Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | Apply type annotations to the core x509 types (#5711) | Alex Gaynor | 2021-01-30 | 1 | -1/+4 |
| | |||||
* | Remove __future__ import from our code (#5610) | Alex Gaynor | 2020-12-09 | 1 | -1/+0 |
| | |||||
* | Paint it Black by the Rolling Stones (#5324) | Alex Gaynor | 2020-07-20 | 1 | -18/+7 |
| | |||||
* | support unstructured name x509 attributes (#5313) | Paul Kehrer | 2020-07-18 | 1 | -0/+3 |
| | |||||
* | support x509 request challenge password parsing (#4944) | Paul Kehrer | 2020-07-05 | 1 | -0/+5 |
| | | | | | | | | | | | | | * support x509 request challenge password parsing * switch to a more generic (but not too generic) attribute parsing * make it raise a valueerror * Update tests/x509/test_x509.py Co-authored-by: Alex Gaynor <alex.gaynor@gmail.com> Co-authored-by: Alex Gaynor <alex.gaynor@gmail.com> | ||||
* | Support parsing SCTs in OCSPResponse (#5298) | Paul Kehrer | 2020-07-05 | 1 | -0/+6 |
| | | | | | | | | | * Support parsing SCTs in OCSPResponse * s/typically/only and pep8 * remove unused vector Co-authored-by: Szilárd Pfeiffer <szilard.pfeiffer@balasys.hu> | ||||
* | add SubjectInformationAccess extension support (#5295) | Paul Kehrer | 2020-07-02 | 1 | -0/+5 |
| | | | | | * add SubjectInformationAccess extension support * fixes | ||||
* | GOST certificates support in cryptography (#5195) | Nikolay Morozov | 2020-05-08 | 1 | -0/+25 |
| | |||||
* | Finish ed25519 and ed448 support in x509 module (#4972) | Marko Kreen | 2019-09-09 | 1 | -0/+3 |
| | | | | | | | | | | | | | | | | | | * Support ed25519 in csr/crl creation * Tests for ed25519/x509 * Support ed448 in crt/csr/crl creation * Tests for ed448/x509 * Support ed25519/ed448 in OCSPResponseBuilder * Tests for eddsa in OCSPResponseBuilder * Builder check missing in create_x509_csr * Documentation update for ed25519+ed448 in x509 | ||||
* | ed25519 support in x509 certificate builder (#4937) | Paul Kehrer | 2019-07-06 | 1 | -1/+4 |
| | | | | | | | | | | * ed25519 support in x509 certificate builder This adds minimal ed25519 support. More to come. * Apply suggestions from code review Co-Authored-By: Alex Gaynor <alex.gaynor@gmail.com> | ||||
* | add name for ExtensionOID.PRECERT_POISON (#4853) | redshiftzero | 2019-05-19 | 1 | -0/+1 |
| | | | | | | | | * test: ensure all public members of ExtensionOID have names defined * add name for ExtensionOID.PRECERT_POISON ref: https://github.com/google/certificate-transparency/blob/5fce65cb60cfe7808afc98de23c7dd5ddbfa1509/python/ct/crypto/asn1/oid.py#L338 | ||||
* | move ObjectIdentifier to break an upcoming import cycle (#4550) | Paul Kehrer | 2018-10-30 | 1 | -59/+1 |
| | |||||
* | add IDP OID and docs (#4533) | Paul Kehrer | 2018-10-28 | 1 | -0/+4 |
| | |||||
* | OCSP request extension parsing (#4464) | Paul Kehrer | 2018-09-09 | 1 | -0/+5 |
| | | | | | | | | | | * add OCSP request parsing support with OCSPNonce * add docs * reprs man * make extensions a cached property | ||||
* | Fixes #4333 -- added support for precert poison extension (#4442) | Alex Gaynor | 2018-08-31 | 1 | -0/+3 |
| | | | | | | | | | | | | | | * Fixes #4333 -- added support for precert poison extension * Make work on all OpenSSL versions * fixed flake8 + docs * fix for older OpenSSLs * document this * spell | ||||
* | Add OID for RSASSA-PSS X.509 signature algorithm (RFC 4055) (#4294) | Marti Raudsepp | 2018-06-29 | 1 | -0/+2 |
| | | | | | | | | | | | | In 2005, IETF devised a more secure padding scheme to replace PKCS #1 v1.5. To make sure that nobody can easily support or use it, they mandated lots of complicated parameters in the certificate, unlike any other X.509 signature scheme. https://tools.ietf.org/html/rfc4055 `_SIG_OIDS_TO_HASH` and `Certificate.signature_hash_algorithm` cannot be supported as-is, because the hash algorithm is defined in the signature algorithm parameters, not by the OID itself. | ||||
* | adding name so that 1.3.6.1.4.1.11129.2.4.2 is no longer and 'Unknown OID' ↵ | Joshua Crowgey | 2018-05-07 | 1 | -0/+3 |
| | | | | (#4218) | ||||
* | support delta crl indicator extension (#3936) | Paul Kehrer | 2017-09-22 | 1 | -0/+2 |
| | | | This is an extension for CRLs | ||||
