summaryrefslogtreecommitdiff
path: root/.github
Commit message (Collapse)AuthorAgeFilesLines
* Bump actions/setup-python from 2.3.0 to 2.3.1dependabot/github_actions/actions/setup-python-2.3.1dependabot[bot]2021-11-303-9/+9
| | | | | | | | | | | | | | Bumps [actions/setup-python](https://github.com/actions/setup-python) from 2.3.0 to 2.3.1. - [Release notes](https://github.com/actions/setup-python/releases) - [Commits](https://github.com/actions/setup-python/compare/v2.3.0...v2.3.1) --- updated-dependencies: - dependency-name: actions/setup-python dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>
* Bump the version of the checkout action (#6661)Alex Gaynor2021-11-274-18/+18
|
* Drop supported for older LibreSSL (#6660)Alex Gaynor2021-11-261-2/+0
| | | | | | | | | | | | | * Drop supported for older LibreSSL 3.1 covers the oldest version used by versions of Alpine and OpenBSD that are supported by their upstreams. * Remove tests that are now unused * Update CHANGELOG.rst Co-authored-by: Paul Kehrer <paul.l.kehrer@gmail.com> Co-authored-by: Paul Kehrer <paul.l.kehrer@gmail.com>
* bumped libressl version in c (#6657)Alex Gaynor2021-11-261-1/+1
|
* fixes #6653 -- update boringssl (#6654)Alex Gaynor2021-11-251-2/+2
|
* Bump actions/cache from 2.1.6 to 2.1.7 (#6648)dependabot[bot]2021-11-232-9/+9
| | | | | | | | | | | | | | | | Bumps [actions/cache](https://github.com/actions/cache) from 2.1.6 to 2.1.7. - [Release notes](https://github.com/actions/cache/releases) - [Commits](https://github.com/actions/cache/compare/v2.1.6...v2.1.7) --- updated-dependencies: - dependency-name: actions/cache dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
* Added a CI job for 3.11-dev (#6637)Alex Gaynor2021-11-211-0/+1
|
* Reduce number of windows builders (#6636)Alex Gaynor2021-11-201-2/+2
|
* Make randomorder a regular job and not a distro one (#6633)Alex Gaynor2021-11-211-1/+1
|
* Try removing line whose purpose I don't understand (#6632)Alex Gaynor2021-11-211-1/+0
|
* disable some workflows on forks (#6619)Paul Kehrer2021-11-182-0/+2
| | | these don't make sense for forks so let's not run them
* Bump actions/setup-python from 2.2.2 to 2.3.0 (#6620)dependabot[bot]2021-11-183-9/+9
| | | | | | | | | | | | | | | | Bumps [actions/setup-python](https://github.com/actions/setup-python) from 2.2.2 to 2.3.0. - [Release notes](https://github.com/actions/setup-python/releases) - [Commits](https://github.com/actions/setup-python/compare/v2.2.2...v2.3.0) --- updated-dependencies: - dependency-name: actions/setup-python dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
* Run tests/hazmat/bindings/test_openssl.py on BoringSSL (#6592)Alex Gaynor2021-11-121-1/+1
| | | Refs #6576
* skip pkcs7 tests on boring (#6591)Paul Kehrer2021-11-121-1/+1
| | | | | * skip pkcs7 tests on boring * make it work
* x509 tests for boring (#6590)Paul Kehrer2021-11-121-1/+1
|
* Run tests/primitives/test_{dh,serialization}.py on BoringSSL (#6589)Alex Gaynor2021-11-121-1/+1
| | | Refs #6576
* Run tests/hazmat/backends/ under BoringSSL (#6588)Alex Gaynor2021-11-121-1/+1
| | | Refs #6576
* Run a small number of bindings and backend tests on BoringSSL (#6587)Alex Gaynor2021-11-121-1/+1
| | | Refs #6576
* Run tests/primitives/ (minus a few files) on BoringSSL (#6584)Alex Gaynor2021-11-111-1/+1
|
* Run tests/wycheproof/ on BoringSSL (#6583)Alex Gaynor2021-11-121-1/+1
|
* Break down the test/hazmat/ skips (#6578)Alex Gaynor2021-11-101-1/+1
| | | Refs #6576
* Run tests/hypothesis/ under boringssl (#6577)Alex Gaynor2021-11-101-1/+1
| | | refs #6576
* Simplify how we test boring, in a way that'll be extensible to the future ↵Alex Gaynor2021-11-101-1/+1
| | | | | | | | | (#6575) * Simplify how we test boring, in a way that'll be extensible to the future * Break out what we ignore * Get fernet tests passing on boringssl
* retry paramiko tests if they fail (#6572)Paul Kehrer2021-11-081-1/+2
| | | | | | | * retry paramiko tests if they fail flaky tests are so annoying * comment
* Bump BoringSSL version (#6568)Alex Gaynor2021-11-091-2/+2
|
* actions/checkout doesn't work with non-github repos apparently (#6561)Alex Gaynor2021-11-081-4/+1
|
* Add a github action to check for new versions of boringssl (#6560)Alex Gaynor2021-11-071-0/+35
| | | | | * Add a github action to check for new versions of boringssl * poke GHA
* Begin building with BoringSSL in our CI, no tests yet (#6554)Alex Gaynor2021-11-072-0/+20
