summaryrefslogtreecommitdiff
path: root/tests
Commit message (Collapse)AuthorAgeFilesLines
* Remove last large usage of parametrize with vectors (#5652)Alex Gaynor2020-12-172-112/+106
|
* xdist experiment (#5621)Paul Kehrer2020-12-101-0/+8
| | | | | | | | | | * switch to xdist in tox for faster runs * not using auto to avoid too many processes on local laptops * we need to use pytest-cov to generate coverage properly now * these env vars aren't present on no coverage builds * tox changes
* Convert a few more high cardinality tests to use subtests (#5632)Alex Gaynor2020-12-105-134/+134
|
* we already do this check in other places (#5624)Paul Kehrer2020-12-091-5/+1
| | | | | | | | | | | | * we already do this check in other places This test is *incredibly* expensive and we already do roundtrips like this on other DH groups. To make this test less expensive and also more accurate to its name we now verify that the parameters on the generated key match * empty commit the most important CI feature
* More test speedups via subtest + removal rather than skipping (#5617)Paul Kehrer2020-12-091-145/+140
| | | | | | | * subtests ec * continue instead of return * indentation
* Remove AES GCM < 64-bit IV tests instead of skipping (#5620)Paul Kehrer2020-12-091-4/+4
| | | | | | | * remove AES tests we will always skip * constrain <64-bit IV vector removal to just GCM * apparently this is only used by GCM
* subtest-ify keywrap (#5619)Paul Kehrer2020-12-091-80/+82
|
* use subtests in aead (#5618)Paul Kehrer2020-12-091-92/+88
|
* fixes #5611 -- use subtests for wycheproof tests for speed (#5616)Alex Gaynor2020-12-0915-39/+65
|
* Complete removal of py2 (#5533)Alex Gaynor2020-12-094-24/+11
| | | | | * Drop Python 2 * Black everything
* Remove utils.int_from_bytes (#5609)Alex Gaynor2020-12-093-15/+7
|
* Remove __future__ import from our code (#5610)Alex Gaynor2020-12-0989-95/+0
|
* Write a bunch of primitives tests as subtests for performance (#5246)Alex Gaynor2020-12-091-32/+40
|
* Switch black to py36 as the minimum version (#5608)Alex Gaynor2020-12-0822-1054/+976
|
* Remove Python2 from CI and code that branched on it (#5607)Alex Gaynor2020-12-083-321/+149
| | | | | | | | | | | | | * Remove Python2 from CI and code that branched on it * Update setup.py Co-authored-by: Hugo van Kemenade <hugovk@users.noreply.github.com> * remove * review feedback Co-authored-by: Hugo van Kemenade <hugovk@users.noreply.github.com>
* Fixed DH tests for latest CentOS FIPS OpenSSL (#5604)Alex Gaynor2020-12-083-7/+25
| | | * Fixed DH tests for latest CentOS FIPS OpenSSL (1.1.1g)
* Add support for RSA signature recovery (#5573)Zoltan Kelemen2020-12-071-4/+63
| | | | | | | | | | | | | | | | | | * Removed unused argument. * Added support for RSA signature recovery. * Syntatic corrections for passing pep8 tests. * Corrected typo. * Added test of invalid Prehashed parameter to RSA signature recover. * Renamed recover to a more descriptive name. * Extended RSA signature recovery with option to return full data (not only the digest part). * Added missing words to pass spell check.
* fixes #4531 -- support encoding SCTs in certificates (#5594)Alex Gaynor2020-11-301-0/+27
|
* disallow p less than 512-bit on DH (#5592)Paul Kehrer2020-11-291-26/+58
| | | | | | | | | | | | | | | | * disallow p less than 512-bit on DH OpenSSL 3.0.0 enforces this so we'll go ahead and enforce it everywhere that's practical for us. (Note that we do not enforce on deserializing PKCS1/PKCS8 keys in < 3.0.0, but this PR adds a test so that in the 3.0.0 support branch we can test an error path) * missing test * black * _MIN_MODULUS_SIZE is now a thing * skip on fips
* Reduce granularity of error msging when deserializing keys (#5588)Paul Kehrer2020-11-261-4/+3
| | | | | | | | | | | | * Reduce granularity of error msging when deserializing keys In OpenSSL 3.0 it is no longer possible to determine whether the reason a key failed to deserialize is because of an unsupported cipher. Since we want to be more resilient to OpenSSL error code instability we'll just remove these paths. * black * changelog and update docs
* in OpenSSL 1.1.0+ error strings are automatically loaded (#5587)Paul Kehrer2020-11-261-5/+0
|
* Simplify wycheproof pytest code (#5579)Alex Gaynor2020-11-203-20/+2
|
* Always rely on OpenSSL's builtin locking callbacks (#5561)Alex Gaynor2020-11-111-12/+0
|
* GCM IV size limits (#5553)Paul Kehrer2020-11-095-8/+55
| | | | | | | | | | | | * GCM IV size limits OpenSSL 3.0.0 is going to enforce these size limits so we might as well put them in now. * fix the tests * black * these cases can't happen if we're limiting IV size already
* padding: Tip-toe around bytes subclasses. (#5548)Benjamin Peterson2020-11-041-0/+24
| | | | | This change allows future's newbytes class to be padded again. Fixes https://github.com/pyca/cryptography/issues/5547.
