Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | rename tbs_certificate to tbs_certificate_bytes, add a comment | Paul Kehrer | 2015-11-03 | 1 | -9/+9 |
| | |||||
* | skip check | Paul Kehrer | 2015-11-03 | 1 | -0/+1 |
| | |||||
* | add support for Certificate signature and tbs_certificate | Paul Kehrer | 2015-11-03 | 1 | -1/+184 |
| | |||||
* | Swapping modified x509 test with modified ec test | Peter Hamilton | 2015-10-30 | 2 | -14/+4 |
| | |||||
* | Fixing fixture import order | Peter Hamilton | 2015-10-30 | 1 | -1/+1 |
| | |||||
* | Adding test usage for elliptic curve fixtures | Peter Hamilton | 2015-10-30 | 1 | -2/+3 |
| | | | | This change enables test coverage for the elliptic curve fixtures by adding elliptic curve fixtures to an x509 test case. | ||||
* | Adding elliptic curve test fixtures | Peter Hamilton | 2015-10-29 | 1 | -0/+296 |
| | | | | This change adds pre-generated elliptic curve keys to be used in elliptic curve tests. | ||||
* | Error cleanly if the public and private keys to an ECDH key exchange are on ↵ | Alex Gaynor | 2015-10-28 | 1 | -1/+27 |
| | | | | different curves | ||||
* | add ellipticcurvepublicnumbers repr | Paul Kehrer | 2015-10-28 | 1 | -0/+5 |
| | |||||
* | Merge pull request #2447 from reaperhulk/encode-decode-point | Alex Gaynor | 2015-10-27 | 1 | -0/+67 |
|\ | | | | | add support for encoding/decoding elliptic curve points | ||||
| * | address review feedback | Paul Kehrer | 2015-10-28 | 1 | -7/+0 |
| | | |||||
| * | modify approach to use EllipticCurvePublicNumbers methods | Paul Kehrer | 2015-10-27 | 2 | -73/+76 |
| | | |||||
| * | remove support for null points, improve docs | Paul Kehrer | 2015-10-27 | 1 | -2/+4 |
| | | |||||
| * | add support for encoding/decoding elliptic curve points | Paul Kehrer | 2015-10-26 | 1 | -2/+71 |
| | | | | | | | | Based on the work of @ronf in #2346. | ||||
* | | Merge pull request #2435 from reaperhulk/fix-2407 | Alex Gaynor | 2015-10-27 | 1 | -0/+41 |
|\ \ | |/ |/| | encode countryName with PrintableString | ||||
| * | work on py3 | Paul Kehrer | 2015-10-27 | 1 | -2/+2 |
| | | |||||
| * | remove unneeded str | Paul Kehrer | 2015-10-27 | 1 | -2/+2 |
| | | |||||
| * | switch to using pyasn1_modules for the test | Paul Kehrer | 2015-10-27 | 1 | -12/+14 |
| | | |||||
| * | encode countryName with PrintableString | Paul Kehrer | 2015-10-20 | 1 | -0/+39 |
| | | | | | | | | | | | | | | This commit adds a dependency on asn1crypto for testing purposes to parse the certificate and confirm that countryName is encoded with PrintableString while other fields are UTF8String. This is a test only dep. | ||||
* | | Merge pull request #2220 from reaperhulk/encode-cp | Alex Gaynor | 2015-10-24 | 1 | -0/+89 |
|\ \ | | | | | | | support encoding certificate policies in CertificateBuilder | ||||
| * | | support encoding certificate policies in CertificateBuilder | Paul Kehrer | 2015-10-24 | 1 | -0/+89 |
| | | | |||||
* | | | Merge pull request #2293 from reaperhulk/idempotent-engine-add | Alex Gaynor | 2015-10-24 | 1 | -2/+2 |
|\ \ \ | |/ / |/| | | idempotent engine add | ||||
| * | | make engine addition idempotent | Paul Kehrer | 2015-10-21 | 1 | -2/+2 |
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Threading issues keep cropping up. ENGINE_add already acquires a lock at the C layer via CRYPTO_w_lock (provided you have registered the locking callbacks) so let's try to use that. As part of this we'll try to init the openssl locks, but of course there's potentially a race there as well. Clearly this isn't the real fix but it might improve the situation while we try to determine what to do. | ||||
* | | | typo | Alex Gaynor | 2015-10-24 | 1 | -1/+1 |
| | | | |||||
* | | | Fixed #2444 -- added an __hash__ to x509 Names | Alex Gaynor | 2015-10-24 | 1 | -0/+17 |
