Commit message (Collapse) | Author | Age | Files | Lines | ||
---|---|---|---|---|---|---|
... | ||||||
* | allow additional certificates to be added to a pkcs7 (#5498) | Paul Kehrer | 2020-10-25 | 2 | -2/+20 | |
| | | | | | | | * allow additional certificates to be added to a pkcs7 * be more verbose about what these additional certs might be used for * missing test | |||||
* | PKCS7SignatureBuilder now supports three serializations (#5497) | Paul Kehrer | 2020-10-24 | 4 | -9/+20 | |
| | | | | | | | | * PKCS7SignatureBuilder now supports three serializations PEM, DER, and SMIME. SMIME embeds the S/MIME headers and has the detached signature concept. * thanks libre | |||||
* | migrate smime builder to pkcs7 module and rename (#5496) | Paul Kehrer | 2020-10-24 | 3 | -117/+110 | |
| | | | | | * migrate smime builder to pkcs7 module and rename * missed a rename | |||||
* | smime signer support (#5465) | Paul Kehrer | 2020-09-19 | 3 | -1/+171 | |
| | | | | | | | | | | | | | | | | | | | * smime signer support * fix ed25519 check * change some wording * python 2.7... * review feedback * s/secure/signed * do some verification in the tests * review feedback * doc return value | |||||
* | add pkcs7/smime bindings (#5458) | Paul Kehrer | 2020-09-13 | 1 | -0/+12 | |
| | | | | | | | | | | | | | * add pkcs7/smime bindings * Update src/_cffi_src/openssl/pkcs7.py Co-authored-by: Alex Gaynor <alex.gaynor@gmail.com> * Update src/_cffi_src/openssl/pkcs7.py Co-authored-by: Alex Gaynor <alex.gaynor@gmail.com> Co-authored-by: Alex Gaynor <alex.gaynor@gmail.com> | |||||
* | allow bytes-like for padding (#5462) | Paul Kehrer | 2020-09-13 | 1 | -4/+4 | |
| | | | | this doesn't improve efficiency in any way (copies galore!), but it does make it consistent between a cipher context and a padding context | |||||
* | re-add a few engine bindings for advanced users (#5449) | Paul Kehrer | 2020-09-01 | 2 | -0/+19 | |
| | | | | | | | | | * re-add a few engine bindings for advanced users For users who are capable of compiling cryptography against custom openssl and properly using these functions this hopefully allows PKCS11 usage through OpenSSL engines. * forgot to save my buffer | |||||
* | Add a missing space to py35 deprecation warning (#5448) | Sviatoslav Sydorenko | 2020-09-01 | 1 | -1/+1 | |
| | | | This fixes a typo that's been introduced in #5387. | |||||
* | Break users on OpenSSL 1.0.2 (#5438) | Alex Gaynor | 2020-08-28 | 1 | -6/+14 | |
| | | | fixes #5432 | |||||
* | bump version for 3.2 dev (#5431) | Paul Kehrer | 2020-08-27 | 1 | -1/+1 | |
| | ||||||
* | 3.1 release (#5430)3.1 | Paul Kehrer | 2020-08-27 | 1 | -1/+1 | |
| | ||||||
* | new black, actually slightly different than the old black (#5429) | Paul Kehrer | 2020-08-26 | 6 | -27/+30 | |
| | ||||||
* | chunked update_into (#5419) | Paul Kehrer | 2020-08-24 | 1 | -13/+21 | |
| | | | | | | | * chunked update_into * all pointer arithmetic all the time * review feedback | |||||
* | use _get_backend everywhere (#5408) | Paul Kehrer | 2020-08-16 | 4 | -12/+13 | |
| | | | | | * use _get_backend everywhere * black | |||||
* | move encoders into backend as well (#5406) | Paul Kehrer | 2020-08-15 | 1 | -6/+22 | |
| | | | this will be useful later, i swear | |||||
* | move the x509 parsers into the backend object (#5405) | Paul Kehrer | 2020-08-15 | 4 | -118/+103 | |
| | | | | | | | | | * move the parser into the backend object This allows us to generate the list of supported extensions when instantiating the backend object rather than building multiple parsers and picking the right one at runtime when parsing the extensions themselves. * sigh | |||||
* | clean up error stack in p7 (#5403) | Alex Gaynor | 2020-08-15 | 1 | -0/+2 | |
| | ||||||
* | HOTP and TOTP should also have optional backends (#5402) | Paul Kehrer | 2020-08-15 | 2 | -2/+6 | |
| | ||||||
* | Improve debugability of this internal error (#5399) | Alex Gaynor | 2020-08-15 | 3 | -5/+8 | |
| | ||||||
* | fixes #4706 -- don't internal error on corrupt private key (#5307) | Alex Gaynor | 2020-08-15 | 1 | -0/+5 | |
| | | | | | * fixes #4706 -- don't internal error on corrupt private key * Temporary disable paramiko | |||||
* | make backend arg optional for rsa (#5396) | Paul Kehrer | 2020-08-15 | 1 | -3/+7 | |
| | ||||||
* | optional backend for dh, dsa, ec (#5395) | Paul Kehrer | 2020-08-15 | 3 | -13/+29 | |
| | ||||||
* | optional backend for hash, cipher, cmac, hmac, keywrap (#5394) | Paul Kehrer | 2020-08-15 | 5 | -8/+21 | |
| | ||||||
