summaryrefslogtreecommitdiff
path: root/src/_cffi_src/openssl/cryptography.py
Commit message (Collapse)AuthorAgeFilesLines
* drop libressl 3.5.x support (#8741)Paul Kehrer2023-04-161-3/+0
| | | OpenBSD 7.1 is no longer supported so neither is LibreSSL 3.5.x
* Use from __future__ import annotations everywhere (#8643)Alex Gaynor2023-03-311-0/+1
|
* drop support for openssl < 1.1.1d (#8449)Paul Kehrer2023-03-241-19/+4
| | | | | This removes the OS random engine, which contained the only CPython PSF licensed code in the repository. Accordingly, that license has now been removed.
* handle case where WIN32_LEAN_AND_MEAN may already be defined (#8571)Paul Kehrer2023-03-221-0/+2
|
* Simplify X25519 key loading (#8263)Alex Gaynor2023-02-111-0/+2
|
* LibreSSL 3.7 adds support for Ed25519 (#7803)Theo Buehler2022-11-221-0/+8
| | | | | | | | | * LibreSSL 3.7 adds support for Ed25519 This brings support for the raw public key API. * Use feature variable to enable Ed25519 Ed25519 support is available since OpenSSL 1.1.1b and LibreSSL 3.7.0.
* Update minimum LibreSSL to 3.5 (#7780)Alex Gaynor2022-11-071-5/+0
| | | This is the version of LibreSSL in OpenBSD 7.1, which is the oldest currently supported.
* Try raising OPENSSL_API_COMPAT to 1.1.0 (#6948)Alex Gaynor2022-10-281-4/+3
|
* fixes #7653 -- handle OPENSSL_cleanup existing on LibreSSL 3.6.0 (#7654)Alex Gaynor2022-09-271-0/+3
|
* undef some conflicting macro/types on windows (#7588)Paul Kehrer2022-09-131-7/+16
| | | | | related: https://chromium.googlesource.com/chromium/src/+/refs/heads/main/base/win/wincrypt_shim.h this only affects boring on windows as of this commit
* Move to a libressl policy (#7605)Alex Gaynor2022-09-131-4/+0
| | | This policy is to support things that are in supported versions of openbsd. the current oldest supported openbsd is 7.0, which included libressl 3.4
* remove openssl header include that no longer appears required (#7592)Alex Gaynor2022-09-111-7/+0
|
* Increase our minimum LibreSSL. (#7571)Alex Gaynor2022-09-071-6/+0
| | | OpenBSD 7.0 ships 3.4, and Alpine 3.14 ships 3.3.6
* Drop OpenSSL 1.1.0 (#7570)Alex Gaynor2022-09-071-5/+2
| | | | | There's still a few TODOs for cleanup. Refs #7109
* Load RSA PSS keys as regular RSA keys (#7112)Paul Kehrer2022-04-261-0/+3
| | | | | | | | | | | * RSA PSS openssl constant * load PSS keys (OpenSSL only) but strip the constraints * empty commit for CI, sigh * review feedback * nit
* Support LibreSSL 3.5.0 (#6919)Charlie Li2022-03-021-0/+4
| | | | | | | | | | | | | | | | | | | | | * Add LibreSSL 3.5.0 to CI * Add LibreSSL 3.5.0 guard * Expose FIPS functions in LibreSSL 3.5.0+ * Expose DH API in LibreSSL 3.5.0+ * Expose SSL_get0_verified_chain and SSL_CTX_{set,get}_keylog_callback in LibreSSL 3.5.0+ * Fix SSL_CTX_{set,get}_keylog_callback guard * Add missing CRYPTOGRAPHY_LIBRESSL_LESS_THAN_350 symbol * Fix SSL_CTX_{set,get}_keylog_callback guard again * Condense LibreSSL 3.5.0 defines * Kick CircleCI
* Make a branch more specific now that libressl 3.4 is out (#6876)Alex Gaynor2022-02-161-0/+2
|
* Remove branches that were no longer useful (#6664)Alex Gaynor2021-11-281-5/+0
|
* Drop supported for older LibreSSL (#6660)Alex Gaynor2021-11-261-3/+0
| | | | | | | | | | | | | * Drop supported for older LibreSSL 3.1 covers the oldest version used by versions of Alpine and OpenBSD that are supported by their upstreams. * Remove tests that are now unused * Update CHANGELOG.rst Co-authored-by: Paul Kehrer <paul.l.kehrer@gmail.com> Co-authored-by: Paul Kehrer <paul.l.kehrer@gmail.com>
