delta/python-packages/cryptography.git/src/cryptography/x509, branch alex-patch-1

support X.509 certificate PSS signing (#8888)

2023-05-11T01:09:56+00:00

* support X.509 certificate PSS signing

no CSR, CRL, etc

* handle PSS.(MAX_LENGTH, DIGEST_LENGTH), review feedback

* name the kwarg

* test improvements

* skip if sha3 isn't supported

add signature_algorithm_parameters to certificate (#8795)

2023-05-07T20:26:45+00:00

this allows easier verification of cert signatures, but more
specifically allows PSS signature verification

Support msCertificateTemplate extension (#8695)

2023-04-10T03:10:41+00:00

* support ms certificate template

* contortions for rust coverage

* review feedback

Use from future import annotations everywhere (#8643)

2023-03-30T21:46:16+00:00

Added support for OCSP AcceptableResponses extension (#8617)

2023-03-27T00:51:04+00:00

fixes #8589

Make Union type aliases a documented public API (#8168)

2023-03-07T11:20:32+00:00

* Rename Union type aliases to CamelCase

Many `typing.Union` type aliases were previously using `UPPER_SNAKE_CASE`, but Python's convention is `CamelCase` for these (e.g. https://docs.python.org/3/library/typing.html#type-aliases)

* Add utils.deprecated for the old non-underscore type aliases

* Added documentation for new type aliases & minor tweaks

* Use 'versionadded:: 40.0.0'

* Fix CertificatePublicKeyTypes vs CertificateIssuerPublicKeyTypes. Rename CertificatePrivateKeyTypes to CertificateIssuerPrivateKeyTypes

* Fix imports (ruff)

* Fix one more versionadded

* Tweak docs & Reorder: CertificateIssuerPublicKeyTypes before CertificateIssuerPrivateKeyTypes

* Fix test mypy errors using cast()

* Fix black, oops

* Revert "Fix black, oops"

This reverts commit 85344e231d697bdc0940e105f7aed729445f9743.

* Revert "Fix test mypy errors using cast()"

This reverts commit b272d8ca95fbbbc62060663f9e8930a139a7a43e.

* Revert type of SubjectKeyIdentifier.from_public_key arg

* Changelog tweak

raise UnsupportedAlgorithm instead of ValueError in x509 builder sign (#8397)

2023-02-26T23:52:12+00:00

Also change the typing to be an explicit union

Disallow wildcards in DNSName for name constraints (#8272)

2023-02-12T17:29:32+00:00

* Disallow wildcards in DNSName for name constraints

As discussed in #8253, wildcards are unnecessary according to RFC 5280, and cause issues with at least Firefox.

* update changelog

Use the ruff 'pyupgrade' checks (#8104)

2023-01-19T21:36:01+00:00

Add Certificate.verify_signed_by (#8011)

2023-01-12T04:32:52+00:00

* Add Certificate.verify_signed_by

Verify that the signature on a certificate was created by the
private key belonging to another certificate's public key.

This code does not validate anything else! It is not a path builder,
general x509 validator, etc.

* switch to issued_by

validate issuer subject matches certificate issuer and refactor

* two fixes

* signed_by isn't the right target now

* coverage

* skip test on some *ssls

* extensive refactoring

* lol

* does any of this work

* final commit i swear