summaryrefslogtreecommitdiff
Commit message (Collapse)AuthorAgeFilesLines
...
* Bump platformdirs from 3.0.0 to 3.1.0 (#8435)dependabot[bot]2023-03-041-1/+1
| | | | | | | | | | | | | | | | Bumps [platformdirs](https://github.com/platformdirs/platformdirs) from 3.0.0 to 3.1.0. - [Release notes](https://github.com/platformdirs/platformdirs/releases) - [Changelog](https://github.com/platformdirs/platformdirs/blob/main/CHANGES.rst) - [Commits](https://github.com/platformdirs/platformdirs/compare/3.0.0...3.1.0) --- updated-dependencies: - dependency-name: platformdirs dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
* don't run benchmarks if we haven't touched the src or tests (#8434)Paul Kehrer2023-03-041-1/+4
|
* pointlessly optimize our ossl custom builds (#8432)Paul Kehrer2023-03-042-2/+10
|
* remove final unused bindings from x509_vfy (#8431)Alex Gaynor2023-03-041-7/+0
|
* remove one last unused ssl function (#8430)Alex Gaynor2023-03-041-2/+0
|
* we do not check for an openssl bin anymore (#8429)Alex Gaynor2023-03-041-2/+0
|
* remove unused ssl bindings (#8428)Alex Gaynor2023-03-041-11/+0
|
* Bump BoringSSL and/or OpenSSL in CI (#8427)pyca-boringbot[bot]2023-03-041-2/+2
| | | Co-authored-by: pyca-boringbot[bot] <pyca-boringbot[bot]+106132319@users.noreply.github.com>
* Bump BoringSSL and/or OpenSSL in CI (#8424)pyca-boringbot[bot]2023-03-021-4/+4
| | | Co-authored-by: pyca-boringbot[bot] <pyca-boringbot[bot]+106132319@users.noreply.github.com>
* ignore ntt in linkcheck (#8423)Alex Gaynor2023-03-021-0/+2
|
* port 39.0.2 changelog to main (#8422)Paul Kehrer2023-03-021-0/+9
|
* Bump BoringSSL and/or OpenSSL in CI (#8418)pyca-boringbot[bot]2023-03-021-4/+4
| | | Co-authored-by: pyca-boringbot[bot] <pyca-boringbot[bot]+106132319@users.noreply.github.com>
* Bump BoringSSL and/or OpenSSL in CI (#8415)pyca-boringbot[bot]2023-03-011-4/+4
| | | Co-authored-by: pyca-boringbot[bot] <pyca-boringbot[bot]+106132319@users.noreply.github.com>
* Bump actions/upload-artifact in /.github/actions/upload-coverage (#8411)dependabot[bot]2023-02-281-1/+1
| | | | | | | | | | | | | | | Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact) from 3.1.0 to 3.1.2. - [Release notes](https://github.com/actions/upload-artifact/releases) - [Commits](https://github.com/actions/upload-artifact/compare/v3.1.0...v3.1.2) --- updated-dependencies: - dependency-name: actions/upload-artifact dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
* Bump babel from 2.12.0 to 2.12.1 (#8413)dependabot[bot]2023-02-281-1/+1
| | | | | | | | | | | | | | | | Bumps [babel](https://github.com/python-babel/babel) from 2.12.0 to 2.12.1. - [Release notes](https://github.com/python-babel/babel/releases) - [Changelog](https://github.com/python-babel/babel/blob/master/CHANGES.rst) - [Commits](https://github.com/python-babel/babel/compare/v2.12.0...v2.12.1) --- updated-dependencies: - dependency-name: babel dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
* Bump virtualenv from 20.19.0 to 20.20.0 (#8412)dependabot[bot]2023-02-281-1/+1
| | | | | | | | | | | | | | | | Bumps [virtualenv](https://github.com/pypa/virtualenv) from 20.19.0 to 20.20.0. - [Release notes](https://github.com/pypa/virtualenv/releases) - [Changelog](https://github.com/pypa/virtualenv/blob/main/docs/changelog.rst) - [Commits](https://github.com/pypa/virtualenv/compare/20.19.0...20.20.0) --- updated-dependencies: - dependency-name: virtualenv dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
* Bump actions/cache from 3.2.5 to 3.2.6 in /.github/actions/cache (#8410)dependabot[bot]2023-02-281-1/+1
| | | | | | | | | | | | | | | | Bumps [actions/cache](https://github.com/actions/cache) from 3.2.5 to 3.2.6. - [Release notes](https://github.com/actions/cache/releases) - [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md) - [Commits](https://github.com/actions/cache/compare/v3.2.5...v3.2.6) --- updated-dependencies: - dependency-name: actions/cache dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
