aboutsummaryrefslogtreecommitdiffstats
path: root/src/cryptography/hazmat
Commit message (Collapse)AuthorAgeFilesLines
...
* | Fixed #2747 -- allow creating x509 exts with unknown extensionsAlex Gaynor2016-03-142-33/+55
| |
* | Merge pull request #2824 from reaperhulk/110-patch-34Alex Gaynor2016-03-141-2/+0
|\ \ | | | | | | remove some EC functions we don't use
| * | no need to conditionally remove what isn't therePaul Kehrer2016-03-131-2/+0
| | |
* | | wrong assertPaul Kehrer2016-03-131-1/+1
| | |
* | | support PolicyConstraints in the CertificateBuilderPaul Kehrer2016-03-131-0/+18
|/ /
* | Merge pull request #2809 from reaperhulk/110-patch-28Alex Gaynor2016-03-131-10/+34
|\ \ | | | | | | add 5 accessor functions that exist in 1.1.0 to help opaque x509 structs
| * | add 5 accessor functions that exist in 1.1.0 to help opaque x509 structsPaul Kehrer2016-03-111-10/+34
| | | | | | | | | | | | | | | | | | | | | | | | | | | X509_REVOKED_get0_serialNumber X509_REVOKED_get0_revocationDate X509_CRL_get0_signature i2d_re_X509_REQ_tbs i2d_re_X509_CRL_tbs X509_REQ_get0_signature
* | | Merge pull request #2818 from reaperhulk/simplify-extension-creationAlex Gaynor2016-03-132-67/+48
|\ \ \ | | | | | | | | simplify extension creation by using X509V3_EXT_i2d
| * | | support openssl 0.9.8's nonsense hopefullyPaul Kehrer2016-03-131-1/+26
| | | |
| * | | also bytes.Paul Kehrer2016-03-131-1/+3
| | | |
| * | | bytes, my nemesisPaul Kehrer2016-03-131-1/+1
| | | |
| * | | simplify extension creation by using X509V3_EXT_i2dPaul Kehrer2016-03-132-69/+23
| | | |
* | | | Merge pull request #2802 from reaperhulk/110-patch-23Alex Gaynor2016-03-131-4/+13
|\ \ \ \ | |/ / / |/| | | move crypto_ex_data to macros, add i2d_re_X509_tbs & X509_get0_signature
| * | | move crypto_ex_data to macros, add i2d_re_X509_tbs & X509_get0_signaturePaul Kehrer2016-03-101-4/+13
| | | | | | | | | | | | | | | | | | | | | | | | And, of course, use them in the openssl bindings. These changes are a start towards opaquing all the X509 structs. The actual opaquing won't take place until the very end though to minimize pyOpenSSL breakage
* | | | Merge pull request #2815 from reaperhulk/error-on-unusual-encodingsAlex Gaynor2016-03-121-1/+5
|\ \ \ \ | | | | | | | | | | Error on unusual encodings
| * | | | move NUMERICSTRING certificate test to test_openssl & make it more specificPaul Kehrer2016-03-121-1/+1
| | | | |
| * | | | raise type error rather than internalerror w/ unsupported asn1 in subjectPaul Kehrer2016-03-121-1/+5
| | | | |
* | | | | Merge pull request #2807 from reaperhulk/110-patch-26Alex Gaynor2016-03-121-0/+10
|\ \ \ \ \ | | | | | | | | | | | | conditionally bind/remove the SSL_ST/TLS_ST state machine statuses
| * | | | | conditionally bind/remove the SSL_ST/TLS_ST state machine statusesPaul Kehrer2016-03-111-0/+10
| | |_|/ / | |/| | |
* | | | | Merge pull request #2794 from reaperhulk/110-patch-15Alex Gaynor2016-03-121-7/+6
|\ \ \ \ \ | | | | | | | | | | | | opaque HMAC_CTX, which requires some helper functions
| * | | | | opaque HMAC_CTX, which requires some helper functionsPaul Kehrer2016-03-091-7/+6
| | | | | |
* | | | | | Merge pull request #2812 from reaperhulk/fix-2717Alex Gaynor2016-03-121-0/+7
|\ \ \ \ \ \ | |_|_|/ / / |/| | | | | make multibackend error with an empty list.
