summaryrefslogtreecommitdiff
Commit message (Collapse)AuthorAgeFilesLines
...
* various fixes (still not enough) to the pypi uploader (#8495)Alex Gaynor2023-03-111-8/+8
| | | | | | | | | * Don't pin installs in pypi-pulish We don't have the repo available to get the constraints file * fix obviously broken assignment * Update pypi-publish.yml
* Replace release.py with OIDC publishing (#8483)Alex Gaynor2023-03-113-118/+69
| | | We are now in the PyPI OIDC publishing beta
* Stop validating keys in ECDH exchange (#8490)Alex Gaynor2023-03-114-11/+27
| | | | | The theory here is that we're already doing sufficient validation key loading, and this is purely duplicative. Note that there's at least _some_ validationg that was previously occurring only ECDH, the LowOrderPublic check that can be seen in wycheproof.
* Bump platformdirs from 3.1.0 to 3.1.1 (#8493)dependabot[bot]2023-03-101-1/+1
| | | | | | | | | | | | | | | | Bumps [platformdirs](https://github.com/platformdirs/platformdirs) from 3.1.0 to 3.1.1. - [Release notes](https://github.com/platformdirs/platformdirs/releases) - [Changelog](https://github.com/platformdirs/platformdirs/blob/main/CHANGES.rst) - [Commits](https://github.com/platformdirs/platformdirs/compare/3.1.0...3.1.1) --- updated-dependencies: - dependency-name: platformdirs dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
* use sparse crates.io in wheel-builder (#8492)Alex Gaynor2023-03-111-0/+2
|
* Bump libc from 0.2.139 to 0.2.140 in /src/rust (#8491)dependabot[bot]2023-03-101-2/+2
| | | | | | | | | | | | | | | Bumps [libc](https://github.com/rust-lang/libc) from 0.2.139 to 0.2.140. - [Release notes](https://github.com/rust-lang/libc/releases) - [Commits](https://github.com/rust-lang/libc/compare/0.2.139...0.2.140) --- updated-dependencies: - dependency-name: libc dependency-type: indirect update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
* cache ECDH values in wycheproof too (#8487)Paul Kehrer2023-03-104-25/+32
| | | | | this alters and renames the caching function a bit since it caches *to the group* object but the actual values (in ECDH) come from the testcase itself
* Fix sample code for policy extension (#8489)shane-kearns2023-03-101-1/+1
|
* speed up RSA key loading in tests a bit more (#8486)Paul Kehrer2023-03-093-20/+38
|
* Bump BoringSSL and/or OpenSSL in CI (#8485)pyca-boringbot[bot]2023-03-101-2/+2
| | | Co-authored-by: pyca-boringbot[bot] <pyca-boringbot[bot]+106132319@users.noreply.github.com>
* Use action-download-artifact to simplify CI (#8484)Alex Gaynor2023-03-103-131/+47
|
* use cargo sparse registry in distro CI (#8480)Alex Gaynor2023-03-101-0/+2
|
* remove out of date details in random numbers docs (#8482)Alex Gaynor2023-03-101-5/+2
|
* Cache some keys that are reused in wycheproof tests (#8479)Alex Gaynor2023-03-103-25/+50
|
* On Windows, os.urandom doesn't use CryptGenRandom anymore (deprecated) (#8481)Alexandre Duc2023-03-091-1/+1
| | | but BCryptGenRandom()
* Bump actions/cache from 3.2.6 to 3.3.0 (#8477)dependabot[bot]2023-03-091-1/+1
| | | | | | | | | | | | | | | | Bumps [actions/cache](https://github.com/actions/cache) from 3.2.6 to 3.3.0. - [Release notes](https://github.com/actions/cache/releases) - [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md) - [Commits](https://github.com/actions/cache/compare/v3.2.6...v3.3.0) --- updated-dependencies: - dependency-name: actions/cache dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
* Small cleanups: (#8476)Alex Gaynor2023-03-092-28/+26
| | | | - Avoid typing.cast - Consolidate bn_ctx allocations
* Bump actions/cache from 3.2.6 to 3.3.0 in /.github/actions/cache (#8478)dependabot[bot]2023-03-091-1/+1
| | | | | | | | | | | | | | | | Bumps [actions/cache](https://github.com/actions/cache) from 3.2.6 to 3.3.0. - [Release notes](https://github.com/actions/cache/releases) - [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md) - [Commits](https://github.com/actions/cache/compare/v3.2.6...v3.3.0) --- updated-dependencies: - dependency-name: actions/cache dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
* replace use of EC_KEY_set_public_key_affine_coordinates (#8475)Paul Kehrer2023-03-092-3/+45
| | | | | | | | | | | | EC_KEY_set_public_key_affine_coordinates calls EC_KEY_check_key, which checks the point isn't at infinity, that it is on the curve (which has already been done by EC_POINT_set_affine_coordinates), and that the private scalar matches the public point. We don't want to do expensive checks twice, so instead we swap to calling EC_POINT_set_affine_coordinates directly and implement a private scalar matches public point check of our own. Also we no longer call deprecated functions.