| | | | | | | | | | | | | | | * Attempt to build against BoringSSL in CI * Check for BoringSSL in the SSL bindings * Check for BoringSSL in the err bindings * Check for BoringSSL in the pkcs7 bindings * Check for BoringSSL in the bignum bindings * Check for BoringSSL in the EVP bindings * Check for BoringSSL in the X.509 verify bindings
* Explicitly specify the ref when cloning wycheproof (#6539)Alex Gaynor2021-11-031-0/+6
| | | This leads to a github API call which leads to rate limiting which leads to sadness
* fedora is now py310 (#6537)Paul Kehrer2021-11-031-1/+1
|
* ensure all-green fails when a dependent job fails (#6512)Paul Kehrer2021-11-011-0/+3
| | | | skips are considered passes, which isn't useful for required checks + auto-merge queue
* Lower cooldown again (#6513)Alex Gaynor2021-11-011-1/+1
|
* Take backend as a parameter so skips work (#6504)Alex Gaynor2021-11-011-1/+1
| | | | | * Take backend as a parameter so skips work * Bump timeout threshold since alpine appears to be right on the line
* Make it possible to have required jobs in GH without listing them all (#6491)Alex Gaynor2021-10-291-0/+7
|
* Attempt to condense the rust jobs. (#6470)Alex Gaynor2021-10-251-58/+24
| | | | | | | | | | | | * Attempt to condense the rust jobs. Remove nightly from the linux-rust jobs, we're going to test nightly in the linux-rust-coverage job. Remove cargo jobs and run the cargo tests in the linux-rust-coverage test. * This is what I get for updating something * put this back * Don't merge these together, let codecov do that
* Update libressl to 3.4.1 in CI (#6455)Alex Gaynor2021-10-231-1/+1
|
* Move to PyPy 3.8 (#6450)Alex Gaynor2021-10-212-7/+7
|
* Convert CertificatePolicies to Rust (#6400)Alex Gaynor2021-10-121-0/+55
| | | | | | | | | | | | | | | | | | | | | | | | | * Convert CertificatePolicies to Rust * Satisfy clippy * Incorporate rust tests into coverage * Attempt to get the coverage integrated * Debugging, as a treat * Attempt to get the coverage integrated * cursed * Maybe? * Required! * lol * unused * Handle non-ascii qualifiers
* Added debian bookworm to CI (#6406)Alex Gaynor2021-10-121-0/+1
|
* py310 is out and in GHA (#6385)Paul Kehrer2021-10-051-3/+3
| | | | | * py310 is out and in GHA * also switch windows/macos since we test min/max py3 there only
* lower timeouts in GHA (#6384)Alex Gaynor2021-10-061-7/+7
| | | 100% of the time we hit 20 minutes in GHA it's a hung job. let's just time out the hangers faster
* add downstream tests for mitmproxy (#6377)Maximilian Hils2021-10-052-1/+19
|
* bump libressl in CI (#6362)Alex Gaynor2021-10-031-2/+2
|
* Support LibreSSL 3.4.0 (#6360)Charlie Li2021-10-031-0/+1
| | | | | | | | | | | | | | | | | * Add LibreSSL 3.4.0 to CI * Add a LibreSSL 3.4.0 guard Since LibreSSL 3.4.0 makes most of the TLSv1.3 API available, redefine CRYPTOGRAPHY_OPENSSL_LESS_THAN_111 to LibreSSL versions below 3.4.0. * DTLS_get_data_mtu does not exist in LibreSSL * Only EVP_Digest{Sign,Verify} exist in LibreSSL 3.4.0+ * SSL_CTX_{set,get}_keylog_callback does not exist in LibreSSL * Do not pollute CRYPTOGRAPHY_OPENSSL_LESS_THAN_111 with LibreSSL While LibreSSL 3.4.0 supports more of TLSv1.3 API, the guard redefinition caused the X448 tests to run when not intended.
* build our wheels from tag so we can upload sdist last (#6328)Paul Kehrer2021-09-291-3/+23
| | | | | * build our wheels from tag so we can upload sdist last * empty commit for codecov
* add CRL pyopenssl fallback (#6325)Paul Kehrer2021-09-282-0/+19
| | | | | | | | | * add tests to verify we haven't broken the current pyopenssl release * add CRL pyopenssl fallback * simplify CRL with helpers * more readable pyopenssl-release
* Bump dessant/lock-threads from 2.1.2 to 3 (#6323)dependabot[bot]2021-09-281-3/+3
| | | | | | | | | | | | | | | | | | | | | | * Bump dessant/lock-threads from 2.1.2 to 3 Bumps [dessant/lock-threads](https://github.com/dessant/lock-threads) from 2.1.2 to 3. - [Release notes](https://github.com/dessant/lock-threads/releases) - [Changelog](https://github.com/dessant/lock-threads/blob/master/CHANGELOG.md) - [Commits](https://github.com/dessant/lock-threads/compare/v2.1.2...v3) --- updated-dependencies: - dependency-name: dessant/lock-threads dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com> * Update lock.yml Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Alex Gaynor <alex.gaynor@gmail.com>
* preparations for musllinux (#6236)John Jones2021-09-191-2/+9
| | | | | * preparations for musllinux * wheel-builder | skip PyPy on musllinux builds
* new year, new openssl (#6264)Alex Gaynor2021-09-071-2/+2
|
* same as #6241 but for arm64 (#6242)Alex Gaynor2021-08-291-2/+5
|