summaryrefslogtreecommitdiff
path: root/vectors
Commit message (Collapse)AuthorAgeFilesLines
* support parsing bitstring values in DNs (#6629)Paul Kehrer2021-11-281-0/+11
| | | | | | | | | | | * support bitstring values in DNs parsing is limited to x500UniqueIdentifier only * Update src/cryptography/x509/name.py Co-authored-by: Alex Gaynor <alex.gaynor@gmail.com> Co-authored-by: Alex Gaynor <alex.gaynor@gmail.com>
* switch to .tar.xz for the vectors (#6646)Paul Kehrer2021-11-211-0/+3
| | | This only saves 6MB, but why not. No change for cryptography itself
* Reopen main for the 37.0.0 release (#6645)Alex Gaynor2021-11-211-1/+1
|
* Bump for 36.0.0 release (#6643)36.0.0Alex Gaynor2021-11-221-1/+1
|
* allow parsing of nonstandard country name and jurisdiction country name (#6641)Paul Kehrer2021-11-211-0/+18
| | | | | | The spec requires both of these to be exactly two characters to correspond with ISO country codes. Reality is sometimes messier, so this allows parsing (but not encoding) of this invalid data. Parsing will raise a UserWarning if incorrect lengths are detected.
* add AES SIV vectors (#6608)Paul Kehrer2021-11-151-0/+33
|
* add AES OCB3 test vectors (#6606)Paul Kehrer2021-11-151-0/+112
|
* Allow parsing CSR extensions with the critical bit having an explicitly ↵Alex Gaynor2021-11-141-0/+23
| | | | | | | encoded default (#6600) * Allow parsing CSR extensions with the critical bit having an explicitly encoded default * Poke for zuul
* allow multiple identical pem blocks (#6551)Paul Kehrer2021-11-051-31/+23
| | | | | this matches our behavior to OpenSSL and allows users to pass a chain to our PEM loaders. To make this a little less magical it is now documented.
* add accvraiz1 bmpstring test vector (#6503)Paul Kehrer2021-10-311-0/+44
|
* Add new PKCS12 test vectors (#6383)Felix Fontein2021-10-0624-0/+0
| | | | | | | * Add new PKCS12 test vectors for #6348. * Re-create test certs without DSA. * Forgot to adjust the docs.
* Accept combined PEM files with multiple sections (#6365)Maximilian Hils2021-10-032-0/+115
| | | | | * accept combined PEM files with multiple sections * pass error messages into `find_in_pem`
* support legacy PEM headers for certificate and CSR (#6356)Paul Kehrer2021-10-022-0/+43
|
* reopen main for 36th release (#6335)Paul Kehrer2021-09-291-1/+1
|
* bump for 35.0 release (#6333)35.0.0Paul Kehrer2021-09-291-1/+1
|
* add new x509 request vector (#6313)Paul Kehrer2021-09-271-0/+0
|
* add several OCSP response vectors (#6298)Paul Kehrer2021-09-233-0/+2
| | | | | * add several OCSP response vectors * fix naming
* Don't internal error on CRL with no nextUpdate value (#6282)Alex Gaynor2021-09-191-0/+12
| | | | | | | * Don't internal error on CRL with no nextUpdate value * Fix typing * docs
* add vector omitting optional ASN.1 SEQUENCE for an empty CRL (#6279)Paul Kehrer2021-09-181-0/+0
|
* convert cryptography_vectors to setup.cfg (#6243)Paul Kehrer2021-08-294-57/+19
| | | | | * convert cryptography_vectors to setup.cfg * put it in the right section
* add invalid time CRL vector (#6152)Paul Kehrer2021-07-011-0/+0
| | | | | * add invalid time CRL vector * more words
* modify alternate-rsa-sha1-oid to not contain a negative serial number (#6146)Paul Kehrer2021-06-272-12/+0
|
* separate test vectors (#6145)Paul Kehrer2021-06-274-22/+22
| | | | | * separate test vectors * be correct
* add certificate policies test vector (#6118)Paul Kehrer2021-06-141-0/+0
