summaryrefslogtreecommitdiff
path: root/src
Commit message (Collapse)AuthorAgeFilesLines
...
* Remove link argument handling that's not required on py3 (#6655)Alex Gaynor2021-11-252-19/+1
|
* Finally remove deprecated int_from_bytes (#6652)Alex Gaynor2021-11-251-9/+0
|
* Update comment to reflect new reason this is needed (#6650)Alex Gaynor2021-11-241-1/+2
|
* Bump libc from 0.2.107 to 0.2.108 in /src/rust (#6647)dependabot[bot]2021-11-221-2/+2
| | | | | | | | | | | | | | | | Bumps [libc](https://github.com/rust-lang/libc) from 0.2.107 to 0.2.108. - [Release notes](https://github.com/rust-lang/libc/releases) - [Commits](https://github.com/rust-lang/libc/compare/0.2.107...0.2.108) --- updated-dependencies: - dependency-name: libc dependency-type: indirect update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
* Reopen main for the 37.0.0 release (#6645)Alex Gaynor2021-11-211-1/+1
|
* Bump for 36.0.0 release (#6643)36.0.0Alex Gaynor2021-11-221-1/+1
|
* Final polish on removing backends from places they aren't required (#6644)Alex Gaynor2021-11-222-28/+8
|
* allow parsing of nonstandard country name and jurisdiction country name (#6641)Paul Kehrer2021-11-212-3/+18
| | | | | | The spec requires both of these to be exactly two characters to correspond with ISO country codes. Reality is sometimes messier, so this allows parsing (but not encoding) of this invalid data. Parsing will raise a UserWarning if incorrect lengths are detected.
* remind people we're going to remove verifier/signer (#6640)Paul Kehrer2021-11-211-2/+3
|
* Remove unused attributes (#6631)Alex Gaynor2021-11-211-2/+0
|
* support negative serials in certificate parsing (#6626)Paul Kehrer2021-11-206-24/+49
| | | | | | | | | | | | | | | | | | | * support negative serials in certificate parsing but raise a warning every time we see it. also proactively raise on initial parse of the certificate, not just when accessing the serial_number attribute * cargo fmt * review feedback and changelog * pssh * Update CHANGELOG.rst Co-authored-by: Alex Gaynor <alex.gaynor@gmail.com> Co-authored-by: Alex Gaynor <alex.gaynor@gmail.com>
* fixes #6404 -- attempt to treat OCSP Nonce as being an octet string (#6625)Alex Gaynor2021-11-203-7/+9
| | | This is an awful hybrid, but hopefully puts us on a path to removing this nonsense
* Bump pyo3 from 0.15.0 to 0.15.1 in /src/rust (#6623)dependabot[bot]2021-11-192-9/+9
| | | | | | | | | | | | | | | | | Bumps [pyo3](https://github.com/pyo3/pyo3) from 0.15.0 to 0.15.1. - [Release notes](https://github.com/pyo3/pyo3/releases) - [Changelog](https://github.com/PyO3/pyo3/blob/main/CHANGELOG.md) - [Commits](https://github.com/pyo3/pyo3/compare/v0.15.0...v0.15.1) --- updated-dependencies: - dependency-name: pyo3 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
* Bump asn1 from 0.8.6 to 0.8.7 in /src/rust (#6622)dependabot[bot]2021-11-182-5/+5
| | | | | | | | | | | | | | | | Bumps [asn1](https://github.com/alex/rust-asn1) from 0.8.6 to 0.8.7. - [Release notes](https://github.com/alex/rust-asn1/releases) - [Commits](https://github.com/alex/rust-asn1/compare/0.8.6...0.8.7) --- updated-dependencies: - dependency-name: asn1 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
* more typing (#6616)Paul Kehrer2021-11-171-3/+13
|
* raise warning on encoded default value in csr (#6615)Paul Kehrer2021-11-171-0/+15
|
* OCB3 support (#6607)Paul Kehrer2021-11-142-3/+82
| | | | | * OCB3 support in aead package * improve comment
* support attributes on csrs with an iterable (#6603)Paul Kehrer2021-11-144-2/+112
|
* Allow parsing CSR extensions with the critical bit having an explicitly ↵Alex Gaynor2021-11-141-3/+33
| | | | | | | encoded default (#6600) * Allow parsing CSR extensions with the critical bit having an explicitly encoded default * Poke for zuul
* add one more engine binding (#6599)Paul Kehrer2021-11-122-0/+11
| | | we don't support these but advanced users may make use of them
* handle unused bits in distribution point reasons as well (#6594)Paul Kehrer2021-11-121-1/+2
|
* encode KeyUsage with unused bits (#6593)Paul Kehrer2021-11-121-1/+5
|
* skip pkcs7 tests on boring (#6591)Paul Kehrer2021-11-121-0/+3
| | | | | * skip pkcs7 tests on boring * make it work
* Allow to serialize extension values as DER bytes strings (#6346)Felix Fontein2021-11-123-0/+123
| | | | | * Allow to serialize extension values as DER bytes string. * Prepare test for SignedCertificateTimestamps.
