | 2015-03-13 | 1 | -12/+93 |
| | |||||
* | support RSA DER private key serialization | Paul Kehrer | 2015-03-13 | 2 | -23/+95 |
| | |||||
* | Merge pull request #1741 from reaperhulk/serialize-der-public-keys | Alex Gaynor | 2015-03-10 | 4 | -43/+81 |
|\ | | | | | support DER serialization of public keys | ||||
| * | support DER serialization of public keys | Paul Kehrer | 2015-03-10 | 4 | -43/+81 |
| | | |||||
* | | Fixed the deprecation warnings being triggered by the tests | Alex Gaynor | 2015-03-10 | 4 | -10/+10 |
|/ | |||||
* | DSA public key serialization | Paul Kehrer | 2015-03-08 | 1 | -1/+44 |
| | |||||
* | make tests properly skip on OpenSSLs without EC support | Paul Kehrer | 2015-03-08 | 1 | -0/+4 |
| |