| Commit message (Collapse) | Author | Age | Files | Lines |
| ... | |
| |
|
|
|
|
|
|
|
|
|
|
|
| |
* document we test on aarch64
even odds this angers the spellchecker
* Just as my previous commit msg prophesied
* Update docs/spelling_wordlist.txt
Co-authored-by: Alex Gaynor <alex.gaynor@gmail.com>
Co-authored-by: Alex Gaynor <alex.gaynor@gmail.com>
|
| |
|
| |
For now best practice is that they should be optional.
|
| | |
|
| | |
|
| | |
|
| | |
|
| | |
|
| | |
|
| | |
|
| | |
|
| |
|
| |
refs #5376
|
| |
|
|
|
|
|
|
|
|
|
|
|
| |
* support PKCS7 certificate parsing
* refcounts are different in 1.0.2
* rename the functions
* black
* empty commit
* review feedback
|
| |
|
|
|
|
|
| |
* add docker builders, migrate travis to focal by default
* get it right
* use older versions where necessary
|
| | |
|
| |
|
|
|
| |
* remove idna support finally
* remove unused import
|
| |
|
|
|
|
|
|
|
|
|
| |
* Add deprecation warning handling advice note
This tip is being added to help the library maintainers keep
testing cryptography where supporting multiple Python runtime
is still necessary.
Resolves https://github.com/pyca/cryptography/issues/5335
* Move deprecation suppression advice to FAQ
|
| | |
|
| | |
|
| |
|
|
|
| |
* Tell people to use black in our dev docs
* For codecov
|
| | |
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
* generate_pkcs12 (#4952)
* pkcs12 support
* simplify
* remove fixtures
* reorg and other improvements. memleak check
* ugh
* more fixes
* last changes hopefully
Co-authored-by: Tomer Shalev <tshalev@proofpoint.com>
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
* disable the osrandom engine on 1.1.1d+
* skip (and run) some tests on 1.1.1d+
* simplify our conditionals
* Update src/_cffi_src/openssl/src/osrandom_engine.c
Co-authored-by: Alex Gaynor <alex.gaynor@gmail.com>
* words
* more words
* language
* get coverage more cleverly
* a word
* Update .github/workflows/ci.yml
Co-authored-by: Alex Gaynor <alex.gaynor@gmail.com>
Co-authored-by: Alex Gaynor <alex.gaynor@gmail.com>
|
| |
|
| |
InternalErrors are bad when we know they're reachable
|
| |
|
|
|
|
|
| |
* support encoding attributes via CertificateSigningRequestBuilder
* use a constant. now you know what 12 means!
* pep8
|
| |
|
| |
fixes #5127
|
| | |
|
| |
|
| |
we'll parse the challenge password in a doctest after another PR lands
|
| |
|
|
|
|
|
|
|
|
|
|
|
| |
* support x509 request challenge password parsing
* switch to a more generic (but not too generic) attribute parsing
* make it raise a valueerror
* Update tests/x509/test_x509.py
Co-authored-by: Alex Gaynor <alex.gaynor@gmail.com>
Co-authored-by: Alex Gaynor <alex.gaynor@gmail.com>
|
| |
|
|
|
|
|
|
|
| |
* support 4096 bit DSA parsing from numbers classes
* need to get local linting fixed.
* reorder
* add a link to more reasons why DSA sucks
|
| |
|
|
|
|
|
|
|
| |
* add unstructured name x509 csr attribute vector
* Update docs/development/test-vectors.rst
Co-authored-by: Alex Gaynor <alex.gaynor@gmail.com>
Co-authored-by: Alex Gaynor <alex.gaynor@gmail.com>
|
| | |
|
| |
|
|
|
|
|
|
|
| |
* Support parsing SCTs in OCSPResponse
* s/typically/only and pep8
* remove unused vector
Co-authored-by: Szilárd Pfeiffer <szilard.pfeiffer@balasys.hu>
|
| |
|
|
|
| |
* Add variable/fixed cost section
* Add subtitle to each algorithm
* Reorder alphabetically
|
| |
|
|
|
|
|
|
|
|
|
| |
* Run tests on centos8
* Document that we test this
* debugging
* Try adding this?
* Remove this
|
| |
|
|
|
| |
* add SubjectInformationAccess extension support
* fixes
|
| |
|
|
|
|
|
| |
* constrain RSA key generation more heavily
* constraint to just 3 & 65537
* explain change
|
| | |
|
| |
|
|
|
|
|
|
|
| |
* ssh.py contains load/serialize code.
* Add PrivateFormat.OpenSSH to .private_bytes() format.
* Add load_ssh_private_key().
* Use new code for PublicFormat.OpenSSH too.
* load_ssh_public_key() now supports reading signed public keys.
* Supported algorithms: rsa, dsa, ec, ed25519.
* Optional dependency on 'bcrypt' package via [ssh] extra
|
| |
|
|
|
| |
* Fix for linkcheck
* attempted linkcheck fix
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
* Add a way to pass current time to Fernet
The motivation behind this is to be able to unit test code using Fernet
easily without having to monkey patch global state.
* Reformat to satisfy flake8
* Trigger a Fernet.encrypt() branch missing from coverage
* Revert specifying explicit current time in MultiFernet.rotate()
Message's timestamp is not verified anyway since ttl is None.
* Change the Fernet's explicit current time API slightly
This's been suggested in code review.
* Fix a typo
* Fix a typo
* Restore full MultiFernet test coverage and fix a typo
* Restore more coverage
time.time() is not called by MultiFernet.rotate() anymore so the monkey
patching and lambda need to go, because the patched function is not used
and coverage calculation will rightfully notice it.
* Remove an unused import
* Document when the *_at_time Fernet methods were added
|
| | |
|
| |
|
|
|
|
|
|
|
|
|
|
|
| |
primitives (#5271)
* Update key-derivation-functions.rst
Add missing exception to documentation
* Update key-derivation-functions.rst
Adding missing exception documentation for AlreadyFinalized to all the derive() functions missing it
* Removed trailing whitespace
|
| | |
|
| | |
|
| |
|
|
| |
Keys are passed to base64.urlsafe_b64decode for decoding and it accepts
text as well as bytes.
|
| |
|
| |
mis-named parameter
|
| | |
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
* goodbye azure
* Update tox.ini
Co-Authored-By: Alex Gaynor <alex.gaynor@gmail.com>
* review comments
* update a comment
* delete final azure yaml
* linting
Co-authored-by: Alex Gaynor <alex.gaynor@gmail.com>
|
| |
|
|
|
|
|
| |
* Document that we test on bullseye
* Update spelling_wordlist.txt
* Update installation.rst
|
| | |
|