* add pytest flag to show percentage at all times (#8474)Paul Kehrer2023-03-093-0/+8
| | | | | | | | progress-even-when-capture-no isn't in a released pytest yet, but when https://github.com/pytest-dev/pytest/pull/10755 is released this will work. Until then this flag will simply have no effect. Also add a COLUMNS variable and pass it through to tox so we can limit column width to 80 in CI
* add EC key load benchmark (#8473)Paul Kehrer2023-03-081-0/+13
|
* Bump BoringSSL and/or OpenSSL in CI (#8472)pyca-boringbot[bot]2023-03-081-4/+4
| | | Co-authored-by: pyca-boringbot[bot] <pyca-boringbot[bot]+106132319@users.noreply.github.com>
* Bump mypy from 1.0.1 to 1.1.1 (#8471)dependabot[bot]2023-03-071-1/+1
| | | | | | | | | | | | | | | Bumps [mypy](https://github.com/python/mypy) from 1.0.1 to 1.1.1. - [Release notes](https://github.com/python/mypy/releases) - [Commits](https://github.com/python/mypy/compare/v1.0.1...v1.1.1) --- updated-dependencies: - dependency-name: mypy dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
* Make Union type aliases a documented public API (#8168)Marti Raudsepp2023-03-0722-216/+386
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * Rename Union type aliases to CamelCase Many `typing.Union` type aliases were previously using `UPPER_SNAKE_CASE`, but Python's convention is `CamelCase` for these (e.g. https://docs.python.org/3/library/typing.html#type-aliases) * Add utils.deprecated for the old non-underscore type aliases * Added documentation for new type aliases & minor tweaks * Use 'versionadded:: 40.0.0' * Fix CertificatePublicKeyTypes vs CertificateIssuerPublicKeyTypes. Rename CertificatePrivateKeyTypes to CertificateIssuerPrivateKeyTypes * Fix imports (ruff) * Fix one more versionadded * Tweak docs & Reorder: CertificateIssuerPublicKeyTypes before CertificateIssuerPrivateKeyTypes * Fix test mypy errors using cast() * Fix black, oops * Revert "Fix black, oops" This reverts commit 85344e231d697bdc0940e105f7aed729445f9743. * Revert "Fix test mypy errors using cast()" This reverts commit b272d8ca95fbbbc62060663f9e8930a139a7a43e. * Revert type of SubjectKeyIdentifier.from_public_key arg * Changelog tweak
* Bump BoringSSL and/or OpenSSL in CI (#8469)pyca-boringbot[bot]2023-03-071-4/+4
| | | Co-authored-by: pyca-boringbot[bot] <pyca-boringbot[bot]+106132319@users.noreply.github.com>
* refactor PBKDF2HMAC test vectors and skip one test (#8467)Paul Kehrer2023-03-062-32/+20
| | | | The test in question has 2**24 iterations and doesn't represent an interesting edge case in the algorithm, just a high iteration count.
