Commit message (Collapse) | Author | Age | Files | Lines | ||
---|---|---|---|---|---|---|
... | ||||||
* | | | Correct the error string for a message | Alex Gaynor | 2016-02-28 | 1 | -1/+1 | |
| | | | ||||||
* | | | sigh | Alex Gaynor | 2016-02-27 | 1 | -1/+0 | |
| | | | ||||||
* | | | Write a function to write less code | Alex Gaynor | 2016-02-27 | 1 | -22/+20 | |
| | | | ||||||
* | | | Fixed #2732 -- added support for x.509 policy constraints extension | Alex Gaynor | 2016-02-27 | 1 | -0/+24 | |
| |/ |/| | ||||||
* | | treat the RSA struct more opaquely when getting public key values | Paul Kehrer | 2016-02-02 | 1 | -3/+1 | |
| | | ||||||
* | | Merge pull request #2684 from alex/deprecated-0.9.8 | Paul Kehrer | 2016-01-27 | 1 | -1/+9 | |
|\ \ | | | | | | | Formally deprecated support for OpenSSL 0.9.8 | |||||
| * | | Formally deprecated support for OpenSSL 0.9.8 | Alex Gaynor | 2016-01-22 | 1 | -1/+9 | |
| | | | ||||||
* | | | Require a newer setuptools. | Alex Gaynor | 2016-01-23 | 1 | -6/+1 | |
|/ / | | | | | | | This lets a long confusing comment. | |||||
* / | Add docstring to cryptography.hazmat | Daniƫl van Eeden | 2016-01-16 | 1 | -0/+6 | |
|/ | | | | | | This shows the warning which is in the docs if someone does this: >>>> import cryptography.hazmat >>>> help(cryptography.hazmat) | |||||
* | move more functions out of the openssl backend class | Paul Kehrer | 2016-01-10 | 3 | -77/+87 | |
| | ||||||
* | move openssl asn1 decode functions to a new module | Paul Kehrer | 2016-01-10 | 3 | -710/+723 | |
| | ||||||
* | remove duplicated memorybio namedtuple | Paul Kehrer | 2016-01-10 | 1 | -4/+0 | |
| | ||||||
* | move openssl asn1 encode functions to a new module | Paul Kehrer | 2016-01-10 | 2 | -587/+611 | |
| | ||||||
* | Merge pull request #2646 from reaperhulk/static-callbacks | Alex Gaynor | 2016-01-08 | 2 | -13/+43 | |
|\ | | | | | Static callbacks | |||||
| * | Port callbacks to new static callback | Christian Heimes | 2016-01-07 | 2 | -14/+43 | |
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | cffi 1.4.0 will introduce a new API to create static callbacks. Contrary to the old callback API, static callbacks no longer depend on libffi's dynamic code generation for closures. Static code has some benefits over dynamic generation. For example the code is faster. Also it doesn't need writeable and executable memory mappings, which makes it compatible with SELinux's deny execmem policy. The branch depends on PR #2488. https://bitbucket.org/cffi/cffi/issues/232/static-callbacks Closes: #2477 Signed-off-by: Christian Heimes <cheimes@redhat.com> | |||||
| * | Change password callback to use userdata pointer | Christian Heimes | 2016-01-07 | 1 | -0/+1 | |
| | | | | | | | | | | | | | | | | | | Instead of a closure the pem_password_cb now uses the void *userdata argument to exchange data with the callback function. It's a necessary step to port all callbacks to new static callbacks. See: #2477 Signed-off-by: Christian Heimes <christian@python.org> | |||||
* | | Merge pull request #2647 from reaperhulk/opaque-evp-pkey | Alex Gaynor | 2016-01-08 | 1 | -9/+10 | |
|\ \ | | | | | | | opaque EVP_PKEY since EVP_PKEY_id exists | |||||
| * | | add Cryptography_EVP_PKEY_id | Paul Kehrer | 2016-01-07 | 1 | -4/+6 | |
| | | | ||||||
| * | | opaque EVP_PKEY since EVP_PKEY_id exists | Paul Kehrer | 2016-01-07 | 1 | -9/+8 | |
| | | | ||||||
* | | | Merge pull request #2649 from reaperhulk/cleanup-naming | Alex Gaynor | 2016-01-08 | 2 | -8/+8 | |
