summaryrefslogtreecommitdiff
path: root/src/_cffi_src
Commit message (Collapse)AuthorAgeFilesLines
* Remove branches that were no longer useful (#6664)Alex Gaynor2021-11-281-5/+0
|
* Drop supported for older LibreSSL (#6660)Alex Gaynor2021-11-262-16/+0
| | | | | | | | | | | | | * Drop supported for older LibreSSL 3.1 covers the oldest version used by versions of Alpine and OpenBSD that are supported by their upstreams. * Remove tests that are now unused * Update CHANGELOG.rst Co-authored-by: Paul Kehrer <paul.l.kehrer@gmail.com> Co-authored-by: Paul Kehrer <paul.l.kehrer@gmail.com>
* LibreSSL added support for this X.509 flag in 3.2.2 (#6659)Alex Gaynor2021-11-272-1/+4
|
* LibreSSL added support for the required RSA functions in 3.1.0 (#6658)Alex Gaynor2021-11-272-1/+5
|
* Remove link argument handling that's not required on py3 (#6655)Alex Gaynor2021-11-252-19/+1
|
* Update comment to reflect new reason this is needed (#6650)Alex Gaynor2021-11-241-1/+2
|
* add one more engine binding (#6599)Paul Kehrer2021-11-121-0/+10
| | | we don't support these but advanced users may make use of them
* Make DH bindings follow style guide (#6586)Alex Gaynor2021-11-121-2/+2
|
* Simplify how we test boring, in a way that'll be extensible to the future ↵Alex Gaynor2021-11-101-0/+4
| | | | | | | | | (#6575) * Simplify how we test boring, in a way that'll be extensible to the future * Break out what we ignore * Get fernet tests passing on boringssl
* Begin building with BoringSSL in our CI, no tests yet (#6554)Alex Gaynor2021-11-076-1/+75
| | | | | | | | | | | | | | | * Attempt to build against BoringSSL in CI * Check for BoringSSL in the SSL bindings * Check for BoringSSL in the err bindings * Check for BoringSSL in the pkcs7 bindings * Check for BoringSSL in the bignum bindings * Check for BoringSSL in the EVP bindings * Check for BoringSSL in the X.509 verify bindings
* Remove datagram bio bindings (#6555)Alex Gaynor2021-11-061-2/+0
|
* Check for BoringSSL in the SSL bindings (#6553)Alex Gaynor2021-11-061-1/+11
|
* Added an additional check for boringssl in the ssl bindings (#6547)Alex Gaynor2021-11-051-1/+1
|
* remove some unused functions and add some docs about use (#6544)Paul Kehrer2021-11-043-17/+6
| | | | | | | | | | | * remove some unused functions and add some docs about use The functions being removed are unused by both cryptography and pyopenssl and the existing functions (x509_getm_notBefore/notAfter) are not deprecated. * more bindings removed and docs Cryptography_EVP_PKEY_id was dropped from pyOpenSSL in 2017
* remove OPENSSL_no_config (#6536)Paul Kehrer2021-11-031-2/+0
|
* Check for BoringSSL in err.py (#6510)Alex Gaynor2021-10-311-1/+1
|
* Check for BoringSSL in the engine bindings (#6509)Alex Gaynor2021-10-311-2/+10
|
* Check for BoringSSL in the crypto bindings (#6508)Alex Gaynor2021-10-311-5/+4
|
* Check for BoringSSL in ssl.py (#6507)Alex Gaynor2021-10-311-4/+4
|
* BoringSSL is like LibreSSL in bio.py (#6506)Alex Gaynor2021-10-311-1/+1
|
* Add a constant for when we're compiling on BoringSSL (#6505)Alex Gaynor2021-10-311-0/+7
|
* Remove unused SSL bindings (#6473)Alex Gaynor2021-10-251-15/+0
|
* Port OCSP Response generation to Rust (#6460)Alex Gaynor2021-10-252-41/+0
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * xxx * The rest * file * first milestone! * progress * Good progress * Aaaand, tests pass! * linter fixes * moar linting * moar linting * style on that coverage * Flesh this out * reformat * Remove RSA+DSA support, will be added back later * Refactor to avoid todo!() branch * sha384 support * Unused * Suggesting I learn to spell? It's a bold move cotton, let's see how it pays off
* Port OCSPRequest creation to Rust (#6446)Alex Gaynor2021-10-211-7/+0
|
* Remove unused asn1.h bindings (#6444)Alex Gaynor2021-10-201-5/+0
|
* Slim down GENERAL_NAME declaration (#6443)Alex Gaynor2021-10-201-19/+1
|
* shrink bindings now that we have oxidized all extensions (#6442)Paul Kehrer2021-10-192-153/+3
| | | | | | | * shrink bindings now that we have oxidized all extensions * re-add for pyopenssl * another pyopenssl required binding