* Disable blinding for RSA pub keys (#5524)Alex Gaynor2020-10-271-0/+3
|
* Delete all the 1.0.2 code (#5511)Alex Gaynor2020-10-255-39/+6
|
* move blinding to __init__ on both RSA public and private (#5506)Paul Kehrer2020-10-251-13/+11
| | | | | * move blinding to __init__ on both RSA public and private * change signature to guarantee this test is testing what we think
* PKCS7SignatureBuilder now supports new option NoCerts when signing (#5500)frennkie2020-10-251-0/+17
|
* chunking didn't actually work (#5499)Paul Kehrer2020-10-251-0/+9
|
* allow additional certificates to be added to a pkcs7 (#5498)Paul Kehrer2020-10-251-0/+49
| | | | | | | * allow additional certificates to be added to a pkcs7 * be more verbose about what these additional certs might be used for * missing test
* PKCS7SignatureBuilder now supports three serializations (#5497)Paul Kehrer2020-10-241-36/+61
| | | | | | | | * PKCS7SignatureBuilder now supports three serializations PEM, DER, and SMIME. SMIME embeds the S/MIME headers and has the detached signature concept. * thanks libre
* migrate smime builder to pkcs7 module and rename (#5496)Paul Kehrer2020-10-242-518/+505
| | | | | * migrate smime builder to pkcs7 module and rename * missed a rename
* smime signer support (#5465)Paul Kehrer2020-09-191-0/+518
| | | | | | | | | | | | | | | | | | | * smime signer support * fix ed25519 check * change some wording * python 2.7... * review feedback * s/secure/signed * do some verification in the tests * review feedback * doc return value
* allow bytes-like for padding (#5462)Paul Kehrer2020-09-131-0/+24
| | | | this doesn't improve efficiency in any way (copies galore!), but it does make it consistent between a cipher context and a padding context
* Break users on OpenSSL 1.0.2 (#5438)Alex Gaynor2020-08-281-0/+12
| | | fixes #5432
* new black, actually slightly different than the old black (#5429)Paul Kehrer2020-08-2618-83/+237
|
* chunked update_into (#5419)Paul Kehrer2020-08-241-0/+17
| | | | | | | * chunked update_into * all pointer arithmetic all the time * review feedback
* be consistent in our testing (#5409)Paul Kehrer2020-08-162-19/+15
| | | | | | | * be consistent in our testing we don't use default_backend this way in our tests * more black
* fixes #4706 -- don't internal error on corrupt private key (#5307)Alex Gaynor2020-08-152-0/+37
| | | | | * fixes #4706 -- don't internal error on corrupt private key * Temporary disable paramiko
* remove KDF backend requirements (#5389)Paul Kehrer2020-08-141-0/+16
|
* separate these into two test files (#5383)Paul Kehrer2020-08-102-182/+198
| | | | | | | * separate these into two test files AES-GCM is so painful in collection that I want it in another file * fix flake8
* support PKCS7 certificate parsing (#5371)Paul Kehrer2020-08-041-0/+79
| | | | | | | | | | | | | * support PKCS7 certificate parsing * refcounts are different in 1.0.2 * rename the functions * black * empty commit * review feedback
* Remove unused code (#5360)Alex Gaynor2020-07-281-5/+0
|
* more error simplification (#5354)Paul Kehrer2020-07-271-3/+1
| | | | | | | X509 signing for RSA keys that are too small. Let's just say signing failed and attach the more specific problem as the error stack. A bit uglier, but far more generic and stable to OpenSSL/LibreSSL/BoringSSL Also be a bit more generic for OCSP signing
* simplify more errors (#5353)Paul Kehrer2020-07-261-3/+3
| | | the quest to stop using unstable openssl error codes continues
* remove idna support finally (#5351)Paul Kehrer2020-07-261-57/+10
| | | | | * remove idna support finally * remove unused import
* Refs #5113 -- build against openssl with no ct (#5343)Alex Gaynor2020-07-242-44/+22
|
* Paint it Black by the Rolling Stones (#5324)Alex Gaynor2020-07-2073-8640/+10711
|
* test FIPS mode on centos8 (#5323)Paul Kehrer2020-07-2012-8/+110
| | | | | | | | | | | | | | | * test FIPS mode on centos8 * remove branch we don't take * simpler * better comment * rename * revert some things that don't matter * small cleanups
View Lorry Controller Status