summaryrefslogtreecommitdiff
path: root/src
Commit message (Collapse)AuthorAgeFilesLines
...
* fix a warning in C code via explicit cast (#8280)Alex Gaynor2023-02-131-2/+2
|
* Bump cxx from 1.0.86 to 1.0.90 in /src/rust (#8276)dependabot[bot]2023-02-121-6/+6
| | | | | | | | | | | | | | | Bumps [cxx](https://github.com/dtolnay/cxx) from 1.0.86 to 1.0.90. - [Release notes](https://github.com/dtolnay/cxx/releases) - [Commits](https://github.com/dtolnay/cxx/compare/1.0.86...1.0.90) --- updated-dependencies: - dependency-name: cxx dependency-type: indirect update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
* Bump cxx-build from 1.0.86 to 1.0.90 in /src/rust (#8274)dependabot[bot]2023-02-121-2/+2
| | | | | | | | | | | | | | | Bumps [cxx-build](https://github.com/dtolnay/cxx) from 1.0.86 to 1.0.90. - [Release notes](https://github.com/dtolnay/cxx/releases) - [Commits](https://github.com/dtolnay/cxx/compare/1.0.86...1.0.90) --- updated-dependencies: - dependency-name: cxx-build dependency-type: indirect update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
* fix some binding declarations (#8273)Paul Kehrer2023-02-121-20/+19
| | | | | | | | * fix some binding declarations also adds a comment about why we deliberately incorrectly declare some of them, sigh * it's actually safe to do this since no high bit mode options exist
* Disallow wildcards in DNSName for name constraints (#8272)gbansaghi2023-02-121-2/+15
| | | | | | | * Disallow wildcards in DNSName for name constraints As discussed in #8253, wildcards are unnecessary according to RFC 5280, and cause issues with at least Firefox. * update changelog
* Added type annotations for more things in backend (#8265)Alex Gaynor2023-02-113-22/+31
|
* Remove now-unused bindings (#8264)Alex Gaynor2023-02-112-23/+0
|
* Simplify X25519 key loading (#8263)Alex Gaynor2023-02-113-73/+25
|
* remove verify_interface (#8260)Paul Kehrer2023-02-101-11/+0
| | | | | * remove verify_interface * ruff ruff
* Don't allow update_into to mutate immutable objects (#8230)Alex Gaynor2023-02-071-1/+1
|
* add support for centos9-fips (#8216)Paul Kehrer2023-02-061-0/+9
| | | | | | | | * add support for centos9-fips Requires a variety of new FIPS constraints on our tests, including the addition of rsa_encryption_supported * review comments
* Bump proc-macro2 from 1.0.50 to 1.0.51 in /src/rust (#8208)dependabot[bot]2023-02-051-2/+2
| | | | | | | | | | | | | | | Bumps [proc-macro2](https://github.com/dtolnay/proc-macro2) from 1.0.50 to 1.0.51. - [Release notes](https://github.com/dtolnay/proc-macro2/releases) - [Commits](https://github.com/dtolnay/proc-macro2/compare/1.0.50...1.0.51) --- updated-dependencies: - dependency-name: proc-macro2 dependency-type: indirect update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
* Specify rust-version for clippy (#8206)Alex Gaynor2023-02-042-3/+3
|
* add support for bytes-like objects in data and associated_data in aead ↵Mat2023-02-022-17/+24
| | | | | | | | | | | | | | | | | | | | | | | | | | algorithms (#8187) * add support for bytes-like objects in data and associated_data in aead algorithms * flake * flake again * rework AESSIV _check_params * flake and 80char columns * associated_data cannot be None in _check_params, set to [] in calling function * Update src/cryptography/hazmat/primitives/ciphers/aead.py Co-authored-by: Alex Gaynor <alex.gaynor@gmail.com> * flake fix --------- Co-authored-by: mat gas <none@none.com> Co-authored-by: Alex Gaynor <alex.gaynor@gmail.com>
* Bump js-sys from 0.3.60 to 0.3.61 in /src/rust (#8191)dependabot[bot]2023-02-021-12/+12
| | | | | | | | | | | | | | | | Bumps [js-sys](https://github.com/rustwasm/wasm-bindgen) from 0.3.60 to 0.3.61. - [Release notes](https://github.com/rustwasm/wasm-bindgen/releases) - [Changelog](https://github.com/rustwasm/wasm-bindgen/blob/main/CHANGELOG.md) - [Commits](https://github.com/rustwasm/wasm-bindgen/commits) --- updated-dependencies: - dependency-name: js-sys dependency-type: indirect update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
* Update style for new black (#8185)Alex Gaynor2023-01-312-3/+0
|
* Several cleanups to the backend: (#8166)Alex Gaynor2023-01-301-12/+10
| | | | | 1. use public API for loading DER cert 2. use length-API for PKCS12 friendly name, not NUL-terminated 3. don't upref and GC and X509* that doesn't need to live longer
