summaryrefslogtreecommitdiff
path: root/docs/development
Commit message (Collapse)AuthorAgeFilesLines
* disallow p less than 512-bit on DH (#5592)Paul Kehrer2020-11-291-0/+2
| | | | | | | | | | | | | | | | * disallow p less than 512-bit on DH OpenSSL 3.0.0 enforces this so we'll go ahead and enforce it everywhere that's practical for us. (Note that we do not enforce on deserializing PKCS1/PKCS8 keys in < 3.0.0, but this PR adds a test so that in the 3.0.0 support branch we can test an error path) * missing test * black * _MIN_MODULUS_SIZE is now a thing * skip on fips
* Delete all the 1.0.2 code (#5511)Alex Gaynor2020-10-251-2/+2
|
* Remove bindings docs (#5469)Alex Gaynor2020-09-201-1/+1
|
* add RSA 4096-bit self-signed CA for some upcoming tests (#5464)Paul Kehrer2020-09-141-0/+4
|
* Account for Bruce redoing his website or something (#5461)Alex Gaynor2020-09-131-1/+1
|
* fixed verify script that couldn't have ever worked (#5443)Alex Gaynor2020-08-291-2/+2
|
* update submitting patches docs to be a bit more true (#5407)Paul Kehrer2020-08-161-4/+3
| | | For now best practice is that they should be optional.
* add basic PKCS7 test vectors (#5370)Paul Kehrer2020-08-021-0/+8
|
* Tell people to use black in our dev docs (#5328)Alex Gaynor2020-07-201-3/+4
| | | | | * Tell people to use black in our dev docs * For codecov
* Paint it Black by the Rolling Stones (#5324)Alex Gaynor2020-07-2010-98/+97
|
* raise a valueerror on multi-SINGLERESP valued OCSP responses (#5316)Paul Kehrer2020-07-181-0/+2
| | | InternalErrors are bad when we know they're reachable
* support 4096 bit DSA parsing from numbers classes (#5301)Paul Kehrer2020-07-051-0/+2
| | | | | | | | | * support 4096 bit DSA parsing from numbers classes * need to get local linting fixed. * reorder * add a link to more reasons why DSA sucks
* add unstructured name x509 csr attribute vector (#5302)Paul Kehrer2020-07-051-0/+3
| | | | | | | | | * add unstructured name x509 csr attribute vector * Update docs/development/test-vectors.rst Co-authored-by: Alex Gaynor <alex.gaynor@gmail.com> Co-authored-by: Alex Gaynor <alex.gaynor@gmail.com>
* invalid challenge value csr (#5300)Paul Kehrer2020-07-051-0/+3
|
* add SubjectInformationAccess extension support (#5295)Paul Kehrer2020-07-021-0/+3
| | | | | * add SubjectInformationAccess extension support * fixes
* Fix for linkcheck (#5281)Alex Gaynor2020-06-201-1/+1
| | | | | * Fix for linkcheck * attempted linkcheck fix
* Test vectors for OpenSSH serialization format (#5151)Marko Kreen2020-05-251-0/+35
|
* Added wycheproof hmac vectors (#5238)Alex Gaynor2020-04-261-1/+1
|
* Replace legacy file handling with a context manager. (#5092)Mads Jensen2020-01-121-21/+22
| | | | | | | | * Replace legacy file handling with a context manager. * flake8 fix Co-authored-by: Alex Gaynor <alex.gaynor@gmail.com>
* Use literals for collections and comprehensions. (#5091)Mads Jensen2020-01-121-8/+8
|
* drop python 3.4 support (#5087)Paul Kehrer2019-12-081-1/+1
| | | | | | | | | | | | * drop python 3.4 support Our dependencies have started dropping support so it is becoming difficult to test. Additionally, Python 3.4 represents <2% of our downloads, so taking on a large maintenance burden to maintain support isn't a good use of limited time. Accordingly, we're dropping testing infrastructure and migrating our abi3 wheels to py35+. * use removed instead of dropped
* Added a test vector of an OCSP response with SCT extension (#5066)Alex Gaynor2019-11-161-0/+2
|
* Parse single_extensions in OCSP responses (#5059)Paul Kehrer2019-11-111-0/+2
| | | | | | | | | | | | * add single_extensions to OCSPResponse (#4753) * new vector, updateed docs, more stringent parser, changelog, etc * simplify PR (no SCT for now) * add a comment * finish pulling out the sct stuff so tests might actually run