* LibreSSL added support for this X.509 flag in 3.2.2 (#6659)Alex Gaynor2021-11-271-0/+3
|
* LibreSSL added support for the required RSA functions in 3.1.0 (#6658)Alex Gaynor2021-11-271-0/+4
|
* Add a constant for when we're compiling on BoringSSL (#6505)Alex Gaynor2021-10-311-0/+7
|
* order defines consistently (#6361)Alex Gaynor2021-10-031-3/+3
|
* Support LibreSSL 3.4.0 (#6360)Charlie Li2021-10-031-0/+3
| | | | | | | | | | | | | | | | | * Add LibreSSL 3.4.0 to CI * Add a LibreSSL 3.4.0 guard Since LibreSSL 3.4.0 makes most of the TLSv1.3 API available, redefine CRYPTOGRAPHY_OPENSSL_LESS_THAN_111 to LibreSSL versions below 3.4.0. * DTLS_get_data_mtu does not exist in LibreSSL * Only EVP_Digest{Sign,Verify} exist in LibreSSL 3.4.0+ * SSL_CTX_{set,get}_keylog_callback does not exist in LibreSSL * Do not pollute CRYPTOGRAPHY_OPENSSL_LESS_THAN_111 with LibreSSL While LibreSSL 3.4.0 supports more of TLSv1.3 API, the guard redefinition caused the X448 tests to run when not intended.
* cffi: check openssl version is less than 1.1.0 (#6266)match man2021-09-131-0/+4
| | | | | | | Issue an #error directive if it is Signed-off-by: Baofeng Wang <baofeng.wang67@gmail.com> Co-authored-by: Baofeng Wang <baofeng.wang67@gmail.com>
* Added handling for OpenSSL "xts duplicated keys" error. (#6085)Angus Gratton2021-06-091-0/+3
| | | | | | | | | | | | | | | | | | | | | * Added handling for OpenSSL "xts duplicated keys" error. Closes #5998 This error value was added pre-OpenSSL 1.1.1d here: https://github.com/openssl/openssl/commit/2a5f63c9a61be7582620c4b5da202bb3fd7e4138 and refined to only cover encryption shortly after: https://github.com/openssl/openssl/commit/58ae5a47da1e4843b0cd1846eb297b341d0e7201 * test_aes: Remove unnecessary assignment * xts: Update duplicated keys check for OpenSSL 3 providers Also, change the exception message slightly: - Now matches the tense used by openssl - Turns out decryption *is* checked for duplicate keys by OpenSSL 3 when in FIPS mode
* [WIP] 3.0.0 support (#5250)Paul Kehrer2021-04-221-0/+3
| | | | | | | * 3.0.0 support * almost...there... * make mypy happy
* Fix build with LibreSSL 3.3.2 (#5988)Charlie Li2021-04-191-0/+7
| | | | | | | | | | | | | | | | | * LibreSSL 3.3.2 supports SSL_OP_NO_DTLS* While here, bump CI * Fix preprocessor guards for LibreSSL's SSL_OP_NO_DTLS* DTLS_set_link_mtu and DTLS_get_link_min_mtu are not part of 3.3.2 * Switch to LESS_THAN context for LibreSSL 3.3.2 While here, fix indents * Remove extra C variable declaration The variable is not actually used from Python
* Remove __future__ import from our code (#5610)Alex Gaynor2020-12-091-1/+0
|
* Don't build our custom osrandom engine on libressl (#5593)Alex Gaynor2020-11-291-2/+2
| | | | | | | * Don't build our custom osrandom engine on libressl As far as I can tell it's never used on LibreSSL -- they're `RAND_bytes` function unconditionally calls `arc4random_buf` * Update cryptography.py
* Delete all the 1.0.2 code (#5511)Alex Gaynor2020-10-251-15/+0
|
* handle unnamed-but-really-named curves in 1.0.2u (#5362)Paul Kehrer2020-07-301-0/+3
| | | | | | | | | * handle unnamed-but-really-named curves in 1.0.2u * handle openssl 1.0.2 not supporting better install commands on make * do what openssl didn't feel was necessary in 1.0.2t/u I didn't bind the named curve constant, fight me.
