Commit message (Collapse) | Author | Age | Files | Lines | ||
---|---|---|---|---|---|---|
... | ||||||
| * | | use new constant | Glyph | 2015-06-26 | 1 | -1/+1 | |
| | | | ||||||
| * | | a place for a couple of new constants to live | Glyph | 2015-06-26 | 1 | -0/+2 | |
| | | | ||||||
* | | | fix a memory leak in basic constraints encoding | Paul Kehrer | 2015-06-28 | 1 | -0/+3 | |
| | | | ||||||
* | | | Merge pull request #2086 from alex/unify-parse-extensions | Paul Kehrer | 2015-06-28 | 1 | -80/+71 | |
|\ \ \ | | | | | | | | | Initial stab at unifying the extension parsing code fro CSRs and certificates | |||||
| * | | | use a dict here | Alex Gaynor | 2015-06-28 | 1 | -24/+24 | |
| | | | | ||||||
| * | | | Factor this code out. | Alex Gaynor | 2015-06-28 | 1 | -40/+35 | |
| | | | | ||||||
| * | | | Initial stab at unifying the extension parsing code fro CSRs and certificates | Alex Gaynor | 2015-06-28 | 1 | -79/+75 | |
| | |/ | |/| | ||||||
* / | | move int_from_bytes so we can use it elsewhere | Paul Kehrer | 2015-06-27 | 1 | -23/+9 | |
|/ / | ||||||
* | | Improvemed branch coverage for ssh public key loading | Alex Gaynor | 2015-06-27 | 2 | -8/+6 | |
| | | ||||||
* | | Merge pull request #2076 from alex/more-branch-coverage | Paul Kehrer | 2015-06-27 | 1 | -8/+6 | |
|\ \ | | | | | | | More branch coverage improvements. By virtue of reorganization and a new test | |||||
| * | | More branch coverage improvements. By virtue of reorganization and a new test | Alex Gaynor | 2015-06-27 | 1 | -8/+6 | |
| | | | ||||||
* | | | Reorganized some code to improve branch coverage | Alex Gaynor | 2015-06-27 | 1 | -6/+6 | |
|/ / | ||||||
* | | Fixed #2067 -- raise an error if a CSRbuilder doesn't hav a subject | Alex Gaynor | 2015-06-27 | 1 | -1/+1 | |
| | | ||||||
* | | do this much more simply | Paul Kehrer | 2015-06-26 | 1 | -7/+4 | |
| | | ||||||
* | | handle wildcard DNSNames with IDNA. | Paul Kehrer | 2015-06-26 | 1 | -1/+14 | |
|/ | | | | fixes #2054 | |||||
* | Use utf8 to encode attribute values instead of ascii | Ian Cordasco | 2015-06-24 | 1 | -2/+2 | |
| | ||||||
* | Add tests to the CSR Builder for EC and DSA keys | Ian Cordasco | 2015-06-24 | 1 | -1/+12 | |
| | | | | | | This skips certain tests on certain versions of differences in how X509_REQ_sign works on those versions. A separate pull request will address those differences. | |||||
* | Unconditionally encode values to ascii | Ian Cordasco | 2015-06-24 | 1 | -5/+2 | |
| | ||||||
* | Update registering pp with ffi.gc | Ian Cordasco | 2015-06-24 | 1 | -4/+3 | |
| | | | | | This makes it more in-line with existing functions, e.g., L40-L47 of src/cryptography/hazmat/backends/openssl/x509.py @ b0e8ffa | |||||
* | Update CSR tests and implementation | Ian Cordasco | 2015-06-24 | 1 | -1/+2 | |
| | | | | | | | | | | - Use keyword arguments for x509.BasicConstraints in tests (missed in b790edbdc8fb9a026353d6fb99994326197705c7). - Place X509_request garbage collection under assertion. - Assert that X509 extensions created are not null. - Don't copy the extensions list in CertificateSigningBuilder. They're never appended to, so copying isn't necessary. - Use RSA key fixtures instead of generating new ones on each test run | |||||
* | Address code review regarding style and gc | Ian Cordasco | 2015-06-24 | 1 | -12/+13 | |
| | | | | | | | | | - Use keyword arguments for x509.BasicConstraints in several places - Use SHA256 instead of SHA1 in documented examples - Give function variables meaningful names in _encode_asn1_str - Accept a x509.BasicConstraints object in _encode_basic_constraints - Properly garbage-collect some things - Raise a NotImplementedError instead of a ValueError | |||||