| * | | | | parensPaul Kehrer2016-03-111-1/+1
| | | | | |
| * | | | | make multibackend error with an empty list. fixes #2717Paul Kehrer2016-03-111-0/+7
| | |/ / / | |/| | |
* | | | | Merge pull request #2805 from reaperhulk/110-patch-25Alex Gaynor2016-03-111-3/+6
|\ \ \ \ \ | | | | | | | | | | | | modify how revocation date is set on X509_REVOKED in the openssl backend
| * | | | | modify how revocation date is set on X509_REVOKED in the openssl backendPaul Kehrer2016-03-101-3/+6
| |/ / / / | | | | | | | | | | | | | | | | | | | | | | | | | In OpenSSL 1.1.0 there isn't a pre-existing ASN1_TIME object so we have ASN1_TIME_set make us a new one. In older OpenSSLs this is still safe because ASN1_TIME_set checks and frees any current value in the object.
* | | | | Merge pull request #2800 from reaperhulk/110-patch-21Alex Gaynor2016-03-111-7/+6
|\ \ \ \ \ | |/ / / / |/| | | | opaque EVP_MD_CTX and wrap EVP_MD_CTX_new + EVP_MD_CTX_free
| * | | | opaque EVP_MD_CTX and wrap EVP_MD_CTX_new + EVP_MD_CTX_freePaul Kehrer2016-03-101-7/+6
| | |/ / | |/| |
* | | | Merge pull request #2798 from reaperhulk/110-patch-19Alex Gaynor2016-03-101-3/+6
|\ \ \ \ | |/ / / |/| | | opaque X509_EXTENSION
| * | | opaque X509_EXTENSIONPaul Kehrer2016-03-091-3/+6
| |/ /
* / / opaque X509_NAMEPaul Kehrer2016-03-091-13/+30
|/ /
* | Merge pull request #2782 from reaperhulk/110-patch-6Alex Gaynor2016-03-091-1/+1
|\ \ | | | | | | SSLeay begone
| * | SSLeay begonePaul Kehrer2016-03-091-1/+1
| | | | | | | | | | | | | | | | | | | | | In OpenSSL 1.1.0 SSLeay is no longer a thing. Farewell Except not really farewell because we define them all again because old versions of pyOpenSSL will choke otherwise
* | | Merge pull request #2788 from reaperhulk/110-patch-9Alex Gaynor2016-03-091-7/+0
|\ \ \ | | | | | | | | ECDSA functions we don't use that aren't in 1.1.0
| * | | ECDSA functions we don't use that aren't in 1.1.0Paul Kehrer2016-03-091-7/+0
| |/ /
* / / we don't need to remove things that no longer existPaul Kehrer2016-03-091-3/+0
|/ /
* | Merge pull request #2774 from reaperhulk/improve-unknown-errorAlex Gaynor2016-03-091-4/+23
|\ \ | | | | | | improve the messages from openssl InternalError
| * | review feedback + make the test actually test a thingPaul Kehrer2016-03-071-3/+3
| | |
| * | only call ERR_error_string if we're going to raise InternalErrorPaul Kehrer2016-03-071-11/+21
| | |
| * | improve the messages from openssl InternalErrorPaul Kehrer2016-03-071-5/+14
| | |
* | | In OpenSSL 1.1.0 AES_ctr128_encrypt no longer existsPaul Kehrer2016-03-081-0/+3
|/ / | | | | | | This is OpenSSL 1.1.0 compatibility patch 1 of n
* | improved languagePaul Kehrer2016-03-071-1/+1
| |
* | require mode nonce/iv/tag data to be bytesPaul Kehrer2016-03-071-0/+21
| |
* | Merge pull request #2767 from alex/delete-softwarePaul Kehrer2016-03-061-12/+2
|\ \ | | | | | | We wrote a function, now use it
| * | We wrote a function, now use itAlex Gaynor2016-03-061-12/+2
| | |
* | | Merge pull request #2670 from joernheissler/x509_req_verifyPaul Kehrer2016-03-061-0/+13
|\ \ \ | |/ / |/| | Add verify method on CertificateSigningRequest
| * | Change method to propertyJoern Heissler2016-01-181-3/+6
| | |
| * | Add verify method on CertificateSigningRequestJoern Heissler2016-01-131-1/+11
| | |
* | | move keyAlex Gaynor2016-03-051-1/+1
| | |
* | | added the correct error handling for the failing testAlex Gaynor2016-03-051-0/+4
| | |