* x509 tests for boring (#6590)Paul Kehrer2021-11-122-6/+7
|
* Run tests/hazmat/backends/ under BoringSSL (#6588)Alex Gaynor2021-11-121-0/+3
| | | Refs #6576
* Run tests/primitives/ (minus a few files) on BoringSSL (#6584)Alex Gaynor2021-11-111-2/+7
|
* Make DH bindings follow style guide (#6586)Alex Gaynor2021-11-121-2/+2
|
* Run tests/wycheproof/ on BoringSSL (#6583)Alex Gaynor2021-11-122-2/+14
|
* Move extension encoding code to new crate x509::extensions (#6571)Felix Fontein2021-11-1111-596/+564
| | | | | | | | | | | * Move certificate extension encoding code to new crate x509::extensions. * Move more extension serialization code to x509::extensions. * Unify extension encoding into one function. * Move all extension OIDs to x509::extensions. * Move all OIDs to x509::oid.
* Simplify how we test boring, in a way that'll be extensible to the future ↵Alex Gaynor2021-11-102-5/+15
| | | | | | | | | (#6575) * Simplify how we test boring, in a way that'll be extensible to the future * Break out what we ignore * Get fernet tests passing on boringssl
* Bump libc from 0.2.106 to 0.2.107 in /src/rust (#6566)dependabot[bot]2021-11-081-2/+2
| | | | | | | | | | | | | | | | Bumps [libc](https://github.com/rust-lang/libc) from 0.2.106 to 0.2.107. - [Release notes](https://github.com/rust-lang/libc/releases) - [Commits](https://github.com/rust-lang/libc/compare/0.2.106...0.2.107) --- updated-dependencies: - dependency-name: libc dependency-type: indirect update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
* allow x25519/x448 public keys in certificatebuilder (#6562)Paul Kehrer2021-11-072-5/+22
| | | | also document that we can return these key types in a certificate, although they can't be self-signed of course
* Begin building with BoringSSL in our CI, no tests yet (#6554)Alex Gaynor2021-11-077-1/+114
| | | | | | | | | | | | | | | * Attempt to build against BoringSSL in CI * Check for BoringSSL in the SSL bindings * Check for BoringSSL in the err bindings * Check for BoringSSL in the pkcs7 bindings * Check for BoringSSL in the bignum bindings * Check for BoringSSL in the EVP bindings * Check for BoringSSL in the X.509 verify bindings
* Remove datagram bio bindings (#6555)Alex Gaynor2021-11-061-2/+0
|
* Check for BoringSSL in the SSL bindings (#6553)Alex Gaynor2021-11-062-1/+17
|
* allow multiple identical pem blocks (#6551)Paul Kehrer2021-11-054-12/+2
| | | | | this matches our behavior to OpenSSL and allows users to pass a chain to our PEM loaders. To make this a little less magical it is now documented.
* fix nightly clippy warnings (#6552)Paul Kehrer2021-11-053-6/+3
| | | | oid implements the Display trait so to_string is redundant when passing to format!
* Added an additional check for boringssl in the ssl bindings (#6547)Alex Gaynor2021-11-051-1/+1
|
* remove some unused functions and add some docs about use (#6544)Paul Kehrer2021-11-043-17/+6
| | | | | | | | | | | * remove some unused functions and add some docs about use The functions being removed are unused by both cryptography and pyopenssl and the existing functions (x509_getm_notBefore/notAfter) are not deprecated. * more bindings removed and docs Cryptography_EVP_PKEY_id was dropped from pyOpenSSL in 2017
* Bump pyo3 and fix warnings (#6542)Alex Gaynor2021-11-044-11/+11
|
* remove OPENSSL_no_config (#6536)Paul Kehrer2021-11-031-2/+0
|
* deprecate backend part 14 of...probably 15? (#6534)Paul Kehrer2021-11-034-68/+32
| | | | | | | | * * CMAC * HMAC * * hashes * * keywrap
* deprecate backend part 11 of n (#6530)Paul Kehrer2021-11-031-14/+7
| | | cipher class
* deprecate backend part 9 of n (#6528)Paul Kehrer2021-11-033-59/+68
| | | * DSA, DH, EC converted to ignore backend arg
* deprecate backend part 10 of n (#6529)Paul Kehrer2021-11-034-64/+65
|
* deprecate backend part 8 of n (#6527)Paul Kehrer2021-11-031-21/+15
| | | | | The RSA chapter: * Retype backend args to typing.Any * Stop using _get_backend and directly import
* deprecate backend part 7 of n (#6526)Paul Kehrer2021-11-034-79/+37
| | | | * Move around some code to kill the need for a backend method * Type the backend arg to typing.Any since we just don't care now
* deprecate backend part 12 of n (#6532)Paul Kehrer2021-11-036-121/+43
| | | All the KDFs
* deprecate backend part 13 of n (#6533)Paul Kehrer2021-11-032-25/+6
| | | * OTPs
View Lorry Controller Status