* Fixed link for linkcheck (#5047)Alex Gaynor2019-11-011-1/+1
|
* Finish ed25519 and ed448 support in x509 module (#4972)Marko Kreen2019-09-091-0/+6
| | | | | | | | | | | | | | | | | | * Support ed25519 in csr/crl creation * Tests for ed25519/x509 * Support ed448 in crt/csr/crl creation * Tests for ed448/x509 * Support ed25519/ed448 in OCSPResponseBuilder * Tests for eddsa in OCSPResponseBuilder * Builder check missing in create_x509_csr * Documentation update for ed25519+ed448 in x509
* fix coverage by adding two artificial DSA public keys (#4984)Paul Kehrer2019-09-061-0/+5
| | | | | | | | | | * fix coverage by adding two artificial DSA public keys One key removes the optional parameters from the structure to cover a branch conditional, and the other key has its BITSTRING padding value set to a non-zero value. * lexicographic? never heard of it
* add x509 CSR with challenge password (#4942)Paul Kehrer2019-07-091-0/+2
|
* fix inaccurate ed25519 vector docs (#4938)Paul Kehrer2019-07-061-1/+1
|
* more ed25519 vectors, better description of RFC 8410 vector (#4936)Paul Kehrer2019-07-061-2/+10
| | | | | | | | * more ed25519 vectors, better description of RFC 8410 vector * typo * oops, doc'd wrong
* add ed25519ph x509 test vector (#4933)Paul Kehrer2019-07-031-0/+2
|
* Order the elements in reviewing patches reasonably (#4883)Alex Gaynor2019-05-091-6/+6
|
* add RSA PSS certificate (#4865)Paul Kehrer2019-05-041-0/+1
| | | | | | * add RSA PSS certificate * i still maintain that 257 is slightly better than 256
* Refs #4830 -- added a vector of an x.509 certificate with a negative … (#4842)Alex Gaynor2019-04-131-0/+2
| | | | | | * Refs #4830 -- added a vector of an x.509 certificate with a negative serial number * Line wrap
* add poly1305 test vectors from rfc 7539 (#4800)Paul Kehrer2019-03-071-0/+5
|
* add ed25519 PKCS8 and subjectPublicKeyInfo vectors (#4719)Paul Kehrer2019-02-201-0/+7
| | | | | | * add ed25519 PKCS8 and subjectPublicKeyInfo vectors * line length fix
* add ed448 PKCS8 and subjectPublicKeyInfo vectors (#4718)Paul Kehrer2019-02-201-0/+7
|
* concede to digicert's garbage CDN (#4747)Paul Kehrer2019-02-031-1/+1
| | | Which, despite supporting HTTPS, is non-deterministically providing 404s and DigiCert has asserted that http is the only "supported" protocol.
* consistently linky RFC in the docs (#4716)Alex Gaynor2019-01-183-4/+4
| | | | | | * consistently linky RFC in the docs * oops
* Update wycheproof commit in docs (#4687)Alex Gaynor2019-01-131-1/+1
|
* add x25519 pkcs8/subjectpublickeyinfo vectors (#4685)Paul Kehrer2019-01-131-0/+7
|
* add signature_hash_algorithm to OCSPResponse (#4681)Paul Kehrer2019-01-101-0/+2
| | | | | | * add signature_hash_algorithm to OCSPResponse * fix pointless asserts
* add x448 private/public PEM/DER pkcs8/subjectpublickeyinfo vectors (#4667)Paul Kehrer2019-01-011-0/+7
|
* Sphinx's website is now https (#4662)Alex Gaynor2018-12-302-2/+2
| | | | | | * Sphinx's website is now https * Sphinx's website is now https
* DigiCert's root is now available over https (#4664)Alex Gaynor2018-12-301-1/+1
|
* add compressed point EC vectors (#4637)Paul Kehrer2018-12-101-0/+2
|
* add ed448 test vectors (#4608)Paul Kehrer2018-11-241-0/+1
|
* x448 test vectors (#4576)Paul Kehrer2018-11-121-1/+1
|
* another pkcs12 vector (#4557)Paul Kehrer2018-11-041-2/+8
| | | | | | | | * another pkcs12 vector also fixed the pathing to be consistent in the docs for PKCS12 vectors * add a cert with no key pkcs12 as well
* additional pkcs12 test vector (#4554)Paul Kehrer2018-11-031-0/+3
|
* add pkcs12 test vectors (#4535)Paul Kehrer2018-10-301-0/+20
| | | | | | * add pkcs12 test vectors * add more explanatino