* Get dependabot updating reusable actions (#8406)Alex Gaynor2023-03-011-0/+16
| | | Required until https://github.com/dependabot/dependabot-core/issues/6704 is fixed
* Bump more-itertools from 9.0.0 to 9.1.0 (#8409)dependabot[bot]2023-02-281-1/+1
| | | | | | | | | | | | | | | Bumps [more-itertools](https://github.com/more-itertools/more-itertools) from 9.0.0 to 9.1.0. - [Release notes](https://github.com/more-itertools/more-itertools/releases) - [Commits](https://github.com/more-itertools/more-itertools/compare/v9.0.0...v9.1.0) --- updated-dependencies: - dependency-name: more-itertools dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
* Bump ruff from 0.0.252 to 0.0.253 (#8408)dependabot[bot]2023-02-281-1/+1
| | | | | | | | | | | | | | | | Bumps [ruff](https://github.com/charliermarsh/ruff) from 0.0.252 to 0.0.253. - [Release notes](https://github.com/charliermarsh/ruff/releases) - [Changelog](https://github.com/charliermarsh/ruff/blob/main/BREAKING_CHANGES.md) - [Commits](https://github.com/charliermarsh/ruff/compare/v0.0.252...v0.0.253) --- updated-dependencies: - dependency-name: ruff dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
* Bump babel from 2.11.0 to 2.12.0 (#8407)dependabot[bot]2023-02-281-1/+1
| | | | | | | | | | | | | | | | Bumps [babel](https://github.com/python-babel/babel) from 2.11.0 to 2.12.0. - [Release notes](https://github.com/python-babel/babel/releases) - [Changelog](https://github.com/python-babel/babel/blob/master/CHANGES.rst) - [Commits](https://github.com/python-babel/babel/compare/v2.11.0...v2.12.0) --- updated-dependencies: - dependency-name: babel dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
* don't cache some things, output info about the cache size on hit (#8405)Paul Kehrer2023-02-281-3/+8
| | | | | * don't cache some things, output info about the cache size on hit * empty commit to test cache
* Update to the new wycheproof (#8403)Alex Gaynor2023-02-284-3/+30
|
* remove unused bignum bindings (#8401)Alex Gaynor2023-02-281-14/+0
|
* Bump BoringSSL and/or OpenSSL in CI (#8402)pyca-boringbot[bot]2023-02-281-4/+4
| | | Co-authored-by: pyca-boringbot[bot] <pyca-boringbot[bot]+106132319@users.noreply.github.com>
* handle timezones for our mtime fixer (#8398)Paul Kehrer2023-02-271-1/+13
| | | | | | | * handle timezones for our mtime fixer avoids setting mtime into the future, which messes up the cache * add paranoia
* raise UnsupportedAlgorithm instead of ValueError in x509 builder sign (#8397)Paul Kehrer2023-02-266-19/+49
| | | Also change the typing to be an explicit union
* Bump types-urllib3 from 1.26.25.7 to 1.26.25.8 (#8394)dependabot[bot]2023-02-261-1/+1
| | | | | | | | | | | | | | | Bumps [types-urllib3](https://github.com/python/typeshed) from 1.26.25.7 to 1.26.25.8. - [Release notes](https://github.com/python/typeshed/releases) - [Commits](https://github.com/python/typeshed/commits) --- updated-dependencies: - dependency-name: types-urllib3 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
* Bump zipp from 3.14.0 to 3.15.0 (#8396)dependabot[bot]2023-02-261-1/+1
| | | | | | | | | | | | | | | | Bumps [zipp](https://github.com/jaraco/zipp) from 3.14.0 to 3.15.0. - [Release notes](https://github.com/jaraco/zipp/releases) - [Changelog](https://github.com/jaraco/zipp/blob/main/CHANGES.rst) - [Commits](https://github.com/jaraco/zipp/compare/v3.14.0...v3.15.0) --- updated-dependencies: - dependency-name: zipp dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
* Bump coverage from 7.2.0 to 7.2.1 (#8395)dependabot[bot]2023-02-261-1/+1
| | | | | | | | | | | | | | | | Bumps [coverage](https://github.com/nedbat/coveragepy) from 7.2.0 to 7.2.1. - [Release notes](https://github.com/nedbat/coveragepy/releases) - [Changelog](https://github.com/nedbat/coveragepy/blob/master/CHANGES.rst) - [Commits](https://github.com/nedbat/coveragepy/compare/7.2.0...7.2.1) --- updated-dependencies: - dependency-name: coverage dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