* | make backend optional in serialization (#5392) | Paul Kehrer | 2020-08-15 | 3 | -11/+21 | |
| | ||||||
* | x509 optional backend args (#5390) | Paul Kehrer | 2020-08-15 | 2 | -11/+24 | |
| | ||||||
* | remove KDF backend requirements (#5389) | Paul Kehrer | 2020-08-14 | 7 | -8/+29 | |
| | ||||||
* | deprecate support for python 3.5 (#5387) | Paul Kehrer | 2020-08-14 | 1 | -0/+7 | |
| | ||||||
* | return from void function cannot compile on solaris studio (#5385) | stphnlyd | 2020-08-11 | 1 | -1/+1 | |
| | ||||||
* | define SYS_getrandom on linux arm64 (#5378) | Alex Gaynor | 2020-08-05 | 1 | -1/+3 | |
| | ||||||
* | support PKCS7 certificate parsing (#5371) | Paul Kehrer | 2020-08-04 | 3 | -0/+64 | |
| | | | | | | | | | | | | | * support PKCS7 certificate parsing * refcounts are different in 1.0.2 * rename the functions * black * empty commit * review feedback | |||||
* | check if a value is null before we gc (#5369) | Paul Kehrer | 2020-08-02 | 1 | -1/+1 | |
| | ||||||
* | Commit to dropping OpenSSL 1.0.2 (#5363) | Alex Gaynor | 2020-07-30 | 1 | -1/+1 | |
| | ||||||
* | handle unnamed-but-really-named curves in 1.0.2u (#5362) | Paul Kehrer | 2020-07-30 | 3 | -7/+16 | |
| | | | | | | | | | * handle unnamed-but-really-named curves in 1.0.2u * handle openssl 1.0.2 not supporting better install commands on make * do what openssl didn't feel was necessary in 1.0.2t/u I didn't bind the named curve constant, fight me. | |||||
* | remove some more constants we don't need (#5361) | Paul Kehrer | 2020-07-30 | 1 | -4/+0 | |
| | | | these are gone in 3.0 anyway and were removed in that draft PR | |||||
* | Remove unused code (#5360) | Alex Gaynor | 2020-07-28 | 1 | -6/+0 | |
| | ||||||
* | shrink bindings more (#5356) | Paul Kehrer | 2020-07-27 | 11 | -91/+0 | |
| | | | | | | | * shrink bindings more * readd a binding we do need * readd two more bindings we need | |||||
* | remove every error we don't use in cryptography or pyopenssl (#5355) | Paul Kehrer | 2020-07-27 | 1 | -108/+7 | |
| | | | | | | | | | | * remove every error we don't use in cryptography or pyopenssl sorry external consumers, carrying things we don't use and don't have downstream tests for has become too much of a burden * re-add a constant we need for tests for now * pyopenssl needs these three | |||||
* | more error simplification (#5354) | Paul Kehrer | 2020-07-27 | 2 | -35/+11 | |
| | | | | | | | X509 signing for RSA keys that are too small. Let's just say signing failed and attach the more specific problem as the error stack. A bit uglier, but far more generic and stable to OpenSSL/LibreSSL/BoringSSL Also be a bit more generic for OCSP signing | |||||
* | simplify more errors (#5353) | Paul Kehrer | 2020-07-26 | 3 | -57/+10 | |
| | | | the quest to stop using unstable openssl error codes continues | |||||
* | start trying to make our error handling a bit more generic (#5352) | Paul Kehrer | 2020-07-26 | 5 | -75/+34 | |
| | | | | | | | | | * start trying to make our error handling a bit more generic * remove more and black * attach error stack to memorylimit error * blaaack | |||||
* | remove idna support finally (#5351) | Paul Kehrer | 2020-07-26 | 1 | -76/+6 | |
| | | | | | * remove idna support finally * remove unused import | |||||
* | fixes #5113 - Making some SRTP related symbols conditional on ↵ | omnigrok | 2020-07-26 | 2 | -0/+19 | |
| | | | | | | | | | | | OPENSSL_NO_SRTP (#5338) * fixes #5113 - Making some SRTP related symbols conditional on OPENSSL_NO_SRTP. * don't remove one symbol, test with no-srtp * test against a no-srtp build Co-authored-by: Paul Kehrer <paul.l.kehrer@gmail.com> | |||||
* | Emit the deprecation one level up the stack (#5348) | Sviatoslav Sydorenko | 2020-07-25 | 1 | -0/+1 | |
| | | | Ref: https://github.com/pyca/cryptography/issues/5335#issuecomment-661880248 | |||||
* | remove 4 OCSP bindings we don't use (#5344) | Paul Kehrer | 2020-07-25 | 1 | -4/+0 | |
| | ||||||
* | Refs #5113 -- build against openssl with no ct (#5343) | Alex Gaynor | 2020-07-24 | 3 | -4/+9 | |
| | ||||||
* | fixes #5321 -- deprecate support for OpenSSL 1.0.2 (#5333) | Alex Gaynor | 2020-07-20 | 2 | -0/+17 | |
| | ||||||
* | Delete several unused bindings (#5331) | Alex Gaynor | 2020-07-20 | 3 | -34/+0 | |
| | ||||||
* | 3.1 time (#5330) | Paul Kehrer | 2020-07-20 | 1 | -1/+1 | |
| | ||||||
* | prep 3.0 for release (#5327)3.0 | Paul Kehrer | 2020-07-20 | 1 | -1/+1 | |
| | | | | | * prep 3.0 for release * okay then | |||||
* | Paint it Black by the Rolling Stones (#5324) | Alex Gaynor | 2020-07-20 | 73 | -1385/+1847 | |
| |