| Commit message (Collapse) | Author | Age | Files | Lines |
| | |
|
| |
|
|
|
|
|
|
|
|
|
|
|
| |
* Drop supported for older LibreSSL
3.1 covers the oldest version used by versions of Alpine and OpenBSD that are supported by their upstreams.
* Remove tests that are now unused
* Update CHANGELOG.rst
Co-authored-by: Paul Kehrer <paul.l.kehrer@gmail.com>
Co-authored-by: Paul Kehrer <paul.l.kehrer@gmail.com>
|
| | |
|
| | |
|
| | |
|
| | |
|
| |
|
| |
we don't support these but advanced users may make use of them
|
| | |
|
| |
|
|
|
|
|
|
|
| |
(#6575)
* Simplify how we test boring, in a way that'll be extensible to the future
* Break out what we ignore
* Get fernet tests passing on boringssl
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
* Attempt to build against BoringSSL in CI
* Check for BoringSSL in the SSL bindings
* Check for BoringSSL in the err bindings
* Check for BoringSSL in the pkcs7 bindings
* Check for BoringSSL in the bignum bindings
* Check for BoringSSL in the EVP bindings
* Check for BoringSSL in the X.509 verify bindings
|
| | |
|
| | |
|
| | |
|
| |
|
|
|
|
|
|
|
|
|
| |
* remove some unused functions and add some docs about use
The functions being removed are unused by both cryptography and
pyopenssl and the existing functions (x509_getm_notBefore/notAfter) are
not deprecated.
* more bindings removed and docs
Cryptography_EVP_PKEY_id was dropped from pyOpenSSL in 2017
|
| | |
|
| | |
|
| | |
|
| | |
|
| | |
|
| | |
|
| | |
|
| | |
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
* xxx
* The rest
* file
* first milestone!
* progress
* Good progress
* Aaaand, tests pass!
* linter fixes
* moar linting
* moar linting
* style on that coverage
* Flesh this out
* reformat
* Remove RSA+DSA support, will be added back later
* Refactor to avoid todo!() branch
* sha384 support
* Unused
* Suggesting I learn to spell? It's a bold move cotton, let's see how it pays off
|
| | |
|
| | |
|
| | |
|
| |
|
|
|
|
|
| |
* shrink bindings now that we have oxidized all extensions
* re-add for pyopenssl
* another pyopenssl required binding
|
| |
|
|
|
| |
* remove unused error constant
* remove unused
|
| | |
|
| | |
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
* Convert CertificatePolicies to Rust
* Satisfy clippy
* Incorporate rust tests into coverage
* Attempt to get the coverage integrated
* Debugging, as a treat
* Attempt to get the coverage integrated
* cursed
* Maybe?
* Required!
* lol
* unused
* Handle non-ascii qualifiers
|
| | |
|
| | |
|
| | |
|
| | |
|
| | |
|
| |
|
|
|
| |
* Migrate nonce and basic constraint extensions to Rust
* clippy
|
| | |
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
* Add LibreSSL 3.4.0 to CI
* Add a LibreSSL 3.4.0 guard
Since LibreSSL 3.4.0 makes most of the TLSv1.3 API available, redefine CRYPTOGRAPHY_OPENSSL_LESS_THAN_111 to LibreSSL versions below 3.4.0.
* DTLS_get_data_mtu does not exist in LibreSSL
* Only EVP_Digest{Sign,Verify} exist in LibreSSL 3.4.0+
* SSL_CTX_{set,get}_keylog_callback does not exist in LibreSSL
* Do not pollute CRYPTOGRAPHY_OPENSSL_LESS_THAN_111 with LibreSSL
While LibreSSL 3.4.0 supports more of TLSv1.3 API, the guard redefinition caused the X448 tests to run when not intended.
|
| | |
|
| | |
|
| | |
|
| | |
|
| | |
|
| |
|
| |
refs #6289
|
| |
|
|
|
|
|
| |
Issue an #error directive if it is
Signed-off-by: Baofeng Wang <baofeng.wang67@gmail.com>
Co-authored-by: Baofeng Wang <baofeng.wang67@gmail.com>
|
| |
|
|
|
|
|
|
|
|
|
| |
* add PKCS7_get0_signers(), X509_STORE_set_purpose(), and X509_PURPOSE_*
* removed argument names of X509_STORE_set_purpose() and PKCS7_get0_signers()
* Update pkcs7.py
* Update x509_vfy.py
Co-authored-by: Paul Kehrer <paul.l.kehrer@gmail.com>
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
* FIPS 3.0.0 support
* comments
* remove unneeded error clear
* review comments
* small refactor
* black
* flake8 too
* review feedback
* oops
* fix
|
| | |
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
* Expose a few more OpenSSL functions that are useful for DTLS support
* Move BIO_ADDR gunk to proper place
* const correct
* Throw more #ifdefs at the wall and see if they stick
* njsmith used "think about what he's doing"
it's probably not very effective
* LibreSSL is not my favorite library
* Attempt to hide my new undefined symbols
* deflake
* Give up on trying to check function pointers for NULLness
AFAICT it works fine in CFFI's ABI mode, but I can't figure out how to
do it in the API mode.
|