Commit message (Collapse) | Author | Age | Files | Lines | ||
---|---|---|---|---|---|---|
... | ||||||
* | | Fixed #2747 -- allow creating x509 exts with unknown extensions | Alex Gaynor | 2016-03-14 | 2 | -33/+55 | |
| | | ||||||
* | | Merge pull request #2824 from reaperhulk/110-patch-34 | Alex Gaynor | 2016-03-14 | 1 | -2/+0 | |
|\ \ | | | | | | | remove some EC functions we don't use | |||||
| * | | no need to conditionally remove what isn't there | Paul Kehrer | 2016-03-13 | 1 | -2/+0 | |
| | | | ||||||
* | | | wrong assert | Paul Kehrer | 2016-03-13 | 1 | -1/+1 | |
| | | | ||||||
* | | | support PolicyConstraints in the CertificateBuilder | Paul Kehrer | 2016-03-13 | 1 | -0/+18 | |
|/ / | ||||||
* | | Merge pull request #2809 from reaperhulk/110-patch-28 | Alex Gaynor | 2016-03-13 | 1 | -10/+34 | |
|\ \ | | | | | | | add 5 accessor functions that exist in 1.1.0 to help opaque x509 structs | |||||
| * | | add 5 accessor functions that exist in 1.1.0 to help opaque x509 structs | Paul Kehrer | 2016-03-11 | 1 | -10/+34 | |
| | | | | | | | | | | | | | | | | | | | | | | | | | | | X509_REVOKED_get0_serialNumber X509_REVOKED_get0_revocationDate X509_CRL_get0_signature i2d_re_X509_REQ_tbs i2d_re_X509_CRL_tbs X509_REQ_get0_signature | |||||
* | | | Merge pull request #2818 from reaperhulk/simplify-extension-creation | Alex Gaynor | 2016-03-13 | 2 | -67/+48 | |
|\ \ \ | | | | | | | | | simplify extension creation by using X509V3_EXT_i2d | |||||
| * | | | support openssl 0.9.8's nonsense hopefully | Paul Kehrer | 2016-03-13 | 1 | -1/+26 | |
| | | | | ||||||
| * | | | also bytes. | Paul Kehrer | 2016-03-13 | 1 | -1/+3 | |
| | | | | ||||||
| * | | | bytes, my nemesis | Paul Kehrer | 2016-03-13 | 1 | -1/+1 | |
| | | | | ||||||
| * | | | simplify extension creation by using X509V3_EXT_i2d | Paul Kehrer | 2016-03-13 | 2 | -69/+23 | |
| | | | | ||||||
* | | | | Merge pull request #2802 from reaperhulk/110-patch-23 | Alex Gaynor | 2016-03-13 | 1 | -4/+13 | |
|\ \ \ \ | |/ / / |/| | | | move crypto_ex_data to macros, add i2d_re_X509_tbs & X509_get0_signature | |||||
| * | | | move crypto_ex_data to macros, add i2d_re_X509_tbs & X509_get0_signature | Paul Kehrer | 2016-03-10 | 1 | -4/+13 | |
| | | | | | | | | | | | | | | | | | | | | | | | | And, of course, use them in the openssl bindings. These changes are a start towards opaquing all the X509 structs. The actual opaquing won't take place until the very end though to minimize pyOpenSSL breakage | |||||
* | | | | Merge pull request #2815 from reaperhulk/error-on-unusual-encodings | Alex Gaynor | 2016-03-12 | 1 | -1/+5 | |
|\ \ \ \ | | | | | | | | | | | Error on unusual encodings | |||||
| * | | | | move NUMERICSTRING certificate test to test_openssl & make it more specific | Paul Kehrer | 2016-03-12 | 1 | -1/+1 | |
| | | | | | ||||||
| * | | | | raise type error rather than internalerror w/ unsupported asn1 in subject | Paul Kehrer | 2016-03-12 | 1 | -1/+5 | |
| | | | | | ||||||
* | | | | | Merge pull request #2807 from reaperhulk/110-patch-26 | Alex Gaynor | 2016-03-12 | 1 | -0/+10 | |
|\ \ \ \ \ | | | | | | | | | | | | | conditionally bind/remove the SSL_ST/TLS_ST state machine statuses | |||||
| * | | | | | conditionally bind/remove the SSL_ST/TLS_ST state machine statuses | Paul Kehrer | 2016-03-11 | 1 | -0/+10 | |
| | |_|/ / | |/| | | | ||||||
* | | | | | Merge pull request #2794 from reaperhulk/110-patch-15 | Alex Gaynor | 2016-03-12 | 1 | -7/+6 | |
|\ \ \ \ \ | | | | | | | | | | | | | opaque HMAC_CTX, which requires some helper functions | |||||
| * | | | | | opaque HMAC_CTX, which requires some helper functions | Paul Kehrer | 2016-03-09 | 1 | -7/+6 | |
| | | | | | | ||||||
* | | | | | | Merge pull request #2812 from reaperhulk/fix-2717 | Alex Gaynor | 2016-03-12 | 1 | -0/+7 | |
|\ \ \ \ \ \ | |_|_|/ / / |/| | | | | | make multibackend error with an empty list. | |||||
| * | | | | | parens | Paul Kehrer | 2016-03-11 | 1 | -1/+1 | |
| | | | | | | ||||||
| * | | | | | make multibackend error with an empty list. fixes #2717 | Paul Kehrer | 2016-03-11 | 1 | -0/+7 | |