* Use Rust for CRL::is_signature_valid (#8162)Alex Gaynor2023-01-293-43/+22
|
* Use Rust for CSR::is_signature_valid (#8161)Alex Gaynor2023-01-292-32/+10
|
* Bump cc from 1.0.78 to 1.0.79 in /src/rust (#8157)dependabot[bot]2023-01-291-2/+2
| | | | | | | | | | | | | | | Bumps [cc](https://github.com/rust-lang/cc-rs) from 1.0.78 to 1.0.79. - [Release notes](https://github.com/rust-lang/cc-rs/releases) - [Commits](https://github.com/rust-lang/cc-rs/compare/1.0.78...1.0.79) --- updated-dependencies: - dependency-name: cc dependency-type: indirect update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
* fix for a future warning (#8146)Alex Gaynor2023-01-271-2/+2
|
* Use the ruff 'pyupgrade' checks (#8104)Alex Gaynor2023-01-2019-72/+66
|
* this function doesn't return anything (#8091)Alex Gaynor2023-01-181-1/+1
|
* Bump proc-macro2 from 1.0.49 to 1.0.50 in /src/rust (#8086)dependabot[bot]2023-01-171-2/+2
| | | | | | | | | | | | | | | | | Bumps [proc-macro2](https://github.com/dtolnay/proc-macro2) from 1.0.49 to 1.0.50. - [Release notes](https://github.com/dtolnay/proc-macro2/releases) - [Commits](https://github.com/dtolnay/proc-macro2/compare/1.0.49...1.0.50) --- updated-dependencies: - dependency-name: proc-macro2 dependency-type: indirect update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
* rename variable to make sense (#8080)Alex Gaynor2023-01-171-3/+3
|
* Bump termcolor from 1.1.3 to 1.2.0 in /src/rust (#8070)dependabot[bot]2023-01-151-2/+2
| | | | | | | | | | | | | | | | | Bumps [termcolor](https://github.com/BurntSushi/termcolor) from 1.1.3 to 1.2.0. - [Release notes](https://github.com/BurntSushi/termcolor/releases) - [Commits](https://github.com/BurntSushi/termcolor/compare/1.1.3...1.2.0) --- updated-dependencies: - dependency-name: termcolor dependency-type: indirect update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
* Add Certificate.verify_signed_by (#8011)Paul Kehrer2023-01-123-1/+286
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | * Add Certificate.verify_signed_by Verify that the signature on a certificate was created by the private key belonging to another certificate's public key. This code does not validate anything else! It is not a path builder, general x509 validator, etc. * switch to issued_by validate issuer subject matches certificate issuer and refactor * two fixes * signed_by isn't the right target now * coverage * skip test on some *ssls * extensive refactoring * lol * does any of this work * final commit i swear
* Bump pem from 1.1.0 to 1.1.1 in /src/rust (#8043)dependabot[bot]2023-01-111-2/+2
| | | | | | | | | | | | | | | | | | Bumps [pem](https://github.com/jcreekmore/pem-rs) from 1.1.0 to 1.1.1. - [Release notes](https://github.com/jcreekmore/pem-rs/releases) - [Changelog](https://github.com/jcreekmore/pem-rs/blob/master/CHANGELOG.md) - [Commits](https://github.com/jcreekmore/pem-rs/compare/v1.1.0...v1.1.1) --- updated-dependencies: - dependency-name: pem dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
* remove the last vestiges of sha1 out of pkcs7 (#8032)Paul Kehrer2023-01-092-3/+1
| | | we already didn't support signing (released in 39.0)
* Bump cxx-build from 1.0.85 to 1.0.86 in /src/rust (#8017)dependabot[bot]2023-01-101-2/+2
| | | | | | | | | | | | | | | | | Bumps [cxx-build](https://github.com/dtolnay/cxx) from 1.0.85 to 1.0.86. - [Release notes](https://github.com/dtolnay/cxx/releases) - [Commits](https://github.com/dtolnay/cxx/compare/1.0.85...1.0.86) --- updated-dependencies: - dependency-name: cxx-build dependency-type: indirect update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
* Bump cxx from 1.0.85 to 1.0.86 in /src/rust (#8016)dependabot[bot]2023-01-101-6/+6
| | | | | | | | | | | | | | | | | Bumps [cxx](https://github.com/dtolnay/cxx) from 1.0.85 to 1.0.86. - [Release notes](https://github.com/dtolnay/cxx/releases) - [Commits](https://github.com/dtolnay/cxx/compare/1.0.85...1.0.86) --- updated-dependencies: - dependency-name: cxx dependency-type: indirect update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
* deprecate the rest of DSA support for SSH (#8013)Paul Kehrer2023-01-091-0/+22
| | | | | * deprecate the rest of DSA support for SSH * review comments
