aboutsummaryrefslogtreecommitdiffstats
path: root/tests
Commit message (Collapse)AuthorAgeFilesLines
* Enforce signature type in ECDSA and add testsStanisław Pitucha2015-08-123-0/+31
| | | | | Ensure that ECDSA signatures are bytes to match RSA/DSA and add tests for all three.
* switch tests to use ExtensionOID namespacePaul Kehrer2015-08-102-94/+96
|
* switch tests to use NameOIDPaul Kehrer2015-08-102-237/+239
|
* Merge pull request #2233 from reaperhulk/encode-nocheckAlex Gaynor2015-08-091-0/+30
|\ | | | | add support for OCSPNoCheck to the CertificateBuilder
| * add support for OCSPNoCheck to the CertificateBuilderPaul Kehrer2015-08-091-0/+30
| |
* | pep8 fixPaul Kehrer2015-08-091-2/+0
| |
* | move a testPaul Kehrer2015-08-092-26/+23
| |
* | support issuer alternative name encodingPaul Kehrer2015-08-092-2/+49
|/
* simplify the CSRBuilderPaul Kehrer2015-08-081-9/+6
|
* remove a lot of if/elif chains in the certificate builderPaul Kehrer2015-08-081-2/+2
|
* fix unsupported testPaul Kehrer2015-08-081-1/+1
|
* support InhibitAnyPolicy in CertificateBuilderPaul Kehrer2015-08-081-0/+30
|
* add support for AuthorityKeyIdentifier in CertificateBuilderPaul Kehrer2015-08-081-0/+76
|
* Merge pull request #2210 from reaperhulk/aki-classmethodAlex Gaynor2015-08-081-0/+19
|\ | | | | AuthorityKeyIdentifier classmethod
| * add AuthorityKeyIdentifier from_issuer_public_keyPaul Kehrer2015-08-081-0/+19
| | | | | | | | | | Refactored SKI's creation code into a separate function, added doctest examples
* | add support for encoding SubjectKeyIdentifier to CertificateBuilderPaul Kehrer2015-08-081-0/+36
|/
* Merge pull request #2204 from reaperhulk/ski-classmethodAlex Gaynor2015-08-081-3/+60
|\ | | | | SubjectKeyIdentifier classmethod
| * rename to classmethod to from_public_keyPaul Kehrer2015-08-051-6/+6
| |
| * add SubjectKeyIdentifier.create_from_public_keyPaul Kehrer2015-08-051-3/+60
| |
* | modify a CRL encode test to have multiple full_namesPaul Kehrer2015-08-081-3/+8
| |
* | add missing testPaul Kehrer2015-08-081-0/+25
| |
* | support CRLDistributionPoints in the CertificateBuilderPaul Kehrer2015-08-081-0/+118
| |
* | rename sign_x509_certificate backend method to create_x509_certificatePaul Kehrer2015-08-062-4/+4
| |
* | fix a few tests that were missedPaul Kehrer2015-08-052-0/+28
| |
* | check that required fields are present in builder when signingPaul Kehrer2015-08-041-0/+121
|/
* Merge pull request #2180 from reaperhulk/easy-conditional-fixDonald Stufft2015-08-041-0/+18
|\ | | | | create a ConditionalLibrary and remove unsupported items
| * add test for conditional removalPaul Kehrer2015-08-011-0/+18
| |
* | Merge pull request #2193 from reaperhulk/encode-aiaAlex Gaynor2015-08-031-0/+43
|\ \ | | | | | | Support AuthorityInformationAccess in CertificateBuilder
| * | add support for AIA to CertificateBuilder and OpenSSL backendPaul Kehrer2015-08-031-0/+43
| | |
* | | Fixes #2199 -- allow SSH keys to have spaces in their commentsAlex Gaynor2015-08-031-6/+4
| | |
* | | support keyusage and extendedkeyusage in certificatebuilderPaul Kehrer2015-08-031-0/+89
|/ /
* | missed onePaul Kehrer2015-08-031-1/+1
| |
* | reorder CertificateBuilder sign argumentsPaul Kehrer2015-08-031-7/+7
| |
* | Merge remote-tracking branch 'upstream/master' into cert-builderIan Cordasco2015-08-036-39/+176
|\ \
| * \ Merge pull request #2186 from reaperhulk/handle-corrupt-extensionsAlex Gaynor2015-08-011-0/+15
| |\ \ | | | | | | | | Handle invalid x509 extension payloads
| | * | corrupt -> invalidPaul Kehrer2015-08-011-1/+1
| | | |
| | * | check if the extension decoded to internal openssl reprPaul Kehrer2015-08-011-0/+15
| | | | | | | | | | | | | | | | ...and if not, raise an error (plus consume the error stack)
| * | | Merge pull request #2184 from reaperhulk/remove-more-branchesAlex Gaynor2015-08-012-7/+9
| |\ \ \ | | |/ / | |/| | Branch coverage to 100%
| | * | add test to cover partial branch in load_kasvs_ecdh_vectorsPaul Kehrer2015-08-011-0/+4
| | | | | | | | | | | | | | | | The loop to find supported parameter sets is partially covered otherwise
| | * | remove some more branching in the vector loadersPaul Kehrer2015-08-011-7/+4
| | | |
| | * | add a line for the ecdh vector loader to cover a missed branchPaul Kehrer2015-08-011-0/+1
| | |/
| * | this is gonna be unicode nowPaul Kehrer2015-08-011-3/+3
| | |
| * | move urandom engine testPaul Kehrer2015-08-012-30/+27
| |/ | | | | | | | | | | | | | | | | | | This test was in the bindings dir, which is incorrect. We do not set the urandom engine to default unless the openssl backend is loaded. The reason the test wasn't failing (even in the random test case) is that the backends are loaded during pytest_generate_tests by a call to _available_backends. So no matter what order it occurred in the engine was already set to default. I discovered this when I tried to run the test_openssl.py bindings tests directly via pytest. Hooray global state.
| * py3 fixin'Paul Kehrer2015-07-251-1/+1
| |
| * handle RSA key too small and consume errors on CSR signature failurePaul Kehrer2015-07-251-0/+13
| |
| * Support encoding ExtendedKeyUsage into certificate signing requestsPaul Kehrer2015-07-231-0/+23
| |
| * Support encoding KeyUsage into certificate signing requestsPaul Kehrer2015-07-231-2/+64
| |
| * when building a CSR adding > 1 extension would trigger a bugPaul Kehrer2015-07-231-0/+25
| | | | | | | | | | | | We were checking sk_X509_EXTENSION_push for a value == 1, but in reality it returns the number of extensions on the stack. We now assert >= 1 and added a test.
* | Add test coverage for MultiBackend.sign_x509_certificateIan Cordasco2015-08-021-0/+8
| |
* | Add note to serial_number parameter about entropyIan Cordasco2015-08-021-11/+3
| | | | | | | | | | | | | | | | | | | | - Add reference to random-numbers.rst for easy intra-linking - Document critical parameter of CertificateBuilder.add_extension - Support InhibitAnyPolicy in the CertificateBuilder frontend but not in the backend - Slim down more tests - Fix up test that asserts the backend does not allow for unsupported extensions