* enable parallel testing for dynamo downstream (#8468)Paul Kehrer2023-03-061-1/+1
|
* Remove a zillion pointless backenda args in x509 tests (#8466)Alex Gaynor2023-03-073-272/+12
|
* Bump charset-normalizer from 3.0.1 to 3.1.0 (#8465)dependabot[bot]2023-03-061-1/+1
| | | | | | | | | | | | | | | | Bumps [charset-normalizer](https://github.com/Ousret/charset_normalizer) from 3.0.1 to 3.1.0. - [Release notes](https://github.com/Ousret/charset_normalizer/releases) - [Changelog](https://github.com/Ousret/charset_normalizer/blob/master/CHANGELOG.md) - [Commits](https://github.com/Ousret/charset_normalizer/compare/3.0.1...3.1.0) --- updated-dependencies: - dependency-name: charset-normalizer dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
* Update serialization.rst (#8464)Marty Hill2023-03-061-1/+1
| | | Proposed update to parameter in example call to pkcs12.serialize_key_and_certificates() on line 908.
* remove memleak tests for x509 paths that no longer use openssl (#8461)Paul Kehrer2023-03-061-162/+0
|
* use the rsa fixtures in x509 too (#8460)Paul Kehrer2023-03-063-150/+271
| | | | | * use the rsa fixtures in x509 too * use strings in __all__
* Remove use of deprecated EC functions (#8459)Alex Gaynor2023-03-064-61/+13
|
* double the speed of our rsa tests (#8458)Paul Kehrer2023-03-061-121/+243
| | | | | | | | | | | | | | * double the speed of our rsa tests this both creates a reusable fixture for our most commonly used private keys as well as disables key validation. as always, disabling key validation should not be done unless you never parse untrusted key input. unsurprisingly, our tests are trusted and understood input (and we also continue to have tests where we run check key to verify that it catches corrupt things) * fix typing * explain why we don't use the rsa_key_2048 fixture in the blinding test
* Bump scratch from 1.0.4 to 1.0.5 in /src/rust (#8457)dependabot[bot]2023-03-061-2/+2
| | | | | | | | | | | | | | | Bumps [scratch](https://github.com/dtolnay/scratch) from 1.0.4 to 1.0.5. - [Release notes](https://github.com/dtolnay/scratch/releases) - [Commits](https://github.com/dtolnay/scratch/compare/1.0.4...1.0.5) --- updated-dependencies: - dependency-name: scratch dependency-type: indirect update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
* Bump cxx from 1.0.91 to 1.0.92 in /src/rust (#8456)dependabot[bot]2023-03-061-6/+6
| | | | | | | | | | | | | | | Bumps [cxx](https://github.com/dtolnay/cxx) from 1.0.91 to 1.0.92. - [Release notes](https://github.com/dtolnay/cxx/releases) - [Commits](https://github.com/dtolnay/cxx/compare/1.0.91...1.0.92) --- updated-dependencies: - dependency-name: cxx dependency-type: indirect update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
* Bump cxx-build from 1.0.91 to 1.0.92 in /src/rust (#8455)dependabot[bot]2023-03-061-2/+2
| | | | | | | | | | | | | | | Bumps [cxx-build](https://github.com/dtolnay/cxx) from 1.0.91 to 1.0.92. - [Release notes](https://github.com/dtolnay/cxx/releases) - [Commits](https://github.com/dtolnay/cxx/compare/1.0.91...1.0.92) --- updated-dependencies: - dependency-name: cxx-build dependency-type: indirect update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
* Bump rich from 13.3.1 to 13.3.2 (#8454)dependabot[bot]2023-03-051-1/+1
| | | | | | | | | | | | | | | | Bumps [rich](https://github.com/Textualize/rich) from 13.3.1 to 13.3.2. - [Release notes](https://github.com/Textualize/rich/releases) - [Changelog](https://github.com/Textualize/rich/blob/master/CHANGELOG.md) - [Commits](https://github.com/Textualize/rich/compare/v13.3.1...v13.3.2) --- updated-dependencies: - dependency-name: rich dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
