aboutsummaryrefslogtreecommitdiffstats
path: root/src/cryptography/hazmat
Commit message (Collapse)AuthorAgeFilesLines
...
* | | Correct the error string for a messageAlex Gaynor2016-02-281-1/+1
| | |
* | | sighAlex Gaynor2016-02-271-1/+0
| | |
* | | Write a function to write less codeAlex Gaynor2016-02-271-22/+20
| | |
* | | Fixed #2732 -- added support for x.509 policy constraints extensionAlex Gaynor2016-02-271-0/+24
| |/ |/|
* | treat the RSA struct more opaquely when getting public key valuesPaul Kehrer2016-02-021-3/+1
| |
* | Merge pull request #2684 from alex/deprecated-0.9.8Paul Kehrer2016-01-271-1/+9
|\ \ | | | | | | Formally deprecated support for OpenSSL 0.9.8
| * | Formally deprecated support for OpenSSL 0.9.8Alex Gaynor2016-01-221-1/+9
| | |
* | | Require a newer setuptools.Alex Gaynor2016-01-231-6/+1
|/ / | | | | | | This lets a long confusing comment.
* / Add docstring to cryptography.hazmatDaniƫl van Eeden2016-01-161-0/+6
|/ | | | | | This shows the warning which is in the docs if someone does this: >>>> import cryptography.hazmat >>>> help(cryptography.hazmat)
* move more functions out of the openssl backend classPaul Kehrer2016-01-103-77/+87
|
* move openssl asn1 decode functions to a new modulePaul Kehrer2016-01-103-710/+723
|
* remove duplicated memorybio namedtuplePaul Kehrer2016-01-101-4/+0
|
* move openssl asn1 encode functions to a new modulePaul Kehrer2016-01-102-587/+611
|
* Merge pull request #2646 from reaperhulk/static-callbacksAlex Gaynor2016-01-082-13/+43
|\ | | | | Static callbacks
| * Port callbacks to new static callbackChristian Heimes2016-01-072-14/+43
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | cffi 1.4.0 will introduce a new API to create static callbacks. Contrary to the old callback API, static callbacks no longer depend on libffi's dynamic code generation for closures. Static code has some benefits over dynamic generation. For example the code is faster. Also it doesn't need writeable and executable memory mappings, which makes it compatible with SELinux's deny execmem policy. The branch depends on PR #2488. https://bitbucket.org/cffi/cffi/issues/232/static-callbacks Closes: #2477 Signed-off-by: Christian Heimes <cheimes@redhat.com>
| * Change password callback to use userdata pointerChristian Heimes2016-01-071-0/+1
| | | | | | | | | | | | | | | | | | Instead of a closure the pem_password_cb now uses the void *userdata argument to exchange data with the callback function. It's a necessary step to port all callbacks to new static callbacks. See: #2477 Signed-off-by: Christian Heimes <christian@python.org>
* | Merge pull request #2647 from reaperhulk/opaque-evp-pkeyAlex Gaynor2016-01-081-9/+10
|\ \ | | | | | | opaque EVP_PKEY since EVP_PKEY_id exists
| * | add Cryptography_EVP_PKEY_idPaul Kehrer2016-01-071-4/+6
| | |
| * | opaque EVP_PKEY since EVP_PKEY_id existsPaul Kehrer2016-01-071-9/+8
| | |
* | | Merge pull request #2649 from reaperhulk/cleanup-namingAlex Gaynor2016-01-082-8/+8
|\ \ \ | |/ / |/| | rename _create_mem_bio to _create_mem_bio_gc for consistency
| * | rename _create_mem_bio to _create_mem_bio_gc for consistencyPaul Kehrer2016-01-072-8/+8
| |/
* / small cleanup to reduce code duplication for EVP_PKEY_new callsPaul Kehrer2016-01-071-7/+7
|/
* Merge pull request #2613 from reaperhulk/warn-on-openssl-lt-101Alex Gaynor2015-12-311-0/+9
|\ | | | | deprecationwarning for OpenSSL < 1.0.1 as upstream has dropped support
| * deprecationwarning for OpenSSL < 1.0.1 as upstream has dropped supportPaul Kehrer2015-12-311-0/+9
| |
* | support unrecognized extensions in x509Paul Kehrer2015-12-301-0/+9
|/
* RSA_R_OAEP_DECODING_ERROR is pretty ubiquitousPaul Kehrer2015-12-272-6/+1
|
* Add support for RSA_R_OAEP_DECODING_ERROR error flag.Christopher Grebs2015-12-272-0/+6
|
* Support EC and DSA signing of CRLs in the OpenSSL backendPaul Kehrer2015-12-271-10/+11
|
* fix a ptr liveness bugAlex Gaynor2015-12-271-2/+2
|
* Reduce duplication, write a functionAlex Gaynor2015-12-271-85/+39
|
* _encode_alt_name already does thisPaul Kehrer2015-12-271-15/+1
|
* move around a dictPaul Kehrer2015-12-271-17/+4
|
* support CRL entry extension encoding in the RevokedCertificateBuilderPaul Kehrer2015-12-271-3/+77
|
* Merge pull request #2589 from reaperhulk/dict-dict-dictAlex Gaynor2015-12-271-2/+28
|\ | | | | add a comment and a dict we need in #2582
| * add a comment and a dict we need in #2582Paul Kehrer2015-12-261-2/+28
| |
* | Simplify code slightly by adding a new bindingAlex Gaynor2015-12-261-4/+1
|/
* unused importAlex Gaynor2015-12-261-1/+0
|
* A handful of small cleanups and simplificationsAlex Gaynor2015-12-262-6/+4
|
* add invaliditydate class for crl entry extensionsPaul Kehrer2015-12-261-1/+3
|
* switch CRLReason to use a classPaul Kehrer2015-12-261-1/+1
|
* start switching the CRL entry extensions to be full-fledged classesPaul Kehrer2015-12-251-1/+1
| | | | first up: CertificateIssuer
* Merge pull request #2574 from reaperhulk/rename-crlextensionAlex Gaynor2015-12-251-6/+6
|\ | | | | rename CRLExtensionOID to CRLEntryExtensionOID
| * rename CRLExtensionOID to CRLEntryExtensionOIDPaul Kehrer2015-12-251-6/+6
| |
* | X509_REVOKED_dup isn't available everywhere, we get to define our ownPaul Kehrer2015-12-251-1/+3
| |
* | support revoked certificates in CertificateRevocationListBuilderPaul Kehrer2015-12-251-0/+9
|/
* RevokedCertificateBuilderPaul Kehrer2015-12-251-2/+19
|
* add create_x509_revoked_certificate to x509backend interfacePaul Kehrer2015-12-253-0/+19
|
* use _create_x509_extensions in create_x509_crlPaul Kehrer2015-12-251-20/+8
|
* add extension support to the CRLBuilderPaul Kehrer2015-12-251-1/+41
|
* a different approach to refactoring the x509 extension additionPaul Kehrer2015-12-241-21/+24
|