* fixes #5321 -- deprecate support for OpenSSL 1.0.2 (#5333)Alex Gaynor2020-07-201-0/+1
|
* disable the osrandom engine on 1.1.1d+ (#5317)Paul Kehrer2020-07-191-0/+9
| | | | | | | | | | | | | | | | | | | | | | | | | | | * disable the osrandom engine on 1.1.1d+ * skip (and run) some tests on 1.1.1d+ * simplify our conditionals * Update src/_cffi_src/openssl/src/osrandom_engine.c Co-authored-by: Alex Gaynor <alex.gaynor@gmail.com> * words * more words * language * get coverage more cleverly * a word * Update .github/workflows/ci.yml Co-authored-by: Alex Gaynor <alex.gaynor@gmail.com> Co-authored-by: Alex Gaynor <alex.gaynor@gmail.com>
* Dropped support for LibreSSL 2.7, 2.8, and 2.9.0 (2.9.1+ are still ↵Alex Gaynor2020-04-251-12/+0
| | | | supported) (#5231)
* Drop support for OpenSSL 1.0.1 (#5178)Alex Gaynor2020-04-041-5/+0
|
* Fixed #5050 -- dropped support for an old LibresSSL release (#5056)Alex Gaynor2019-11-111-3/+0
| | | | | | * Fixed #5050 -- dropped support for an old LibresSSL release * Changelog
* Use generic DTLS functions added in LibreSSL 2.9.1 (#4855)Charlie Li2019-04-231-0/+3
| | | | | | | | | | * Use generic DTLS functions added in LibreSSL 2.9.1 While here, bump travis. * Remove LibreSSL 2.9.0 from travis now that 2.9.1 exists. Requested by: @reaperhulk
* ed25519 support (#4114)Paul Kehrer2019-02-261-0/+3
| | | | | | * ed25519 support * review feedback
* Run wycheproof RSA tests on LibreSSL>=2.8 (#4737)Alex Gaynor2019-01-241-1/+10
| | | | | | | | * Run wycheproof RSA tests on LibreSSL>=2.8 * Define it this way * These are errors on libressl
* add ed25519 bindings (#4476)Paul Kehrer2018-09-261-0/+3
| | | | | | * add ed25519 bindings * var name
* Remove conditionals for OpenSSL 1.1.1 pre-releases (#4467)Alex Gaynor2018-09-151-3/+0
|
* OCSP bindings (#4449)Paul Kehrer2018-09-011-0/+5
| | | | | | | | | | | | | | | * add many OCSP bindings Much of OCSP was opaqued in 1.1.0 so this also adds a bunch of getters for older OpenSSL. However, 1.1.0 itself made it impossible to access certain fields in the opaque struct, so we're forced to de-opaque them for 1.1.0 through 1.1.0i as well as 1.1.1-pre1 through 1.1.1-pre9. There is a patch (openssl/openssl#7082) that fixes this and should be in 1.1.0j and 1.1.1-pre10 (or 1.1.1 final, whichever they choose to issue) * backslashes are sometimes useful * comments
* set an OPENSSL_API_COMPAT level (#4313)Paul Kehrer2018-07-061-0/+5
| | | | | | | | | * set an OPENSSL_API_COMPAT level this helps prevent adding deprecated functions and will let us see what we need to/can prune in the distant future when we support only 1.1.0+ * raise the api compat to 1.0.1 (which doesn't matter but is less confusing)
* LibreSSL 2.7.x support (#4270)Paul Kehrer2018-05-301-0/+3
| | | | | | | | * libre 2.7.3 compatibility * add a changelog * actually build against 2.7.3
* Removes branches in bindings for various OpenSSL 1.1.0 prereleases (#4269)Alex Gaynor2018-05-311-6/+0
| | | | | | | | | | | | | | | | * Remove defines for openssl 1.1.0 pre * Update bio.py * Update dh.py * Update dsa.py * Update rsa.py * Update x509_vfy.py * Compress branches
* OpenSSL 1.0.2o has switched to winsock2 (#4184)Thierry Bastian2018-04-051-0/+3
| | | So here we need to make sure we don't simply include windows but only the parts that we want
* Remove branches for 1.0.2 betas. (#3870)Alex Gaynor2017-08-201-4/+2
| | | There's no sense in which we actually support them
* Funcs macros gone (#3695)Paul Kehrer2017-06-271-3/+0
| | | | | | | | * No more FUNCS/MACROS distinction * change the docs to not talk about MACROS since they're gone * remove out of date comment
* jurisdictionCountryName also must be PrintableString (#3516)Alex Gaynor2017-05-251-1/+6
| | | | | | | | | | | | | | * jurisdictionCountryName also must be PrintableString * flake8 + citation * Write a test, which fails. If my analysis is correct, this is blocked on: https://github.com/openssl/openssl/pull/3284 * This is only true on 1.1.0 * clearly express the version requirement
View Lorry Controller Status