* remove unused error constant (#6409)Alex Gaynor2021-10-122-6/+0
| | | | | * remove unused error constant * remove unused
* remove family of unused bindings (#6408)Alex Gaynor2021-10-121-8/+0
|
* Remove a ton of unused bindings (#6407)Alex Gaynor2021-10-122-62/+0
|
* Convert CertificatePolicies to Rust (#6400)Alex Gaynor2021-10-122-16/+0
| | | | | | | | | | | | | | | | | | | | | | | | | * Convert CertificatePolicies to Rust * Satisfy clippy * Incorporate rust tests into coverage * Attempt to get the coverage integrated * Debugging, as a treat * Attempt to get the coverage integrated * cursed * Maybe? * Required! * lol * unused * Handle non-ascii qualifiers
* remove low level aes bindings that are no longer necessary (#6399)Paul Kehrer2021-10-102-23/+0
|
* Remove unused binding (#6398)Alex Gaynor2021-10-101-2/+0
|
* Port InvalidityDate and KeyUsage serialization to Rust (#6397)Alex Gaynor2021-10-101-2/+0
|
* Port EKU, PC, and CRL reason extensions to Rust (#6388)Alex Gaynor2021-10-072-10/+0
|
* Convert a few more simple extensions to Rust encoding (#6376)Alex Gaynor2021-10-051-3/+0
|
* Migrate nonce and basic constraint extensions to Rust (#6375)Alex Gaynor2021-10-051-9/+0
| | | | | * Migrate nonce and basic constraint extensions to Rust * clippy
* order defines consistently (#6361)Alex Gaynor2021-10-031-3/+3
|
* Support LibreSSL 3.4.0 (#6360)Charlie Li2021-10-033-6/+15
| | | | | | | | | | | | | | | | | * Add LibreSSL 3.4.0 to CI * Add a LibreSSL 3.4.0 guard Since LibreSSL 3.4.0 makes most of the TLSv1.3 API available, redefine CRYPTOGRAPHY_OPENSSL_LESS_THAN_111 to LibreSSL versions below 3.4.0. * DTLS_get_data_mtu does not exist in LibreSSL * Only EVP_Digest{Sign,Verify} exist in LibreSSL 3.4.0+ * SSL_CTX_{set,get}_keylog_callback does not exist in LibreSSL * Do not pollute CRYPTOGRAPHY_OPENSSL_LESS_THAN_111 with LibreSSL While LibreSSL 3.4.0 supports more of TLSv1.3 API, the guard redefinition caused the X448 tests to run when not intended.
* remove unused bindings (#6357)Alex Gaynor2021-10-031-7/+0
|
* remove unused bindings (#6358)Alex Gaynor2021-10-031-14/+1
|
* remove unneeded bindings (#6324)Paul Kehrer2021-09-283-63/+0
|
* remove unused rand bindings (#6309)Alex Gaynor2021-09-271-5/+0
|
* remove unused bindings from x509name (#6310)Alex Gaynor2021-09-271-11/+0
|
* Remove unused OCSP bindings (#6306)Alex Gaynor2021-09-261-112/+0
| | | refs #6289
* cffi: check openssl version is less than 1.1.0 (#6266)match man2021-09-131-0/+4
| | | | | | | Issue an #error directive if it is Signed-off-by: Baofeng Wang <baofeng.wang67@gmail.com> Co-authored-by: Baofeng Wang <baofeng.wang67@gmail.com>
* add PKCS7_get0_signers(), X509_STORE_set_purpose(), and X509_PURPOSE_* (#6187)Mathias Panzenböck2021-08-292-0/+22
| | | | | | | | | | | * add PKCS7_get0_signers(), X509_STORE_set_purpose(), and X509_PURPOSE_* * removed argument names of X509_STORE_set_purpose() and PKCS7_get0_signers() * Update pkcs7.py * Update x509_vfy.py Co-authored-by: Paul Kehrer <paul.l.kehrer@gmail.com>
* FIPS 3.0.0 support (#6012)Paul Kehrer2021-08-292-1/+14
| | | | | | | | | | | | | | | | | | | | | * FIPS 3.0.0 support * comments * remove unneeded error clear * review comments * small refactor * black * flake8 too * review feedback * oops * fix
* remove unneeded binding (#6150)Paul Kehrer2021-06-301-1/+0
|
* Expose a few more OpenSSL functions that are useful for DTLS support (#6138)Nathaniel J. Smith2021-06-302-0/+45
| | | | | | | | | | | | | | | | | | | | | | | | * Expose a few more OpenSSL functions that are useful for DTLS support * Move BIO_ADDR gunk to proper place * const correct * Throw more #ifdefs at the wall and see if they stick * njsmith used "think about what he's doing" it's probably not very effective * LibreSSL is not my favorite library * Attempt to hide my new undefined symbols * deflake * Give up on trying to check function pointers for NULLness AFAICT it works fine in CFFI's ABI mode, but I can't figure out how to do it in the API mode.