* | Removes CSR builder version setter. | Andre Caron | 2015-06-24 | 1 | -1/+1 | |
| | ||||||
* | Fixes memory leak, | Andre Caron | 2015-06-24 | 1 | -0/+6 | |
| | ||||||
* | Extends supported range for integer conversion, | Andre Caron | 2015-06-24 | 1 | -2/+9 | |
| | ||||||
* | Fixes docstring typo. | Andre Caron | 2015-06-24 | 1 | -1/+1 | |
| | ||||||
* | Removes OID to txt to OID conversion. | Andre Caron | 2015-06-24 | 1 | -10/+3 | |
| | ||||||
* | Cleans up some GC semantics. | Andre Caron | 2015-06-24 | 1 | -3/+16 | |
| | ||||||
* | Renames sign_509_request to create_x509_csr. | Andre Caron | 2015-06-24 | 3 | -1/+16 | |
| | ||||||
* | Fixes memory allocation. | Andre Caron | 2015-06-24 | 1 | -12/+4 | |
| | ||||||
* | Adds CSR builder. | Andre Caron | 2015-06-24 | 1 | -1/+144 | |
| | ||||||
* | fix ec_cdata_to_evp_pkey bug | Paul Kehrer | 2015-06-22 | 1 | -0/+1 | |
| | | | | | | We weren't actually returning the object and the tests weren't catching it because we didn't try to use the evp_pkey property in the tests. The added test confirms it actually works. | |||||
* | remove unused import | Alex Gaynor | 2015-06-22 | 1 | -1/+0 | |
| | ||||||
* | Remove our workarounds for pyasn.1 bugs, a new pyasn.1 is out! | Alex Gaynor | 2015-06-22 | 1 | -5/+0 | |
| | ||||||
* | Merge pull request #2036 from major/master | Alex Gaynor | 2015-06-21 | 1 | -0/+3 | |
|\ | | | | | Added a repr() method to x509._Certificate | |||||
| * | Added a repr() method to x509._Certificate | Major Hayden | 2015-06-21 | 1 | -0/+3 | |
| | | ||||||
* | | Refs #1947 -- add support for IAN to the OpenSSL backend | Alex Gaynor | 2015-06-20 | 1 | -2/+15 | |
| | | ||||||
* | | evp_pkey in openssl asymmetric key constructors | Paul Kehrer | 2015-06-20 | 4 | -76/+75 | |
| | | ||||||
* | | Merge pull request #2046 from Ayrx/style-nits | Alex Gaynor | 2015-06-19 | 3 | -12/+12 | |
|\ \ | | | | | | | Change ' to ". | |||||
| * | | Change ' to ". | Terry Chia | 2015-06-19 | 3 | -12/+12 | |
| | | | ||||||
* | | | inhibit any policy extension support for the openssl backend | Paul Kehrer | 2015-06-17 | 1 | -0/+13 | |
|/ / | ||||||
* / | support OCSPNoCheck in the OpenSSL backend | Paul Kehrer | 2015-06-17 | 1 | -0/+2 | |
|/ | ||||||
* | Add ConcatKDF from NIST SP 800-56A | Simo Sorce | 2015-06-12 | 1 | -0/+125 | |
| | | | | | | | | | The implemention allows the use an HMAC function as per Revision 2 of the document. Conformance of the formatting of the OtherInfo argument is responsability of the calling application. Signed-off-by: Simo Sorce <simo@redhat.com> | |||||
* | convert to cffi 1.0 precompile system | Paul Kehrer | 2015-06-07 | 53 | -6043/+15 | |
| | ||||||
* | don't double free DSA cdata when verifying things | Paul Kehrer | 2015-06-06 | 1 | -4/+1 | |
| | ||||||
* | Merge pull request #1965 from reaperhulk/more-client-bindings | Alex Gaynor | 2015-06-04 | 1 | -0/+24 | |
|\ | | | | | Add more client cert related bindings | |||||
| * | SSL_CTX_set_client_cert_engine was added in 0.9.8i | Paul Kehrer | 2015-06-02 | 1 | -2/+14 | |
| | | ||||||
| * | add some client cert bindings | Paul Kehrer | 2015-05-19 | 1 | -0/+12 | |
| | | ||||||
* | | Merge pull request #1990 from tonyseek/key-uri | Paul Kehrer | 2015-06-03 | 3 | -0/+42 | |
|\ \ | | | | | | | Add "get_provisioning_uri" utility for HOTP/TOTP. | |||||
| * | | add license header and fix grammar errors. | Jiangge Zhang | 2015-06-03 | 1 | -0/+4 | |
| | | | ||||||
| * | | Remove a default argument and rename a private function. | Jiangge Zhang | 2015-06-03 | 3 | -8/+8 | |
| | | |