* Bump types-requests from 2.28.11.14 to 2.28.11.15 (#8393)dependabot[bot]2023-02-261-1/+1
| | | | | | | | | | | | | | | Bumps [types-requests](https://github.com/python/typeshed) from 2.28.11.14 to 2.28.11.15. - [Release notes](https://github.com/python/typeshed/releases) - [Commits](https://github.com/python/typeshed/commits) --- updated-dependencies: - dependency-name: types-requests dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
* improve the custom build script slightly (#8392)Paul Kehrer2023-02-261-1/+1
| | | this will make it more robust to some upcoming pip changes
* remove several unused SSL bindings (#8391)Alex Gaynor2023-02-271-7/+0
|
* fixes #8298 -- correctly generate content-type header in PKCS#7 SMIME (#8389)Alex Gaynor2023-02-263-51/+120
|
* Bump BoringSSL and/or OpenSSL in CI (#8388)pyca-boringbot[bot]2023-02-251-4/+4
| | | Co-authored-by: pyca-boringbot[bot] <pyca-boringbot[bot]+106132319@users.noreply.github.com>
* Bump coverage from 7.1.0 to 7.2.0 (#8387)dependabot[bot]2023-02-241-1/+1
| | | | | | | | | | | | | | | | Bumps [coverage](https://github.com/nedbat/coveragepy) from 7.1.0 to 7.2.0. - [Release notes](https://github.com/nedbat/coveragepy/releases) - [Changelog](https://github.com/nedbat/coveragepy/blob/master/CHANGES.rst) - [Commits](https://github.com/nedbat/coveragepy/compare/7.1.0...7.2.0) --- updated-dependencies: - dependency-name: coverage dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
* Bump ruff from 0.0.251 to 0.0.252 (#8386)dependabot[bot]2023-02-241-1/+1
| | | | | | | | | | | | | | | | Bumps [ruff](https://github.com/charliermarsh/ruff) from 0.0.251 to 0.0.252. - [Release notes](https://github.com/charliermarsh/ruff/releases) - [Changelog](https://github.com/charliermarsh/ruff/blob/main/BREAKING_CHANGES.md) - [Commits](https://github.com/charliermarsh/ruff/compare/v0.0.251...v0.0.252) --- updated-dependencies: - dependency-name: ruff dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
* Bump syn from 1.0.108 to 1.0.109 in /src/rust (#8385)dependabot[bot]2023-02-241-2/+2
| | | | | | | | | | | | | | | Bumps [syn](https://github.com/dtolnay/syn) from 1.0.108 to 1.0.109. - [Release notes](https://github.com/dtolnay/syn/releases) - [Commits](https://github.com/dtolnay/syn/compare/1.0.108...1.0.109) --- updated-dependencies: - dependency-name: syn dependency-type: indirect update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
* Bump BoringSSL and/or OpenSSL in CI (#8384)pyca-boringbot[bot]2023-02-241-4/+4
| | | Co-authored-by: pyca-boringbot[bot] <pyca-boringbot[bot]+106132319@users.noreply.github.com>
* Bump syn from 1.0.107 to 1.0.108 in /src/rust (#8383)dependabot[bot]2023-02-231-2/+2
| | | | | | | | | | | | | | | Bumps [syn](https://github.com/dtolnay/syn) from 1.0.107 to 1.0.108. - [Release notes](https://github.com/dtolnay/syn/releases) - [Commits](https://github.com/dtolnay/syn/compare/1.0.107...1.0.108) --- updated-dependencies: - dependency-name: syn dependency-type: indirect update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
* Enforce max number of SSH certificate principals (#8376)Jake2023-02-232-0/+14
| | | | | | | | | | | | | | | | | | | | * Enforce max number of SSH certificate principals There is an undocumented limit for the maximum number of valid principals accepted by the openssh tooling, as seen at: * https://github.com/openssh/openssh-portable/blob/27267642699342412964aa785b98afd69d952c88/sshkey.h#L108 * https://github.com/openssh/openssh-portable/blob/25c8a2bbcc10c493d27faea57c42a6bf13fa51f2/sshkey.c#L1801 * https://github.com/openssh/openssh-portable/blob/6180b0fa4f7996687678702806257e661fd5931e/ssh-keygen.c#L1833 This change enforces that same restriction as currently a SSH certificate can be generated that is invalid against the default sshd server. Consideration might be given for any non openssh servers that accept openssh certificates, if they exist and want to allow a greater number of principals. Of note, the 256 limit is not found in the spec for SSH certificates as defined at https://github.com/openssh/openssh-portable/blob/master/PROTOCOL.certkeys. It instead seems to be arbitrarily chosen by the project as some limit was needed. * Address formatting error. * Comment on valid_prinicpals size limit plus test added. --------- Co-authored-by: Jake <jake@vaultish.com>