|
* name constraint vector with invalid IPv4 netmask (#6114)Paul Kehrer2021-06-121-0/+0
|
* add nameconstraints vector with invalid length for IPv6 + netmask (#6112)Paul Kehrer2021-06-121-0/+19
|
* add unrecognized extension CRL vector (#6111)Paul Kehrer2021-06-121-0/+0
| | | | | | | | | * add unrecognized extension CRL vector * sigh * add test * always a linter
* Added more testcases for invalid SCTs (#6103)Alex Gaynor2021-06-092-0/+0
|
* Added a test vector for an OCSP response with an unknown hash algorithm (#6065)Alex Gaynor2021-05-241-0/+0
|
* Added a test vector for duplicate extensions in OCSP requests (#6064)Alex Gaynor2021-05-241-0/+0
|
* Added a test vector for OCSP with an unknown extension (#6063)Alex Gaynor2021-05-231-0/+0
|
* Port OCSP Request extension parsing to Rust (#6005)Alex Gaynor2021-04-241-0/+0
| | | | | | | | | | | * Port OCSP Request extension parsing to Rust * Added test for rando oid * Update src/rust/src/asn1.rs Co-authored-by: Paul Kehrer <paul.l.kehrer@gmail.com> Co-authored-by: Paul Kehrer <paul.l.kehrer@gmail.com>
* Add SM4 symmetric block cipher (#5834)tobyp2021-02-285-0/+96
| | | Co-authored-by: Tobias Peter <tobias.peter@infineon.com>
* Add SM3 hash algorithm (#5833)tobyp2021-02-281-0/+31
| | | Co-authored-by: Tobias Peter <tobias.peter@infineon.com>
* change to a new version scheme (#5825)Alex Gaynor2021-02-131-1/+1
| | | | | | | | | | | | | * change to a new version scheme fixes #5801 * Update docs/api-stability.rst Co-authored-by: Paul Kehrer <paul.l.kehrer@gmail.com> * line length Co-authored-by: Paul Kehrer <paul.l.kehrer@gmail.com>
* reopen master for 3.5 (#5752)Paul Kehrer2021-02-071-1/+1
| | | | | | | | | * reopen master for 3.5 * Update CHANGELOG.rst Co-authored-by: Alex Gaynor <alex.gaynor@gmail.com> Co-authored-by: Alex Gaynor <alex.gaynor@gmail.com>
* 3.4 release (#5749)3.4Alex Gaynor2021-02-071-1/+1
|
* Attempt to run mypy over tests and vectors (#5716)Alex Gaynor2021-01-301-1/+2
|
* It's 2021! (#5701)Alex Gaynor2021-01-251-1/+1
|
* Cleanup how we represent authors. (#5650)Alex Gaynor2020-12-151-1/+1
| | | AUTHORS.rst had not been updated in more than 2 years, it was not a good reference.
* Remove __future__ import from our code (#5610)Alex Gaynor2020-12-093-6/+0
|
* Switch black to py36 as the minimum version (#5608)Alex Gaynor2020-12-081-1/+1
|
* Reopen master for 3.4 (#5605)Alex Gaynor2020-12-081-1/+1
|
* Prepare for 3.3 release (#5603)3.3Alex Gaynor2020-12-081-1/+1
|
* disallow p less than 512-bit on DH (#5592)Paul Kehrer2020-11-291-0/+4
| | | | | | | | | | | | | | | | * disallow p less than 512-bit on DH OpenSSL 3.0.0 enforces this so we'll go ahead and enforce it everywhere that's practical for us. (Note that we do not enforce on deserializing PKCS1/PKCS8 keys in < 3.0.0, but this PR adds a test so that in the 3.0.0 support branch we can test an error path) * missing test * black * _MIN_MODULUS_SIZE is now a thing * skip on fips
* Reopen master for 3.3 (#5509)Alex Gaynor2020-10-251-2/+2
| | | | | * Reopen master for 3.3 * its how you know its authentic alex gaynor code
* 3.2 release (#5508)3.2Paul Kehrer2020-10-251-1/+1
|
* add RSA 4096-bit self-signed CA for some upcoming tests (#5464)Paul Kehrer2020-09-142-0/+80
|
* Account for Bruce redoing his website or something (#5461)Alex Gaynor2020-09-134-4/+4
|
* bump version for 3.2 dev (#5431)Paul Kehrer2020-08-271-1/+1
|