aboutsummaryrefslogtreecommitdiffstats
path: root/src/cryptography/hazmat
Commit message (Collapse)AuthorAgeFilesLines
...
| * | use new constantGlyph2015-06-261-1/+1
| | |
| * | a place for a couple of new constants to liveGlyph2015-06-261-0/+2
| | |
* | | fix a memory leak in basic constraints encodingPaul Kehrer2015-06-281-0/+3
| | |
* | | Merge pull request #2086 from alex/unify-parse-extensionsPaul Kehrer2015-06-281-80/+71
|\ \ \ | | | | | | | | Initial stab at unifying the extension parsing code fro CSRs and certificates
| * | | use a dict hereAlex Gaynor2015-06-281-24/+24
| | | |
| * | | Factor this code out.Alex Gaynor2015-06-281-40/+35
| | | |
| * | | Initial stab at unifying the extension parsing code fro CSRs and certificatesAlex Gaynor2015-06-281-79/+75
| | |/ | |/|
* / | move int_from_bytes so we can use it elsewherePaul Kehrer2015-06-271-23/+9
|/ /
* | Improvemed branch coverage for ssh public key loadingAlex Gaynor2015-06-272-8/+6
| |
* | Merge pull request #2076 from alex/more-branch-coveragePaul Kehrer2015-06-271-8/+6
|\ \ | | | | | | More branch coverage improvements. By virtue of reorganization and a new test
| * | More branch coverage improvements. By virtue of reorganization and a new testAlex Gaynor2015-06-271-8/+6
| | |
* | | Reorganized some code to improve branch coverageAlex Gaynor2015-06-271-6/+6
|/ /
* | Fixed #2067 -- raise an error if a CSRbuilder doesn't hav a subjectAlex Gaynor2015-06-271-1/+1
| |
* | do this much more simplyPaul Kehrer2015-06-261-7/+4
| |
* | handle wildcard DNSNames with IDNA.Paul Kehrer2015-06-261-1/+14
|/ | | | fixes #2054
* Use utf8 to encode attribute values instead of asciiIan Cordasco2015-06-241-2/+2
|
* Add tests to the CSR Builder for EC and DSA keysIan Cordasco2015-06-241-1/+12
| | | | | | This skips certain tests on certain versions of differences in how X509_REQ_sign works on those versions. A separate pull request will address those differences.
* Unconditionally encode values to asciiIan Cordasco2015-06-241-5/+2
|
* Update registering pp with ffi.gcIan Cordasco2015-06-241-4/+3
| | | | | This makes it more in-line with existing functions, e.g., L40-L47 of src/cryptography/hazmat/backends/openssl/x509.py @ b0e8ffa
* Update CSR tests and implementationIan Cordasco2015-06-241-1/+2
| | | | | | | | | | - Use keyword arguments for x509.BasicConstraints in tests (missed in b790edbdc8fb9a026353d6fb99994326197705c7). - Place X509_request garbage collection under assertion. - Assert that X509 extensions created are not null. - Don't copy the extensions list in CertificateSigningBuilder. They're never appended to, so copying isn't necessary. - Use RSA key fixtures instead of generating new ones on each test run
* Address code review regarding style and gcIan Cordasco2015-06-241-12/+13
| | | | | | | | | - Use keyword arguments for x509.BasicConstraints in several places - Use SHA256 instead of SHA1 in documented examples - Give function variables meaningful names in _encode_asn1_str - Accept a x509.BasicConstraints object in _encode_basic_constraints - Properly garbage-collect some things - Raise a NotImplementedError instead of a ValueError
* Removes CSR builder version setter.Andre Caron2015-06-241-1/+1
|
* Fixes memory leak,Andre Caron2015-06-241-0/+6
|
* Extends supported range for integer conversion,Andre Caron2015-06-241-2/+9
|
* Fixes docstring typo.Andre Caron2015-06-241-1/+1
|
* Removes OID to txt to OID conversion.Andre Caron2015-06-241-10/+3
|
* Cleans up some GC semantics.Andre Caron2015-06-241-3/+16
|
* Renames sign_509_request to create_x509_csr.Andre Caron2015-06-243-1/+16
|
* Fixes memory allocation.Andre Caron2015-06-241-12/+4
|
* Adds CSR builder.Andre Caron2015-06-241-1/+144
|
* fix ec_cdata_to_evp_pkey bugPaul Kehrer2015-06-221-0/+1
| | | | | | We weren't actually returning the object and the tests weren't catching it because we didn't try to use the evp_pkey property in the tests. The added test confirms it actually works.
* remove unused importAlex Gaynor2015-06-221-1/+0
|
* Remove our workarounds for pyasn.1 bugs, a new pyasn.1 is out!Alex Gaynor2015-06-221-5/+0
|
* Merge pull request #2036 from major/masterAlex Gaynor2015-06-211-0/+3
|\ | | | | Added a repr() method to x509._Certificate
| * Added a repr() method to x509._CertificateMajor Hayden2015-06-211-0/+3
| |
* | Refs #1947 -- add support for IAN to the OpenSSL backendAlex Gaynor2015-06-201-2/+15
| |
* | evp_pkey in openssl asymmetric key constructorsPaul Kehrer2015-06-204-76/+75
| |
* | Merge pull request #2046 from Ayrx/style-nitsAlex Gaynor2015-06-193-12/+12
|\ \ | | | | | | Change ' to ".
| * | Change ' to ".Terry Chia2015-06-193-12/+12
| | |
* | | inhibit any policy extension support for the openssl backendPaul Kehrer2015-06-171-0/+13
|/ /
* / support OCSPNoCheck in the OpenSSL backendPaul Kehrer2015-06-171-0/+2
|/
* Add ConcatKDF from NIST SP 800-56ASimo Sorce2015-06-121-0/+125
| | | | | | | | | The implemention allows the use an HMAC function as per Revision 2 of the document. Conformance of the formatting of the OtherInfo argument is responsability of the calling application. Signed-off-by: Simo Sorce <simo@redhat.com>
* convert to cffi 1.0 precompile systemPaul Kehrer2015-06-0753-6043/+15
|
* don't double free DSA cdata when verifying thingsPaul Kehrer2015-06-061-4/+1
|
* Merge pull request #1965 from reaperhulk/more-client-bindingsAlex Gaynor2015-06-041-0/+24
|\ | | | | Add more client cert related bindings
| * SSL_CTX_set_client_cert_engine was added in 0.9.8iPaul Kehrer2015-06-021-2/+14
| |
| * add some client cert bindingsPaul Kehrer2015-05-191-0/+12
| |
* | Merge pull request #1990 from tonyseek/key-uriPaul Kehrer2015-06-033-0/+42
|\ \ | | | | | | Add "get_provisioning_uri" utility for HOTP/TOTP.
| * | add license header and fix grammar errors.Jiangge Zhang2015-06-031-0/+4
| | |
| * | Remove a default argument and rename a private function.Jiangge Zhang2015-06-033-8/+8
| | |