* | [WIP] add support for the TLSFeature extension in x509 (#3899) | Paul Kehrer | 2017-09-10 | 1 | -0/+2 |
| | | | | | | | | | | | | | | | | | | * add support for the TLSFeature extension in x509 This extension is used for OCSP Must-Staple. * fix changelog link * pep8 * refactor to support the sequence properly and add status_request_v2 * update some language * add test vector, implement eq/ne/hash on TLSFeature * address review comments | ||||
* | Fixes #3745 -- add the any EKU EKU (#3750) | Alex Gaynor | 2017-07-03 | 1 | -0/+1 |
| | | | | | | | | | | * Fixes #3745 -- add the any EKU EKU * docs * whitespace * versionadded | ||||
* | Refs #3461 -- added the OID for the SCT x.509 extension (#3464) | Alex Gaynor | 2017-03-20 | 1 | -0/+3 |
| | | | | | | * Refs #3461 -- added the OID for the SCT x.509 extension * Version added | ||||
* | add a few more OIDs (#3259) | Paul Kehrer | 2016-11-19 | 1 | -0/+6 |
| | | | pulled from #3244 | ||||
* | Random flake8 cleanups for the latest release (#3242) | Alex Gaynor | 2016-11-15 | 1 | -0/+2 |
| | |||||
* | Turns out we shouldn't call it uniqueIdentifier (#3234) | Paul Kehrer | 2016-11-12 | 1 | -2/+2 |
| | | | http://www.ca.com/us/services-support/ca-support/ca-support-online/knowledge-base-articles.tec465360.html | ||||
* | add some new oids (#3233) | Paul Kehrer | 2016-11-11 | 1 | -0/+4 |
| | | | | | | * add some new oids * As Alex pointed out, it's streetAddress | ||||
* | add alternate signature OID for RSA with SHA1 + test and vector (#3227) | Paul Kehrer | 2016-11-11 | 1 | -0/+3 |
| | | | | | | * add alternate signature OID for RSA with SHA1 + test and vector * mozilla is a proper noun leave me alone spellchecker | ||||
* | add support for signature_algorithm_oid to cert, CSR, and CRL (#3124) | Paul Kehrer | 2016-08-31 | 1 | -14/+14 |
| | | | | | | * add support for signature_algorithm_oid to cert, CSR, and CRL * refactor _SIG_OIDS_TO_HASH to use ObjectIdentifiers and use that | ||||
* | complete deprecation of CRLExtensionOID in favor of CRLEntryExtensionOID | Paul Kehrer | 2016-03-21 | 1 | -8/+0 |
| | | | | Deprecated in 1.2, removed in 1.4 per policy. | ||||
* | rename CRLExtensionOID to CRLEntryExtensionOID | Paul Kehrer | 2015-12-25 | 1 | -4/+12 |
| | |||||
* | lowercase the first letter since that's how it's actually declared | Paul Kehrer | 2015-12-22 | 1 | -1/+1 |
| | |||||
* | support parsing CRL extensions in the OpenSSL backend | Paul Kehrer | 2015-12-21 | 1 | -0/+2 |
| | |||||
* | Merge pull request #2534 from alex/ev-oid | Paul Kehrer | 2015-12-19 | 1 | -0/+13 |
|\ | | | | | Fixed #2531 -- added missing EV oid | ||||
| * | updated the short names of oids | Alex Gaynor | 2015-12-19 | 1 | -7/+3 |
| | | |||||
| * | added oid names | Alex Gaynor | 2015-12-19 | 1 | -0/+11 |
| | | |||||
| * | added business category oid | Alex Gaynor | 2015-12-19 | 1 | -0/+1 |
| | | |||||
| * | too many newlines | Alex Gaynor | 2015-12-19 | 1 | -1/+0 |
| | | |||||
| * | added two more oids | Alex Gaynor | 2015-12-19 | 1 | -0/+5 |
| | | |||||
| * | Fixed #2531 -- added missing EV oid | Alex Gaynor | 2015-12-19 | 1 | -0/+1 |
| | | |||||
* | | Typo | Nick Bastin | 2015-12-17 | 1 | -1/+1 |
| | | |||||
* | | Avoid IndexError on too-short OIDs, add test for regression | Nick Bastin | 2015-12-17 | 1 | -0/+5 |
| | | |||||
* | | OID validation | Nick Bastin | 2015-12-14 | 1 | -0/+24 |
|/ | |||||
* | Adds _name property to ObjectIdentifier | Brendan McCollam | 2015-09-06 | 1 | -1/+5 |
| | |||||
* | namespace the rest of the oids | Paul Kehrer | 2015-08-09 | 1 | -27/+34 |
| | |||||
* | namespace Name OIDs | Paul Kehrer | 2015-08-09 | 1 | -30/+32 |
| | |||||
* | namespace oid signature algorithm | Paul Kehrer | 2015-08-09 | 1 | -42/+44 |
| | |||||
* | namespace OID extensions | Paul Kehrer | 2015-08-09 | 1 | -36/+39 |
| | |||||
* | Completed the removal of duplicate oids | Alex Gaynor | 2015-08-09 | 1 | -61/+61 |
| | |||||
* | De-duplicate OIDs for signatures | Alex Gaynor | 2015-08-09 | 1 | -14/+14 |
| | |||||
* | Reduce the duplication in teh string versions of oids | Alex Gaynor | 2015-08-09 | 1 | -67/+66 |
| | |||||
* | start splitting the x509 module | Paul Kehrer | 2015-08-09 | 1 | -0/+182 |