* deprecate support for DSA in load_ssh_public_key (#8009)Paul Kehrer2023-01-082-43/+27
| | | | | * deprecate support for DSA in load_ssh_public_key * try to prevent bad things a bit more
* switch to using integers for valid_after/valid_before in SSH certs (#8007)Paul Kehrer2023-01-081-33/+21
| | | | | | | * switch to using integers for valid_after/valid_before in SSH certs * i know this, it's a unix timestamp * one more review nit
* SSHCertificateBuilder (#8004)Paul Kehrer2023-01-082-0/+413
| | | | | | | | | | | * SSHCertificateBuilder This adds support for generating SSH certificates * add deterministic signing tests and valid_for_all_principals * test another edge * one of these two fixes makes no sense
* support SSH certificate parsing (#7960)Paul Kehrer2023-01-072-1/+279
| | | | | | | | | | | | | * support SSH certificate parsing DSA (deliberately) not supported * make a unified API * Update src/cryptography/hazmat/primitives/serialization/ssh.py Co-authored-by: Alex Gaynor <alex.gaynor@gmail.com> Co-authored-by: Alex Gaynor <alex.gaynor@gmail.com>
* small refactor in ssh for key type (#7983)Paul Kehrer2023-01-051-20/+23
| | | this prevents duplicating this logic more times for ssh certs
* Last step in deprecating 3.6 (#7961)Alex Gaynor2023-01-031-2/+1
| | | refs #7843
* reopen for 40 (#7955)Paul Kehrer2023-01-021-1/+1
| | | | | * reopen for 40 * oops
* 39.0.0 version bump (#7954)39.0.0Paul Kehrer2023-01-011-1/+1
|
* Replace more deprecated `abstractproperty` (#7944)Viicos2022-12-284-11/+22
|
* src/_cffi_src/openssl/evp.py: export EVP_PKEY_set_alias_type in FUNCTIONS ↵hustliyilin2022-12-282-0/+19
| | | | | | | | | | | | | | | (#7935) In openssl 1.1.1 docs/man3/EVP_PKEY_set1_RSA.pod (https://github.com/openssl/openssl/blob/OpenSSL_1_1_1/doc/man3/EVP_PKEY_set1_RSA.pod) The EVP_PKEY_set_alias_type(pkey, EVP_PKEY_SM2) API is possible to convert it to using SM2 algorithms After loading an ECC key. So the EVP_PKEY_set_alias_type API is important for people who want to use cryptography with using SM2 algorithms. Therefore, we need to export EVP_PKEY_set_alias_type in FUNCTIONS. Signed-off-by: YiLin.Li <YiLin.Li@linux.alibaba.com> Signed-off-by: YiLin.Li <YiLin.Li@linux.alibaba.com>
* Typo fixes (#7942)Alex Gaynor2022-12-283-3/+3
|
* Replace deprecated `abstractproperty` (#7943)Viicos2022-12-279-92/+184
| | | | Deprecated since version 3.3, see https://docs.python.org/3/library/abc.html#abc.abstractproperty
* Update formatting for new ruff (#7937)Alex Gaynor2022-12-264-15/+15
|
* Add SSL_CTX_set_msg_callback functions (#7926)Nuno Veloso2022-12-221-0/+12
| | | | | | | * Add SSL_CTX_set_msg_callback functions to openssl/ssl.py function definitions * Fix E501 Line too long Co-authored-by: Nuno Veloso <nuno.veloso@bitsighttech.com>
* Bump libc from 0.2.138 to 0.2.139 in /src/rust (#7925)dependabot[bot]2022-12-221-2/+2
| | | | | | | | | | | | | | | | | Bumps [libc](https://github.com/rust-lang/libc) from 0.2.138 to 0.2.139. - [Release notes](https://github.com/rust-lang/libc/releases) - [Commits](https://github.com/rust-lang/libc/compare/0.2.138...0.2.139) --- updated-dependencies: - dependency-name: libc dependency-type: indirect update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
* Switch from flake8 to ruff (#7920)Alex Gaynor2022-12-2148-114/+48
| | | It's more than 60x faster.
* Remove binding for X509_STORE_get_get_issuer (#7918)David Benjamin2022-12-202-3/+0
| | | | | | | | | This was added alongside X509_STORE_set_get_issuer in 21ef4080ec7666299f1268f3bbfb136582744359. It makes sense to want to override issuer lookup, but I've never seen a valid use case for querying the callbacks. If you're trying to get at the function that was already configured, you presumably already know it. (And if you don't, it's not safe to call because an arbitrary callback may have been written to only be usable in particular contexts.)
* Bump syn from 1.0.105 to 1.0.107 in /src/rust (#7915)dependabot[bot]2022-12-201-2/+2
| | | | | | | | | | | | | | | | | Bumps [syn](https://github.com/dtolnay/syn) from 1.0.105 to 1.0.107. - [Release notes](https://github.com/dtolnay/syn/releases) - [Commits](https://github.com/dtolnay/syn/compare/1.0.105...1.0.107) --- updated-dependencies: - dependency-name: syn dependency-type: indirect update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>