* Bump unicode-ident from 1.0.7 to 1.0.8 in /src/rust (#8453)dependabot[bot]2023-03-061-2/+2
| | | | | | | | | | | | | | | Bumps [unicode-ident](https://github.com/dtolnay/unicode-ident) from 1.0.7 to 1.0.8. - [Release notes](https://github.com/dtolnay/unicode-ident/releases) - [Commits](https://github.com/dtolnay/unicode-ident/compare/1.0.7...1.0.8) --- updated-dependencies: - dependency-name: unicode-ident dependency-type: indirect update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
* Bump BoringSSL and/or OpenSSL in CI (#8452)pyca-boringbot[bot]2023-03-061-4/+4
| | | Co-authored-by: pyca-boringbot[bot] <pyca-boringbot[bot]+106132319@users.noreply.github.com>
* Shrink the cache for ~/.cargo/bin (#8451)Alex Gaynor2023-03-062-2/+20
| | | | | * Shrink the cache for ~/.cargo/bin * Test the cache restoration
* remove pytz test dependency (#8447)Paul Kehrer2023-03-055-23/+10
|
* deprecate support for OpenSSL <1.1.1d (#8444)Paul Kehrer2023-03-052-0/+20
| | | | | * deprecate support for OpenSSL <1.1.1d * use an actually exported constant
* update all-green to py311 (#8443)Paul Kehrer2023-03-051-1/+1
|
* faster linkcheck and rust jobs (#8442)Paul Kehrer2023-03-042-2/+20
| | | | | linkcheck now uses caching and separates build from "test" rust now completely skips all package installation in tox
* Add an ignore for the newest ruff (#8440)Alex Gaynor2023-03-053-4/+5
| | | | | | | | | | | | | | | | | | | | | | | | | | * Add an ignore for the newest ruff Clearly document why we have each of our ignores * Bump ruff from 0.0.253 to 0.0.254 Bumps [ruff](https://github.com/charliermarsh/ruff) from 0.0.253 to 0.0.254. - [Release notes](https://github.com/charliermarsh/ruff/releases) - [Changelog](https://github.com/charliermarsh/ruff/blob/main/BREAKING_CHANGES.md) - [Commits](https://github.com/charliermarsh/ruff/compare/v0.0.253...v0.0.254) --- updated-dependencies: - dependency-name: ruff dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> --------- Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
* don't fail-fast in the linux-rust-coverage jobs (#8441)Alex Gaynor2023-03-051-0/+1
|
* Bump unicode-ident from 1.0.6 to 1.0.7 in /src/rust (#8439)dependabot[bot]2023-03-041-2/+2
| | | | | | | | | | | | | | | Bumps [unicode-ident](https://github.com/dtolnay/unicode-ident) from 1.0.6 to 1.0.7. - [Release notes](https://github.com/dtolnay/unicode-ident/releases) - [Commits](https://github.com/dtolnay/unicode-ident/compare/1.0.6...1.0.7) --- updated-dependencies: - dependency-name: unicode-ident dependency-type: indirect update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
* Bump scratch from 1.0.3 to 1.0.4 in /src/rust (#8438)dependabot[bot]2023-03-041-2/+2
| | | | | | | | | | | | | | | Bumps [scratch](https://github.com/dtolnay/scratch) from 1.0.3 to 1.0.4. - [Release notes](https://github.com/dtolnay/scratch/releases) - [Commits](https://github.com/dtolnay/scratch/compare/1.0.3...1.0.4) --- updated-dependencies: - dependency-name: scratch dependency-type: indirect update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
* Bump pytest from 7.2.1 to 7.2.2 (#8437)dependabot[bot]2023-03-041-1/+1
| | | | | | | | | | | | | | | | Bumps [pytest](https://github.com/pytest-dev/pytest) from 7.2.1 to 7.2.2. - [Release notes](https://github.com/pytest-dev/pytest/releases) - [Changelog](https://github.com/pytest-dev/pytest/blob/main/CHANGELOG.rst) - [Commits](https://github.com/pytest-dev/pytest/compare/7.2.1...7.2.2) --- updated-dependencies: - dependency-name: pytest dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
View Lorry Controller Status