* Bump BoringSSL and/or OpenSSL in CI (#8382)pyca-boringbot[bot]2023-02-231-4/+4
| | | Co-authored-by: pyca-boringbot[bot] <pyca-boringbot[bot]+106132319@users.noreply.github.com>
* fixes #8374 -- removed docs for removed method (#8377)Alex Gaynor2023-02-222-18/+2
| | | | | * fixes #8374 -- removed docs for removed method * Update CHANGELOG.rst
* Bump markdown-it-py from 2.1.0 to 2.2.0 (#8381)dependabot[bot]2023-02-221-1/+1
| | | | | | | | | | | | | | | | Bumps [markdown-it-py](https://github.com/executablebooks/markdown-it-py) from 2.1.0 to 2.2.0. - [Release notes](https://github.com/executablebooks/markdown-it-py/releases) - [Changelog](https://github.com/executablebooks/markdown-it-py/blob/master/CHANGELOG.md) - [Commits](https://github.com/executablebooks/markdown-it-py/compare/v2.1.0...v2.2.0) --- updated-dependencies: - dependency-name: markdown-it-py dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
* Bump ruff from 0.0.249 to 0.0.251 (#8378)dependabot[bot]2023-02-221-1/+1
| | | | | | | | | | | | | | | | Bumps [ruff](https://github.com/charliermarsh/ruff) from 0.0.249 to 0.0.251. - [Release notes](https://github.com/charliermarsh/ruff/releases) - [Changelog](https://github.com/charliermarsh/ruff/blob/main/BREAKING_CHANGES.md) - [Commits](https://github.com/charliermarsh/ruff/compare/v0.0.249...v0.0.251) --- updated-dependencies: - dependency-name: ruff dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
* Bump tox from 4.4.5 to 4.4.6 (#8380)dependabot[bot]2023-02-221-1/+1
| | | | | | | | | | | | | | | | Bumps [tox](https://github.com/tox-dev/tox) from 4.4.5 to 4.4.6. - [Release notes](https://github.com/tox-dev/tox/releases) - [Changelog](https://github.com/tox-dev/tox/blob/main/docs/changelog.rst) - [Commits](https://github.com/tox-dev/tox/compare/4.4.5...4.4.6) --- updated-dependencies: - dependency-name: tox dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
* Bump types-pytz from 2022.7.1.1 to 2022.7.1.2 (#8379)dependabot[bot]2023-02-221-1/+1
| | | | | | | | | | | | | | | Bumps [types-pytz](https://github.com/python/typeshed) from 2022.7.1.1 to 2022.7.1.2. - [Release notes](https://github.com/python/typeshed/releases) - [Commits](https://github.com/python/typeshed/commits) --- updated-dependencies: - dependency-name: types-pytz dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
* Add shortcut methods for exporting EC keys as raw bytes (#8357)David Buchanan2023-02-2212-0/+211
| | | | | | | | | | | | | | | | | * WIP: Add raw export alias method for x25519 keys * Ditto for x448, ed448, ed25519 * Document new private_bytes_raw public_bytes_raw methods * docs: Populate versionadded to be 40 * docs: Fix PublicFormat -> PrivateFormat where applicable * formatting * Update tests for test_pub_priv_bytes_raw in x25519, x448, ed448 (TODO: ed25519) * Add test_pub_priv_bytes_raw test for Ed25519
* Fix SSHCertificateBuilder sample code (#8373)Jake2023-02-221-3/+2
| | | | | Update SSHCertificateBuilder sample code to: * Correctly use the signing key when signing the certificate, rather than the user's own private key. * Generate the user's public key in one line, making it clearer to the reader that only the public key is an input to the certificate builder.
* Bump BoringSSL and/or OpenSSL in CI (#8372)pyca-boringbot[bot]2023-02-221-4/+4
| | | Co-authored-by: pyca-boringbot[bot] <pyca-boringbot[bot]+106132319@users.noreply.github.com>