summaryrefslogtreecommitdiff
path: root/src/_cffi_src
Commit message (Collapse)AuthorAgeFilesLines
...
* add a new NID we will use for PKCS12 (#7176)Paul Kehrer2022-05-021-0/+1
|
* add a a constant for pyOpenSSL with OpenSSL 3 (#7156)Paul Kehrer2022-04-301-0/+13
|
* Remove invalid OPENSSL_NO_PSK defined guard (#7146)James Hilliard2022-04-291-2/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | These symbols are not conditional on OPENSSL_NO_PSK in ssl.h SSL_CTX_set_psk_find_session_callback: https://github.com/openssl/openssl/blob/openssl-3.0.2/include/openssl/ssl.h.in#L847 SSL_CTX_set_psk_use_session_callback: https://github.com/openssl/openssl/blob/openssl-3.0.2/include/openssl/ssl.h.in#L850-L851 As such we can not guard the fallback with defined(OPENSSL_NO_PSK) as this will result in redeclaration errors. Fixes: build/temp.linux-sparc64-3.10/_openssl.c:2286:8: error: 'SSL_CTX_set_psk_find_session_callback' redeclared as different kind of symbol 2286 | void (*SSL_CTX_set_psk_find_session_callback)(SSL_CTX *, | ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ In file included from build/temp.linux-sparc64-3.10/_openssl.c:832: /home/giuliobenetti/autobuild/run/instance-0/output-1/host/sparc64-buildroot-linux-gnu/sysroot/usr/include/openssl/ssl.h:855:6: note: previous declaration of 'SSL_CTX_set_psk_find_session_callback' was here 855 | void SSL_CTX_set_psk_find_session_callback(SSL_CTX *ctx, | ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ build/temp.linux-sparc64-3.10/_openssl.c:2293:8: error: 'SSL_CTX_set_psk_use_session_callback' redeclared as different kind of symbol 2293 | void (*SSL_CTX_set_psk_use_session_callback)(SSL_CTX *, | ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ In file included from build/temp.linux-sparc64-3.10/_openssl.c:832: /home/giuliobenetti/autobuild/run/instance-0/output-1/host/sparc64-buildroot-linux-gnu/sysroot/usr/include/openssl/ssl.h:858:6: note: previous declaration of 'SSL_CTX_set_psk_use_session_callback' was here 858 | void SSL_CTX_set_psk_use_session_callback(SSL_CTX *ctx, | ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Signed-off-by: James Hilliard <james.hilliard1@gmail.com>
* restore some bindings for older pyopenssl temporarily (#7136)Paul Kehrer2022-04-275-0/+42
| | | These will be removed again in a future release.
* Load RSA PSS keys as regular RSA keys (#7112)Paul Kehrer2022-04-262-0/+10
| | | | | | | | | | | * RSA PSS openssl constant * load PSS keys (OpenSSL only) but strip the constraints * empty commit for CI, sigh * review feedback * nit
* Add support for PSS.AUTO and PSS.DIGEST_LENGTH (#7082)Paul Kehrer2022-04-161-0/+6
| | | | | | | * add PSS auto support for verification * add support for PSS.DIGEST_LENGTH * review comments
* check for invalid keys that RSA_check_key misses (#7080)Paul Kehrer2022-04-161-0/+1
| | | | | | | | | * check for invalid keys that RSA_check_key misses RSA_check_key checks for primality but that fails to catch this case since 2 is prime. Instead we fetch p and q and verify that they are odd and if not reject the key as invalid. * circleci sucks
* fix two compiler warnings (#7036)Paul Kehrer2022-04-042-2/+1
| | | | constify and remove a func we don't use or need that had a wrong return type anyway.
* add TLSv1.3 PSKs function bindings (#7002)可可熊2022-04-031-0/+58
| | | | | | | | | * TLSv1.3 PSKs function bindings * add PSK related functions to be conditional * add Cryptography_SSL_SESSION_new to avoid namespace collision Co-authored-by: d00624431 <dongpu1@huawei.com>
* add new bindings for OpenSSL 3.0.0 cipher fetching/freeing (#7027)Paul Kehrer2022-04-031-0/+9
|
* Remove unused bindings (#6984)Alex Gaynor2022-03-204-37/+0
|
* remove unused deprecated bindings (#6951)Alex Gaynor2022-03-131-5/+0
|
* Support LibreSSL 3.5.0 (#6919)Charlie Li2022-03-024-4/+9
| | | | | | | | | | | | | | | | | | | | | * Add LibreSSL 3.5.0 to CI * Add LibreSSL 3.5.0 guard * Expose FIPS functions in LibreSSL 3.5.0+ * Expose DH API in LibreSSL 3.5.0+ * Expose SSL_get0_verified_chain and SSL_CTX_{set,get}_keylog_callback in LibreSSL 3.5.0+ * Fix SSL_CTX_{set,get}_keylog_callback guard * Add missing CRYPTOGRAPHY_LIBRESSL_LESS_THAN_350 symbol * Fix SSL_CTX_{set,get}_keylog_callback guard again * Condense LibreSSL 3.5.0 defines * Kick CircleCI
* Added X509_alias_set1 to the ffi (#6897)ajoino2022-02-261-0/+1
|
* Make a branch more specific now that libressl 3.4 is out (#6876)Alex Gaynor2022-02-161-0/+2
|
* Random cleanups (#6824)Alex Gaynor2022-01-291-7/+5
|
* add `SSL_set_verify` binding for pyca/pyopenssl#255 (#6797)Maximilian Hils2022-01-061-0/+2
|
* Remove branches that were no longer useful (#6664)Alex Gaynor2021-11-281-5/+0
|
* Drop supported for older LibreSSL (#6660)Alex Gaynor2021-11-262-16/+0