| | | | |||||
* | | | add comments on test cases to explain reasons a bit better | Paul Kehrer | 2015-10-22 | 1 | -0/+5 |
| | | | |||||
* | | | make skip message more verbose | Paul Kehrer | 2015-10-21 | 1 | -11/+10 |
| | | | |||||
* | | | AES keywrap support | Paul Kehrer | 2015-10-21 | 1 | -0/+112 |
|/ / | |||||
* | | fix some indentation | Paul Kehrer | 2015-10-21 | 1 | -2/+2 |
| | | |||||
* | | test fix | Erik Trauschke | 2015-10-21 | 1 | -0/+2 |
| | | |||||
* | | remove convenience functions for revoked extensions | Erik Trauschke | 2015-10-21 | 1 | -10/+11 |
| | | | | | | | | fix docs regarding CRL PEM format | ||||
* | | Merge branch 'master' into crl_ossl_backend | Erik Trauschke | 2015-10-20 | 6 | -8/+163 |
|\ \ | |||||
| * | | add __repr__ to x509.Extensions | Paul Kehrer | 2015-10-20 | 1 | -0/+14 |
| |/ | | | | | | | fix #2434 | ||||
| * | better place for this test | Alex Gaynor | 2015-10-19 | 2 | -7/+16 |
| | | |||||
| * | another test | Alex Gaynor | 2015-10-19 | 1 | -0/+7 |
| | | |||||
| * | removed unused code, and added a test | Alex Gaynor | 2015-10-19 | 1 | -12/+13 |
| | | |||||
| * | be more pro-active in handling invalid keys | Alex Gaynor | 2015-10-18 | 1 | -23/+27 |
| | | |||||
| * | unused | Alex Gaynor | 2015-10-17 | 1 | -6/+0 |
| | | |||||
| * | a refactor to the API | Alex Gaynor | 2015-10-17 | 3 | -76/+59 |
| | | |||||
| * | Add an Elliptic Curve Key Exchange Algorithm(ECDH) | Simo Sorce | 2015-10-17 | 3 | -3/+117 |
| | | | | | | | | | | | | | | | | | | The ECDH Key Exchange algorithm as standardized in NIST publication 800-56A Revision 2 Includes tests with vectors from NIST. Signed-off-by: Simo Sorce <simo@redhat.com> | ||||
| * | Fix load_kasvs_ecdh_vectors() COUNT sourcing | Simo Sorce | 2015-10-13 | 2 | -3/+3 |
| | | | | | | | | | | | | | | | | | | COUNT is a decimal number in test files, but was erroneously read and converted as if the source was a hexadecimal number. Fix the loader and test the fix. Signed-off-by: Simo Sorce <simo@redhat.com> | ||||
| * | Catch Invalid X or Y points and raise a ValueError | Simo Sorce | 2015-10-12 | 1 | -0/+29 |
| | | | | | | | | Signed-off-by: Simo Sorce <simo@redhat.com> | ||||
* | | Merge branch 'crl_ossl_backend' of github.com:etrauschke/cryptography into ↵ | Erik Trauschke | 2015-10-20 | 2 | -0/+258 |
|\ \ | |/ |/| | | | crl_ossl_backend | ||||
| * | removing caching mechanism for x509 properties | Erik Trauschke | 2015-10-15 | 1 | -19/+18 |
| | | | | | | | | | | | | undo name change of CRLExtensionOID use custom parsing mechanism for certIssuer entry extension add new crl to vectors for testing invalid certIssuer entry ext | ||||
| * | use X509ExtensionParser for Revoked extensions | Erik Trauschke | 2015-10-14 | 1 | -17/+12 |
| | | | | | | | | | | | | remove revoked_certificates property from RevokedCertificate class CRLExtensions should actually be RevokedExtensions doctest cleanup for RevokedCertificate | ||||
| * | fix indentations | Erik Trauschke | 2015-10-13 | 1 | -0/+3 |
| | | | | | | | | | | | | | | | | change docs to indicate CRL objects are iterable fix docs for revoked certs make _decode_crl_reason more readable add __getitem__ method to CRL object remove double underscores | ||||
| * | use openssl assert | Erik Trauschke | 2015-09-28 | 1 | -2/+5 |
| | | | | | | | | | | | | change _build* to _decode* make CRLs into iterators various fixes | ||||
| * | Merge branch 'master' into crl_ossl_backend | Erik Trauschke | 2015-09-28 | 1 | -19/+1 |
| |\ | |||||
| * \ | Merge branch 'crl_ossl_backend' of github.com:etrauschke/cryptography into ↵ | Erik Trauschke | 2015-09-28 | 2 | -0/+258 |
| |\ \ | | | | | | | | | | | | | crl_ossl_backend | ||||
| | * \ | Merge branch 'master' into crl_ossl_backend | Erik Trauschke | 2015-09-25 | 1 | -1/+6 |
| | |\ \ |