|\ \ \ | |/ / |/| | | rename _create_mem_bio to _create_mem_bio_gc for consistency | |||||
| * | | rename _create_mem_bio to _create_mem_bio_gc for consistency | Paul Kehrer | 2016-01-07 | 2 | -8/+8 | |
| |/ | ||||||
* / | small cleanup to reduce code duplication for EVP_PKEY_new calls | Paul Kehrer | 2016-01-07 | 1 | -7/+7 | |
|/ | ||||||
* | Merge pull request #2613 from reaperhulk/warn-on-openssl-lt-101 | Alex Gaynor | 2015-12-31 | 1 | -0/+9 | |
|\ | | | | | deprecationwarning for OpenSSL < 1.0.1 as upstream has dropped support | |||||
| * | deprecationwarning for OpenSSL < 1.0.1 as upstream has dropped support | Paul Kehrer | 2015-12-31 | 1 | -0/+9 | |
| | | ||||||
* | | support unrecognized extensions in x509 | Paul Kehrer | 2015-12-30 | 1 | -0/+9 | |
|/ | ||||||
* | RSA_R_OAEP_DECODING_ERROR is pretty ubiquitous | Paul Kehrer | 2015-12-27 | 2 | -6/+1 | |
| | ||||||
* | Add support for RSA_R_OAEP_DECODING_ERROR error flag. | Christopher Grebs | 2015-12-27 | 2 | -0/+6 | |
| | ||||||
* | Support EC and DSA signing of CRLs in the OpenSSL backend | Paul Kehrer | 2015-12-27 | 1 | -10/+11 | |
| | ||||||
* | fix a ptr liveness bug | Alex Gaynor | 2015-12-27 | 1 | -2/+2 | |
| | ||||||
* | Reduce duplication, write a function | Alex Gaynor | 2015-12-27 | 1 | -85/+39 | |
| | ||||||
* | _encode_alt_name already does this | Paul Kehrer | 2015-12-27 | 1 | -15/+1 | |
| | ||||||
* | move around a dict | Paul Kehrer | 2015-12-27 | 1 | -17/+4 | |
| | ||||||
* | support CRL entry extension encoding in the RevokedCertificateBuilder | Paul Kehrer | 2015-12-27 | 1 | -3/+77 | |
| | ||||||
* | Merge pull request #2589 from reaperhulk/dict-dict-dict | Alex Gaynor | 2015-12-27 | 1 | -2/+28 | |
|\ | | | | | add a comment and a dict we need in #2582 | |||||
| * | add a comment and a dict we need in #2582 | Paul Kehrer | 2015-12-26 | 1 | -2/+28 | |
| | | ||||||
* | | Simplify code slightly by adding a new binding | Alex Gaynor | 2015-12-26 | 1 | -4/+1 | |
|/ | ||||||
* | unused import | Alex Gaynor | 2015-12-26 | 1 | -1/+0 | |
| | ||||||
* | A handful of small cleanups and simplifications | Alex Gaynor | 2015-12-26 | 2 | -6/+4 | |
| | ||||||
* | add invaliditydate class for crl entry extensions | Paul Kehrer | 2015-12-26 | 1 | -1/+3 | |
| | ||||||
* | switch CRLReason to use a class | Paul Kehrer | 2015-12-26 | 1 | -1/+1 | |
| | ||||||
* | start switching the CRL entry extensions to be full-fledged classes | Paul Kehrer | 2015-12-25 | 1 | -1/+1 | |
| | | | | first up: CertificateIssuer | |||||
* | Merge pull request #2574 from reaperhulk/rename-crlextension | Alex Gaynor | 2015-12-25 | 1 | -6/+6 | |
|\ | | | | | rename CRLExtensionOID to CRLEntryExtensionOID | |||||
| * | rename CRLExtensionOID to CRLEntryExtensionOID | Paul Kehrer | 2015-12-25 | 1 | -6/+6 | |
| | | ||||||
* | | X509_REVOKED_dup isn't available everywhere, we get to define our own | Paul Kehrer | 2015-12-25 | 1 | -1/+3 | |
| | | ||||||
* | | support revoked certificates in CertificateRevocationListBuilder | Paul Kehrer | 2015-12-25 | 1 | -0/+9 | |
|/ | ||||||
* | RevokedCertificateBuilder | Paul Kehrer | 2015-12-25 | 1 | -2/+19 | |
| | ||||||
* | add create_x509_revoked_certificate to x509backend interface | Paul Kehrer | 2015-12-25 | 3 | -0/+19 | |
| | ||||||
* | use _create_x509_extensions in create_x509_crl | Paul Kehrer | 2015-12-25 | 1 | -20/+8 | |
| | ||||||
* | add extension support to the CRLBuilder | Paul Kehrer | 2015-12-25 | 1 | -1/+41 | |
| | ||||||
* | a different approach to refactoring the x509 extension addition | Paul Kehrer | 2015-12-24 | 1 | -21/+24 | |
| |