| | | | | | | | | | | | | * Drop supported for older LibreSSL 3.1 covers the oldest version used by versions of Alpine and OpenBSD that are supported by their upstreams. * Remove tests that are now unused * Update CHANGELOG.rst Co-authored-by: Paul Kehrer <paul.l.kehrer@gmail.com> Co-authored-by: Paul Kehrer <paul.l.kehrer@gmail.com>
* LibreSSL added support for this X.509 flag in 3.2.2 (#6659)Alex Gaynor2021-11-272-1/+4
|
* LibreSSL added support for the required RSA functions in 3.1.0 (#6658)Alex Gaynor2021-11-272-1/+5
|
* Remove link argument handling that's not required on py3 (#6655)Alex Gaynor2021-11-252-19/+1
|
* Update comment to reflect new reason this is needed (#6650)Alex Gaynor2021-11-241-1/+2
|
* add one more engine binding (#6599)Paul Kehrer2021-11-121-0/+10
| | | we don't support these but advanced users may make use of them
* Make DH bindings follow style guide (#6586)Alex Gaynor2021-11-121-2/+2
|
* Simplify how we test boring, in a way that'll be extensible to the future ↵Alex Gaynor2021-11-101-0/+4
| | | | | | | | | (#6575) * Simplify how we test boring, in a way that'll be extensible to the future * Break out what we ignore * Get fernet tests passing on boringssl
* Begin building with BoringSSL in our CI, no tests yet (#6554)Alex Gaynor2021-11-076-1/+75
| | | | | | | | | | | | | | | * Attempt to build against BoringSSL in CI * Check for BoringSSL in the SSL bindings * Check for BoringSSL in the err bindings * Check for BoringSSL in the pkcs7 bindings * Check for BoringSSL in the bignum bindings * Check for BoringSSL in the EVP bindings * Check for BoringSSL in the X.509 verify bindings
* Remove datagram bio bindings (#6555)Alex Gaynor2021-11-061-2/+0
|
* Check for BoringSSL in the SSL bindings (#6553)Alex Gaynor2021-11-061-1/+11
|
* Added an additional check for boringssl in the ssl bindings (#6547)Alex Gaynor2021-11-051-1/+1
|
* remove some unused functions and add some docs about use (#6544)Paul Kehrer2021-11-043-17/+6
| | | | | | | | | | | * remove some unused functions and add some docs about use The functions being removed are unused by both cryptography and pyopenssl and the existing functions (x509_getm_notBefore/notAfter) are not deprecated. * more bindings removed and docs Cryptography_EVP_PKEY_id was dropped from pyOpenSSL in 2017
* remove OPENSSL_no_config (#6536)Paul Kehrer2021-11-031-2/+0
|
* Check for BoringSSL in err.py (#6510)Alex Gaynor2021-10-311-1/+1
|
* Check for BoringSSL in the engine bindings (#6509)Alex Gaynor2021-10-311-2/+10
|
* Check for BoringSSL in the crypto bindings (#6508)Alex Gaynor2021-10-311-5/+4
|
* Check for BoringSSL in ssl.py (#6507)Alex Gaynor2021-10-311-4/+4
|
* BoringSSL is like LibreSSL in bio.py (#6506)Alex Gaynor2021-10-311-1/+1
|
* Add a constant for when we're compiling on BoringSSL (#6505)Alex Gaynor2021-10-311-0/+7
|
* Remove unused SSL bindings (#6473)Alex Gaynor2021-10-251-15/+0
|
* Port OCSP Response generation to Rust (#6460)Alex Gaynor2021-10-252-41/+0
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * xxx * The rest * file * first milestone! * progress * Good progress * Aaaand, tests pass! * linter fixes * moar linting * moar linting * style on that coverage * Flesh this out * reformat * Remove RSA+DSA support, will be added back later * Refactor to avoid todo!() branch * sha384 support * Unused * Suggesting I learn to spell? It's a bold move cotton, let's see how it pays off
* Port OCSPRequest creation to Rust (#6446)Alex Gaynor2021-10-211-7/+0
|
* Remove unused asn1.h bindings (#6444)Alex Gaynor2021-10-201-5/+0
|
* Slim down GENERAL_NAME declaration (#6443)Alex Gaynor2021-10-201-19/+1
|
* shrink bindings now that we have oxidized all extensions (#6442)Paul Kehrer2021-10-192-153/+3
| | | | | | | * shrink bindings now that we have oxidized all extensions * re-add for pyopenssl * another pyopenssl required binding
* remove unused error constant (#6409)Alex Gaynor2021-10-122-6/+0
| | | | | * remove unused error constant * remove unused
* remove family of unused bindings (#6408)Alex Gaynor2021-10-121-8/+0
|
* Remove a ton of unused bindings (#6407)Alex Gaynor2021-10-122-62/+0
|
* Convert CertificatePolicies to Rust (#6400)Alex Gaynor2021-10-122-16/+0
| | | | | | | | | | | | | | | | | | | | | | | | | * Convert CertificatePolicies to Rust * Satisfy clippy * Incorporate rust tests into coverage * Attempt to get the coverage integrated * Debugging, as a treat * Attempt to get the coverage integrated * cursed * Maybe? * Required! * lol * unused * Handle non-ascii qualifiers
* remove low level aes bindings that are no longer necessary (#6399)Paul Kehrer2021-10-102-23/+0
|
* Remove unused binding (#6398)Alex Gaynor2021-10-101-2/+0
|
View Lorry Controller Status