| | |/ / / | |/| | | | ||||||
* | | | | | Merge pull request #2805 from reaperhulk/110-patch-25 | Alex Gaynor | 2016-03-11 | 1 | -3/+6 | |
|\ \ \ \ \ | | | | | | | | | | | | | modify how revocation date is set on X509_REVOKED in the openssl backend | |||||
| * | | | | | modify how revocation date is set on X509_REVOKED in the openssl backend | Paul Kehrer | 2016-03-10 | 1 | -3/+6 | |
| |/ / / / | | | | | | | | | | | | | | | | | | | | | | | | | | In OpenSSL 1.1.0 there isn't a pre-existing ASN1_TIME object so we have ASN1_TIME_set make us a new one. In older OpenSSLs this is still safe because ASN1_TIME_set checks and frees any current value in the object. | |||||
* | | | | | Merge pull request #2800 from reaperhulk/110-patch-21 | Alex Gaynor | 2016-03-11 | 1 | -7/+6 | |
|\ \ \ \ \ | |/ / / / |/| | | | | opaque EVP_MD_CTX and wrap EVP_MD_CTX_new + EVP_MD_CTX_free | |||||
| * | | | | opaque EVP_MD_CTX and wrap EVP_MD_CTX_new + EVP_MD_CTX_free | Paul Kehrer | 2016-03-10 | 1 | -7/+6 | |
| | |/ / | |/| | | ||||||
* | | | | Merge pull request #2798 from reaperhulk/110-patch-19 | Alex Gaynor | 2016-03-10 | 1 | -3/+6 | |
|\ \ \ \ | |/ / / |/| | | | opaque X509_EXTENSION | |||||
| * | | | opaque X509_EXTENSION | Paul Kehrer | 2016-03-09 | 1 | -3/+6 | |
| |/ / | ||||||
* / / | opaque X509_NAME | Paul Kehrer | 2016-03-09 | 1 | -13/+30 | |
|/ / | ||||||
* | | Merge pull request #2782 from reaperhulk/110-patch-6 | Alex Gaynor | 2016-03-09 | 1 | -1/+1 | |
|\ \ | | | | | | | SSLeay begone | |||||
| * | | SSLeay begone | Paul Kehrer | 2016-03-09 | 1 | -1/+1 | |
| | | | | | | | | | | | | | | | | | | | | | In OpenSSL 1.1.0 SSLeay is no longer a thing. Farewell Except not really farewell because we define them all again because old versions of pyOpenSSL will choke otherwise | |||||
* | | | Merge pull request #2788 from reaperhulk/110-patch-9 | Alex Gaynor | 2016-03-09 | 1 | -7/+0 | |
|\ \ \ | | | | | | | | | ECDSA functions we don't use that aren't in 1.1.0 | |||||
| * | | | ECDSA functions we don't use that aren't in 1.1.0 | Paul Kehrer | 2016-03-09 | 1 | -7/+0 | |
| |/ / | ||||||
* / / | we don't need to remove things that no longer exist | Paul Kehrer | 2016-03-09 | 1 | -3/+0 | |
|/ / | ||||||
* | | Merge pull request #2774 from reaperhulk/improve-unknown-error | Alex Gaynor | 2016-03-09 | 1 | -4/+23 | |
|\ \ | | | | | | | improve the messages from openssl InternalError | |||||
| * | | review feedback + make the test actually test a thing | Paul Kehrer | 2016-03-07 | 1 | -3/+3 | |
| | | | ||||||
| * | | only call ERR_error_string if we're going to raise InternalError | Paul Kehrer | 2016-03-07 | 1 | -11/+21 | |
| | | | ||||||
| * | | improve the messages from openssl InternalError | Paul Kehrer | 2016-03-07 | 1 | -5/+14 | |
| | | | ||||||
* | | | In OpenSSL 1.1.0 AES_ctr128_encrypt no longer exists | Paul Kehrer | 2016-03-08 | 1 | -0/+3 | |
|/ / | | | | | | | This is OpenSSL 1.1.0 compatibility patch 1 of n | |||||
* | | improved language | Paul Kehrer | 2016-03-07 | 1 | -1/+1 | |
| | | ||||||
* | | require mode nonce/iv/tag data to be bytes | Paul Kehrer | 2016-03-07 | 1 | -0/+21 | |
| | | ||||||
* | | Merge pull request #2767 from alex/delete-software | Paul Kehrer | 2016-03-06 | 1 | -12/+2 | |
|\ \ | | | | | | | We wrote a function, now use it | |||||
| * | | We wrote a function, now use it | Alex Gaynor | 2016-03-06 | 1 | -12/+2 | |
| | | | ||||||
* | | | Merge pull request #2670 from joernheissler/x509_req_verify | Paul Kehrer | 2016-03-06 | 1 | -0/+13 | |
|\ \ \ | |/ / |/| | | Add verify method on CertificateSigningRequest | |||||
| * | | Change method to property | Joern Heissler | 2016-01-18 | 1 | -3/+6 | |
| | | | ||||||
| * | | Add verify method on CertificateSigningRequest | Joern Heissler | 2016-01-13 | 1 | -1/+11 | |
| | | | ||||||
* | | | move key | Alex Gaynor | 2016-03-05 | 1 | -1/+1 | |
| | | | ||||||
* | | | added the correct error handling for the failing test | Alex Gaynor | 2016-03-05 | 1 | -0/+4 | |
| | | |